JP2012088855A - Event occurrence notification apparatus, event occurrence notification method, event occurrence notification program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an event notification apparatus that determines a transmission destination of a notification depending on detection values of sensors.SOLUTION: An event occurrence notification apparatus according to the invention includes: detection value input means for receiving detection values detected by sensors; sensor event detection means for detecting events for each of a plurality of sensors from the detection values with a condition of the detection values determined for the respective sensors; failure event determination means for determining the occurrence of a failure event and a type of the failure event from a combination of the events, a period of time for the event to keep being detected, or the number of detection of the event for a predetermined time; and notification destination determination means for determining a transmission destination of the notification depending on the type of the failure event.

Description

  The present invention relates to an event occurrence notification device that notifies the occurrence of an event based on a detection value of a sensor, and more particularly to an event occurrence notification device that notifies the occurrence of an event to a notification destination corresponding to the detection value of the sensor.

  Patent Document 1 describes a sensor monitoring device that notifies a notification destination when it detects that a sensor has detected a predetermined state. The sensor monitoring device of Patent Document 1 includes a sensor monitoring unit that monitors a sensor, a notification unit, a notification confirmation unit, and a control unit, and operates as follows.

  When the sensor monitoring unit detects that the sensor has detected a predetermined state, the notification unit transmits a notification to that effect to the first notification destination. The notification confirmation unit confirms that the first notification destination has recognized the notification transmitted by the notification unit. When the notification confirmation unit cannot confirm that the first notification destination has recognized the notification transmitted by the notification unit, the control unit determines the second notification destination and notifies the determined second notification destination. Is sent to the notification unit.

  The sensor monitoring apparatus of Patent Literature 1 selects a notification destination to which a notification is transmitted from a plurality of notification destinations according to the state of the notification destination.

Table 2004/008409

  The sensor monitoring apparatus described in Patent Literature 1 determines a notification destination to which a notification is transmitted regardless of the state detected by the sensor. Therefore, the sensor monitoring device described in Patent Document 1 has a problem that it is not possible to determine the transmission destination of the notification according to the detection value of the sensor.

  An object of the present invention is to provide an event notification apparatus that determines a transmission destination of a notification according to a detection value of a sensor.

  The event occurrence notification device according to the present invention detects an event for each sensor from the detection value based on detection value input means for receiving the detection value detected by the sensor and a condition for the detection value determined for each of the plurality of sensors. A failure that determines the occurrence of a failure event and the type of the failure event that has occurred based on the combination of the event, sensor event detection means, the time during which the event has been detected, or the number of times the event has been detected within a certain time An event determination unit, and a notification destination determination unit that determines a transmission destination of the notification according to a type of the failure event.

  The event occurrence notification method of the present invention receives a detection value detected by a sensor, detects an event for each sensor from the detection value according to a condition for the detection value determined for each of the plurality of sensors, Determine the occurrence of a fault event and the type of fault event that occurred from the combination, the time during which the event has been detected, or the number of times the event has been detected within a certain period of time, and notify the notification according to the fault event type Determine the destination of.

  The event occurrence notification program according to the present invention includes a computer, a detection value input unit that receives a detection value detected by a sensor, and a condition for the detection value that is determined for each of the plurality of sensors. The occurrence of a fault event and the type of the fault event that has occurred are determined from a combination of the event detection means for detecting an event and the combination of the event, the time during which the event has been detected, or the number of times the event has been detected within a certain time It operates as a failure event determination means for determining and a notification destination determination means for determining the transmission destination of the notification according to the type of the failure event.

  The present invention has an effect that a notification can be transmitted to an appropriate transmission destination according to an event that has occurred.

It is a block diagram showing the structure of the event generation notification apparatus 1 of 1st Embodiment. It is a flowchart showing operation | movement of the event generation notification apparatus 1 of 1st Embodiment. It is a block diagram showing the structure of 1 A of event generation notification apparatuses of 2nd, 3rd embodiment. It is a flowchart showing operation | movement of 1 A of event generation notification apparatuses of 2nd Embodiment. It is a flowchart showing operation | movement of 1 A of event generation notification apparatuses of 3rd Embodiment.

  Each embodiment of the present invention described below can be realized by hardware, software for controlling a computer and a computer, or a combination thereof.

(First embodiment)
First, a first embodiment of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a block diagram showing the configuration of the event occurrence notification device according to the present embodiment.

  Referring to FIG. 1, the event occurrence notification device 1 includes a detection value input unit 11 and a notification destination determination unit 12. The event occurrence notification device 1 can receive the detection value detected by the sensor 2 from the monitoring target of the sensor 2.

  The detection value input unit 11 receives the detection value detected by the sensor 2.

  The notification destination determination unit 12 includes a plurality of transmission destination devices 4 (in the example of FIG. 1, M from the transmission destination device 41 to the transmission destination device 4M) according to the detection value received by the detection value input unit 11. One or more transmission destination devices are determined as notification transmission destinations. Hereinafter, among the plurality of transmission destination devices, the transmission destination device that is the transmission destination of the notification determined by the notification destination determination unit 12 is referred to as a transmission destination device D. The notification transmission device 3 transmits a notification to the transmission destination device D that is the transmission destination of the notification determined by the notification destination determination unit 12.

  Next, the operation of the event occurrence notification device 1 according to the present embodiment will be described in detail with reference to the drawings.

  FIG. 2 is a flowchart showing the operation of the event occurrence notification device 1 of the present embodiment.

  Referring to FIG. 2, first, the detection value input unit 11 receives the detection value detected by the sensor 2 (step S11).

  The sensor 2 is, for example, a sensor that measures a monitoring target and detects a detection value from a physical quantity such as temperature, voltage, humidity, air volume, and rotation speed. In the following description, one sensor detects one detection value, but the detection value detected by one sensor may be one type or a plurality of types. The monitoring targets are, for example, parts such as hard disk devices and fans, devices such as computer devices, cooling devices, and elevators, and facilities such as data centers and power plants. The sensor 2 may be a mechanism that monitors the hard disk device and detects the state of the hard disk device such as a write error, a read error, their probability, and the number of bad sectors. The sensor 2 may estimate the degree of possibility that the monitoring target will break down and use it as a detection result. The sensor 2 outputs the detected result as a detection value. The detected value may be either a discontinuous value or a continuous value. One sensor 2 or a plurality of sensors 2 may be used.

  Next, the notification destination determination unit 12 determines a notification transmission destination (transmission destination device D) based on the detection value received by the detection value input unit 11 (step S12).

  In step S12, the notification destination determination unit 12 determines the transmission destination device D from the received detection value based on a predetermined condition for the detection value. For example, the notification destination determination unit 12 may determine the transmission destination device D according to the range of values including the detection value. Further, the notification destination determination unit 12 may determine the transmission destination device D according to the number of sensors whose detection value is a predetermined value, for example. Alternatively, the notification destination determination unit 12 may detect these situations when, for example, a predetermined detection value is continuously detected for a certain period of time or when a predetermined detection value is detected a predetermined number of times within a certain period of time. The transmission destination device D may be determined according to the above. The destination device D that the notification destination determination unit 12 determines as a notification destination according to the detection value may be one or more.

  The notification destination determination unit 12 sets, for example, a set (notification rule) of information for specifying a sensor (sensor ID; identifier), a condition for a detection value, information for specifying a notification transmission destination, and a notification transmission method. The notification destination may be determined with reference to a plurality of tables (notification tables). The condition for the detection value is, for example, a value range. When the received detection value is included in the value range represented by “condition for detection value” corresponding to the sensor ID of the sensor that has detected the detection value, the notification destination determination unit 12 performs the corresponding “notification transmission”. The transmission destination device specified by “information specifying the destination” can be determined as the transmission destination of the notification. Further, the notification destination determination unit 12 can also determine a “notification transmission method” corresponding to the determined notification transmission destination as a notification transmission method. The notification table may be stored in, for example, a storage unit that can be referred to by the notification destination determination unit 12. Further, the notification destination determination unit 12 may hold a plurality of notification rules inside and determine a notification transmission destination based on the notification rules held by itself. Thus, each notification rule does not necessarily have to be in the form of a table as long as it can obtain correspondence of information and conditions included in each notification rule.

  The content of the notification may be, for example, information that simply represents a warning, a detection value itself, or information that represents the status of a monitoring target determined by the detection value. The notification medium may be any medium such as text, image, sound, and light as long as it can transmit information. Examples of the notification method include e-mail transmission, facsimile transmission, telephone display on a terminal device screen, generation of sound by a speaker or the like, for example, generation of light by turning on a light emitting device such as a rotating lamp, etc. It is done. The notification method may be a combination of a plurality of the above-described methods, for example.

  The transmission destination device that is the transmission destination of the notification is, for example, a portable terminal, a computer device, a server, a speaker, a rotating lamp, a telephone, or other devices. Information specifying the destination of these notifications includes, for example, email addresses of individuals and groups of people, IP (Internet Protocol) addresses of computer devices and servers, telephone numbers and fax numbers, speakers, rotating lights, etc. This is information that identifies the location where it exists.

  For example, the notification transmission device 3 refers to the notification table and determines a transmission method according to the notification destination device determined by the notification destination determination unit 12 (step S13).

  For example, the notification transmission device 3 receives the sensor ID and the detection value, refers to the notification table described above based on the received sensor ID and the detection value, and performs a “notification” corresponding to the determined notification transmission destination. "Sending method" may be determined as the method for sending the notification. The notification destination transmission device 3 may receive the notification transmission method from the notification destination determination unit 12 together with the notification transmission destination.

  The notification transmission device 3 transmits a notification by the determined transmission method to the notification transmission destination device determined by the notification destination determination unit 12 (step S14).

  The notification transmission device 3 transmits a notification to the transmission destination device D determined by the notification destination determination unit 12, such as a mail address, a fax number, a telephone number, wiring, or the like. The notification transmission device 3 may be a device different from the event occurrence notification device 1 or the same device as the event occurrence notification device 1.

  The present embodiment described above has an effect that a notification can be transmitted to an appropriate transmission destination corresponding to the event that has occurred.

  The reason is that the notification destination determination unit 12 determines the transmission destination of the notification according to the detection value of the sensor, so that the notification is transmitted only to the transmission destination according to the detection value of the sensor. As a result, unnecessary notifications other than the necessary notification set in advance based on the detection value are not sent to the transmission destination, and the burden on the transmission destination is reduced.

(Second Embodiment)
Next, a second embodiment of the present invention will be described in detail with reference to the drawings.

  FIG. 3 is a block diagram showing the configuration of the event notification device 1A of the present embodiment.

  Referring to FIG. 3, the event notification device 1 </ b> A includes a detection value input unit 11, a notification destination determination unit 12, a sensor event detection unit 13, a failure event determination unit 14, and a notification unit 15. The event notification device 1 </ b> A may include a notification rule storage unit 16.

  The detection value input unit 11 receives detection values from the sensors 21 to 2N (N is an integer of 2 or more). Since the detection value input unit 11 is the same as the detection value input unit 11 of the first embodiment, a description thereof will be omitted. The sensors 21 to 2N may be a single type of sensor or a plurality of types of sensors. Since each of the sensors 21 to 2N is the same as the sensor 2 described above, detailed description thereof is omitted.

  The sensor event detection unit 13 detects an event for each sensor from the detection value received by the detection value input unit 11 according to a condition determined for each sensor. The event is, for example, that the detected value is in a specific state represented by a predetermined condition. The sensor event detection unit 13 may detect some event from all possible values of the detection value. Further, a range of detection values in which the sensor event detection unit 13 does not detect an event may exist in a range of values that can be taken by the detection value.

  For example, the sensor event detection unit 13 may detect an event for each sensor from the detection value by referring to a table (event table) including a plurality of sets of sensor IDs and conditions for the detection value. When detecting an event, the sensor event detection unit 13 may refer to, for example, an event table stored in a notification rule storage unit 16 described later, or may refer to an event table held in itself. In addition, the sensor event detection unit 13 may detect an event by using a logic that associates a detection value with an event incorporated therein instead of referring to the event table.

  The failure event determination unit 14 determines whether a failure event has occurred from the combination of events detected by the sensor event detection unit 13. If the failure event determination unit 14 determines that a failure event has occurred, the failure event determination unit 14 determines the type of the failure event that has occurred. If the combination of events detected by the sensor event detection unit 13 meets one of the predefined conditions (usually a state in which an abnormality has occurred in the monitoring target), the failure event determination unit 14 Is determined to have occurred. The event conditions include, for example, the number of predetermined events, the ratio of predetermined events, a threshold value for them, a predetermined combination of events, and the like. Any event condition may be used as a criterion for determining whether or not a combination of detected events is applicable.

  For example, the failure event determination unit 14 refers to a table (failure event table) that includes a plurality of combinations of event conditions to be detected as failure events and corresponding types of failure events (failure event table). Good. The failure event determination unit 14 may determine that a failure event has occurred, for example, when a combination of detected events matches any event condition in the failure event table. Furthermore, the failure event determination unit 14 may determine, for example, a failure event type corresponding to an event condition to which a combination of detected events applies in the failure event table as the type of the failure event that has occurred.

  The failure event determination unit 14 may refer to, for example, a failure event table stored in a later-described notification rule storage unit 16 when determining the occurrence and type of a failure event, or refers to the failure event table included therein. May be. In addition, the failure event determination unit 14 does not refer to the failure event table, but determines the occurrence of the failure event and the type of the failure event that has occurred by using a logic incorporated in the event to associate the event state with the failure event type. You may judge.

  The notification destination determination unit 12 includes a plurality of transmission destination devices (in the example of FIG. 3, M from the transmission destination device 41 to the transmission destination device 4M, M, depending on the type of the failure event determined by the failure event determination unit 14). Is one or more destination devices), and is determined as the destination device D that is the notification destination. Compared to the notification destination determination unit 12 of the first embodiment, the notification destination determination unit 12 of this embodiment determines a transmission destination device D that is a notification transmission destination according to the type of failure event instead of the detection value. The point to do is different. That is, unlike the notification rule in the first embodiment, the notification rule in this embodiment includes the type of failure event instead of the condition for the sensor ID and the detected value.

  The notification destination determination unit 12 determines the transmission destination of the notification with reference to, for example, a notification table, similarly to the notification destination determination unit 12 of the first embodiment. However, the notification table in the present embodiment is that the notification table in the first embodiment includes a plurality of notification rules that are combinations of the types of failure events, information for specifying the transmission destination of notifications, and the transmission method of notifications. And different. Note that, as in the first embodiment, the notification rule does not necessarily have to be in the form of a table.

  For example, the notification unit 15 refers to the notification table to determine a notification transmission method according to the transmission destination device D determined by the notification destination determination unit 12. The notification unit 15 transmits a notification to the transmission destination device D by the determined transmission method.

  Since the transmission destination device 41 to the transmission destination device 4M are the same as the transmission destination device 41 to the transmission destination device 4M in the first embodiment, description thereof is omitted.

  The notification rule storage unit 16 may store an event table, a failure event table, and a notification table. In this case, the sensor event detection unit 13 refers to the event table stored in the notification rule storage unit 16 when detecting an event for each sensor. The failure event determination unit 14 refers to the failure event table stored in the notification rule storage unit 16 when determining the occurrence and type of the failure event. The notification destination determination unit 12 refers to the notification table stored in the notification rule storage unit 16 when determining the transmission destination device D that is the transmission destination of the notification.

  A user terminal 5 may be connected to the event notification device 1A. The user can add, delete, or change the contents of each table stored in the notification rule storage unit 16 via the user terminal 5.

  Next, the operation of the event notification device 1A of the present embodiment will be described in detail with reference to the drawings.

  FIG. 4 is a flowchart showing the operation of the event notification device 1A of the present embodiment.

  Referring to FIG. 4, first, the detection value input unit 11 receives the detection value detected by each sensor (step S21). Examples of detected values include temperature, atmospheric pressure, humidity, rotational speed of fans, hard disk devices, etc., sound volume, voltage, flow rate of fluid such as air volume of fans, vibrations, and the like. The detection value may be a probability that some kind of situation has occurred in the monitoring target, such as a write error occurrence rate of the hard disk device. Further, the detection value may be a value representing a state such as “abnormal” or “normal”.

  Next, the sensor event detection unit 13 detects an event for each sensor from each detection value received by the detection value input unit 11 with reference to, for example, an event table including a condition for detecting an event determined for each sensor. (Step S22).

  Since the sensor event detection unit 13 detects an event for all received detection values, the sensor event detection unit 13 does not necessarily detect one event at a time. Moreover, when all the received detection values do not satisfy the conditions determined for each sensor, the sensor event detection unit 13 does not detect the event.

  Further, the event detected by the sensor event detection unit 13 may qualitatively represent a detection value such as “low temperature” or “high temperature”, and may be a detection value itself (for example, a temperature value). It may be quantitative.

  When the sensor event detection unit 13 detects any event (step S23, Y), the failure event determination unit 14 refers to, for example, the above-described failure event table, and the event detected by the sensor event detection unit 13 is It is determined whether or not it is a failure event (step S24). If the sensor event detection unit 13 does not detect the event (step S23, N), the process ends.

  The failure event determination unit 14 determines the occurrence and type of a failure event depending on whether or not the combination of detected events matches the conditions included in the failure event table. One event may be a target of determination under a plurality of different conditions. A plurality of conditions for determining a failure event may exist for one combination. For example, the failure event determination unit 14 determines that a failure event has occurred when a combination of events detected by the sensor event detection unit 13 meets any of the conditions for determining a failure event. For example, when the combination of events detected by the sensor event detection unit 13 is event 1, event 2, and event 3, and the condition for determining a failure event is detection of event 2 and event 3, the failure event determination unit 14 It may be determined that a failure event has occurred. Moreover, the combination of the event used as the conditions determined as a failure event may be a combination including only one event or a combination including events detected in the past.

  In addition, the failure event determination unit 14 continues for a predetermined time, when the sensor event detection unit 13 continues to detect a predetermined event, or when the sensor event detection unit 13 performs a predetermined number of times within a predetermined time. If an event is detected, the occurrence of a failure event may be determined. When the event is the detection value itself, the failure event determination unit 14 may determine the occurrence of the failure event when the amount of change in the detection value exceeds or falls below a predetermined threshold. Further, the failure event determination unit 14 may determine the occurrence of the failure event by combining the conditions for determining the occurrence of the failure event described above.

  Next, a specific example of a condition that the failure event determination unit 14 determines as a failure event will be given.

(1) Combination of events in the same type of sensor The following description is a specific example of a condition for determining a failure event based on a combination of events detected from detection values of the same type of sensor.

  As the simplest example, when the sensor event detection unit 13 detects one event that is determined to have a failure or failure, the failure event determination unit 14 determines the occurrence of a failure event. In this case, the combination of events that is a condition for the failure event determination unit 14 to determine the occurrence of a failure event includes only one event. An example of such an event is a failure of a hard disk device, for example. For example, if the sensor is a hard disk device failure sensor and the sensor event detection unit 13 detects a hard disk device failure, the failure event determination unit 14 may determine, for example, the occurrence of a failure of the hard disk device as the failure event. .

  In addition, even if the detected event is a minor event that does not immediately lead to a failure or failure, there is an example that leads to a serious failure if the same type of events occur frequently at the same time. In such an example, for example, when a slight number of events (for example, a number smaller than a threshold value determined based on experience and determined to possibly cause a serious failure) are detected, a failure event determination unit 14 does not need to determine the occurrence of a failure event. In this case, the failure event determination unit 14 may determine the occurrence of a failure event that is not serious. On the other hand, if the number of events that are likely to cause a failure (number equal to or greater than the above-described threshold) is detected, the failure event determination unit 14 determines that an emergency or serious failure event has occurred. Good.

  For example, a cooling device is generally designed with a sufficient cooling capacity, so in a cooling device including a large number of fans, a failure of one fan does not immediately lead to a failure or failure of the cooling target. Absent. However, if a large number of fans fail at the same time in such a cooling system, the cooling capacity of the cooling system may fall below the capacity required to prevent the temperature from rising, leading to a serious failure or failure of the cooling target. is there.

  In this example, the sensor only needs to detect a fan failure. The event detection unit 13 may detect each individual fan failure as an event. For example, when a fan failure occurs with the number of fans corresponding to the required cooling capacity as a threshold, the failure event detection unit 14 generates another failure event depending on whether the number of failed fans exceeds the threshold. Can be determined.

  For example, when a failure of less than a predetermined number of fans corresponding to the required cooling capacity is detected as an event, the failure event determination unit 14 may determine, for example, the occurrence of a fan failure as the failure event. For example, when a failure of a predetermined number of fans or more is detected as an event, the failure event determination unit 14 is a failure that is more serious than the occurrence of the fan failure, such as an emergency. What is necessary is just to determine generation | occurrence | production of the state which needs replacement | exchange of a fan.

  The number of fans corresponding to the required cooling capacity may be set in advance based on experience, for example. Further, the number of fans corresponding to the cooling capacity required by the administrator may be input via an input unit (not shown). In this example, the number of fans corresponding to the required cooling capacity can also be calculated by the ratio to the total number of fans. In this case, the administrator may input the total number of fans via an input unit (not shown). Alternatively, if each sensor is observing each fan, for example, the detection value input unit 11 can obtain the total number of fans based on the number of sensors that receive the detection value. Alternatively, the failure event detection unit 14 may determine the occurrence and type of the failure event based on whether the ratio of the number of failed fans to the total number of fans exceeds a threshold value.

  In addition, as an example of the simultaneous occurrence of minor events of the same type leading to a serious failure, there are events related to error rates (write error rate or read error rate) of multiple hard disk devices constituting RAID (Redundant Arrays of Independent Disks). Conceivable.

  For example, in a redundant disk array device such as RAID 5 or RAID 6, even if a predetermined number or less of a plurality of hard disk devices constituting the disk array device fails, the recorded data can be recovered. There is something. For example, even if one hard disk device fails in the case of a RAID 5 configuration disk array device, even if two hard disk devices fail in a RAID 6 configuration disk array device, it is stored in the disk array device. It is possible to recover existing data. However, the data recorded in the disk array device is lost due to the failure of a hard disk device more than a predetermined number.

  In general, when the error rate of a hard disk device increases, the hard disk device may fail. Therefore, the sensor event detection unit 13 may detect an error rate exceeding a predetermined value as an event. However, a temporary increase in the error rate does not always lead to a failure. Further, even if one of the hard disk devices constituting the above-described disk array device fails, data can be recovered. Therefore, it may be considered as a minor event that the error rate of one hard disk device in the disk array device exceeds a predetermined value (error rate considered to be a possibility of failure). Therefore, in this case, the failure event determination unit 14 does not have to determine the occurrence of the failure event.

  However, all hard disk devices having an error rate exceeding a predetermined value may fail. Therefore, if the error rate of the hard disk units that exceed the maximum number of failed hard disk drives that can recover the data of the above disk array device exceeds the specified value, a serious failure may occur. There is. Therefore, in this case, the failure event determination unit 14 may determine that the failure event has entered a state in which attention should be paid to, for example, a hard disk failure.

  If a failure of the hard disk device actually occurs in this disk array device, the failure event determination unit 14 may determine the occurrence of a failure event as described below. When the number of failed hard disk devices is smaller than the maximum number of failed hard disk devices capable of data recovery, the failure event determination unit 14 may determine that maintenance is required as a failure event. . If the number of failed hard disk devices is equal to the maximum number of failed hard disk devices capable of data recovery, the failure event determination unit 14 determines that a maintenance event is urgently required as a failure event. That's fine.

  In addition, when a small number of events detected from detection values of a plurality of sensors that respectively measure a plurality of monitoring targets in the same environment are different from many other events, the failure event determination unit 14 It is conceivable to determine the occurrence of a failure event.

  As an example of such an event, there is an event detected from the temperatures of a plurality of hard disk devices constituting the disk array device. The disk array device in this example is a disk array device in which access is not concentrated on a specific hard disk device. It is considered that the temperatures of a plurality of hard disk devices constituting such a disk array device are approximately equal. Among a large number of hard disk devices, if the temperature of a small number of hard disk devices is significantly higher or lower than others, a failure has occurred in a hard disk device that is different in temperature from many other hard disk devices. there is a possibility.

  Therefore, for example, when the events detected from the temperature of each hard disk device of the disk array device are a large number of “normal temperature” and a small number of “high temperature”, there is a possibility that an abnormality has occurred in the high temperature disk device. Further, for example, when the events detected from the temperature of the hard disk device are a large number of “high temperature” and a small number of “normal temperature”, there is a possibility that an abnormality has occurred in the hard disk device at normal temperature. Further, for example, when the events detected from the temperature of the hard disk device are a large number of “normal temperature” and a small number of “low temperature”, there is a possibility that an abnormality has occurred in the hard disk device at normal temperature. Accordingly, when there are a small number of hard disk devices in a state different from the large number of hard disk devices as in these cases, the failure event determination unit 14 may determine that a failure event has occurred.

  On the other hand, if all the events are “normal temperature”, the failure event determination unit 14 may not determine that a failure event has occurred. Further, even when all the events are “high temperature”, it is considered that the cause is not a failure but an access to the disk array device, for example, so that the failure event determination unit 14 generates a failure event. It is not necessary to determine that it has been done. That is, when all events are equal, if the event does not mean a state directly connected to a failure or a failure, it may not be determined that a failure event has occurred. In addition, the above-mentioned “normal temperature” includes the temperature when the hard disk device whose temperature is to be measured is not in a special situation, for example, the temperature when the load is not high if it is a hard disk device with a low high load time. It represents a temperature within a predetermined range.

  In this example, the event detection unit 13 may detect the measured value of the temperature of each hard disk device itself as an event. In this case, the failure event determination unit 14 determines that the difference between the measured value of the temperature of one of the hard disk devices (hard disk device A) and the measured value of the temperature of another hard disk device has a predetermined threshold value. If so, the occurrence of a failure in the hard disk device A may be determined. The threshold may be a value determined based on experience, for example. The representative value is, for example, an average value, a median value, a mode value, or the like. The measured temperature value may be a discrete value at a predetermined interval instead of a continuous value.

  Further, the combination of events does not necessarily need to be configured only by events detected at the same time. The combination of events may include events having different detection times. Such an example is described below.

  For example, if a failure of a hard disk device is detected as an event, and the replacement of the failed hard disk device is taken as an event again, if the time between the two failures is sufficiently long, two times The failure is considered a natural failure. In this case, the failure event determination unit 14 may determine the occurrence of a failure of the hard disk device as a failure event every time the hard disk device fails. However, if the time between the two failures is short, the two failures may be non-natural failures such as a failure caused by a problem in the installation location of the hard disk device, for example. .

  In this case, the failure event determination unit 14, in the event that a hard disk device failure occurs again within a predetermined period at the same location after the occurrence of a hard disk device failure, in addition to the hard disk device failure, for example, a failure Relapse may be determined. In this case, the combination of events determines the occurrence of a failure event based on a combination of two events of the same type, that is, a failure of a hard disk device at a specific location, occurring within a predetermined period.

(2) Combination of a plurality of events in a plurality of types of sensors The following description is a specific example of conditions for determining a failure event based on a combination of events detected from detection values of a plurality of types of sensors.

  In general, the cooling fan generates more noise and vibration at the same rotation speed at the time of failure or immediately before the failure than at the time of normal operation. However, for example, in a cooling fan that can change the number of rotations depending on the temperature of the object to be cooled, etc., if the number of rotations is increased to increase the air volume, the generated sound and vibration usually increase. Therefore, it is impossible to determine whether a failure or a failure is close based only on the detected value of the measurement result of the sound or vibration magnitude.

  However, it is possible to determine whether a failure or a failure is close by combining the measurement result of the fan rotation speed and the air volume with the measurement result of the sound and vibration magnitude. Based on the relationship between the normal fan rotation speed and air volume and the sound and vibration magnitude, the detected value that measured the fan speed and air flow, and the detected value that measured the sound and vibration It is possible to determine whether a fan failure or failure is close.

  The fan speed and air volume are generally proportional to the magnitude of sound and vibration. For example, the event of the measurement result of the speed and air volume is “Large” and the event of the sound and vibration measurement result is “Large”. If there is, the failure event determination unit 14 may determine that the fan is normal. For example, even when the event of the measurement result of the rotation speed or the air volume is “small” and the event of the measurement result of the sound or vibration is “small”, the failure event determination unit 14 determines that the fan is normal. It's okay. On the other hand, for example, when the event of the measurement result of the rotational speed or the air volume is “large” and the event of the measurement result of the sound or vibration is “small”, the failure event determination unit 14 determines whether the fan has failed or is in a state immediately before the failure. Can be determined.

  The event detection unit 13 determines whether the event is “large” or “small” based on the magnitude relationship with respect to the threshold values determined for the rotation speed, air volume, sound and vibration measurement results. Just decide. Further, the threshold value for the rotational speed, the air volume, the sound, and the vibration may be determined in advance based on experience.

  Moreover, the event detection part 13 may detect the detected value which measured the rotation speed, the air volume, the sound, and the vibration as an event. In this case, the failure event determination unit 14 determines that the failure or the state immediately before the failure is present when the ratio of the detected value of the sound or vibration to the detected value of the rotation speed or the air volume exceeds a threshold value determined based on experience, for example. do it. Note that the measured values of the rotational speed, air volume, sound, and vibration may be continuous values or discrete values, respectively.

  In addition, hard disks tend to have louder sounds and vibrations at the time of failure or immediately before the failure than when operating normally. On the other hand, even in a normal hard disk device, sound and vibration increase during access. Therefore, it is difficult to determine from the measured values of sound and vibration only that the hard disk device is in a failure state or just before the failure.

  However, the detection value input unit 11 obtains information indicating whether access is being performed from a device that accesses the hard disk device, for example, in addition to the detection value of the sensor that measures the sound and vibration of the hard disk device. It can be determined that the device is in failure or in a state immediately before the failure. For example, the sound and vibration in a state where the hard disk device is not accessed (normal time) are measured in advance, and when an event in which the sound and vibration of the hard disk device is larger than normal is detected, the hard disk device is accessed. If the event is detected, the failure event determination unit 14 may not determine the occurrence of the failure event. On the other hand, when an event in which the sound or vibration of the hard disk device is larger than normal is detected, if the event for accessing the hard disk device is not detected, the failure event determination unit 14 determines that the hard disk device What is necessary is just to determine that the apparatus is in the state of failure or just before the failure.

(3) The number of event detections within a predetermined time and the duration of the event detection state In the following explanation, the same event is detected more than a predetermined number of times within a predetermined time, and a predetermined event is detected for a predetermined time. It is a specific example of a condition for determining the occurrence of a failure event when the current state continues.

  Even if a detected event is a minor one that does not immediately lead to a failure or failure, if the event is detected continuously, it will lead to a failure or failure, or a failure or failure may be suspected. There is a case.

  For example, even if the temperature of the hard disk device becomes temporarily high, it does not immediately lead to a failure. However, if the high temperature state continues, the probability that the hard disk device will fail increases.

  Therefore, when the temperature of the hard disk device measured by the temperature sensor is equal to or higher than a predetermined value, the sensor event detection unit 13 may detect an event that the hard disk device is at a high temperature. When an event in which the hard disk device is at a high temperature continues to be detected for a predetermined time, or is detected a predetermined number of times or more within a predetermined time, the failure event determination unit 14 may be in a state requiring caution due to a high temperature, for example. What is necessary is just to determine that it exists.

  In addition, for example, an instantaneous voltage drop may occur due to lightning strikes or the like. Even if an instantaneous voltage drop occurs, the computer device can be continuously operated by using the uninterruptible power supply. Therefore, the occurrence of an instantaneous voltage drop can be said to be a minor event. However, when the instantaneous drop in voltage occurs many times within a predetermined time, for example, lightning strikes frequently occur in the surrounding area, and a power failure may occur.

  In this case, the sensor event detection unit 13 may detect an instantaneous voltage drop from the voltage measured by the voltage sensor. The failure event determination unit 14 may determine, for example, a failure event of a power outage attention when the sensor event detection unit 13 detects an instantaneous voltage drop more than a predetermined number of times within a predetermined time.

  Further, if the voltage drop continues for a predetermined time or more, it is considered that a power failure has occurred.

  In this case, the sensor event detection part 13 should just detect the fall of a voltage from the voltage which the voltage sensor measured. The failure event determination unit 14 may determine, for example, a failure event due to a power failure when the sensor event detection unit 13 detects a continuation of the voltage drop for a predetermined time or longer. Alternatively, the sensor event detection unit 13 may detect from the voltage measured by the voltage sensor that the voltage decrease has continued for a certain period of time. The failure event determination unit 14 may determine, for example, a failure event due to a power failure when the sensor event detection unit 13 detects a voltage drop for a predetermined time or longer.

(4) Combination of conditions described in (1) to (3) The failure event determination unit 14 may determine the occurrence of a failure event based on the combination of conditions described in (1) to (3).

  For example, as described above, when all of the events detected from the temperatures of a plurality of hard disk devices constituting the disk array device are “high temperature”, the failure event determination unit 14 does not determine that a failure event has occurred. Also good. However, when all or a large number of events are in a “high temperature” state for a long time, there is a possibility that the life of the hard disk device in the high temperature state is shortened and a failure occurs. In addition, when all the events are in a “high temperature” state for a long time, it is possible that something other than the hard disk device has failed, for example, the cooling device has failed.

  Therefore, the failure event determination unit 14 may determine that the failure event is in a state requiring caution due to a high temperature, for example, when a state where all or many events are “high temperature” continues for a predetermined time or longer. Further, when the state where all the events are “high temperature” continues for a predetermined time or more, the failure event determination unit 14 may determine, for example, that the cooling capacity is insufficient as the failure event.

  When the failure event determination unit 14 determines the occurrence of a failure event (step S25, Y), the notification destination determination unit 12 refers to the notification table, for example, based on the type of failure event determined by the failure event determination unit 14 Then, the transmission destination device D that is the transmission destination of the notification is determined (step S26). The notification destination determination unit 12 may determine the transmission destination device D based on the type of the failure event determined by the failure event determination unit 14 and the correspondence between the predetermined type of failure event and the transmission destination device D, for example. The transmission destination device D determined by the notification destination determination unit 12 as a notification transmission destination can resolve the failure event determined by the failure event determination unit 14 as necessary. For example, an administrator or a management of a device or a system Any department is sufficient.

  When the transmission destination corresponding to the type of the failure event determined by the failure event determination unit 14 is not determined, the notification destination determination unit 12 may determine the transmission destination determined as the default as the transmission destination device D.

  The notification unit 15 transmits a notification to the transmission destination device D determined by the failure event determination unit 14 (step S28).

  The present embodiment described above has an effect of reducing the burden on the transmission destination of the notification, as in the first embodiment.

  The reason is that the notification destination determination unit 12 determines the transmission destination based on the type of the failure event determined by the failure event determination unit 14, and the notification is transmitted only to the transmission destination according to the detection value of the sensor. This is because that. As described above, the failure event determination unit 14 determines the type of the failure event based on the event detected by the sensor event detection unit 13 from the detection value of the sensor. As a result, unnecessary notifications other than the necessary notification set in advance based on the detection value are not sent to the transmission destination, and the burden on the transmission destination is reduced.

  The present embodiment further has an effect that the notification destination determination unit 12 of the notification can simplify the rule for determining the transmission destination.

  The reason is that the notification destination determination unit 12 determines the transmission destination based on the type of the failure event determined by the failure event determination unit 14 instead of the detected value itself.

(Third embodiment)
Next, a third embodiment of the present invention will be described in detail with reference to the drawings.

  The configuration of the event occurrence notification device 1A of the present embodiment is the same as the configuration of the event occurrence notification device 1A of the second embodiment shown in FIG.

  Below, it demonstrates focusing on the difference between this embodiment and 2nd Embodiment.

  In the second embodiment, the failure event determination unit 14 determines the importance indicating the degree of urgency according to the type of the failure event in addition to the determination of the occurrence and type of the failure event. Different from form. The importance may be determined as appropriate according to the urgency of the failure event.

  The notification destination determination unit 12 is different from the second embodiment in that the notification destination determination unit 12 determines a notification transmission destination according to not only the type of failure event but also the importance.

  Furthermore, the notification unit 15 determines a notification transmission method according to the transmission destination determined by the notification destination determination unit 12 and the importance determined by the failure event determination unit 14, and the transmission destination determined by the notification destination determination unit 12 On the other hand, the point which transmits notification by the determined transmission method differs from 2nd Embodiment. The notification destination determination unit 12 may be configured to determine the notification transmission method together with the notification transmission destination, but in the present embodiment, a configuration in which the notification unit 15 determines the notification transmission method will be described.

  Since the other components of this embodiment are the same as those of the second embodiment, description thereof is omitted.

  Next, the operation of the present embodiment will be described in detail with reference to the drawings.

  FIG. 5 is a flowchart showing the operation of the event occurrence notification device 1A of this embodiment.

  Referring to FIG. 5, steps S21 to S25 in FIG. 5 are the same as the operations from step S21 to step S25 in the second embodiment shown in FIG.

  When the failure event determination unit 14 determines the occurrence of a failure event (step S25, Y), the failure event determination unit 14 refers to, for example, the failure event table, and determines the importance of the failure event according to the determined type of the failure event ( Step S30).

  Unlike the failure event table of the second embodiment, the failure event table of this embodiment includes a plurality of sets of event conditions to be detected as failure events, corresponding types of failure events, and importance levels of failure events. The failure event table of this embodiment is different from the failure event table of the second embodiment in that the failure event table includes the importance corresponding to the type of failure event.

  The importance is, for example, information indicating an appropriately defined degree of urgency such as “information”, “caution”, “abnormal”, “warning”, “emergency”, and the like. The importance may be a numerical value indicating the degree of urgency.

  When the type of the failure event is a minor failure that can be automatically recovered, for example, when the temperature of the hard disk device exceeds a predetermined value, the failure event determination unit 14 sets the importance to the urgency of the failure. What is necessary is just to determine with "information" showing that is low. In addition, when the type of the failure event is a failure with a slightly high urgency, for example, a hard disk of a specific computer device has failed, the failure event determination unit 14 sets the importance to a level with a slightly high urgency of the failure. What is necessary is just to determine with "abnormal" showing. If the type of the failure event is a failure with high urgency such as, for example, a data center power failure, the failure event determination unit 14 determines that the importance is “emergency” indicating that the urgency of the failure is high. That's fine.

  The notification destination determination unit 12 refers to, for example, a notification table, and determines a notification transmission destination according to the type and importance of the failure event (step S31).

  The notification table of the present embodiment includes, for example, a plurality of notification rules that are combinations of types of failure events, importance levels of failure events, information for specifying notification transmission destinations, and notification transmission methods. The notification rule of this embodiment is different from the notification rule of the second embodiment in that it includes the importance of a failure event. For example, the notification destination determination unit 12 corresponds to a failure event type and severity corresponding to a row and a column, and each element represents a notification transmission destination in the case of a failure event type and importance corresponding to a row and a column. It is also possible to determine the transmission destination of the notification with reference to such a notification table. However, the method of associating the type and importance of the failure event with the transmission destination of the notification is not limited to these examples, and is arbitrary.

  For example, when the failure event type is a minor failure that can be automatically recovered, the urgency is low, and the importance is “information”, the notification destination determination unit 12 sets the notification transmission destination to, for example, the management server do it. In addition, when the type of the failure event is, for example, a failure with a high degree of urgency such as a failure of a hard disk of a specific computer device, and the degree of urgency is slightly high and the importance is “abnormal”, the notification destination determination unit 12 The notification destination may be, for example, the terminal of the administrator of the computer apparatus in which the hard disk has failed. When the type of the failure event is, for example, a failure with high urgency such as a power failure in the data center and the importance is “emergency” indicating that the urgency of the failure is high, the notification destination determination unit 12 notifies For example, the room of the facility management unit.

  For example, the notification unit 15 refers to the notification table, and determines the transmission method based on the type and importance of the failure event and the notification transmission destination determined by the notification destination determination unit 12 (step S32). The notification unit 15 transmits a notification to the notification destination determined by the notification destination determination unit 12 by the determined transmission method (step S33).

  The notification unit 15 may determine a notification transmission method based on the importance and the notification transmission destination regardless of the type of the failure event. In this case, for example, the notification unit 15 refers to a table including a plurality of combinations of importance, notification transmission destination, and notification transmission method, and determines the notification transmission method based on the importance and notification transmission destination. That's fine.

  Next, determination of the transmission method according to the importance will be described with an example.

  For example, when the importance is “information” with a low degree of urgency and the transmission destination is the management server, the notification unit 15 uses “message transmission” as the transmission method, for example. In this case, the notification unit 15 transmits a message to the management server. The management server that has received the message may record the message in a message log or send an e-mail that summarizes the received message to the administrator of the management server, for example. By transmitting in this way, there is a low possibility that a notification that is more important than a notification with a low degree of urgency whose importance is “information” will not be read by the notification with a low degree of urgency.

  For example, when the importance is “abnormal” and the transmission destination is the terminal of the administrator of the computer apparatus in which the hard disk has failed, the notification unit 15 may use, for example, an e-mail transmission method. In this case, the notification unit 15 transmits an e-mail to the administrator. On the other hand, for example, when the transmission destination is the terminal of the administrator of the computer apparatus in which the hard disk has failed and the importance is “warning” that is more urgent than “abnormal”, the notification unit 15 displays, for example, the screen of the terminal A message pop-up and an e-mail may be used as a transmission method. In this case, the notification unit 15 may pop up a message on the screen of the administrator's terminal and send an e-mail to the administrator. Pop-up of the received message on the terminal screen can be realized by software operating on the terminal. By transmitting by e-mail and pop-up on the screen, the possibility that the user of the terminal notices the notification early increases.

  For example, when the importance is “emergency” and the transmission destination is, for example, a room of a facility management unit, the notification unit 15 uses, for example, a siren, a rotating lamp, and a broadcast as a transmission method. In this case, for example, the notification unit 15 may perform a broadcast informing the room of the facility management unit of the occurrence of a failure event while sounding the rotating lamp by turning on the siren of the room of the facility management unit. The notification unit 15 may perform the broadcast informing the occurrence of the failure event by generating a prepared voice with a speaker. The siren and the rotating lamp may be configured to be controllable from, for example, control hardware or a computer. In this way, by sending a notification by siren, revolving light, or broadcast, it can be expected that a person in the room that is the destination will immediately notice the notification.

  In addition to the same effects as those of the second embodiment, the present embodiment described above has an effect that the immediacy of notification transmission can be controlled according to the urgency of a failure event.

  The reason is that the notification unit 15 determines the transmission method based on the importance determined by the failure event determination unit 14 and the notification destination determined by the notification destination determination unit 12, and transmits the notification by the determined transmission method. Because. Thus, the event occurrence notification device 1A according to the present embodiment can transmit a notification by a transmission method that can be expected to be reliably transmitted in a short time when notifying a highly urgent failure event. On the other hand, the event occurrence notification device 1A according to the present embodiment can transmit a notification by a transmission method that does not inhibit the transmission of a failure event with high urgency when notifying a failure event with low urgency.

  While the present invention has been described with reference to the embodiments, the present invention is not limited to the above embodiments. Various changes that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention.

DESCRIPTION OF SYMBOLS 1, 1A Event generation | occurrence | production notification apparatus 11 Detection value input part 12 Notification destination determination part 13 Sensor event detection part 14 Fault event determination part 15 Notification part 16 Notification rule memory | storage part 2, 21, 22, 2N Sensor 3 Notification transmission apparatus 4, 41 , 42, 4M Destination device 5 User terminal

Claims (10)

A detection value input means for receiving a detection value detected by the sensor;
Sensor event detection means for detecting an event for each sensor from the detection value according to a condition for a detection value determined for each of the plurality of sensors;
A failure event determination unit that determines the occurrence of a failure event and the type of the failure event that has occurred, from the combination of the events, the time during which the event is being detected, or the number of times the event has been detected within a certain time;
An event occurrence notification device comprising: a notification destination determination unit that determines a transmission destination of the notification according to a type of the failure event. The sensor event detection means detects a fan failure,
The event occurrence notification device according to claim 1, wherein the failure event determination unit determines the occurrence of a failure event when the number of non-failed fans is less than the number corresponding to the required cooling capacity. The sensor event detection means detects temperatures of a plurality of devices of the same type,
If the magnitude of the difference between the temperature of any one of the plurality of devices and the average value, the median value, or the mode value of the other devices exceeds a threshold, the failure event determination means, The event occurrence notification device according to claim 1, wherein occurrence of a failure in the one device is determined. The sensor event detection means detects the number of rotations of the rotating part of the device including the rotating part and the magnitude of sound or vibration emitted by the device,
The event occurrence notification device according to claim 1, wherein the failure event determination unit determines the occurrence of a failure in the device when the ratio of the magnitude of sound or vibration to the rotational speed exceeds a threshold value. The failure event determination means determines an importance level indicating the degree of urgency according to the type of the failure event,
The notification destination determination means determines a transmission destination of the notification according to the importance,
The event according to any one of claims 1 to 5, further comprising a notification unit configured to transmit the notification to the transmission destination of the notification determined by the notification destination determination unit using a transmission method according to the transmission destination and the importance level. Occurrence notification device. Receive the detection value detected by the sensor,
By detecting the event for each sensor from the detection value according to the condition for the detection value determined for each of the plurality of sensors,
From the combination of the events, the time during which the event has been detected, or the number of times the event has been detected within a certain period of time, the occurrence of a fault event and the type of fault event that has occurred are determined,
An event occurrence notification method for determining a transmission destination of the notification according to a type of the failure event. Computer
A detection value input means for receiving a detection value detected by the sensor;
Sensor event detection means for detecting an event for each sensor from the detection value according to a condition for a detection value determined for each of the plurality of sensors;
A failure event determination unit that determines the occurrence of a failure event and the type of the failure event that has occurred, from the combination of the events, the time during which the event is being detected, or the number of times the event has been detected within a certain time;
An event occurrence notification program that operates as a notification destination determination unit that determines a transmission destination of the notification according to a type of the failure event. Computer
The sensor event detecting means for detecting a fan failure;
8. The event occurrence notification program according to claim 7, wherein the event occurrence notification program is operated as the failure event determination means for determining occurrence of a failure event when the number of non-failed fans is less than the number corresponding to the required cooling capacity. Computer
The sensor event detecting means for detecting temperatures of a plurality of devices of the same type;
When the magnitude of the difference between the temperature of any one of the plurality of devices and the average, median, or mode of other devices exceeds a threshold, the failure of the one device The event occurrence notification program according to claim 7, wherein the event occurrence notification program is operated as the failure event determination means for determining occurrence. Computer
The number of rotations of the rotating part of the device including the rotating part, and the sensor event detecting means for detecting the magnitude of sound or vibration emitted by the device;
8. The event occurrence notification program according to claim 7, wherein the event occurrence notification program is operated as the failure event determination means for determining occurrence of a failure in the device when the ratio of the magnitude of sound or vibration to the rotational speed exceeds a threshold value.

Images