Log parsers' performance on raw logs from Android devices
João Alfredo Bessa, Ricardo Miranda Filho, Girlana Souza, Raimundo Barreto, Rosiane de Freitas · Journal of Internet Services and Applications · 2025
Enhancing log file structure for improved analysis, commonly referred to as "Log Parsing'', holds significant importance in deciphering pertinent insights from software-generated records. This study undertakes a comprehensive comparison of ten parsing tools and models available within the Logpai collection, namely AEL, Brain, Drain, LFA, LogCluster, Logram, NuLog, SHISO, SLCT, and ULP focusing on raw logs sourced from Android Devices, extending a previous work. Our findings underscore a notable precision deficit in models lacking preprocessing steps, as existing tools encounter considerable challenges in managing untreated logs. Consequently, these tools exhibit suboptimal performance levels when analyzing information gleaned from raw Android Logs of the same origin as the reference logs. When analyzing other blocks, such as wifi networks, the difficulty of dealing with small variations in format was persistent.