Abstract: An event monitoring system includes a processor and a storage unit. The storage unit holds an event message including a character string related to an event occurring in an information system and guide information including one or more guides. The guide includes a guide message including a predetermined character string, notified in response to the event, and information regarding a coping method for the event. The processor compares the event message and the guide, associates the guide with the event in a case where the guide further includes information for identifying a variable portion of the guide message and a portion other than the variable portion of the guide message coincides with a portion other than a portion corresponding to the variable portion in the event message, and receives an input of information indicating a correct answer of a guide to be associated with the event in a case where the guide does not include the information for identifying the variable portion.

Abstract: An event monitoring system includes a processor and a storage unit. The storage unit holds an event message including a character string related to an event occurring in an information system and guide information including one or more guides. The guide includes a guide message including a predetermined character string, notified in response to the event, and information regarding a coping method for the event. The processor compares the event message and the guide, associates the guide with the event in a case where the guide further includes information for identifying a variable portion of the guide message and a portion other than the variable portion of the guide message coincides with a portion other than a portion corresponding to the variable portion in the event message, and receives an input of information indicating a correct answer of a guide to be associated with the event in a case where the guide does not include the information for identifying the variable portion.

Abstract: A technique for improving determination of handling of guides to events generated in an information system is provided. An event monitoring apparatus for monitoring an event including an event message indicated by a character string related to a phenomenon occurring in an information system includes a guide storage unit that stores a plurality of guides including guide messages indicated by a character string and indicating a method of handling the event and a threshold relating to similarity between the guide messages of the guides and event messages in association with each other; an event storage unit that records the event from the information system; and a guide provision unit that calculates the similarity between the event messages included in the event and the guide messages of the guide and associates a guide whose similarity exceeds a threshold with the event.

Abstract: A technique for improving determination of handling of guides to events generated in an information system is provided. An event monitoring apparatus for monitoring an event including an event message indicated by a character string related to a phenomenon occurring in an information system includes a guide storage unit that stores a plurality of guides including guide messages indicated by a character string and indicating a method of handling the event and a threshold relating to similarity between the guide messages of the guides and event messages in association with each other; an event storage unit that records the event from the information system; and a guide provision unit that calculates the similarity between the event messages included in the event and the guide messages of the guide and associates a guide whose similarity exceeds a threshold with the event.