JP2005322024A - Abnormality information output device, abnormality detection system and abnormality information output method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an abnormality information output device not notifying occurrence of abnormality under a prescribed condition even if the abnormality occurs in a system or the like. <P>SOLUTION: This abnormality information output device has: a reception part 11 receiving abnormality occurrence information that is information showing that the abnormality occurs in a monitoring target; an output condition information storage part 12 storing output condition information showing an output condition that is a condition not permitting output of abnormality information that is information related to the abnormality occurring in the monitoring target; an output decision part 16 deciding not to output the abnormality information when the output condition is satisfied, and deciding to output the abnormality information when the output condition is not satisfied, when the reception part 11 receives the abnormality occurrence information; an abnormality information configuration part 17 configuring the abnormality information; and an output part 18 outputting the abnormality information configured by the abnormality information configuration part 17 when the output decision part 16 decides to output the abnormality information. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an abnormality information output device that outputs abnormality information that is information relating to an abnormality that has occurred in a monitoring target.

Conventionally, a system has been developed that determines whether or not a terminal device should be notified of an abnormality that has occurred in the host machine, and sends abnormality information (failure information) to the terminal device when it must be notified. (For example, refer to Patent Document 1).
JP-A-10-105437 (first page, FIG. 1 etc.)

  However, even if an abnormality has occurred, if all of the facts have been notified, it may be troublesome for an administrator or maintenance staff who receives the notification to respond to the notification. For example, if an abnormality occurs in a large-scale information processing system, etc., it is required to respond immediately to the abnormality, but an abnormality that is known to occur in advance (for example, periodic inspection) For example, the administrator or the like is bothered by a notification that does not need to be dealt with. In particular, when such a notification is made at night, it can be very annoying for the administrator.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to provide an abnormality information output device that enables efficient management when an abnormality occurs in a system or the like.

  In order to achieve the above object, an abnormality information output device according to the present invention is a receiver that receives abnormality occurrence information that is information indicating that an abnormality has occurred in a monitoring target, and information relating to an abnormality that has occurred in the monitoring target. When the output condition is satisfied when the output condition information storage unit that stores output condition information that is information indicating an output condition that does not output abnormality information, and the reception unit receives abnormality occurrence information, An output determination unit that determines that the abnormality information is not output and outputs the abnormality information when the output condition is not satisfied, an abnormality information configuration unit that configures the abnormality information, and the output determination unit includes abnormality information And an output unit that outputs the abnormality information configured by the abnormality information configuration unit.

  With such a configuration, even when abnormality occurrence information is received, abnormality information can be prevented from being output if the output condition is satisfied. Therefore, for example, abnormality information can be prevented from being output for an abnormality that occurs due to maintenance or the like that is known to be performed in advance. As a result, it is possible to prevent a person who receives notification of abnormality information from receiving notification of abnormality information that does not need to be handled, and to reduce the burden of those receiving notification of abnormality information.

An abnormality information output device according to the present invention is information indicating an abnormality occurrence detection unit that detects an abnormality that has occurred in a monitoring target, and an output condition that is a condition for not outputting abnormality information that is information relating to the abnormality that has occurred in the monitoring target. When the output condition information storage unit that stores output condition information and the abnormality occurrence detection unit detects the occurrence of an abnormality, it is determined that the abnormality information is not output when the output condition is satisfied, and the output condition Is not satisfied, an output determination unit that determines to output the abnormality information, an abnormality information configuration unit that configures the abnormality information, and an abnormality information configuration unit that determines that the output determination unit outputs abnormality information An abnormality information output device, comprising: an output unit configured to output abnormality information configured by.

With such a configuration, even if the occurrence of an abnormality is detected, the abnormality information can be prevented from being output if the output condition is satisfied. Therefore, for example, abnormality information can be prevented from being output for an abnormality that occurs due to maintenance or the like that is known to be performed in advance. As a result, it is possible to prevent a person who receives notification of abnormality information from receiving notification of abnormality information that does not need to be handled, and to reduce the burden of those receiving notification of abnormality information.
In the abnormality information output apparatus according to the present invention, the output condition may include a condition related to a period.

  With such a configuration, for example, by specifying a period of maintenance or the like that is known to be performed in advance and setting the output conditions, even if an abnormality occurs during that period, the abnormality information is not notified Can be.

  According to the abnormality information output device or the like according to the present invention, even if an abnormality occurs in the system or the like, it is possible to prevent notification of the occurrence of the abnormality under a predetermined condition. As a result, for example, it can be set not to notify an abnormality that has occurred due to maintenance or the like that is known to be performed in advance, and the burden on the administrator who is notified of the abnormality can be reduced.

(Embodiment 1)
An abnormality information output apparatus according to Embodiment 1 of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of an abnormality information output apparatus according to this embodiment. In FIG. 1, the abnormality information output device according to the present embodiment includes a reception unit 11, an output condition information storage unit 12, an administrator information storage unit 13, an input reception unit 14, a change unit 15, and an output determination unit. 16, an abnormality information configuration unit 17, and an output unit 18.

  The receiving unit 11 receives abnormality occurrence information. Here, the abnormality occurrence information is information indicating that an abnormality has occurred in the monitoring target, and is transmitted from an abnormality occurrence detection device described later. The monitoring target can detect an abnormality caused by signal transmission / reception and the like. For example, the monitoring target is a computer system, a server or a terminal device constituting the computer system, a household electric device, a machine tool in a factory, or the like. is there. Also, an abnormality is an inappropriate situation that occurs in the monitoring target, which is different from normal.For example, a monitoring target that is normally operating has stopped operating, or a process that can be normally executed is For example, it became impossible to execute. The receiving unit 11 may or may not include a receiving device (for example, a modem or a network card) for receiving (in this case, the receiving device exists outside the receiving unit 11). Will be). The receiving unit 11 may be realized by hardware, or may be realized by software such as a driver that drives the receiving device.

The output condition information storage unit 12 stores output condition information. Here, the output condition information is information indicating an output condition that is a condition for not outputting abnormality information. The abnormality information is information relating to an abnormality that has occurred in the monitoring target, and includes, for example, information that specifies the monitoring target, information that specifies an abnormality that has occurred in the monitoring target, and the like. The output condition indicated by the output condition information may include a condition regarding a period, for example. The condition regarding the period is, for example, information indicating a predetermined period, and may indicate both ends of the period, such as “from 10 am to 10 pm on April 15, 2004”. It may indicate only the beginning or end of the period, such as “after April 15, 10:00 am” or “until 10 am April 15, 2004”. Further, it may indicate the beginning of the period and the length of the period, such as “12 hours from 10 am on April 15, 2004”. Further, it may indicate a date such as “April 15, 2004” or “15th”, or may indicate a day of the week such as “Sunday”, or “April 2004”. , “April” may indicate the month. The output condition information storage unit 12 can be realized by a predetermined recording medium (for example, a semiconductor memory, a magnetic disk, an optical disk, etc.).

  The administrator information storage unit 13 stores administrator information. Here, the administrator information is information related to an administrator who outputs abnormality information, and includes, for example, an administrator's e-mail address, telephone number, FAX number, and the like. The administrator information storage unit 13 can be realized by a predetermined recording medium (for example, a semiconductor memory, a magnetic disk, an optical disk, etc.).

  The output condition information storage unit 12 and the administrator information storage unit 13 may be realized by different recording media or may be realized by the same recording medium. In the latter case, the area storing the output condition information becomes the output condition information storage unit 12, and the area storing the administrator information becomes the administrator information storage unit 13.

  The input receiving unit 14 receives an instruction to change the output condition information stored in the output condition information storage unit 12. For example, the input receiving unit 14 may receive an instruction input from an input device (for example, a keyboard, a mouse, or a touch panel), or may receive an instruction transmitted via a wired or wireless communication line.

  The changing unit 15 changes the output condition information stored in the output condition information storage unit 12 according to the instruction received by the input receiving unit 14. This change is, for example, addition of a new record to the output condition information, change of an existing record, deletion of an existing record, or the like.

  The output determination unit 16 determines whether to output abnormality information based on the output condition information when the reception unit 11 receives the abnormality occurrence information. The output determination unit 16 determines that the abnormality information is not output when the output condition is satisfied, and determines that the abnormality information is output when the output condition is not satisfied.

  The abnormality information configuration unit 17 configures abnormality information. As described above, the abnormality information configuration unit 17 configures abnormality information including, for example, information for specifying a monitoring target and information for specifying an abnormality that has occurred in the monitoring target. When the abnormality occurrence information includes all information necessary for the abnormality information, the abnormality occurrence information may be acquired as it is as the abnormality information. The configuration of the abnormality information may be performed, for example, only when the output determination unit 16 determines that the abnormality information is output, or may be performed when the reception unit 11 receives the abnormality occurrence information.

When the output determination unit 16 determines that the abnormality information is output, the output unit 18 outputs the abnormality information configured by the abnormality information configuration unit 17. Here, the output may be, for example, display on a display device (for example, a CRT or a liquid crystal display), transmission to a predetermined device via a communication line, printing by a printer, or by a speaker. Audio output may be used. When the output is transmission, the transmission may be, for example, transmission by e-mail or transmission by uploading abnormal information to a predetermined site by FTP or the like (in this case, the administrator The content of the abnormality information can be known by accessing the predetermined site), FAX transmission by automatic transmission, telephone transmission by automatic voice, and the like. The output unit 18 may or may not include an output device (for example, a display device or a printer). The output unit 18 may be realized by hardware, or may be realized by software such as a driver that drives these devices.

  FIG. 2 is a block diagram illustrating the configuration of the abnormality detection device according to the present embodiment. In FIG. 2, the abnormality occurrence detection apparatus according to the present embodiment includes an abnormality condition information storage unit 21, an abnormality occurrence detection unit 22, and an abnormality occurrence information transmission unit 23.

  The abnormal condition information storage unit 21 stores abnormal condition information. Here, the abnormal condition information is information indicating an abnormal condition that is a condition for the abnormality occurrence detection unit 22 to detect an abnormality. The abnormal condition information storage unit 21 can be realized by a predetermined recording medium (for example, a semiconductor memory, a magnetic disk, an optical disk, etc.).

  The abnormality occurrence detection unit 22 detects an abnormality that has occurred in the monitoring target based on the abnormality condition information. The abnormality occurrence detection unit 22 detects that an abnormality has occurred when a condition that satisfies the abnormality condition occurs in the monitoring target. For example, the abnormality detection unit 22 receives an alarm signal indicating that an abnormal situation has occurred from the monitoring target, determines whether or not the content of the alarm signal satisfies an abnormal condition, and if so, generates an abnormality. It may be detected. In addition, the abnormality detection unit 22 periodically transmits a predetermined signal to the monitoring target, determines whether or not a response to the signal is appropriate based on whether or not the abnormal condition is satisfied, and determines the abnormal condition. When there is a response that is not satisfied, the occurrence of an abnormality may be detected. Further, the abnormality occurrence detection unit 22 periodically receives a predetermined signal from the monitoring target and generates an abnormality when the signal is not received or when the content of the signal does not satisfy the abnormal condition. May be detected. As described above, there are various methods by which the abnormality occurrence detection unit 22 detects an abnormality that has occurred in the monitoring target, and the method is not limited to the method in the present embodiment.

  When the abnormality occurrence detection unit 22 detects the occurrence of an abnormality, the abnormality occurrence information transmission unit 23 transmits abnormality occurrence information that is information indicating that an abnormality has occurred in the monitoring target to the abnormality information output device. For example, the abnormality occurrence information transmitted by the abnormality occurrence information transmission unit 23 may be configured by the abnormality information transmission unit 23, or information configured in the detection by the abnormality occurrence detection unit 22 is acquired. It may be a thing. The abnormality occurrence information transmission unit 23 may or may not include a transmission device (for example, a modem or a network card) for performing transmission (in this case, the abnormality occurrence information transmission unit 23). There will be an external sending device). In addition, the abnormality occurrence information transmission unit 23 may be realized by hardware, or may be realized by software such as a driver that drives the transmission device.

Next, the operation of the abnormality information output apparatus according to this embodiment will be described with reference to the flowcharts of FIGS.
FIG. 3 is a flowchart showing the operation of the abnormality information output apparatus according to this embodiment.

  (Step S101) The receiving unit 11 determines whether or not abnormality occurrence information has been received. If the abnormality occurrence information is received, the abnormality occurrence information is passed to the output determination unit 16 and the process proceeds to step S102. If not, the process of step S101 is repeated until the abnormality occurrence information is received.

(Step S102) The output determination unit 16 determines whether or not to output abnormality information based on the output condition information. And when it is judged that it outputs, it progresses to step S103,
Otherwise, the process returns to step S101. Details of this determination processing will be described later.
(Step S103) The abnormality information configuration unit 17 configures abnormality information corresponding to the abnormality occurrence information received by the reception unit 11.

(Step S104) The output unit 18 outputs the abnormality information configured by the abnormality information configuration unit 17. Then, the process returns to step S101.
In the flowchart of FIG. 3, the process ends when the power is turned off or the process is terminated.

FIG. 4 is a flowchart for explaining details of the process in step S102 of the flowchart of FIG. In the description of this flowchart, it is assumed that the output condition information is composed of one or more records, and each record includes a condition for not outputting abnormality information.
(Step S201) The output determining unit 16 sets the counter I to “1”.

  (Step S202) The output determination unit 16 determines whether or not the condition of the I-th record of the output condition information is satisfied. This determination is made based on, for example, whether or not the content of the abnormality occurrence information received by the receiving unit 11 matches the condition of the I-th record of the output condition information. If the condition is satisfied, the process proceeds to step S206. If not, the process proceeds to step S203.

(Step S203) The output determination unit 16 determines whether or not the I-th record is the last record of the output condition information. If it is the last record, the process proceeds to step S205, and if not, the process proceeds to step S204.
(Step S204) The output determining unit 16 increments the counter I by 1. Then, the process returns to step S202.

  (Step S205) The output determining unit 16 determines to output abnormality information. This is because the conditions of all the records of the output condition information were not satisfied. Then, the process of determining whether or not to output abnormality information (step S102) ends, and the process proceeds to step S103.

  (Step S206) The output determining unit 16 determines not to output abnormality information. This is because the condition of the I-th record of the output condition information is satisfied. Then, the process of determining whether or not to output abnormality information (step S102) ends, and the process returns to step S101.

  Here, operations of the input receiving unit 14 and the changing unit 15 will be described. An instruction to change the output condition is received by the input receiving unit 14, and the output condition information is changed by the changing unit 15 in accordance with the instruction. In this way, by changing the output condition information, it is possible to change the condition under which no abnormality information is output.

Next, the operation of the abnormality detection device according to the present embodiment will be described using the flowchart of FIG.
(Step S301) The abnormality detection unit 22 determines whether an abnormality has occurred in the monitoring target based on the abnormality condition information. If the occurrence of an abnormality is detected, the process proceeds to step S302. If no abnormality has occurred, the process of step S301 is repeated until an abnormality occurs.

(Step S302) The abnormality occurrence information transmitting unit 23 transmits abnormality occurrence information indicating the abnormality detected by the abnormality occurrence detecting unit 22 to the abnormality information output device. Then, the process returns to step S301.
In the flowchart of FIG. 5, the process ends when the power is turned off or the process ends.

Next, specific examples of the operations of the abnormality information output device and the abnormality occurrence detection device according to this embodiment will be described. In this specific example, it is assumed that the abnormality information output device and the abnormality occurrence detection device constitute the system shown in FIG. The system shown in FIG. 6 includes an abnormality information output device 1, an abnormality occurrence detection device 2, a monitoring target device 3 that is a target in which an abnormality that has occurred is detected by the abnormality occurrence detection device 2, and the abnormality information output device 1. And an administrator terminal 4 to which abnormality information is transmitted. The abnormality occurrence detection device 2 and the one or more monitoring target devices 3 are connected to each other via the communication line 5. Also, the abnormality information output device 1 and one or more administrator terminals 4 are connected to each other via a communication line 6. Here, the communication lines 5 and 6 may be wired lines or wireless lines. For example, the communication lines 5 and 6 may be a network such as the Internet or an intranet, or may be a dedicated line. It may be a communication line or the like. Further, the communication line 5 and the communication line 6 may be the same communication line. Moreover, although the case where the abnormality information output device 1 and the abnormality occurrence detection device 2 are directly connected by a dedicated line is shown, a predetermined communication line such as a LAN exists between these devices. May be.
In this specific example, the abnormality information output device 1 transmits the abnormality information to the administrator terminal 4.

  In this specific example, it is assumed that the output condition information stored in the output condition information storage unit 12 is as shown in FIG. In FIG. 7, the output condition information is information indicating the “start” field indicating the start date and time (start) of application of the condition, the “end” field indicating the end date and time (end) of application of the condition, and the monitoring target. It consists of a “monitoring target” field and an “abnormal content” field indicating the content of the abnormality that has occurred. When the conditions of all the fields of each record are satisfied, it is determined that the condition of the record is satisfied.

  This output condition information is set when there is no need to transmit abnormality information when the output condition is satisfied. For example, it is assumed that the abnormality content “ΔΔΔ process down” is set because it is known that the abnormality will occur in order to perform the application correction work in that time zone. Further, the abnormality content “Ping timeout” is assumed to be set because it is known that the entire building blackout occurs during the time period and the abnormality occurs. In addition, it is assumed that the abnormality content “xx data cannot be received” is set because it is known that the abnormality will occur because the construction for switching the dedicated line is performed during that time period.

FIG. 8 is a flowchart for explaining details of the processing in step S202 of FIG. 4 in this specific example.
(Step S401) The output determination unit 16 determines whether or not the monitoring target in which the abnormality indicated by the abnormality occurrence information received by the receiving unit 11 matches the monitoring target in the I-th record of the output condition information illustrated in FIG. to decide. If they match, the process proceeds to step S402; otherwise, the process proceeds to step S405.

  (Step S402) The output determination unit 16 determines whether the abnormality content indicated by the abnormality occurrence information received by the reception unit 11 matches the abnormality content in the I-th record of the output condition information illustrated in FIG. If they match, the process proceeds to step S403, and if not, the process proceeds to step S405.

(Step S403) Whether the output determination unit 16 includes the occurrence time of the abnormality indicated by the abnormality occurrence information received by the reception unit between the start date and time and the end date and time in the I-th record of the output condition information illustrated in FIG. Judge whether. If it is included, the process proceeds to step S404; otherwise, the process proceeds to step S405. Here, the case where the determination is made based on the occurrence time of the abnormality indicated by the abnormality occurrence information has been described. However, in a system in which there is almost no time lag from the occurrence of the abnormality in the monitoring target to the determination processing in the output determination unit 16, For example, the determination process in step S403 may be performed based on the date and time of determination in step S403 by the output determination unit 16.

  (Step S404) The output determination unit 16 determines that the condition of the I-th record of the output condition information is satisfied. This is because the conditions of all the fields of the I-th record of the output condition information are satisfied. Then, the determination process (step S202) regarding the I-th record of the output condition information ends, and the process proceeds to step S206.

  (Step S405) The output determination unit 16 determines that the condition of the I-th record of the output condition information is not satisfied. This is because the condition of at least one field of the I-th record of the output condition information is not satisfied. Then, the determination process regarding the I-th record of the output condition information (step S202) ends, and the process proceeds to step S203.

  In this specific example, it is assumed that the administrator information stored in the administrator information storage unit 13 is as shown in FIG. In FIG. 9, the administrator information includes an “manager ID” field that is information for identifying the manager, a “mail address” field that indicates the email address of the manager, and a monitoring target that the manager is in charge of. And a “monitoring target” field indicating

  Further, in this specific example, the abnormal condition information stored in the abnormal condition information storage unit 21 is assumed to be as shown in FIG. In FIG. 10, the abnormal condition information includes a “monitoring target” field indicating a monitoring target and an “occurrence event” field indicating an event that has occurred in the monitoring target. In the monitoring target of each record in the abnormal condition information, when a corresponding occurrence event occurs, the abnormality occurrence detection unit 22 detects the occurrence of the abnormality.

  First, it is assumed that an event “ΔΔΔ process down” occurs in a certain monitoring target apparatus 3 at 10:00 am on April 8, 2004. Then, an alarm signal indicating this is transmitted to the abnormality detection device 2 via the communication line 5. The abnormality occurrence detection unit 22 of the abnormality occurrence detection apparatus 2 receives the alarm signal, the alarm signal is transmitted from “xxx application server”, and the event “ΔΔΔ process down” is “2004”. It is determined that this occurred at 10:00 am on April 8, 2012. Then, it is determined whether an abnormality has occurred with reference to the abnormal condition information shown in FIG. In this case, since the condition of the first record of the abnormal condition information shown in FIG. 10 is satisfied, the abnormality detection unit 22 determines that an abnormality has occurred in the monitoring target device 3 (step S301). The occurrence information transmission unit 23 reports that an abnormality with an abnormality content “ΔΔΔ process down” occurred on the monitoring target “xxx application server” at the occurrence date “10:00 am on April 8, 2004”. An instruction to transmit the abnormal occurrence information is passed. Then, as shown in FIG. 11, the abnormality occurrence information transmission unit 23 includes a header indicating that the abnormality occurrence information is present, a monitoring target “xxx application server”, and an abnormality content “ΔΔΔ process down”. Then, the abnormality occurrence information composed of the occurrence date and time “April 8, 2004, 10:00 am” is transmitted to the abnormality information output device 1 (step S302).

The abnormality occurrence information is received by the receiving unit 11 (step S101) and passed to the output determining unit 16. The output determination unit 16 refers to the output condition information shown in FIG. 7 and determines whether the condition of any record is satisfied (steps S201 to S204, S401 to S405). If none of the record conditions of the output condition information is satisfied, the output determination unit 16 determines that the abnormality information is to be output (step S205), and the reception unit 11 receives the administrator information shown in FIG. The administrator's mail address “M001 @... Com” corresponding to the monitoring target “xxx application server” included in the abnormality occurrence information is acquired. Then, the output determination unit 16 passes the mail address to the output unit 18, and passes the instruction to configure the abnormality information and the abnormality occurrence information received by the reception unit 11 to the abnormality information configuration unit 17.

  Upon receipt of the abnormality occurrence information or the like, the abnormality information configuration unit 17 sets “ΔΔΔ process down” to “10 am on April 8, 2004” in the “xxx application server” based on the abnormality occurrence information. An electronic mail (abnormal information) indicating that it occurred at “00 minutes” is formed, and the formed electronic mail is passed to the output unit 18 (step S103).

  When receiving the electronic mail, the output unit 18 transmits the electronic mail to the mail address “M001 @... Com” received from the output determination unit 16 (step S104). In this way, the electronic mail shown in FIG. 12 is transmitted to the administrator terminal 4 of the administrator identified by the administrator ID “M001”. Then, the administrator sees the e-mail, and knows that “△△△ process down” occurred in “xxx application server” at “10:00 am on April 8, 2004”. And can take measures against it.

  Next, it is assumed that “ΔΔΔ process down” occurs in “xxx application server” at 5:30 am on April 15, 2004 due to an application modification work. Also in this case, in the same manner as described above, the monitoring target “xxx application server”, the abnormality content “ΔΔΔ process down”, and the occurrence date “April 15, 2004 5:30 am” Is received by the receiving unit 11 (step S101). In this case, the monitoring target “xxx application server” of the abnormality occurrence information matches the monitoring target of the first record of the output condition information shown in FIG. 7 (step S401), and the abnormality content “ “ΔΔΔ process down” matches the abnormality content of the first record of the output condition information shown in FIG. 7 (step S 402), and the occurrence date and time “April 15, 2004 5:30 am” Is after the start date and time “April 15, 2004, 5:00 am” of the first record of the output condition information shown in FIG. 7 and before the end date and time “April 15, 2004, 7:00 pm” Therefore, since it is within the target period (step S403), it is determined that the condition of the first record of the output condition information is satisfied (step S404). As a result, the output determination unit 16 outputs the abnormality information. Determines not to force (step S201, S202, S206), abnormality information is not output. In this way, by properly setting output condition information for abnormalities that are known to occur in advance, it is possible to avoid the output of meaningless abnormal information. It can prevent being troubled by meaningless abnormal information.

  Next, a specific example of an operation in which the administrator changes the output condition information will be described. It is assumed that the administrator operates the administrator terminal 4 and starts an application that changes the output condition information. FIG. 13 is a schematic diagram showing an appearance of the administrator terminal 4 on which a screen for changing output condition information is displayed. Assume that the administrator clicks a “new record” button on the screen for changing the output condition information shown in FIG. Then, a screen for inputting a new record of output condition information is displayed. In the screen, as shown in FIG. 14, even if an abnormal content “server down” occurs in the monitoring target “ΔΔ server” from 3:00 am on May 10, 2004 to 6:00 am on the same day. Set to not notify abnormality information. For example, since the uninterruptible power supply in the “ΔΔ server” is exchanged during that time period, this setting is made because the power of the “ΔΔ server” must be temporarily turned off.

When the administrator inputs as shown in FIG. 14 and then clicks the “Register” button, the contents inputted in the output condition information from FIG. 14 to the abnormality information output device 1 via the communication line 6 from the administrator terminal 4 An instruction to register a new record is sent. The instruction is accepted by the input accepting unit 14, and the new record is registered in the output condition information by the changing unit 15. In this way, the output condition information can be changed and desired conditions can be set. In this specific example, only the change of the output condition information has been described, but the administrator or the like may be able to change the administrator information or the abnormal condition information. Further, an administrator or the like may be able to browse output condition information, administrator information, and the like.

  In this specific example, the case where the abnormality information is transmitted to the administrator by e-mail has been described. However, the abnormality information may be transmitted by transmitting the e-mail to the mobile phone, as described above. , It may be done by FAX or telephone. Also, abnormal information may be transmitted to a plurality of managers. For example, any two or more, such as a manager on the user side who uses the monitoring target device 3, a manager who performs maintenance inspection of the monitoring target device 3, and a manager on the supplier side of the monitoring target device 3 Abnormal information may be transmitted to the administrator. Here, the name “administrator” is used as the person who notifies the abnormality information, but the name of the person may be a name other than the administrator, such as an operator, a maintenance person, or a system engineer. Good.

  Further, the notification of abnormality information may be made by a plurality of means. For example, in the abnormality information output device 1, abnormality information may be output by a speaker, and an e-mail may be transmitted to the administrator's mobile phone and the administrator terminal 4. In this way, how to notify abnormality information to whom can be arbitrarily set in each system.

  As described above, according to the abnormality information output device 1 according to the present embodiment and the abnormality detection system including the abnormality information output device 1 and the abnormality occurrence detection device 2, the abnormality information output device 1 outputs the abnormality occurrence information. Even if received, by not outputting the abnormality information under a predetermined condition, it is possible to prevent the administrator from outputting unnecessary abnormality information, and the burden on the administrator can be reduced. Also, by not outputting unnecessary abnormality information, the administrator can concentrate only on important abnormality information for which some countermeasures must actually be taken. In other words, unnecessary abnormality information that does not require any countermeasures is not notified, so that important abnormality information is buried in unnecessary abnormality information, or response to important abnormality information is delayed or It can be prevented from becoming impossible.

  In addition, for example, due to system maintenance or the like, maintenance is performed during the time period by setting output condition information having a period-related condition so that abnormal information is not output only during the maintenance time period. Abnormal information about the system can be prevented from being output. Therefore, by setting the output condition in the output condition information in advance without performing the work of rewriting the abnormal condition information at the start and end of the time slot for maintenance, etc. Information can be prevented from being output.

  In addition, it is generally considered that abnormal condition information cannot be easily changed in many cases. Even in such a case, abnormal information that need not be notified is output by appropriately setting the output condition information. It can be set not to.

  Further, by appropriately setting the abnormal condition information, it is possible to prevent the abnormal information from being output for the occurrence of an event that need not be notified. That is, even if a predetermined event that does not need to be notified to the administrator occurs in the monitoring target, the abnormality occurrence detection unit 22 does not determine that an abnormality has occurred based on the abnormality condition information. Is not transmitted to the abnormality information output device 1, and abnormality information is not output.

(Embodiment 2)
An abnormality information output apparatus according to Embodiment 2 of the present invention will be described with reference to the drawings. The abnormality information output device according to the present embodiment also includes an abnormality occurrence detection unit that detects an abnormality that has occurred in the monitoring target. In other words, the abnormality information output device according to the present embodiment is configured by configuring the abnormality information output device according to the embodiment and the abnormality occurrence detection device as a single device.

  FIG. 15 is a block diagram showing a configuration of the abnormality information output apparatus according to the present embodiment. In FIG. 15, the abnormality information output device according to the present embodiment includes an output condition information storage unit 12, an administrator information storage unit 13, an input reception unit 14, a change unit 15, an abnormality information configuration unit 17, and an output. Unit 18, an abnormal condition information storage unit 21, an abnormality occurrence detection unit 31, and an output determination unit 32. The configuration and operation other than the abnormality occurrence detection unit 31 and the output determination unit 32 are the same as those in the first embodiment, and the description thereof is omitted.

  The abnormality occurrence detection unit 31 is the same as the abnormality occurrence detection unit 22 according to the first embodiment except that the abnormality detection is passed to the output determination unit 32, and the description thereof is omitted. The abnormality occurrence detection unit 31 may pass the fact that the abnormality has been detected to the output determination unit 32 as abnormality occurrence information. If the information includes the same content as the abnormality occurrence information, the output determination unit 32 may use other information. May be passed to

  The output determination unit 32 determines whether to output abnormality information based on the output condition information when the abnormality occurrence detection unit 31 detects the occurrence of abnormality. The output determination unit 32 is the same as the output determination unit 16 according to the first embodiment, except that it receives information about an abnormality that has occurred in the monitoring target from the abnormality occurrence detection unit 31 instead of the reception unit 11, and the description thereof Omitted. The information received from the abnormality occurrence detection unit 31 may be abnormality occurrence information or other information.

  FIG. 16 is a flowchart showing the operation of the abnormality information output apparatus according to this embodiment. Each process in FIG. 16 is the same as the description of the flowchart of FIG. 3 and the description of the flowchart of FIG.

  Further, with respect to a specific example of the operation of the abnormality information output device according to the present embodiment, the abnormality information output device 1 according to the first embodiment and the abnormality occurrence detection device 2 are configured as a single unit, except for the first embodiment. This is the same as the specific example in FIG.

  As described above, the abnormality information output device according to the present embodiment is configured by integrating the abnormality information transmitting device and the abnormality occurrence detection device according to the first embodiment, and has the same effects as those of the first embodiment. Can be obtained.

  In each of the above embodiments, the case has been described in which the output condition information includes a condition related to a period. However, the output condition information may not include a condition related to a period. For example, when performing maintenance or the like, the monitoring target that is the target of maintenance or the like is registered in the output condition information, and after the maintenance or the like is completed, the monitoring target that is the target of the maintenance or the like is handled. You may delete the record of output condition information.

  In each of the above-described embodiments, the case where the monitoring target and abnormality content are indicated as character data has been described. However, the monitoring target and abnormality content are identified using predetermined identification information for identifying them. The determination information may be used to determine whether or not a condition is satisfied.

  In each of the above embodiments, the case where the output determination unit 16 determines whether or not to output abnormality information has been described. For example, when abnormality information is configured by the abnormality information configuration unit 17, the output unit 18 When it is set to output the abnormality information, the output determination unit 16 may determine whether or not to configure the abnormality information. In this case, since the abnormality information is always output when it is configured, the determination as to whether or not to configure the abnormality information is equivalent to the determination as to whether or not the abnormality information is output. Eventually, it is determined whether or not to output abnormality information.

  In each of the above embodiments, each process (each function) may be realized by centralized processing by a single device (system), or by distributed processing by a plurality of devices. May be.

  In each of the above embodiments, each component may be configured by dedicated hardware, or a component that can be realized by software may be realized by executing a program. For example, each component can be realized by a program execution unit such as a CPU reading and executing a software program recorded on a recording medium such as a hard disk or a semiconductor memory. The software that realizes the information processing apparatus in each of the above embodiments is a program as described below. In other words, this program is generated in the monitoring target when the computer receives a reception step of abnormality occurrence information, which is information indicating that abnormality has occurred in the monitoring target, and when the abnormality occurrence information is received in the reception step. An output determination step for determining that the abnormality information is not output when an output condition that is a condition for not outputting abnormality information that is information related to the abnormality is satisfied, and for outputting the abnormality information when the output condition is not satisfied; An abnormality information configuration step that configures the abnormality information, and an output step that outputs the abnormality information configured in the abnormality information configuration step when it is determined that the abnormality information is output in the output determination step. Is.

  In addition, the other program includes an abnormality occurrence detection step for detecting an abnormality that has occurred in the monitoring target, and information related to the abnormality that has occurred in the monitoring target when the occurrence of the abnormality is detected in the abnormality occurrence detection step. An output determination step for determining that the abnormality information is not output when an output condition that is a condition for not outputting certain abnormality information is satisfied, and for determining that the abnormality information is output when the output condition is not satisfied; and And an output step for outputting the abnormality information configured in the abnormality information configuration step when it is determined that the abnormality information is output in the output determination step.

  In the above program, in the output step for outputting information and the receiving step for receiving information, processing performed by hardware, for example, processing performed by a modem or an interface card in the transmission step (only performed by hardware). Not included) is not included.

  Further, this program may be executed by being downloaded from a server or the like, and a program recorded on a predetermined recording medium (for example, an optical disc such as a CD-ROM, a magnetic disc, a semiconductor memory, etc.) is read out. May be executed by

Further, the computer that executes this program may be singular or plural. That is, centralized processing may be performed, or distributed processing may be performed.
Further, the present invention is not limited to the above-described embodiments, and various modifications are possible, and it goes without saying that these are also included in the scope of the present invention.

  As described above, the abnormality information output device or the like according to the present invention can prevent the occurrence of an abnormality under a predetermined condition even if an abnormality occurs in the system or the like. It is effective as a device for notifying abnormality.

The block diagram which shows the structure of the abnormality information output device by Embodiment 1 of this invention. The block diagram which shows the structure of the abnormality generation detection apparatus by the embodiment The flowchart which shows operation | movement of the abnormality information output device by the embodiment The flowchart which shows operation | movement of the abnormality information output device by the embodiment The flowchart which shows operation | movement of the abnormality generation detection apparatus by the embodiment The figure which shows an example of the structure of the system by the embodiment The figure which shows an example of the output condition information in the embodiment The flowchart which shows operation | movement of the abnormality information output device by the embodiment The figure which shows an example of the administrator information in the embodiment The figure which shows an example of the abnormal condition information in the embodiment The figure which shows an example of the abnormality occurrence information in the same embodiment The figure which shows an example of the abnormality information in the embodiment The schematic diagram which shows an example of the external appearance of the administrator terminal in the embodiment The figure which shows an example of the display in the embodiment The block diagram which shows the structure of the abnormality information output device by Embodiment 2 of this invention The flowchart which shows operation | movement of the abnormality information output device by the embodiment

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Abnormal information output apparatus 2 Abnormality generation detection apparatus 3 Monitoring object apparatus 4 Administrator terminal 11 Receiving part 12 Output condition information storage part 13 Administrator information storage part 14 Input reception part 15 Change part 16, 32 Output judgment part 17 Abnormal information structure Unit 18 Output unit 21 Abnormal condition information storage unit 22, 31 Abnormality occurrence detection unit 23 Abnormality occurrence information transmission unit

Claims (8)

A receiver that receives abnormality occurrence information that is information indicating that an abnormality has occurred in the monitoring target;
An output condition information storage unit that stores output condition information that is information indicating an output condition that is a condition for not outputting abnormality information that is information relating to an abnormality that has occurred in the monitoring target;
An output determination unit that determines that the abnormality information is not output when the output condition is satisfied and the abnormality information is output when the output condition is not satisfied when the reception unit receives the abnormality occurrence information; ,
An abnormality information constituting unit constituting the abnormality information;
An abnormality information output device comprising: an output unit configured to output abnormality information configured by the abnormality information component when the output determination unit determines to output abnormality information. An anomaly detection unit that detects an anomaly that has occurred in the monitoring target;
An output condition information storage unit that stores output condition information that is information indicating an output condition that is a condition for not outputting abnormality information that is information relating to an abnormality that has occurred in the monitoring target;
When the abnormality occurrence detection unit detects the occurrence of an abnormality, it is determined that the abnormality information is not output when the output condition is satisfied, and the abnormality determination is determined to output the abnormality information when the output condition is not satisfied. And
An abnormality information constituting unit constituting the abnormality information;
An abnormality information output device comprising: an output unit configured to output abnormality information configured by the abnormality information component when the output determination unit determines to output abnormality information. The abnormality information output device according to claim 1, wherein the output condition includes a condition related to a period. An abnormality detection system comprising the abnormality information output device according to claim 1 and an abnormality occurrence detection device,
The abnormality occurrence detection device is
An anomaly detection unit that detects an anomaly that has occurred in the monitoring target;
An abnormality detection system comprising: an abnormality occurrence information transmission unit configured to transmit the abnormality occurrence information to the abnormality information output device when the abnormality occurrence detection unit detects occurrence of an abnormality. A reception step of receiving abnormality occurrence information that is information indicating that an abnormality has occurred in the monitoring target;
When the abnormality occurrence information is received in the reception step, it is determined that the abnormality information is not output when an output condition that is a condition for not outputting abnormality information that is information relating to an abnormality that has occurred in the monitoring target is satisfied, and the output An output determination step for determining that the abnormality information is output when the condition is not satisfied;
Anomaly information configuration step constituting the anomaly information;
An abnormality information output method comprising: an output step of outputting abnormality information configured in the abnormality information configuration step when it is determined that abnormality information is output in the output determination step. An abnormality occurrence detection step for detecting an abnormality that has occurred in the monitoring target;
When an abnormality occurrence is detected in the abnormality occurrence detection step, it is determined that the abnormality information is not output when an output condition that is a condition for not outputting abnormality information that is information relating to the abnormality that has occurred in the monitoring target is satisfied, An output determination step for determining that the abnormality information is output when the output condition is not satisfied;
Anomaly information configuration step constituting the anomaly information;
An abnormality information output method comprising: an output step of outputting abnormality information configured in the abnormality information configuration step when it is determined that abnormality information is output in the output determination step. On the computer,
A reception step of receiving abnormality occurrence information that is information indicating that an abnormality has occurred in the monitoring target;
When the abnormality occurrence information is received in the reception step, it is determined that the abnormality information is not output when an output condition that is a condition for not outputting abnormality information that is information relating to an abnormality that has occurred in the monitoring target is satisfied, and the output An output determination step for determining that the abnormality information is output when the condition is not satisfied;
Anomaly information configuration step constituting the anomaly information;
A program for executing an output step of outputting the abnormality information configured in the abnormality information configuration step when it is determined that the abnormality information is output in the output determination step. On the computer,
An abnormality occurrence detection step for detecting an abnormality that has occurred in the monitoring target;
When the occurrence of an abnormality is detected in the abnormality occurrence detection step, it is determined that the abnormality information is not output when an output condition that is a condition for not outputting abnormality information that is information relating to the abnormality that has occurred in the monitoring target is satisfied, An output determination step for determining that the abnormality information is output when the output condition is not satisfied;
Anomaly information configuration step constituting the anomaly information;
A program for executing an output step of outputting the abnormality information configured in the abnormality information configuration step when it is determined that the abnormality information is output in the output determination step.

Images