Abstract:As Internet applications continue to scale up, microservice architecture has become increasingly popular due to its flexibility and logical structure. Anomaly detection in traces that record inter-microservice invocations is essential for diagnosing system failures. Deep learning-based approaches allow for accurate modeling of structural features (i.e., call paths) and latency features (i.e., call response time), which can determine the anomaly of a particular trace sample. However, the point-wise manner employed by these methods results in substantial system detection overhead and impracticality, given the massive volume of traces (billion-level). Furthermore, the point-wise approach lacks high-level information, as identical sub-structures across multiple traces may be encoded differently. In this paper, we introduce the first Group-wise Trace anomaly detection algorithm, named GTrace. This method categorizes the traces into distinct groups based on their shared sub-structure, such as the entire tree or sub-tree structure. A group-wise Variational AutoEncoder (VAE) is then employed to obtain structural representations. Moreover, the innovative "predicting latency with structure" learning paradigm facilitates the association between the grouped structure and the latency distribution within each group. With the group-wise design, representation caching, and batched inference strategies can be implemented, which significantly reduces the burden of detection on the system. Our comprehensive evaluation reveals that GTrace outperforms state-of-the-art methods in both performances (2.64% to 195.45% improvement in AUC metrics and 2.31% to 40.92% improvement in best F-Score) and efficiency (21.9x to 28.2x speedup). We have deployed and assessed the proposed algorithm on eBay's microservices cluster, and our code is available at https://github.com/NetManAIOps/GTrace.git.

BertHTLG: Graph-Based Microservice Anomaly Detection Through Sentence-Bert Enhancement.

Unsupervised Detection of Microservice Trace Anomalies Through Service-Level Deep Bayesian Networks

DeepTraLog: Trace-Log Combined Microservice Anomaly Detection through Graph-based Deep Learning

Twin Graph-based Anomaly Detection via Attentive Multi-Modal Learning for Microservice System

ServiceAnomaly: An anomaly detection approach in microservices using distributed traces and profiling metrics

LogST: Log Semi-supervised Anomaly Detection Based on Sentence-BERT

LogBERT: Log Anomaly Detection via BERT

An Intelligent Anomaly Detection Scheme for Micro-Services Architectures with Temporal and Spatial Data Analysis.

HEDGE: Heterogeneous Semantic Dynamic Graph Framework for Log Anomaly Detection in Digital Service Network

Efficient and Robust Trace Anomaly Detection for Large-Scale Microservice Systems

Unsupervised Anomaly Detection on Microservice Traces through Graph VAE

TraceGra: A Trace-Based Anomaly Detection for Microservice Using Graph Deep Learning

Graph neural network based robust anomaly detection at service level in SDN driven microservice system

Leveraging Large Language Models and BERT for Log Parsing and Anomaly Detection

BERT-Log: Anomaly Detection for System Logs Based on Pre-trained Language Model

Research on Log Anomaly Detection Based on Sentence-BERT

An Approach for Anomaly Diagnosis Based on Hybrid Graph Model with Logs for Distributed Services

From Point-wise to Group-wise: A Fast and Accurate Microservice Trace Anomaly Detection Approach

LAnoBERT: System Log Anomaly Detection based on BERT Masked Language Model

Log Anomaly Detection method based on BERT model optimization

SemLog: A Semantics-based Approach for Anomaly Detection in Big Data System Logs