JP2003085003A - Fault restoration assist method and fault restoration assist system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system for collecting the fault state of a system wherein a fault occurs and presenting quickly a restoration method to a user. SOLUTION: When a fault occurs in another system 101, occurrence of the fault is detected by a system monitoring part 102, and fault state information 103 including an error code or the like is corrected by the system monitoring part 102, and the fault state information 103 is transmitted to a fault state information receiving part 104. A fault information retrieval part 106 retrieves a restoration information accumulation part 105 based on the fault state information 103 received by the fault state information receiving part 104, and a restoration information transmission part 107 transmits the acquired restoration information to another system 101.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method and a system for presenting recovery information for explaining a recovery method from a failure of a system.

[0002]

2. Description of the Related Art Conventionally, in case a failure occurs in a system such as a computer system, a person who responds to the failure is always stationed near the system, and a user of the system that has recognized the failure is assigned to a support center. Contact me,
The support center has advised the user of the system of the procedure for recovery from a failure, and the support center has performed recovery of the system from a remote location.

[0003]

However, it is not possible to make the personnel who respond to a failure resident near the system impose a heavy labor cost on the system and must be a fairly large-scale system.

Further, if the user of the system contacts the support center, the labor cost can be kept low, and one support center can handle a plurality of systems. There are advantages in terms of. However, the user of the system must inform the support center of what kind of failure occurred at the time of failure and explain the details of the failure correctly, but the user of the system is familiar with the inside of the system. In many cases, it is difficult to accurately inform the support center of the details of the failure. Also, even on the side of the support center, it is rare for the contactee to understand the entire system, and it is rare for the user who has contacted the failure occurrence to be able to present a recovery method on the spot. In most cases, the content of the failure is communicated to another person and the recovery method is presented to the user, and it took time until the recovery method was communicated to the user of the system.

Therefore, the present invention reduces the cost while
(EN) A method of presenting a recovery method describing a recovery method to a user of a system in which a failure has occurred, and a system.

[0006]

In order to solve the above problems, the present invention firstly monitors whether or not a failure has occurred, and when the failure has occurred, describes the failure. Provided are a failure recovery assistance method and a failure recovery assistance system for receiving failure status information, searching for recovery information describing a recovery method from accumulated failures, and transmitting the obtained recovery information to another system. As a result, when a failure occurs, information describing the details of the failure can be obtained, and the recovery information is searched based on that information and sent to other systems, so the recovery information should be presented promptly when the failure occurs. You can

Secondly, the received fault status information is output,
There is provided a failure recovery assistance method and a failure recovery assistance system which further accepts recovery information for recovery from a failure described by the failure status information, and further stores the recovery information in association with the received failure status information. As a result, the recovery information can be added when the search result is not obtained even when the recovery information is searched by the failure status information, and the same failure can be prepared in the future.

Thirdly, there is provided a failure recovery assistance method and a failure recovery assistance system for further transmitting the received recovery information to another system in which a failure has occurred. As a result, the restoration information for restoration is stored and transmitted to the other system in which the failure has occurred, and the restoration information can be promptly presented even if it is not searched.

Fourthly, some of the failures occur at regular time intervals. Therefore, the received failure status information is accumulated and the accumulated failure status information is analyzed to detect the next failure. Provide a disaster recovery assistance system that predicts when an occurrence will occur and outputs the result. As a result, the occurrence of the next failure can be predicted, and countermeasures can be taken in advance.

Fifth, there is provided a failure recovery assistance system which accepts a condition for searching recovery information describing a method of recovering from a stored failure, executes the search, and outputs the result. This allows support center personnel and users of other systems to search for recovery information manually, especially when other systems are not connected to the network due to security issues. Become.

In the present invention, the failure status information is
It can be expressed by one or a combination of error code, error message, error occurrence program file name, error occurrence line number, and stack trace. Also,
The failure status information may include log information of other systems, and pattern matching may be performed when searching for recovery information.

[0012]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to FIGS. The present invention is not limited to these embodiments,
It may be implemented in various forms without departing from the spirit of the invention.

<First Embodiment> FIG. 1 is a functional block diagram of a failure recovery assistance system according to a first embodiment of the present invention. In the present embodiment, the disaster recovery assistance system 100 includes another system 101 and a system monitoring unit 102.
And the failure status information receiving unit 104 and the recovery information storage unit 10
5, a recovery information search unit 106, and a recovery information transmission unit 107
Consists of.

The other system 101 is a system to be monitored by a system monitoring unit 102, which will be described later, and has a function of notifying the occurrence of a failure. The system is not limited to a computer system in particular, and may be a mechanical system having a function of notifying a failure. However, in recent years, failure detection is often performed by a sensor connected to a computer, and in the following description, a system using a computer will be described, but a system consisting only of electronic circuits, a pure machine. The present invention can be applied to a system, a chemical plant, etc. Examples of systems using computers include book management systems, database management systems, online systems, network systems, and computer systems. In addition, in the present invention, the other system 101 is not limited to a specific device, and may include a room or a building to which the above-mentioned system is delivered.

The system monitoring unit 102 is the other system 10
Monitor the failure occurrence of 1. Although the system monitoring unit 102 is illustrated as being independent of the other system 101 in FIG. 1, it may also operate as a part of the other system 101. For example, when the other system is composed of a computer, it may be a separate process that operates on the computer and receives a code indicating the state at the time of termination or termination of a specific process that provides the system function. . Such code can be obtained by interprocess communication or via the operating system. Further, the log output by the process running on a certain computer may be transmitted to another computer, and the process of reading the log on the other computer may be the system monitoring unit 102.

FIG. 2 is a flow chart for explaining the operation of the system monitoring unit 102. First, step S201
At, the system waits until a failure occurs in the other system 101. As described above, wait until you get the code for stopping or exiting the process running on the same computer, or read the log generated by the process running on another computer until you get the content that indicates the occurrence of the failure. Do the wait.

When a failure occurs in the other system 101, the process proceeds to step S202 and the failure status is collected.
For example, the code at the time of stopping or terminating the process is acquired, or the log up to the occurrence of a failure is collected. In particular, information indicating the failure status such as error code, error message, error occurrence program file name, error occurrence line number, stack trace, etc. is collected.
The error code is a number or code defined in advance to classify the fault when another system detects the fault by itself. The error message is a message explaining the situation where the error code occurs. The error occurrence program file name is the file name that describes the part of the program that the process was executing when the error occurred, and the error occurrence line number is the error occurrence program file name error This is the line number where the part of the program that was written is described. A stack trace is a form of history of functions, procedures, and subroutines called by executing a program. In addition to this, the contents of the memory of the process when a failure occurs in the system can be listed as the failure status to be collected. In addition, an operation history of a user who is operating the other system 101 when a failure occurs, and a video tape recording a user's behavior can be cited as an example of what should be collected.

It should be noted that the collection of the failure status is not always the same, but the collection target is changed so that an appropriate failure status is collected according to the failure, for example, the error code. Good.

When the collection of fault conditions is completed, step S
In step 203, the collected failure status is transmitted to the failure status information receiving unit 104 as failure status information.

FIG. 3 shows an example of the failure status information 103 transmitted to the failure status information receiving section 104. In this example, the failure status information is shown by a syntax similar to XML, and "<...>" and "</ ...>" correspond like parentheses and are sandwiched between them. "..." represents the meaning of the part. For example, “<occurrence date and time>” and “</ occurrence date and time>” correspond to each other, and these indicate that the sandwiched portion is the fault occurrence date and time.
In the example of FIG. 3, the error code is 7, the error message is Memory Exhausted, and the error occurrence program file name is alloc. cpp, error line number is 2167, stack trace is main,
Form_Load, allocList, mmAll
It indicates that the function oc was called in order.

The failure status information receiving section 104 receives the failure status information 103 sent from the system monitoring section 102. System monitoring unit 102 and failure status information receiving unit 104
When and are executed by one program, the failure status information 103 may be passed as an argument of a function, procedure, or subroutine that realizes the function of the failure status information receiving unit 104. If the system monitoring unit 102 and the failure status information receiving unit 104 are on different machines,
Failure status information 103 using communication such as the Internet
Will be sent.

The recovery information storage unit 105 stores recovery information that describes a recovery method from a failure. The method for recovering from a failure is a method for recovering a system from a failure that has occurred in another system 101, and the recovery information storage unit 105 stores such a method in association with failure status information and retrieves it from the failure status information. Accumulate so that you can.

FIG. 5 is an example in which the recovery information storage unit 105 stores the recovery method from a failure in association with the failure status information. This example shows the case where an error code is used as the failure status information. For example, the error code 7 indicates that there is not enough memory. Please restart the system. Associated recovery methods. Of course, in addition to the error code, it is also possible to store error messages, error occurrence program file names, error occurrence line numbers, stack traces, etc. as failure condition information in association with each other, and to accumulate these. It can also be stored in association with a combination.

The recovery information searching unit 106 searches the failure status information 103 received by the failure status information receiving unit 104 for the recovery information stored in the recovery information storage unit 105. For example, the failure status information receiving unit 1 according to the format shown in FIG.
When 04 is received, the failure status information is extracted from this format and the recovery information storage unit 105 is searched. For example, when the recovery information storage unit 105 stores the recovery information in the format shown in FIG. 5, an error code is extracted and a search is performed using the error code.

The recovery information transmission unit 107 transmits the search result of the recovery information search unit 106 to the other system 101. In this case, the "search result" means the recovery information storage unit 10
It is the result of searching the recovery information accumulated in 5. Also,
As described above, if the other system 101 interprets the meaning as including the room or building to which the system is delivered, it sends the restoration information as a search result to the facsimile receiving device provided in the room or building, or the room. It also includes automatically calling the person in the building and reading the restoration information by voice synthesis.

FIG. 4 is a flow chart for explaining the operations of the failure status information receiving unit 104, the restoration information storage unit 105, the restoration information search unit 106, and the restoration information transmission unit 107. Step S401 is a failure status information reception step, and waits until the failure status information receiving unit 104 receives the failure status information. When the failure status information is received, the process moves to the search step, which is step S402, and the recovery information search unit 106 searches for the recovery method stored in the recovery information storage unit 105 based on the failure status information. Then, the process proceeds to the transmitting step which is step S403, and the recovery information transmitting unit 107 transmits the retrieved recovery method to the other system 101.

FIG. 15 shows an example of the restoration information transmitted by the restoration information transmission unit 107, and the restoration procedure is presented in the “fault content and restoration procedure” in the “fault content” column. The restoration information transmission unit 107 transmits such a form to the other system 101 by FAX, or the E-MAI.
Send with L. In addition, the user of the other system 101 may be notified by telephone by voice synthesis.

The failure status information receiving unit 104, the restoration information storage unit 105, the restoration information searching unit 106, and the restoration information transmitting unit 107 can be realized by the computer 600 shown in FIG. The computer 600 has a CPU 601 and RA
M (Random Access Memory) 60
2. HDD (Hard Disk Drive) 60
3, the input / output device 604 and the communication interface 607 are mutually connected by a bus. HDD603
The steps of the flowchart shown in FIG.
A program to be executed by 0 is stored, loaded into the RAM 602, and can be executed by the CPU 601. Further, the HDD 603 stores recovery information. The input / output device 604 is composed of an input device such as a keyboard and a mouse and an output device of a display, and provides a function of displaying the status of the computer 600 and performing an operation for maintenance of the computer 600. The communication interface 607 is
Connected to another system 101 via a communication line 608,
When the system monitoring unit 102 operates in the other system 101, failure status information is received, and when the system monitoring unit 102 is realized by the computer 600, log information sent from the other system is received. , Sends a signal to other systems to periodically check the operating status. Also,
In the transmitting step which is step S403, the search result is also transmitted to the other system 101.

According to the failure recovery assistance system in the first embodiment described above, when a failure occurs in the other system 101, the system monitoring unit 102 detects the occurrence of the failure and collects the failure status information. Is sent to the failure status information receiving unit 104, and the recovery information searching unit 106
The recovery method is searched by and the search result is transmitted to the other system 101, so that the recovery method from the failure is promptly presented. Further, it is possible to save the user of the other system 101 and the staff of the support center from having to check the failure status of the other system 101.

Further, the failure recovery assistance system 100 according to the first embodiment includes a failure including a system monitoring step, a failure status information transmitting step, a failure status information receiving step, a recovery information accumulating step, a recovery information searching step, and a recovery information transmitting step. It can be regarded as a system that realizes the recovery assistance method. The system monitoring step is a step of monitoring the occurrence of a failure in another system, the failure status information sending step is a step of collecting and sending failure status information describing a failure that occurred in another system, and the failure status information receiving step is a failure step. The step of receiving the failure status information transmitted in the status information transmitting step is the step of accumulating the recovery information describing the recovery method from the failure in the recovery information accumulating step, and the failure status information receiving step is the recovery information searching step. The recovery information accumulating step is a search step for the recovery information accumulating step received from the failure status information received in step 1, and the recovery information transmitting step is a step for transmitting the search result in the recovery information searching step to another system. That is, the operation of the system monitoring unit 102 to monitor the occurrence of a failure in the other system 101 is a system monitoring step, and the operation of the system monitoring unit 102 to detect the occurrence of a failure in the other system 101 and collect and transmit the failure status It is a failure status information transmitting step. Further, the failure status information receiving step is realized by the failure status information receiving unit 104, the restoration information storage step is realized by the restoration information storage unit 105, the restoration information search step is realized by the restoration information search unit 106, and the restoration information transmission is performed. The steps are realized by the recovery information transmission unit 107.

<Second Embodiment> In the second embodiment, the failure recovery assistance system further includes a failure status information output unit and a recovery information reception unit as compared with the first embodiment. FIG. 7 is a functional block diagram of the disaster recovery assistance system according to the second embodiment.

The fault status information output unit 701 outputs fault status information. For example, when the failure recovery assistance system 100 is realized by the computer 600, the failure status information is output to the input / output device 604.

The recovery information receiving unit 702 receives the recovery information describing the method of recovering from the failure described in the failure status information output by the failure status information output unit 701, and the recovery information accumulating unit 105 stores the failure status information. The recovery information is stored in the recovery information storage unit 105 in association with the recovery information. When the disaster recovery assistance system 100 is realized by the computer 600, the input / output device 604 receives the recovery information, and the HDD
When the same failure status information is received next and a search is performed, the received recovery information is searched for in the 603 stored in association with the failure status information. Therefore, since the recovery information receiving unit 702 receives the recovery information when the search result is not obtained as a result of searching the recovery information by the recovery information searching unit 106, the failure status information output unit 701 determines the failure status. Rather than outputting all the failure status information received by the information receiving unit 104, the failure status information is output when the search result is not obtained as a result of searching the recovery information by the recovery information searching unit 106. Is good. Therefore, in FIG. 7, the failure status information output unit 7
Reference numeral 01 is illustrated as being connected to the recovery information search unit 106 by a line.

FIG. 8 is a flow chart for explaining the operation of the failure recovery assistance system 100 in this embodiment. Step S801 is a failure status information receiving step which is Step S401. Step S802 is a search step which is Step 402.

Step 803 is a judgment step,
The search step determines if the recovery information is available. If available, step S8
04, otherwise, to step S805. Step S804 is a transmission step which is step S403.

Step S805 is an output step in which the failure status information output unit 701 outputs the received failure status information.

In step S806, which is a receiving step, the recovery information receiving unit 702 receives the recovery information describing the method of recovering from the failure described in the failure status information output in step S805, and the recovery information storage unit 1
05 is stored in association with the failure status information.

After execution of step S806, the recovery information received and accumulated in step S806 may be transmitted to the other system 101.

According to the recovery information support system of the second embodiment described above, even if the failure status information for which the recovery method is not stored in the recovery information storage section 105 is received, it is sent to the failure status information output section 701. The recovery information receiving unit 702 receives the recovery information that is output and describes the recovery method from the failure described by the failure status information,
Since the recovery information is stored in the recovery information storage unit 105, the recovery information will be transmitted when the same failure occurs next time. Further, the restoration information is stored in the restoration information storage unit 105 and is transmitted to the other system 101, so that the newly stored restoration information can be presented to the user of the other system 101.

Further, the failure recovery assistance system 100 in the present embodiment realizes the failure recovery assistance method in which the failure recovery assistance method in Embodiment 1 further includes a failure status information output step and a recovery information acceptance step. System. The failure status information output step is a step of outputting the failure status information received in the failure status information reception step, and the restoration information reception step is performed from the failure described in the failure status information output in the failure status information output step. This is a step of receiving the recovery information describing the recovery method of (1) and associating the failure status information with the recovery information and accumulating them. That is, the failure status information output unit 701 realizes the failure status information output step, and the recovery information reception unit 702.
The recovery information reception step is realized by.

<Third Embodiment> FIG. 9 shows a third embodiment of the present invention.
FIG. 3 is a functional block diagram of a disaster recovery assistance system related to the form of FIG. The failure recovery support system according to the first embodiment includes a failure status information storage unit 901, a failure occurrence prediction unit 902,
A failure occurrence prediction output unit 903 is added.

The failure status information storage unit 901 stores the failure status information received by the failure status information receiving unit 104 for each system in which the failure has occurred. “Accumulating by system” means that when the failure status information is stored, the system in which the failure has occurred is added.

The failure occurrence predicting section 902 statistically analyzes the failure status information accumulated by the failure status information accumulating section 901 and predicts the next failure occurrence. "Statistically analyzed"
Is an operation of extracting a feature obtained as a tendency from a large number of accumulated failure situation information.

The failure occurrence prediction output unit 903 outputs the failure occurrence predicted by the failure occurrence prediction unit 902.

Fault recovery assistance system 10 of the present embodiment
When 0 is realized by the computer 600, the failure status information storage unit 901 is realized by a program that stores failure status information in the HDD 603, and the failure occurrence prediction unit 9
02 is realized by a program that statistically processes the failure status information accumulated in the HDD 603, and the failure occurrence prediction output unit 903 uses a program that outputs the result predicted by the failure occurrence prediction unit 902 to the input / output device 604. Will be realized.

FIG. 10 shows an example in which the failure status information is accumulated for each system in which the failure has occurred.
The column indicates the system in which the failure status information describes the failure that occurred.

FIG. 11 is a flow chart for explaining an example of processing in which the failure occurrence prediction unit 902 statistically analyzes the failure status information accumulated by the failure status information accumulation unit 901 and predicts the next failure occurrence.

In step S1101, the accumulated failure status information is grouped by system name and rearranged in order of failure date and time. "Group by system name" means to collect the failure status information with the same system name added, and "Sort in order of failure date and time" means failure status information with the same system name added as failure time and date. Means rearranged in the order of.

In step S1102, the difference in failure date and time between adjacent rows is calculated. By this, the time interval of the failure that occurred in the same system can be obtained.

In step S1103, step S
It is determined whether the time intervals obtained in 1102 are the same. Here, "determining whether or not they are the same" does not necessarily mean that they are exactly the same in seconds, but whether or not they are the same is determined with some error. For example,
If the error is 24 hours, and the time interval is 10 hours, 30 hours, and 14 hours, these 3
The two time intervals are considered to be the same, as they fall within a 24 hour error, which is 12 hours around 12 hours centered around 20 hours. If it is determined that the time intervals are the same, step S
1104, otherwise step S1105
Move to.

In step S1104, since it is determined that the difference is the same, the date and time obtained by adding the time interval of the difference to the last failure date and time is output. Since the time interval includes a certain amount of error, an average value may be used for the time interval to be added. Further, the error may be obtained and the error may be displayed together with the output date and time.

In step S1105, it is considered that the fault occurrence dates and times did not occur at equal intervals due to faults due to various causes. Therefore, in order to narrow down the cause of the fault and obtain the time interval, it is only necessary to group by system name. Instead, they are further grouped by error number and sorted in order of failure date and time.

In step S1106, the difference between the failure dates and times of the adjacent rows is calculated, and the time interval is calculated.

In step S1107, it is determined whether the time intervals are the same as in step S1103. As a result, if it is determined that they are the same, step S11
08, the time and date are added to the last failure date and time and output. At this time, it is possible to output that the grouping is performed by the error number and the fault of which error number has occurred.

If it is determined in step S1107 that the differences are not the same, grouping is performed on items constituting another failure condition information, and time intervals are determined.

As described above, by predicting the occurrence of a failure, the user of another system can be informed in advance of the recovery method, and smooth recovery is possible. In addition, when the cause of the failure is unknown, it is possible to investigate the cause of the failure by dispatching personnel to another system at the date and time when the failure is predicted.

Further, the failure recovery assistance system of the present embodiment realizes a method in which the failure recovery assistance method of the second embodiment includes a failure status information accumulation step, a failure occurrence prediction step, and a failure occurrence prediction output step. System. The failure status information accumulation step is a step of accumulating the failure status information received in the failure status information reception step for each system in which the failure has occurred, and the failure occurrence prediction step is the failure status information accumulated in the failure status information accumulation step. This is a step of statistically analyzing the information and predicting the next failure occurrence. The failure occurrence prediction output step is a step of outputting the failure occurrence predicted in the failure occurrence prediction step. That is, the failure status information storage step is realized by the failure status information storage unit 901, the failure occurrence prediction step is realized by the failure occurrence prediction unit 902, and the failure occurrence prediction output step is realized by the failure occurrence prediction output unit 903.

<Embodiment 4> In the present embodiment, the failure status information includes log information of another system, and the recovery information retrieval unit 106 performs pattern matching on the log information included in the failure status information. Go and restore information storage unit 10
The recovery information accumulated in 5 is searched.

The "log information of another system" is a time-series record of the operation status of the other system. For example, when executing a program, passing a character string to a specific function may output the behavior of the program. A collection of such output may be used as log information. Therefore, the cause of the failure can be identified by examining this log information.

"Pattern matching" is an operation for checking whether or not an expression such as a character string corresponds to what describes a pattern. The pattern is described by a grammar such as a regular expression, and pattern matching is performed by determining whether or not the expression belongs to a set of sentences generated by the grammar. When an expression belongs to the set of sentences generated by the grammar, it is said that the expression matches the pattern. For example, in the case of a regular expression, a finite state automaton corresponding to the regular expression is created, a character string is input to the finite state automaton, and it is determined whether or not the pattern is matched depending on whether or not the acceptance state is reached.

In the present embodiment, the pattern and the recovery information when the log information matches the pattern are stored in association with each other, and when the log information is given, it is checked whether or not the pattern is sequentially matched and the match is performed. The recovery information associated with the selected pattern is transmitted to another system.

As an example of the pattern in the present embodiment, "TextS, 3 lines after the message indicating that the 1044th line of LogicalLog.cpp has been executed,
storage. A message that indicates that the 512th line of the cpp has been executed appears in the regular expression. “LogicalLog.cpp: 1044 [^
\ N] * \ n [^ \ n] * \ n [^ \ n] * \ n [^ \
n] * \ nTextStorage. cpp: 512 "
The pattern is an example. Here, "\ n" represents a line feed character, "[^ \ n]" represents one character other than the line feed, and "[^ \ n] *" represents a character string in which zero or more characters other than the line feed are lined up. .

FIG. 12 is an example of a table in which turns and recovery information when log information matches the pattern are stored in association with each other. The "log pattern" column stores the pattern, and the "response message" column stores recovery information when the pattern matches. For example, when the log information matches the “pattern 1”, the recovery information “the printer is not switched on” is associated.

FIG. 13 shows the operation of the recovery information retrieval unit 106 and the recovery information transmission unit 107 when the log information is received as the failure status information when the pattern and the recovery information are accumulated as shown in FIG. It is a flowchart explaining.

In step S1301, the cursor is set to the line where the first pattern is stored. A cursor points to a row of a table, and the data stored in the row pointed to by the cursor can be obtained.

In this flowchart, since the cursor moves from the first row to the last row of the table,
In step S1302, it is checked whether or not the cursor has passed the last line. If the cursor has passed, the process is terminated, and if the cursor has not passed the last line, step S1302 is performed.
Move to 1303.

In step S1303, the pattern of the line pointed by the cursor is obtained and the pattern is applied to the log information. “Apply” means to check whether the log information matches the pattern.

In step S1304, it is determined whether or not there is a match, and if there is a match, the process moves to step S1305, the recovery information stored in the column of "response message" is obtained, and it is sent to another system 101. Send.

If they do not match, step S130.
6, the cursor is advanced to the next line, and the process proceeds to step S1302.

By performing the pattern matching on the log information in this way, it is possible to specify the failure from the log information output in a large amount and obtain the recovery information.

<Fifth Embodiment> A fifth embodiment is an embodiment in which the failure recovery assistance system is provided with a search acceptance unit and a search result output unit, and is manually operated by a support center person or a user of another system. You can search the recovery information with
In particular, this is an embodiment in which the recovery information can be searched when the other system is not connected to the network due to security problems.

FIG. 14 is a functional block diagram of the disaster recovery assistance system 100 according to the present embodiment. In the first embodiment, the search acceptance unit 1401 and the search execution unit 1402 are added.
And a search result output unit 1403 are added.

The search acceptance unit 1401 is the restoration information storage unit 1
The condition for searching the recovery information accumulated in 05 is accepted. For example, when the recovery information is stored in association with the error number, the error number is accepted as a condition.

The search execution unit 1402 is a search reception unit 140.
The recovery information stored in the recovery information storage unit is searched according to the condition accepted in 1.

The search result output unit 1403 is the search execution unit 1
The recovery information obtained in 402 is output.

The disaster recovery assistance system 100 is a computer 60.
When realized by 0, the search receiving unit 1401
It is realized by a program that receives conditions from the input / output device 604. In this case, the search result output unit 1403
Is realized by a program that outputs recovery information to the input / output device 604. In addition, the computer 600 has a communication line 6
The conditions may be accepted from a terminal connected via 08 or a computer. In this case, the search result output unit 1403 is realized by the program that outputs the recovery information to the terminal or the computer.

As a result, a person at the support center or a user of another system can manually retrieve the recovery information, and particularly when the other system is not connected to the network due to security problems, the recovery information is retrieved. Is possible.

[0078]

As described above, according to the present invention, firstly,
When a failure occurs in the other system 101, the system monitoring unit 102 detects the occurrence of the failure, collects the failure status information, transmits it to the failure status information receiving unit 104, and restores it by the recovery information searching unit 106. A method is searched, and the search result is transmitted to the other system 101, so that a method for recovering from a failure is promptly presented. Further, it is possible to save the user of the other system 101 and the staff of the support center from having to check the failure status of the other system 101.

Second, even if the failure status information for which the recovery method is not stored in the recovery information storage section 105 is received, it is output to the failure status information output section 701 and described by the failure status information. The recovery information describing the recovery method from the failure is received by the recovery information receiving unit 702 and accumulated in the recovery information accumulating unit 105, so that the recovery information will be transmitted when the same failure occurs next time. In addition, the restoration information is stored in the restoration information storage unit 105 and transmitted to the other system 101,
It is possible to present the newly accumulated restoration information to the user of the other system 101.

Third, by predicting the occurrence of failure,
Users of other systems can be notified in advance of the recovery method, and smooth recovery is possible. In addition, when the cause of the failure is unknown, it is possible to investigate the cause of the failure by dispatching personnel to another system at the date and time when the failure is predicted.

Fourthly, by performing pattern matching on the log information, it is possible to specify a failure from a large amount of output log information and obtain recovery information.

Fifth, a person at the support center or a user of another system can manually retrieve the recovery information,
In particular, the recovery information can be retrieved when the other system is not connected to the network due to security problems.

[Brief description of drawings]

FIG. 1 is a functional block diagram of a disaster recovery assistance system according to a first embodiment.

FIG. 2 is a flowchart illustrating the operation of a system monitoring unit.

FIG. 3 is a diagram showing an example of failure status information.

FIG. 4 is a flowchart illustrating the operation of the failure recovery assistance system according to the first embodiment.

FIG. 5 is a diagram showing an example of accumulated recovery information.

FIG. 6 is a functional block diagram of a computer that realizes a disaster recovery assistance system.

FIG. 7 is a functional block diagram of the disaster recovery assistance system according to the second embodiment.

FIG. 8 is a flowchart illustrating the operation of the failure recovery assistance system according to the second embodiment.

FIG. 9 is a functional block diagram of the disaster recovery assistance system according to the third embodiment.

FIG. 10 is a diagram showing an example of failure status information accumulated by adding a system name.

FIG. 11 is a flowchart illustrating an example of processing for statistically analyzing failure status information and predicting the occurrence of the next failure.

FIG. 12 is a diagram showing an example of a table in which patterns and response messages are associated and accumulated.

FIG. 13 is a flowchart illustrating the operation of the disaster recovery assistance system according to the fourth embodiment.

FIG. 14 is a functional block diagram of the disaster recovery assistance system according to the fifth embodiment.

FIG. 15 is a diagram showing an example of restoration information transmitted to another system.

[Explanation of symbols]

100 disaster recovery assistance system 101 Other system 102 System monitoring unit 103 Failure status information 104 Failure status information receiver 105 Recovery information storage unit 106 Recovery Information Search Section 107 Recovery Information Transmission Unit

Continued front page    F term (reference) 5B042 GA12 JJ02 KK12 KK17 MA09                       MC07 MC12 MC16 MC17 MC37                 5B085 AC11 AC16 CA04 CE10

Claims (10)

[Claims] 1. A system monitoring step for monitoring the occurrence of a failure in another system, a failure status information sending step for collecting and sending failure status information describing a failure occurring in the other system, and a failure status information sending step. A failure status information receiving step of receiving the failure status information transmitted, a recovery information accumulation step of accumulating recovery information describing a recovery method from the failure, and a failure status information received in the failure status information receiving step from the failure status information A failure recovery assistance method comprising: a recovery information search step of searching for recovery information stored in the recovery information storage step; and a recovery information transmission step of transmitting the search result of the recovery information search step to the other system. 2. A failure status information output step for outputting the failure status information received at the failure status information receiving step, and a recovery method from a failure described by the failure status information output at the failure status information output step. The failure recovery assistance method according to claim 1, further comprising: a recovery information receiving step of receiving recovery information describing the above, and storing the failure status information and the recovery information in association with each other. 3. A failure status information accumulating step of accumulating the failure status information received in the failure status information receiving step for each system in which the failure has occurred, and failure status information accumulated in the failure status information accumulating step. The failure recovery according to claim 1, further comprising: a failure occurrence prediction step of statistically analyzing and predicting the next failure occurrence; and a failure occurrence prediction output step of outputting the failure occurrence predicted in the failure occurrence prediction step. How to help. 4. A failure status information receiving section for receiving failure status information sent from a system monitoring section that monitors the occurrence of a failure in another system and describing a failure that has occurred in the other system, and a recovery method from the failure. Recovery information storage unit that stores recovery information, a recovery information search unit that searches the recovery information stored in the recovery information storage unit from the failure status information received by the failure status information reception unit, and the recovery information A failure recovery assistance system comprising: a recovery information transmission unit for transmitting a search result from a search unit to the other system. 5. A failure status information output unit that outputs the failure status information received by the failure status information receiving unit, and a recovery method from a failure described by the failure status information output by the failure status information output unit. 5. The disaster recovery assistance system according to claim 4, further comprising: a recovery information receiving unit that receives recovery information describing the above, and stores the failure status information and the recovery information in the recovery information storage unit in association with each other. 6. The failure recovery assistance system according to claim 5, wherein the recovery information transmitting unit transmits the recovery information received by the recovery information receiving unit to the other system. 7. A failure status information accumulating section for accumulating the failure status information received by the failure status information receiving section for each system in which the failure has occurred, and statistics of the failure status information accumulated by the failure status information accumulating section. 5. The failure recovery assistance according to claim 4, further comprising: a failure occurrence prediction unit that predicts a failure occurrence next time, and a failure occurrence prediction output unit that outputs the failure occurrence predicted by the failure occurrence prediction unit. system. 8. The failure status information is one or a combination of two or more of an error code, an error message, an error occurrence program file name, an error occurrence line number, and a stack trace in a failure occurred in another system. The disaster recovery assistance system according to claim 7. 9. The failure status information includes log information of another system, and the recovery information search unit performs pattern matching on the log information included in the failure status information and stores the pattern information in the recovery information storage unit. The disaster recovery assistance system according to any one of claims 4 to 7, which searches for recovery information. 10. A search acceptance unit that accepts a condition for retrieving the recovery information accumulated in the restoration information accumulation unit, and a search for the restoration information accumulated in the restoration information accumulation unit according to the condition accepted by the search acceptance unit. The failure recovery assistance system according to claim 4, further comprising a search execution unit that performs the search and a search result output unit that outputs the recovery information obtained by the search execution unit.