LOG NOTIFICATION CONDITION DEFINITION SUPPORT DEVICE, LOG MONITORING SYSTEM, PROGRAM, AND LOG NOTIFICATION CONDITION DEFINITION SUPPORT METHOD

摘要

PPROBLEM TO BE SOLVED: To reduce man-hour required for creating "conditions" necessary for detecting a new event including a failure and detecting update of the known event in a system to be monitored. PSOLUTION: This log notification condition definition support device 7000 which creates candidates for the "conditions" to be referred to in detecting the event by an event detection device 3000 is provided. The log notification condition definition support device 7000 stores and manages log information output from the system 2000 to be monitored as a database (accumulated log) 4000, reads the log information to be divided by specific time by a condition candidates creation function 7100, counts appearance frequencies of the log information including the same message in each time zone, defines a count value as appearance frequency conditions of the log information, creates candidates for the conditions for capturing all the pieces of log information in the time zones to be displayed on a GUI screen, and stores the candidates for conditions in a database (condition DB) 5000 as new conditions according to the instruction operation of a manager 1000. PCOPYRIGHT: (C)2008,JPO&INPIT