<![CDATA[Structural Health Monitoring (SHM) systems on long-span bridges routinely generate alarm volumes exceeding operators' manual review capacity, a condition known as alarm flood, so that genuine structural anomalies risk being buried among far more numerous instrumentation faults. The problem is acute in developing-country settings, where monitoring falls to small operational teams rather than dedicated staff. This study proposes an alarm-log triage framework that classifies events directly from tabular database records and static sensor metadata, requiring no raw sensor time-series, offering an alternative to the raw-signal paradigm dominating bridge SHM. The dataset comprises 63,934 alarm records logged over 2.5 years on a 641.8-m tropical cable-stayed bridge: labeling collapses as volume rises, leaving only 401 usable labeled records from the pre-flood period, a weakly-supervised task under severe label scarcity. The pipeline integrates alarm-log attributes, causally-ordered temporal window features, and as-built sensor metadata, with fold-internal resampling and recall-oriented operating-point selection. Seven classifiers were benchmarked under identical stratified 5-fold cross-validation, including TabNet alongside linear, kernel-based, tree-ensemble, and neural baselines. Gradient-boosted tree ensembles separate clearly from all other families (F1-Macro 0.7991–0.8860 outside the tree family versus 0.9354–0.9432 within it; McNemar and DeLong tests confirm the separation, p < 0.05). Differences among the tree ensembles themselves are not consistently significant, so LightGBM is reported as the selected deployment model on consistent top-tier performance (F1-Macro 0.9432, AUC-ROC 0.9885 at the default threshold) rather than as demonstrably superior. A two-part ablation shows temporal alarm-rate features supply most of the discriminative power, while explicit imbalance handling yields no measurable benefit at the observed ratio, indicating that such mechanisms should be calibrated to imbalance severity rather than applied by default. The results establish operational alarm logs as a viable, lightweight input for structural event triage and document alarm flood quantitatively in a real bridge SHMS.]]>
