Skip to content
Open access

Topo-MFP: Topology-aware multimodal propagation learning for fault detection and root cause localization in microservice systems

Aug 2026 · Journal of King Saud University: Computer and Information Sciences · Vol 38 · 0 citations · 35 references

TL;DR

Topo-MFP is proposed, a topology-aware multimodal propagation learning framework for service-level fault detection and root cause localization that combines heterogeneous observability data with service dependency information in two stages and provides diagnostic information beyond random ranking, local anomaly scores, and raw invocation topology.

Abstract

Fault detection and root cause localization in microservice systems are challenging because runtime failures may propagate across dependent services and appear heterogeneously in metrics, logs, and traces. Existing approaches often rely on single-modality observations, local anomaly scores, or static service topology, which may be insufficient to distinguish root-cause services from downstream affected services. To address this problem, this paper proposes Topo-MFP, a topology-aware multimodal propagation learning framework for service-level fault detection and root cause localization. Topo-MFP integrates heterogeneous observability data with service dependency information in two stages. For fault detection, it constructs a semantic-transition log template graph by combining log template semantics with transition statistics, and learns topology-aware service representations from dynamic service dependency graphs through spatio-temporal graph attention. For root cause localization, it learns diagnosis-oriented multimodal propagation graphs from metrics, logs, and traces. The modality-specific propagation graphs are fused using cross-modal consistency and a topology-aware soft sparsity prior, where different penalties are assigned to topology-adjacent and topology-distant service pairs. Root-cause candidates are then ranked by symptom-to-source reverse random walk with restart over the learned propagation graph. Experiments are conducted on AIOps2022 and a TrainTicket-based TT dataset. Over five random seeds, Topo-MFP achieves mean F1-scores of 0.949 and 0.951 for fault detection, and mean Hit@1 scores of 0.872 and 0.901 for root cause localization on AIOps2022 and TT, respectively. Comparisons with Random, Local-Score, and Topology-RWR baselines show that the learned multimodal propagation graph provides diagnostic information beyond random ranking, local anomaly scores, and raw invocation topology. Ablation and sensitivity analyses further indicate the contributions of semantic log modeling, cross-modal consistency, and topology-aware regularization. The learned propagation graph is used as a diagnosis-oriented ranking representation rather than as a verified causal graph.

Read PDF

Similar papers

Open access Sep 2026

Topology-aware self-supervised multivariate KPI anomaly detection and root cause node localization for network operations

Multivariate key performance indicator (KPI) streams collected in network operations contain rich evidence for anomaly diagnosis, but practical deployment remains difficult because fault labels are scarce, KPI dependencies are strong across time and metrics, and fault effects propagate through network topology. This pa...

De-Biao Luo, Wei-Jie Wang, Xin-Yue Liu et al. · 0 citations
Preprint Oct 2026

BEACON: Bridging Multimodal Semantics and Asynchronous Propagation for Cloud System Anomaly Detection

Modern large-scale cloud systems continuously generate massive and multimodal observability data, such as time-series metrics, log records, and system dependency graphs, which reflect the health state of the system. To ensure reliable cloud system operation, anomaly detection models identify abnormal states by analyzin...

Zhe Li, Teng-Xue Zhang, Yang Shu et al. · 0 citations
Open access Sep 2026

Correlation-Driven Root Cause Analysis from Multi-Service Logs via Template-Aware Graph Inference: An Empirical Study on LogHub Hadoop and RCAEval Sock Shop

Root cause analysis (RCA) has become urgent in AIOps because modern incidents rarely stay inside one component: failures propagate across services and operators must identify the initiating service, not only the loudest symptom. Prior log analytics studies have mainly emphasized parsing and anomaly detection, while rec...

Qi Xin · 0 citations
Open access Oct 2026

A Runtime Anomaly Detection and Fixing Framework Using LLMPowered Separate guided Graph Attention Recurrent Compact Conviformer for Web Applications

Modern web applications, particularly microservice-based, face numerous runtime anomalies from unexpected inputs, dynamic routing, permission conflicts, and misconfigured services. Existing detection systems also lack real-time adaptability and automated fixes, requiring manual intervention and reducing system resilien...

Partha Biswas, Amit Dixit, Tanupriya Choudhury · 0 citations
Open access Oct 2026

A Mathematical Modeling Framework for Semantic–Temporal Graph Learning in Log Anomaly Detection

System logs provide valuable information for monitoring system states, identifying failures, and detecting anomalous behaviour in large-scale distributed computing systems. However, their unstructured text, complex semantic dependencies, temporal variation, and severe class imbalance limit conventional methods based on...

Shuo Gao, Xiao-Yang Wang · 0 citations
Oct 2026

Knowledge-Informed Causal Graph Deviation Network for Industrial Anomaly Detection and Root Cause Localization.

Most industrial anomaly detection and localization methods rely on correlations rather than causality, which limits both the accuracy of anomaly detection and the reliability of root cause localization. Moreover, data-driven causal discovery of industrial processes presents substantial challenges. To this end, we propo...

Xiang-Rui Zhang, Chun-Yu Song, Wei Dai et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.