| 摘要 |
An information processing apparatus determines first message types that are not used for learning, on the basis of the appearance frequencies of individual message types obtained using a set of collected messages, and learns a message pattern which appears when a fault occurs and from which the first message types have been removed, from the set of messages and fault information. The information processing apparatus determines second message types that are not used for detection, on the basis of the appearance frequencies of individual message types obtained using a set of collected messages, generates a message pattern, from which the second message types have been removed, from the set of messages, and compares the message patterns with each other to detect a fault symptom in a system. |
| 主权项 |
1. A fault symptom detection method in collecting a plurality of types of messages from a monitored system, the method comprising:
determining, by a processor, a first message type that is not used for learning, based on appearance frequencies of individual message types obtained using a first set of messages collected; learning, by the processor, a first message pattern, from which the first message type has been removed, from the first set of messages and fault information, the first message pattern being a message pattern that appears when a fault occurs, the fault information indicating occurrence of faults in the monitored system; determining, by the processor, a second message type that is not used for detection, based on appearance frequencies of individual message types obtained using a second set of messages collected after the first set of messages; generating, by the processor, a second message pattern, from which the second message type has been removed, from the second set of messages; and comparing the first message pattern with the second message pattern to detect a fault symptom in the monitored system. |
