| 摘要 |
To provide a detection rule generating apparatus, a detection rule generating method, and a computer program, capable of generating proper symptoms without being dependent on the degree of operator proficiency. Event detection rules for a system including plural components are generated. System configuration information on the system including related information among the components is acquired, and history information on the system including log information and/or failure information output from each component upon occurrence of a failure is collected. Based on the system configuration information and the history information, candidate events as candidates to be selected for generating a detection rule are identified, and the identified candidate events are presented. Then, based on the presented candidate events, the detection rule is generated. |
