Monitoring apparatus is configured to execute: obtaining pieces of information about access in a first time slot by specifying the first time slot including access to a first apparatus in the system where a response time is long; selecting a feature common to the access in the first time slot from the pieces of information about the access in the first time slot that have been obtained; first extracting from pieces of information about access in a given period of time, pieces of information about access that has the common feature selected as a feature common to the access in the first time slot; and first generating a first graph which shows changes with time in response time, based on the pieces of information about the access having the feature common to the access in the first time slot that have been extracted.