摘要 |
PROBLEM TO BE SOLVED: To classify logs in a distributed system for each event.SOLUTION: A log classification device 10 has a distributed log collection unit 11, a feature value conversion unit 13, and a log classification unit 14. The distributed log collection unit 11 collects logs 21a-24a from a plurality of servers 21-24. The feature value conversion unit 13 converts each of the plurality of logs 21a-24a collected by the distributed log collection unit 11 into a feature value. The log classification unit 14 which, using the feature value obtained by conversion by the feature value conversion unit 13 and an event definition 12b in which an event that is the cause of each log generated is defined on the basis of the feature value, classifies the plurality of logs 21a-24a for each of the events. |