Cordon

PyPI version License

Semantic anomaly detection for system log files

Cordon uses transformer embeddings and k-NN density scoring to identify semantically unusual patterns in large log files, reducing massive logs to the most anomalous sections for analysis.

Key principle: Repetitive patterns (even errors) are considered "normal background." Cordon surfaces unusual, rare, or clustered events that stand out semantically from the bulk of the logs.

via https://korben.info/cordon-detection-anomalies-logs-transformers.html

Deep dive into the Elixir Logger module