INCIDENT RESPONSE SUPPORT PROGRAM, INCIDENT RESPONSE SUPPORT DEVICE AND INCIDENT RESPONSE SUPPORT METHOD

摘要

An incident response support device (100) obtains message information including the occurrence time of various events and the state change time of devices to be monitored within a system. The incident response support device (100) searches the group of obtained message information for message information of categories (M1, M3, M5) that are indicative of a failure (X) before the failure (X) occurs. When message information of categories (M1, M3, M5) indicative of the failure (X) is retrieved, the incident response support device (100) refers to the failure example database (110) and identifies the time of occurrence of the failure (X). The incident response support device (100) calculates the lead time (LT) of the failure (X) on the basis of the times of occurrence (t1, t3, t5) of the retrieved message information of categories (M1, M3, M5), and the identified time of occurrence (tx) of the failure (X).