Supporting detection of failure event

A computer program product comprising a computer recording medium having stored thereon a computer program capable of being executed on a computer to support detection of an event that has caused a failure in a system including plural components, the program causing the computer to:

• collect history information of the system including log information of the system and failure information output from at least one component upon occurrence of the failure in the system;
• generate a detection rule for detecting an event included in at least one component related to the failure that has occurred;
• store a symptom with additional information added to the generated detection rule;
• acquire system configuration information as configuration information of the system;
• accept selection of an event;
• extract, from the acquired system configuration information, partial configuration information as system configuration information related to a component that sent out the event the selection of which has been accepted;
• and
• add the extracted partial configuration information to the symptom to update the symptom.