DETECTION APPARATUS AND DETECTION METHOD

摘要

A detection apparatus includes first and second calculating units and a storing unit. The first calculating unit calculates, when a configuration of a system is changed or the like and a combination of messages occurs, a ratio of the number of occurrences of an event at time points corresponding to a time of occurrence of the combination to the number of occurrences of the combination. The second calculating unit calculates an indicator to determine whether the combination of the messages is used to detect occurrence of the event or to detect a sign of occurrence of the event, based on the ratio and on the number of occurrences of the event. When the indicator indicates that a condition is satisfied, the storing unit stores the combination of the messages as a combination used to detect occurrence of the event or to detect the sign of occurrence of the event.

主权项

1. A detection apparatus comprising:
a first calculating unit that calculates, when operation of a system is started or when a configuration of the system is changed and when a combination of messages occurs in the system after the start of the operation of the system or the change in the configuration of the system, a ratio of number of occurrences of an event in the system at time points corresponding to a time of occurrence of the combination to number of occurrences of the combination; a second calculating unit that calculates an indicator to determine whether the combination of the messages is used to detect occurrence of the event or to detect a sign of occurrence of the event, based on the ratio calculated by the first calculating unit and the number of occurrences of the event; and a storing unit that stores, when the indicator calculated by the second calculating unit indicates that a condition used to detect occurrence of the event or to detect the sign of occurrence of the event is satisfied, the combination of the messages in a storage unit as a combination of messages used to detect occurrence of the event or to detect the sign of occurrence of the event.