JP2009260846A - Network operation monitoring system, manager device, and network operation monitoring method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To allow a holder of a network to refer to only the operation monitoring data of the holder's network when performing operation monitoring of a plurality of different networks using one and the same manager device. <P>SOLUTION: The manager device comprises a monitoring information storage means for associating operation monitoring data received from each agent device with agent identification information for identifying the agent device that has transmitted the operation monitoring data and storing them, and an operation monitoring data acquiring means for receiving an input of certain agent identification information, acquiring operation monitoring data corresponding to the agent identification information, and outputting the data. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a network operation monitoring technique for monitoring the operation state of network devices and computers constituting a network, and in particular, shares the same manager device for operation monitoring of a plurality of networks having different owners. It relates to a technique suitable for the case.

Generally, in operation monitoring of a network, an operation monitoring system composed of an agent and a manager is often used (see Non-Patent Document 1). Here, the agent is a means for obtaining operation monitoring data indicating an operation state of a network device or a computer that is a monitoring target (referred to as a monitoring target device) and providing it to the manager. It is means for acquiring and storing operation monitoring data from the agent and outputting the operation monitoring data based on a predetermined condition such as a request from a user or urgency (see Non-Patent Document 1).
Note that an “agent” in this specification is a device (agent device) having a computer configuration including software for realizing the agent function. Hereinafter, this device is simply referred to as an “agent”. . The “manager” is a device (manager device) such as a computer provided with software for realizing the manager function. This device is simply referred to as “manager”. Further, the agent function may be provided in the monitoring target device, or may be provided in a device different from the monitoring target device. When the agent function is provided in the monitoring target device, the agent (agent device) and the monitoring target device are the same device.

  As a form of performing operation monitoring of a network (a network including a network device, an electronic computer, etc.) using the above operation monitoring system, a form in which the network owner owns a manager and the owner himself / herself performs network operation monitoring Was previously common.

In contrast, in recent years, network owners do not monitor their own network operations themselves, that is, do not own managers, and outsource network operation monitoring operations to other parties (such as telecommunications carriers). There are many forms to do. For example, a typical example of connecting LANs (local area networks) installed at each office in a company having a plurality of offices using a public network (such as the Internet) provided by a telecommunications carrier. In the configuration of a simple corporate network, outsourcing of operation monitoring of each LAN to a telecommunications carrier is performed.
Toru Tanimura, “Practical Technology for UNIX-LAN Construction (SRC Handbook)”, Soft Research Center, April 1993, p. 239-276

  In the operation mode in which outsourcing is performed as described above, a person who is entrusted with network operation monitoring shares a manager for operation monitoring of a plurality of networks with different owners (each office in the above example). By using a single manager (for example), it is possible to aim to reduce the cost for system operation monitoring. A problem that occurs when a single manager is used for operation monitoring of a plurality of networks having different owners will be described with reference to FIG.

  FIG. 1 shows that a LAN 1 owned by a holder (for example, an office) 1, a LAN 2 owned by a holder 2, and a LAN 3 owned by a holder 3 are connected to a public line network 4, and operation monitoring of LAN 1 to LAN 3 is performed. 1 shows a configuration in which a single manager 5 is connected to the public network 4.

  The LAN 1 is connected to a monitoring target device 11, an agent A 11 that acquires operation monitoring data of the monitoring target device 11, a monitoring target device 12, and an agent A 12 that acquires operation monitoring data of the monitoring target device 12. Yes. The LAN 2 is connected to a monitoring target device 21, an agent A 21 that acquires operation monitoring data of the monitoring target device 21, a monitoring target device 22, and an agent A 22 that acquires operation monitoring data of the monitoring target device 22. Yes. Further, the LAN 3 is connected with a monitoring target device 31, an agent A 31 that acquires operation monitoring data of the monitoring target device 31, a monitoring target device 32, and an agent A 32 that acquires operation monitoring data of the monitoring target device 32. Yes.

  In the configuration shown in FIG. 1, the manager 5 acquires operation monitoring data from each agent and accumulates them in a database. For example, as shown in FIG. 1, the manager 5 acquires the operation monitoring data of the monitoring target device 11 from the agent A 11 of the LAN 1 or acquires the operation monitoring data of the monitoring target device 21 from the agent A 21 of the LAN 2.

  Therefore, as shown in FIG. 1, the operation monitoring data of each monitoring target device is accumulated in the database of the manager 5 regardless of the LAN distinction. When the operation monitoring data of each monitored device is accumulated in this way, the owner of a certain LAN (owner 1 in FIG. 1) can refer to the operation monitoring data of the monitored device in the other owner's LAN. End up.

  However, there is a case where an owner of a network refers to the operation monitoring data of the network that he owns but does not want the owner of another network to refer to the operation monitoring data of his network.

  The present invention has been made in view of the above points, and when performing operation monitoring of a plurality of different networks using the same manager, the network operation monitoring data held by the owner of a certain network It is an object to provide a technique for making it possible to refer only to the network, and to prevent other network owners from referring to the operation monitoring data of the network.

  In order to solve the above problems, the present invention acquires operation monitoring data of a monitoring target device, and transmits the operation monitoring data to a manager device via a communication network, and the plurality of agent devices A network operation monitoring system including the manager device that receives and accumulates operation monitoring data from the agent device, wherein the manager device receives the operation monitoring data received from each agent device and the agent device that has transmitted the operation monitoring data. Monitoring information storage means for associating and storing agent identification information for identifying, and receiving input of certain agent identification information, obtaining operation monitoring data corresponding to the agent identification information from the monitoring information storage means, It is characterized by having operation monitoring data acquisition means for outputting Ttowaku configured as operational monitoring system.

  In addition, the manager device stores the owner identification information for identifying the owner of the monitoring target device and the agent identification information of the agent device corresponding to the monitoring target device held by the owner in association with each other. Corresponding information storage means may further be provided. In this case, the operation monitoring data acquisition means receives input of certain owner identification information, and displays agent identification information corresponding to the owner identification information as the owner agent correspondence information. Operation monitoring data corresponding to the agent identification information acquired from the storage means and corresponding to the agent identification information storage means may be acquired from the monitoring information storage means and output.

  The operation monitoring data acquisition unit may include an authentication unit that receives the owner identification information via a communication network and authenticates whether the owner identification information belongs to a valid owner. In this case, the operation monitoring data acquisition unit operates only the agent identification information acquired from the owner agent correspondence information storage unit based on the owner identification information successfully authenticated by the authentication unit from the monitoring information storage unit. It is good also as using as search key information at the time of acquiring monitoring data.

  Each agent device may include means for transmitting a notification message including operation monitoring data of the monitoring target device and its agent identification information to the manager device. In this case, the manager device includes the agent device. Operation monitoring data and agent identification information are acquired from the notification message received from the apparatus, and stored in the monitoring information storage means.

  The present invention can also be configured as the manager device described above and a network operation monitoring method executed by the manager device.

  According to the present invention, when performing operation monitoring of a plurality of different networks using the same manager, the owner of a certain network is referred to only the operation monitoring data of the network held by the owner, and other than the owner It is possible to provide a technique for preventing the owner of the network from referring to the operation monitoring data of the network.

(Outline of the embodiment)
Before describing embodiments of the present invention in detail, an outline thereof will be described first.

  In the present embodiment, identification information (value) is assigned to each agent in the network operation monitoring system so that each agent can be uniquely identified. For example, a continuous integer value that does not overlap for each agent is given to the agent.

  When acquiring the operation monitoring data from the agent, the manager is configured to be able to identify from which agent the operation monitoring data is acquired by some means. For example, when an agent notifies a manager of a notification message including operation monitoring data, the agent stores its identifier in the notification message and notifies the manager of the notification message. It is also possible to establish a communication path between the manager and each agent in advance, and the manager can identify the agent corresponding to the message by determining the communication path when receiving the message from the agent. is there. The means for identifying the agent itself can be realized by the prior art, and any other means may be used.

  The manager gives some information for identifying the agent when accumulating the operation monitoring data acquired from the agent in the storage means. For example, when the agent stores its own identifier in the notification message, the manager gives the identifier itself. Further, when a communication path with the agent is established, the agent is identified from the communication path, and information for identifying the agent possessed by the manager is not necessarily the same as the identifier possessed by the agent. These pieces of information are referred to herein as agent identification information.

  The manager can be configured to extract and refer to only the operation monitoring data acquired from a specific agent from the operation monitoring data to which the agent identification information accumulated as described above is assigned, using the agent identification information as a key. Is done.

  For example, a relational database is used as means for accumulating operation monitoring data, a table for storing collected operation monitoring data is provided, and information collected from each monitoring target is sequentially added as a record. In this table, in addition to the column for storing the collected operation monitoring data, information for identifying the agent that acquired the operation monitoring data is managed by an independent column, and the agent identification information may be used as a search key. Configure as you can. When referring to the accumulated operation monitoring data, specify the specific agent identification information you want to refer to in the WHERE clause as key information, and issue only a SELECT statement to extract only the operation monitoring data acquired from the specific agent. can do.

  The manager is configured to manage the correspondence between the user who uses the operation monitoring system and the agent that acquires the operation monitoring data of the monitoring target device owned by the user. For example, identification information that is unique for each user is given to a user who uses the operation monitoring system, the identification information, and identification information of an agent that acquires operation monitoring data of a monitoring target device held by the user, And a table in which the identification information of the user and the identification information of the agent are paired.

  In addition, the manager identifies the user by the above configuration that manages the correspondence between the user who uses the operation monitoring system and the agent that acquires the operation monitoring data of the monitoring target device held by the user. It is configured to be able to identify the agent that acquires the operation monitoring data of the monitored devices that it owns. For example, the user identification information can be used as search key information in the aforementioned table. When identifying an agent from user identification information, specify the user identification information as key information in the WHERE clause and issue a SELECT statement to monitor the operation of the monitored device held by the user. You can search for agents that retrieve data.

  By combining the above-described means, the manager specifies a user who uses the operation monitoring system, searches for an agent that monitors a monitoring target device held by the user, and acquires an agent group as a search result. The manager then repeats the process of searching for the operation monitoring data of the monitoring target device acquired from the specific agent from the accumulated operation monitoring data using the identification information of each agent in the agent group as key information. A set of operation monitoring data that is each obtained search result becomes operation monitoring data related to a monitoring target device held by a specific user. Therefore, the manager can return the collection of operation monitoring data obtained in this way as a search result related to the specific user.

  By identifying user identification information from the accumulated operation monitoring data, it is possible to extract and refer to only the operation monitoring data of the monitoring target device held by a specific user. It is possible to search and refer to operation monitoring data related to monitored devices to be monitored, but only with this configuration, a user knows search keys (user identification information, agent identification information, etc.) related to other users. In this case, by giving the search key of the user to the manager, the manager outputs operation monitoring data related to the monitoring target device held by the other user, and the user can acquire the other operation monitoring data. In order to solve such a problem, in addition to the above-described configuration, a certain user may add a configuration that restricts the operation monitoring data of the monitoring target device held by another user to the manager. .

  For example, by specifying user identification information, a series of procedures for extracting and referencing only the operation monitoring data of a monitoring target device held by a specific user can be executed only inseparably. To do. In other words, in the process of specifying an agent and searching for operation monitoring data from the specific agent, only the agent that is searched by specifying the user identification information is used as key information for search, and other agents are specified. Configure the manager so that all searches are not possible.

  In addition, the information specifying the user as the first key information for the search is configured so that only the user's information can be specified. For example, a process in which a manager specifies (authenticates) input user identification information (user name), which is called a known so-called login, and the above-described series of procedures are inseparably configured, and a user specified in login Only the identification information is input to the above-described series of procedures, that is, key information for search. In this case, the user who has logged in can refer to the operation monitoring data of the device owned by the user by the above-described series of procedures, and can also obtain the operation monitoring data of the monitoring target device held by another user. Cannot be referenced.

(Details of the embodiment)
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In this embodiment, it is assumed that SNMP (Simple Network Management Protocol) described in Non-Patent Document 1 is used as an example of a protocol for processing such as acquisition of operation monitoring data. The present invention is not limited to SNMP, and any protocol that includes a device corresponding to a manager and a device corresponding to an agent, and the device corresponding to the manager performs processing for acquiring operation monitoring data from the device corresponding to the agent. It can be applied to various protocols.

<System configuration>
FIG. 2 shows the configuration of the network operation monitoring system according to the embodiment of the present invention. The configuration shown in FIG. 2 is the same as the configuration shown in FIG. 1 as a whole, and the LAN 1 held by the holder 1, the LAN 2 held by the holder 2, and the LAN 3 held by the holder 3 are the public line network 4. And a single manager 5 for monitoring the operation of LAN1 to LAN3 is connected to the public network 4.

  The LAN 1 is connected to a monitoring target device 11, an agent A 11 that acquires operation monitoring data of the monitoring target device 11, a monitoring target device 12, and an agent A 12 that acquires operation monitoring data of the monitoring target device 12. Yes. The LAN 2 is connected to a monitoring target device 21, an agent A 21 that acquires operation monitoring data of the monitoring target device 21, a monitoring target device 22, and an agent A 22 that acquires operation monitoring data of the monitoring target device 22. Yes. Further, the LAN 3 is connected with a monitoring target device 31, an agent A 31 that acquires operation monitoring data of the monitoring target device 31, a monitoring target device 32, and an agent A 32 that acquires operation monitoring data of the monitoring target device 32. Yes.

  In the configuration shown in FIG. 2, a user terminal 13 used by a user (such as a network administrator) of the owner 1 is connected to the LAN 1. The user terminal 13 is a PC (personal computer) equipped with a Web browser.

  In this embodiment, an identifier (agent identifier) that can identify each agent is assigned to each agent. Specifically, a four-digit integer value is assigned to each agent, and identifiers 0011, 0012, 0021, 0022, which are four-digit integer values for the agents A11, A12, A21, A22, A31, and A32, respectively. 0031 and 0032 are assigned. Each agent stores the assigned identifier in its own storage device, and when transmitting the operation monitoring data to the manager 5, reads the identifier assigned to itself from the storage device and monitors the identifier. A means for adding the identifier and the operation monitoring data to the manager 5 is added to the data.

  The manager 5 has a function of performing processing according to the present invention in addition to the function of a conventional manager that acquires operation monitoring data from each agent, accumulates it in a database, and outputs it as necessary.

  FIG. 3 shows a functional configuration diagram of the manager 5. As shown in FIG. 3, the manager 5 includes a user terminal communication unit 51, an agent communication unit 52, an authentication unit 53, a database operation control unit 54, and a database function unit 55. Although not shown, the manager 5 includes input / output units such as a keyboard and a display.

  The user terminal communication unit 51 is a functional unit for performing communication with the user terminal 13 used by a network administrator or the like. In the present embodiment, the user terminal communication unit 51 includes a Web server function, and in response to a request from the user terminal 13 provided with a Web browser, instructs the database operation control unit 54 to acquire operation monitoring data. The database operation control unit 54 has a function of returning the operation monitoring data acquired from the database function unit 55 as a response to the request.

  The agent communication unit 52 is a functional unit for communicating with each agent, and has a function of transmitting a request for operation monitoring data to the agent and receiving operation monitoring data from the agent as a response.

  The authentication unit 53 requests authentication information (user name and password) from the user terminal 13 connected via the user terminal communication unit 51, and receives the authentication information received from the user terminal 13 and the user information in the database function unit 55. It is a functional unit that performs user authentication by collating with authentication information stored in advance in a table. In the present embodiment, authentication is performed using such a user name and password, but it goes without saying that other authentication methods may be used. Further, the authentication unit 53 is not essential.

  The database operation control unit 54 issues a command (referred to as a command) for performing a data search or the like to the database function unit 55 based on a request input from the user terminal 13 or the input / output unit of the manager 5. It is a functional unit that acquires and outputs target data from the database functional unit 55. In the present embodiment, the database operation control unit 54 uses a command conforming to a database language called SQL. Further, the database operation control unit 54 allows only the agent identifier acquired from the database function unit 55 using the user name successfully authenticated by the authentication unit 53 as key information of the search command, and other agents It also has a function that does not allow the identifier to be used as key information for a search command.

  The database function unit 55 is a function unit constituting a relational database management system (RDBMS), and holds a monitoring information table as a relational database and a holder name-agent identifier correspondence table. The database function unit 55 has a function of executing data addition to the table, data acquisition from the table, and the like based on a command from the database operation control unit 54. The database function unit 55 has a storage device that physically stores table data, and the function is realized by installing software corresponding to a relational database management system in the manager 5 as a computer. Yes.

  The monitoring information table is a table for accumulating operation monitoring data acquired from each agent. FIG. 4 shows an example of data stored in the monitoring information table. As shown in FIG. 4, the monitoring information table has a column corresponding to an agent identifier for identifying an agent and a column corresponding to operation monitoring data acquired from the agent. With this table configuration, the operation monitoring data can be searched and referenced using the agent identifier as a key. In the example illustrated in FIG. 4, the operation monitoring data includes the operation state of the monitoring target device and the time when the operation state is confirmed.

  FIG. 5 shows an example of data stored in the owner name-agent identifier correspondence table. As shown in FIG. 5, the owner name-agent identifier correspondence table is set on the column corresponding to the owner name for identifying the owner who owns the LAN that is the target of operation monitoring, and on the owner's LAN. A column of agent identifiers for each of the agents assigned. With this table configuration, the agent identifier can be searched and referenced using the owner name as a key.

  The manager 5 can be realized by mounting a program for executing the processing described in this embodiment on a general computer having a CPU, a memory, and the like. The program can be installed in a computer from a recording medium such as a portable memory.

<Processing operation example 1 of the operation monitoring system>
Next, processing operation example 1 of the operation monitoring system shown in FIG. 2 will be described. This processing operation example 1 is an example of a basic operation of the operation monitoring system. Hereinafter, the processing procedure will be described mainly focusing on the owner 1, the LAN 1, and the agent A 12 in the operation monitoring system shown in FIG.

  First, a process in which the operation monitoring data is notified from the agent A12 to the manager 5 and the manager 5 stores the operation monitoring data in the monitoring information table will be described.

  The agent A12 monitors the operating state of the monitoring target device 12, and detects that the monitoring target device 12 is in an abnormal state at the time 2008/1/17 14:09:10. Then, as illustrated in FIG. 6, the agent A 12 transmits operation monitoring data, which is data indicating the detected content, to the manager 5. As shown in FIG. 6, the agent A12 adds its own identifier “0012” to the operation monitoring data (operating state of the device 12 = abnormal, time = 2008-01-17 14:09:10), and the operation monitoring data And the identifier are included in the notification message and transmitted to the manager 5.

  It is assumed that the manager 5 has already stored the data shown in FIG. 4 in the monitoring information table. The database operation control unit 54 of the manager 5 receives the notification message via the agent communication unit 52. Then, as shown in FIG. 7, the database operation control unit 54 issues the following command to the database function unit 55, thereby informing the database function unit 55 of the agent identifier “0012” and the operation monitoring in the monitoring information table. The database function unit 55 stores the data in the monitoring information table.

  Command: INSERT INTO monitoring information table VALUES ('0012', 'operating state of device 12 = abnormal, time = 2008-01-17 14:09:10').

  By storing the agent identifier and the operation monitoring data in the monitoring information table as described above, it becomes possible to specify only the agent identifier and acquire only the operation monitoring data corresponding to the agent identifier.

  As shown in FIG. 8, when the database operation control unit 54 issues the following command to the database function unit 55, the database operation control unit 54 extracts the operation monitoring data corresponding to the agent identifier “0012”. This is requested to the function unit 55. The database operation control unit 54 issues the following command in response to an instruction from a user terminal connected via a network or the input / output unit of the manager 5, for example.

Command: SELECT Operation monitoring data FROM Monitoring information table WHERE Agent identifier = '0012'
Then, the database function unit 55 acquires operation monitoring data corresponding to the agent identifier “0012” and passes it to the database operation control unit 54, and the database operation control unit 54 outputs (displays, etc.) the operation monitoring data.

  Furthermore, by specifying a specific owner name, an agent identifier corresponding to the owner name can be acquired. Here, it is assumed that the data shown in FIG. 5 is stored in the holder name-agent identifier correspondence table.

  For example, as shown in FIG. 9, the database operation control unit 54 issues the following command to the database function unit 55, so that the database operation control unit 54 has an agent identifier corresponding to the owner name 'holder 1'. Is requested to the database function unit 55.

Command: SELECT Agent identifier FROM Owner name-Agent identifier correspondence table WHERE Owner name = 'Owner 1'
The database function unit 55 extracts agent identifiers “0011” and “0012” corresponding to the owner name = “holder 1” in accordance with the above command, and the database operation control unit 54 can acquire these agent identifiers. .

  In addition, the database operation control unit 54 responds to each agent identifier from the monitoring information table using each agent identifier in response to obtaining one or more agent identifiers based on the owner name as described above. Operational monitoring data can be acquired and output.

  That is, as shown in FIG. 10, after the database operation control unit 54 acquires the agent identifiers “0011” and “0012”, the following command 1 and command 2 are issued to the database function unit 55, whereby each agent Acquires and outputs operation monitoring data corresponding to the identifier.

Command 1: SELECT Operation monitoring data FROM Monitoring information table WHERE Agent identifier = '0011'
Command 2: SELECT operation monitoring data FROM monitoring information table WHERE agent identifier = '0012'
Thereby, it becomes possible to acquire only the operation monitoring data of the monitoring target device held by the specific holder. Further, the database operation control unit 54 may continuously perform the processing from the input of the owner name to the output of the operation monitoring data as a series of processing without requiring any operation from the user. . In this case, a series of procedures from the input of the user name (here, the owner name) to the operation monitoring data extraction can be executed only inseparably. That is, the database operation control unit 54 is configured such that only the agent identifier searched by specifying the user name becomes key information for the operation monitoring data search, and the search cannot be performed by designating other agent identifiers. .

  With the above configuration, the manager 5 can output only the operation monitoring data of the monitoring target device in the LAN held by the owner in response to the input of the owner name of the specific owner. Become.

<Example of processing operation of operation monitoring system 2>
Also in the processing operation example 1 described above, for example, if information related to a certain owner (owner name, agent identifier) is not made known to other owners, operation monitoring data related to a monitoring target device held by the certain owner It is possible to prevent only other holders from referring to the holder. However, in order to prevent other owners from knowing information about a certain holder, it is necessary to appropriately determine the contents of the information (such as making it difficult to estimate) and manage information (such as keeping it secret). There are many elements other than the system such as performing. In the following, the system monitoring (mainly manager 5) is used to solve the problem that only the owner can refer to the operation monitoring data related to the monitoring target device held by a certain owner, and other owners cannot. The processing operation will be described as processing operation example 2.

  Hereinafter, the processing operation example 2 will be described along the sequence chart of FIG.

  First, a user (such as a network administrator) of the owner 1 accesses the user terminal communication unit 51 of the manager 5 from the user terminal 13 connected to the LAN 1 (step 1). Then, the manager 5 transmits user authentication screen data to the user terminal 13 based on the function of the authentication unit 53 (step 2). A user authentication screen is displayed on the user terminal 13, and the user inputs a user name (here, “owner 1”) and a password to the user terminal 13, and the user terminal 13 inputs “owner 1” and a password (these are (Referred to as authentication information) is transmitted to the manager 5 (step 3).

  'Holder 1' and the password are sent to the authentication unit 53 via the user terminal communication unit 51, and the authentication unit 53 stores a user information table (stores registered authentication information) included in the database function unit 55. User authentication is performed by referring to (Step 4). Here, it is assumed that user authentication is successful. That is, the manager 5 recognizes that “owner 1” is information from a valid owner. Further, the authentication unit 53 holds “owner 1” as a user name that has been successfully authenticated. There are various authentication methods, and the authentication method described in this embodiment is merely an example.

  Thereafter, for example, a menu screen is displayed on the user terminal 13, and the user selects reference to operation monitoring data. The user terminal 13 transmits an operation monitoring data reference request including “owner 1” to the manager 5 (step 5).

  The database operation control unit 54 of the manager 5 receives the above operation monitoring data reference request via the user terminal communication unit 51. The database operation control unit 54 acquires the owner name “owner 1” included in the operation monitoring data reference request, and inquires of the authentication unit 53 whether the “holder 1” has been successfully authenticated. In the present embodiment, the database operation control unit 54 receives from the authentication unit 53 a response that “owner 1” has been successfully authenticated. Here, when a response indicating that “owner 1” has not been successfully authenticated is received from the authentication unit 53, the database operation control unit 54 does not perform any further processing, and for example, sends an error message to the user terminal 13. Send.

  Subsequently, the database operation control unit 54 issues the following command to the database function unit 55 using “owner 1” as a key, so that the owner name-agent identifier correspondence to the database function unit 55 is obtained. A request is made to retrieve an agent identifier corresponding to 'holder 1' from the table (step 6).

Command: SELECT Agent identifier FROM Owner name-Agent identifier correspondence table WHERE Owner name = 'Owner 1'
The database operation control unit 54 acquires agent identifiers “0011” and “0012” as search results from the database function unit 55 (step 6). For example, the database operation control unit 54 is information acquired from the database function unit 55 with respect to these agent identifiers “0011” and “0012” using “owner 1” that has been successfully authenticated as a key. Confirmation information indicating that is added.

  Subsequently, the database operation control unit 54 obtains the operation monitoring data corresponding to each agent identifier acquired from the database function unit 55 using the “owner 1” as a key (that is, the confirmation information is added) from the monitoring information table. A request is issued to the database function unit 55 so as to obtain it. Specifically, the database operation control unit 54 issues the following command 1 and command 2 to the database function unit 55 (step 7).

Command 1: SELECT Operation monitoring data FROM Monitoring information table WHERE Agent identifier = '0011'
Command 2: SELECT operation monitoring data FROM monitoring information table WHERE agent identifier = '0012'
The database function unit 55 returns the operation monitoring data corresponding to each of the agent identifiers “0011” and “0012” to the database operation control unit 54, and the database operation control unit 54 sends the operation monitoring data to the user terminal communication unit. It transmits to the user terminal 13 via 51 (step 8).

  In the processing operation example 2, for example, even when the database operation control unit 54 is requested to acquire an operation monitoring data corresponding to the agent identifier by specifying the agent identifier from the outside, the request is not accepted. . In the processing operation example 2, the database operation control unit 54 uses only the agent identifier acquired using the owner name that has been successfully authenticated as a key, as a search key for operation monitoring data.

  FIG. 12 is a diagram illustrating the concept of the processing operation example 2. As shown in FIG. 12, according to the processing operation example 2, the operation monitoring data related to the monitoring target device held by a certain holder (owner 1) can be referred to only by the owner, and cannot be referred to by other holders. become.

  The present invention is not limited to the above-described embodiments, and various modifications and applications are possible within the scope of the claims.

It is a figure for demonstrating the problem which arises when using a single manager. It is a block diagram of the network operation | use monitoring system in embodiment of this invention. 3 is a functional configuration diagram of a manager 5. FIG. It is a figure which shows an example of the data stored in the monitoring information table. It is a figure which shows an example of the data stored in a holder name-agent identifier correspondence table. It is a figure for demonstrating the notification process of operation | movement monitoring data. It is a figure for demonstrating the storage process of operation | movement monitoring data. It is a figure for demonstrating the search process of the operation monitoring data which uses an agent identifier as a key. It is a figure for demonstrating the search process of the agent identifier which uses a holder name as a key. It is a figure for demonstrating the search process of the operation monitoring data which uses an agent identifier as a key. 10 is a sequence chart for explaining a processing operation example 2; It is a conceptual diagram which shows the effect of the processing operation example 2.

Explanation of symbols

1-3 LAN
11-32 Equipment to be monitored
A11 to A32 Agent 13 User terminal 4 Public line network 5 Manager 51 To user terminal communication unit 52 To agent communication unit 53 Authentication unit 54 Database operation control unit 55 Database function unit

Claims (10)

A plurality of agent devices that acquire operation monitoring data of a monitoring target device and transmit the operation monitoring data to a manager device via a communication network, and the manager device that receives and accumulates operation monitoring data from the plurality of agent devices A network operation monitoring system comprising:
The manager device is
Monitoring information storage means for storing operation monitoring data received from each agent device in association with agent identification information for identifying the agent device that transmitted the operation monitoring data;
A network operation monitoring system comprising: an operation monitoring data acquisition unit that receives input of certain agent identification information, acquires operation monitoring data corresponding to the agent identification information from the monitoring information storage unit, and outputs the operation monitoring data. The manager device stores the owner identification information for identifying the owner of the monitoring target device and the agent identification information for storing the agent identification information of the agent device corresponding to the monitoring target device held by the owner in association with each other Further comprising storage means;
The operation monitoring data acquisition means receives input of certain owner identification information, acquires agent identification information corresponding to the owner identification information from the owner agent correspondence information storage means, and the owner agent correspondence information storage means The network operation monitoring system according to claim 1, wherein the operation monitoring data corresponding to the agent identification information acquired from the server is acquired from the monitoring information storage means and output. The operation monitoring data acquisition means includes
Receiving the owner identification information via the communication network, and comprising an authentication means for authenticating whether or not the owner identification information is that of a valid owner,
Only the agent identification information acquired from the owner agent correspondence information storage means based on the owner identification information successfully authenticated by the authentication means is used as search key information when acquiring operation monitoring data from the monitoring information storage means The network operation monitoring system according to claim 2, wherein: Each agent device includes means for transmitting a notification message including operation monitoring data of the monitoring target device and its own agent identification information to the manager device,
The network according to any one of claims 1 to 3, wherein the manager device acquires operation monitoring data and agent identification information from a notification message received from the agent device, and stores the operation monitoring data and agent identification information in the monitoring information storage unit. Operation monitoring system. A plurality of agent devices that acquire operation monitoring data of a monitoring target device and transmit the operation monitoring data to a manager device via a communication network, and the manager device that receives and accumulates operation monitoring data from the plurality of agent devices The manager device used in a network operation monitoring system comprising:
Monitoring information storage means for storing operation monitoring data received from each agent device in association with agent identification information for identifying the agent device that transmitted the operation monitoring data;
A manager device comprising: operation monitoring data acquisition means for receiving operation monitoring data corresponding to the agent identification information from the monitoring information storage means and outputting the same. The manager device stores the owner identification information for identifying the owner of the monitoring target device and the agent identification information for storing the agent identification information of the agent device corresponding to the monitoring target device held by the owner in association with each other Further comprising storage means;
The operation monitoring data acquisition means receives input of certain owner identification information, acquires agent identification information corresponding to the owner identification information from the owner agent correspondence information storage means, and the owner agent correspondence information storage means 6. The manager device according to claim 5, wherein operation monitoring data corresponding to the agent identification information acquired from the server is acquired from the monitoring information storage unit and output. The operation monitoring data acquisition means includes
Receiving the owner identification information via the communication network, and comprising an authentication means for authenticating whether or not the owner identification information is that of a valid owner,
Only the agent identification information acquired from the owner agent correspondence information storage means based on the owner identification information successfully authenticated by the authentication means is used as search key information when acquiring operation monitoring data from the monitoring information storage means The manager device according to claim 6, wherein: A plurality of agent devices that acquire operation monitoring data of a monitoring target device and transmit the operation monitoring data to a manager device via a communication network, and the manager device that receives and accumulates operation monitoring data from the plurality of agent devices A network operation monitoring method executed by the manager device in a network operation monitoring system comprising:
A monitoring information storage step for storing the operation monitoring data received from each agent device in association with agent identification information for identifying the agent device that transmitted the operation monitoring data in the monitoring information storage means;
A network operation monitoring method comprising: an operation monitoring data output step for receiving operation monitoring data corresponding to the agent identification information from the monitoring information storage means and outputting the operation monitoring data. A plurality of agent devices that acquire operation monitoring data of a monitoring target device and transmit the operation monitoring data to a manager device via a communication network, and the manager device that receives and accumulates operation monitoring data from the plurality of agent devices A network operation monitoring method executed by the manager device in a network operation monitoring system comprising:
The manager device stores the owner identification information for identifying the owner of the monitoring target device and the agent identification information for storing the agent identification information of the agent device corresponding to the monitoring target device held by the owner in association with each other The network operation monitoring method that includes a storage unit and is executed by the manager device includes:
A monitoring information storage step for storing the operation monitoring data received from each agent device in association with agent identification information for identifying the agent device that transmitted the operation monitoring data in the monitoring information storage means;
Agent identification information acquisition step of receiving input of certain owner identification information and acquiring agent identification information corresponding to the owner identification information from the holder agent correspondence information storage means;
A network operation monitoring method comprising: an operation monitoring data output step for acquiring and outputting operation monitoring data corresponding to the agent identification information acquired from the owner agent correspondence information storage unit from the monitoring information storage unit. The manager device includes authentication means for receiving owner identification information via a communication network and authenticating whether the owner identification information is that of a valid owner,
In the operation monitoring data output step, the manager device uses only the agent identification information acquired from the owner agent correspondence information storage unit based on the owner identification information successfully authenticated by the authentication unit, from the monitoring information storage unit. The network operation monitoring method according to claim 9, wherein the network operation monitoring method is used as search key information when acquiring operation monitoring data.

Images