LOG MONITORING METHOD, LOG MONITOR, LOG MONITORING SYSTEM, AND LOG MONITORING PROGRAM

摘要

PROBLEM TO BE SOLVED: To detect a suspicious monitoring object at an early stage.SOLUTION: When a monitoring object collates log data among plural identical logs, the log monitoring method causes a computer to execute the steps of: acquiring a combination of log data to be determined as abnormal from the combinations of conditions indicated by the log data as abnormal pattern 11a from a storage 11; determining whether the combination of log data matches with the abnormality pattern 11a with respect to plural logs on each of the plural monitoring objects; and when the combination of log data matches, causing the storage 11 to store a piece of monitoring information 11b including at least a part of the log data for each.SELECTED DRAWING: Figure 1