Patent ID: 8612372

Claim:
An apparatus for generating event detection rules in a multiple-component computer system, the apparatus comprising: at least one processor; at least one memory device coupled to the at least one processor and storing instructions executable by the at least one processor, the instructions comprising: a configuration information-extracting section for acquiring system configuration information from a multiple-component computer system, the system configuration information describing relationships among system components; a history information-collecting section for collecting history information from the multiple-component computer system, the history information comprising at least one of log information and failure information output from a component upon occurrence of a system failure; a candidate event-identifying section for identifying candidate events for selection based on the system configuration information and the history information; a candidate event-presenting section for presenting the candidate events to a user and an event selection-accepting section for accepting selection of at least one candidate event; a detection rule-extracting section for extracting a detection rule according to a topology comprising at least one component associated with the at least one selected candidate event; a detection rule generating/storing section for generating and storing the detection rule; and a candidate event-detecting section for detecting the occurrence of the selected candidate events associated with the stored detection rule.