JP2007156524A - Log data management system, method for controlling it, log data collection apparatus, method for controlling it, log data management apparatus, method for controlling it, and control program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a log data management system capable of reducing management by equalizing unsent print logs retained in a plurality of log data collection apparatuses. <P>SOLUTION: In the log data management system having a plurality of print log collection apparatuses 103 and a print log management apparatus 104, the plurality of print log collection apparatuses 103 send log size data (retention information about unsent log data) to the print log management apparatus 104. The print log management apparatus 104 receives the log size data, determines the log transmission intervals of each of the print log collection apparatuses 103 according to the log size data received, and sends information about the log transmission intervals to the corresponding print log collection apparatuses 103. Each of the print log collection apparatuses 103 changes the setting of the log transmission intervals according to the received information about the log transmission intervals. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a log data management system that executes communication of log data via a network, a control method of the system, a log data collection device and a control method of the device, a log data management device, a control method of the device, and a control Regarding the program.

  In recent years, there have been frequent cases of information leakage, such as the leakage of personal information, in which information that should be managed confidentially by companies is leaked to the outside. Therefore, there is a need for a system for preventing or deterring confidential information from leaking. Electronic documents managed by computers can be prevented from leaking out as they are due to improved system security, but they still flow out as paper documents by printing electronic information. That cannot be avoided.

  For this reason, by acquiring a log of print processing executed by all information processing devices and image forming devices in the company, monitoring the log, and building a system that immediately detects illegal printing A method for suppressing information leakage has been proposed.

  As one example, Patent Document 1 discloses a print information acquisition system that acquires print data as a bitmap and manages the print data. In this system, information such as the print date and data and print data (print log) obtained by bitmap printing are acquired and saved at the time of printing, and when a problem occurs later, illegal print data is searched based on the information such as the date and time. That's it.

  Patent Document 2 discloses a print data management system that acquires and stores a print log instead of a bitmap.

  There are various possible types of print logs, but the control data to be sent to the printing device or the printing data itself, or the object information (text, images, etc.) sent by the printing program to the printing device control program ) Etc. are considered.

Patent Document 3 discloses a technique for changing data transmission intervals in order to perform data transmission while avoiding a busy state of a counterpart terminal in a technique related to communication.
JP 2002-149371 A JP 2003-330677 A JP 2000-232449 A

  However, even if the print logs are collected by the methods of Patent Document 1 and Patent Document 2, since the print logs can be stored only on one server, a server or server administrator as a log data collection device is required for each site. There was a problem that the print log had to be prepared and monitored.

  In order to solve this problem, when one integrated management server as a log data management device receives and stores print logs from a plurality of base servers (log data collection devices), the integrated management server In some cases, the print log cannot be received from the server at each site, and the print log is accumulated on the server at each site.

  When the load on the integrated management server is large, the server at the base with the larger print amount cannot transmit the print log to the integrated management server, and a print log transmission error occurs. As a result, a large amount of unsent print logs are accumulated in the server at the base with a large print amount, and an unbalance of the data amount of unsent print logs accumulated among the servers at the plurality of bases occurs.

  Even if the method of changing the data transmission interval as in Patent Document 3 is simply applied to the transmission of the print log from the server at each site to the integrated management server, the data amount of the unsent print log between sites The imbalance cannot be resolved.

  An object of the present invention is to equalize unsent print logs staying in a plurality of log data collection devices and reduce the management, a log data management system capable of reducing management, a log data collection device, and a log data collection device It is to provide a control method of the device, a log data management device, a control method of the device, and a control program.

  In order to achieve the above object, a log data management system according to claim 1 includes a plurality of log data collection devices each receiving log data from at least one information processing device, and the plurality of log data collection devices via a network. A log data management system connected to and managing log data transmitted from the plurality of log data collection devices, wherein the plurality of log data collection devices converts the log data into the log data Log data transmission means for transmitting to the management apparatus; retention information transmission means for transmitting retention information relating to the log data to the log data management apparatus; and log data transmission based on transmission interval control information received from the log data management apparatus Transmission interval changing means for changing the transmission interval of log data by the means, and the log The data management device determines staying information receiving means for receiving staying information transmitted from the staying information sending means, and determines a log data transmission interval by the log data sending means based on the received staying information. Transmission interval determination means, and control information transmission means for transmitting transmission interval control information corresponding to the determined transmission interval to the plurality of log data collection devices.

  The log data collection device according to claim 5 is a log data collection device connectable to at least one information processing device that transmits log data and a log data management device that manages the log data, and is transmitted from the information processing device. Log data receiving means for receiving received log data, log data transmitting means for transmitting the received log data to the log data management apparatus, and retention for transmitting retention information relating to the log data to the log data management apparatus An information transmission unit; and a transmission interval changing unit that changes a transmission interval of log data by the log data transmission unit based on transmission interval control information determined by the log data management device according to the staying information. It is characterized by.

  The log data management device according to claim 8 is a log data management device connectable to a plurality of log data collection devices that collect log data via a network, and the log data transmitted from the plurality of log data collection devices Log data receiving means for receiving log data, staying information receiving means for receiving stay information relating to log data of the plurality of log data collection devices, and transmission of log data by the plurality of log data collection devices according to the stay information Transmission interval determination means for determining an interval, and control information transmission means for transmitting transmission interval control information corresponding to the determined transmission interval to the plurality of log data collection devices.

  A log data collection device control method according to a fourteenth aspect and a control program according to a seventeenth aspect cause a computer to execute the same operation as the log data collection device according to a fifth aspect.

  A control method for a log data management apparatus according to a fifteenth aspect and a control program according to an eighteenth aspect cause a computer to execute the same operation as that of the log data management apparatus according to a eighth aspect.

  A control method for a log data management system according to a sixteenth aspect and a control program according to a nineteenth aspect are characterized by causing a computer to execute the same operation as the log data management system according to the first aspect.

  According to the present invention, it is possible to equalize print logs staying in a plurality of print log collection devices and reduce management.

(First embodiment)
Hereinafter, a first embodiment of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a system configuration diagram of a log data management system according to the first embodiment of the present invention. The log data management system in FIG. 1 is a print log management system suitable for a print log as log data.

  1 includes a user terminal 101, a printing apparatus 102, a print log collection apparatus 103 as a log data collection apparatus, a print log management apparatus 104 as a log data management apparatus, which are connected to each other via a network. An administrator terminal 105 and a mail server 113 are provided.

  The user terminal 101 includes an OS (operating system) (not shown), a document printing program 106, and a printing apparatus control program 107. Although FIG. 1 shows only one user terminal 101 for convenience of explanation, a plurality of user terminals 101 may exist. For example, when this system extends over a plurality of bases, a plurality of user terminals 101 may exist for each base.

  The printing apparatus 102 is a multifunction machine or a printer. Although only one printing apparatus 102 is shown in FIG. 1 for convenience of explanation, a plurality of printing apparatuses 102 may exist. The number is set such that the load is not excessive for the print instructions from the plurality of user terminals 101. For example, when this system extends over a plurality of bases, a plurality of printing apparatuses 102 may exist for each base.

  The print log collection device 103 includes an OS (operating system) (not shown) and a print log collection program 108. Although there are not as many as the user terminal 101, there are a plurality. The print log collection device 103 is connected to a print log temporary storage unit 112 that temporarily stores a print log before transmitting it to the print log management device 104. The print log temporary storage unit 112 includes a storage device such as a hard disk.

  One print log collection apparatus 103 has jurisdiction over a plurality of user terminals 101. For example, when this system is spread over a plurality of bases, there is one print log collection device 103 for each base, but there may be a plurality of print log collection devices 103 at one base.

  The print log management apparatus 104 includes an OS (operating system) (not shown), a print log management program 109, a setting maintenance program 115, and a log transmission interval calculation program 117, and is connected to a print log database (DB) 110. Only one print log management apparatus 104 exists in this system, receives a print log (job) transmitted from each print log collection apparatus 103, and stores the print log in the print log DB 110 for a long period of time.

  The administrator terminal 105 is configured to be able to send and receive mail, and includes an OS (operating system) (not shown), a mail display unit 114, and a print log search program 111. One administrator terminal 105 may be provided, but a plurality of administrator terminals 105 may exist depending on the number and location of the managers. The administrator terminal 105 may be used by the administrator for maintenance of the print log management apparatus 104, but in this system, the administrator terminal 105 is used to search for a print log.

  The mail server 116 includes a mail transmission / reception unit 113 and transmits / receives an electronic mail between the manager terminal 105 and the print log collection device 103.

  The outline of the print log management system will be described below based on the system configuration diagram of FIG.

  In order to utilize this print log management system, it is necessary to set a monitoring keyword, a log transmission interval, and an administrator mail address in advance.

  The administrator operates the setting maintenance program 115 of the print log management apparatus 104 via the administrator terminal 105 to set the monitoring keyword, the administrator mail address, and the log transmission interval. The data is stored in a storage device (not shown).

  When the user terminal 101 issues a print instruction using the document print program 106, an object that is the origin of the print log is sent to the printing apparatus control program 107, and is further printed as a print log together with attribute information (print date and time, printer, etc.). It is sent to the print log collection device 103. The print log collection device 103 temporarily stores this under the control of the print log collection program 108.

  When the time comes, the print log collection device 103 notifies the print log management device 104 of information (log size data) of the data amount of the temporarily stored print log according to the print log collection program 108, and then the print log management device 104. Are sent one by one to the temporarily stored print logs.

  When a log reception error notification is returned from the print log management apparatus 104 during transmission of the print log, the print log collection apparatus 103 transmits the print log to the print log management apparatus 104 according to the print log collection program 108. Stop and wait for processing until the next scheduled time.

  When the print log management apparatus 104 receives the log size data of the print log from the print log collection program 108, the print log management apparatus 104 stores it in a storage device in the print log management apparatus 104 according to the print log management program 109. Subsequently, if there is a print log temporarily stored in the print log collection device 103, the print log is transmitted from the print log collection program 108 to the print log management device 104. According to the management program 109, the number of print logs currently being received is checked, and if the number of checked print logs exceeds a preset upper limit, all print log collection devices 103 are notified of log reception error occurrences. return it.

  If the number of checked print logs does not exceed the preset upper limit value, the print log management apparatus 104 receives the print log and checks whether or not a monitoring keyword is included in the print log. If the monitoring keyword is included in the print log, the print log management apparatus 104 transmits a warning mail including the monitoring keyword and the attribute information of the print log to the administrator terminal 105 via the mail server 116. . The print log management apparatus 104 stores all the print logs received from the print log collection program 108 of the print log collection apparatus 103 in the print log database 110.

  In addition, the log transmission interval calculation program 117 of the print log management apparatus 104 calculates the print log transmission interval for each print log collection apparatus 103 from the log size data of the print logs accumulated in each print log collection apparatus 103 at regular times.

  The calculated print log transmission interval data is transmitted to each print log collection device 103 by a log transmission interval calculation program 117 (which may be the print log management program 109). Thereafter, each print log collection device 103 transmits the print log to the print log management device 104 in accordance with the log transmission interval information included in the data transmitted from the log transmission interval calculation program 117.

  The administrator receives the warning mail at the manager terminal 105 and can check the monitoring keyword and the attribute information of the print log on the mail display unit 114. Since the administrator can specify the printer by the attribute information of the print log, the administrator can call attention to the printer. The administrator can check the printed document by searching the print log using the monitoring keyword and attribute information in the print log search program 111.

  The detailed configuration of the print log management system will be described below.

  FIG. 2 is a configuration diagram of the print log collection apparatus 103 of FIG. This apparatus mainly assumes a server computer equipped with an OS such as Windows (registered trademark) or UNIX (registered trademark), but the OS used is not specified in the present invention.

  The print log collection device 103 includes an external interface 201, a storage device 202, a CPU 203, and a RAM 204 that are connected to each other via a data bus 207. For maintenance of the print log collection device 103, an input device such as a keyboard and a mouse and a display device such as a liquid crystal display may be provided.

  The external interface 201 is a connection part with a network, and is a device serving as a window for data transmission / reception with an external device connected to the network.

  The storage device 202 is a nonvolatile storage device whose data is not erased even when the power is turned off, and stores data that may be stored for a long period of time. Here, a hard disk (HD) is used. The storage device 202 includes a print log collection program storage area 205 that is a storage area for the print log collection program 208 and a print log temporary storage area 206 that is a storage area for temporarily storing a print log. The storage device 202 stores various setting information in addition to the above.

  The CPU 203 is a central processing unit that can execute various programs by arithmetic processing.

  The RAM 204 is a volatile storage device and can hold data only while the power is on. The CPU 203 reads the print log collection program from the print log collection program storage area 205 of the storage device 202 into the RAM 204 and executes it.

  FIG. 3 is a configuration diagram of the print log management apparatus 104 of FIG. This apparatus mainly assumes a server computer equipped with an OS such as Windows (registered trademark) or UNIX (registered trademark), but the OS used is not specified in the present invention.

  The print log management apparatus 104 includes an external interface 301, a storage device 302, a CPU 303, and a RAM 304 that are connected to each other via a data bus 310. A print log database 110 is connected to the outside. For maintenance of the print log management device 104, an input device such as a keyboard and a mouse and a display device such as a liquid crystal display may be provided.

  The external interface 301 is a connection part with a network, and is a device serving as a window for data transmission / reception with an external device connected to the network.

  The storage device 302 is a nonvolatile storage device whose data is not erased even when the power is turned off, and stores data that may be stored for a long period of time. Here, a hard disk (HD) is used. The storage device includes a print log management program storage area 306 that is a storage area for the print log management program 109, a setting maintenance program storage area 307 that is a storage area for the setting maintenance program 115, and a storage area for the log transmission interval calculation program 117. There is a log transmission interval calculation program storage area 308 and a print log temporary storage area 309 which is a storage area for temporarily storing the print log. The storage device 302 stores various setting information in addition to the above.

  The CPU 303 is a central processing unit that can execute various programs by arithmetic processing.

  A RAM 304 is a volatile storage device that can hold data only while the power is on. The CPU 303 reads the print log collection program from the print log management program storage area 306 of the storage device 302 into the RAM 304 and executes it.

  The print log database 110 stores all collected print logs for a long time. If the capacity of the storage device 402 is sufficient, the print log database 110 can be substituted with this. However, in consideration of maintainability, the print log database 110 is located outside the print log management device 104 as shown in FIG. It is preferable to be connected and exchangeable.

  FIG. 4 is a flowchart showing processing of the setting maintenance program 115 executed by the CPU 303 of the print log management apparatus 104.

  When the administrator activates the setting maintenance program 215 via the administrator terminal 105, the CPU 303 first receives an e-mail address from the administrator terminal 105 and prints the input e-mail address as a monitoring keyword. If it is found in the log, it is set as the e-mail address of the administrator to be notified (step S401).

  Next, the CPU 303 determines whether or not to register another mail address as the mail address of the administrator (step S402). Here, when a plurality of e-mail addresses are input from the administrator terminal 105, it is automatically determined that the e-mail address is registered as an administrator.

  As a result of the determination in step S402, if another mail address is registered as the administrator's mail address, the process returns to step S401, while another mail address is not registered as the administrator's mail address, that is, the administrator's mail address. If only one mail address has been input, the process proceeds to step S403.

  Next, the CPU 303 receives an input of a keyword from the manager terminal 105 and registers the input keyword as a monitoring keyword in the temporary storage area 309 (step S403).

  Next, the CPU 303 determines whether or not other keywords are registered in the temporary storage area 309 as monitoring keywords (step S404). Here, when a plurality of keywords are input from the administrator terminal 105, it is automatically determined if they are registered in the temporary storage area 309 as monitoring keywords.

  If another keyword is registered as a monitoring keyword as a result of the determination in step S404, the process returns to step S403. On the other hand, when no other keyword is registered as a monitoring keyword, that is, when only one keyword is input. The process proceeds to step S405.

  Finally, the CPU 303 receives an input of time (for example, 5 minutes, 10 minutes, etc.) from the administrator terminal 105, sets the input time as a log transmission interval (step S405), and ends this processing. To do. As will be described later, the log transmission interval calculation program 117 is executed by the CPU 303, whereby the optimal log transmission interval is calculated for each print log collection device 103.

  In the present embodiment, various settings / registrations are performed by the administrator terminal 105. However, the administrator of the print log management apparatus 104 performs settings / registration by the input device of the print log management apparatus 104. Also good.

  FIG. 5 is a diagram illustrating data processing of the printing apparatus control program 107 at the user terminal 101.

  When the user terminal 101 issues a document print instruction, the document print program 106 sends an object 501 such as text or an image of the document to be printed to the printing apparatus control program 107 (for example, a printer driver). The printing apparatus control program 107 sends the received object 501 as a print log together with print attributes (print date and time, printer, etc.) to the print log collection apparatus 103 and converts the object into print job data 502 and sends it to the printing apparatus 102.

  FIG. 6 is a flowchart showing processing at the time of print log reception executed by the CPU 203 in accordance with the print log collection program 108 of the print log collection device 103. The print log collection program 108 is always activated when the power of the print log collection apparatus 103 is on.

  First, the CPU 203 waits until a print log transmitted from the user terminal 101 is received (step S601), and determines whether a print log (including attribute information) has been received (step S602). If the print log (including attribute information) is not received, the process returns to step S601. If the print log (including attribute information) is received, the print log (including attribute information) is temporarily stored in the temporary storage area 206. Then (step S603), the process returns to step S601.

  FIG. 7 is a flowchart showing processing at the time of print log transmission executed by the CPU 203 in accordance with the print log collection program 108 of the print log collection device 103. The print log collection program 108 is always activated when the power of the print log collection apparatus 103 is on. The setting of the log transmission interval is described in the print log collection program 108 so as to be changeable.

  First, the CPU 203 checks the time with an OS system clock (not shown) (step S701).

  Next, the CPU 203 determines whether or not the start time of this process has elapsed (step S702). If the start time of this process has not elapsed, the process returns to step S701. On the other hand, if the start time of this process has elapsed, the log size data of the print log (including attribute information) temporarily stored in the temporary storage area 206 is acquired (step S703).

  Here, the log size data is 0 bytes if the print log is not temporarily stored, and if the print log is temporarily stored, size data of 1 byte or more is acquired. Here, when there are a plurality of temporarily stored print logs, the total log size data of the plurality of print logs is acquired.

  Next, the CPU 203 transmits the acquired log size data to the print log management apparatus 104 (step S704), and reads one print log (including attribute information) temporarily stored in the temporary storage area 206 (step S705).

  The CPU 203 determines whether or not the temporarily stored print log (including attribute information) still remains in the temporary storage area 206 in order to determine whether or not all of the temporarily stored print logs have been read (step S202). S706).

  If the print log (including attribute information) temporarily stored in the temporary storage area 206 still remains, the CPU 203 transmits the print log (including attribute information) read in step S705 to the print log management apparatus 104. (Step S707), it is determined whether or not a log reception error notification transmitted from the print log management apparatus 104 in Step S807 of FIG. 8 to be described later has been received (Step S708).

  If it is determined in step S708 that the log reception error has not been received, the process returns to step S705. If the log reception error has been received, the CPU 203 waits for the next log transmission time. The transmission of the print log to the print log management apparatus 104 is stopped (step S709), and the current log transmission interval setting is changed based on the new log transmission interval information sent from the print log management apparatus 104 ( Step S710). Thereafter, the process returns to step S701.

  As a result of the determination in step S706, if there is no print log (including attribute information) temporarily stored in the temporary storage area 206, the process proceeds to step S710.

  Note that the above processing has been described on the assumption that there is a print log. However, when the log size data is acquired in step S703 and the log size is 0 byte, the processing in steps S705 to S708 is skipped. (Never read or transmit the print log), the process may proceed to step S710.

  FIG. 8 is a flowchart showing processing executed by the CPU 303 in accordance with the print log management program 109 of the print log management apparatus 104.

  The print log management program 109 is always activated when the power of the print log management apparatus 104 is on.

  First, the CPU 303 waits until the log size data transmitted from the print log collection device 103 is received in step S704 of FIG. 7 (step S801), and whether the log size data transmitted from the print log collection device 103 has been received. It is determined whether or not (step S802).

  If the result of determination in step S802 is that log size data transmitted from the print log collection device 103 has not been received, processing returns to step S801. On the other hand, when the log size data transmitted from the print log collection device 103 is received, the CPU 303 temporarily stores the log size data in the temporary storage area 309 (step S803).

  Next, the CPU 303 waits until it receives a print log (including attribute information) transmitted from the print log collection device 103 in step S707 of FIG. 7 (step S804), and reception of the print log (including attribute information) is started. It is determined whether or not (step S805).

  If it is determined in step S805 that reception of the print log (including attribute information) has not started, the process returns to step S801. On the other hand, if reception of print logs (including attribute information) has started, the CPU 303 determines whether the number of print logs currently received exceeds the number of print logs that can be received simultaneously from a plurality of print log collection devices 103. It is determined whether or not (step S806).

  Here, whether or not the number of print logs currently received exceeds the number of print logs that can be simultaneously received from a plurality of print log collection apparatuses 103 is determined by the number of folders that can store print logs. If there is a limit on the number of ports for receiving print logs provided in the print log management apparatus 104, the number of print logs currently received exceeds the number of print logs that can be received simultaneously from a plurality of print log collection apparatuses 103. It may be determined whether the number of print logs currently being received exceeds a predetermined number of ports.

  If the result of determination in step S806 is that the number of print logs currently received exceeds the number of print logs that can be received simultaneously from a plurality of print log collection apparatuses 103, the CPU 303 is connected to the current print log management apparatus 104. A notification of the occurrence of a log reception error is transmitted to all the print log collection devices 103 (step S807), and the process returns to step S801.

  If it is determined in step S806 that the number of print logs currently received does not exceed the number of print logs that can be received simultaneously from the plurality of print log collection devices 103, the CPU 303 simultaneously receives the print logs from the plurality of print log collection devices 103. The number of received print logs is incremented by 1 and the value is temporarily stored in the temporary storage area 309 (step S808).

  Thereafter, the CPU 303 saves the received print log (including attribute information) in the print log database 110 (step S809).

  Next, the CPU 303 determines whether or not the monitoring keyword registered in step S403 is included in the print log (step S810). In the present embodiment, the print log is text data, and the determination is executed by comparing the text data with a registered monitoring keyword.

  As a result of the determination in step S810, if the monitoring keyword registered in the print log is included, the CPU 303 displays a document including the monitoring keyword for the administrator (that is, the administrator terminal 105). A warning mail is sent (step S811). After that, since the reception of the print log is finished, the number of print logs that are temporarily stored in the temporary storage area 309 and received at the same time is reduced by 1, and the value is overwritten and stored (step S812). Return.

  As a result of the determination in step S810, if the monitoring keyword registered in the print log is not included, the process proceeds to step S812.

  FIG. 9 is a flowchart showing processing executed by the CPU 303 in accordance with the log transmission interval calculation program 117 of the print log management apparatus 104.

  This log transmission interval calculation program 117 is always activated when the power of the print log management apparatus 104 is on.

  First, the CPU 303 checks the time using a system clock (not shown) of the OS (step S901).

  Next, the CPU 303 determines whether or not the start time of this process has elapsed (step S902). If the start time of this process has not elapsed, the process returns to step S901. On the other hand, when the start time of this process has elapsed, the CPU 303 describes the log size data from among the plurality of print log collection devices 103 based on the log size data temporarily stored in step S803. The print log collection device 103 having the largest data size is searched (step S903), and the log transmission interval information set in step S405 for the print log collection device 103 having the largest data size described in the log size data is searched. Is transmitted (step S904).

  In this embodiment, a transmission interval is set in the print log collection device corresponding to the maximum log data size, and transmission intervals of a plurality of log data collection devices are set based on the transmission interval set in the log data collection device. Although configured as described above, a transmission interval is set in the print log collection device corresponding to the log data size of the upper rank (for example, within the upper third rank), and a plurality of log data collection devices are set based on the transmission interval set in the log data collection device. The transmission interval may be set.

  In addition, when a plurality of log transmission intervals are set in step S405 (the log transmission interval is set as a default for each print log collection device), the log transmission interval is the shortest log transmission interval. May be obtained and transmitted.

  Next, the CPU 303 determines whether there is a print log collection device 103 for which information on a new log transmission interval has not yet been set (step S905).

  As a result of the determination in step S905, if there is a print log collection device 103 that has not yet been set with new log transmission interval information, the CPU 303 calculates a log transmission interval (step S906). As a calculation method, it calculates | requires by following formula (1), for example.

Log transmission interval = (data size described in “maximum log size data”) × (“log transmission interval set in step S405”) ÷ (log size data of print log collection device 103 to be calculated) Data size described in ") ... (1)
More specifically, the data size described in the “maximum log size data” is 10 MB, the “log transmission interval set in step S405” is 1 minute, and the “log of the print log collection device 103” that is the calculation target. When the data size described in “size data” is 2 MB, the log transmission interval is 10 MB × 1 minute ÷ 2 MB = 5 minutes.

  Thereby, the transmission interval is determined for each of the plurality of log collection devices.

  The CPU 303 transmits the calculated log transmission interval information to the print log collection device 103 that is the target of calculating the log transmission interval in step S906 (step S907), and returns to step S905.

  As a result of the determination in step S905, if there is no print log collection apparatus 103 for which no new log transmission interval information has been set, the process returns to step S901.

  As described above, since the log transmission interval of each print log collection device 103 is determined in steps S904 to S907, the print log collection device 103 having the maximum data size described in the log size data is determined. If one log transmission interval is determined, the log transmission intervals of the other print log collection apparatuses 103 can be automatically determined.

  In the present embodiment, the above process is a scheduled process (step S902), but the processes after step S903 may be executed at the timing when the log size data is received.

  In the above process, the log transmission interval is determined in steps S904 to S907. However, the data size described in the log size data is higher than the upper print log collection device (for example, the upper third place). For example, the log transmission interval may be set to 1 minute, and the steps S906 to S907 may be applied to a print log collection apparatus having a data size smaller than that.

  Further, in the above process, the log transmission interval of the print log collection device 103 having the maximum data size described in the log size data is first determined in steps S904 to S907, but is described in the log size data. The log transmission interval of the print log collection device 103 having the smallest data size may be determined first.

  FIG. 10 is a flowchart showing processing executed by the CPU 203 in accordance with the print log collection program 108 of the print log collection device 103.

  First, the CPU 203 waits until it receives the log transmission interval information transmitted from the print log management apparatus 104 in step S907 in FIG. 9 (step S1001), and the log transmission interval information transmitted from the print log management apparatus 104. Is determined (step S1002).

  As a result of the determination in step S1002, if the log transmission interval information transmitted from the print log management apparatus 104 has not been received, the process returns to step S1001. On the other hand, when the log transmission interval information transmitted from the print log management apparatus 104 is received, the CPU 203 temporarily stores the received log transmission interval information in the temporary storage area 206 (step S1003). Thereafter, the process returns to step S1001.

  Note that the log transmission interval information temporarily stored in step S1003 is used to change the log transmission interval setting in step S710.

  As described above in detail, according to the present embodiment, the administrator of the integrated management server uses the setting maintenance program to manually and regularly send the log transmission interval of the base server with a large amount of unsent print log data. Must be set short, and the log transmission interval of the base server with a small amount of unsent log must be set long, so that the probability of log reception error is made closer and the imbalance of logs accumulated in the base server must be adjusted. Can be reduced.

  Further, by equalizing the unsent print logs staying in each print log collection device, the burden on the administrator can be reduced and the risk of information leakage can be reduced. In addition, the cost required for print log monitoring / report management can be reduced.

  When each print log collection device 103 receives a log reception error notification from the print log management device 104, it stops sending log data until the next log transmission time (step S709). Since the setting of the log transmission interval is changed based on the received log transmission interval information (step S710), it is possible to equalize the untransmitted print logs staying in each print log collection device. As a result, the burden on the administrator can be reduced and the risk of information leakage can be reduced.

  The print log management device 104 receives log size data (stay information regarding unsent log data) from each print log collection device 103, and based on the received log size data, logs of each print log collection device 103 Since the transmission interval is determined and the log transmission interval information is transmitted (steps S903 to S907), it is possible to equalize the untransmitted print logs staying in the print log collection devices. As a result, the burden on the administrator can be reduced and the risk of information leakage can be reduced.

(Second Embodiment)
Hereinafter, a second embodiment of the present invention will be described in detail with reference to the drawings.

  When managing print logs and strengthening information leakage countermeasures, it is desired not only to manage print logs as text, but also to manage printed images.

  In view of this point, in the present embodiment, when text and images are collectively managed as a print log in the print log collection device 103, the text and the image are separated, and all the text is printed first. The report is transmitted to the management apparatus 104 so that the notification timing from the print log collection apparatus 103 to the print log management apparatus 104 is not delayed.

  Since the print log management system according to the second embodiment of the present invention has the same configuration as the print log management system according to the first embodiment, description thereof will be omitted.

  The outline of the print log management system will be described below.

  In order to utilize this print log management system, it is necessary to set a monitoring keyword, a log transmission interval, and an administrator mail address in advance.

  The administrator operates the setting maintenance program 115 of the print log management apparatus 104 via the administrator terminal 105 to set the monitoring keyword, the administrator mail address, and the log transmission interval. Save it in a storage device.

  When the user terminal 101 issues a print instruction using the document print program 106, an object that is the origin of the print log is sent to the printing apparatus control program 107, and is further printed as a print log together with attribute information (print date and time, printer, etc.). It is sent to the print log collection device 103. The print log collection device 103 divides this into text and images and temporarily stores them.

  When the time comes, the print log collection device 103 notifies the print log management device 104 of log size data of the temporarily stored print log in accordance with the print log collection program 108. Thereafter, the print logs temporarily stored are transmitted to the print log management apparatus 104 one by one. At this time, the print log collection apparatus 103 first transmits all the text, and transmits the image after there is no text to be transmitted.

  The text data of the print log includes attribute information (print date / time, printer, etc.). In addition, since the text and the image transmitted separately are associated later by the print log management apparatus 104, the attribute information includes a key for uniquely specifying the image data.

  When a log reception error notification is returned from the print log management apparatus 104 during transmission of the print log, the print log collection apparatus 103 transmits the print log to the print log management apparatus 104 according to the print log collection program 108. Stop and wait for processing until the next scheduled time.

  When the print log management apparatus 104 receives the log size data of the print log from the print log collection program 108, the print log management apparatus 104 stores it in a storage device in the print log management apparatus 104 according to the print log management program 109. Subsequently, if there is a print log temporarily stored in the print log collection device 103, the print log is transmitted from the print log collection program 108 to the print log management device 104. According to the management program 109, the number of print logs currently being received is checked, and if the number of checked print logs exceeds a preset upper limit, all print log collection devices 103 are notified of log reception error occurrences. return it.

  If the number of checked print logs does not exceed the preset upper limit value, the print log management apparatus 104 receives the print log and checks whether or not a monitoring keyword is included in the print log. If the monitoring keyword is included in the print log, the print log management apparatus 104 transmits a warning mail including the monitoring keyword and the attribute information of the print log to the administrator terminal 105 via the mail server 116. . The print log management apparatus 104 stores all the print logs received from the print log collection program 108 of the print log collection apparatus 103 in the print log database 110. If the received print log is an image, the text attribute information registered in the print log database 110 is referred to and stored in association with the text.

  In addition, the log transmission interval calculation program 117 of the print log management apparatus 104 calculates the print log transmission interval for each print log collection apparatus 103 from the log size data of the print logs accumulated in each print log collection apparatus 103 at regular times.

  The calculated print log transmission interval data is transmitted to each print log collection device 103 by a log transmission interval calculation program 117 (which may be the print log management program 109). Thereafter, each print log collection device 103 transmits the print log to the print log management device 104 in accordance with the log transmission interval information included in the data transmitted from the log transmission interval calculation program 117.

  The administrator can receive the warning mail at the administrator terminal 105 and can check the monitoring keyword and the attribute information on the mail display unit 114. Since the administrator can specify the printer by the attribute information, the administrator can alert the printer. The administrator can check the printed document by searching the print log using the monitoring keyword and attribute information in the print log search program 111.

  The detailed configuration of the print log management system will be described below.

  FIG. 11 is a flowchart showing processing at the time of print log reception executed by the CPU 203 in accordance with the print log collection program 108 of the print log collection device 103. The print log collection program 108 is always activated when the power of the print log collection apparatus 103 is on.

  First, the CPU 203 waits until a print log transmitted from the user terminal 101 is received (step S1101), and determines whether a print log (including attribute information) has been received (step S1102). If the print log (including attribute information) has not been received, the process returns to step S1101. If the print log (including attribute information) has been received, the print log text data (including attribute information) is temporarily stored in the area 206. (Step S1103), the image data of the print log is temporarily stored in the temporary storage area 206 (step S1104), and the process returns to step S1101.

  FIG. 12 is a flowchart showing processing at the time of print log transmission executed by the CPU 203 in accordance with the print log collection program 108 of the print log collection device 103. The print log collection program 108 is always activated when the power of the print log collection apparatus 103 is on. The setting of the log transmission interval is described in the print log collection program 108 so as to be changeable.

  First, the CPU 203 checks the time with an OS system clock (not shown) (step S1201).

  Next, the CPU 203 determines whether or not the start time of this process has elapsed (step S1202). If the start time of this process has not elapsed, the process returns to step S1201. On the other hand, if the start time of this process has elapsed, the log size data of the print log (including attribute information) temporarily stored in the temporary storage area 206 is acquired (step S1203).

  Here, the log size data is 0 bytes if the print log is not temporarily stored, and if the print log is temporarily stored, size data of 1 byte or more is acquired. Here, when there are a plurality of temporarily stored print logs, the total log size data of the plurality of print logs is acquired.

  Next, the CPU 203 transmits the acquired log size data to the print log management apparatus 104 (step S1204), and reads one print log text data (including attribute information) temporarily stored in the temporary storage area 206 (step S1204). S1205).

  The CPU 203 determines whether the text data (including attribute information) of the print log temporarily stored in the temporary storage area 206 still remains in order to determine whether or not the text data of all the temporarily stored print logs has been read. Is discriminated (step S1206).

  As a result of the determination in step S1206, if the print log text data (including attribute information) temporarily stored in the temporary storage area 206 still remains, the CPU 203 reads the print log text data (in step S1205). (Including attribute information) is transmitted to the print log management apparatus 104 (step S1207), and it is determined whether or not a log reception error notification has been received from the print log management apparatus 104 (step S1208).

  If it is determined in step S1208 that a log reception error notification has not been received, the process returns to step S1205. In the process of looping from step S1205 to step S1208, the CPU 203 can determine whether or not the text data of all the print logs temporarily stored in the temporary storage area 206 has been read.

  On the other hand, if it is determined in step S1208 that a log reception error has been generated, the CPU 203 stops sending the print log to the print log management apparatus 104 until the next log transmission time (step S1213). The setting of the current log transmission interval is changed based on the new log transmission interval information sent from the print log management apparatus 104 (step S1214). Thereafter, the process returns to step S1201.

  As a result of the determination in step S1206, if there is no print log text data (including attribute information) temporarily stored in the temporary storage area 206, the CPU 203 uses the print log image data read in step S1205. The print log image data temporarily stored in the temporary storage area 206 is transmitted to the print log management apparatus 104 (step S1209) to determine whether all the temporarily stored print log image data has been read. It is determined whether or not it still remains (step S1210).

  As a result of the determination in step S1210, if the print log image data temporarily stored in the temporary storage area 206 still remains, the CPU 203 displays the print log image data read in step S1209 as the print log management apparatus 104. (Step S1211), it is determined whether or not a notification of the occurrence of a log reception error has been received from the print log management apparatus 104 (Step S1212).

  If the result of determination in step S1212 is that a notification of log reception error has not been received, processing returns to step S1209. In a process of looping from step S1209 to step S1212, the CPU 203 can determine whether or not reading of all print log image data temporarily stored in the temporary storage area 206 has been completed.

  If it is determined in step S1212 that a log reception error notification has been received, the CPU 203 stops sending the print log to the print log management apparatus 104 until the next log transmission time (step S1213). The log transmission interval setting is changed based on the new log transmission interval information sent from the print log management apparatus 104 (step S1214). Thereafter, the process returns to step S1201.

  Note that the above processing has been described on the assumption that there is a print log, but when the log size data is acquired in step S1203 and the log size is 0 bytes, the processing in steps S1205 to S1212 is skipped. (Never read or transmit the print log), the process may proceed to step S1213.

  FIG. 13 is a flowchart showing processing executed by the CPU 303 in accordance with the print log management program 109 of the print log management apparatus 104.

  The print log management program 109 is always activated when the power of the print log management apparatus 104 is on.

  First, the CPU 303 waits until it receives log size data transmitted from the print log collection device 103 in step S1204 of FIG. 12 (step S1301), and has it received log size data transmitted from the print log collection device 103? It is determined whether or not (step S1302).

  The received log size data may be a log size obtained by adding up text data and image data, or may be a log size of either text data or image data.

  If it is determined in step S1302 that the log size data transmitted from the print log collection device 103 has not been received, the process returns to step S1301. On the other hand, when the log size data transmitted from the print log collection device 103 is received, the CPU 303 temporarily stores the log size data in the temporary storage area 309 (step S1303).

  Next, the CPU 303 waits until a print log is received (step S1304), and determines whether reception of the print log is started (step S1305). The print log received in step S1304 and the print log to be determined in step S1305 are the text data (including attribute information) of the print log transmitted from the print log collection device 103 in step S707 in FIG. 12, or the step in FIG. This is the print log image data transmitted from the print log collection apparatus 103 in step S1211.

  If it is determined in step S1305 that reception of the print log has not started, the process returns to step S1301. On the other hand, if reception of print logs has started, the CPU 303 determines whether the number of print logs currently received exceeds the number of print logs that can be simultaneously received from a plurality of print log collection devices 103. (Step S1306).

  Here, whether or not the number of print logs currently received exceeds the number of print logs that can be simultaneously received from a plurality of print log collection apparatuses 103 is determined by the number of folders that can store print logs. If there is a limit on the number of ports for receiving print logs provided in the print log management apparatus 104, the number of print logs currently received exceeds the number of print logs that can be received simultaneously from a plurality of print log collection apparatuses 103. It may be determined whether the number of print logs currently being received exceeds a predetermined number of ports.

  If the number of print logs currently received exceeds the number of print logs that can be received simultaneously from a plurality of print log collection devices 103 as a result of the determination in step S1306, the CPU 303 is connected to the current print log management device 104. A notification of the occurrence of a log reception error is transmitted to all the print log collection devices 103 (step S1307), and the process returns to step S1301.

  If it is determined in step S1306 that the number of print logs currently received does not exceed the number of print logs that can be received simultaneously from the plurality of print log collection devices 103, the CPU 303 simultaneously receives the print logs from the plurality of print log collection devices 103. The number of received print logs is incremented by 1, and the value is temporarily stored in the temporary storage area 309 (step S1308).

  Thereafter, the CPU 303 determines whether or not the print log received in step S1304 is text data (step S1309). This determination may be made based on the extension of the received print log file, or may be made based on the content of the received print log. For example, when determining whether or not the print log is text data based on the received print log file extension, the print log file extension such as “txt”, “doc”, “log1”, etc. In this case, it is determined that the data is text data. If the extension of the file of the print log is “img”, “gif”, “jpeg”, “log2”, etc., it is determined that the data is image data. For example, when determining whether or not the print log is text data based on the content of the received print log, when a predetermined character string (for example, ASCII character) is included in the print log, If it is determined that the data is text data and the print log does not include a predetermined character string (for example, ASCII character), it is determined that the data is image data.

  If it is determined in step S1309 that the received print log is text data, the received print log is stored in the print log database 110 (step S1310).

  Next, the CPU 303 determines whether or not the monitoring keyword registered in step S403 is included in the print log (step S1311). In step S1310, the determination is performed by comparing the print log (text data) stored in the print log database 110 with the registered monitoring keyword.

  If the monitoring keyword registered in the print log is included as a result of the determination in step S1311, the CPU 303 displays a document including the monitoring keyword for the administrator (that is, the administrator terminal 105). A warning mail is sent (step S1312). Thereafter, since the reception of the print log is completed, the number of print logs temporarily stored in the temporary storage area 309 and received at the same time is reduced by 1, and the value is overwritten and stored (step S1314). Return.

  If it is determined in step S1309 that the received print log is not text data, that is, image data, the image data is stored in association with the text data already stored in the print log database 110 (step S1313). ), And proceeds to step S1314.

  If the result of determination in step S1311 is that a monitoring keyword registered in the print log is included, the process proceeds to step S1313.

  As described above in detail, according to the present embodiment, an unsent print log is generated, so that the administrator of the server at the base can no longer receive the warning mail from the integrated management server. It is possible to solve the problem that a situation in which a warning cannot be issued occurs.

  Therefore, the same effect as the first embodiment can be obtained, and the print log collection device 103 transmits the text data included in the print log to the print log management device 104 in preference to the image data. (Steps S1207 and S1211), there is an effect that the report timing from the print log collection device 103 to the print log management device 104 is not delayed.

  Since the print log management device 104 stores the text data and image data distributed from the print log collection device 103 in association with each other, the search can be efficiently performed when the administrator searches the print log later. Is possible.

(Third embodiment)
The administrator who has received the warning mail from the print log management apparatus 104 at the administrator terminal 105 can immediately confirm what kind of printing has been performed by the printing apparatus 102 and can quickly cope with information leakage. It is desired.

  However, when the administrator confirms the print log registered in the print log database 110 via the administrator terminal 105 and the print log management apparatus 104, the text data of the print log may already be in the print log database depending on the timing of confirmation. Although the image data of the print log is not transmitted from the print log collection device 103 to the print log management device 104 and is not registered in the print log database 110, the administrator objectively views the image data. May not be able to be grasped automatically.

  Therefore, in this embodiment, when the print log management apparatus 104 receives an instruction to browse image data of the print log from the administrator terminal 105 and the image data is not registered in the print log database 110, the print log The management device 104 instructs the print log collection device 103 to transmit the image data of the print log that has been browsed, and the print log collection device 103 sends the print log currently being executed to the print log management device 104. Is temporarily interrupted, and image data corresponding to an instruction from the print log management apparatus 104 is preferentially transmitted. Thereby, the administrator can take a quick response to information leakage.

  The processing contents in the print log management system according to the present embodiment will be described below with reference to FIG.

  Since the print log management system according to the present embodiment has the same configuration as the print log management system according to the first embodiment, description thereof is omitted.

  FIG. 14 is a flowchart showing the processing contents in the print log management system according to this embodiment. The following processes executed by the print log collection device 103, the tube print log management device 104, and the administrator terminal 105 are executed by the CPUs included therein.

  First, the manager terminal 105 receives a warning mail transmitted from the tube print log management apparatus 104 (step S1401). Here, the warning mail received by the manager terminal 105 is a warning mail transmitted from the tube print log management apparatus 104 in step S811 or step S1313.

  The administrator terminal 105 transmits a browsing instruction for the print log image data described in the warning mail to the print log management apparatus 104 (step S1402). The warning mail describes an identification number that can uniquely identify the print log (job), and the manager terminal 105 transmits a browsing instruction based on the identification number. Further, a uniquely determined URL or the like is described in the mail instead of the identification number, and a browsing instruction may be transmitted when this URL is specified.

  The print log management apparatus 104 receives the browsing instruction transmitted in step S1402 (step S1403). The print log management apparatus 104 determines whether print log image data corresponding to the browsing instruction received in step S1403 is in the print log database 110 (step S1404).

  As a result of the determination in step S1404, if the image data of the print log is in the print log database 210, the image data is transmitted to the manager terminal 105 that transmitted the browsing instruction in step S1402 (step S1410), which will be described later. The process proceeds to step S1411.

  As a result of the determination in step S1404, if the print log image data is not in the print log database 210, the print log management apparatus 104 sends the print log image data corresponding to the browsing instruction received in step S1403 to the print log management apparatus 104. An image transmission instruction is sent to the print log collection device 103 so as to transmit (step S1405). It should be noted that the print log management apparatus 104 uses the distribution source of each print log to specify which of the plurality of print log collection apparatuses 103 has the print log image data corresponding to the browsing instruction received in step S1403. Information for specifying a certain print log collection device 103 is stored in the print log database 110.

  The print log collection device 103 receives the image transmission instruction sent from the print log management device 104 in step S1405 (step S1406), and temporarily stops sending the print log currently sent to the print log management device 104 (step S1406). Step S1407).

  The print log collection device 103 searches the print log temporary storage unit 112 for image data of the print log corresponding to the image transmission instruction received in step S1406, and transmits the searched image data to the print log management device 104. (Step S1408). After this transmission, the transmission of the print log suspended in step S1407 is resumed.

  Here, the current log transmission is temporarily stopped and the image data is transmitted (interrupt transmission). However, immediately after the transmission of the currently transmitted print log is completed, the processing in step S1408 may be executed. Good.

  The print log management apparatus 104 receives the image data transmitted from the print log collection apparatus 103 in step S1408 (step S1409), and transmits the image data to the manager terminal 105 that has transmitted the browsing instruction in step S1402 ( Step S1410).

  The administrator terminal 105 receives the image data transmitted from the print log management apparatus 104 in step S1410 (step S1411), displays the received image data on a liquid crystal monitor or the like (step S1412), and performs this processing. Exit.

  As described above in detail, according to the present embodiment, the print log management apparatus 104 receives an instruction to browse image data of the print log from the administrator terminal 105 (step S1403), and the image data is the print log. If it is not registered in the database 110 (NO in step S1404), the print log management apparatus 104 instructs the print log collection apparatus 103 to transmit the image data of the print log received the browsing instruction (step S1405). The print log collection apparatus 103 temporarily stops transmission of the print log currently being executed to the print log management apparatus 104 (step S1407), and preferentially receives image data corresponding to the instruction from the print log management apparatus 104. Transmit (step S1408). Thereby, the administrator can take a quick response to information leakage.

  In the third embodiment, the print log management apparatus 104 receives a browsing instruction from the manager terminal 105 (step S1402), and transmits image data corresponding to the browsing instruction to the manager terminal 105 (step S1402). In step S1411), the image data is displayed on the administrator terminal 105 (step S1412). However, the administrator inputs a browsing instruction on the print log management apparatus 104, and the image data corresponding to the browsing instruction is displayed on the print log collection apparatus 103. The print log management apparatus 104 may display the image data. In this case, the print log management apparatus 104 includes an input unit (for example, a mouse or a keyboard) for inputting a browsing instruction and a display unit (for example, a liquid crystal monitor).

  In the first to third embodiments, the print log management system is premised on the print log in the user terminal 101, the print device 102, the print log collection device 103, the print log management device 104, and the administrator terminal 105. Although the processing operation has been described, the present invention is not particularly limited to the print log as long as it is log data, and can also be applied to log data such as facsimile data or e-mail data. In this case, the printing apparatus 102 may be an apparatus (for example, a PC, a mobile phone, a facsimile apparatus, or a multi-function machine) having a communication function for facsimile data or e-mail data. The device 104 and the administrator terminal 105 may be any device (for example, a PC, a portable terminal, a multifunction device, or the like) capable of communicating log data such as facsimile data or e-mail data.

  Another object of the present invention is to supply a storage medium storing software program codes for realizing the functions of the above-described embodiments to a system or apparatus, and the computer of the system or apparatus (or CPU, MPU, or the like). Is also achieved by reading and executing the program code stored in the storage medium.

  In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the program code and the storage medium storing the program code constitute the present invention. .

  Examples of the storage medium for supplying the program code include a floppy (registered trademark) disk, a hard disk, a magneto-optical disk, a CD-ROM, a CD-R, a CD-RW, a DVD-ROM, a DVD-RAM, and a DVD. An optical disc such as RW or DVD + RW, a magnetic tape, a nonvolatile memory card, a ROM, or the like can be used. Alternatively, the program code may be downloaded via a network.

  Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (Operating System) running on the computer based on the instruction of the program code Includes a case where the functions of the above-described embodiments are realized by performing part or all of the actual processing.

  Furthermore, after the program code read from the storage medium is written to a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, the expanded function is based on the instruction of the program code. This includes a case where a CPU or the like provided on the expansion board or the expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

It is a system configuration figure of a log data management system concerning a 1st embodiment of the present invention. FIG. 2 is a configuration diagram of a print log collection apparatus 103 in FIG. 1. FIG. 2 is a configuration diagram of a print log management apparatus 104 in FIG. 1. 10 is a flowchart showing processing of a setting maintenance program 115 executed by a CPU 303 of the print log management apparatus 104. 6 is a diagram illustrating data processing of a printing apparatus control program 107 on a user terminal 101. FIG. 7 is a flowchart showing processing at the time of print log reception executed by a CPU 203 in accordance with a print log collection program 108 of the print log collection device 103. 10 is a flowchart showing processing at the time of print log transmission executed by a CPU 203 in accordance with a print log collection program 108 of the print log collection device 103. 10 is a flowchart illustrating processing executed by a CPU 303 in accordance with a print log management program 109 of the print log management apparatus 104. 10 is a flowchart showing processing executed by a CPU 303 in accordance with a log transmission interval calculation program 117 of the print log management apparatus 104. 10 is a flowchart showing processing executed by a CPU 203 in accordance with a print log collection program 108 of the print log collection device 103. 10 is a flowchart illustrating processing at the time of receiving a print log executed by a CPU 203 in accordance with the print log collection program 108 of the print log collection device 103 in the second embodiment. 10 is a flowchart showing processing at the time of print log transmission executed by a CPU 203 in accordance with a print log collection program 108 of the print log collection device 103. 10 is a flowchart illustrating processing executed by a CPU 303 in accordance with a print log management program 109 of the print log management apparatus 104. It is a flowchart which shows the processing content in the print log management system concerning 3rd Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 User terminal 102 Printing apparatus 103 Print log collection apparatus 104 Print log management apparatus 105 Administrator terminal 106 Document printing program 107 Printing apparatus control program 108 Print log collection program 109 Print log management program 110 Print log database (print log DB)
111 Print Log Search Program 112 Print Log Temporary Storage Unit 113 Mail Transmission / Reception Unit 114 Mail Display Unit 115 Setting Maintenance Program 116 Mail Server 117 Log Transmission Interval Calculation Program

Claims (19)

A plurality of log data collection devices each receiving log data from at least one information processing device; log data transmitted from the plurality of log data collection devices connected to the plurality of log data collection devices via a network; A log data management system comprising a log data management device for management,
The plurality of log data collection devices include:
Log data transmission means for transmitting the log data to the log data management device;
Residence information transmission means for transmitting residence information related to the log data to the log data management device;
Transmission interval changing means for changing the transmission interval of log data by the log data transmission means based on the transmission interval control information received from the log data management device,
The log data management device includes:
Stay information receiving means for receiving stay information transmitted from the stay information sending means;
A transmission interval determining means for determining a transmission interval of log data by the log data transmitting means based on the received staying information;
A log data management system comprising: control information transmission means for transmitting transmission interval control information corresponding to the determined transmission interval to the plurality of log data collection devices. The staying information is log size data indicating the size of staying log data,
The transmission interval determination means determines the transmission interval of the log data collection device based on the size of at least one staying log data including the maximum size among the log size data of the plurality of log data collection devices. The log data management system according to claim 1. The transmission interval determining means determines a log data transmission interval to be set in the log data collection device having the largest size of the staying log data,
Transmission interval calculating means for calculating a log data transmission interval for another log data collection device based on a log data transmission interval set in the log data collection device having the maximum size of the staying log data. The log data management system according to claim 2.   The log data management system according to any one of claims 1 to 3, wherein the log data includes at least text data and / or image data. A log data collection device connectable to at least one information processing device for transmitting log data and a log data management device for managing the log data,
Log data receiving means for receiving log data transmitted from the information processing apparatus;
Log data transmission means for transmitting the received log data to the log data management device;
Residence information transmission means for transmitting residence information related to the log data to the log data management device;
A transmission interval changing unit configured to change a transmission interval of log data by the log data transmission unit based on transmission interval control information determined by the log data management device according to the staying information. Data collection device.   The log data includes at least text data and image data, and the log data transmission unit transmits the text data included in the log data to the log data management device in preference to image data. 5. The log data collection device according to 5. The log data includes at least text data and image data,
Transmission instruction receiving means for receiving an instruction to transmit predetermined image data from the log data management apparatus, and the log data transmission means transmits image data corresponding to the transmission instruction to the log data management apparatus. The log data collection device according to claim 5 or 6. A log data management device connectable via a network to a plurality of log data collection devices that collect log data,
Log data receiving means for receiving log data transmitted from the plurality of log data collection devices;
Residence information receiving means for receiving residence information regarding log data of the plurality of log data collection devices;
A transmission interval determining means for determining a transmission interval of log data by the plurality of log data collection devices according to the staying information;
A log data management device comprising: control information transmission means for transmitting transmission interval control information corresponding to the determined transmission interval to the plurality of log data collection devices. The staying information is log size data indicating the size of staying log data,
The transmission interval determination means determines the transmission interval of the log data collection device based on the size of at least one staying log data including the maximum size among the log size data of the plurality of log data collection devices. The log data management device according to claim 8. A log reception error that sends a log reception error notification to the plurality of log data collection devices when the number of log data transmitted from the plurality of log data collection devices exceeds the number of receivable log data A notification means,
10. The log data management apparatus according to claim 9, wherein the log data receiving unit receives log data after transmission of a log reception error occurrence notification by the log reception error notification unit. Determining means for determining whether or not a predetermined monitoring keyword is included in the log data received from the plurality of log data collecting devices;
A transmission unit configured to transmit information regarding the received log data to the administrator terminal when it is determined that the predetermined monitoring keyword is included in the log data received by the determination unit. The log data management device according to claim 9 or 10, characterized in that   12. The log data includes at least text data and image data, and includes a storage unit that stores the text data and the image data in association with each other. Log data management device. The log data includes at least text data and image data,
Browsing instruction input means for inputting a browsing instruction for image data corresponding to the log data;
An instruction transmitting means for transmitting a transmission instruction for the image data to a log data collection device that is a transmission source of the log data corresponding to the browsing instruction;
Receiving means for receiving image data corresponding to the transmission instruction from the log data collection device of the transmission source in preference to text data;
13. The log data management apparatus according to claim 9, further comprising display means for displaying the received image data. A control method of a log data collection device connectable to at least one information processing device for transmitting log data and a log data management device for managing the log data,
A log data receiving step for receiving log data transmitted from the information processing apparatus;
A log data transmission step of transmitting the received log data to the log data management device;
Residence information transmission step of transmitting residence information regarding the log data to the log data management device;
And a transmission interval changing step of changing a transmission interval of log data in the log data transmission step based on transmission interval control information determined by the log data management device according to the staying information. Control method for data collection device. A method for controlling a log data management device connectable via a network with a plurality of log data collection devices that collect log data,
A log data receiving step of receiving log data transmitted from the plurality of log data collection devices;
A residence information receiving step for receiving residence information regarding log data of the plurality of log data collection devices;
A transmission interval determination step for determining a transmission interval of log data by the plurality of log data collection devices according to the staying information;
A control information transmission step of transmitting transmission interval control information corresponding to the determined transmission interval to the plurality of log data collection devices. A plurality of log data collection devices each receiving log data from at least one information processing device; log data transmitted from the plurality of log data collection devices connected to the plurality of log data collection devices via a network; A log data management system control method comprising a log data management device to manage,
The plurality of log data collection devices include:
A log data transmission step of transmitting the log data to the log data management device;
Residence information transmission step of transmitting residence information regarding the log data to the log data management device;
A transmission interval change step for changing the transmission interval of log data by the log data transmission step based on the transmission interval control information received from the log data management device,
The log data management device includes:
A stay information receiving step for receiving stay information transmitted from the stay information transmitting means;
Based on the received staying information, a transmission interval determination step for determining a transmission interval of log data by the log data transmission step;
And a control information transmission step of transmitting transmission interval control information corresponding to the determined transmission interval to the plurality of log data collection devices.   A control program for causing a computer to execute the control method according to claim 14.   A control program for causing a computer to execute the control method according to claim 15.   A control program for causing a computer to execute the control method according to claim 16.

Images