Log analysis when failure occurs in virtualization environment

Abstract

There is provided a network management apparatus performing a first storage process, a second storage process, a search process, and a presentation process. The first storage process stores logs of a plurality of components constituting a virtualization environment of a network. The second storage process stores correspondence information in which, for each failure that may occur in the network, error logs of the plurality of components related to the failure are associated with each other. The search process searches, when a failure occurs in the network, based on an error log of a first component among the plurality of components, for an error log of a second component related to the failure from the stored logs using the correspondence information. The presentation process presents a result of the search to a user.