Patent ID: 8352790

Claim:
An abnormality detection method for detecting abnormality in a system to be monitored, the method using a device including a processing section and a storage section, wherein the processing section executes the steps of: acquiring an access log and a process performance log from the system to be monitored; sorting the acquired access log by time and recording the sorted access log as performance information by time; extracting one or more process statuses corresponding to the recorded performance information by time from the acquired process performance log; executing a task name assignment procedure to obtain one or more task names from the one or more extracted process statuses; associating the one or more task names with the performance information by time and recording as one or more performance statuses; and detecting abnormality based on a current performance status and a past performance status, wherein the step of detecting abnormality includes calculating a degree of difference between a current performance status and a past performance status included in the one or more recorded performance statuses, wherein the device is further provided with a display section; and wherein the processing section further executes the steps of: displaying the current performance status, the past performance status, the task names associated with the current and past performance statuses, and the calculated degree of difference on the display section; sorting the one or more past performance statuses by the one or more associated task names; selecting one of the one or more sorted past performance statuses according to a selection rule for use in calculating the degree of difference; and calculating degrees of similarity between the task name associated with the current performance status and the one or more task names associated with the one or more sorted past performance statuses.