A method for estimating a candidate cause in a failure occurred in an information processing apparatus by a computer, the method includes retrieving, by the computer, a first set of incident information from a data storage region on the basis of failure symptom data which is set on the computer, the data storage region storing incident information, each piece of the incident information including failure symptom data, first cause data of a positive judgment result of a cause in the failure, and second cause data of a negative judgment result of the cause in the failure, each of the first set including the failure symptom data identical to the set failure symptom data.