EVENT AGGREGATION DEVICE, EVENT AGGREGATION METHOD, AND EVENT AGGREGATION PROGRAM

摘要

PROBLEM TO BE SOLVED: To provide an event aggregation device, an event aggregation method, and an event aggregation program capable of easily determining a failure by which an event occurring in a computer system is caused and reducing work load required for examination diagnosis of the event.SOLUTION: The event aggregation device includes: an information acquisition unit 1 for acquiring event history information which shows occurrence history of an event showing a failure or a sign of failure in a computer system and metric history information which shows a use state of a resource in the computer system for metric as a measurement value; a storage unit 2 for storing a system sketch in which a state of the metric at the time of failure occurrence in the computer system is defined; and an aggregation unit 3 for aggregating, from the event history information, each event occurring in a time zone when a measurement result of each metric shown by the metric history information and a state of each metric shown by the system sketch are matched, as an event group corresponding to the system sketch.