Skip to content

LLM-Generated Feature Pools for Time Series Anomaly Detection

Sep 2026 · 0 citations · 24 references
Computer Science

TL;DR

A pool per domain is generated by prompting a multimodal LLM with in-context example windows from that domain by prompting a multimodal LLM with in-context example windows from that domain, and the generated pools match the hand-crafted one under matched selection, and the two cover different domains.

Abstract

We study how far a simple statistical pipeline can go on univariate time series anomaly detection under a strict selection protocol. The method extracts a small pool of statistics over sliding windows, scores each window with a transductive robust (MAD) model, and selects a feature subset per domain on a held-out tuning split. On TSB-AD-U it reaches $0.529$ per-series VUS-PR, above the best neural ($0.45$) and statistical ($0.44$) entries on the public leaderboard and within $0.06$ of the strongest pretrained foundation model, several of which use more supervision than ours. Ablations locate the cause: across three selection strategies and a hindsight oracle the score moves by $0.031$, and across the aggregation grid by $0.096$, while changing the candidate pool moves it by $0.226$. The candidate pool sets the ceiling; the search over it is second-order. We therefore generate a pool per domain by prompting a multimodal LLM with in-context example windows from that domain. The generated pools match the hand-crafted one under matched selection, and the two cover different domains: selecting over their union improves on the generated pool in all twelve generator-seed pairs and lifts the pipeline to $0.588$, matching the performance of the best entry on the leaderboard.

View source

Similar papers

#artificial intelligence Preprint Oct 2026

Generalist Representation, Specialist Detection: TS-Router for Time-Series Anomaly Detection

Time-series anomaly detection (TSAD) is difficult to generalize across datasets because heterogeneous temporal dynamics imply different notions of normality and favor different detection criteria. While time-series foundation models provide transferable representations, coupling them with a fixed anomaly-scoring mechan...

Tian Lan, Yi-Fei Gao, Yi-Meng Lu et al. · 0 citations
#artificial intelligence Preprint Oct 2026

Have an LLM Write Your Anomaly Detector: Autonomous Discovery of Compact, Interpretable Detectors for Time Series

Time-series anomaly detection trades off predictive accuracy, computational efficiency, and interpretability. We use a large language model not as the detector but as the author of one: an autonomous research loop in which the model repeatedly edits a single short NumPy program under a leakage-free objective, keeping t...

D. Berghaus · 0 citations
Conference Aug 2026

Research on Anomaly Detection Model Based on Time Series

Robust anomaly detection in time series remains challenging because sparse abnormal observations, noise contamination, nonlinear dynamics, and long-range temporal dependencies can obscure deviation patterns. This paper proposes the SALK anomaly detection model, which integrates an attention-enhanced long short-term mem...

Zi-Han Tian, Bo-Zeng Wang, De-Yu Zhao · 0 citations
#machine learning Preprint Oct 2026

JevForest: Path Voting for Budgeted Feature Acquisition

Choosing which information to observe is central to prediction under limited observation budgets. We study JevForest, a feature acquisition policy that aggregates path-dependent proposals from bootstrapped trees, weights them by global training information gain, and predicts from the acquired values with a shared maske...

Yu-Hua Yan · 0 citations
#machine learning Preprint Sep 2026

When, Not How Much: Evaluating Time-Series Foundation Models on Sparse Events

Pretrained time-series foundation models (TSFMs) are evaluated as forecasters of future values, yet for sparse series many decisions depend only on which future periods contain activity. Standard benchmarks do not assess this. On five sparse datasets, we rank positions within forecast windows that contain both events a...

Daniel Schoess, F. von Wangenheim · 0 citations
Open access Sep 2026

Efficient Log Anomaly Detection via Dual-Domain State Space Modeling

Log anomaly detection requires models that capture long-range event dependencies without the quadratic sequence-length cost of self-attention. We present LogMamba, a reconstruction-based model that combines a bidirectional selective state-space branch with a Multi-Scale Frequency Learner (MSFL). The sequence branch mod...

Xian-Lang Hu, Guang-Sheng Feng, Rui-Ni Wang et al. · 0 citations

Related blog posts

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.