Aug 2026· Journal of King Saud University: Computer and Information Sciences· Vol 38· 0 citations· 35 references
TL;DR
Topo-MFP is proposed, a topology-aware multimodal propagation learning framework for service-level fault detection and root cause localization that combines heterogeneous observability data with service dependency information in two stages and provides diagnostic information beyond random ranking, local anomaly scores, and raw invocation topology.
Abstract
Fault detection and root cause localization in microservice systems are challenging because runtime failures may propagate across dependent services and appear heterogeneously in metrics, logs, and traces. Existing approaches often rely on single-modality observations, local anomaly scores, or static service topology, which may be insufficient to distinguish root-cause services from downstream affected services. To address this problem, this paper proposes Topo-MFP, a topology-aware multimodal propagation learning framework for service-level fault detection and root cause localization. Topo-MFP integrates heterogeneous observability data with service dependency information in two stages. For fault detection, it constructs a semantic-transition log template graph by combining log template semantics with transition statistics, and learns topology-aware service representations from dynamic service dependency graphs through spatio-temporal graph attention. For root cause localization, it learns diagnosis-oriented multimodal propagation graphs from metrics, logs, and traces. The modality-specific propagation graphs are fused using cross-modal consistency and a topology-aware soft sparsity prior, where different penalties are assigned to topology-adjacent and topology-distant service pairs. Root-cause candidates are then ranked by symptom-to-source reverse random walk with restart over the learned propagation graph. Experiments are conducted on AIOps2022 and a TrainTicket-based TT dataset. Over five random seeds, Topo-MFP achieves mean F1-scores of 0.949 and 0.951 for fault detection, and mean Hit@1 scores of 0.872 and 0.901 for root cause localization on AIOps2022 and TT, respectively. Comparisons with Random, Local-Score, and Topology-RWR baselines show that the learned multimodal propagation graph provides diagnostic information beyond random ranking, local anomaly scores, and raw invocation topology. Ablation and sensitivity analyses further indicate the contributions of semantic log modeling, cross-modal consistency, and topology-aware regularization. The learned propagation graph is used as a diagnosis-oriented ranking representation rather than as a verified causal graph.
Multivariate key performance indicator (KPI) streams collected in network operations contain rich evidence for anomaly diagnosis, but practical deployment remains difficult because fault labels are scarce, KPI dependencies are strong across time and metrics, and fault effects propagate through network topology. This pa...
De-Biao Luo, Wei-Jie Wang, Xin-Yue Liu et al.· Scientific Reports· 0 citations
Modern large-scale cloud systems continuously generate massive and multimodal observability data, such as time-series metrics, log records, and system dependency graphs, which reflect the health state of the system. To ensure reliable cloud system operation, anomaly detection models identify abnormal states by analyzin...
Zhe Li, Teng-Xue Zhang, Yang Shu et al.· 0 citations
Root cause analysis (RCA) has become urgent in AIOps because modern incidents rarely stay inside one component: failures propagate across services and operators must identify the initiating service, not only the loudest symptom. Prior log analytics studies have mainly emphasized parsing and anomaly detection, while rec...
Qi Xin· JEECS (Journal of Electrical...· 0 citations
Modern web applications, particularly microservice-based, face numerous runtime anomalies from unexpected inputs, dynamic routing, permission conflicts, and misconfigured services. Existing detection systems also lack real-time adaptability and automated fixes, requiring manual intervention and reducing system resilien...
Partha Biswas, Amit Dixit, Tanupriya Choudhury· International Journal of Dru...· 0 citations
System logs provide valuable information for monitoring system states, identifying failures, and detecting anomalous behaviour in large-scale distributed computing systems. However, their unstructured text, complex semantic dependencies, temporal variation, and severe class imbalance limit conventional methods based on...
Most industrial anomaly detection and localization methods rely on correlations rather than causality, which limits both the accuracy of anomaly detection and the reliability of root cause localization. Moreover, data-driven causal discovery of industrial processes presents substantial challenges. To this end, we propo...
Xiang-Rui Zhang, Chun-Yu Song, Wei Dai et al.· IEEE Transactions on Cyberne...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.