Patent ID: 9355005
Filing Date: 2016-05-31
CPC Classification: G06F

Claim Text:
1. A detection apparatus comprising: a first calculating unit that calculates, when operation of a system is started or when a configuration of the system is changed and when a combination of messages occurs in the system after the start of the operation of the system or the change in the configuration of the system, a ratio of number of occurrences of an event in the system at time points corresponding to a time of occurrence of the combination to number of occurrences of the combination; a second calculating unit that calculates an indicator to determine whether the combination of the messages is used to detect occurrence of the event or to detect a sign of occurrence of the event, based on the ratio calculated by the first calculating unit and the number of occurrences of the event; and a storing unit that stores, when the indicator calculated by the second calculating unit indicates that a condition used to detect occurrence of the event or to detect the sign of occurrence of the event is satisfied, the combination of the messages in a storage unit as a combination of messages used to detect occurrence of the event or to detect the sign of occurrence of the event.