Managing apparatus, managing method

A managing method for managing an information processing system including a plurality of components, the managing method comprising:

• detecting a first message pattern from one or two or more messages received from the information processing system in a predetermined duration;
• reading the number of detection times that the first message pattern is detected when a fault has occurred in the information processing system from fault co-occurrence information stored in a storing unit configured to store the fault co-occurrence information storing the number of detection times, and calculating a co-occurrence probability of the fault and the first message pattern based on the number of detection times;
• determining that the fault has occurred when the co-occurrence probability is equal to or higher than a threshold value;
• and
• creating a second message pattern indicating a message group obtained by excluding a message output by a changed component from the first message pattern upon detecting that the component has been changed, and updating the first message pattern stored in the fault co-occurrence information to the second message pattern,
• calculating, when the first message is updated, the co-occurrence probability of the fault and the updated first message.

A storage medium on which is stored a program for causing a computer to execute a process for managing an information processing system including a plurality of components, the process comprising:

• detecting a first message pattern from one or two or more messages received from the information processing system in a predetermined duration;
• reading the number of detection times that the first message pattern is detected when a fault has occurred in the information processing system from fault co-occurrence information stored in a storing unit configured to store the fault co-occurrence information storing the number of detection times, and calculating a co-occurrence probability of the fault and the first message pattern based on the number of detection times;
• determining that the fault has occurred when the co-occurrence probability is equal to or higher than a threshold value;
• and
• creating a second message pattern indicating a message group obtained by excluding a message output by a changed component from the first message pattern upon detecting that the component has been changed, and updating the first message pattern stored in the fault co-occurrence information to the second message pattern,
• calculating, when the first message is updated, the co-occurrence probability of the fault and the updated first message.