Log analysis method and recording medium storing log analysis program

A log analysis method configured to analyze a log in which a series of events occurring upon execution of a program are recorded according to an occurrence order of each of the events, the log analysis method comprising:

• classifying each event based on a reference to a memory area being performed upon execution of a program description corresponding to the each event;
• generating a classified log, in each of which one or more events classified as event concerning the reference to the memory area, are recorded according to the occurrence order of each event, for each memory area;
• generating an event row in which a plurality of events are recorded according to the occurrence order of each of the plurality of events, based on events recorded in each of the plurality of classified logs;
• comparing each event recorded in the event row with each event recorded in each of the classified logs respectively;
• converting each of the classified logs into converted log respectively, based on result of the comparison;
• calculating an event occurrence probability for the occurrence order of each event, based on each program description concerning each event recorded in each of the converted logs;
• calculating rarity, indicating a level of an occurrence frequency of each event, for the occurrence order of each event based on each calculated event occurrence probability;
• and
• outputting information concerning the event which corresponds to a characteristic included in the converted logs, based on each calculated rarity.

A computer-readable recording medium storing a log analysis program configured to analyze a log by controlling a computer, the log analysis program causing a computer to execute a process comprising:

• executing a program a plurality of times;
• generating a plurality of logs, each log being recorded a plurality of events occurring upon the execution of the program according to an occurrence order of each of the events in each of the logs;
• performing a first calculation to calculate an event occurrence probability, for the occurrence order of each event, based on at least one from the program description concerning each event recorded in the logs and the data to be used upon the execution of the program description;
• and
• outputting information concerning an event which corresponds to a characteristic included in the logs, based on the event occurrence probability.

A computer-readable recording medium storing a log analysis program configured to analyze a log by controlling a computer, the log in which a series of events occurring upon execution of a program are recorded according to an occurrence order of each of the events, the log analysis program causing a computer to execute a process comprising:

• classifying each event based on a reference to a memory area being performed upon execution of a program description corresponding to the each event;
• generating a classified log, in each of which one or more events classified as event concerning the reference to the memory area, are recorded according to the occurrence order of each event, for each memory area;
• generating an event row in which a plurality of events are recorded according to the occurrence order of each of the plurality of events, based on events recorded in each of the plurality of classified logs;
• comparing each event recorded in the event row with each event recorded in each of the classified logs respectively;
• converting each of the classified logs into converted log respectively, based on result of the comparison;
• calculating an event occurrence probability for the occurrence order of each event, based on each program description concerning each event recorded in each of the converted logs;
• calculating rarity, indicating a level of an occurrence frequency of each event, for the occurrence order of each event, based on each calculated event occurrence probability;
• and
• outputting information concerning the event which corresponds to a characteristic included in the converted logs, based on each calculated rarity.