In invariant relation analysis, a correlation model having high abnormality detection ability is generated.A system analysis device (100) includes a correlation function storage unit (1022), and a correlation function extraction unit (1023). The correlation function storage unit (1022) stores a plurality of candidates for a correlation function expressing a correlation for each pair of metrics in a system. The correlation function extraction unit (1023) extracts a correlation function from a plurality of candidates for a correlation function as a correlation function for each pair of metrics, on the basis of a detection sensitivity indicating a likelihood of correlation destruction caused at the time of abnormality of a metric associated with a correlation function.