LOG GENERATION RULE CREATION DEVICE AND METHOD

摘要

PROBLEM TO BE SOLVED: To provide a log generation rule creation device and method capable of allowing a user to extract a log generation rule (rule) useful for the user without directly knowing the content of a log message generated by a monitor target apparatus.SOLUTION: The log generation rule creation device extracts a template corresponding to a log which is previously generated while referring to a log/template information storing means storing a log message (referred to as "log") of at least a monitor target apparatus and an important portion (referred to as "template") in the log message. Monitor target apparatuses which has a high simultaneously generation possibility of the template are clustered, a group of the monitor target apparatus and the template is generated, and the group is stored in group storing means as an event. The log generation rule creation device reads the respective events in the group storing means and counts the times of generations with respect to monitor target apparatus and the template of the event. Events which have a larger appearance times are stored in the rule storing means as a generation rule.