Time series anomaly detection (TSAD) plays a crucial role in various
industries by identifying atypical patterns that deviate from standard trends,
thereby maintaining system integrity and enabling prompt response measures.
Traditional TSAD models, which often rely on deep learning, require extensive
training data and operate as black boxes, lacking interpretability for detected
anomalies. To address these challenges, we propose LLMAD, a novel TSAD method
that employs Large Language Models (LLMs) to deliver accurate and interpretable
TSAD results. LLMAD innovatively applies LLMs for in-context anomaly detection
by retrieving both positive and negative similar time series segments,
significantly enhancing LLMs' effectiveness. Furthermore, LLMAD employs the
Anomaly Detection Chain-of-Thought (AnoCoT) approach to mimic expert logic for
its decision-making process. This method further enhances its performance and
enables LLMAD to provide explanations for their detections through versatile
perspectives, which are particularly important for user decision-making.
Experiments on three datasets indicate that our LLMAD achieves detection
performance comparable to state-of-the-art deep learning methods while offering
remarkable interpretability for detections. To the best of our knowledge, this
is the first work that directly employs LLMs for TSAD.

LLMAD 是一种新的时间序列异常检测方法，采用大语言模型（LLMs）提供准确而可解释的结果，通过在上下文中的检测来检索正面和负面的相似时间序列片段，并采用 Anomaly Detection Chain-of-Thought（AnoCoT）方法模仿专家逻辑进行决策过程，为用户决策提供解释。