English

Practitioners' Expectations on Log Anomaly Detection

Software Engineering 2024-12-03 v1

Abstract

Log anomaly detection has become a common practice for software engineers to analyze software system behavior. Despite significant research efforts in log anomaly detection over the past decade, it remains unclear what are practitioners' expectations on log anomaly detection and whether current research meets their needs. To fill this gap, we conduct an empirical study, surveying 312 practitioners from 36 countries about their expectations on log anomaly detection. In particular, we investigate various factors influencing practitioners' willingness to adopt log anomaly detection tools. We then perform a literature review on log anomaly detection, focusing on publications in premier venues from 2014 to 2024, to compare practitioners' needs with the current state of research. Based on this comparison, we highlight the directions for researchers to focus on to develop log anomaly detection techniques that better meet practitioners' expectations.

Keywords

Cite

@article{arxiv.2412.01066,
  title  = {Practitioners' Expectations on Log Anomaly Detection},
  author = {Xiaoxue Ma and Yishu Li and Jacky Keung and Xiao Yu and Huiqi Zou and Zhen Yang and Federica Sarro and Earl T. Barr},
  journal= {arXiv preprint arXiv:2412.01066},
  year   = {2024}
}
R2 v1 2026-06-28T20:19:00.863Z