Patent attributes
It is provided a management server is configured to store an access log including a monitoring subject ID, or a monitoring item ID when a request for outputting a historical data is inputted, an incident data including a time, a monitoring subject ID, or a monitoring item ID when an incident indicating a failure in the each of the devices; associate the incident data with the access log; update data included in the access log to a string of characters abstracted; generate an abstract access log; identify first abstract access log from the generated abstract access log based on the first incident data when a value indicating first incident data is inputted; identify a condition for the historical data to be outputted based on the first abstract access log and the first incident data; and output the identified condition for the historical data.