CHECK-UP DEVICE, CHECK-UP METHOD AND CHECK-UP PROGRAM

摘要

PROBLEM TO BE SOLVED: To reduce a delay of a log detection relating to a failure even if the number of logs and the number of rules are large when the logs are monitored for system monitoring.SOLUTION: A check-up device 10 includes: a storing unit 13 which stores, as respective rules, multiple letter strings to be monitored, and which also stores a score that indicates a matching frequency between the rule and the letter string subjected to a check-up in association with each rule; a check-up unit 141 that checks up whether or not the letter string subjected to the check-up and contained in an input log matches the rule in accordance with a check-up sequence of the rule; a score adding unit 142 that adds a score to the rule matching the letter string subjected to the check-up and contained in the log among the multiple rules; and a sequence changing unit 143 that changes the check-up sequence of the rule on the basis of the score of each rule.SELECTED DRAWING: Figure 1