LOG ANALYSIS SYSTEM, FAULT CAUSE ANALYSIS SYSTEM, LOG ANALYSIS METHOD, AND RECORDING MEDIUM WHICH STORES PROGRAM

摘要

An objective of the present invention is to appropriately extract, or assist in extracting, a normal operation pattern from a normal operation log. A log file including information wherein a plurality of log records is ordered in time series is segmented into a plurality of log groups according to prescribed rules. A plurality of patterns which are configured by a plurality of events which are contiguous in time series is extracted from the plurality of log groups, and the patterns are associated with frequency information which represents how many log records the pattern is extracted from. The pattern to be outputted from the plurality of patterns is selected on the basis of an inclusion relation between the plurality of events which are contiguous in time series and configure a given pattern and the plurality of events which are contiguous in time series and configure other patterns, and on the basis of the frequency information which is associated with the patterns.

主权项

1. A log analysis system comprising:
a memory storing a set of instructions; and at least one processor configured to execute the instructions to: divide a log file including information in which log records are aligned in time series, in accordance with a predetermined rule, into log groups each of which corresponds to a set of log records being contiguous in time series, each of the log records corresponding to information in which an event is associated with a time point of occurrence of the event; extract patterns each of which is formed with events being contiguous in time series, from the log groups, and associate the patterns with frequency information indicating numbers of log records from which the patterns are extracted; and select a pattern to be output, from the patterns, on a basis of an inclusion relationship between events with which a pattern is formed and being contiguous in time series and events with which another pattern is formed and being contiguous in time series, and on a basis of frequency information associated with the patterns.