Catch Me If You Can: Online Classification for Near Real-Time Anomaly Detection in Business Process Event Streams.

Near-real-time monitoring and classification of business process event streams is becoming more and more prominent. This also includes ensuring data quality for the application of downstream online process mining activities and therefore identify and classify incorrect process behavior of incoming event streams in an online setting, what is considered too little in existing approaches. In this paper, we present an online classification approach that supports monitoring and anomaly detection in event streams at the event level. Possible process drifts can be handled by an online learning workflow. By integrating two explanatory components, the results of the online classification are made transparent and comprehensible. Through a technical experiment, the performance of the classification approach is evaluated based on different data sets. Thereby, the classification model achieves an average F1 score of 0.877 with an average processing time of ∼15 ms per event. [ABSTRACT FROM AUTHOR]