Information output device, information output method, and recording medium

An information output device that receives monitoring logs generated by a plurality of monitoring devices including a first monitoring device and a second monitoring device, and outputs monitoring information including the monitoring logs, the second monitoring device monitoring the first monitoring device and having security privilege higher than security privilege of the first monitoring device, the information output device comprising:

• memory;
• and
• a processor coupled to the memory, wherein
• the processor, by using the memory, operates as:
• a receiver that sequentially receives monitoring logs, each monitoring log including:
• device information indicating one monitoring device of the plurality of monitoring devices;
• and a monitoring result indicating whether a monitoring target of the one monitoring device has an anomaly;
• a manager that manages a first state based on the monitoring result included in each monitoring log sequentially received, the first state being a state of anomaly occurrence in the monitoring target of each of the plurality of monitoring devices;
• a storage that stores path information indicating transmission paths, each transmission path having a different one of the plurality of monitoring devices as a source of a monitoring log, each transmission path being indicated by one or more devices through which a monitoring log transmitted by the source passes;
• a determiner that identifies, based on a first transmission path in the path information corresponding to the monitoring target of the monitoring device indicated by the device information included in the received monitoring log, and based on the first state, a second state that is a state of anomaly occurrence in a monitoring target of each of the one or more monitoring devices indicated by the first transmission path, and determines, based on the identified second state, a reliability level of the received monitoring log;
• and
• an outputter that outputs, based on the reliability level, monitoring information including the monitoring log.