Abstract: A network fault analysis method and apparatus are described for performing fault analysis on a network element device based on an NF service. The method includes a fault detection network element obtaining log data that is generated by a to-be-detected network element in a past specified duration. After obtaining the log data, the fault detection network element determines, based on the obtained log data, a log feature corresponding to the log data, and searches, in a fault relational database, for a fault type corresponding to the log feature. After detecting the fault type, the fault detection network element sends the found fault type to a policy control network element, so that the policy control network element can determine a corresponding recovery measure based on the fault type, and the to-be-detected network element can process, by using the recovery measure, a fault that occurs.