The application discloses a network anomaly tracing method and device based on a multi-
modal causal graph and a large
language model reasoning and a medium, the method constructs a multi-
modal heterogeneous causal graph fusing index, call chain and log core clues, and designs a cross-
modal reasoning mechanism for a
large model, realizing comprehensive analysis of the
root cause of the anomaly; for multi-modal
observable data, the causal relationship of the
time series index data is modeled by using
sparse structure learning and independence test, a global causal graph is constructed in combination with link
connectivity probability, and a semantic
perception strategy is used to extract a log sequence semantic abstract of the associated node, so that the multi-modal
observable data is uniformly organized in the multi-modal heterogeneous causal graph; the large
language model reasons the
root cause of the anomaly on the multi-modal heterogeneous causal graph, and finally generates a tracing result response text with professionalism and
interpretability, thereby providing a new solution for multi-modal
information fusion and anomaly tracing of a distributed
complex network.