A computer-implemented method includes: acquiring learning data from the plurality of processing devices in which a setting item, a setting value that include a setting error included in configuration information acquired when a fault in a system has occurred, and a fault type are associated with each other; determining whether each of fault types included in the learning data depends on a software configuration; extracting first software configuration information indicating a combination of setting files in which settings related to software are described, from the configuration information, based on a result of the determining; extracting second software configuration information indicating a combination of setting files in which settings related to software are described, from configuration information of a detection target; and determining whether to output an indication of a fault occurrence within the detection target by comparing the second software configuration information with the first software configuration information.