Detecting system anomalies based on log data is important for ensuring the security and reliability of computer systems. Recently, deep learning models have been widely used for log anomaly detection. The core idea is to model the log sequences as natural language and adopt deep sequential models, such as LSTM or Transformer, to encode the normal patterns in log sequences via language modeling. However, there is a gap between language modeling and anomaly detection as the objective of training a sequential model via a language modeling loss is not directly related to anomaly detection. To fill up the gap, we propose LogGPT, a novel framework that employs GPT for log anomaly detection. LogGPT is first trained to predict the next log entry based on the preceding sequence. To further enhance the performance of LogGPT, we propose a novel reinforcement learning strategy to finetune the model specifically for the log anomaly detection task. The experimental results on three datasets show that LogGPT significantly outperforms existing state-of-the-art approaches.

基于日志数据检测系统异常对于确保计算机系统的安全性和可靠性至关重要。最近，深度学习模型广泛应用于日志异常检测中，LogGPT是一个使用GPT进行日志异常检测的新型框架，通过对先前序列进行预测进一步提高模型性能，并提出一种新颖的强化学习策略来微调模型以适用于日志异常检测任务，实验证明LogGPT显著优于现有的最先进方法。

LogGPT: 基于GPT的日志异常检测