English

LogBERT: Log Anomaly Detection via BERT

Cryptography and Security 2021-03-09 v1

Abstract

Detecting anomalous events in online computer systems is crucial to protect the systems from malicious attacks or malfunctions. System logs, which record detailed information of computational events, are widely used for system status analysis. In this paper, we propose LogBERT, a self-supervised framework for log anomaly detection based on Bidirectional Encoder Representations from Transformers (BERT). LogBERT learns the patterns of normal log sequences by two novel self-supervised training tasks and is able to detect anomalies where the underlying patterns deviate from normal log sequences. The experimental results on three log datasets show that LogBERT outperforms state-of-the-art approaches for anomaly detection.

Keywords

Cite

@article{arxiv.2103.04475,
  title  = {LogBERT: Log Anomaly Detection via BERT},
  author = {Haixuan Guo and Shuhan Yuan and Xintao Wu},
  journal= {arXiv preprint arXiv:2103.04475},
  year   = {2021}
}
R2 v1 2026-06-23T23:51:32.294Z