JP2010087834A - Network monitoring system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system for continuously monitoring a network element being subjected to monitoring by a monitoring server, the system continuing monitor processing without interruption even if any one of monitoring servers is stopped. <P>SOLUTION: Each of a plurality of monitoring servers monitors a network element of a predetermined monitor target among a plurality of network elements constituting a communication network. Each of the plurality of monitoring servers receives allocation information for extracting a network element, that is its own monitor target, from among the plurality of network elements and monitors the network element of the monitor target corresponding to the allocation information. When a management server connected to the plurality of monitoring servers detects that any one of the plurality of monitoring servers continues monitor processing, the management server transmits to any other monitoring server than the monitoring server that continues monitor processing, allocation information for extracting network elements including the network element that is the monitor target for the monitoring server which continues monitor processing. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a network monitoring system that monitors the states of a plurality of network elements that constitute an IP network.

  Conventionally, it is configured to remotely communicate with network elements (hereinafter also referred to as NE) such as network devices such as switches, routers, and hosts constituting an IP (Internet Protocol) network, and computer devices (hereinafter also referred to as NE), and monitor the state of the NE. A network monitoring system is used.

  For example, FIG. 9 is a diagram illustrating an example of a network monitoring system in which the monitoring server 700 monitors the state of a plurality of NEs 600 (NE600-1, NE600-2, NE600-3,...) Configuring a network. . For example, the monitoring server 700 periodically transmits a request for information acquisition to each NE 600 based on ICMP (Internet Control Message Protocol) or SNMP (Simple Network Management Protocol) at a period of 5 minutes. If any abnormality has occurred in the NE 600 when such an information acquisition request is received, the NE 600 transmits error information indicating that the abnormality has occurred as a response. The monitoring server 700 stores and accumulates the received error information as an error list, and displays the accumulated error list on its own display. The network administrator can know the abnormality that has occurred in the NE 600 by looking at the error list displayed on the display of the monitoring server 700, and can take appropriate measures such as early detection and recovery of a failure.

  Here, since the performance of the line connecting the NE 600 and the monitoring server 700 and the hardware performance of the monitoring server 700 are limited, the number of NE 600 that can be monitored by one monitoring server 700 is limited. Therefore, when monitoring a large number of NEs 600 that cannot be monitored by one monitoring server 700, the NEs 600 are monitored using a plurality of monitoring servers 700. For example, FIG. 10 shows a large amount of NE600 (NE600-1 to NE600-9,...) And a plurality of monitoring servers 700 (monitoring server 700-1, monitoring server 700-2, monitoring server 700-3,. It is a figure which shows the example monitored by (*). In the example of FIG. 10, a plurality of monitoring servers 700 share and monitor a plurality of NEs 600 constituting a network. For example, the monitoring server 700-1 targets NE600-1, NE600-2, NE600-3,..., And the monitoring server 700-2 includes NE600-4, NE600-5, NE600-6,. .. Is a monitoring target, and the monitoring server 700-3 is monitoring targets NE600-7, NE600-8, NE600-9,. As described above, since a plurality of monitoring servers 700 share the monitoring of a large number of NEs 600, the number of NEs 600 that cannot be monitored by one monitoring server 700 can be monitored.

Patent Document 1 proposes a technique for continuing monitoring through another communication path when the monitoring path from the monitoring server to the network element is disconnected.
Patent Document 2 proposes a technique for performing non-dispersion by switching a router that operates according to the processing load of a router in a network system that performs communication based on VRRP (Virtual Router Redundancy Protocol).
JP 2000-13373 A JP 2003-46539 A

  However, when a plurality of monitoring servers 700 monitor different NEs 600, when the monitoring server 700 fails, the failure monitoring server 700 cannot monitor the status of the NE 600 to be monitored and detects that an abnormality has occurred in the NE 600. Can not. Therefore, as a measure for improving the availability of the network monitoring system by the monitoring server 700, it is conceivable to prepare a plurality of monitoring servers 700 for the same monitored NE 600 to form a dual system or a duplex system. However, the computer devices that constitute the monitoring server 700 are often expensive. In particular, preparing a plurality of computer devices for each of the plurality of monitoring servers 700 for monitoring a large number of NEs 600 is very difficult to introduce and operate. There is a problem that costs are high.

  The present invention has been made in view of such a situation. As a countermeasure when any of a plurality of monitoring servers that monitor a network fails, the monitoring target 700 can be monitored without adding the monitoring server 700 in advance. A network monitoring system that improves availability without interrupting monitoring of the NE 600 is provided.

  In order to solve the above-described problem, the present invention monitors a predetermined network element to be monitored among a plurality of network elements constituting a communication network, and receives error information transmitted from the network element. Monitoring server and a management server in which error information transmitted from each of the plurality of monitoring servers is stored, the monitoring server monitoring itself from a plurality of network elements from the management server A receiving unit that receives allocation information for extracting a target network element; and a network element monitoring unit that monitors a network element to be monitored according to the allocation information received by the receiving unit. One of the monitoring servers Stops the monitoring process on a monitoring server other than the monitoring server that stopped the monitoring process when the detection unit detects that the network element monitoring process has stopped and the detection unit detects that the network element monitoring process has stopped. And an allocation information transmitting unit that transmits allocation information for extracting the network element including the network element that has been the monitoring target.

  Further, according to the present invention, the allocation information transmitted by the allocation information transmission unit of the management server described above is a network element that is monitored by each of the monitoring servers other than the monitoring server from all of the plurality of network elements constituting the communication network. It is the allocation information which extracts.

  Further, according to the present invention, the allocation information transmitted by the allocation information transmission unit of the management server described above includes only network elements that are monitored by the monitoring server that has stopped monitoring processing, and monitoring servers other than the monitoring server add additional monitoring targets. It is the allocation information extracted as follows.

  Further, according to the present invention, the above-described monitoring server performs monitoring processing of a network element to be monitored at every predetermined monitoring cycle, and the management server stores monitoring server information indicating the processing capacity of the monitoring server. The processing load of the monitoring process of the monitoring server based on the server information storage unit, the network element allocated to the monitoring server by the allocation information transmitted by the allocation information transmitting unit, and the monitoring server information corresponding to the monitoring server is When a predetermined threshold value is exceeded, information indicating that the monitoring cycle is extended is transmitted to the monitoring server.

  According to the present invention, the monitoring server information stored in the monitoring server information storage unit of the management server includes information indicating the processing capacity of the monitoring server based on the CPU usage rate and the memory amount of the monitoring server. Features.

  According to the present invention, the monitoring server information stored in the monitoring server information storage unit of the management server includes information indicating the processing capability of the monitoring server according to the time required for the monitoring process of the network element by the monitoring server. It is characterized by.

  As described above, according to the present invention, among a plurality of network elements constituting a communication network, a plurality of monitoring servers that monitor a predetermined network element to be monitored are monitored by the plurality of network elements. The management server that receives the allocation information for extracting the target network element, monitors the network element to be monitored according to the allocation information, and stores the error information transmitted from each of the plurality of monitoring servers. When it is detected that one of the monitoring servers has stopped the monitoring process, the monitoring server other than the monitoring server that stopped the monitoring process includes the network element that was monitored by the monitoring server that stopped the monitoring process. Extract network elements for monitoring Since the allocation information to be transmitted is transmitted, even if one of the monitoring servers stops, other monitoring servers can monitor the network element that was monitored by the monitoring server that stopped the monitoring process. It is possible to continue monitoring the network element to be monitored without interruption.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a diagram showing a configuration of a network system 1 according to the present embodiment. The network system 1 according to this embodiment includes a plurality of NEs (network elements) 100 (NE100-1 to NE100-9,...) And a plurality of monitoring servers 200 (monitoring server 200-1, monitoring server 200-). 2, monitoring server 200-3,...), Management server 300, AP server 400, and a plurality of monitoring client terminals 500 (monitoring client terminal 500-1, monitoring client terminal 500-2, monitoring) Client terminal 500-3, ...). Here, the number of the NE 100, the monitoring server 200, the management server 300, the AP server 400, and the monitoring client terminal 500 depends on the scale of the IP network (a) configured by the NE 100, the performance of each device, and the like. It may be defined and configured.

  The plurality of NEs 100 are network devices such as switches, routers, and host servers constituting the IP network (a), computer devices, and the like, and are collectively referred to as network elements. The NE 100 receives and responds to an information acquisition request based on SNMP or ICMP transmitted from the monitoring server 200 that monitors itself. Here, if an error has occurred in the NE 100, the NE 100 transmits error information in response to the received information acquisition request. The error information includes information such as identification information of NE 100 itself and error contents.

  The plurality of monitoring servers 200 are provided with a CPU (Central Processing Unit), a memory, an HDD (Hard Disk), etc., and perform communication based on ICMP and SNMP with the NE 100 determined as their monitoring targets. This is a computer device that monitors the state of the target NE 100. In the initial state in the present embodiment, the monitoring target of the monitoring server 200-1 is an IP network (a−) composed of NE100-3, NE100-6, NE100-9,. 1). Similarly, the monitoring target of the monitoring server 200-2 is the IP network (a-2) configured by the NE 100-1, NE 100-4, NE 100-7,... Of the IP network (a). Similarly, the monitoring target of the monitoring server 200-3 is the IP network (a-3) configured by the NE 100-2, NE 100-5, NE 100-8,... Of the IP network (a).

  FIG. 2 is a diagram showing in detail the configuration of a plurality of monitoring servers 200 and management servers 300. The monitoring server 200-1 includes an NE information storage unit 210-1, a monitoring target NE extraction unit 220-1, a communication unit 230-1, an NE monitoring unit 240-1, and an OS (operating system) 250-1. It has. Since the plurality of monitoring servers 200 have the same configuration, here, the configuration of the monitoring server 200-1 will be described as a representative, and “−1” for identifying a specific monitoring server 200 among the plurality of monitoring servers 200. The notation such as is omitted for explanation.

  The NE information storage unit 210 stores NE information related to all NEs 100 included in the IP network (a) regardless of whether or not the own monitoring server 200 is a monitoring target. FIG. 3 is a diagram illustrating a data example of NE information stored in the NE information storage unit 210. The NE information is information in which NE identification information for identifying the NE 100 is associated with information such as an IP address corresponding to the NE identification information. In the present embodiment, when the NE identification information is “1”, the NE identification information is shown as NE 100-1 in FIG. 1, and when the NE identification information is “2”, the NE identification information is shown. The number (N) in FIG. 1 corresponds to the number (NE100-N) added after NE100 in FIG. The NE information storage unit 210 transmits and stores NE information from the management server 300 when the monitoring server 200 is activated.

  Returning to FIG. 2, the monitoring target NE extraction unit 220 includes itself among the NE information stored in the NE information storage unit 210 based on the allocation information transmitted from the management server 300 and the predetermined allocation condition. The identification information of the NE 100 to be monitored by the monitoring server 200 is extracted. For example, as the allocation information transmitted from the management server 300, the number of monitoring servers 200 in the activated state, the allocation number for each monitoring server 200, and NE information are received. The predetermined allocation condition includes NE identification information in which the value of the remainder (remainder) obtained by dividing the NE identification information included in the NE information by the number of monitoring servers 200 in the active state matches the own allocation number. You can apply the conditions that you want to monitor.

  For example, three servers, a monitoring server 200-1, a monitoring server 200-2, and a monitoring server 200-3 are in an activated state, and “0” is allocated as an allocation number to the monitoring server 200-1, and the monitoring server Allocation information that “1” is allocated as the allocation number 200-2, “2” is allocated as the allocation number to the monitoring server 200-3, and the NE identification information included in the NE information is 1 to 9. Will be sent. When the monitoring server 200 extracts the NE 100 to be monitored based on this allocation information and the above-described allocation conditions, the monitoring target of the monitoring server 200-1 activates the NE identification information “1-9” included in the NE information. NE100-3, NE100-6, and NE100-9 in which the remainder obtained by dividing the number of monitoring servers 200 in the state by “3” is “0”. Similarly, the monitoring targets of the monitoring server 200-2 are NE100-1, NE100-4, and NE100-7. Similarly, the monitoring targets of the monitoring server 200-3 are NE100-2, NE100-5, and NE100-8.

The communication unit 230 transmits / receives information to / from the management server 300 via the network.
The NE monitoring unit 240 communicates with the NE 100 corresponding to the NE identification information extracted as the monitoring target by the monitoring target NE extraction unit 220 based on ICMP or SNMP, and monitors the NE 100 to be monitored. The NE monitoring unit 240 polls the monitoring target NE 100 for an information acquisition request every predetermined period, and when receiving error information indicating that an error has occurred from the NE 100, the NE monitoring unit 240 notifies the management server 300 via the communication unit 230. Send. The error information transmitted from the monitoring server 200 to the management server 300 via the communication unit 230 includes, in addition to error information transmitted as a response to the information acquisition request from the monitoring server 200 to the NE 100, the information acquisition request. In contrast, there is error information when the NE 100 does not respond and the response times out, or error information called an SNMP trap that the NE 100 spontaneously transmits and notifies its own change when an abnormality occurs.

  The OS 250 is basic software that manages hardware resources such as a CPU, a memory, and an HDD provided in the monitoring server 200 and allocates hardware resources in response to requests from the functional units provided in the monitoring server 200. The OS 250 stores the performance, capacity, usage rate, free capacity, and the like of each hardware resource such as a CPU, memory, and HDD in real time. In addition, the OS 250 allocates hardware resources to each function unit such as the NE monitoring unit 240 included in the monitoring server 200, and whether the process of each function unit is in an activated state depending on whether the resource allocation is performed. It is possible to determine whether or not.

  Returning to FIG. 1, the management server 300 is a computer device connected to a plurality of monitoring servers 200, receives and stores error information transmitted from the monitoring server 200, and operates the plurality of monitoring servers 200. Manage. The detailed configuration of the management server 300 will be described with reference to FIG. The management server 300 includes an NE information storage unit 310, a communication unit 320, a monitoring server state acquisition unit 330, a monitoring server information storage unit 340, an allocation information transmission unit 350, an error information storage unit 360, and an OS 370. I have.

The NE information storage unit 310 stores NE information shown in FIG. The NE information is stored in response to operation information input from the administrator. The NE information stored in the NE information storage unit 310 is transmitted to the monitoring server 200 by the communication unit 320 when the monitoring server state acquisition unit 330 detects that the monitoring server 200 is activated.
The communication unit 320 transmits / receives information to / from each of the plurality of monitoring servers 200 via the network. For example, the communication unit 320 transmits NE information to the monitoring server 200 and receives error information received from the NE 100 by each monitoring server 200. Further, the communication unit 320 transmits the NE 100 error information stored in the error information storage unit 360 in response to the request from the AP server 400 illustrated in FIG.
The monitoring server state acquisition unit 330 communicates with the monitoring server 200 via the communication unit 320, acquires information indicating the state of the monitoring server 200, and stores the information in the monitoring server information storage unit 340. FIG. 4 is a diagram illustrating an example of monitoring server information data stored in the monitoring server information storage unit 340. The monitoring server information includes information such as a start flag, a polling required time, the number of CPUs, a CPU usage rate, a memory capacity, and an HDD capacity in association with the monitoring server identification information.

  The monitoring server identification information included in the monitoring server information is information for identifying each of the plurality of monitoring servers 200. The activation flag is information indicating whether the NE monitoring unit 240 of the monitoring server 200 indicated by the monitoring server identification information is in an activated state or a stopped state. For example, “1” is stored in the activation flag if the NE monitoring unit 240 of the monitoring server 200 is in the activated state, and “0” is stored in the suspended state. For example, the monitoring server state acquisition unit 330 makes a communication request to the process of the NE monitoring unit 240 via the OS 250 of the monitoring server 200. If there is a response, the NE monitoring unit 240 determines that the NE monitoring unit 240 is in an activated state and there is no response. For example, the NE monitoring unit 240 determines that it is in a stopped state.

  The polling required time included in the monitoring server information is an actual required time until the monitoring server 200 polls the NE 100 to be monitored and receives responses from all the NEs 100 to be monitored. The monitoring server state acquisition unit 330 acquires the required polling time from the NE monitoring unit 240 of the monitoring server 200 via the communication unit 320 and stores it in the monitoring server information storage unit 340.

  The CPU included in the monitoring server information is information indicating performance such as the number of CPUs and the number of clocks provided in the monitoring server 200. The CPU usage rate is a ratio of the time that the software executed on the monitoring server 200 occupies the CPU per unit time. For example, if it is around 0%, nothing is executed. If it is%, processing is continuously executed, and if the state near 100% continues, it indicates that a processing request exceeding the processing capacity of the CPU is being performed. The memory capacity is information indicating the capacity of the memory provided in the monitoring server 200. The HDD free capacity is information indicating the free capacity of the HDDs provided in the monitoring server 200. Here, machine performance information such as a start flag, CPU, CPU usage rate, memory capacity, HDD free capacity, and the like can be acquired by communicating with the OS 250 of the monitoring server 200.

When the monitoring server state acquisition unit 330 detects that the NE monitoring unit 240 of the monitoring server 200 is activated or stopped and the activation state has changed, the allocation information transmission unit 350 detects the NE information stored in the NE information storage unit 310 and The allocation information is generated based on the monitoring server information stored in the monitoring server information storage unit 340, and is transmitted to the monitoring server 200 in the activated state. For example, as described above, the allocation information includes the number of monitoring servers 200 in the activated state, NE information stored in the NE information storage unit 310, and an allocation number to the monitoring server 200. Here, the allocation number is a number that is greater than or equal to 0 and equal to or less than the number of monitoring servers 200 in the activated state, and is unique to each monitoring server 200.
The error information storage unit 360 stores NE100 error information transmitted from the monitoring server 200 and received by the communication unit 320.
The OS 370 is basic software that manages hardware resources such as a CPU, a memory, and an HDD included in the monitoring server 200 and allocates hardware resources according to requests from each functional unit included in the monitoring server 200.

  Returning to FIG. 1, the AP server 400 reads the NE 100 error information stored in the error information storage unit 360 of the management server 300 in response to a request from the monitoring client terminal 500 and transmits the NE 100 error information to the monitoring client terminal 500. In this embodiment, the AP server 400 includes a web service function unit, and transmits an abnormality notification read from the management server 300 to the monitoring client terminal 500 by communication such as HTTP (HyperText Transfer Protocol).

  The monitoring client terminal 500 is a computer terminal that outputs the states of a plurality of NEs 100 transmitted from the AP server 400. The monitoring client terminal 500 is used by an administrator of the IP network (a), receives error information of the NE 100 to be monitored from the AP server 400 and displays it in response to a request from the administrator. In this embodiment, the monitoring client terminal 500 includes a web browser function unit, communicates with the AP server 400, and outputs error information transmitted from the AP server 400 to a display included in the monitoring client terminal 500. Here, the monitoring client terminal 500 displays, for example, the date and time when the error occurred in the NE 100, the error message corresponding to the error information, the IP address of the NE 100 that transmitted the error information, and the like. The administrator of the IP network (a) can know the state of the NE 100 to be monitored and the abnormality that has occurred by the abnormality notification displayed on the monitoring client terminal 500, and can take appropriate measures such as early detection and recovery of the failure. It can be carried out.

Next, with reference to FIG. 5, an operation example in which reallocation of monitoring targets is performed when the NE monitoring unit 240-1 of the monitoring server 200-1 is stopped will be described.
In the initial state, all of the monitoring server 200-1, the monitoring server 200-2, and the monitoring server 200-3 are activated, and polling is performed by transmitting an information acquisition request to each of the monitoring target NEs 100 illustrated in FIG. Suppose that monitoring is performed. When an error occurs in the NE monitoring unit 240-1 of the monitoring server 200-1 and the operation stops (step S1), the monitoring server state acquisition unit 330 of the management server 300 causes the NE monitoring unit 240- of the monitoring server 200-1 to operate. 1 is detected (step S2).

  Based on the NE information read from the NE information storage unit 310, the allocation information transmission unit 350 of the management server 300 generates and transmits allocation information corresponding to the monitoring server 200-2 and the monitoring server 200-3 (step). S3). Here, the information indicating the number of activated monitoring servers 200 included in the allocation information is two, the NE identification information included in the NE information is 1 to 9, and the allocation number of the monitoring server 200-2 is 0. It is assumed that the allocation number of the monitoring server 200-3 is 1.

  When receiving the transmitted allocation information, the monitoring server 200-2 stores the NE information included in the allocation information in the NE information storage unit 210-2. The monitoring target NE extraction unit 220-1 of the monitoring server 200-2 is based on the allocation information received from the management server 300 and the allocation conditions stored in its own storage area in advance. 2 is extracted from the NE information stored in 2 (step S4). Here, the NE identification information of the monitoring target extracted by the monitoring target NE extraction unit 220-2 is the NE identification information “1 to 9” included in the NE information by the number “2” of the monitoring servers 200 in the activated state. These are NE100-2, NE100-4, NE100-6, NE100-8 in which the remainder is "0". The NE monitoring unit 240-2 monitors the monitoring target NE 100 corresponding to the NE identification information extracted by the monitoring target NE extraction unit 220-2 (step S5).

  Similarly, the monitoring target NE extraction unit 220-3 of the monitoring server 200-3 extracts NE identification information to be monitored (step S6). Here, the NE identification information of the monitoring target extracted by the monitoring target NE extraction unit 220-3 is the NE identification information “1 to 9” included in the NE information by the number “2” of the monitoring servers 200 in the activated state. The NE100-1, NE100-3, NE100-5, NE100-7, and NE100-9 are those whose remainder is "1". The NE monitoring unit 240-3 monitors the monitoring target NE 100 corresponding to the NE identification information extracted by the monitoring target NE extraction unit 220-3 (step S7). FIG. 6 is a diagram illustrating a monitoring state of the network system 1 after the reallocation of the monitoring target is performed as described above.

  As described above, in the network system 1 in which a large number of monitoring servers 200 share and monitor a large number of NEs 100, one of the monitoring servers 200 has stopped due to an error. In this case, if the monitoring of the NE 100 that is the monitoring target of the stopped monitoring server 200 is re-allocated to another monitoring server 200, even if the monitoring server 200 breaks down, all the NEs 100 that are the monitoring target are monitored. It is possible to increase the availability of monitoring of the NE 100 without interrupting monitoring and without adding the monitoring server 200 in advance. The allocation of the monitoring target performed by the monitoring server 200 may be performed by the management server 300. In this case, the allocation result information indicating the allocation of the monitoring target generated by the management server is transmitted to each monitoring server 200, and each monitoring server 200 determines the NE 100 to be monitored based on the allocation result information received from the management server 200. Monitor.

<Second Embodiment>
Next, a second embodiment of the present invention will be described. In the first embodiment, when any one of the plurality of monitoring servers 200 is stopped, the management server 300 transmits the allocation information to the active monitoring server 200, and the monitoring server 200 monitors the monitoring server 200. An example of performing reallocation of the target NE 100 has been described. Here, if a large number of monitoring servers 200 are stopped due to an error or construction, and the number of operating monitoring servers 200 is remarkably reduced, the monitoring servers 200 in operation exceed the processing capacity and are monitored. It is conceivable that the NE100 is allocated. Therefore, when it is estimated that the processing load of the monitoring server 200 exceeds a certain threshold value, the monitoring server 200 extends the monitoring cycle for monitoring the NE 100 and performs a degenerate operation so that the monitoring server 200 is not overloaded. You may do it.

In this case, for example, as illustrated in FIG. 7, the management server 300 includes a monitoring target NE extraction unit 380 and a monitoring cycle calculation unit 390.
The monitoring target NE extraction unit 380 performs the same processing as the monitoring target NE extraction unit 220 included in the monitoring server 200. That is, the monitoring target NE extraction unit 380 extracts the identification information of the NE 100 to be monitored by each of the monitoring servers 200 based on the allocation information generated by the allocation information transmission unit 350 and a predetermined allocation condition. To do.

  The monitoring cycle calculation unit 390 calculates a cycle in which the monitoring server 200 polls the NE 100 to be monitored. Here, the monitoring cycle calculation unit 390 allocates the number of monitoring target NEs 100 for each monitoring server 200 extracted by the monitoring target NE extraction unit 380 and the machine performance of the monitoring server 200 stored in the monitoring server information storage unit 340 ( The processing load of the monitoring server 200 is calculated based on the CPU usage rate, the memory capacity, and the like. When the calculated processing load of the monitoring server 200 exceeds a predetermined threshold, the monitoring cycle calculation unit 390 calculates the monitoring cycle of the monitoring server 200 where the processing load falls below the threshold. The monitoring period calculated by the monitoring period calculation unit 390 is transmitted to the monitoring server 200 via the communication unit 320. The NE monitoring unit 240 of the monitoring server 200 polls the NE 100 to be monitored at a cycle corresponding to the monitoring cycle transmitted from the management server 300.

<Third Embodiment>
Next, a third embodiment of the present invention will be described. In the second embodiment, when reallocation of a monitoring target is performed, if the processing load of the monitoring server 200 exceeds a predetermined threshold, the monitoring cycle of the NE 100 is extended according to the machine performance of the monitoring server 200. The example which performs degenerate operation was demonstrated. Here, the monitoring cycle in which the monitoring server 200 monitors the NE 100 may be calculated in consideration of the safety factor based on the polling required time included in the monitoring server information stored in the monitoring server information storage unit 340. . For example, the monitoring cycle calculation unit 390 estimates the polling required time according to the number of monitoring targets increased by the reallocation according to the ratio of the number of monitoring target NEs 100 of the specific monitoring server 200 and the required polling time. The time obtained by multiplying the estimated polling time by a safety factor (for example, 1.5 times) may be calculated as a monitoring cycle for monitoring the NE 100.

<Fourth Embodiment>
Next, a fourth embodiment of the present invention will be described. In the first embodiment, when any one of the plurality of monitoring servers 200 is stopped, the management server 300 transmits the allocation information to all of the active monitoring servers 200, and the monitoring server 200 An example of performing reallocation of the NE 100 to be monitored has been described. Here, the reallocation of the monitoring target NE100 may be performed by allocating only the NE100 that is the monitoring target of the stopped monitoring server 200 to the active monitoring server 200. For example, as shown in FIG. 8, the NE 100-3 that is the monitoring target of the monitoring server 200-1 in FIG. 1 is allocated as the monitoring target of the monitoring server 200-2, and the NE 100 that is the monitoring target of the monitoring server 200-1 is allocated. -6, NE100-9 is allocated to the monitoring target of the monitoring server 200-3. As a result, the number of NEs 100 that vary in the allocation of monitoring targets is reduced compared to performing the reallocation of monitoring targets of all the monitoring servers 200, and the monitoring targets can be efficiently reassigned.

  In the above-described embodiment, the monitoring target NE 100 is allocated according to the number of operating monitoring servers 200. However, the monitoring target NE 100 is allocated according to the machine performance of the operating monitoring server 200. Anyway. Here, as the machine performance, for example, a CPU usage rate or a memory capacity included in the monitoring server information stored in the monitoring server information storage unit 340 can be used. For example, if the amount of memory of the monitoring server 200-2 is twice the amount of memory of the monitoring server 200-2, it is possible to allocate twice as many NEs 100 as monitoring targets.

Further, the monitoring target NE 100 may be allocated according to the HDD free space of the monitoring server 200 stored in the monitoring server information storage unit 340. In particular, when error information transmitted from the NE 100 is temporarily stored in the monitoring server 200, a plurality of monitoring servers can be allocated by allocating more NEs 100 as monitoring targets to the monitoring server 200 with more HDD free space. 200 can be used effectively.
In addition, one or more standby monitoring servers 200 are connected to the network system 1 in a stopped state in advance, and monitoring of the NE 100 that is the monitoring target of the stopped monitoring server 200 is sent to the standby monitoring server 200. You may make it allocate.

  In the above-described embodiment, the monitoring server 200 performs the degenerate operation by extending the monitoring cycle for monitoring the NE 100 according to the machine performance of the monitoring server 200 or the required polling time. When the monitoring server 200 stops exceeding the limit, the monitoring server 200 in operation that allocates the NE 100 to be monitored degenerates by multiplying the monitoring cycle for monitoring the NE 100 by a predetermined fixed time (for example, 2 times). You may make it drive | work. Similarly, when the number of NEs 100 monitored by one monitoring server 200 exceeds a certain number, the monitoring period of the active monitoring server 200 that allocates the monitoring target NEs 100 is set to a predetermined constant. You may make it perform degenerate operation by making it double (for example, 2 times).

  The program for realizing the function of the processing unit in the present invention is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into the computer system and executed to monitor the network. You may go. The “computer system” here includes an OS and hardware such as peripheral devices. The “computer system” includes a WWW system having a homepage providing environment (or display environment). The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Further, the “computer-readable recording medium” refers to a volatile memory (RAM) in a computer system that becomes a server or a client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. In addition, those holding programs for a certain period of time are also included.

  The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

It is a figure which shows the structure of the network system by one Embodiment of this invention. It is a block diagram which shows the structure of the management server and monitoring server by one Embodiment of this invention. It is a figure which shows the example of data of NE information by one Embodiment of this invention. It is a figure which shows the example of data of the monitoring server status information by one Embodiment of this invention. It is a figure which shows the operation example of the network system by one Embodiment of this invention. It is a figure which shows the structure of the network system by which reallocation of the monitoring object was performed by one Embodiment of this invention. It is a block diagram which shows the structure of the management server and monitoring server by one Embodiment of this invention. It is a figure which shows the structure of the network system by which reallocation of the monitoring object was performed by one Embodiment of this invention. It is a figure which shows the structure of the network system by a prior art. It is a figure which shows the structure of the network system by a prior art.

Explanation of symbols

1 Network system 100 NE
200 Monitoring Server 210 NE Information Storage Unit 220 Monitoring Target NE Extraction Unit 230 Communication Unit 240 NE Monitoring Unit 250 OS
300 Management Server 310 NE Information Storage Unit 320 Communication Unit 330 Monitoring Server Status Acquisition Unit 340 Monitoring Server Information Storage Unit 350 Allocation Information Transmission Unit 360 Error Information Storage Unit 370 OS
380 Monitoring target NE extraction unit 390 Monitoring cycle calculation unit 400 AP server 500 Monitoring client terminal 600 NE
700 Monitoring server

Claims (6)

Among a plurality of network elements constituting a communication network, a plurality of monitoring servers that monitor a predetermined network element to be monitored and receive error information transmitted from the network element, and a plurality of monitoring servers A network monitoring system comprising: a management server for storing the error information transmitted from each;
The monitoring server is
A receiving unit that receives allocation information for extracting a network element to be monitored from the plurality of network elements from the management server;
A network element monitoring unit that monitors the network element to be monitored according to the allocation information received by the receiving unit,
The management server
A detection unit for detecting that the monitoring process of the network element by any one of the plurality of monitoring servers is stopped;
When the detection unit detects that the monitoring process of the network element is stopped, the network element that is the monitoring target of the monitoring server that stopped the monitoring process is sent to a monitoring server other than the monitoring server that stopped the monitoring process. An allocation information transmission unit for transmitting allocation information for extracting a network element including a monitoring target;
A network monitoring system comprising: The allocation information transmitted by the allocation information transmission unit of the management server extracts network elements to be monitored by each of the monitoring servers other than the monitoring server from all of the plurality of network elements constituting the communication network. The network monitoring system according to claim 1, wherein the network monitoring system is allocation information. The allocation information transmitted by the allocation information transmission unit of the management server extracts only the network elements that are monitored by the monitoring server that stopped the monitoring process, and the monitoring servers other than the monitoring server extract as additional monitoring targets The network monitoring system according to claim 1, wherein the network monitoring system is assigned information. The monitoring server is
The monitoring process of the network element to be monitored is performed every predetermined monitoring cycle,
The management server
A monitoring server information storage unit that stores monitoring server information indicating the processing capability of the monitoring server;
The processing load of the monitoring process of the monitoring server based on the network element allocated as a monitoring target to the monitoring server by the allocation information transmitted by the allocation information transmitting unit and the monitoring server information corresponding to the monitoring server is The network according to any one of claims 1 to 3, wherein when the predetermined threshold value is exceeded, information indicating that the monitoring period is extended is transmitted to the monitoring server. Monitoring system. The monitoring server information stored in the monitoring server information storage unit of the management server includes information indicating the processing capability of the monitoring server according to a CPU usage rate and a memory amount of the monitoring server. The network monitoring system according to claim 4. The monitoring server information stored in the monitoring server information storage unit of the management server includes information indicating the processing capability of the monitoring server according to the time required for the monitoring process of the network element by the monitoring server. The network monitoring system according to claim 4 or 5.

Images