JP2001034552A - Automatic monitoring system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To obtain an automatic monitoring system which concentrically monitor an abnormality of an integrated system including a host computer, decentralized servers, and network communication equipment and properly handles the abnormality. SOLUTION: Mainframes 101 to 103, decentralized servers 201 and 202, and network communication devices 301 to 306 detect an abnormal end of application software, and edit and send a message of the abnormal end to a monitoring function terminal side. A monitoring function terminal 401 once receiving the edited message analyzes it to retrieve a contact destination for abnormality and handling contents from an abnormality contact destination master. Then the analyzed message and the retrieved contact destination and handling contents for abnormality are displayed on an abnormality information display terminal 402. Further, handling contents for the abnormal end displayed on its screen are inputted to generate a management database.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a mainframe,
The present invention relates to an automatic monitoring system that automatically monitors abnormality information generated in a system in which a distributed server and a network communication device operate.

[0002]

2. Description of the Related Art A system for recognizing and notifying the occurrence of an abnormality in a computer system has been conventionally proposed. For example, Japanese Patent Application Laid-Open No. H10-207743 discloses that an abnormality that occurs during unattended operation of a computer is automatically detected, a person in charge is called via a public line, and the person in charge is notified of an abnormality in the host computer from the portable terminal. A management system has been proposed in which a person in charge can deal with the abnormality and can call another person in charge when the person in charge cannot deal with the abnormality.

[0003]

However, JP-A-10-207743 describes the notification method in detail, but the monitoring target is only the host computer, and the host computer, the distributed server, and the network communication are not monitored. There is no mention of how to monitor an integrated system of devices. In addition, since it is assumed that the host computer is operated unattended at night,
There is no mention of a notification method when a person in charge is present at the company during the daytime.

[0004] The present invention has been made in view of the above situation, and intensively monitors abnormalities in an integrated system including a host computer, a distributed server, and a network communication device, and appropriately addresses the abnormalities. It is an object of the present invention to provide an automatic monitoring system which can be used.

[0005]

(1) An automatic monitoring system according to one aspect of the present invention includes an automatic monitoring system for monitoring a mainframe, a distributed server, and a network communication device at a monitoring function terminal via a line. In the above, the mainframe, the distributed server, and the network communication device, when the application software running on each device abnormally terminates, edit the abnormal termination detection means for detecting the abnormal termination, and edit the detected abnormal termination message. It comprises a message editing means and a message transmitting means for transmitting the edited message to the monitoring function terminal side. (2) An automatic monitoring system according to another aspect of the present invention is an automatic monitoring system for monitoring a mainframe, a distributed server, and a network communication device on a monitoring function terminal side via a line. Storage means for storing information corresponding to the content, message analysis means for analyzing an edited message transmitted from a mainframe, a distributed server or a network communication device when an abnormality is detected, and storage means based on the analyzed message A search means for searching for the information at the time of the corresponding abnormality from; an analyzed message; and an abnormality information display means for displaying the searched information at the time of the abnormality, and the message and the information displayed on the screen. And response content input means for inputting response content.

(3) An automatic monitoring system according to another aspect of the present invention is an automatic monitoring system for monitoring a mainframe, a distributed server, and a network communication device on a monitoring function terminal side via a line. The server and the network communication device, when the application software running on each device abnormally ends, abnormal end detection means for detecting the abnormal end,
A message editing unit that edits the detected abnormal termination message; and a message transmission unit that transmits the edited message to the monitoring function terminal. The monitoring function terminal includes information corresponding to the content of the error. Storage means for storing the edited message transmitted from the message transmission means, a message analysis means, and a search means for searching the storage means for a corresponding abnormal information based on the analyzed message. Abnormality information display means for displaying the analyzed message and the retrieved information at the time of abnormality on the screen, and response content input means for inputting the response content for the message and information displayed on the screen. It is provided.

(4) In the automatic monitoring system according to another aspect of the present invention, in the automatic monitoring system according to the above (2) or (3), information (for example, a contact address and a countermeasure method) corresponding to an abnormality is stored in a storage unit. It is provided with registration means for registration. (5) In the automatic monitoring system according to another aspect of the present invention, in the automatic monitoring system according to the above (2), (3) or (4), the progress is monitored on the basis of the analyzed message and the content of the input response. Database creation means for creating a database for management, database search means for searching the database to obtain information on the progress,
Progress information display means for displaying information on the searched progress status.

[0008]

FIG. 1 is a block diagram of an automatic monitoring system according to an embodiment of the present invention. In FIG. 1, 10
1 to 103 are mainframes and 201 to 205 are distributed servers. 301 to 306 are network communication devices, 301 is a communication control device, 302 to 304 are gateways, and 305 and 306 are routers. 401 is a monitoring function terminal, and 402 is an abnormal information display terminal. Mainframes 101-103, distributed servers 201-20
5 and the network communication devices 301 to 306 are each running various types of application software, and each application software continues to emit various messages during operation. For example, when operating normally, the message of the situation is kept flowing, and when an abnormality occurs, the message of the situation is kept flowing. The main frames 101 to 103 in FIG.
The distributed servers 201 to 205 and the network communication devices 301 to 306 incorporate the abnormal end detecting means, the message editing means and the message transmitting means of the present invention, respectively. Means, search means and response content input means.

FIG. 2 is a flowchart showing the flow of processing in the automatic monitoring system of FIG. 1. The processing will be described with reference to FIG.

(Steps S11 and S12) The mainframes 101 to 103, the distribution servers 201 to 205, and the network communication devices 301 to 306 each have a message table (not shown) therein. This message table contains each mainframe,
In order to detect abnormally terminated application software for each distributed server or network communication device, batch job names, online transaction names, process names, tasks according to the naming standards for each mainframe, each distributed server or each network communication device A name, etc., and a message for detecting the reason for the abnormal termination are registered. One example is shown below.

IEF450I Job name Step name xxxxxxxx -ABEND = Sxxx Uxxxx REASON = lEF452I Job name JOB NOT RUN-JCL ERROR-TIME = xx.xx.xx DFS555I TRAN Transaction name ABEND (SYSID sss); MSG IN PROCESS・ ・ ・ ・ ・ ・ ・ ・ ・ ・ ・ ・ ・ ・ ・ ・ ・ ・ ・ ・

The message table constantly monitors various messages issued while the application software is running (S11), and detects the same message as the message indicating the abnormal end registered in the message table. It recognizes that the detected application software running on the mainframe, distributed server or network communication device has terminated abnormally (S12).

(Steps S13 and S14) In order to edit the recognized abnormal termination message into a format that can be transmitted to the monitoring function terminal 401, the message includes a key part such as a job name and a transaction name and an error content indicating the abnormal termination. And a frame to be transmitted is formed (S13). Then, the transmission frame is transmitted to the monitoring function terminal 401 (S14).

FIG. 3 is a diagram showing an example of a transmission frame. Here, the first field is the transmission information, the second field is the date when the error occurred, the third field is the time when the error occurred, the fourth field was the machine where the error occurred, and the fifth field. The key field contains the name of the job that ended abnormally, the transaction name, etc., the code name indicating the cause of the error in the sixth field, and the detected error message in the last field. This transmission frame is one for each message indicating a detected abnormal end.
Since the transmission frame is created, a plurality of transmission frames may be created in the same mainframe, the same distributed server, and the same network communication device.

(Steps S15 to S18) When the monitoring function terminal 401 receives a transmission frame from a mainframe, a distributed server or a network communication device in which an abnormal end has occurred (S15), it performs the following processing. First, the program specified in the transmission information of the transmission frame is operated. This program has two functions.

FIG. 4 is a diagram schematically showing the processing of the program. The display interface in the figure (hereinafter referred to as OST)
), The key portion in the received transmission frame is analyzed and detected, and the key content is passed to a data interface (hereinafter, referred to as DST) (S1).
6). The DST searches the abnormal contact master 403 (the contents will be described later) using the passed key as a key, and retrieves the "person in charge", "contact telephone number",
The information of the "method of coping" is acquired, and the acquired information is transferred to the OST again (S17). The OST inserts the information passed from the DST according to the order passed to the display information queue, and simultaneously displays the information at the head of the queue on the screen of the abnormal information display terminal 402 and the management database 404. (S18).

(Step S19) FIG. 5 is a diagram showing an example of an abnormal information display screen, and FIG. 6 is a diagram showing a queue process. When an abnormal termination occurs and a message (transmission frame) of the abnormal termination is received, before the screen of FIG. 5 appears, the operator responds or ignores the message (for example, it is understood that the operator can ignore it in a test or the like). Appears on the screen to select whether or not
When the operator selects "corresponds", the screen shown in FIG. 5 appears. The operator performs the work according to the information on the notification method and the coping method at the time of occurrence of the abnormal end displayed on the screen shown in FIG.

In the example shown in FIG. 5, when the operator selects "corresponding to operator", a check is put in "corresponding to operator" in the correspondence status. In this case, the contact to the person in charge is also divided into those that do not need to be contacted urgently according to the registered information, but in the example shown in the figure, the contact method is displayed as "emergency contact call contact" ( This is set in advance according to the key name.
In this case, emergency contact will be made.

When the operator clicks the contact information button in the "contact system" in FIG. 5, information on the contact information of the contact appears (see FIG. 7), and the operator calls the contact information. Will do. At that time, by clicking the “contacting the person in charge” button shown in the area A of FIG. 5, the “contacting the person in charge” of the response status is checked and the progress is displayed. . When this check is entered, a button of “in charge of person in charge” appears in the area A of FIG. Then, the operator contacts the person in charge, and presses the button of "Responsible for person in charge" to check the "contacting person in charge" of the correspondence status. When this check is entered, a “Done” button appears in the area A of FIG.

If a plurality of pieces of abnormality information occur, the number of cases inserted in the queue is displayed on the screen. If the content can be processed by the operator, a message to that effect is displayed, and the operator performs the process (see FIG. 10). Then, when there is a notification that the processing has been completed from the person in charge, or when the processing has been completed by the operator, the operator clicks the “Complete” button. As a result, "Complete" in the response status is checked, and the process ends. Then, the abnormality information that has been displayed so far is deleted from the queue, and the abnormality information in the next order is displayed on the screen. In the example of FIG. 6, when the processing of the type “BB” is completed, the “CC” waiting next
Will automatically be displayed.

When other abnormality information is to be confirmed first, such as when confirmation cannot be completed, the corresponding abnormality information can be displayed by a scroll button on the screen and processed. Further, the screen of FIG. 5 is also provided with a job search function, so that a corresponding job can be easily searched.

The processing is performed in the management function terminal 401 as described above. The abnormal termination message and the information on the details of the measures and processes are sequentially recorded in the management database 404, and a database for managing the progress is created. You. By operating the management function terminal 401 and searching the management database 404, information on the progress can be obtained and displayed on the abnormality information display terminal 402, thereby grasping the overall progress. Can be.

Next, the abnormal contact master 403 and its registration method will be described. FIG. 7 shows a person in charge new registration screen. First, a person to be contacted registers personal information on this screen. The personal information includes a company extension / telephone number, a home telephone number, and the like. Subsequently, the responder group information is registered. Here, a group name is automatically issued for each business management group, and four persons from a primary person in charge to a tertiary person in charge and a person in charge can be registered.

FIG. 8 is a diagram showing an example of the responder group registration screen. The group name "GRP699" is automatically issued to the corresponding person group registered according to the new person in charge registration screen of FIG. 7, and the names of the primary and secondary persons and the persons in charge are displayed.

FIG. 9 is a diagram showing a list of registered group information. A list of primary to tertiary personnel and responsible person names is displayed for each responder group.

FIG. 10 is a diagram showing an example of a new registration screen of the abnormal-time contact correspondence information. Here, the target KEY is an item for inputting a monitoring target job name, a transaction name, and the like, and the business content is an item for inputting the business content to which the monitoring target job, transaction, and the like belong. When the communication system management group inputs the group name registered in FIG. 8, the registered person name is automatically input in the person in charge column. In addition, the communication method is selected from next day communication, emergency call communication, and unnecessary communication. Regarding the management department, management category, communication method, and primary response method, selection and input of relevant items are required, and free text can be entered in the contact information to the operator and the application management information column.

FIG. 11 is a diagram showing a list of the registered abnormal correspondence information. When the corresponding KEY name is selected in FIG. 11, the screen showing the registered contents of FIG. 10 is displayed, and the correction work can be freely performed. . Here, a search function is provided, and when a target key is input, a job, transaction, or the like at that time can be extracted instantaneously. Further, when the content to be newly registered is close to the content already registered, the input function is simplified by using the copy function.

[0028]

As described above, according to the present invention, a system in which a mainframe, a distributed server, and a network communication device operate can be integrated and automatically monitored, so that a small number of operators can respond. And enable
Since the operator confirms the abnormal information and takes action, unnecessary abnormal information is not notified to the person in charge of the application. Furthermore, the function of managing the progress of the abnormality information and creating a response history of the abnormality information enables the analysis of the occurrence of the abnormality, which has a great effect of contributing to the prevention of the occurrence of the abnormality.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of an automatic monitoring system according to an embodiment of the present invention.

FIG. 2 is a flowchart showing a flow of processing in the automatic monitoring system of FIG. 1;

FIG. 3 is a diagram illustrating an example of a transmission frame.

FIG. 4 is a schematic processing diagram of a program.

FIG. 5 is a diagram showing an example of an abnormality information display screen.

FIG. 6 is a diagram illustrating an example of a queue process.

FIG. 7 is a diagram showing an example of a new staff member registration screen.

FIG. 8 is a diagram showing an example of a corresponding person group registration screen.

FIG. 9 is a diagram showing a group information list.

FIG. 10 is a diagram showing an example of a new-time-of-abnormality-correspondence information registration screen.

FIG. 11 is a diagram showing a list of abnormal-time contact correspondence information.

[Explanation of symbols]

 101 to 103 Main frame 201 to 205 Distributed frame 301 to 308 Network communication device 401 Monitoring function terminal 402 Error information display terminal 403 Error communication master 404 Management database

──────────────────────────────────────────────────の Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G06F 15/177 672 G06F 15/177 672C 678 678A (72) Inventor Kazunori Matsui Horikawa, Yuki-ku, Kawasaki-shi, Kanagawa 580, Machi-cho, Inc. (72) Inventor Hikaru Nobukin 580, Horikawa-cho, Saiwai-ku, Kawasaki, Kanagawa Prefecture F-term (reference) 5B042 GA12 KK09 MA08 MA11 NN04 5B045 BB19 BB28 BB47 GG01 JJ02 JJ07 JJ09 JJ13 JJ14 5B089 GA21 GB03 JB17 KC15 KC41 KC44 KC47 KG10 LB14 MC08 MD03

Claims (5)

[Claims] 1. An automatic monitoring system for monitoring a mainframe, a distributed server, and a network communication device on a monitoring function terminal side via a line, wherein the mainframe, the distributed server, and the network communication device operate on respective devices. Abnormal end detecting means for detecting abnormal termination when application software to be abnormally terminated, a message editing means for editing a message of the detected abnormal termination, and a message for transmitting the edited message to the monitoring function terminal side An automatic monitoring system comprising transmission means. 2. An automatic monitoring system for monitoring a mainframe, a distributed server, and a network communication device on a monitoring function terminal side via a line, wherein information corresponding to an abnormality content is stored in the monitoring function terminal side. Message analyzing means for analyzing an edited message transmitted from the mainframe, the distributed server or the network communication device when an error is detected, and searching the storage means based on the analyzed message for information on a corresponding error. Search means for performing, an abnormal information display means for displaying on the screen the analyzed message and the information on the detected abnormality, and a response content input for inputting the response content for the message and information displayed on the screen Automatic monitoring system characterized by comprising: 3. An automatic monitoring system for monitoring a mainframe, a distributed server, and a network communication device on a monitoring function terminal side via a line, wherein the mainframe, the distributed server, and the network communication device operate on respective devices. Abnormal end detecting means for detecting abnormal termination when application software to be abnormally terminated, a message editing means for editing a message of the detected abnormal termination, and a message for transmitting the edited message to the monitoring function terminal side Transmission means, respectively, and, on the monitoring function terminal side, storage means for storing information corresponding to the content of the abnormality,
Message analysis means for analyzing the edited message transmitted from the message transmission means, a search means for searching the corresponding abnormal information from the storage means based on the analyzed message, the analyzed message,
An automatic information processing system comprising: an abnormality information display unit for displaying on a screen information on a detected abnormality; and a response content input unit for inputting a response content for the message and information displayed on the screen. Monitoring system. 4. The automatic monitoring system according to claim 2, further comprising a registration unit for registering information corresponding to the content of the abnormality in said storage unit. 5. A database creating means for creating a database for managing a progress status based on an analyzed message and an input response content, and a database search means for searching the database to obtain information on the progress status. The automatic monitoring system according to any one of claims 2 to 4, further comprising: a progress information display unit configured to display information on the searched progress status.