Abstract: A rule generation device according to an embodiment includes: a database in which, for each fault, fault factor information including a fault factor part and a fault factor, fault events that occur due to this fault, a rule ID associated with a rule including a condition part and a result part are registered in association with one another; an importance degree determination unit determining, when fault events of a new fault that is a newly occurred fault are registered with the database, degrees of importance of the fault events of the new fault based on at least one of values calculated through statistical processing or analytical processing for information other than the fault events or overall information about the fault events, which are registered with the database; and a rule generation unit generating a rule for the new fault based on the degrees of importance.

Abstract: A GUI component in a screen is recognized without analyzing a program code of application software. A screen recognition device includes a GUI component form/position determination unit 11 that extracts a GUI component included in a display screen of application software, from the display screen, and that determines the form and position of the GUI component, and a GUI component kind identification unit 12 and a GUI component operation identification unit 13 that determine the kind of the GUI component and an operation that can be performed to the GUI component, based on a change in a mouse cursor and a change in the GUI component when the mouse cursor is superimposed on the GUI component.

Abstract: An information analysis apparatus according to an embodiment includes an input unit that inputs information indicating an apparatus that is a fault occurrence location in a communication network and a factor of a fault, a storage unit that stores a restoration handling method rule in which the apparatus that is the fault occurrence location, the factor of the fault, and an appropriate restoration handling method for the fault are associated, and an analyzer that analyzes an appropriate restoration handling method for the apparatus and the factor indicated by the information that is input, based on information related to a past fault for the apparatus that is the fault occurrence location, or a condition inherent in the apparatus that is the fault occurrence location, from the restoration handling method rule.

Abstract: A position control device includes a first input unit to receive input of information related to a virtual node that generates attraction or repulsion according to the types of a plurality of types of nodes, and to receive, for each of a plurality of areas on a screen, input of information related to the plurality of types of nodes and links displayable in the areas. Further, there is a second input unit to receive, for at least one of the plurality of areas, input of information related to setting of any display positions of the nodes indicated by the information that is input, and a parameter calculation unit to calculate a parameter for calculating attraction or repulsion applied by the virtual node to the nodes at the display positions. Additionally, there is a determination unit configured to calculate attraction or repulsion applied by the virtual node.

Abstract: A position control device according to an embodiment includes: a setting unit that inputs information on a plurality of nodes displayable on a screen and at least one edge connecting two of the multiple nodes, and sets a virtual node which generates an attractive force or a repulsive force for a node having a predetermined feature out of the plurality of nodes indicated by the information thus input; a calculation unit that calculates an attractive force or a repulsive force related to the plurality of nodes and the virtual node set by the setting unit; and a control unit that controls display positions of the plurality of nodes on the screen on the basis of the attractive force or the repulsive force calculated by the calculation unit.

Abstract: In an embodiment of the present invention, a memory stores case performances on anomaly handling of a plurality of apparatuses. A hardware processor performs: identification processing of identifying an anomaly cause of an abnormal apparatus in the plurality of apparatuses; selection processing of selecting an estimation model for estimating a handling method suitable for the anomaly cause from a plurality of estimation models based on the case performance of the abnormal apparatus; estimation processing of estimating a handling method suitable for the anomaly cause among a plurality of handling methods based on the selected estimation model; and output processing of outputting information indicating the estimated handling method.

Abstract: According to one aspect of the present invention, when a combination rule of event information to be monitored is created by aggregating a plurality of pieces of event information generated in a network, an information processing device executes: collecting the plurality of pieces of event information; calculating a correlation value for a plurality of combinations of event information including m (m?3) pieces of event information generated from the plurality of pieces of event information collected; selecting a combination of the pieces of event information for which the calculated correlation value is equal to or higher than a predetermined value, wherein the correlation value increases as the number of times or frequency that the event information included in a combination appears according to the combination increases and also increases as a time interval between the pieces of event information included in the combination decreases; and generating the combination rule on the basis of the event information

Abstract: Provided is an event mapping acquiring unit (11) and an event type conversion unit (12). The event mapping acquiring unit (11) acquires an event mapping file defining a normalized alarm message indicating a normalized alarm content, a resource type indicating an event failure location, an alarm type, and an event type indicating event classification of the alarm in association with one another. The event type conversion unit (12) determines whether input alarm information matches the definition of the event mapping file acquired, when the input alarm information matches the definition, sets the event type to a value defined in the event mapping file, when the input alarm information does not match the definition, sets the event type to the alarm type of alarm information, and registers the event type and the alarm information in association with each other as a failure event in the database.

Abstract: In an embodiment of the present disclosure, a prior probability is used by an approach of Bayesian statistics, for all nodes stored in fault handling history data or for a target node for which a fault cause has been identified and all nodes of the same type as the target node, restoration probabilities of handling methods for an identical fault cause are calculated, priorities are set for the handling methods based on the calculated restoration probabilities, and a handling method to be presented is determined in accordance with the priorities.

Abstract: A GUI component in a screen is recognized without analyzing a program code of application software. A screen recognition device includes a GUI component form/position determination unit 11 that extracts a GUI component included in a display screen of application software, from the display screen, and that determines the form and position of the GUI component, and a GUI component kind identification unit 12 and a GUI component operation identification unit 13 that determine the kind of the GUI component and an operation that can be performed to the GUI component, based on a change in a mouse cursor and a change in the GUI component when the mouse cursor is superimposed on the GUI component.

Abstract: In a failure location identification apparatus according to one embodiment, a facility information management unit records therein facility information including positional information of a physical resource, an external factor information management unit records therein external factor information concerning an external factor that possibly becomes a factor that causes a failure in the physical resource, the external factor information including positional information of the external factor, and a facility influence definition management unit records therein information concerning a possible influence of the external factor on the physical resource.

Abstract: As an embodiment of the present invention, a network monitoring apparatus includes a combination rule storage section where a combination rule is registered; and the combination rule includes a combination of a plurality of failure event information to be monitored, and new event information to which the combination of the plurality of failure event information is to be changed. In this state, the network monitoring apparatus collects a plurality of failure event information from network apparatuses; extracts, from the plurality of failure event information collected, a combination of a plurality of failure event information detected to occur within a unit time; and collates the combination of the plurality of failure event information extracted with the combination of the plurality of failure event information defined to be monitored in the combination rule.

Abstract: In an embodiment of the present invention, a memory stores case performances on anomaly handling of a plurality of apparatuses. A hardware processor performs: identification processing of identifying an anomaly cause of an abnormal apparatus in the plurality of apparatuses; selection processing of selecting an estimation model for estimating a handling method suitable for the anomaly cause from a plurality of estimation models based on the case performance of the abnormal apparatus; estimation processing of estimating a handling method suitable for the anomaly cause among a plurality of handling methods based on the selected estimation model; and output processing of outputting information indicating the estimated handling method.

Abstract: An aspect of the present disclosure acquires topology information representing a connection configuration between a plurality of apparatuses constituting a communication network and event information representing occurrence statuses of an event by the plurality of apparatuses, estimates, based on the topology information and the event information, a first apparatus corresponding to a failure factor location from among the plurality of apparatuses, estimates, based on an occurrence status of the event by a second apparatus whose connection relationship with the first apparatus estimated is defined by the topology information, whether an occurrence of the event by the second apparatus is caused by the failure factor location or by another anomaly, and estimates, based on a relationship between an occurrence status of the event by the first apparatus and an occurrence status of the event by a third apparatus whose connection relationship with the first apparatus is not defined by the topology information, whethe

Abstract: In an embodiment of the present disclosure, a prior probability is used by an approach of Bayesian statistics, for all nodes stored in fault handling history data or for a target node for which a fault cause has been identified and all nodes of the same type as the target node, restoration probabilities of handling methods for an identical fault cause are calculated, priorities are set for the handling methods based on the calculated restoration probabilities, and a handling method to be presented is determined in accordance with the priorities.

Abstract: A pattern extraction and rule generation device according to one embodiment includes a database where failure factor information including a failure factor location and a failure factor, an occurring failure event that is a failure event occurring due to a failure and a non-occurring failure event that is a failure event not occurring due to the failure, and a rule ID associated with a rule including condition parts and conclusion parts are registered, by a failure type, in association with each other, a unique determination unit that generates, by the failure type, all of one or more possible combinations of the occurring failure event and the non-occurring failure event included in a failure event group including the occurring failure event and the non-occurring failure event associated with a new failure, and extracts, from combinations of failure events of a new failure and combinations of failure events of one or more past failures, by the failure type, a unique pattern that is determined to be a combina

Abstract: An information analysis apparatus according to an embodiment includes an input unit that inputs information indicating an apparatus that is a fault occurrence location in a communication network and a factor of a fault, a storage unit that stores a restoration handling method rule in which the apparatus that is the fault occurrence location, the factor of the fault, and an appropriate restoration handling method for the fault are associated, and an analyzer that analyzes an appropriate restoration handling method for the apparatus and the factor indicated by the information that is input, based on information related to a past fault for the apparatus that is the fault occurrence location, or a condition inherent in the apparatus that is the fault occurrence location, from the restoration handling method rule.