INCIDENT EVENT CAUSE IDENTIFICATION SYSTEM AND INCIDENT EVENT CAUSE IDENTIFICATION METHOD

An incident event cause identification system includes a device log information holding unit that holds log information of a target device, a causality graph holding unit that holds a causality graph in which a relationship between an incident event and a cause thereof is associated, and an incident detection processing unit that detects an incident in the target device. A necessary log information determination processing unit extracts a causality graph of an associated type for the detected incident event and determines device log information necessary for cause identification on the basis of the extracted causality graph. A necessary log information collection processing unit collects the device log information determined by the necessary log information determination processing unit, and a cause analysis processing unit identifies a cause of the incident event by using the device log information collected by the necessary log information collection processing unit and the causality graph.