Log normalization system and log normalization method

Abstract

Accuracy and processing speed for searching in searching for a pattern that matches a log is achieved with a log normalization apparatus for normalizing a log output from an information processing system into a structured log. The apparatus has a log input unit that receives a log output from an information processing system; a storage unit that stores pattern information, which are patterns of logs, and a first priority information indicating a first priority for pattern matching corresponding to a log transmission source. A pattern matching unit is configured to, when the log received is a log transmission source corresponding to the first priority information, perform pattern matching between the log and the patterns in the pattern information using a pattern corresponding to the first priority and convert the log into a normalized log using the pattern matched, and the normalized log converted by the pattern matching unit is output.

Dependencies are inferred from the claim text.