LogNLQ: Natural-Language Log Querying with Parser-Induced and Semantically Grounded Schemas

• URL: http://arxiv.org/abs/2607.03884v1
• Date: Sat, 04 Jul 2026 14:02:06 GMT
• Title: LogNLQ: Natural-Language Log Querying with Parser-Induced and Semantically Grounded Schemas
• Abstract summary: We present LogNLQ, a framework that formulates natural-language querying over log-induced and semantically grounded schemas.<n>LogNLQ parses raw logs into template-ed relational tables, then applies dual-granularity semantic grounding to annotate both templates and parameter columns.<n>At query time, relevant schema candidates are retrieved via semantic search, and a large language model generates executablesql.
• Score: 40.92526942288794
• License: http://creativecommons.org/licenses/by-nc-nd/4.0/
• Abstract: Logs are essential for system monitoring and failure diagnoses in modern software systems, yet querying them through natural language remains an open challenge. Existing approaches either treat logs as plain text, generate queries for schema-light backends, or assume predefined relational schemas, but none addresses a fundamental obstacle: raw logs carry no executable schema over which structured queries can be defined and run. To address these limitations, we present LogNLQ, a framework that formulates natural-language log querying as executable SQL generation over parser-induced and semantically grounded schemas. LogNLQ parses raw logs into template-partitioned relational tables, then applies dual-granularity semantic grounding to annotate both templates and parameter columns with interpretable names and descriptions. At query time, relevant schema candidates are retrieved via semantic search, and a large language model (LLM) generates executable SQL constrained to the retrieved context. To support rigorous evaluation, we introduce LogNLQ-Bench, an execution-verified benchmark of 8,895 queries over four real-world log datasets. Experimental results demonstrate that LogNLQ consistently outperforms all representative baselines by wide margins, with especially pronounced gains on analytically complex scenario queries.

Related papers

• Parser-Free Querying of Security Logs [2.9970870516340504]
  Security analysts routinely query system logs to detect threats and investigate incidents.<n>Each log source uses its own semi-structured format: logs are cheap to produce, but expensive to use.<n>We present Sieve, a system that generates executable query code from natural-language security questions.
  arXiv  Detail & Related papers  (2026-05-21T05:58:04Z)
• OrLog: Resolving Complex Queries with LLMs and Probabilistic Reasoning [51.58235452818926]
  We introduce OrLog, a neuro-symbolic retrieval framework that decouples predicate-level plausibility estimation from logical reasoning.<n>A large language model (LLM) provides plausibility scores for atomic predicates in one decoding-free forward pass, from which a probabilistic reasoning engine derives the posterior probability of query satisfaction.
  arXiv  Detail & Related papers  (2026-01-30T15:31:58Z)
• KBQA-R1: Reinforcing Large Language Models for Knowledge Base Question Answering [64.62317305868264]
  We present textbfKBQA-R1, a framework that shifts the paradigm from text imitation to interaction optimization via Reinforcement Learning.<n>Treating KBQA as a multi-turn decision process, our model learns to navigate the knowledge base using a list of actions.<n>Experiments on WebQSP, GrailQA, and GraphQuestions demonstrate that KBQA-R1 achieves state-of-the-art performance.
  arXiv  Detail & Related papers  (2025-12-10T17:45:42Z)
• Last Layer Logits to Logic: Empowering LLMs with Logic-Consistent Structured Knowledge Reasoning [55.55968342644846]
  Large Language Models (LLMs) achieve excellent performance in natural language reasoning tasks through pre-training on vast unstructured text.<n>We propose the textitLogits-to-Logic framework, which incorporates logits strengthening and logits filtering as core modules to correct logical defects in LLM outputs.
  arXiv  Detail & Related papers  (2025-11-11T07:08:27Z)
• Semantic-Aware Parsing for Security Logs [12.498937359368309]
  Existing AI-baseds focus on learning syntactic log templates but lack the semantic interpretation needed for querying.<n>Matryoshka is the first end-to-end system leveraging LLMs to automatically generate semantically-aware structured logs.<n>Matryoshka significantly reduces manual effort by automatically extracting and organizing valuable fields.
  arXiv  Detail & Related papers  (2025-06-20T23:24:09Z)
• Chatting with Logs: An exploratory study on Finetuning LLMs for LogQL [0.781670921955053]
  Logging is a critical function in modern distributed applications, but the lack of standardization in log query languages and formats creates significant challenges.<n>We propose a novel natural language interface to address these inconsistencies and aide log query generation.
  arXiv  Detail & Related papers  (2024-12-04T14:06:24Z)
• HELP: Hierarchical Embeddings-based Log Parsing [0.25112747242081457]
  Logs are a first-hand source of information for software maintenance and failure diagnosis. Log parsing is a prerequisite for automated log analysis tasks such as anomaly detection, troubleshooting, and root cause analysis. Existing online parsing algorithms are susceptible to log drift, where slight log changes create false positives that drown out real anomalies.
  arXiv  Detail & Related papers  (2024-08-15T17:54:31Z)
• Improving Text-to-SQL Semantic Parsing with Fine-grained Query Understanding [84.04706075621013]
  We present a general-purpose, modular neural semantic parsing framework based on token-level fine-grained query understanding. Our framework consists of three modules: named entity recognizer (NER), neural entity linker (NEL) and neural entity linker (NSP)
  arXiv  Detail & Related papers  (2022-09-28T21:00:30Z)
• Self-Supervised Log Parsing [59.04636530383049]
  Large-scale software systems generate massive volumes of semi-structured log records. Existing approaches rely on log-specifics or manual rule extraction. We propose NuLog that utilizes a self-supervised learning model and formulates the parsing task as masked language modeling.
  arXiv  Detail & Related papers  (2020-03-17T19:25:25Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.