| 摘要 |
PROBLEM TO BE SOLVED: To extract a log varying in a generation amount before and after a specific event without a user directly knowing the meaning of a log message generated by equipment.SOLUTION: When a given object event, monitoring object equipment h, an occurrence time and a completion time of the object event, and a time width (T, T) before and after the given object event are given, a log variation amount of the monitoring object equipment h is calculated with reference to a time producing a log message produced in the past, a template that can be associated with an ID of the monitoring object equipment h, and template information storage means for storing a template ID of the template. The log variation amount in the same time zone of another day of the monitoring object equipment h is obtained, the log variation amount serving as a sample is calculated from the log variation amount of the monitoring object equipment h and the log variation amount in the same time zone of another day of the monitoring object equipment h, the log variation amount serving as a sample is obtained, and verification is performed by a statistical approach. When the verification statistic amount is large, it is detected as a pre-log. |
