Home > Research > Publications & Outputs > A Survey of Log-Correlation Tools for Failure D...

Links

Text available via DOI:

View graph of relations

A Survey of Log-Correlation Tools for Failure Diagnosis and Prediction in Cluster Systems

Research output: Contribution to Journal/MagazineJournal articlepeer-review

Published
Close
<mark>Journal publication date</mark>29/12/2022
<mark>Journal</mark>IEEE Access
Volume10
Number of pages17
Pages (from-to)133487-133503
Publication StatusPublished
Early online date21/12/22
<mark>Original language</mark>English

Abstract

System logs are the rst source of information available to system designers to analyze and troubleshoot their cluster systems. For example, High-Performance Computing (HPC) systems generate a
large volume of heterogeneous data from multiple sub-systems, so the idea of using a single source of data to achieve a given goal, such as identication of failures, is losing its validity. System log-analysis tools assist system designers gain understanding into a large volume of system logs. They enable system designers to
perform various analyses (e.g., diagnosing node failures or predicting node failures). Current system log-analysis tools vary signicantly in their function and design.We conduct a systematic review of literature on system log-analysis tools and select 46 representative articles out of 3,758 initial articles. To the best of our knowledge, there is no work that studied the characteristics of log-correlation tools (LogCTs) with respect to four quality attributes including (a) spurious correlations, (b) correlation threshold settings, (c) outliers in the data and (d) missing data. In this paper, we (a) propose a quality model to evaluate LogCTs and
(b) use this quality model to evaluate and recommend current LogCTs. Through our review, we (a) identify papers on LogCTs, (b) build a quality model consisting of the four quality attributes and (c) discuss several open challenges for future research. Our study highlights the advantages and limitations of existing LogCTs and identies research opportunities that could facilitate better failure handling in large cluster systems.