JP2005080238A - Massage extraction device and message extraction method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a massage extraction device and a message extraction method for quickly extracting a critical failure massage related to device failure from non-real-time massages. <P>SOLUTION: The massage extraction device 1 is provided with a massage receiving unit 12 for receiving the messages generated in communication devices 10a, 10b and 10c via a communication network 11, a message discriminating unit 13 for discriminating the received massages from the non-real-time massages or real-time massages, a construction information determination unit 14 for determining the critical failure message among the non-real-time messages in reference to construction information, a congestion information determination unit 15 for determining the critical failure message among the non-real-time messages in reference to congestion information, and a subordinate information determination unit 16 for determining the critical failure message among the non-real-time messages in reference to subordinate information occurred in subordination to the critical failure. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a message extraction device and a message extraction method for extracting an important failure message from messages indicating an abnormal event transmitted from a communication device.

  Conventionally, when an abnormal event occurs in a communication network, a message transmitted from a communication device such as an exchange or a base station includes an important failure message (hereinafter referred to as “real-time message”) that requires action in real time. There are non-real time messages that do not need to be processed in real time. Real-time messages are messages that affect services and are highly urgent. FIG. 15 is a schematic diagram of message generation. A real-time message transmitted when an abnormal event occurs in the communication devices 100a, 100b, and 100c is indicated as “MJ”, and a non-real-time message is indicated as “MN”.

  The message receiving unit 112 of the message extracting device 101 receives real-time messages and non-real-time messages generated from the communication devices 100 a, 100 b, and 100 c via the communication network 111 and stores them in the message holding unit 120. Then, the message selection unit 113 determines the type of the message by referring to the message header and the like, and stores the real-time message in the real-time message holding unit 121 and the non-real-time message in the non-real-time message holding unit 122.

  Since the real-time message is highly urgent, when the real-time message is received, the integrated management operation system is usually notified, and an action corresponding to the message is promptly taken. On the other hand, since non-real time messages do not directly affect the service, there is no problem even if they are not processed in real time. However, since non-real-time messages include messages that lead to critical failures when measures are delayed, it is necessary to extract such critical failure messages.

  For example, as shown in FIG. 15, the non-real-time message includes a message MN1 generated when the communication devices 100a, 100b, and 100c are under construction, a call processing connection timeout error due to a periodically increasing traffic factor, and the like. Message MN2 generated due to congestion of the mobile network, message MN3 generated depending on the occurrence of an important failure, and the like. In such a non-real-time message, an important failure message MN4 generated due to a failure may be mixed.

  In order to sort out such messages, when non-real-time messages are generated in a chain from a large number of communication facilities, the non-real-time messages are based on the correlation data between the messages and the simultaneous occurrence frequency data of the messages generated in a chain. A technique for selecting an important failure message from among the above is disclosed (for example, see Patent Document 1).

A general method for extracting a non-real-time message of a communication apparatus and determining whether or not it is an important failure message will be described with reference to FIG. In this method, a threshold value for determining the number of occurrences of non-real-time messages that require failure measures is set in advance for each failure measure target. Then, the number of occurrences of non-real-time messages at a certain time T is counted and compared with a threshold value α. When the threshold value α is set to “5”, the number of non-real-time message occurrences (six cases) exceeds the threshold value α in FIG. As described above, a technique for changing a message processing method when the number of message occurrences exceeds a threshold value is disclosed (see, for example, Patent Document 2).
JP-A-8-288944 (paragraph "0008", FIG. 1, FIGS. 4 to 6) Japanese Patent Laid-Open No. 2002-57666 (paragraphs “0051” and “0074”, FIGS. 2 and 15)

  However, as shown in FIG. 17, a large amount of non-real messages (MN1, MN2, and MN3 in FIG. 15) may be generated due to construction factors, congestion factors, and important failure subordinate factors. At this time, although the number of non-real-time messages due to a device failure is one, the total number of non-real-time messages (100) exceeds the threshold value α, so that it is erroneously determined to be a target message for the fault measure. Become.

  In this way, a large number of non-real-time messages generated by construction factors, congestion factors, and subordinate factors of critical failures are mixed just by extracting messages periodically and comparing them with thresholds. There was a problem that it was impossible to accurately detect the occurrence state of a real-time message. In addition, in order to determine whether the message is generated due to a failure, there is a problem that requires maintenance and operation of a maintenance person to check the degree of influence on the communication device one by one. Furthermore, when non-real messages occur frequently, there is a risk that the communication apparatus may generate an important failure message that causes a serious failure.

  In view of the above problems, an object of the present invention is to provide a message extraction device and a message extraction method that can quickly extract an important failure message related to a device failure from non-real-time messages. To do.

  In order to achieve the above object, the first feature of the present invention is that (a) a message receiving unit for receiving a message indicating an abnormal event from a plurality of communication devices, and (b) processing in real time from among the messages. And (c) a non-real-time message that excludes the non-real-time message that occurred during the period set as the construction period of the communication device is extracted as an important failure message. The gist of the present invention is a message extraction device including a message extraction unit.

  According to the message extraction device according to the first feature, by referring to the construction information that defines the construction period of a plurality of communication devices, the important failure message related to the device failure is quickly extracted from the non-real-time message. can do.

  The second feature of the present invention is that (a) a message receiving unit that receives a message indicating an abnormal event from a plurality of communication devices, and (b) a non-real time message that does not need to be processed in real time is selected from the messages. And (c) a message extraction unit that extracts non-real-time messages, excluding non-real-time messages that occurred during the period set as the congestion restriction period of the communication device, as important failure messages. Let the proton be a message extraction device.

  According to the message extraction device according to the second feature, by referring to the congestion information that defines the congestion restriction periods of a plurality of communication devices, an important failure message related to the device failure can be quickly obtained from non-real-time messages. Can be extracted.

  The third feature of the present invention is that (a) a message receiving unit that receives a message indicating an abnormal event from a plurality of communication devices, and (b) a real-time message that requires a fault measure in real time and a real-time message out of the messages. (C) a related message determination unit that determines whether or not a non-real-time message is set as a message generated in association with a real-time message; D) Important failure messages excluding non-real-time messages that have been determined by the related message determination unit to be related non-real-time messages and that occurred at the same time as the real-time message occurrence time or a certain time ago As a message extractor And summarized in that a obtain message extraction device.

  According to the message extraction device according to the third feature, the message correlation information defining the message related to the real-time message, the real-time message history information, and the like are referred to. Fault messages can be extracted quickly.

  The fourth feature of the present invention is that (a) receiving a message indicating an abnormal event from a plurality of communication devices, and (b) selecting a non-real time message that does not need to be processed in real time from the messages. And (c) extracting a non-real-time message excluding the non-real-time message generated during the period set as the construction period of the communication device as an important failure message. Is the gist.

  According to the message extraction method according to the fourth feature, an important failure message related to a device failure is quickly extracted from non-real-time messages by referring to construction information that defines the construction periods of a plurality of communication devices. can do.

  The fifth feature of the present invention is: (a) receiving a message indicating an abnormal event from a plurality of communication devices; and (b) selecting a non-real time message that does not need to be processed in real time from the messages. And (c) extracting a non-real-time message excluding the non-real-time message generated during the period set as the congestion restriction period of the communication device as an important failure message. This is the gist.

  According to the message extraction method according to the fifth feature, by referring to the congestion information that defines the congestion regulation period of a plurality of communication devices, an important failure message related to the device failure can be quickly retrieved from non-real-time messages. Can be extracted.

  ADVANTAGE OF THE INVENTION According to this invention, the message extraction apparatus and message extraction method which extract rapidly the important failure message relevant to an apparatus failure from a non real-time message can be provided.

  Next, embodiments of the present invention will be described with reference to the drawings. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals. However, it should be noted that the drawings are schematic.

  To comprehensively monitor the quality of the communication network, collect and manage messages from communication devices (network elements) that make up the communication network such as switching devices, radio control devices, power transmission devices, and base stations. A system is required.

  In the embodiment according to the present invention, non-real-time messages are collected, referring to construction information, congestion regulation information, real-time message history information, message correlation information defining messages related to real-time messages, etc. A message extraction apparatus and message extraction method capable of quickly extracting a non-real-time message that may be related to a failure will be described.

(Message extractor)
As shown in FIG. 1, the message extraction device 1 according to the present embodiment receives a message reception unit 12 that receives a message indicating an abnormal event that has occurred from the communication devices 10a, 10b, and 10c via the communication network 11. A message sorting unit 13 that sorts a message into a real-time message or a non-real-time message, and a construction information determination unit (message that excludes non-real-time messages generated during the period set as the construction period of the communication device) Extraction unit) 14, a congestion information determination unit (message extraction unit) that extracts non-real-time messages, excluding non-real-time messages generated during a period set as a communication device congestion restriction period, as important failure messages 15. Subordinates that occur dependent on critical failures Comprising dependent information determining unit for extracting important fault messages from the reference to non-real-time messages and information and (message extractor) 16. The “communication device” includes devices constituting a communication network such as an exchange device, a radio control device, a power transmission device, and a base station.

  The message receiving unit 12 receives messages indicating abnormal events from the communication devices 10 a, 10 b, and 10 c and stores them in the message holding unit 20.

  The message sorting unit 13 sorts the message stored in the message holding unit 20 into a real-time message that requires a fault measure in real time and a non-real-time message that does not need to be processed in real time. Save in the real-time message holding unit 22.

  The construction information determination unit 14 refers to the construction information that defines the construction period of the communication devices 10a, 10b, and 10c, and performs a major failure in the non-real-time message that excludes the non-real-time message that occurred during the construction period. Extract as a message. Then, the important failure message is stored in the important failure message holding unit 23.

  The congestion information determination unit 15 refers to the congestion information that defines the congestion restriction period of the communication devices 10a, 10b, and 10c, and determines the non-real time message that excludes the non-real time message that occurs during the congestion restriction period. Extracted as a failure message. Then, the important failure message is stored in the important failure message holding unit 23.

  The subordinate information determination unit 16 refers to the real-time message history information that requires a fault measure in real time and the message correlation information that defines the message related to the real-time message, and depends on the real-time message among the non-real-time messages. Then, the message excluding those generated is extracted as an important failure message. Then, the important failure message is stored in the important failure message holding unit 23. The subordinate information determination unit 16 is a related message determination unit that determines whether or not a non-real-time message is set as a message that occurs in association with a real-time message. A message extraction unit is configured to extract, as an important failure message, a message that is determined to be present and that excludes a non-real-time message that is generated at the same time or a certain time before the time of occurrence of the real-time message.

  The message holding unit 20 stores the message received by the message receiving unit 12. Messages stored in the message holding unit 20 include real-time messages and non-real-time messages.

  The real-time message holding unit 21 stores the message determined as the real-time message by the message selection unit 13. Information stored in the real-time message holding unit 21 includes a real-time message occurrence history file shown in FIG.

  The non-real-time message holding unit 22 stores the message determined as the non-real-time message by the message selection unit 13. Information stored in the non-real-time message holding unit 22 includes non-real-time message history files shown in FIGS. 8 and 13 described later.

  The critical failure message holding unit 23 stores a message determined as a critical failure message from non-real-time messages by the construction information determination unit 14, the congestion information determination unit 15, or the subordinate information determination unit 16. The information stored in the critical fault message holding unit 23 includes a critical fault message extraction file shown in FIGS. 9 and 14 to be described later.

  The construction information holding unit 24 stores a construction information file or the like that defines a construction period of the communication devices 10a, 10b, and 10c shown in FIG. 5 to be described later.

  The congestion information holding unit 25 stores a congestion information file that defines a congestion restriction period of the communication devices 10a, 10b, and 10c, which will be described later with reference to FIG.

  The related information holding unit 26 stores a message correlation file that defines a message related to a real-time message, as shown in FIG.

  The message holding unit 20, the real-time message holding unit 21, the non-real-time message holding unit 22, the critical failure message holding unit 23, the construction information holding unit 24, the congestion information holding unit 25, and the related information holding unit 26 are stored in a RAM or the like. It may be a storage device or an external storage device such as HD or FD.

  In addition, the message extraction device 1 according to the embodiment has a processing control device (CPU) and is configured to include a construction information determination unit 14, a congestion information determination unit 15, a subordinate information determination unit 16, and the like as modules. Can do. These modules can be realized by executing a dedicated program for using a predetermined program language in a general-purpose computer such as a personal computer. Although not shown, the message extraction device 1 may include a recording medium that stores a program for executing functions such as the construction information determination unit 14. Examples of the recording medium include a hard disk, a flexible disk, a compact disk, an IC chip, and a cassette tape. According to the recording medium holding such a program, the program can be easily stored, transported, sold, and the like.

(Message extraction method)
Next, the message extraction method according to the present embodiment will be described with reference to FIG.

  (A) First, in step S101, the message receiving unit 11 receives a message indicating an abnormal event that has occurred from the communication devices 10a, 10b, and 10c via the communication network 11.

  (B) Next, in step S102, the message sorting unit 12 sorts the message into a real-time message and a non-real-time message by referring to the header of the received message.

  (C) Next, in step S103, the construction information determination unit 13 refers to the construction information that defines the construction periods of the plurality of communication devices, and selects the non-real time message generated during the construction period from among the non-real time messages. Excluded items are extracted as important fault messages. This is because the non-real-time message generated during the construction period is not due to a device failure and does not require an urgent response. The construction information determination process will be described in detail later.

  (D) Next, in step S104, the congestion information determination unit 14 refers to the congestion information that defines the congestion restriction periods of the plurality of communication devices, and the non-real time that occurred during the congestion restriction period in the non-real time message. The message excluding the message is extracted as an important failure message. This is because the non-real-time message generated during the congestion regulation period is not due to a device failure and does not require an urgent response. The congestion information determination process will be described in detail later.

  (E) Next, in step S105, the real-time message history information and the message correlation information defining the message related to the real-time message are referenced, and the non-real-time message is generated depending on the real-time message. A message excluding the message is extracted as an important failure message. This is because failure measures are preferentially performed when real-time messages are generated, and therefore, non-real-time messages generated as subordinates are duplicated measures and no measures are required. The dependent information determination process will be described in detail later.

  In FIG. 2, the important failure messages are extracted in the order of the construction information determination process, the congestion information determination process, and the subordinate information determination process. However, the order of this process can be arbitrarily set.

  In addition, it has been described that the construction information determination unit 14, the congestion information determination unit 15, and the subordinate information determination unit 16 each extract a critical failure message from the non-real-time message holding unit 22 and store it in the critical failure message holding unit 23. For example, the congestion information determination unit 15 determines only messages that have been determined as important failure messages by the construction information determination unit 14, and the subordinate information determination unit 16 uses the construction information determination unit 14 and the congestion information determination unit 15 to determine the importance. Only a message determined to be a failure message may be determined. Therefore, the message extracted to the critical failure message holding unit 23 is the message extracted as the critical failure message by the construction information determination unit 14, the message extracted as the critical failure message by the congestion information determination unit 15, and the subordinate information determination unit 16. The messages extracted as critical fault messages may be held separately, or the messages determined as critical fault messages by all the construction information determination unit 14, the congestion information determination unit 15, and the subordinate information determination unit 16 may be stored. Good.

  Next, details of the construction information determination process in step S103 of FIG. 2 will be described with reference to FIGS.

  (A) First, in step S <b> 201 of FIG. 3, the construction information determination unit 13 collects non-real-time messages for a certain period T from the non-real-time message holding unit 22. For example, as shown in FIG. 4A, non-real time messages generated between 2003/7/1 20:00 and 2003/7/2 20:00 are collected in the communication device 10a. The collected message may be stored in a temporary storage device (not shown).

  (B) Next, in step S202, the construction information determination unit 13 refers to the construction information file stored in the construction information holding unit 25, and removes messages generated during the construction period. In the construction information file, for example, as shown in FIG. 5, the construction start date and time (t0) and construction end date and time (t1) of each of the communication devices 10a, 10b, 10c,. The construction information determination unit 13 refers to the construction information file, and as shown in FIG. 4B, 2003/7/1 20:00 (t0) to 2003/7/1 22:00 (t1) It is determined that the messages generated so far are messages generated due to the construction of the communication device 10a. Then, non-real-time messages due to construction factors are removed, and other non-real-time messages are extracted.

  (C) Next, in step S203, the construction information determination unit 13 compares the total number of occurrences of non-real-time messages after extraction with a threshold value. The threshold value is a value that defines a determination value for the number of cases that are subject to failure measures, is defined in advance, and is stored in a storage device (not shown) as a file.

  (D) Next, in step S204, when the total number of occurrences of the non-real-time message exceeds the threshold, the construction information determination unit 13 extracts it as an important failure message.

  Thus, according to the construction information determination process, a non-real-time message that has not occurred during the construction period can be extracted as an important failure message. In the construction information determination process, it has been explained that when the total number of occurrences exceeds the threshold, it is extracted as an important failure message. However, all non-real-time messages that occurred during the construction period are judged as important failure messages without making a judgment based on the threshold. It may be extracted as

  Next, details of the congestion information determination process in step S104 of FIG. 2 will be described with reference to FIGS.

  (A) First, in step S301 of FIG. 6, the congestion information determination unit 13 refers to the congestion information file held in the congestion information holding unit 25, and compares the generation time of the non-real-time message with the congestion regulation period. In the congestion information file, for example, as shown in FIG. 7, congestion restriction start information and cancellation information of each communication device 10a, 10b, 10c. According to this file, it can be seen that the congestion restriction period of the communication device 10a is between 23/12/2003 23:30 and 2003/1/1 02:00. The congestion information determination unit 13 acquires a non-real-time message history file in the communication device 10a as illustrated in FIG. 8 from the non-real-time message holding unit 22. M1 to M9 are numbers assigned to the non-real time messages. Then, the congestion information determination unit 13 compares the message times of the messages M1 to M9 with the congestion restriction period of the congestion information file.

  (B) Next, in step S302, the congestion information determination unit 13 removes messages generated during the congestion restriction period and extracts them as important failure messages. In FIG. 8, since the occurrence times of M1 and M9 do not correspond to the congestion regulation period of the communication device 10a, they are extracted as important failure messages and stored in the important failure message holding unit 23 as shown in FIG. Saved in the message extract file. Since the occurrence times of M2 and M3 correspond to the regulation period, it is determined as a non-real-time message due to a congestion factor, and is not stored in the important failure message extraction file.

  Thus, according to the congestion information determination process, the non-real-time messages M1 and M9 that have not occurred during the congestion regulation period can be extracted as the important failure messages. In the congestion information determination process, as described in the construction information determination process, the process of extracting as a critical failure message is performed only when the total number of non-real-time messages that have not occurred during the congestion regulation period exceeds the threshold. You can go.

  Next, details of the subordinate information determination process in step S105 of FIG. 2 will be described with reference to FIGS.

  (A) First, in step S401 in FIG. 10, the subordinate information determination unit 15 refers to the non-real-time message history file and searches for a real-time message generated at the same time or immediately before. Specifically, the subordinate information determination unit 15 acquires a non-real-time message history file as illustrated in FIG. 13 from the non-real-time message holding unit 22. M1 to M9 are numbers assigned to the non-real time messages. Further, the subordinate information determination unit 15 acquires a non-real time message history file as shown in FIG. 11 from the real time message holding unit 21. R1 to R9 are numbers assigned to the real-time message. Then, for each non-real-time message, the real-time message generated at the same time or immediately before is searched.

  (B) Next, in step S402, the subordinate information determination unit 15 determines whether or not the target non-real time message is a message related to the real time message. Specifically, the subordinate information determination unit 15 refers to the message correlation file shown in FIG. 12 and searches for message information generated in association with the real-time message. It is determined whether or not a non-real-time message to be processed exists in the related message number. If it exists, a non-real-time message to be processed has occurred before the dwell time has elapsed from the time of occurrence of the real-time message. Determine whether or not.

  (C) Next, in step S403, the subordinate information determination unit 15 determines the subordinate information if the non-real-time message to be processed does not exist in the related message number or has occurred after the residence time has elapsed. The unit 15 extracts the non-real time message to be processed as an important failure message. Then, as shown in FIG. 14, the non-real message to be processed is stored in the critical failure message file stored in the critical failure message holding unit 23.

  Hereinafter, detailed processing of steps S401 to S403 will be described using the non-real-time messages M1 to M6 in FIG. 13 as an example.

  The subordinate information determination unit 15 compares the generation time of the real-time message based on the generation time of the non-real-time message M1 (occurrence of 2003/7/1/11: 45), and searches for the real-time message at the same time or immediately before the generation. . Since the real-time message R1 corresponds to this, the message information related to R1 is searched with reference to the message correlation file. It is determined whether or not M1 exists in the related message number, and if it exists, it is determined whether or not M1 has occurred before the residence time has elapsed from the occurrence time of R1. M1 (2003/7/1/11: 45 occurrence) is a message that occurred after the residence time of R1, so it is extracted not as a non-real message due to dependent factors but as an important failure message and stored in an important failure message file.

  Also, non-real-time messages M1 (2003/7/1/12: 01 occurrence), M2 (2003/7/1/12: 02 occurrence), M3 (2003/7/1/12: 03 occurrence) messages are generated Based on the time, the real-time message occurrence times are compared, and the real-time message at the same time or immediately before the occurrence is searched. Since the real-time message R2 corresponds to this, the message information related to R2 is searched with reference to the message correlation file. It is determined whether or not M1, M2, and M3 are present in the related message numbers. If they are present, it is determined whether or not M1, M2, and M3 have occurred before the residence time has elapsed from the occurrence time of R2. Since M1 (occurrence of 2003/7/1/12: 01), M2, and M3 are messages generated within the residence time of R2, they are determined to be non-real messages due to subordinate factors, and are not stored in the critical failure message file.

  Also, based on the message generation time of the non-real-time message M4 (2003/7/1/14: 30 generation), the generation time of the real-time message is compared to search for the real-time message at the same time or immediately before the generation. Since the real-time message R3 corresponds to this, the message information related to R3 is searched with reference to the message correlation file. Since M4 does not exist in the related message number, M4 is extracted as an important failure message, not a non-real message due to a dependent factor, and stored in an important failure message file.

  Also, based on the occurrence time of the non-real-time message M5 (2003/7/1/14: 45 occurrence), the real-time message occurrence times are compared, and the real-time message at the same time or immediately before occurrence is searched. Since the real-time message R3 corresponds to this, the message information related to R3 is searched with reference to the message correlation file. It is determined whether or not M5 exists in the related message number, and if it exists, it is determined whether or not M5 has occurred before the residence time has elapsed from the occurrence time of R3. M5 (2003/7/1/14: 45 occurrence) is a message that occurred after the residence time of R3, so it is extracted not as a non-real message due to a dependent factor but as an important failure message and stored in an important failure message file.

  Further, based on the occurrence time of the non-real-time message M6 (occurrence of 2003/7/1/15: 00), the real-time message occurrence times are compared, and the real-time message at the same time or immediately before the occurrence is searched. Since the real-time message R4 corresponds to this, the message information related to R4 is searched with reference to the message correlation file. It is determined whether or not M6 exists in the related message number, and if it exists, it is determined whether or not M6 has occurred before the residence time has elapsed from the generation time of R4. M6 (occurred on 2003/7/1/15: 00) is a message generated within the residence time of R4, so it is determined that it is a non-real message due to a dependent factor and is not stored in the critical failure message file.

  As described above, according to the dependent information determination process, the non-real-time message M1 (occurrence of 2003/7/1/11: 45), M4, and M5 that are not influenced by the real-time message can be extracted as the important failure message.

  In addition, messages extracted as critical failure messages by construction information determination processing, congestion information determination processing, and subordinate information determination processing are determined to be highly urgent messages, are notified to the integrated management operation system, and measures corresponding to the messages are taken. It is made immediately.

(Operation and Effect of Message Extracting Apparatus and Method According to this Embodiment)
By performing the construction information determination processing, congestion information determination processing, and subordinate information determination processing described above in order, important failure messages related to device failure are quickly extracted from non-real-time messages generated from communication devices. be able to.

  Conventionally, a maintenance person of a message analysis system has identified an important failure message by examining non-real-time messages one by one, but according to the message extraction device and the message extraction method according to the embodiment of the present invention, in principle, Thus, it is possible to accurately identify an important failure message without any maintenance work. This is particularly effective when a large number of non-real-time messages are generated.

  In addition, according to the message extraction device and the message extraction method according to the embodiment of the present invention, not only the maintenance operation is reduced, but also only the important failure message is extracted, so that the failure device is generated from a human error such as an oversight. Can be avoided.

(Other embodiments)
Although the present invention has been described according to the above-described embodiments, it should not be understood that the descriptions and drawings constituting a part of this disclosure limit the present invention. From this disclosure, various alternative embodiments, examples, and operational techniques will be apparent to those skilled in the art.

  For example, in the embodiment of the present invention, the message receiving unit 12, the message selecting unit 13, the construction information determining unit 14, the congestion information determining unit 15, and the subordinate information determining unit 16 are described as being in one message extracting device 1. However, a plurality of message extraction devices 1 may be provided separately. That is, the construction information determination device, the congestion information determination device, and the subordinate information determination device may be incorporated in different devices for each function. In this case, it is assumed that the devices are connected by a bus or the like so that data can be exchanged between the devices.

  The information is divided into a message holding unit 20, a real-time message holding unit 21, a non-real message holding unit 22, a critical failure message holding unit 23, a construction information holding unit 24, a congestion information holding unit 25, and a related information holding unit 26. However, all the information may be held by one holding unit.

  As described above, the present invention naturally includes various embodiments not described herein. Therefore, the technical scope of the present invention is defined only by the invention specifying matters according to the scope of claims reasonable from the above description.

1 is a configuration block diagram of a message extraction device according to an embodiment of the present invention. 4 is a flowchart illustrating a message extraction method according to an embodiment of the present invention. It is a flowchart which shows the detail of the construction information determination process of FIG. It is a schematic diagram of the number of non-real-time message occurrences. It is an example of the construction information file referred in the construction information determination process. It is a flowchart which shows the detail of the congestion information determination process of FIG. It is an example of the congestion information file referred in the congestion information determination process. It is an example of the non-real-time message history file referred in the congestion information determination process. It is an example of the important failure message extraction file extracted in a congestion information determination process. It is a flowchart which shows the detail of the dependent information determination process of FIG. It is an example of the real-time message generation history file referred in the subordinate information determination process. It is an example of the message correlation file referred in a subordinate information determination process. It is an example of the non-real-time message history file referred in the subordinate information determination process. It is an example of the important failure message extraction file extracted in a subordinate information determination process. It is a block diagram of a conventional message extraction device. It is the schematic diagram of the conventional non-real-time message generation | occurrence | production number (the 1). It is a schematic diagram of the conventional non-real-time message occurrence number (part 2).

Explanation of symbols

DESCRIPTION OF SYMBOLS 1,100 Message extraction apparatus 10a, 10b, 10c, 100a, 100b, 100c Communication apparatus 11, 111 Communication network 12, 112 Message receiving part 13, 113 Message selection part 14 Construction information determination part 15 Congestion information determination part 16 Dependent information determination Unit 20 message holding unit 21 real-time message holding unit 22 non-real-time message holding unit 23 critical failure message holding unit 24 construction information holding unit 25 congestion information holding unit 26 related information holding unit

Claims (5)

A message receiving unit that receives a message indicating an abnormal event from a plurality of communication devices;
A message selection unit that selects non-real-time messages that do not need to be processed in real time from the messages;
A message extraction unit that extracts, as an important failure message, a non-real-time message excluding the non-real-time message generated during a period set as a construction period of the communication device. apparatus. A message receiving unit that receives a message indicating an abnormal event from a plurality of communication devices;
A message selection unit that selects non-real-time messages that do not need to be processed in real time from the messages;
A message extraction unit that extracts, as an important failure message, a message excluding the non-real-time message generated during a period set as a congestion restriction period of the communication device in the non-real-time message. Extraction device. A message receiving unit that receives a message indicating an abnormal event from a plurality of communication devices;
A message selection unit for selecting, from the messages, a real-time message that requires a failure measure in real time and a non-real-time message that does not need to be processed in real time;
A related message determination unit that determines whether or not the non-real-time message is set as a message generated in association with the real-time message;
An important failure message except for a non-real-time message that is determined by the related message determination unit to be a related non-real-time message and that is generated at the same time or a certain time before the time of occurrence of the real-time message. A message extraction device comprising: a message extraction unit that extracts as: Receiving a message indicating an abnormal event from a plurality of communication devices;
Screening non-real time messages that do not need to be processed in real time from the messages;
Extracting a non-real-time message from the non-real-time message generated during a period set as a construction period of the communication device as an important failure message. Receiving a message indicating an abnormal event from a plurality of communication devices;
Screening non-real time messages that do not need to be processed in real time from the messages;
Extracting the non-real-time message from the non-real-time message generated during the period set as the congestion restriction period of the communication device as an important failure message. .

Images