Control system, information processing device, and anomaly factor estimation program

1. A control system that controls a control target, comprising:

a controller connected to one or more devices through a network; and

an information processing apparatus connected to the controller, wherein:

the controller maintains an event log containing an event which occurred during a control operation, and network statistical information containing statistical information associated with data transmission on the network;

the information processing apparatus performs a factor estimation process that provides an interactive user interface in accordance with selection of an anomaly phenomenon registered in the event log; and

the factor estimation process comprises:

accessing the event log and the network statistical information in the controller;

identifying, based on contents of the anomaly phenomenon registered in the event log, a factor having caused the target anomaly phenomenon from among one or more factor candidates associated with the target anomaly phenomenon;

in response to the factor having caused the target anomaly phenomenon not being identifiable based on the contents of the anomaly phenomenon registered in the event log, presenting to a user, based on an association between the anomaly phenomenon and one or more factors that cause the anomaly phenomenon, an action for identifying the factor having caused the target anomaly phenomenon from among the one or more factor candidates associated with the target anomaly phenomenon;

in response to the factor having caused the target anomaly phenomenon being identifiable based on the contents of the anomaly phenomenon registered in the event log, presenting to the user the identified factor; and

after execution of the action presented to the user, determining, based on the network statistical information, whether the target anomaly phenomenon is recovered by an action taken by the user, wherein

the factor estimation process further comprises presenting to the user a plurality of factor candidates that are similar to each other and associated with the target anomaly phenomenon, and sequentially presenting to the user actions for the plurality of the factor candidates.

2. The control system according to claim 1 , wherein the factor estimation process further comprises, when the target anomaly phenomenon is recovered by execution of the action presented to the user, identifying a factor associated with the action as the factor having caused the target anomaly phenomenon.

3. The control system according to claim 1 , wherein the factor estimation process further comprises evaluating, based on a state value in the network statistical information, a state of communication with a device associated with the target anomaly phenomenon to determine whether the target anomaly phenomenon is recovered.

4. The control system according to claim 1 , wherein the factor estimation process further comprises

receiving selection of a skill level of the user, and

varying contents of the interactive user interface in accordance with the selected skill level.

5. The control system according to claim 1 , wherein the information processing apparatus displays a list of one or more events registered in the event log, and starts provision of the interactive user interface corresponding to selection of the event displayed in the list.

6. An information processing apparatus connected to a controller that controls a control target, wherein:

the controller is connected to one or more devices through a network, and maintains an event log containing an event which occurred during a control operation and network statistical information containing statistical information associated with data transmission on the network;

the information processing apparatus performs a factor estimation process that provides an interactive user interface in accordance with selection of an anomaly phenomenon registered in the event log; and

the factor estimation process comprises:

accessing the event log and the network statistical information in the controller;

identifying, based on contents of the anomaly phenomenon registered in the event log, a factor having caused the target anomaly phenomenon from among one or more factor candidates associated with the target anomaly phenomenon;

in response to the factor having caused the target anomaly phenomenon not being identifiable based on the contents of the anomaly phenomenon registered in the event log, presenting to a user, based on an association between the anomaly phenomenon and one or more factors that cause the anomaly phenomenon, an action for identifying the factor having caused the target anomaly phenomenon from among the one or more factor candidates associated with the target anomaly phenomenon;

in response to the factor having caused the target anomaly phenomenon being identifiable based on the contents of the anomaly phenomenon registered in the event log, presenting to the user the identified factor; and

after execution of the action presented to the user, determining, based on the network statistical information, whether the target anomaly phenomenon is recovered by an action taken by the user, wherein

the factor estimation process further comprises presenting to the user a plurality of factor candidates that are similar to each other and associated with the target anomaly phenomenon, and sequentially presenting to the user actions for the plurality of the factor candidates.

7. An anomaly factor estimation program executed by an information processing apparatus connected to a controller that controls a control target, wherein:

the controller is connected to one or more devices through a network, and maintains an event log containing an event which occurred during a control operation and network statistical information containing statistical information associated with data transmission on the network;

the anomaly factor estimation program causes the information processing apparatus to perform a factor estimation process that provides an interactive user interface in accordance with selection of an anomaly phenomenon registered in the event log;

the factor estimation process comprises:

accessing the event log and the network statistical information in the controller;

identifying, based on contents of the anomaly phenomenon registered in the event log, a factor having caused the target anomaly phenomenon from among one or more factor candidates associated with the target anomaly phenomenon;

in response to the factor having caused the target anomaly phenomenon not being identifiable based on the contents of the anomaly phenomenon registered in the event log, presenting to a user, based on an association between the anomaly phenomenon and one or more factors that cause the anomaly phenomenon, an action for identifying the factor having caused the target anomaly phenomenon from among the one or more factor candidates associated with the target anomaly phenomenon;

in response to the factor having caused the target anomaly phenomenon being identifiable based on the contents of the anomaly phenomenon registered in the event log, presenting to the user the identified factor; and

after execution of the action presented to the user, determining, based on the network statistical information, whether the target anomaly phenomenon is recovered by an action taken by the user, wherein

the factor estimation process further comprises presenting to the user a plurality of factor candidates that are similar to each other and associated with the target anomaly phenomenon, and sequentially presenting to the user actions for the plurality of the factor candidates.

8. The information processing apparatus according to claim 6 , wherein the factor estimation process further comprises, when the target anomaly phenomenon is recovered by execution of the action presented to the user, identifying a factor associated with the action as the factor having caused the target anomaly phenomenon.

9. The information processing apparatus according to claim 6 , wherein the factor estimation process further comprises evaluating, based on a state value in the network statistical information, a state of communication with a device associated with the target anomaly phenomenon to determine whether the target anomaly phenomenon is recovered.

10. The information processing apparatus according to claim 6 , wherein the factor estimation process further comprises

receiving selection of a skill level of the user, and

varying contents of the interactive user interface in accordance with the selected skill level.

11. The information processing apparatus according to claim 6 , wherein the information processing apparatus displays a list of one or more events registered in the event log, and starts provision of the interactive user interface corresponding to selection of the event displayed in the list.

12. The anomaly factor estimation program according to claim 7 , wherein the factor estimation process further comprises, when the target anomaly phenomenon is recovered by execution of the action presented to the user, identifying a factor associated with the action as the factor having caused the target anomaly phenomenon.

13. The anomaly factor estimation program according to claim 7 , wherein the factor estimation process further comprises evaluating, based on a state value in the network statistical information, a state of communication with a device associated with the target anomaly phenomenon to determine whether the target anomaly phenomenon is recovered.

14. The anomaly factor estimation program according to claim 7 , wherein the factor estimation process further comprises

receiving selection of a skill level of the user, and

varying contents of the interactive user interface in accordance with the selected skill level.