| 摘要 |
PROBLEM TO BE SOLVED: To provide a log management device capable of efficiently and surely analyzing a log by automatically defining syntax definition information of a log message of which the syntax pattern is not defined yet.SOLUTION: Knowledge storage means stores a plurality of components which are pairs of routine character strings and parameter names. Definition storage means stores a plurality of syntax definitions each including a syntax pattern that is an arrangement order of components, and an identifier of the syntax pattern. Analysis means inputs a log message including a pair of a routine character string and a value, retrieves a syntax pattern of which the arrangement of the routine character string is matched with the log message, from the definition storage means, extracts a value corresponding to the parameter name from the log message and outputs the syntax pattern together with its identifier. If there is not syntax pattern of the matched arrangement, definition means extracts a component including the routine character string in the log message from the knowledge storage means with the arrangement of the routine character string, creates a syntax definition of a new syntax pattern and stores it in the definition storage means. |
