Supporting detection of failure event

摘要

In a mechanism for supporting detection of a failure event, history information of a system including log information of the system including plural components and/or failure information output from each component upon occurrence of a failure in the system is collected. A detection rule for detecting an event included in a component related to the failure that has occurred is generated, and a symptom with additional information added to the generated detection rule is applied to detect the event that has caused the failure. System configuration information as configuration information of the system is acquired, and from the acquired system configuration information, partial configuration information as system configuration information related to the component that sent out the event the selection of which has been accepted is extracted. The extracted partial configuration information is added to the symptom to update the symptom.

主权项

1. A method comprising:
collecting history information of a system including plural components, the history information including log information of the system and failure information output from at least one component upon occurrence of a failure in the system; generating a detection rule for detecting an event included in at least one component related to the failure that has occurred; storing a symptom with additional information added to the generated detection rule; acquiring system configuration information as configuration information of the system; accepting selection of an event; extracting, from the acquired system configuration information, partial configuration information as system configuration information related to a component that sent out the event the selection of which has been accepted; and adding the extracted partial configuration information to the symptom to update the symptom.