FAME: Mixture-of-Experts Architecture Enables Message-Level Log Anomaly Detection

arXiv·medium signal

FAME introduces failure-aware mixture-of-experts for pinpointing the specific log message responsible for an anomaly, rather than flagging entire sessions or windows. Production systems generate millions of log lines daily, but current detectors force operators to inspect many routine lines per alert. The MoE architecture handles the key challenge that a single event template can correspond to both normal and anomalous messages across heterogeneous subsystems. Practical for SRE teams building log-based alerting pipelines.