Non-transitory computer-readable storage medium, display control method and display control device for observing anomolies within data

A display control method executed by a computer, the display control method comprising:

• collecting information of a plurality of kinds of observation data for each of a plurality of target devices;
• performing anomaly detection processing on the collected plurality of kinds of observation data;
• displaying, on a screen of a display device, a first display indicating a correspondence relation between a first time period in which a first anomaly is detected within a specific period and a target device in which the first anomaly is detected based on a result of the anomaly detection processing;
• displaying, on the screen, a second display upon receiving a first designation of the target device a second time period that is a part of the first time period in the first display, the second display indicating whether a second anomaly is detected for each of the plurality of kinds of observation data in the second time period of the target device designated in the first designation;
• and
• displaying, on the screen, a third display upon receiving a second designation of specific observation data in the second display, the third display indicating time series changes in the specific observation data designated in the second designation and the second time period.

A display control device comprising:

• a memory;
• and
• a processor coupled to the memory and the processor configured to execute a process, the process including:
• collecting information of a plurality of kinds of observation data for each of a plurality of target devices;
• performing anomaly detection processing on the collected plurality of kinds of observation data;
• displaying, on a screen of a display device, a first display indicating a correspondence relation between a first time period in which a first anomaly is detected within a specific period and a target device in which the first anomaly is detected based on a result of the anomaly detection processing;
• displaying, on the screen, a second display upon receiving a first designation of the target device and a second time period limited by a part of the first time period in the first display, the second display indicating whether a second anomaly is detected for each of the plurality of kinds of observation data in the second time period of the designated target device;
• and
• displaying, on the screen, a third display upon receiving a second designation of specific observation data in the second display, the third display indicating time series changes in the specific observation data designated in the second designation and the second time period.