1. An apparatus for generating event detection rules in a multiple-component computer system, the apparatus comprising: a configuration information-extracting section for acquiring system configuration information from a multiple-component computer system, the system configuration information comprising related information describing relationships among system components; a history information-collecting section for collecting history information from the multiple-component computer system, the history information comprising at least one of log information and failure information output from a component upon occurrence of a system failure; a candidate event-identifying section for identifying candidate events for selection to generate a detection rule based on the system configuration information and the history information; and a candidate event-presenting section for presenting the candidate events to a user for selection.