| 摘要 |
PROBLEM TO BE SOLVED: To provide a log management device, a log management method and a log management program that enable efficient collation processing of received log data in accordance with an environment.SOLUTION: Log collation processing means 20 after receiving each of collected messages from log receiving means 10 transmits a collated message caused in association with collation processing to priority data update processing means 50. The priority data update processing means 50 after receiving this refers to a setting information storage part 80 to determine the presence or absence of message definition information to be stored in a priority list 71, and updates the priority list 71 on the basis of information relating to the determination result. Statistical data update processing means 60 updates a statistics list 72 using a counting list created on the basis of information in a log storage part 30. The log collation processing means 20 sequentially refers to the dynamically-updated priority list 71 and the regularly-updated statistics list 72 to execute efficient collation processing. |
