JP2009026052A - Fault monitoring system, manager device, fault monitoring method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable a manager to quickly recognize the type of countermeasures for recovery from a failure in an agent device. <P>SOLUTION: The state of a state group defined for every type of countermeasures for recovery from failure is displayed on a display device 14 in a manager device 1, and classification definition for classifying messages into state groups related therewith is registered in a classification definition storage part 13. When receiving the messages showing the states from an agent device 2, a message classification means 11 classifies the messages into one or more state groups according to the classification definition registered in the classification definition storage part 13, and a state display changing part 12 changes the state of the state group into which the message has been classified by the message classification means 11 among the states of the state groups displayed on the display device 14. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a failure monitoring technique in which a manager device monitors the state of an agent device based on a message sent from the agent device, and more particularly, how to recover a failure when a failure occurs in the agent device. The present invention relates to a failure monitoring technique that enables a manager of a manager device to recognize in a short time whether or not to cope with various types of countermeasures.

  In order for the manager device to monitor the state of the agent device, the agent device sends a message indicating the state of the agent device to the manager device, and the manager device displays the message sent from the agent device. Traditionally done. However, by simply displaying the message sent from the agent device, the manager of the manager device itself determines whether or not a failure has occurred in the agent device based on the displayed message. When it is determined, it is necessary to determine a countermeasure, and thus there is a problem that the burden on the administrator is increased, and there is a problem that a high level of expertise is required.

  In order to solve such problems, the following techniques have been proposed (see, for example, Patent Documents 1 and 2).

  In Patent Document 1, a manager device is provided with a database in which a guide message indicating a failure recovery method is registered in association with a message ID. When a message is sent from an agent device, the database is searched by the message ID. The searched guide message is displayed.

  Further, in Patent Document 2, the manager device is provided with a database in which associated contact addresses and related documents relating to failures are registered in the message ID, and when a message is sent from the agent device, it is registered in association with the message ID. I am trying to send related documents to my contacts.

JP 2004-178296 A JP 2005-276042 A

  According to the techniques described in Patent Literatures 1 and 2, when a message indicating the occurrence of a failure is sent from the agent device, a guide message and related documents related to the message are automatically presented, so that management is possible. The burden on the workers is reduced and advanced expertise is no longer required.

  However, with the techniques described in Patent Documents 1 and 2, it is impossible to determine what type of countermeasure should be implemented unless the presented guide message or related document is read. There is a problem that it takes time to start the work.

(Object of invention)
Therefore, an object of the present invention is to make it possible to recognize in a short time what type of countermeasures should be implemented in order to recover from a failure when a failure occurs in an agent device. The purpose is to shorten the time required to start.

The first fault monitoring system according to the present invention is:
In a fault monitoring system comprising an agent device and a manager device,
The agent device is
Comprising monitoring means for transmitting a message indicating the status of the own device to the manager device;
The manager device is
A display device that displays the status of the status group defined for each type of countermeasure to recover from the failure;
A classification definition storage unit in which a classification definition for classifying the message into the state group to which the message relates is registered;
Classification means for classifying messages received from the agent device into one or more state groups according to the classification definition;
State display change means for changing the state of the state group in which the message is classified by the classification means among the states of the state group displayed on the display device is provided.

The first manager device according to the present invention includes:
A display device that displays the status of the status group defined for each type of countermeasure to recover from the failure;
A classification definition storage unit in which a classification definition for classifying a message into the state group to which the message is related is registered;
Classification means for classifying a message indicating the state of the agent device received from an agent device into one or more state groups according to the classification definition;
State display change means for changing the state of the state group in which the message is classified by the classification means among the states of the state group displayed on the display device is provided.

A first failure monitoring method according to the present invention includes:
A display device that displays the state of a state group defined for each type of coping method for recovering a failure, and a category definition storage unit in which a category definition for classifying a message into the state group to which the message relates is registered A step of classifying a message indicating the state of the agent device received from the agent device into one or more state groups according to the classification definition;
The computer includes a state display changing step of changing a state of the state group in which the message is classified by the classification step among the states of the state group displayed on the display device.

The first program according to the present invention is:
A display device that displays the state of a state group defined for each type of coping method for recovering a failure, and a category definition storage unit in which a category definition for classifying a message into the state group to which the message relates is registered A computer with
Classification means for classifying a message indicating the state of the agent device received from an agent device into one or more state groups according to the classification definition;
Among the states of the state group displayed on the display device, the state group is made to function as a state display changing unit that changes the state of the state group into which the message is classified by the classification unit.

  According to the present invention, when a failure occurs in the agent device, it is possible to recognize in a short time what type of countermeasure should be performed to recover from the failure, so that the recovery operation is started. Can be shortened.

  Next, the best mode for carrying out the present invention will be described in detail with reference to the drawings.

[First embodiment]
FIG. 1 is a block diagram of a first embodiment of a failure monitoring system according to the present invention, which comprises a manager device 1 that functions as a management device and an agent device 2 that functions as a monitored device, both of which are the Internet and the like. Are connected to each other via a network (not shown). Although only one agent device 2 is shown in FIG. 1, a plurality of agent devices 2 may be used.

  The agent device 2 includes monitoring means 21 that transmits a message indicating the state of the own device to the manager device 1. The message is composed of, for example, a message ID, a message body, and a resource. The resource is information indicating the source of the message. For example, a program name, a process name, a device name, and the like are set.

  The manager device 1 includes a message classification unit 11, a status display change unit 12, a classification definition storage unit 13, and a display device 14 such as an LCD.

  In the category definition storage unit 13, a category definition for classifying the message sent from the agent device 2 into a state group to which the message is related is registered. A state group is a group defined for each type of countermeasure for recovering from a failure.

  FIG. 2 is a diagram illustrating an example of the contents of the classification definition storage unit 13 in which classification conditions and a state group that is a classification destination of a message that satisfies the classification conditions are registered as the classification definition. In the example of the figure, a message with message ID = 0001 (message indicating the occurrence of a system error) is classified into a state group with group number = T1 (the type of countermeasure is system restart), and a message with message ID = 0043. Indicates that it is classified into the state group of group number T2 (the type of countermeasure is the restart of subsystem A). In addition, the message with message ID = 0050 has two status groups, group number = T3 (reaction type is APa) and group number = T4 state group (reaction type is APb). It is classified into one state group. In the example of FIG. 2, the messages are classified based on the message ID, but other methods such as classifying the messages based on the character strings included in the message body may be employed. For example, in place of the classification condition “ID = 0001”, the classification condition “TEXT =“ system error ”” or the like may be used. The state group with the group number “Tα” may be referred to as a state group Tα.

  The message classification unit 11 has a function of grouping the messages sent from the agent device 2 according to the classification definition registered in the classification definition storage unit 13. For example, if the content of the classification definition storage unit 13 is as shown in FIG. 2 and the message ID of the message sent from the agent device 2 is “0043”, the second classification condition “ID = 0043” is set. Since the message is satisfied, the message is classified into the state group having the group number “T2”.

  On the display device 14, a state list display screen showing the state of each state group is displayed. Here, the state of the state group indicates whether or not the agent device 2 needs to implement a countermeasure for the type assigned to the state group. In other words, the state of the state group indicates whether or not a failure in the agent device 2 has to be implemented for the type of countermeasure assigned to the state group. In this embodiment, the state group state is expressed by two states, “normal” and “abnormal”. The status “normal” indicates that it is not necessary to implement the type of action assigned to the state group, and the state “abnormal” requires the type of action assigned to the state group. Indicates that

  FIG. 3A is a diagram showing an example of the state list display screen 141, in which the state and the type of countermeasure are displayed in association with the group number of the state group. FIG. 3A shows the state list display screen 141 in the initial state. In the initial state, the states of all the state groups are all “normal”. That is, the agent device 2 indicates that no failure has occurred.

  The status display changing means 12 changes the status of each status group displayed on the status list display screen 141 from “normal” to “abnormal” as the status of the status group that has been classified by the message classification means 11. The function to change to. When changing the state of the state group, display attributes such as display color and brightness may be changed together.

  The manager device 1 can be realized by a computer, and when realized by a computer, for example, is as follows. A disk, a semiconductor memory, and other recording media recording a program for causing the computer to function as the manager device 1 are prepared, and the computer is caused to read the program. The computer controls the operation of the computer according to the read program, thereby realizing the message classification unit 11 and the status display change unit 12 on the computer.

[Description of Operation of First Embodiment]
Next, the operation of this embodiment will be described in detail.

  The monitoring unit 21 in the agent device 2 transmits a message indicating the state of the own device 2 to the manager device 1.

  When the message classification means 11 in the manager device 1 receives the message from the agent device 2 (YES in step S41 in FIG. 4), the message classification means 11 applies the above message to the corresponding state group according to the classification definition registered in the classification definition storage unit 13. And the group number of the state group is passed to the state display changing unit 12 (step S42). As a result, the state display changing unit 12 changes the state of the state group indicated by the group number passed from the message classification unit 11 from “normal” among the states of the state groups displayed on the state list display screen 141. Change to “abnormal” (step S43).

  For example, if the contents of the classification definition storage unit 13 are as shown in FIG. 2 and the message ID of the message sent from the agent device 2 is “0050”, the message classification unit 11 causes the classification definition storage unit 13 to The above messages are grouped into state groups with group numbers “T3, T4” according to the third classification condition registered in, and the state display changing means 12 determines the state of the state group with group numbers “T3, T4”. Since the state is changed from “normal” to “abnormal”, the state list display screen 141 is changed from the one shown in FIG. 3A to the one shown in FIG. By making the change in this way, the administrator can recognize at a glance that a failure requiring restart of the application programs APa and APb has occurred in the agent device 2, so that the failure can be quickly resolved. It becomes possible to cope with. In addition, when changing the state group state, if the display attributes such as the display color are also changed, the state group whose state has been changed can be more reliably and easily recognized.

[Effect of the first embodiment]
According to the present embodiment, when a failure occurs in the agent device 2, it is possible to recognize in a short time what kind of countermeasure should be performed in order to recover the failure. The time required to do so can be shortened. The reason is that the state of the state group defined for each type of countermeasure to recover from the failure is displayed on the display device 14, and the message classification means 11 sends the message sent from the agent device 2 to the message. The status group is classified into the status groups related to the message, and the status display changing unit 12 changes the status group status classified by the message classifying unit 11 among the status group statuses displayed on the display device 14. Because it is.

[Second Embodiment]
Next, a second embodiment of the failure monitoring system according to the present invention will be described in detail. In this embodiment, with respect to a state group whose state has been changed to “abnormal”, the state of the state group can be automatically returned to “normal” when a countermeasure for the type assigned to the state group is implemented. It is characterized by that. Furthermore, in this embodiment, regarding the status group whose status has been changed to “abnormal”, it is possible to present more detailed countermeasures and the like to the administrator based on the combination of messages grouped into the status group. It is characterized by that.

[Description of Configuration of Second Embodiment]
FIG. 5 is a block diagram showing a configuration example of the second embodiment of the failure monitoring system according to the present invention, which is composed of a manager device 3 functioning as a management device and an agent device 4 functioning as a monitored device, Both are connected to each other via a network such as the Internet (not shown).

  The agent device 4 includes a monitoring unit 41 and a control unit 42. The monitoring means 41 has the same function as the monitoring means 21 in the first embodiment. The control means 42 has a function of executing a command according to the countermeasure sent from the manager device 3.

  The manager device 3 includes a message collection unit 301, a message classification unit 302, a knowledge information storage unit 303, a state display change unit 304, a handling history display unit 305, a knowledge information registration unit 306, and a command transmission unit 307. , A message storage unit 308, a classification definition storage unit 309, a status table 310, a display device 311 such as an LCD, and an input device 312 such as a keyboard.

  The message collecting unit 301 has a function of adding the current time to a message sent from the agent device 4 and registering it in the message storage unit 308, and a function of passing the message sent from the agent device 4 to the message classification unit 302. Have.

  In the category definition storage unit 309, a category definition for classifying a message into a status group to which the message is related is registered, and whether the status of the status group to be classified is set to “normal” or “abnormal”. Is registered. If the message to be classified is a failure message (message indicating that a failure has occurred), information indicating that the status of the status group at the classification destination is set to "abnormal" is registered, and the classified message is recovered. In the case of a message (a message indicating that an action has been taken to recover from a failure), information indicating that the state of the state group at the classification destination is set to “normal” is registered.

  FIG. 6 is a diagram illustrating an example of the contents of the classification definition storage unit 309. In association with the classification definition number, the classification condition, the group number of the state group that is the classification destination of the message that satisfies the classification condition, and the classification destination The status group status is registered. The classification definition includes a classification condition and a group number.

  For example, the information corresponding to the classification definition number B1 in FIG. 6 is that the message with the message ID “0001” (failure message indicating the occurrence of the system error) is classified into the state group T1 with the group number “T1”. When sent, it indicates that the state of the state group T1 is changed to “abnormal”. The information corresponding to the classification definition number B2 includes a message with a message ID “0002” (a recovery message indicating that the system processing has been resumed due to the action taken for failure recovery), and the group number “ When the message is sent to the state group of “T1, T2, T3, T4”, it indicates that the state of the state group T1, T2, T3, T4 is changed to “normal”. In the example of FIG. 6, the messages are classified based on the message ID, but other methods such as classification based on the character strings included in the message may be employed.

  The message classification unit 302 determines a state group to be a classification destination of the message passed from the message collection unit 301 according to the classification definition registered in the classification definition storage unit 309, and the state of the state group to which the message is classified Is obtained from the classification definition storage unit 309, the message ID of the message, the group number of the state group determined as the classification destination, the state of the state group determined as the classification destination, and the classification definition used in determining the classification destination And a function for transferring the classification definition number to the status display changing means 304.

  FIG. 7 is a diagram showing the correspondence between state groups and messages, and each message is classified into state groups connected by arrows. As shown in the figure, some messages are classified into a plurality of state groups. Although not shown in the figure, there are messages that are not classified into any state group. Each message shown on the left side of the figure is a failure message that sets the classification destination state to "abnormal", and each message shown on the right side is a recovery message that sets the classification destination state to "normal". .

  In the state table 310, for each state group, a state indicating whether or not the agent apparatus 4 must implement a countermeasure assigned to the state group, and a message ID of a message classified into the state group And the classification definition number of the classification definition used when classifying the message into the state group are registered.

  FIG. 8 is a diagram showing an example of the contents of the state table 310, in which the state group state, message ID, and classification definition number are registered in association with the group number of the state group. For example, the first line in FIG. 8 indicates that the agent apparatus 4 does not need to implement the countermeasure assigned to the state group with the group number “T1”. Further, for example, the fourth line indicates that the agent apparatus 4 needs to implement the countermeasure assigned to the state group with the group number “T4”. Further, it is indicated that the message with the message ID “0050” is classified into the state group T4, and the classification definition number of the classification definition used when classifying the message is “B4”.

  As shown in FIG. 9, on the display device 311, a status list display screen 311 a is displayed by the status display changing unit 304, and a handling history display screen 311 b is displayed by the handling history display unit 305.

  The status display changing unit 304 has the following functions.

A function for displaying the contents of the status table 310 on the status list display screen 311a.
A function of changing the contents of the state table 310 according to the group number, the state group state, the message ID, and the classification definition number passed from the message classification unit 302. More specifically, when the state group state passed from the message classification unit 302 is “normal”, the state group state registered in association with the group number passed together with the state group state is “normal”. And the message ID and classification definition number registered in association with the group number are deleted. When the state group state passed from the message classification unit 302 is “abnormal”, the state group state registered in association with the group number passed with the state group is changed to “abnormal”. At the same time, the message ID and classification definition number delivered together are additionally registered in the status table 310.
A function of passing the group number of the state group in which the state is “abnormal” and the message ID of the message classified into the state group to the handling history display unit 305.

  In the knowledge information storage unit 303, an administrator's comment indicating a specific countermeasure taken by the administrator for a failure that occurred in the past, and a failure name given to the failure by the administrator, The message is registered in association with the state group into which the message is classified when the failure occurs and the group of messages classified into the state group.

  FIG. 10 is a diagram illustrating an example of the contents of the knowledge information storage unit 303, in which a failure name and a comment are registered in association with a combination of a group number and a message ID. The first comment in the example in the figure is an administrator when a failure has occurred in which messages with message IDs “6012”, “6023”, and “6005” have been classified into the state group with the group number “T20” in the past. Shows the specific countermeasures implemented by. Also, the second comment in the example in the figure shows that when a failure has occurred in which messages with message IDs “9056”, “14002”, and “5011” have been classified into the state group with group number “T30” in the past. It shows the specific measures taken by the administrator.

  The response history display unit 305 searches the knowledge information storage unit 303 for a comment and a failure name registered in association with the combination of the group number of the state group and the message ID passed from the state display change unit 304. In addition to being displayed on the history display screen 311b, a message corresponding to the message ID is retrieved from the message storage unit 308 and displayed on the handling history display screen 311b.

  The knowledge information registration unit 306 associates the comment and the failure name input from the input device 312 by the administrator with the combination of the group number and the message ID input from the input device 312 by the administrator, and the knowledge information storage unit 303. It has a function to register with.

  The command transmission unit 307 has a function of transmitting a command input from the input device 312 to the agent device 4 in order for the administrator to recover the failure of the agent device 4.

  The manager device 3 can be realized by a computer. When the manager device 3 is realized by a computer, for example, the following is performed. A disk, a semiconductor memory, and other recording media recording a program that causes the computer to function as the manager device 3 are prepared, and the computer reads the program. The computer controls its own operation according to the read program, so that a message collection unit 301, a message classification unit 302, a status display change unit 304, a handling history display unit 305, a knowledge information registration unit 306, and A command transmission unit 307 is realized.

[Description of Operation of Second Embodiment]
Next, the operation of this embodiment will be described in detail.

  Now, it is assumed that the monitoring unit 41 in the agent device 4 sequentially transmits the messages a1 to a5 shown in FIG. Messages a1 to a4 are classified as failure messages, and message a5 is classified as a recovery message.

  When the message collection unit 301 in the manager device 3 receives the message a1 (YES in step S1201 in FIG. 12), it adds the current time to the message storage unit 308 and registers the message a1 in the message classification unit 302. Pass (step S1202).

  As a result, the message classification unit 302 determines a state group to be the classification destination of the message a1 according to the classification definition registered in the classification definition accumulation unit 309, and further from the classification definition accumulation unit 309 to the state group to which the message is classified. Are acquired (steps S1203 and S1204). After that, the message classification unit 302 sends the message ID “6012” of the message a1, the group number of the state group that is the classification destination (for example, “T20”), and the state of the state group T20 that is the classification destination of the message (for example, ("Abnormal") and the classification definition number (for example, "B10") of the classification definition used when determining the classification destination are output to the status display changing unit 304 (step S1205).

  As a result, the status display changing means 304 updates the contents of the status table 310 according to each information passed from the message classification means 302 (step S1206). Specifically, as shown in FIG. 13A, the state of the state group registered in association with the group number “T20” is changed to “abnormal” and is associated with the group number “T20”. The message ID “6012” and the classification definition number “B10” are additionally registered.

  Thereafter, the status display changing unit 304 changes the display content of the status list display screen 311a to indicate the content of the updated status table 310 (step S1207). As a result, since the state of the state group T20 displayed in association with the group number “T20” is changed to “abnormal”, the administrator uses the agent device 4 to determine the countermeasure assigned to the state group T20. You can immediately recognize that you have to do it. When changing the state of the state group, the display attributes such as the display color may be changed together as in the first embodiment. Further, in step S1207, a process of passing the group number “T20” of the state group whose state has been changed and the message ID “6012” of the message classified into the state group T20 to the handling history display unit 305 is also performed.

  Thereby, the handling history display unit 305 performs the handling history display process shown in FIG. 14 (step S1208). First, the handling history display unit 305 searches the knowledge information storage unit 303 using the group number “T20” and the message ID “6012” passed from the state display change unit 304 as keys (step S1401 in FIG. 14). If there is a comment and a failure name registered in association with the key (YES in step S1402), the comment and the failure name and the message with the message ID “6012” are displayed on the handling history display screen 311b. It is displayed (step S1403). The message is input from the message storage unit 308 and displayed. On the other hand, if the corresponding information is not registered (NO in step S1402), the process ends. Now, for example, if the content of the knowledge information storage unit 303 is as shown in FIG. 10, and only the information corresponding to the message ID “6012, 6023, 6005” is registered for the group number “T20”, the step The determination result in S1402 is NO, and no display on the handling history display screen 311b is performed.

  Thereafter, when the message a2 shown in FIG. 11 is received, the same processing as when the message a1 is received is performed.

  Further, when the message a3 is received (step S1201 is YES), the same processing as when the messages a1 and a2 are received is performed in steps S1202 to S1206. As a result, the contents of the status table 310 are as shown in FIG.

  Thereafter, the status display changing unit 304 changes the display content of the status list display screen 311a to indicate the content of the updated status table 310, and further, the group number “T20” of the status group whose status has been changed and its status The message IDs “6012, 6023, 6005” of the messages classified into the group are passed to the handling history display unit 305 (step S1207). The administrator can recognize that the messages with the message IDs “6012, 6023, 6005” are classified in the state group T20 based on the display contents of the state list display screen 311a. That is, it can be recognized that the message with the message ID “6012, 6023, 6005” is a related message.

  When the group number and the message ID are passed, the handling history display unit 305 performs a handling history display process shown in FIG. 14 (step S1208). First, the response history display unit 305 searches the knowledge information storage unit 303 using the group number “T20” and the message IDs “6012, 6023, 6005” passed from the state display change unit 304 as keys (step S1401). In this case, as illustrated in FIG. 10, the knowledge information storage unit 303 stores the failure name “process P1 stop by an external factor” and the comment “in correspondence with the group number“ T20 ”and the message IDs“ 6012, 6023, 6005 ”. 2005/12/10 16:55 Since the administrator X process P1 has registered an operation error, etc., as shown in FIG. 15, the trouble history and message ID are “6012, 6023, 6005 "message and comment are displayed.

  When the administrator recognizes a specific countermeasure based on a comment input by the administrator in the past displayed on the countermeasure history display screen 311b, for example, the application sends an application to the command transmission unit 307 from the input device 312. A command for restarting the program A1 is input. This command is sent to the agent device 4, and the control means 42 in the agent device 4 restarts the application program A1 according to the command.

  When the application program A1 is restarted, the monitoring unit 41 in the agent device 4 sequentially transmits messages a4 and a5 shown in FIG. 11A to the manager device 3. In the category definition storage unit 309, the message ID “6002” of the message a4 is registered as a classification condition, and “T20” and “abnormal” are registered as the group number and state of the classification destination state group, respectively. Suppose that Further, it is assumed that the message ID “6001” of the message a5 is registered as a classification condition in the classification definition accumulation unit 309, and “T20” and “normal” are registered as the group number and state of the classification destination, respectively. .

  When the manager device 3 receives the message a4, the manager device 3 performs the same processing as when the messages a1 and a2 are received (steps S1201 to S1208 in FIG. 12). When the message a5 is received, the state of the state group acquired in step S1204 in FIG. 12 is “normal”. Therefore, in step S1206, the state registered in the state table 310 in association with the group number “T20”. A process of changing the information to “normal” is performed, and a process of deleting the message ID and the classification definition number registered in association with the group number “T20” (an erase process) is performed. As described above, when the message a5 occurs, the state of the state group is automatically set to “normal” and the message ID and the classification definition number are deleted, so that a certain administrator restarts the application program A1. After the above action is taken, other managers will not take the same action again.

  Upon confirming that the state of the agent device 4 is normal, the administrator registers the current countermeasure and the cause of failure found from the log as a comment in the knowledge information storage unit 303 as necessary.

  When registering a comment in the knowledge information storage unit 303, the administrator activates the knowledge information registration unit 306 using the input device 312. As a result, the knowledge information registration unit 306 displays a comment registration screen 161 as shown in FIG. The comment registration screen 161 includes a group number input field 162, a message ID input field 163, a failure name input field 164, a comment input field 165, and a registration button 166.

  Now, for example, it is assumed that, depending on the situation, the administrator determines that only the messages a1 and a2 are generated and the message a3 is not generated. That is, the comment is displayed on the response history display screen 311b when the messages a1, a2, and a3 are classified into the state group, not when the messages a1, a2, and a3 are classified into the state group with the group number “T20”. Suppose that it is necessary. In this case, the administrator sets “T20” in the group number input field 162, the message IDs “6012, 6023” in the message a1 and a2 in the message ID input field 163, and “external factor” in the failure name input field 164. After inputting the comment in the comment input field 165, the registration button 166 is operated. Thereby, the knowledge information registration unit 306 registers each information input by the administrator in the knowledge information storage unit 303 in association with each other.

  Next, an operation when the messages b1 to b4 shown in FIG. 11B are transmitted from the monitoring unit 41 in the agent device 4 to the agent device 3 will be described. The classification definition storage unit 309 registers a classification definition for classifying the messages b1 to b4 into the status group with the group number “T30”. When the messages b1 to b3 are generated, the status of the status group is set to “abnormal”. ", When the message b4 occurs, it is assumed that information for setting the state of the state group to" normal "is registered. Further, as shown in FIG. 10, it is assumed that only information related to message IDs “9056, 14002, 5011” is registered in knowledge information storage unit 303 with respect to group number “T30”.

  When manager device 3 receives message b1 (YES in step S1201 in FIG. 12), manager device 3 performs the same processing as when message a1 is received (steps S1202 to 1208). However, since the message b1 is classified into the state group of the group number “T30”, the message b1 corresponds to the group number “T30” among the state information of each state group displayed on the state list display screen 311a. Only the thing is changed to “abnormal” (step S1207).

  When the message b2 is received, the manager device 3 performs the same process as when the message b1 is received. When the message b3 is received, in steps S1202 to S1207, the same processing as when the messages b1 and b2 are received is performed, and in step S1208, the failure name, event occurrence status, and comment are dealt with as shown in FIG. It is displayed on the history display screen 311b.

  The administrator sees this display and transmits a command for restarting the OS to the agent device 4. The control means 42 in the agent device 4 activates the OS according to the command sent from the manager device 3, whereby the monitoring means 41 transmits the message b 4 to the manager device 3.

  When the message b4 is sent, the manager device 3 performs the same processing (erasing process) as when the message a5 is sent.

  Thereafter, when the administrator confirms that the state of the agent device 4 is normal, the administrator registers a comment or the like in the knowledge information storage unit 303 by the knowledge information registration unit 306 as necessary.

  Next, an operation when the messages c1 to c3 shown in FIG. 11C are sequentially sent from the monitoring unit 41 in the agent device 4 will be described. The classification definition storage unit 309 registers a classification definition for classifying the messages c1 to c3 into the status group of the group number “T40”. When the messages c1 to c3 are generated, the status of the status group is set to “abnormal”. Suppose that the information to be registered is registered. Also, it is assumed that no information related to the group number “T40” is registered in the knowledge information storage unit 303. Further, it is assumed that the state group with the group number “T40” is a state group that is not automatically deleted.

  When manager device 3 receives message c1, manager device 3 performs the same processing as when message a1 is received (steps S1202 to S1208 in FIG. 12). However, since the message c1 is classified into the state group with the group number “T40”, only the state corresponding to the group number “T40” among the states of the state group displayed on the state list display screen 311a is displayed. It is changed to “abnormal” (step S1207). The manager device 3 performs the same processing as when the message c1 is received when the messages c2 and c3 are received.

  Since no information related to the group number “T40” is registered in the manager information storage unit 303, even if the messages c1 to c3 are received, nothing is displayed on the handling history display screen 311b.

  Thereafter, it is assumed that the administrator conducts an investigation and finds that the switch to which the hosts H2, H3, and H4 are connected has failed. When the administrator replaces the switch and confirms that the failure has been recovered, the status information registered in association with the group number “T40” in the status information registered in the status table 310 is manually set to “normal”. And the message ID and classification definition number registered in association with the group number “T40” are deleted. Thereafter, the administrator uses the knowledge information registration means 306 to comment that “when a failure occurs in the hosts H2, H3, and H4, check the switches common to these hosts” with the group number “T40”. And registered in the knowledge information storage unit 303 in association with the message identifiers “4004, 4005, 4006” of the messages c1 to c3.

[Effect of the second embodiment]
According to the present embodiment, in addition to the effects obtained in the first embodiment, the following effects can be obtained.

  In this embodiment, when the message classified by the message classification means 302 is a recovery message, the state of the message classification destination is returned to “normal”, so that a certain administrator can recover the failure. After taking the action, other managers will not take another action to recover from the failure.

  Also, in this embodiment, the knowledge information storage unit 303 in which comments indicating a specific countermeasure or the like are registered in association with the combination of the state group and the message, and the state group in which the message is classified by the message classification unit 302 And a response history display unit 306 for searching the knowledge information storage unit 303 for a comment registered in association with the combination of the message and the message classified into the state group, and displaying the searched comment on the display device 311. Therefore, it is possible to present an appropriate comment to the administrator regarding the failure that occurred this time.

  The present invention is preferably applied to a failure monitoring system in which a manager device manages the state of an agent device via a network.

It is a block diagram which shows the structural example of the 1st Example of the failure monitoring system concerning this invention. It is a figure which shows the example of the content of the classification definition storage part 13. FIG. It is a figure which shows an example of the state list display screen. It is a flowchart which shows the process example of a 1st Example. It is a block diagram which shows the structural example of the 2nd Example of the failure monitoring system concerning this invention. It is a figure which shows the example of the content of the classification definition storage part 309. It is a figure which shows the correspondence of a message and a state group. It is a figure which shows the example of the content of the state table. 11 is a diagram showing a display example of the display device 311. FIG. 6 is a diagram illustrating an example of the contents of a knowledge information storage unit 303. FIG. 6 is a diagram illustrating an example of a message sent from the agent device 4 to the manager device 3. FIG. It is a flowchart which shows the process example of a 2nd Example. It is a figure which shows the example of the content of the state table. It is a flowchart which shows an example of a countermeasure history display process. It is a figure which shows the example of a display content of the countermeasure log | history display screen 311b. It is a figure which shows an example of a comment registration screen. It is a figure which shows the example of a display content of the countermeasure log | history display screen 311b.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Manager apparatus 11 ... Message classification means 12 ... Status display change means 13 ... Classification definition accumulation | storage part 14 ... Display apparatus 2 ... Agent apparatus 21 ... Monitoring means 3 ... Manager apparatus 301 ... Message collection means 302 ... Message classification means 303 ... Knowledge Information storage unit 304 ... Status display change unit 305 ... Dealing history display unit 306 ... Knowledge information registration unit 307 ... Command transmission unit 308 ... Message storage unit 309 ... Classification definition storage unit 310 ... Status table 311 ... Display device 312 ... Input device 4 ... Agent device 41 ... Monitoring means 42 ... Control means

Claims (28)

In a fault monitoring system comprising an agent device and a manager device,
The agent device is
Comprising monitoring means for transmitting a message indicating the status of the own device to the manager device;
The manager device is
A display device that displays the status of the status group defined for each type of countermeasure to recover from the failure;
A classification definition storage unit in which a classification definition for classifying the message into the state group to which the message relates is registered;
Classification means for classifying messages received from the agent device into one or more state groups according to the classification definition;
A fault monitoring system comprising: a state display changing unit that changes a state of the state group in which the message is classified by the classification unit among the states of the state group displayed on the display device. The failure monitoring system according to claim 1,
If the message is a failure message indicating the occurrence of a failure, the state display change unit may change the state of the state group into which the message is classified by the classification unit to the type assigned to the state group. The fault monitoring system is characterized in that it is changed to one that indicates that a fault that needs to be implemented has occurred. The failure monitoring system according to claim 1 or 2,
When the message is a recovery message indicating that a measure for recovery from a failure has been taken, the status display change unit has recovered the status of the status group into which the message has been classified by the classification unit. A fault monitoring system characterized by changing to one that indicates The failure monitoring system according to any one of claims 1 to 3,
The status display changing means displays on the display device information indicating the message classified by the classification means and information indicating a status group to which the message is classified. . The failure monitoring system according to any one of claims 1 to 4,
A knowledge information storage unit in which comments are registered in association with combinations of state groups and messages;
A comment registered in association with a combination of a state group in which the message is classified by the classification unit and a message classified in the state group is searched from the knowledge information storage unit, and the searched comment is displayed in the display. A fault monitoring system comprising a handling history display means for displaying on a device. The fault monitoring system according to claim 5, wherein
A failure monitoring system comprising knowledge information registration means for registering a comment input by an administrator in the knowledge information storage unit in association with a combination of a state group and a message specified by the administrator . The failure monitoring system according to any one of claims 1 to 6,
The state display changing means changes the display attribute when changing the state of the state group. A display device that displays the status of the status group defined for each type of countermeasure to recover from the failure;
A classification definition storage unit in which a classification definition for classifying a message into the state group to which the message is related is registered;
Classification means for classifying a message indicating the state of the agent device received from an agent device into one or more state groups according to the classification definition;
A manager device comprising: a state display changing unit that changes a state of the state group in which the message is classified by the classification unit among the states of the state group displayed on the display device. The manager device according to claim 8, wherein
If the message is a failure message indicating the occurrence of a failure, the state display change unit may change the state of the state group into which the message is classified by the classification unit to the type assigned to the state group. The manager device is characterized in that it is changed to one indicating that a failure requiring execution has occurred. The manager device according to claim 8 or 9,
When the message is a recovery message indicating that a measure for recovery from a failure has been taken, the status display change unit has recovered the status of the status group into which the message has been classified by the classification unit. A manager device characterized in that the manager device is changed to one indicating the above. The manager device according to any one of claims 8 to 10,
The manager device characterized in that the status display change means displays information indicating the message classified by the classification means and information indicating a status group to which the message is classified on the display device. The manager device according to any one of claims 8 to 11,
A knowledge information storage unit in which comments are registered in association with combinations of state groups and messages;
A comment registered in association with a combination of a state group in which the message is classified by the classification unit and a message classified in the state group is searched from the knowledge information storage unit, and the searched comment is displayed in the display. A manager device comprising a handling history display means for displaying on the device. The manager device according to claim 12, wherein
A manager device comprising knowledge information registration means for registering a comment input by an administrator in the knowledge information storage unit in association with a combination of a state group and a message specified by the administrator. The manager device according to any one of claims 8 to 13,
The manager device characterized in that the state display changing means changes the display attribute when changing the state of the state group. A display device that displays the state of a state group defined for each type of coping method for recovering a failure, and a category definition storage unit in which a category definition for classifying a message into the state group to which the message relates is registered A step of classifying a message indicating the state of the agent device received from the agent device into one or more state groups according to the classification definition;
A fault monitoring method comprising: a state display changing step in which the computer changes a state of a state group in which the message is classified by the classification step among states of the state group displayed on the display device. . The fault monitoring method according to claim 15, wherein
In the state display change step, if the message is a failure message indicating the occurrence of a failure, the state of the state group into which the message has been classified by the classification step is treated as the type assigned to the state group. The fault monitoring method is characterized in that a change is made to indicate that a fault that needs to be carried out has occurred. The fault monitoring method according to claim 15 or 16,
In the status display change step, when the message is a recovery message indicating that a measure for recovery from a failure has been taken, the status has recovered from the status of the status group into which the message has been classified by the classification step. A fault monitoring method, characterized in that the fault monitoring method is changed to one indicating the above. The fault monitoring method according to any one of claims 15 to 17,
In the status display changing step, a failure monitoring method characterized in that information indicating the message classified by the classification step and information indicating a status group to which the message is classified are displayed on the display device. . The failure monitoring method according to any one of claims 15 to 18,
The computer includes a knowledge information storage unit in which a comment is registered in association with a combination of a state group and a message; and
The computer searches the knowledge information storage unit for a comment registered in association with a combination of a state group in which the message is classified in the classification step and the message classified in the state group, and the search A failure monitoring method comprising: a handling history display step for displaying a comment made on the display device. The fault monitoring method according to claim 19, wherein
The computer includes a knowledge information registration step of registering a comment input by an administrator in the knowledge information storage unit in association with a combination of a state group and a message designated by the administrator. Fault monitoring method. The failure monitoring method according to any one of claims 15 to 20,
In the state display change step, when changing the state of the state group, the display attribute is changed. A display device that displays the state of a state group defined for each type of coping method for recovering a failure, and a category definition storage unit in which a category definition for classifying a message into the state group to which the message relates is registered A computer with
Classification means for classifying a message indicating the state of the agent device received from an agent device into one or more state groups according to the classification definition;
A program for functioning as a state display changing unit for changing a state of a state group in which the message is classified by the classification unit among the states of the state group displayed on the display device. The program according to claim 22, wherein
If the message is a failure message indicating the occurrence of a failure, the state display change unit may change the state of the state group into which the message is classified by the classification unit to the type assigned to the state group. A program characterized in that it is changed to indicate that a failure has occurred that is necessary to be executed. 24. The program according to claim 22 or 23, wherein:
When the message is a recovery message indicating that a measure for recovery from a failure has been taken, the status display change unit has recovered the status of the status group into which the message has been classified by the classification unit. A program characterized by changing to something that indicates The program according to any one of claims 22 to 24,
The status display change means displays information indicating the message classified by the classification means and information indicating a status group to which the message is classified on the display device. The program according to any one of claims 22 to 25,
The computer includes a knowledge information storage unit in which a comment is registered in association with a combination of a state group and a message; and
The computer searches the knowledge information storage unit for a comment registered in association with a combination of the state group into which the message is classified by the classification unit and the message classified into the state group, and the searched comment For functioning as coping history display means for displaying a message on the display device. The program according to claim 26,
A program for causing the computer to function as knowledge information registration means for registering a comment input by an administrator in the knowledge information storage unit in association with a combination of a state group and a message specified by the administrator. The program according to any one of claims 22 to 27,
The state display changing means changes the display attribute when changing the state of the state group.

Images