Patent ID: 8126853

Claim:
A log managing apparatus, comprising: hardware; a collecting unit that receives a log from at least one collecting object that acquires said log including time information; a management unit that manages log format information set for each said collecting object; and a conversion unit that converts said log with reference to said log format information and extracts time information from said log, wherein the hardware implements the collecting unit, the management unit, and the conversion unit, wherein said conversion unit receives a log file that includes a plurality of log records, as said log from said collecting object, and when one of said plurality of log records includes time information, at least a part thereof being lacked, complements time information of said log record based on complementation information which is an updating time or a receiving time of said log file, and wherein in case that a lacking part of time information of said log record is information on a certain time unit, said conversion unit complements time information of said log record by adopting time information that is closer to said complementation information out of time information derived by adding information on said time unit included in said complementation information to time information of said log record and derived by adding information on said time unit calculated by subtracting one from information on said time unit included in said complementation information to time information of said log record, in case that a time indicated in said complementation information is at the first half of said time unit, and said conversion unit complements time information of said log record by adopting time information that is closer to said complementation information out of time information derived by adding information on said time unit included in said complementation information to time information of said log record and derived by adding information on said time unit calculated by adding one to information on said time unit included in said complementation information to time information of said log record, in case that a time indicated in said complementation information is at the second half of said time unit.