摘要 |
When logs are analyzed, an analysis with consistency is carried out on the presumption that shifting occurs among time stamps of logs output from a plurality of apparatuses engaged in time correction amount. In a log analysis apparatus which receives logs from a plurality of computers for generating a plurality of logs for analysis, for the plurality of logs output from the plurality of computers, a time stamp recorded in each log is corrected based on a time correction log according to a consistency rule among the logs.
|