JACoW logo

Journals of Accelerator Conferences Website (JACoW)

'Journal of Accelerator Conferences Website' (JACoW) is a publisher in Geneva, Switzerland that publishes the proceedings of accelerator conferences held around the world by an international collaboration of editors.


https://doi.org/10.18429/JACoW-ICALEPCS2023-TH2AO01
Title Log Anomaly Detection on EuXFEL Nodes
Authors
  • A. Sulc, A. Eichler, T. Wilksen
    DESY, Hamburg, Germany
Abstract This article introduces a method to detect anomalies in the log data generated by control system nodes at the European XFEL accelerator. The primary aim of this proposed method is to offer operators a comprehensive understanding of the availability, status, and problems specific to each node. This information is vital for ensuring the smooth operation. The sequential nature of logs and the absence of a rich text corpus that is specific to our nodes pose a significant limitation for traditional and learning-based approaches for anomaly detection. To overcome this limitation, we propose a method that uses word embedding and models individual nodes as a sequence of these vectors that commonly co-occur, using a Hidden Markov Model (HMM). We score individual log entries by computing a probability ratio between the probability of the full log sequence including the new entry and the probability of just the previous log entries, without the new entry. This ratio indicates how probable the sequence becomes when the new entry is added. The proposed approach can detect anomalies by scoring and ranking log entries from EuXFEL nodes where entries that receive high scores are potential anomalies that do not fit the routine of the node. This method provides a warning system to alert operators about these irregular log events that may indicate issues.
Funding This work was supported by HamburgX grant LFF-HHX-03 to the Center for Data and Computing in Natural Sciences (CDCS) from the Hamburg Ministry of Science, Research, Equalities and Districts.
Paper download TH2AO01.PDF [0.517 MB / 8 pages]
Slides download TH2AO01_TALK.PDF [1.377 MB]
Cite download ※ BibTeX LaTeXText/WordRISEndNote
Conference ICALEPCS2023
Series International Conference on Accelerator and Large Experimental Physics Control Systems (19th)
Location Cape Town, South Africa
Date 09-13 October 2023
Publisher JACoW Publishing, Geneva, Switzerland
Editorial Board Volker RW Schaa (GSI, Darmstadt, Germany); Andy Götz (ESRF, Grenoble, France); Johan Venter (SARAO, Cape Town, South Africa); Karen White (SNS, Oak Ridge, TN, USA); Marie Robichon (ESRF, Grenoble, France); Vivienne Rowland (SARAO, Cape Town, South Africa)
Online ISBN 978-3-95450-238-7
Online ISSN 2226-0358
Received 30 September 2023
Accepted 08 December 2023
Issued/td> 13 December 2023
DOI doi:10.18429/JACoW-ICALEPCS2023-TH2AO01
Pages 1126-1133
Copyright
Creative Commons CC logoPublished by JACoW Publishing under the terms of the Creative Commons Attribution 4.0 International license. Any further distribution of this work must maintain attribution to the author(s), the published article's title, publisher, and DOI.