AnomaMind: Coarse-to-Fine Agentic Diagnosis via Hybrid Inference for Time Series Anomaly Detection

원문 초록

Time series anomaly detection (TSAD) supports the analysis of web service key performance indicators (KPIs) by identifying anomalous intervals. Recent large language model (LLM)-based agentic approaches have achieved promising results through reasoning and tool use. Despite their effectiveness, precise anomaly localization remains challenging, as diverse anomaly patterns demand targeted numerical evidence and iterative refinement to accurately determine anomaly boundaries. In this work, we propose AnomaMind, a coarse-to-fine agentic diagnosis framework for TSAD. AnomaMind first identifies suspicious regions from time-series visualizations, then adaptively acquires targeted numerical evidence through multi-turn tool interactions, and finally refines anomaly decisions through self-reflection. This process is supported by a tool engine that integrates knowledge memory and numerical analysis. To coordinate this diagnostic process, we design a hybrid inference strategy that employs frozen general-purpose LLMs for initial localization, tool orchestration, and evaluation, alongside a specialized LLM detector for evidence-grounded interval prediction. We optimize only the specialized detector through supervised fine-tuning (SFT) on diagnostic trajectories and reinforcement learning (RL) with verifiable detection rewards. Experiments on four benchmarks spanning web traffic, service KPIs, and system-monitoring signals, under both in-domain and multi-domain training settings, demonstrate competitive performance and support the effectiveness of coarse-to-fine adaptive diagnosis through targeted evidence acquisition and self-reflective refinement.The code is available at https://github.com/Xiaoyu-Tao/AnomaMind-TS.