A log management module 10 acquires log data from a computer, temporarily stores the log data in a buffer, and writes the stored log data into a disk device 30a. When the log management module 10 detects a failure in the computer, the log management module 10 stops writing log data in the disk device 30a, and writes log data acquired after the failure is detected in a disk device 30b.