Abstract: Systems and methods for analyzing performance in a transport network may identify, in a log file, multiple log template types, each type including a respective fixed element present in all entries of that type, and create a data structure representing a finite state automaton in which each node represents the writing of log entries of a respective type into the log file. The order of nodes may correspond to the order in which the log entries were written, and each edge may connect nodes representing sequentially written entries. The systems and methods may remove nodes for which the indegree is less than a minimum indegree, identify, based on the pruned data structure, a repeated pattern in the log file including an ordered sequence of log entries of particular types, detect a deviation from the repeated pattern, and identify, based on detecting the deviation, an anomaly in the transport network.