JP2013207674A - Network monitoring system, network monitoring method, and control device and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a network monitoring system, a network monitoring method, and a control device and program which, while shortening a time at which monitoring work is disabled when systems are switched, can respond to the amount of alarms in a large-scale network.SOLUTION: A control device 30 exerts control so that alarm collection means 202 of all monitoring devices 20 and alarm processing means 204 of part of all monitoring devices 20 are put to work as an acting system, and also switches some of the monitoring devices 20 to be the object whose abnormality is detected and an alarm is acquired therefrom or to be the one whose alarm processing means 204 is put to work as an acting system. After the monitoring device 20 concerned is switched to be the object of alarm acquisition, a process of loading alarms from a buffer 206 of the switched-over monitoring device 20 is continued. After the alarm processing means 204 is switched over, the latest alarm in a storage region 208 of the switched-over monitoring device 20 and the buffer 206 of the monitoring device 20 switched to be the object of alarm acquisition are compared, then the processing is continued.

Description

  The present invention relates to a system, method, apparatus, and program for monitoring network alarms.

  Due to the increase in scale and complexity of networks, the amount of alarms from network devices has increased, and in network operation and maintenance operations, it is necessary to shorten the time during which monitoring operations cannot be performed as much as possible. For this reason, it is indispensable to make the system for monitoring the network redundant.

  As a system redundancy system, for example, there are a warm standby system and a hot standby system. However, these methods have the following problems.

  In a network monitoring system made redundant by the warm standby method, when system switching occurs, an alarm issued by each network device during system switching is lost. In addition, since it is not known which network device has lost the alarm, it is necessary to acquire the latest alarm from all network devices in the system after switching. While the latest alarm is being acquired, the network monitoring system cannot perform monitoring work because it is not known whether the stored alarm information is the latest state.

  In a network monitoring system made redundant by the hot standby method, alarm reception and alarm processing are performed by both servers. Since processing is performed by both servers, there is a possibility that alarm inconsistency may occur between the servers of both systems due to missing alarms (trap missing) from network devices or overflowing queues in the server due to the occurrence of alarm bursts. There is. This problem can be solved by performing data matching processing between the two servers in the alarm processing unit, but the data matching processing leads to performance degradation of the alarm processing. Therefore, the network monitoring system made redundant by the hot standby method cannot cope with the alarm amount of a large-scale network.

  As a system for shortening the time during which monitoring work cannot be performed, there is a system described in Patent Document 1. Patent Document 1 uses a message buffer to prevent an alarm from being dropped from a plurality of monitored devices, and notifies the status change of the monitored device without locking the alarm information table. can do. Therefore, Patent Document 1 can reduce the time during which monitoring work cannot be performed.

  Patent Document 2 states that when a monitoring device that is duplicated with the 0 system (active system) and the 1 system (standby system) holds the same monitoring data, an abnormality occurs in one system and system switching occurs. Even take a configuration that prevents missing alarms. With this configuration, there is no need to re-collect alarms, and processing delay when system switching occurs can be reduced.

JP 2001-075838 A Japanese Patent Laid-Open No. 10-327150

  However, it is not possible to construct a network monitoring system corresponding to a large-scale network, even if it is possible to reduce the time during which monitoring work cannot be performed by simply making it redundant as in Patent Documents 1 and 2. .

  In view of the above problems, an object of the present invention is to provide a network monitoring system, a network monitoring method, a control device, and a network monitoring system corresponding to an alarm amount of a large-scale network while reducing the time during which the monitoring device cannot perform monitoring work when system switching occurs. To provide a program.

According to the present invention,
A plurality of monitoring devices and at least one control device;
The monitoring device
Alarm collecting means for collecting alarms from monitored devices and temporarily storing them in a buffer;
Alarm processing means for acquiring the alarm from the buffer and storing it in a storage area;
The controller is
Control means for communicating with a plurality of the monitoring devices, and controlling the alarm collecting means of all of the monitoring devices and a part of the alarm processing means of all the monitoring devices,
Detecting means for detecting an abnormality of the monitoring device, and for switching the monitoring device that makes the alarm processing means the monitoring device or the alarm processing means to be used by the alarm processing means;
The storage area is synchronized between the monitoring device in which the alarm processing means is activated and the monitoring apparatus in which the alarm processing means is not activated, and the alarm stored in the storage area is synchronized. A network monitoring system having matching means for matching contents is provided.

According to the present invention,
Using a plurality of monitoring devices and at least one control device,
The monitoring device is
Alarm collection means collects alarms from monitored devices, temporarily stores them in a buffer,
The alarm processing means acquires the alarm from the buffer and stores it in a storage area;
The control device is
A control unit that communicates with a plurality of the monitoring devices, and controls the alarm collecting unit of all the monitoring devices and a part of the alarm processing units of all the monitoring devices to be activated,
An abnormality of the monitoring device is detected by a detection means, and the monitoring device that is used by the alarm processing means as the acquisition target of the alarm or the monitoring device that activates the alarm processing means is switched,
In the matching means, the storage area is synchronized between the monitoring apparatus in which the alarm processing means is currently used and the monitoring apparatus in which the alarm processing means is not currently used, and is stored in the storage area There is provided a network monitoring method for matching the contents of the alarms.

According to the present invention,
An apparatus for controlling a plurality of monitoring devices, comprising alarm collecting means for collecting alarms from monitored devices and temporarily storing them in a buffer, and alarm processing means for acquiring the alarms from the buffer and storing them in a storage area ,
Control means for communicating with a plurality of the monitoring devices, and controlling the alarm collecting means of all of the monitoring devices and a part of the alarm processing means of all the monitoring devices,
Detecting means for detecting an abnormality of the monitoring device, and for switching the monitoring device that makes the alarm processing means the monitoring device or the alarm processing means to be used by the alarm processing means;
The storage area is synchronized between the monitoring device in which the alarm processing means is activated and the monitoring apparatus in which the alarm processing means is not activated, and the alarm stored in the storage area is synchronized. A control device having matching means for matching the contents is provided.

According to the present invention,
Computer
An alarm collecting means for collecting alarms from monitored devices and temporarily storing them in a buffer; and an alarm processing means for acquiring the alarms from the buffer and storing them in a storage area. Means for controlling the alarm collecting means of the monitoring device and a part of the alarm processing means of all the monitoring devices to be activated;
Means for detecting an abnormality of the monitoring device, and switching the monitoring device that uses the monitoring device or the alarm processing unit that is used as the acquisition target of the alarm by the alarm processing unit;
The storage area is synchronized between the monitoring device in which the alarm processing means is activated and the monitoring apparatus in which the alarm processing means is not activated, and the alarm stored in the storage area is synchronized. A program for functioning as a means for matching contents is provided.

  According to the present invention, it is possible to provide a network monitoring system, a network monitoring method, a control device, and a program corresponding to the alarm amount of a large-scale network while reducing the time during which the monitoring device cannot perform monitoring work when system switching occurs.

It is a block diagram which shows the structure of the network monitoring system which concerns on the 1st Embodiment of this invention. It is a flowchart which shows the flow which a monitoring apparatus processes an alarm. It is a flowchart which shows the flow of the process in which the control means of the network monitoring system which concerns on the 1st Embodiment of this invention controls a some monitoring apparatus. It is a figure which shows the example of the table which determines the number which uses an alarm collection means and an alarm process means. It is a flowchart which shows the flow of the process in which a detection means switches an alarm collection means. It is a flowchart which shows the flow of the process in which a detection means switches an alarm process means. It is a block diagram which shows the structure of the network monitoring system which concerns on the 2nd Embodiment of this invention. It is a block diagram which shows the structure of the network monitoring system which concerns on the 3rd Embodiment of this invention. It is a figure which shows the structure of a ring buffer. It is a block diagram which shows the structure of the network monitoring system which concerns on the 4th Embodiment of this invention. It is a flowchart which shows the flow of the alarm process in the 4th Embodiment of this invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In all the drawings, the same reference numerals are given to the same components, and the description will be omitted as appropriate.

(First embodiment)
FIG. 1 is a diagram showing a configuration of a network monitoring system according to the first embodiment of the present invention. The network monitoring system 10 includes a plurality of monitoring devices 20 and at least one control device 30. The plurality of monitoring devices 20 and the control device 30, and the plurality of monitoring devices 20 and a not-shown monitored device are connected via a network.

  The monitoring device 20 includes an alarm collection unit 202 and an alarm processing unit 204. The alarm collection unit 202 collects alarms from the monitored device and temporarily accumulates the collected alarms in the buffer 206. The alarm processing unit 204 acquires an alarm from the buffer 206 and stores it in the storage area 208.

  The control device 30 includes a control unit 302, a detection unit 304, and an alignment unit 306. The control unit 302 communicates with the plurality of monitoring devices 20 and controls the alarm collecting unit 202 of all the monitoring devices 20 and some of the alarm processing units 204 of all the monitoring devices 20 to be activated. . The detection unit 304 detects an abnormality of the monitoring device 20 and switches the monitoring device 20 to be acquired by the alarm processing unit 204 or the monitoring device 20 that makes the alarm processing unit 204 active. The matching unit 306 synchronizes the storage area 208 between the monitoring device 20 in which the alarm processing unit 204 is currently used and the monitoring apparatus 20 in which the alarm processing unit 204 is not currently used. Align the contents of stored alarms.

  In addition, each component of the monitoring apparatus 20 and the control apparatus 30 shown to each figure has shown the block of the function unit instead of the structure of a hardware unit. Each component of the monitoring device 20 and the control device 30 includes an arbitrary computer CPU, memory, a program for realizing the components shown in the figure loaded in the memory, a storage medium such as a hard disk for storing the program, and a network connection It is realized by any combination of hardware and software centering on the interface. There are various modifications of the implementation method and apparatus.

  The processing flow of this embodiment will be described with reference to FIGS.

  FIG. 2 is a flowchart showing a flow in which the monitoring device 20 processes an alarm. The alarm collection unit 202 collects alarms transmitted by the monitored device (S102). The alarm collecting unit 202 temporarily accumulates the collected alarms in the buffer 206 (S104). The alarm processing unit 204 acquires an alarm from the buffer 206 (S106). Then, the alarm processing unit 204 stores the acquired alarm in the storage area 208 (S108).

  FIG. 3 is a flowchart showing a flow of processing in which the control unit 302 controls the plurality of monitoring devices 20. The control unit 302 communicates with the plurality of monitoring devices 20 via the network, and determines the monitoring device 20 that activates the alarm collecting unit 202 and the monitoring device 20 that activates the alarm processing unit 204 (S202). The number of alarm collecting means 202 and alarm processing means 204 to be used may be determined with reference to a table as shown in FIG. 4, for example, or may be determined by user prior input.

  FIG. 5 is a flowchart showing a flow of processing in which the detection unit 304 switches the alarm collection unit 202. The detection unit 304 constantly monitors the state of the monitoring device 20 that is the target for which the alarm processing unit 204 acquires an alarm. When there is no abnormality in the alarm acquisition target monitoring device 20 (NO in S302), the detection unit 304 continues to monitor the state of the monitoring device 20. On the other hand, when an abnormality has occurred in the alarm acquisition target monitoring device 20 (YES in S302), the detection unit 304 transmits to the alarm processing unit 204 a command to switch the monitoring device 20 whose alarm is to be acquired (S304). .

  When the alarm processing unit 204 receives the switching command, the alarm processing unit 204 switches the monitoring device 20 to be an alarm acquisition target (S306). The switching method of the monitoring device 20 is to switch to the next monitoring device 20 by referring to the table of FIG. 4 or to switch the monitoring device 20 based on the priority order set in the storage area 208 in advance. can do. The alarm processing means 204 acquires an alarm from the buffer 206 of the monitoring device 20 after switching (S308). Then, the alarm processing unit 204 determines whether or not the acquired alarm is the same as the storage area 208. For example, the alarm processing unit 204 compares the alarm ID, alarm occurrence time, alarm content, and the like in the read buffer 206 with the alarm information stored in the storage area 208 to determine whether the alarms are the same. Can be judged. When the alarm acquired from the buffer 206 is the same as the alarm stored in the storage area 208 (YES in S310), the alarm processing unit 204 acquires the next alarm from the buffer and stores it in the storage area 208. Search further for no alarms. On the other hand, if the alarm acquired from the buffer 206 is different from the alarm stored in the storage area 208 (NO in S310), it can be understood that the processing before the switching may be continued from this alarm. Therefore, the alarm processing means 204 continues the alarm processing from the alarm.

  FIG. 6 is a flowchart showing a flow of processing in which the detection unit 304 switches the alarm processing unit 204. The detection means 304 is constantly monitoring the monitoring device 20 that performs the alarm processing, with the alarm processing means 204 being used. When there is no abnormality in the monitoring device 20 that performs the alarm processing (NO in S402), the detection unit 304 continues to monitor the state of the monitoring device 20. On the other hand, when an abnormality has occurred in the monitoring device 20 that performs alarm processing (YES in S402), the detection unit 304 switches the monitoring device 20 that performs alarm processing and then performs alarm processing unit 204 of the monitoring device 20 that performs alarm processing. A switching command is transmitted to (S404).

  When the alarm processing means 204 of the monitoring apparatus 20 after switching receives the switching command, the alarm processing means 204 refers to the alarm occurrence time stored in the storage area 208 of the monitoring apparatus 20 after switching, for example, to check the latest alarm. Is acquired (S406). Then, the alarm processing unit 204 acquires an alarm from the buffer 206 of the monitoring device 20 to be acquired (S408), and searches for the same alarm as the latest alarm acquired in S406. The determination of whether or not the alarms are the same can be made in the same manner as when the alarm collecting means is switched. If the alarm acquired from the buffer 206 in S408 is not the same as the latest alarm acquired in S406 (NO in S410), the alarm processing unit 204 acquires the next alarm from the buffer and acquires the latest alarm in the storage area 208. Search further for the same alarm as the alarm. On the other hand, if the alarm acquired from the buffer 206 in S408 is the same as the latest alarm acquired in S406 (NO in S410), the processing prior to switching may be continued from the next alarm of this alarm. I understand. Therefore, the alarm processing means 204 reads the alarm next to the alarm from the buffer 206 of the alarm acquisition target monitoring device 20, and continues the alarm processing (S412).

  The storage area 208 needs to be consistent among the monitoring devices 20. The matching unit 306 performs matching processing of the storage area 208 between the monitoring devices 20, but this method is realized by the “conventional method” and does not perform matching processing at the AP level.

  As described above, in this embodiment, the alarm collecting unit 202 of all the monitoring devices 20 is used. Further, in the present embodiment, a configuration is adopted in which some alarm processing means 204 of all the monitoring devices 20 are activated. The storage area of each monitoring device 20 is not matched at the AP level. Since the alarm collecting means 202 of all the monitoring devices 20 is used, no omission at the time of alarm collection occurs. Therefore, the alarm of the monitored device is collected again after switching the monitoring device 20 as the alarm acquisition target. And processing can be continued. Further, the performance of the alignment processing is higher than the configuration in which some of the alarm processing means 204 among all the monitoring devices 20 are currently used and the configuration in which the storage area 208 of each monitoring device 20 does not perform alignment at the AP level. Deterioration can be reduced. Therefore, with these configurations, it is possible to construct a system in which the performance degradation with respect to the alarm amount is reduced in a large-scale network while reducing the processing delay when the switching of the monitoring device 20 occurs.

(Second Embodiment)
This embodiment is the same as the first embodiment except for the following points.

  FIG. 7 is a block diagram showing a configuration of a network monitoring system according to the second embodiment of the present invention. In the present embodiment, the alarm collection unit 202 is used in all the monitoring apparatuses 20 in the network monitoring system 10. On the other hand, the alarm processing unit 204 is currently used in one of all the monitoring devices 20 in the network monitoring system 10. Note that the flow of processing in the present embodiment other than the difference in configuration is the same as that in the first embodiment, and is therefore omitted.

  As described above, also in this embodiment, the same effect as that of the first embodiment can be obtained. In the present embodiment, a configuration is adopted in which the number of monitoring devices 20 in which the alarm processing unit 204 is currently used is one. With this configuration, it is possible to reduce the time during which monitoring work cannot be performed while adjusting the number of monitoring devices 20 in which the alarm processing unit 204 is currently used to suppress power consumption.

(Third embodiment)
This embodiment is the same as the first and second embodiments except for the following points.

  FIG. 8 is a block diagram showing the configuration of the network monitoring system according to the third embodiment of the present invention. In this embodiment, the ring buffer 210 is used as means for temporarily storing alarms.

  As shown in FIG. 9, the ring buffer 210 has a read pointer indicating a position for reading an alarm and a write pointer indicating a position for writing the alarm. The alarm indicated by the read pointer indicates that the alarm is accumulated first in the ring buffer 210. Note that the size of the ring buffer 210 may be variable according to the alarm generation amount, for example, by monitoring the alarm generation amount in time units by the alarm collecting means 202.

  The alarm processing unit 204 acquires an alarm indicated by the read pointer of the ring buffer 210 and processes it in the same manner as in the first and second embodiments.

  As described above, also in this embodiment, the same effects as those in the first and second embodiments can be obtained. In this embodiment, the ring buffer 210 is used as means for temporarily storing alarms. With this configuration, the buffer area for temporarily storing alarms can be made variable, and it is possible to secure an area without waste rather than using a predetermined buffer area.

(Fourth embodiment)
The present embodiment is the same as the first to third embodiments except for the following points.

  FIG. 10 is a block diagram showing the configuration of the network monitoring system in the fourth embodiment of the present invention. The present embodiment further includes display means 40 for displaying the alarm acquired by the alarm processing means.

  FIG. 11 is a flowchart showing the flow of alarm processing of the present embodiment. The alarm processing means 204 stores the acquired alarm in the storage area 208 and transmits it to the display means 40 (S502). The display means can present alarm information to the user, for example, by displaying information about the alarm on a display or printing a form with a printer. Note that a response method corresponding to the type of alarm may be stored in the storage area 208 in advance, and the alarm processing unit 204 may transmit the alarm and the response method together and display them on the display unit 40.

  As mentioned above, also in this embodiment, the same effect as the 1st-3rd embodiment can be acquired. The present embodiment takes a configuration further comprising display means 40 for displaying alarm information. With this configuration, it is possible to present information related to the alarm acquired by the system to the user, and the user can more easily grasp the information related to the alarm.

In addition, according to embodiment mentioned above, the following invention is disclosed.
(Appendix 1)
A plurality of monitoring devices and at least one control device;
The monitoring device
Alarm collecting means for collecting alarms from monitored devices and temporarily storing them in a buffer;
Alarm processing means for acquiring the alarm from the buffer and storing it in a storage area;
The controller is
Control means for communicating with a plurality of the monitoring devices, and controlling the alarm collecting means of all of the monitoring devices and a part of the alarm processing means of all the monitoring devices,
Detecting means for detecting an abnormality of the monitoring device, and for switching the monitoring device that makes the alarm processing means the monitoring device or the alarm processing means to be used by the alarm processing means;
The storage area is synchronized between the monitoring device in which the alarm processing means is activated and the monitoring apparatus in which the alarm processing means is not activated, and the alarm stored in the storage area is synchronized. A network monitoring system having matching means for matching contents.
(Appendix 2)
In the network monitoring system according to attachment 1,
The control means includes
A network monitoring system that activates the alarm processing means of one of the monitoring devices among all the monitoring devices.
(Appendix 3)
In the network monitoring system according to appendix 1 or 2,
The network monitoring system, wherein the buffer is a ring buffer.
(Appendix 4)
In the network monitoring system according to appendices 1 to 3,
A network monitoring system further comprising display means for displaying information on the alarm.
(Appendix 5)
Using a plurality of monitoring devices and at least one control device,
The monitoring device is
Alarm collection means collects alarms from monitored devices, temporarily stores them in a buffer,
The alarm processing means acquires the alarm from the buffer and stores it in a storage area;
The control device is
A control unit that communicates with a plurality of the monitoring devices, and controls the alarm collecting unit of all the monitoring devices and a part of the alarm processing units of all the monitoring devices to be activated,
An abnormality of the monitoring device is detected by a detection means, and the monitoring device that is used by the alarm processing means as the acquisition target of the alarm or the monitoring device that activates the alarm processing means is switched,
In the matching means, the storage area is synchronized between the monitoring apparatus in which the alarm processing means is currently used and the monitoring apparatus in which the alarm processing means is not currently used, and is stored in the storage area A network monitoring method for matching the contents of the alarms.
(Appendix 6)
An apparatus for controlling a plurality of monitoring devices, comprising alarm collecting means for collecting alarms from monitored devices and temporarily storing them in a buffer, and alarm processing means for acquiring the alarms from the buffer and storing them in a storage area ,
Control means for communicating with a plurality of the monitoring devices, and controlling the alarm collecting means of all of the monitoring devices and a part of the alarm processing means of all the monitoring devices,
Detecting means for detecting an abnormality of the monitoring device, and for switching the monitoring device that makes the alarm processing means the monitoring device or the alarm processing means to be used by the alarm processing means;
The storage area is synchronized between the monitoring device in which the alarm processing means is activated and the monitoring apparatus in which the alarm processing means is not activated, and the alarm stored in the storage area is synchronized. A control device having matching means for matching contents.
(Appendix 7)
Computer
An alarm collecting means for collecting alarms from monitored devices and temporarily storing them in a buffer; and an alarm processing means for acquiring the alarms from the buffer and storing them in a storage area. Means for controlling the alarm collecting means of the monitoring device and a part of the alarm processing means of all the monitoring devices to be activated;
Means for detecting an abnormality of the monitoring device, and switching the monitoring device that uses the monitoring device or the alarm processing unit that is used as the acquisition target of the alarm by the alarm processing unit;
The storage area is synchronized between the monitoring device in which the alarm processing means is activated and the monitoring apparatus in which the alarm processing means is not activated, and the alarm stored in the storage area is synchronized. A program for functioning as a means to align content.
(Appendix 8)
In the network monitoring method according to attachment 5,
The control means includes
A network monitoring method for using the alarm processing means of one of the monitoring devices among all the monitoring devices.
(Appendix 9)
In the network monitoring method according to attachment 5 or 8,
The network monitoring method, wherein the buffer is a ring buffer.
(Appendix 10)
In the network monitoring method according to any one of appendices 5, 8 to 10,
A network monitoring method further comprising display means for displaying information on the alarm.
(Appendix 11)
In the control device according to attachment 6,
The control means includes
A control device that activates the alarm processing means of one of the monitoring devices among all the monitoring devices.
(Appendix 12)
In the program described in Appendix 7,
The computer,
The control means;
A program for causing an alarm processing unit of one of the monitoring devices to function as a working unit among all the monitoring devices.
(Appendix 13)
In the program described in Appendix 7 or 12,
The computer,
A program for functioning as means for setting the buffer as a ring buffer.
(Appendix 14)
In the program described in appendix 7, 12-13,
The computer,
A program for causing the display means to further function as means for displaying the alarm information.

  As mentioned above, although embodiment of this invention was described with reference to drawings, these are the illustrations of this invention, Various structures other than the above are also employable. For example, the network monitoring system 10 may employ a configuration in which one device is a combination of the alarm processing unit 204 and the storage area 208, and a plurality of devices are the combination of the alarm collection unit 202 and the buffer 206. .

DESCRIPTION OF SYMBOLS 10 Network monitoring system 20 Monitoring apparatus 202 Alarm collection means 204 Alarm processing means 206 Buffer 208 Storage area 210 Ring buffer 30 Control apparatus 302 Control means 304 Detection means 306 Matching means 40 Display means

Claims (7)

A plurality of monitoring devices and at least one control device;
The monitoring device
Alarm collecting means for collecting alarms from monitored devices and temporarily storing them in a buffer;
Alarm processing means for acquiring the alarm from the buffer and storing it in a storage area;
The controller is
Control means for communicating with a plurality of the monitoring devices, and controlling the alarm collecting means of all of the monitoring devices and a part of the alarm processing means of all the monitoring devices,
Detecting means for detecting an abnormality of the monitoring device, and for switching the monitoring device that makes the alarm processing means the monitoring device or the alarm processing means to be used by the alarm processing means;
The storage area is synchronized between the monitoring device in which the alarm processing means is activated and the monitoring apparatus in which the alarm processing means is not activated, and the alarm stored in the storage area is synchronized. A network monitoring system having matching means for matching contents. The network monitoring system according to claim 1,
The control means includes
A network monitoring system that activates the alarm processing means of one of the monitoring devices among all the monitoring devices. The network monitoring system according to claim 1 or 2,
The network monitoring system, wherein the buffer is a ring buffer. In the network monitoring system according to any one of claims 1 to 3,
A network monitoring system further comprising display means for displaying information on the alarm. Using a plurality of monitoring devices and at least one control device,
The monitoring device is
Alarm collection means collects alarms from monitored devices, temporarily stores them in a buffer,
The alarm processing means acquires the alarm from the buffer and stores it in a storage area;
The control device is
A control unit that communicates with a plurality of the monitoring devices, and controls the alarm collecting unit of all the monitoring devices and a part of the alarm processing units of all the monitoring devices to be activated,
An abnormality of the monitoring device is detected by a detection means, and the monitoring device that is used by the alarm processing means as the acquisition target of the alarm or the monitoring device that activates the alarm processing means is switched,
In the matching means, the storage area is synchronized between the monitoring apparatus in which the alarm processing means is currently used and the monitoring apparatus in which the alarm processing means is not currently used, and is stored in the storage area A network monitoring method for matching the contents of the alarms. An apparatus for controlling a plurality of monitoring devices, comprising alarm collecting means for collecting alarms from monitored devices and temporarily storing them in a buffer, and alarm processing means for acquiring the alarms from the buffer and storing them in a storage area ,
Control means for communicating with a plurality of the monitoring devices, and controlling the alarm collecting means of all of the monitoring devices and a part of the alarm processing means of all the monitoring devices,
Detecting means for detecting an abnormality of the monitoring device, and for switching the monitoring device that makes the alarm processing means the monitoring device or the alarm processing means to be used by the alarm processing means;
The storage area is synchronized between the monitoring device in which the alarm processing means is activated and the monitoring apparatus in which the alarm processing means is not activated, and the alarm stored in the storage area is synchronized. A control device having matching means for matching contents. Computer
An alarm collecting means for collecting alarms from monitored devices and temporarily storing them in a buffer; and an alarm processing means for acquiring the alarms from the buffer and storing them in a storage area. Means for controlling the alarm collecting means of the monitoring device and a part of the alarm processing means of all the monitoring devices to be activated;
Means for detecting an abnormality of the monitoring device, and switching the monitoring device that uses the monitoring device or the alarm processing unit that is used as the acquisition target of the alarm by the alarm processing unit;
The storage area is synchronized between the monitoring device in which the alarm processing means is activated and the monitoring apparatus in which the alarm processing means is not activated, and the alarm stored in the storage area is synchronized. A program for functioning as a means to align content.

Images