LogDx-CI: Benchmarking Log Reduction Tools for LLM Root-Cause Diagnosis
This paper introduces LogDx-CI, a benchmark evaluating 11 log-reduction tools across 35 real CI failures, revealing that hybrid grep+tail routers offer the best cost-quality balance, that agent loops mitigate context quality disparities at the expense of higher costs, and that cross-family summarizer-debugger pairs outperform same-family combinations by avoiding self-call bias.
Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer
Imagine you are a detective trying to solve a crime, but instead of a crime scene, you are looking at a massive, chaotic stack of 200,000 pages of police reports. Your job is to find the one sentence that explains why the factory machine stopped working.
If you try to read all 200,000 pages at once, your brain (or in this case, an AI "detective") will get overwhelmed, confused, or just give up. This is the problem with CI logs (the digital records of software failures). They are huge, messy, and full of noise.
This paper, LogDx-CI, is a giant experiment to answer one simple question: "What is the best way to shrink this massive stack of papers down to a manageable size so the AI detective can actually solve the case?"
Here is the breakdown of their findings, using simple analogies:
1. The Problem: The "Firehose" of Information
The researchers gathered 35 real-life examples of software failures. Some logs were tiny (27 lines), but most were huge (averaging 5,000 lines, with some reaching 200,000).
- The Issue: Even the smartest AI detectives have a limit on how much they can read at once. If you hand them the whole "firehose" of logs, they drown. They need a filter.
- The Goal: Find a tool that acts like a smart sieve, letting the important clues through while blocking the noise, without throwing away the evidence needed to solve the crime.
2. The Contest: 11 Different "Filters"
The team tested 11 different methods to shrink the logs. Think of these as different ways to summarize a book:
- The "Tail" Method: Just read the last 200 pages. (Good if the answer is at the end, bad if the clue is in the middle).
- The "Grep" Method: Search for specific keywords like "Error" or "Failed" and keep those lines. (Good, but sometimes it grabs too much noise).
- The "RTK" Method: A specialized tool that tries to categorize errors.
- The "LLM Summary" Method: Using a super-smart AI to read the whole thing and write a summary.
- The "Hybrid" Method: A smart combination of the above.
3. The Big Winners: The "Hybrid" Strategy
The paper found that the best approach wasn't just one tool, but a smart combination (a "Hybrid").
- The Analogy: Imagine you are looking for a needle in a haystack.
- Method A (Grep): You use a magnet to pull out all the metal. It works, but you also pull out a lot of tin foil (noise).
- Method B (Tail): You only look at the top of the haystack. You might miss the needle if it's buried.
- The Winner (Hybrid): You use the magnet first. If the pile of metal is too big, you switch to a strategy that just grabs the last few handfuls.
- The Result: The top two "Hybrid" methods were 4.5 times cheaper (in terms of computer processing power) than the standard "Grep" method, while being just as good at helping the AI solve the problem. They found the "sweet spot" on the graph where you get the most quality for the least cost.
4. The "Agent" Twist: When the Detective Has Tools
The researchers also tested what happens if the AI detective isn't just a "one-shot" reader, but an agent that can ask for more help.
- The Finding: If the initial summary is bad, a smart agent can say, "Wait, I need to see page 4,000," and go fetch it.
- The Collapse: When the agent is allowed to ask for more info, the difference between a "bad filter" and a "good filter" almost disappears. The agent can fix a bad summary by asking follow-up questions.
- The Catch: Even though the agent can fix bad summaries, it takes more time and money (more tool calls) to do so. It's like hiring a detective who has to drive back and forth to the library to get missing pages. It works, but it's expensive.
5. The "Family Bias" Myth Busted
There was a worry that if you use an AI from Company A to summarize the logs, and then an AI from Company A to solve the case, they might "cheat" because they speak the same language or have similar training.
- The Test: They mixed and matched. They used an OpenAI summarizer with an Anthropic detective, and vice versa.
- The Result: The "Family Bias" didn't happen. In fact, mixing families often worked better. A summary made by one company's AI was actually better for a different company's AI to read. This proves that the quality of the summary depends on how well the information was extracted, not on who wrote it.
6. The "Confidently Wrong" Danger
One specific tool (called rtk-log) was found to be dangerous.
- The Analogy: It's like a guide who confidently points you in the wrong direction.
- The Stat: This tool led the AI to be confidently wrong about 13% of the time. The researchers strongly advise avoiding this tool because it tricks the AI into making up answers that sound good but are false.
Summary of Recommendations
Based on this "detective training camp," the authors suggest:
- For a quick, one-time check: Use the Hybrid Grep/Tail method. It's cheap, fast, and very accurate.
- For a smart, tool-using agent: Use a Cross-Family AI Summary (like using an OpenAI summarizer for an Anthropic detective). It helps the agent solve the problem faster with fewer questions.
- Avoid: The
rtk-logtool, which often leads to confident but wrong answers.
The Bottom Line: You don't need to read the whole 200,000-page novel to solve the mystery. You just need the right filter to show the detective the right 20 pages. Getting that filter right is cheap, but getting it wrong is expensive and misleading.
Drowning in papers in your field?
Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.