An apparatus includes: a log element extraction unit that extracts a log element from log information a combined unit that attaches, to each of the log elements, related system constituent element information and combine the log elements; a pattern extraction unit that extracts a pattern from the combined log information; a conversion unit, when an analysis target pattern includes system constituent element information of conversion target not included in a comparison target pattern, that performs conversion between the system constituent element information of the conversion target and the system constituent element information similar to the conversion target in the comparison target pattern or the analysis target pattern; a comparison unit that detects a difference the analysis target pattern and the comparison target pattern; and a presenting unit that presents, as a portion of a cause of a fault, the system constituent element information indicated by the difference.