JP2007233918A - Log information collection system, information processor, log information collection method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a log information collection system wherein log information to be collected on a server terminal side is timely transmitted to the server terminal from a client terminal. <P>SOLUTION: This log information collection system has: the server terminal 15 transmitting pattern data that are a condition of the log information to be collected and a group identifier for specifying a group of the log information that is a collection target to the client terminal, and storing the log information received from the client terminal; and the client terminal 20 storing the log information together with the group identifier when generating the log information belonging to the group of the received group identifier after receiving the pattern data and the group identifier from the server terminal, specifying the group identifier of the log information when the pattern data are included in the stored log information, reading all pieces of the log information belonging to the group of the specified group identifier, and transmitting them to the server terminal. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a log information collection system, an information processing apparatus, a log information collection method, and a program for causing a computer to execute the method, which collect log information that is a record of apparatus usage status and data communication.

  A conventional method for collecting log information will be described (see Patent Document 1). When the operator sets ON / OFF of the communication log record flag and log output destination flag using the operation panel, the communication log information between the network board and the printer device is stored in the memory when the communication log record flag is ON. Is done. Then, the communication log information stored in accordance with the log output destination flag is printed using a printer engine, or transmitted through a serial line or a parallel line.

Another method is disclosed in Patent Document 2. The method will be described below. When receiving a log information transmission request from a management server connected to the network by a communication protocol SOAP (Simple Object Access Protocol), the multi-function peripheral records log information of an item instructed by the management server. When receiving a transmission request instruction from the management server, the recorded log information is transmitted to the management server.
JP-A-8-314660 JP 2004-215309 A

  In the conventional method, the following two problems can be considered.

  The first problem is that all recorded log information is transmitted when the recorded log information is transmitted to an external terminal. For this reason, unnecessary log information is also transmitted, and it takes time and effort to analyze excess log information even when the bandwidth of the transmission path is compressed and the log information is analyzed at the transmission destination of the log information. This is because the client terminal does not have information for identifying log information to be stored and transmitted.

  The second problem is that the client terminal does not know when to send the recorded log information to the external terminal. Therefore, the external terminal needs to transmit a transmission request to the client terminal. When the client terminal receives a transmission request, if the necessary log information is not recorded, nothing is transmitted to the external terminal, or unnecessary log information is transmitted to the external terminal, and the transmission request is wasted. May be. In addition, there is a delay between when log information desired to be acquired by the external terminal is recorded and when the log information is transmitted to the external terminal. The reason is that the client terminal does not have information regarding the transmission timing.

  The present invention has been made to solve the above-described problems of the prior art, and log information collection in which log information to be collected on the server terminal side is transmitted from the client terminal to the server terminal in a timely manner. It is an object to provide a system, an information processing apparatus, a log information collection method, and a program for causing a computer to execute the method.

In order to achieve the above object, the log information collection system of the present invention comprises:
A server storage unit for storing log information, a group identifier for specifying a group of log information to be collected, and pattern data which is a condition of log information to be collected are transmitted to the outside and become the collection target When receiving a log information set including log information from the outside, a server terminal including a server control unit that stores the log information in the server storage unit;
A client storage unit connected to the server terminal via a network and storing the log information to be collected, and receiving the group identifier and the pattern data from the server terminal, the pattern data is stored in the client storage When the log information belonging to the group of the received group identifier is generated, the log information is stored in the client storage unit together with the group identifier, and the pattern data is included in the stored log information. A client that identifies a group identifier of the log information, reads all log information belonging to the group of the group identifier from the client storage unit, generates the log information set including the read log information, and transmits the log information set to the server terminal A client terminal including a control unit;
It is the structure which has.

  In the present invention, the client terminal collects log information belonging to the group of the group identifier received from the server terminal, and when log information including pattern data is generated, all log information belonging to the log information group is Send to. Thereby, on the server terminal side, relevant log information is received at a timing when log information including pattern data is generated in the client terminal.

On the other hand, an information processing apparatus of the present invention for achieving the above object is an information processing apparatus connected to a server terminal that collects log information via a network,
A storage unit for storing log information to be collected;
When receiving from the server terminal pattern data which is a condition of log information to be collected and a group identifier for specifying a group of log information to be collected, the pattern data is stored in the storage unit, and the received group When log information belonging to a group of identifiers is generated, the log information is stored in the storage unit together with the group identifier, and when the pattern data is included in the stored log information, the group identifier of the log information is specified. A controller that reads all log information belonging to the group of the group identifier from the storage unit, and transmits a log information set including the read log information to the server terminal;
It is the structure which has.

Further, the log information collecting method of the present invention for achieving the above object is a log information collecting method of an information processing apparatus connected via a network to a server terminal collecting log information,
When receiving from the server terminal a pattern identifier that is a condition of log information to be collected and a group identifier for specifying a group of log information to be collected, the pattern data is stored in a storage unit,
When log information belonging to the group of the received group identifier is generated, the log information is stored in the storage unit together with the group identifier,
When the pattern data is included in the stored log information, a group identifier of the log information is specified,
Read all log information belonging to the group of the identified group identifier from the storage unit,
A log information set including the read log information is transmitted to the server terminal.

Furthermore, a program of the present invention for achieving the above object is a program for causing a computer connected via a network to a server terminal that collects log information,
When receiving from the server terminal a pattern identifier which is a condition of log information to be collected and a group identifier for identifying the group of log information to be collected, storing the pattern data in a storage unit;
Generating log information belonging to the group of the received group identifier, storing the log information in the storage unit together with the group identifier;
When the pattern data is included in the stored log information, a step of specifying a group identifier of the log information;
Reading all log information belonging to the group of the identified group identifier from the storage unit;
Transmitting a log information set including the read log information to the server terminal;
The computer is caused to execute a process having

  According to the present invention, it is possible to collect only log information related to conditions specified by the server terminal. For this reason, unnecessary log information is not transmitted from the client terminal, an extra network bandwidth is not used, and the time and effort at the time of analyzing the collected log information can be reduced.

  In addition, when log information including the specified condition is recorded, the log information related to the client terminal is transmitted to the server terminal, so that it is not necessary for the server terminal to transmit a transmission request to the client terminal. Therefore, it is not necessary for the server terminal to manage the collection time of the log information, and the log information to be collected can be acquired in a timely manner.

  The log information collection system of the present invention specifies a pattern of log information that the server terminal wants to collect to the client terminal. When the log information is included in the recorded log information, the client terminal sends the related log information to the server terminal. To send to.

(First embodiment)
The configuration of the log information collection system of this embodiment will be described. FIG. 1 is a block diagram illustrating a configuration example of a log information collection system according to the present embodiment.

  As shown in FIG. 1, the log information collection system includes a client terminal 20 that records the log information of its own device and a server terminal 15 that collects log information from the client terminal 20. Server terminal 15 and client terminal 20 are connected via network 30.

  The server terminal 15 includes a server communication unit 100, an input unit 110, a log information storage unit 120, and a log information reception unit 130. Moreover, it has the server terminal control part (not shown) which controls the server communication part 100 and the log information storage part 120. The server terminal control unit controls data transmission / reception between the input unit 110 and the server communication unit 100. The server terminal control unit is provided with a CPU (Central Processing Unit) that executes predetermined processing in accordance with a program and a memory for storing the program. Note that the log information receiving unit 130 is virtually configured in the server terminal by the CPU executing the program.

The client terminal 20 includes log information recording units 40 ₁ to 40 _n , a client communication unit 200, a setting change unit 210, a log information storage unit 220, a log information transmission unit 230, a log information group storage unit 240, The pattern data storage unit 250 is included. Further, a client terminal control unit (not shown) is provided, and the client terminal control unit includes a log information storage unit 220, a log information group storage unit 240, a storage unit including a pattern data storage unit 250, and a client communication unit 200. Control. The client terminal control unit is provided with a CPU that executes predetermined processing according to a program and a memory for storing the program. Note that the log information recording units 40 ₁ to 40 _n , the setting change unit 210, and the log information transmission unit 230 are virtually configured in the client terminal when the CPU executes a program.

  Log information that the client terminal 20 records in its own device is grouped in advance according to its type. In this embodiment, these groups are referred to as log information groups, and group names are used as identifiers for distinguishing the groups.

  Next, each component in the server terminal 15 will be described in detail.

When the operator of the server terminal 15 operates the input unit 110 and inputs a log information group name indicating a group of log information to be collected and pattern data which is a condition for specifying log information, the input unit 110 Passes the log information group name and pattern data to the client communication unit 200. There may be a plurality of log information group names and pattern data input to the input unit 110. In this embodiment, it is assumed that there are a plurality of log information group names and pattern data. When the input unit 110 receives input of log information group names 60 _{1 to} 60 _k and pattern data 70 ₁ to 70 _h (not shown), the input log information group 60 _i (1 <= i <= k). ) And pattern data 70 ₁ to 70 _h are passed to the server communication unit 100.

  The pattern data is a search condition for finding desired log information from a lot of log information. A specific example of pattern data will be described. In general, the log information includes a message related to the recording of the usage status of the client terminal 20 and data communication. If a predetermined character string is used as pattern data, it is possible to specify log information of a message including the character string.

  The server communication unit 100 is connected to the network 30 and processes communication with the client communication unit 200. The log information group name and pattern data received from the input unit 110 are transmitted to the client terminal 20 via the network 30. When a log information set in which log information to be collected is collected is received from the client terminal 20 via the network 30, the log information set is transferred to the log information receiving unit 130.

  When receiving the log information set from the server communication unit 100, the log information receiving unit 130 stores the log information included in the log information set in the log information storage unit 120. The log information storage unit 120 holds log information received from the log information reception unit 130.

  Next, each component in the client terminal 20 will be described in detail.

The log information recording units 40 ₁ to 40 _n record the log information in the log information storage unit 220 corresponding to the group to which the log information belongs. Each log information recording unit is preset with a corresponding group of log information. Each of the log information recording units 40 ₁ to 40 _n starts recording the log information of the corresponding group when it is turned on by the setting changing unit 210, and records the log information when it is set to off. Stop. When the control unit (not shown) of the client terminal 20 generates log information according to the usage status after being set to ON, the log information recording unit corresponding to the generated log information group displays the log information group. Log information is recorded in the log information storage unit 220 together with the name.

The log information storage unit 220 holds log information together with the group name. The pattern data storage unit 250 holds the pattern data 70 ₁ to 70 _h .

  The log information group storage unit 240 stores in advance a table in which the identifier of the log information recording unit is described corresponding to the log information group name. In the table shown in FIG. 1, the log information group name is described in the left column, and the identifier of the log information recording unit is described in the right column. By referring to this table, it is understood which log information recording unit should be turned on corresponding to the group of log information to be collected. By describing in advance in this table, it is possible to set so that one log information recording unit records log information of a plurality of log information groups. It is also possible to classify a plurality of log information belonging to the same group and set so that a plurality of log information recording units record. In the present embodiment, as shown in FIG. 1, identifiers of a plurality of log information recording units are described in one log information group name, and a plurality of log information recording units are associated with one log information group. ing.

  The client communication unit 200 is connected to the network 30 and processes communication with the server communication unit 100. When the log information group name and pattern data are received from the server terminal 15 via the network 30, these pieces of information are passed to the setting change unit 210. Further, the log information set received from the log information transmission unit 230 is transmitted to the server terminal 15 via the network 30.

When the setting change unit 210 receives the log information group name 60 _i and the pattern data 70 ₁ to 70 _h from the client communication unit 200, the setting change unit 210 stores the pattern data 70 ₁ to 70 _h in the pattern data storage unit 250. Further, the table stored in the log information group storage unit 240 is referred to, and the log information group name identifier 60α _{i1 to} 50α _imi (1 <= m _i ≦ n, 1 <=) with the log information group name 60 _i as a key. 50α _ix <= n, 1 <= x <= m _i ). Subsequently, the log information recording unit 40 ₅₀ α _ix corresponding to the acquired identifier is set to ON.

The log information transmission unit 230 reads the pattern data 70 ₁ to 70 _h from the pattern data storage unit 250 and monitors whether the log information stored in the log information storage unit 220 includes the pattern data 70 ₁ to 70 _h. . When log information including any one of the pattern data 70 ₁ to 70 _h is recorded, the group name of the log information is read. Subsequently, a log information set including all the log information belonging to the read log information group is generated and passed to the client communication unit 200. Thereafter, the transmitted log information set is deleted from the log information storage unit 220. By deleting the transmitted data from the log information storage unit 220, it is possible to prevent the same data from being transmitted many times. In the present embodiment, as a log information search method, log information including any pattern data (OR condition) among the pattern data 70 ₁ to 70 _h is searched. The search method is not limited to this case, and may be to search log information including all the pattern data 70 ₁ to 70 _h (AND condition).

  Next, the operation of the log information collection system of this embodiment will be described.

Here, it is assumed that the client terminal 20 includes n log information recording units 40 (40 ₁ to 40 _n ), and k types of log information groups 60 _{1 to} 60 _k are defined in advance. The log information group storage unit 240 includes a log information group name 60 _i (1 <= i <= k) and log information recording unit identifiers 50α _{i1 to} 50α _imi (1 <= m _i ≦ n, 1 <= 50α). A table in which _ix <= n and 1 <= x <= m _i ) are described in advance is stored. Each log information recording unit recognizes one or more corresponding log information groups in advance. It is assumed that the server terminal 15 side wants to collect a group of log information including at least _one of the pattern data 70 ₁ to 70 _h .

FIG. 2 is a flowchart showing the operation procedure of the server terminal. The input unit 110 stands by until there is an input (step 1101). When the log information group name 60 _i and the pattern data 70 ₁ to 70 _h are input, they are passed to the server communication unit 100 (steps 1101 and 1102). The server communication unit 100 transmits the received log information group name 60 _i and pattern data 70 ₁ to 70 _h to the client communication unit 200 via the network 30 (step 1103).

FIG. 3 is a flowchart showing an operation procedure of the client communication unit. The client communication unit 200 waits until it receives the log information group name and pattern data via the network 30 (step 1111). When the log information group 60 _i and the pattern data 70 ₁ to 70 _h are received, they are transferred to the setting changing unit 210 (steps 1111 and 1112). The operation of transmitting the log information set to the server terminal 20 will be described later.

FIG. 4 is a flowchart showing an operation procedure of the setting changing unit. When the setting change unit 210 receives the log information group name 60 _i and the pattern data 70 ₁ to 70 _h , the setting change unit 210 stores the pattern data 70 ₁ to 70 _h in the pattern data storage unit 250, and stores the log information recording units 40 ₁ to 40 _n . It is set to off (steps 1121 and 1122). Subsequently, information of the identifiers 50α _{i1 to} 50α _imi of the log information recording unit is acquired from the table stored in the log information group storage unit 240 using the log information group name 60 _i as a key (step 1123). The log information recording unit 40 ₅₀ α _ix corresponding to the acquired identifier 50α _ix is set to ON (step 1124).

FIG. 5 is a flowchart showing an operation procedure of the log information recording unit. The log information recording units 40 ₁ to 40 _n do nothing when set to OFF (step 1131). If the log information of the corresponding log information group is generated when it is set to ON, the log information and the group name are recorded together in the log information storage unit 220 (step 1132).

FIG. 6 is a flowchart showing an operation procedure of the log information transmitting unit. The log information transmission unit 230 acquires the pattern data 70 ₁ to 70 _h from the pattern data storage unit 250 (step 1141). Subsequently, it is checked whether any of the pattern data 70 ₁ to 70 _h is included in the log information stored in the log information storage unit 220 (step 1142). When the monitoring is continued and the log information A including any of the pattern data 70 ₁ to 70 _h is stored in the log information storage unit 220, the log information group which is the group name of the log information A stored together with the log information A The name B is read from the log information storage unit 220 (steps 1143 and 1144). Then, a log information set C including all log information belonging to the group of the log information group name B is acquired from the log information storage unit 220 (step 1145). Then, the log information included in the log information set C is deleted from the log information storage unit 220 (step 1146). Finally, the log information set C is passed to the client communication unit 200 (step 1147).

  Subsequently, as illustrated in FIG. 3, when the client communication unit 200 receives the log information set C from the log information transmission unit 230, the client communication unit 200 transmits the log information set C to the server communication unit 100 via the network 30 (step 1113). 1114).

  FIG. 7 is a flowchart showing an operation procedure of the server terminal. The server communication unit 100 waits until the log information set C is received from the client terminal 10 via the network 30 (step 1151). When the log information set C is received, it is passed to the log information receiving unit 130 (steps 1151 and 1152). The log information receiving unit 130 stores the log information included in the log information set C in the log information storage unit 120 (step 1153).

  In this embodiment, it is possible to collect only log information related to conditions specified by the server terminal. For this reason, unnecessary log information is not transmitted from the client terminal, an extra network bandwidth is not used, and the time and effort at the time of analyzing the collected log information can be reduced.

  In addition, when log information including the specified condition is recorded, the log information related to the client terminal is transmitted to the server terminal, so that it is not necessary for the server terminal to transmit a transmission request to the client terminal. Therefore, it is not necessary for the server terminal to manage the collection time of the log information, and the log information to be collected can be acquired in a timely manner.

  In the present embodiment, the case of one client terminal has been described, but the number of client terminals is not limited. Moreover, although this embodiment demonstrated the case where the log information group input into a server terminal was one, you may input a some log information group.

  The configuration of the log information collection system of the example according to the present embodiment will be described in comparison with the configuration shown in FIG. FIG. 8 is a block diagram showing an example of the configuration of the log information collection system of this embodiment.

  As shown in FIG. 8, the log information collection system includes a log collection server 16 serving as the server terminal 15 and a mobile phone 24 serving as the client terminal 20. The network 30 is a W-CDMA network 32.

  The log collection server 16 includes the server communication module 102 as the server communication unit 100, the keyboard 112 as the input unit 110 for inputting the group name and pattern data of the log information, and the log information reception module as the log information reception unit 132 132 and an HDD (Hard Disk Drive) 122 as the log information storage unit 120.

The cellular phone 24 includes a W-CDMA (Wideband-Code Division Multiple Access) communication module 202 as the client communication unit 200, a setting change module 212 as the setting change unit 210, and records as log information recording units 40 ₁ to 40 _n. Modules 1 to 10 are provided, and a log information transmission module 232 is provided as the log information transmission unit 230. The log information storage unit 220 includes a flash memory 222, the log information group storage unit 240 includes a log information group database 242, and the pattern data storage unit 250 includes a pattern data database 252. The codes of the recording modules 1 to 10 are assigned as identifiers.

  A table stored in the log information group database 242 will be described. In the table shown in FIG. 8, the identifier of the corresponding recording module is described for each of the log information group names α, β, and γ. According to this table, the recording module 1, 5 corresponds to the group of the group name α, the recording modules 2, 3, 4 correspond to the group of the group name β, and the recording modules 1 to 10 correspond to the group of the group name γ. It can be seen that corresponds.

  Since the operation of each component is the same as that described with reference to FIG. 1, detailed description thereof is omitted here.

  Next, the operation of the log information collection system of this embodiment will be described. Since processing is performed in the same manner as the flowcharts shown in FIGS. 2 to 7, the flowcharts are omitted here.

  The operator of the log collection server 16 operates the keyboard 112, the log information group name α as the log information group name, the pattern data 1 (character string “illegal memory access: addr = 0xA0007000”) and the pattern data as the pattern data 2 (character string “fatal error”) is input to the log collection server 16. The keyboard 112 passes the input log information group name α, pattern data 1 and pattern data 2 to the server communication module 102. The server communication module 102 transmits the log information group name α, the pattern data 1 and the pattern data 2 to the W-CDMA communication module 202 of the mobile phone 24 via the W-CDMA network 32.

  When the W-CDMA communication module 202 of the mobile phone 24 receives the log information group name α, the pattern data 1 and the pattern data 2, it passes the log information group α, the pattern data 1 and the pattern data 2 to the setting change module 212. The setting change module 212 records the pattern data 1 and the pattern data 2 in the pattern data database 252 and then turns off the recording modules 1 to 10. Subsequently, 1 and 5 are read as identifiers of recording modules from the table of the log information group database 242 with the log information group name α as a key. Then, the recording modules 1 and 5 corresponding to the identifiers 1 and 5 of the recording modules are set to ON.

  Each time the corresponding log information is generated, the recording module 1 and the recording module 5 write a set of the log information group α and the log information in the flash memory 222. As shown in FIG. 8, since the recording module 1 and the recording module 5 also correspond to the group of the log information group name γ, when log information of the log information group name γ is generated, the group name The log information is written into the flash memory 222 together with.

  Here, it is assumed that the recording module 1 records the data of the combination of the log information group name and the log information shown in FIG. Further, it is assumed that the recording module 5 records the data of the combination of the log information group name and the log information shown in FIG.

  The log information transmission module 232 reads pattern data 1 and pattern data 2 from the pattern data database 252. Subsequently, it is checked whether the log information stored in the flash memory 222 includes pattern data 1 or pattern data 2. As shown in FIG. 10, since the pattern data 2 (character string “fatal error”) is included in the log information, the group name of the log information is read out. Then, all the log information stored in pairs with the log information group name α is collected and acquired from the flash memory 222 as a log information set. Here, the log information set includes a total of six sets of data shown in FIGS. 9 and 10.

  Subsequently, the log information transmission module 232 deletes the log information of the log information set remaining in the flash memory 222 and passes the acquired log information set to the W-CDMA communication module 202. The W-CDMA communication module 202 transmits the log information set received from the log information transmission module 232 to the server communication module 102 via the W-CDMA network 32.

  When receiving the log information set, the server communication module 102 passes the log information set to the log information receiving module 132. When receiving the log information set, the log information receiving module 132 stores all the log information included in the log information set in the HDD 122.

(Second Embodiment)
Next, the log information collection system of this embodiment will be described in detail with reference to the drawings. FIG. 11 is a block diagram illustrating a configuration example of the log information system according to the present embodiment. In addition, about the structure similar to 1st Embodiment, the same code | symbol is attached | subjected and the detailed description is abbreviate | omitted.

In the log information collection system shown in FIG. 11, the network 30 is replaced with g types of networks 30 ₁ to 30 _g as compared with the configuration of FIG. In the server terminal 17, the input unit 110 is replaced with the input unit 114, and the server communication unit 100 is replaced with the server communication unit 104. In the client terminal 22, the client communication unit 200 is replaced with _g client communication units 200 ₁ to 200 _g , the setting change unit 210 is replaced with a setting change unit 214, and the log information transmission unit 230 is replaced with the log information transmission unit 234. It is a replaced configuration. Although not shown in the figure, each of the server terminal 17 and the client terminal 22 includes a CPU that executes predetermined processing according to a program and a memory that stores the program, as in the first embodiment. It has. Hereinafter, a configuration different from that of the first embodiment will be described in detail.

  In the client terminal 22 of the present embodiment, a network selection unit 260 is provided. The network selection unit 260 is virtually configured in the client terminal by the CPU executing the program. The point from which the client terminal 22 has the network selection part 260 differs from 1st Embodiment.

In this embodiment, a network priority list 80 (not shown) in which the network usage priority order used for communication from the client terminal 22 to the server terminal 17 is described is prepared in advance. The network priority list 80 includes network identifiers 90β _{1 to} 90β _p that serve as identifiers corresponding to a plurality of types of networks 30β _{1 to} 30β _p (1 <= βx <= g, 1 <= x <= p). Described in order of priority of use. Use priority, when x <y, If you are a network identifier 90β _x is higher than the network identifier 90β _y. The network priority list 80 is input via the input unit 114 of the server terminal 17, but may be stored in advance in the log information storage unit 120.

When the setting change unit 214 receives the network priority list 80 from any of the client communication units 200 ₁ to 200 _g in addition to the operation of the setting change unit 210 described in the first embodiment, the setting change unit 214 stores the network priority list 80 in the network. An operation of passing to the selection unit 260 is performed. Of the operations of the log information transmission unit 230 described in the first embodiment, the log information transmission unit 234 sets the destination of the log information collection to the network selection unit 260 instead of the client communication unit 200.

When the network selection unit 260 receives the log information set from the log information transmission unit 234, the network selection unit 260 refers to the network priority list 80 received from the setting change unit 214 and determines whether or not the network can be used according to the specified usage priority. Are sequentially checked from the side with the highest use priority, and a network that can be used and has the highest use priority is selected from the networks 30 ₁ to 30 _g . In this way, the network selection unit 260 selects from among a plurality of networks for sending log information received from the log information transmission unit 234 to the server terminal 17. Then, the log information set is transferred to the client communication unit 200 _j connected to the selected network 30 _j (1 <= j <= g).

The server communication unit 100 is connected to any _{one of the} networks 30 ₁ to 30 _g . The client communication unit 200 _{j is} connected to the selected network 30 _j (1 <= j <= g). The client communication unit 200 _j processes communication with the server communication unit 104 via the network 30 _j .

Next, the operation of the log information collection system of this embodiment will be described. Here, it is assumed that the information of the network identifier 90 _j is also input from the input unit 114 in order to specify the network 30 _j for sending data from the server terminal 17 to the client terminal 22.

FIG. 12 is a flowchart showing the operation procedure of the server terminal. An operator of the server terminal 17 operates the input unit 114 to log information group name α as a log information group name to be collected, pattern data 70 ₁ to 70 _h as log information search conditions, a network priority list 80, When the network identifier 90 _j is input, the input unit 114 passes these pieces of information to the server communication unit 104 (steps 1201 and 1202) from the standby state. The server communication unit 104 selects the client communication unit 200 _j connected to the network 30 _j specified by the network identifier 90 _j (Step 1203). Then, the log information group name 60 _i , the pattern data 70 ₁ to 70 _h and the network priority list 80 are transmitted to the client communication unit 200 _j (step 1204).

In the first embodiment, the input unit 110 passes the input log information group name 60 _i and the pattern data 70 ₁ to 70 _h to the server communication unit 100. The server communication unit 100 transmits the received log information group name 60 _i and pattern data 70 ₁ to 70 _h to the client communication unit 200 via the network 30.

FIG. 13 is a flowchart showing an operation procedure of the client communication unit. The client communication units 200 ₁ to 200 _g stand by until the log information group name 60 _i , the pattern data 70 ₁ to 70 _h, and the network priority list 80 are received from the connected networks 30 ₁ to 30 _g (step 1211). . When the log information group name 60 _i , the pattern data 70 ₁ to 70 _h and the network priority list 80 are received, these pieces of information are transferred to the setting change unit 214 (step 1212).

FIG. 14 is a flowchart showing an operation procedure of the setting changing unit. Upon receiving the log information group name 60 _i , the pattern data 70 ₁ to 70 _h and the network priority list 80, the setting change unit 214 stores the pattern data 70 ₁ to 70 _h in the pattern data storage unit 250 and the log information recording unit 40 ₁ to 40 _n are set to OFF, and the network priority list 80 is passed to the network selection unit 260 (steps 1221 to 1223). Subsequently, using the log information group name 60 _i as a key, information on the identifiers 50α _{i1 to} 50α _imi of the log information recording unit is acquired from the table stored in the log information group storage unit 240 (step 1224). The log information recording unit 40 ₅₀ α _ix corresponding to the acquired identifier 50α _ix is set to ON (step 1224). In the first embodiment, the setting change unit 210 is the same as the present embodiment except for step 1223 of the process of passing the network priority list 80 to the network selection unit 260.

FIG. 15 is a flowchart showing an operation procedure of the log information transmitting unit. When the log information transmission unit 234 reads the pattern data 70 ₁ to 70 _h from the pattern data storage unit 250, whether or not the log data stored in the log information storage unit 220 includes the pattern data 70 ₁ to 70 _h . (Steps 1231, 1232). When the log information A including any of the pattern data 70 ₁ to 70 _h is found, the log information group name B, which is the group name of the log information A, is read from the log information storage unit 220 (steps 1233 and 1234). Then, the log information set C including all the log information of the group of the log information group name B is acquired from the log information storage unit 220 (step 1235). The log information included in the log information set C is deleted from the log information storage unit 220 (step 1236). Finally, the log information set C is transferred to the network selection unit 260 (step 1237).

In the first embodiment, when the log information transmission unit 230 reads the pattern data 70 ₁ to 70 _h from the pattern data storage unit 250, the log information stored in the log information storage unit 220 is added to the pattern data 70 ₁ to 70 ₁ . Check whether 70 _h is included. When the log information A including any of the pattern data 70 ₁ to 70 _h is found, the log information group name B that is the group name of the log information A is read from the log information storage unit 220. Then, the log information set C including all log information of the group of the log information group name B is acquired from the log information storage unit 220. Log information included in the log information set C is deleted from the log information storage unit 220. Finally, the acquired log information set C is passed to the client communication unit 200.

FIG. 16 is a flowchart showing an operation procedure of the network selection unit. Upon receiving the log information set C from the log information transmission unit 234, the network selection unit 260 refers to the network priority list 80 received from the setting change unit 214. The network 30β _q (1 <= q) that is available and has the highest use priority from the networks 30β _{1 to} 30β _p corresponding to the network identifiers 90β _{1 to} 90β _p described in the network priority list 80. <= P) is selected (step 1241). Then, the log information set received from the log information transmission unit 234 is passed to the client communication unit 200β _q connected to the selected network 30β _q (step 1242).

Thereafter, as shown in FIG. 13, the client communication unit 200β _q transmits the received log information set C to the server communication unit 104 via the network 30β _q (steps 1213 and 1214). Subsequent operations of the server terminal 17 are the same as those in the first embodiment, and a description thereof will be omitted. In the first embodiment, the client communication unit 200 transmits the received log information set to the server communication unit 100 via the network 30.

  In this embodiment, the network load can be distributed by designating the network that the server terminal uses for collecting log information for each client. Even in a situation where a specific network cannot be used due to a network failure, the original purpose can be achieved by using another effective network, and fault tolerance can be improved.

  The configuration of the log information collection system of the example according to this embodiment will be described in comparison with the configuration shown in FIG. FIG. 17 is a block diagram showing a configuration example of the log information collection system of this embodiment. In addition, the same code | symbol is attached | subjected about the structure similar to the structure shown in FIG. 8, and the detailed description is abbreviate | omitted.

As illustrated in FIG. 17, the log information collection system includes a log collection server 18 serving as the server terminal 17 and a mobile phone 26 serving as the client terminal 22. As the networks 30 ₁ to 30 _g , a W-CDMA network 32 ₁ and a wireless LAN (Local Area Network) network 32 ₂ are provided. The identifier of the W-CDMA network is the network identifier 32 _1, and the identifier of the wireless LAN network is the network identifier 32 ₂ .

  The log collection server 18 includes a server communication module 106 as the server communication unit 104 and a log information group selection application 116 as the input unit 114.

Mobile phone 26 is provided with a W-CDMA communication module 202 ₁ and a wireless LAN communication module 202 ₂ as the client communication unit 200 ₁ to 200 DEG _g, comprising a setting change module 216 as log information setting changing unit 214, the log information transmitting unit 234 A log information transmission module 236 and a network selection module 262 as the network selection unit 260.

The W-CDMA communication module 202 ₁ is connected to the W-CDMA network 32 ₁ , and the wireless LAN communication module 202 ₂ is connected to the wireless LAN network 32 ₂ . The cellular phone 26 can use both the W-CDMA network 32 ₁ and the wireless LAN network 32 ₂ .

  The log information group selection application 116 is an application program that runs on the log collection server 18 and provides a GUI (Graphical User Interface) to the operator of the log collection server 18. The operator can input the log information group name, pattern data, network priority list, and network identifier collected through the GUI.

  Since the operation of each component is the same as that described with reference to FIG. 11, detailed description thereof is omitted here.

  Next, the operation of the log information collection system of this embodiment will be described. Since the processing is performed in the same manner as the flowcharts shown in FIGS. 12 to 16, the flowcharts are omitted here.

Through the GUI of the log information group selection application 116, the operator uses log information group name α and log information group name β as log information group names, pattern data 3 (character string “window id = 202”) as pattern data, and The pattern identifier 4 (character string “event id = 2000”), the network priority list, and the network identifier 32 ₁ are input as the identifier of the network used for data transmission to the mobile phone 26. By executing the log information group selection application 116, these pieces of information are sent to the server communication module 106. In the network priority list, it is assumed that the usage priority is described in the order of the network identifier 32 ₂ and the network identifier 32 ₁ .

The server communication module 106 transmits the log information group name α, the log information group β, the pattern data 3 and the pattern data 4, and the network priority list to the W-CDMA via the W-CDMA network 32 ₁ corresponding to the network identifier 32 _1. to the communication module 202 _1.

W-CDMA communication module 202 ₁ of the portable telephone 26 receives the log information group α and log information group β and the pattern data 3 and the pattern data 4 and the network priority list, and passes the information to the setting change module 216.

  The setting change module 216 stores the pattern data 3 and the pattern data 4 in the pattern data database 252, sets the recording modules 1 to 10 to OFF, and passes the network priority list to the network selection module 262. Subsequently, 1 and 5 are read as the identifiers of the recording modules from the table of the log information group database 242 using the log information group α as a key, and the recording modules 1 and 5 are set to ON. Also, 2, 3, and 4 are read as identifiers of recording modules from the table of the log information group database 242 using the log information group β as a key, and the recording modules 2, 3 and 3 are set to ON.

  Each time the log information of the log information group α is generated, the recording module 1 and the recording module 5 write data of a set of the log information and the group name in the flash memory 222. Each time the log information of the log information group β is generated, the recording module 2, the recording module 3, and the recording module 4 write a set of data of the log information and the group name in the flash memory 222.

  Here, it is assumed that the recording module 1 records log information belonging to the log information group name α in the flash memory 222. The log information set data is shown in FIG. Further, it is assumed that the recording module 5 records the log information set data shown in FIG. Furthermore, it is assumed that the recording module 2 records data of the log information set shown in FIG.

  The log information transmission module 236 acquires the pattern data 3 and the pattern data 4 from the pattern data database 252. Whether the log information stored in the flash memory 222 includes the pattern data 3 or the pattern data 4 is checked. When log information including pattern data 3 (character string “window id = 202”) is found, the log information group name α of the log information is read from the flash memory 222. Subsequently, a log information set including all log information belonging to the log information group name α is acquired from the flash memory 222 and transferred to the network selection module 262. Then, all log information included in the log information set is deleted from the flash memory 222. Here, the log information set includes all the log information described in FIGS. 18 and 19.

  Of the log information stored in the flash memory 222, the log information belonging to the log information group name β does not include either the pattern data 3 or the pattern data 4 as shown in FIG. Therefore, the log information of the log information group name β is held in the flash memory 222 without being sent to the network selection module 262 at this stage.

When the network selection module 262 receives the log information set from the log information transmission module 236, the wireless LAN network 32 ₂ , W-CDMA corresponding to each of the network identifier 32 ₂ and the network identifier 32 ₁ described in the network priority list. A wireless LAN network that can be used and has a high use priority is selected from the network 32 ₁ . Here, since the network identifier 32 ₂ has a higher utilization priority than network identifier 32 _1, the wireless LAN network 32 ₂ is available, the wireless LAN communication module 202 ₂ connected to the wireless LAN network 32 ₂ Pass log information set.

The wireless LAN communication module 202 ₂ transmits the log information set received from the network selection module 262 to the server communication module 106 via the wireless LAN network 32 ₂ .

  Upon receiving the log information set, the server communication module 106 passes the log information set to the log information receiving module 132. When receiving the log information set, the log information receiving module 132 stores the log information included in the log information set in the HDD 122.

  According to the present invention, the log information including a pattern designated by the server among the log information recorded in the plurality of client terminals is transmitted by the client terminal to the server when the log information is recorded. Applicable to.

  The log information collecting method of the present invention may be applied to a program for causing a computer to execute the method.

It is a block diagram which shows the example of 1 structure of the log information collection system of 1st Embodiment. It is a flowchart which shows operation | movement of an input part and a server communication part. It is a flowchart which shows operation | movement of a client communication part. It is a flowchart which shows operation | movement of a setting change part. It is a flowchart which shows operation | movement of a log information recording part. It is a flowchart which shows operation | movement of a log information transmission part. It is a flowchart which shows operation | movement of a server communication part and a log information receiving part. It is a block diagram which shows the example of 1 structure of the log information collection system of the Example in 1st Embodiment. It is a figure which shows the example of data of the group of the log information group name and log information which the recording module 1 recorded. It is a figure which shows the example of data of the group of the log information group name and log information which the recording module 5 recorded. It is a block diagram which shows the example of 1 structure of the log information collection system of 2nd Embodiment. It is a flowchart which shows operation | movement of an input part and a server communication part. It is a flowchart which shows operation | movement of a client communication part. It is a flowchart which shows operation | movement of a setting change part. It is a flowchart which shows operation | movement of a log information transmission part. It is a flowchart which shows operation | movement of a network selection part. It is a block diagram which shows the example of 1 structure of the log information collection system of the Example in 2nd Embodiment. It is a figure which shows the example of data of the group of the log information group name and log information which the recording module 1 recorded. It is a figure which shows the example of data of the group of the log information group name and log information which the recording module 5 recorded. It is a figure which shows the example of data of the group of the log information group name and log information which the recording module 2 recorded.

Explanation of symbols

15, 17 Server terminal 20, 22 Client terminal

Claims (10)

A server storage unit for storing log information, a group identifier for specifying a group of log information to be collected, and pattern data which is a condition of log information to be collected are transmitted to the outside and become the collection target When receiving a log information set including log information from the outside, a server terminal including a server control unit that stores the log information in the server storage unit;
A client storage unit connected to the server terminal via a network and storing the log information to be collected, and receiving the group identifier and the pattern data from the server terminal, the pattern data is stored in the client storage When the log information belonging to the group of the received group identifier is generated, the log information is stored in the client storage unit together with the group identifier, and the pattern data is included in the stored log information. A client that identifies a group identifier of the log information, reads all log information belonging to the group of the group identifier from the client storage unit, generates the log information set including the read log information, and transmits the log information set to the server terminal A client terminal including a control unit;
Log information collection system. The client control unit is provided corresponding to the group of log information, and when set to ON, the log information for storing the log information of the group corresponding to the log information together with the group identifier of the log information in the client storage unit Having a recording section,
In the client storage unit, a table in which a different recording unit identifier for each log information recording unit is described corresponding to the group identifier is stored,
The client control unit
2. The log information collection according to claim 1, wherein when receiving the group identifier from the server terminal, the log information recording unit corresponding to the group identifier is identified by the recording unit identifier and turned on by referring to the table. system. The client control unit
When the log information is stored together with the group identifier of the log information in the client storage unit, the log information is searched for whether the pattern data is included, and if the pattern data is included, the log information about the log information is The log information collection system according to claim 1 or 2, wherein a log information set is generated, and the log information included in the log information set is deleted from the client storage unit. The server terminal and the client terminal are connected in parallel by a plurality of networks,
The server control unit transmits a list in which usage priorities for the plurality of networks are described together with the group identifier and the pattern data to the client terminal,
The client control unit stores the list received from the server terminal in the client storage unit, refers to the list when transmitting the log information set to the server terminal, is available, and The log information collection system according to any one of claims 1 to 3, wherein a network having a high usage priority is selected. An information processing apparatus connected via a network to a server terminal that collects log information,
A storage unit for storing log information to be collected;
When receiving from the server terminal pattern data which is a condition of log information to be collected and a group identifier for specifying a group of log information to be collected, the pattern data is stored in the storage unit, and the received group When log information belonging to a group of identifiers is generated, the log information is stored in the storage unit together with the group identifier, and when the pattern data is included in the stored log information, the group identifier of the log information is specified. A controller that reads all log information belonging to the group of the group identifier from the storage unit, and transmits a log information set including the read log information to the server terminal;
An information processing apparatus. The server terminal and a plurality of networks are connected in parallel,
The controller is
When receiving a list describing usage priority for the plurality of networks together with the group identifier and the pattern data, storing the list in the storage unit, and transmitting the log information set to the server terminal, The information processing apparatus according to claim 5, wherein a network that can be used and has a high use priority of the list is selected with reference to the list. A log information collection method for an information processing apparatus connected via a network to a server terminal that collects log information,
When receiving from the server terminal a pattern identifier that is a condition of log information to be collected and a group identifier for specifying a group of log information to be collected, the pattern data is stored in a storage unit,
When log information belonging to the group of the received group identifier is generated, the log information is stored in the storage unit together with the group identifier,
When the pattern data is included in the stored log information, a group identifier of the log information is specified,
Read all log information belonging to the group of the identified group identifier from the storage unit,
A log information collection method for transmitting a log information set including read log information to the server terminal. The information processing apparatus is connected in parallel with the server terminal through a plurality of networks,
When receiving a list describing usage priorities for the plurality of networks together with the group identifier and the pattern data, the list is stored in the storage unit,
The log information collection method according to claim 7, wherein when the log information set is transmitted to the server terminal, the list is referred to and a network that can be used and has a high use priority of the list is selected. A program for causing a computer connected via a network to a server terminal that collects log information,
When receiving from the server terminal a pattern identifier which is a condition of log information to be collected and a group identifier for identifying the group of log information to be collected, storing the pattern data in a storage unit;
Generating log information belonging to the group of the received group identifier, storing the log information in the storage unit together with the group identifier;
When the pattern data is included in the stored log information, a step of specifying a group identifier of the log information;
Reading all log information belonging to the group of the identified group identifier from the storage unit;
Transmitting a log information set including the read log information to the server terminal;
A program for causing the computer to execute a process including: The computer is connected in parallel with the server terminal via a plurality of networks;
Receiving a list in which usage priorities for the plurality of networks are described together with the group identifier and the pattern data, storing the list in the storage unit;
When transmitting the log information set to the server terminal, referring to the list, selecting a network that is available and has a high use priority of the list;
The program of Claim 9 for making the said computer perform the process which has these.

Images