Is there any article introducing anomaly detection algorithms and algorithm performance? From my shallow understanding, this algorithm is more like whether this log has appeared in normal logs. For example, in my normal logs, there is "start to process something", while in abnormal logs there is "failed to process something", and the current anomaly detection algorithm cannot recognize it.