-
Notifications
You must be signed in to change notification settings - Fork 1
/
normal_learning.py
243 lines (207 loc) · 13.2 KB
/
normal_learning.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
import matplotlib
from loganaliser.binary import BinaryClassification
#matplotlib.use('Agg')
from settings import settings
from wordembeddings.transform_glove import merge_templates
import logparser.Drain.Drain_demo as drain
import wordembeddings.transform_bert as transform_bert
from loganaliser.regression import Regression
from loganaliser.multiclass import Multiclass
from wordembeddings.bert_finetuning import finetune
from shared_functions import calculate_precision_and_plot, get_cosine_distance, inject_anomalies, get_labels_from_corpus, \
pre_process_log_events, get_top_k_embedding_label_mapping
import os
from wordembeddings.visualisation import write_to_tsv_files_bert_sentences
from shared_functions import get_embeddings
def experiment(epochs=10,
mode="regression",
anomaly_type='random_lines',
anomaly_amount=1,
clip=1.0,
attention=False,
prediction_only=False,
option='Normal', seq_len=7, n_layers=1, n_hidden_units=128, batch_size=64, finetuning=False,
embeddings_model='bert', experiment='x', label_encoder=None, finetune_epochs=4):
cwd = os.getcwd() + "/"
print("############\n STARTING\n Epochs:{}, Mode:{}, Attention:{}, Anomaly Type:{}"
.format(epochs, mode, attention, anomaly_type))
no_anomaly = True if anomaly_type == "no_anomaly" else False
if finetuning:
results_dir = settings[option]["results_dir"] + "_finetune/"
else:
results_dir = settings[option]["results_dir"] + "/"
results_dir_experiment = "{}_{}_epochs_{}_seq_len_{}_anomaly_type_{}_{}_hidden_{}_layers_{}_clip_{}_experiment_{}/".format(
results_dir + mode, embeddings_model, epochs, seq_len, anomaly_type, anomaly_amount, n_hidden_units, n_layers, clip, experiment)
train_ds = settings[option]["raw_normal"] # path of normal file for training
test_ds = settings[option]["raw_anomaly"] # path of file in which anomalies will be injected
raw_dir = settings[option]["raw_dir"] # dir in which training and anomaly files are in, for drain
parsed_dir = settings[option]["parsed_dir"] # dir where parsed training and pre-anomaly file will be
embeddings_dir = settings[option]["embeddings_dir"] # dir for embeddings vectors
logtype = settings[option]["logtype"] # logtype for drain parser
train_instance_information = settings[option]['instance_information_file_normal']
# for binary
train_instance_information_injected = settings[option]['instance_information_file_normal'] + \
train_ds + "_" + anomaly_type + "_" + str(anomaly_amount)
test_instance_information = settings[option]['instance_information_file_anomalies_pre_inject']
test_instance_information_injected = settings[option]['instance_information_file_anomalies_injected'] + \
test_ds + "_" + anomaly_type + "_" + str(anomaly_amount)
anomalies_injected_dir = parsed_dir + "anomalies_injected/"
anomaly_indeces_dir = parsed_dir + "anomalies_injected/anomaly_indeces/"
# corpus files produced by Drain
corpus_train = cwd + parsed_dir + train_ds + '_corpus'
corpus_test = cwd + parsed_dir + test_ds + '_corpus'
# template files produced by Drain
templates_normal = cwd + parsed_dir + train_ds + '_templates'
templates_pre_anomaly = cwd + parsed_dir + test_ds + '_templates'
# bert vectors as pickle files
embeddings_train = cwd + embeddings_dir + train_ds + '.pickle'
embeddings_test = cwd + embeddings_dir + test_ds + '.pickle'
if finetuning:
finetuning_model_dir = "wordembeddings/finetuning-models/" + train_ds
lstm_model_save_path = cwd + 'loganaliser/saved_models/' + train_ds + '_with_finetune' + '_lstm.pth'
else:
finetuning_model_dir = "bert-base-uncased"
lstm_model_save_path = cwd + 'loganaliser/saved_models/' + train_ds + "_" + experiment + '_lstm.pth'
# take corpus parsed by drain, inject anomalies in this file
corpus_test_injected = cwd + anomalies_injected_dir + test_ds + "_" + anomaly_type
corpus_train_injected = cwd + anomalies_injected_dir + train_ds + "_" + anomaly_type # for binary
train_anomaly_indeces = cwd + results_dir_experiment + "train_anomaly_labels.txt" # for binary
test_anomaly_indeces = cwd + results_dir_experiment + "test_anomaly_labels.txt"
os.makedirs(results_dir, exist_ok=True)
os.makedirs(results_dir_experiment, exist_ok=True)
os.makedirs(parsed_dir, exist_ok=True)
os.makedirs(embeddings_dir, exist_ok=True)
os.makedirs(anomalies_injected_dir, exist_ok=True)
os.makedirs(anomaly_indeces_dir, exist_ok=True)
### DRAIN PARSING
if not os.path.exists(corpus_train) or not os.path.exists(corpus_test):
drain.execute(directory=raw_dir, file=train_ds, output=parsed_dir, logtype=logtype)
drain.execute(directory=raw_dir, file=test_ds, output=parsed_dir, logtype=logtype)
pre_process_log_events(corpus_test, corpus_train, templates_normal, templates_pre_anomaly)
### INJECT ANOMALIES in test ds
test_ds_anomaly_lines, test_ds_liens_before_injection, train_ds_lines_after_injection = \
inject_anomalies(anomaly_type=anomaly_type,
corpus_input=corpus_test,
corpus_output=corpus_test_injected,
anomaly_indices_output_path=test_anomaly_indeces,
instance_information_in=test_instance_information,
instance_information_out=test_instance_information_injected,
anomaly_amount=anomaly_amount,
results_dir=results_dir_experiment)
### if in binary mode, inject anomalies also in train ds
if mode == "binary":
train_ds_anomaly_lines, train_ds_lines_before_injection, train_ds_lines_after_injection = \
inject_anomalies(
anomaly_type=anomaly_type,
corpus_input=corpus_train,
corpus_output=corpus_train_injected,
anomaly_indices_output_path=train_anomaly_indeces,
instance_information_in=train_instance_information,
instance_information_out=train_instance_information_injected,
anomaly_amount=anomaly_amount,
results_dir=results_dir_experiment)
# produce templates out of the corpuses that we have from the anomaly file
templates_train = list(set(open(corpus_train, 'r').readlines()))
# merge_templates(templates_normal_1, templates_normal_2, merged_template_path=parsed_dir_1 + "_merged_templates_normal")
templates_test_anomalies_injected = list(set(open(corpus_test_injected, 'r').readlines()))
merged_templates = merge_templates(templates_train, templates_test_anomalies_injected, merged_template_path=None)
merged_templates = list(merged_templates)
if finetuning:
if not os.path.exists(finetuning_model_dir):
finetune(templates=templates_train, output_dir=finetuning_model_dir, epochs=finetune_epochs)
sentence_to_embeddings_mapping = get_embeddings(embeddings_model, merged_templates)
write_to_tsv_files_bert_sentences(word_embeddings=sentence_to_embeddings_mapping,
tsv_file_vectors=results_dir_experiment + "visualisation/vectors.tsv",
tsv_file_sentences=results_dir_experiment + "visualisation/sentences.tsv")
embeddings_dim = list(sentence_to_embeddings_mapping.values())[0].size()[0]
if anomaly_type in ["insert_words", "remove_words", "replace_words"]:
get_cosine_distance(test_ds_liens_before_injection, train_ds_lines_after_injection, results_dir_experiment, sentence_to_embeddings_mapping)
# transform output of bert into numpy word embedding vectors
transform_bert.transform(sentence_embeddings=sentence_to_embeddings_mapping, logfile=corpus_train, outputfile=embeddings_train)
transform_bert.transform(sentence_embeddings=sentence_to_embeddings_mapping, logfile=corpus_test_injected, outputfile=embeddings_test)
if mode == "multiclass":
target_normal_labels, n_classes, normal_label_embeddings_map, _ = get_labels_from_corpus(normal_corpus=open(corpus_train, 'r').readlines(),
encoder_path=label_encoder,
templates=templates_train,
embeddings=sentence_to_embeddings_mapping)
list(set())
top_k_label_mapping = get_top_k_embedding_label_mapping(
set_embeddings_of_log_containing_anomalies=sentence_to_embeddings_mapping,
normal_label_embedding_mapping=normal_label_embeddings_map)
lstm = Multiclass(n_features=n_classes,
n_input=embeddings_dim,
target_labels=target_normal_labels,
train_vectors=embeddings_train,
train_instance_information_file=train_instance_information,
test_vectors=embeddings_test,
test_instance_information_file=test_instance_information_injected,
savemodelpath=lstm_model_save_path,
seq_length=seq_len,
num_epochs=epochs,
no_anomaly=no_anomaly,
results_dir=cwd + results_dir_experiment,
embeddings_model='bert',
n_layers=n_layers,
n_hidden_units=n_hidden_units,
batch_size=batch_size,
clip=clip,
top_k_label_mapping=top_k_label_mapping,
normal_label_embeddings_map=normal_label_embeddings_map,
lines_that_have_anomalies=test_ds_anomaly_lines,
corpus_of_log_containing_anomalies=corpus_test_injected,
transfer_learning=False,
attention=attention,
prediction_only=prediction_only,
mode=mode,
sentence_to_embeddings_mapping=sentence_to_embeddings_mapping)
elif mode == "regression":
lstm = Regression(train_vectors=embeddings_train,
train_instance_information_file=train_instance_information,
test_vectors=embeddings_test,
test_instance_information_file=test_instance_information_injected,
savemodelpath=lstm_model_save_path,
seq_length=seq_len,
num_epochs=epochs,
n_hidden_units=n_hidden_units,
n_layers=n_layers,
embeddings_model='bert',
no_anomaly=no_anomaly,
clip=clip,
results_dir=cwd + results_dir_experiment,
batch_size=batch_size,
lines_that_have_anomalies=test_ds_anomaly_lines,
n_input=embeddings_dim,
n_features=embeddings_dim,
transfer_learning=False,
attention=attention,
prediction_only=prediction_only,
mode=mode)
elif mode == "binary":
lstm = BinaryClassification(num_epochs=epochs,
n_layers=n_layers,
n_hidden_units=n_hidden_units,
seq_length=seq_len,
batch_size=batch_size,
clip=clip,
train_vectors=embeddings_train,
train_instance_information_file=train_instance_information,
train_anomaly_lines=train_ds_anomaly_lines,
test_vectors=embeddings_test,
test_instance_information_file=test_instance_information_injected,
test_anomaly_lines=test_ds_anomaly_lines,
no_anomaly=no_anomaly,
n_input=embeddings_dim,
results_dir=cwd + results_dir_experiment,
embeddings_model='bert',
savemodelpath=lstm_model_save_path,
transfer_learning=False,
prediction_only=prediction_only)
if not prediction_only:
lstm.start_training()
f1, precision = lstm.final_prediction()
calculate_precision_and_plot(results_dir_experiment, cwd, embeddings_model, epochs, seq_len, anomaly_type,
anomaly_amount, n_hidden_units, n_layers, clip, experiment, mode)
print("done.")
return f1, precision
if __name__ == '__main__':
experiment()