JP2010097417A - Message management system, monitored device, monitoring device, message management method and program therefor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a message management system or the like that reduces a load on a network between a monitoring device and a monitored device. <P>SOLUTION: The monitored device 10 includes: a message generation part 32 generating a first message based on the operation state of the device; a first analysis table 36 storing correspondence between message contents and an identifier; a message analysis part 34 replacing the message contents with the identifier to generate a second message; and a message transmission part 35 transmitting the second message to the monitoring device. The monitoring device 20 includes: a message reception part 41 receiving the second message from the monitored device; a second analysis table 45 storing the same contents as the first analysis table; a message restoration part 43 replacing the identifier with the message contents based on the contents stored in the second analysis table to restore the first message; and a message display part 44 displaying the restored first message. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to operation management of a computer system, and more particularly to processing of messages such as failure information.

  As computer systems become larger and more complex, the management costs required to maintain the systems are also increasing. Specifically, problems such as an increase in the number of computers belonging to the same network and complication of contents to be monitored for one computer have occurred.

  Therefore, a dedicated device for monitoring the operation status of other computers belonging to the same network may be provided in the computer network. Here, such a device is called a monitoring device, and a computer device to be monitored by the monitoring device is called a monitoring target device. The monitoring target device sends a message indicating its own operation status to the monitoring device via the network. The monitoring device collects and displays these messages. A system in which the monitoring device and the monitoring target device are connected to the same network is referred to as a message management system here.

  The following is disclosed as technical literature related to such a message management system. Patent Document 1 describes a monitoring device that displays a message received from a monitoring target device by replacing / filtering the message. Patent Document 2 describes a monitoring device that extracts and counts messages according to a predetermined rule, and extracts the occurrence frequency based on the counted value. Patent Document 3 describes a monitoring device that holds a message in a holding unit and deletes an old message from the holding unit according to a specific rule to improve processing efficiency.

  Further, as a technique for improving the efficiency of message exchange other than the message management system, Patent Document 4 describes a technique of learning a message sequence pattern of a communication device and replacing a pattern that appears many times. ing. Patent Document 5 describes a technique of replacing a program source code with a specific identifier.

JP 2005-141467 A JP 2006-260056 A JP 2007-183904 A JP 2006-211318 A Japanese Patent Laid-Open No. 01-243128

  Along with the increase in scale and complexity of the computer system as described above, the amount of messages that notify the operation state of the monitoring target device that must be detected by the monitoring device continues to increase. As a result, the load on the network between the monitoring apparatus and the monitoring target apparatus and the load on the monitoring apparatus that collects messages and performs extraction processing are increasing. Therefore, there is a demand for reduction in the amount of messages generated from the monitoring target device and efficient processing on the monitoring device.

  The techniques of Patent Literatures 1 to 3 all relate to processing for messages after being collected from the monitoring target device to the monitoring device. Therefore, the load on the network between the monitoring device and the monitoring target device is not reduced. Further, since the technique of Patent Document 3 holds a message in the holding unit and deletes an old message from the holding unit in accordance with a specific rule, the monitored device cannot be monitored in real time, and the message after being deleted is deleted. Management corresponding to is not possible.

  Furthermore, all of the techniques of Patent Documents 4 to 5 are processing inside a specific device, and do not reduce the load on the network between the devices. The message quality in this document is also different from that in the message management system in which the present invention is a problem. Therefore, the message quality is applied to the purpose of improving the efficiency of message exchange between the monitoring device and the monitoring target device and reducing the load on the network. I can't.

  An object of the present invention is to provide a message management system, a monitoring target device, a monitoring device, a message management method, and a message management system capable of reducing a network load between the monitoring device and the monitoring target device and monitoring the monitoring target device in real time. To provide that program.

  In order to achieve the above object, a message management system according to the present invention includes a monitoring target device that is one or a plurality of computer devices and a monitoring device that monitors the operating state of the monitoring target device. A message management system, in which a monitoring target device generates a first message including a message content indicating its own operation status, and a first analysis table that stores in advance the correspondence between the message content and an identifier A message conversion unit that generates a second message by replacing the message content with an identifier, and a message transmission unit that transmits the second message to the monitoring device. The monitoring device monitors the second message. A message receiving unit that receives from the target device, and a second analysis table that stores in advance the same contents as the first analysis table. A message restoring unit that restores the first message by replacing the identifier with the message content based on the content stored in the second analysis table, and a message display unit that displays the restored first message It is characterized by having.

  In order to achieve the above object, a monitoring target device according to the present invention is a monitoring target device interconnected with a monitoring device that monitors an operation state, and includes a first message including a message content indicating its own operation status. A message generation unit that generates a message, an analysis table that stores correspondence between the message content and the identifier in advance, a message conversion unit that generates a second message by replacing the message content with the identifier, and a monitoring device for the second message And a message transmission unit that transmits the message.

  In order to achieve the above object, a monitoring apparatus according to the present invention is a monitoring apparatus that is interconnected with a monitoring target apparatus that is one or a plurality of computer apparatuses, and that monitors the operating state of the monitoring target apparatus. Based on the contents stored in the analysis table when the message includes an identifier, the message reception unit that receives the message including the message from the monitoring target device, the analysis table that stores the correspondence between the message content and the identifier in advance And a message restoration unit for restoring the message by replacing the identifier with the message content, and a message display unit for displaying the restored message.

  In order to achieve the above object, a message management method according to the present invention is a message management system in which a monitoring target device and a monitoring device, which are one or a plurality of computer devices, are connected to each other. A message management method for monitoring a state, in which a monitoring target device generates a first message including a message content indicating its operation status, and stores a correspondence between the message content and an identifier in advance. The message content is replaced with an identifier to generate a second message, the second message is transmitted to the monitoring device, the monitoring device receives the second message from the monitoring target device, and the first message Based on the contents stored in the second analysis table with reference to the second analysis table in which the same contents as the analysis table of FIG. The first message was restored by replacing the Besshi the message content, and displaying a first message reconstructed.

  In order to achieve the above object, a message management program according to the present invention comprises a monitoring target device, which is one or a plurality of computer devices, and a monitoring device that monitors the operating state of the monitoring target device. In the message management system, an analysis table storing in advance a procedure for generating a first message including a message content indicating its own operation status and a correspondence between the message content and an identifier in a computer provided in advance in the monitoring target device It is characterized in that a reference procedure, a procedure for generating a second message by replacing the message content with an identifier, and a procedure for transmitting the generated second message to a monitoring device are executed.

  In order to achieve the above object, another message management program according to the present invention includes a monitoring target device that is one or a plurality of computer devices and a monitoring device that monitors the operating state of the monitoring target device. A procedure for receiving a message including an identifier from a monitoring target device, a procedure for referring to an analysis table in which a correspondence between a message content and an identifier is stored in advance, A procedure for restoring the message by replacing the identifier with the message content based on the content stored in the analysis table and a procedure for displaying the restored message are executed.

  In the present invention, as described above, the monitoring target device replaces the message content with the identifier and transmits it, and the monitoring device receives the message and restores it. The amount can be reduced. Thereby, the load on the network between the monitoring device and the monitoring target device is reduced, and it becomes possible to monitor the monitoring target device in real time, an unprecedented superior message management system, monitoring target device, monitoring device, A message management method and its program can be provided.

(First embodiment)
Hereinafter, the structure of the 1st Embodiment of this invention is demonstrated based on attached FIG.
First, the basic content of the present embodiment will be described, and then more specific content will be described.
The message management system 1 according to the first embodiment includes a monitoring target device 10 that is one or a plurality of computer devices and a monitoring device 20 that monitors the operating state of the monitoring target device. The monitoring target device 10 includes a message generation unit 32 that generates a first message including a message content indicating its own operation status, a first analysis table 36 that stores in advance the correspondence between the message content and the identifier, and the message content The message conversion unit 34 for generating the second message by replacing the identifier with the identifier, and the message transmission unit 35 for transmitting the second message to the monitoring device. The monitoring device 20 monitors the second message. The message receiving unit 41 received from the apparatus, the second analysis table 45 storing the same contents as the first analysis table in advance, and the identifier replaced with the message contents based on the contents stored in the second analysis table A message restoration unit 43 for restoring the first message and a message table for displaying the restored first message And a section 44.

  Here, the monitoring target device 10 includes a first message analysis unit 33 that issues a new identifier when the identifier corresponding to the message content is not stored in the first analysis table 36. In addition, the message analysis unit 34 generates a third message including the message content and the new identifier, and the message transmission unit 35 transmits the generated third message to the monitoring device 20. The monitoring device 20 includes a second message analysis unit 42 that stores the message content and a new identifier in the second analysis table 45 in response to the message reception unit 41 receiving the third message.

With this configuration, the present embodiment can reduce the data amount of the message to be transmitted and reduce the network load between the monitoring device and the monitoring target device.
Hereinafter, this will be described in more detail.

  FIG. 1 is an explanatory diagram showing the configuration of the message management system 1 according to the first embodiment of the present invention. The message management system 1 includes a monitoring target device 10 and a monitoring device 20 that collects messages from the monitoring target device 10. The monitoring target device 10 and the monitoring device 20 are both computer devices and are connected to each other by a LAN (Local Area Network) or the like. In FIG. 1, one monitoring target device 10 and one monitoring device 20 are shown, but in practice, a plurality of monitoring target devices 10 may be monitored by one monitoring device 20.

  The monitoring target device 10 includes a CPU 11 (Central Processing Unit) that is a main body that executes a program, a RAM 12 (Random Access Memory) that stores a program being executed by the CPU 11, an HDD 13 (Hard Disk Drive) that is a nonvolatile storage device, And a communication interface 14 for performing data communication with the monitoring device 20.

  In the RAM 12, an information acquisition unit 31 that acquires its current operation status, a message generation unit 32 that generates a message based on the acquired operation status, and a first message analysis unit 33 that analyzes the message, A message analysis unit 34 that converts a message based on the analysis result and a message transmission unit 35 that sends a message to the monitoring device 20 are stored. All of these are realized as a computer program executed by the CPU 11. The HDD 13 stores a first analysis table 36 as data.

  The information acquisition unit 31 acquires information on the current operation status of the monitoring target device 10. The message generation unit 32 generates a message based on the information acquired by the information acquisition unit 31. The first message analysis unit 33 analyzes the message generated by the message generation unit 32 based on the information recorded in the first analysis table 36. The message analysis unit 34 converts the message based on the content analyzed by the first message analysis unit 33 and the information recorded in the first analysis table 36.

  The message transmission unit 35 sends the message converted by the message analysis unit 34 to the monitoring device 20 via the communication interface 14. The first analysis table 36 stores data that is used by the message analysis unit 34 to convert a message that will be described later, based on the analysis result of the first message analysis unit 33.

  Similarly to the monitoring target device 10, the monitoring device 20 performs data communication with the CPU 21, which is the main body that executes the program, the RAM 22 that stores the program being executed by the CPU 21, the HDD 23 that is a non-volatile storage device, and the monitoring target device 10. A communication interface 24 and a display 25 are provided.

  The RAM 22 stores a message receiving unit 41 that receives a message from the monitoring target device, a second message analyzing unit 42 that analyzes the received message, a message restoring unit 43 that restores the message, and a restored message. A message display unit 44 to be displayed on the display 25 is stored. All of these are realized as a computer program executed by the CPU 21. The HDD 23 stores the second analysis table 45 as data.

  The message receiving unit 41 receives a message from the monitoring target device 10 via the communication interface 24. The second message analysis unit 42 analyzes the message received by the message reception unit 41 based on the content recorded in the second analysis table 45. The message restoration unit 43 restores the message based on the contents analyzed by the second message analysis unit 42 and the information recorded in the second analysis table 45.

  The message display unit 44 displays the message restored by the message restoration unit 43 on the display 25. The second analysis table 45 records the same contents as the first analysis table 36 on the monitoring target device 10 side.

  FIG. 2 is a flowchart showing the operation of the message management system 1 shown in FIG. The information acquisition unit 31 constantly monitors monitoring items such as performance information and log information of the monitoring target device 10. When the information acquisition unit 31 detects the occurrence of any event, the message generation unit 32 generates a message corresponding to the event (step S100). The first message analysis unit 33 analyzes the content of the generated message (step S101), and determines whether or not it matches the one already recorded in the first analysis table 36 (step S102). .

  When the generated message is a message that is not registered in the first analysis table 36 (step S102: NO), the first message analysis unit 33 performs the first analysis table 36 on the content of this message. An identifier that is not registered is newly issued, and the identifier and the content of the message are associated and registered in the analysis result recording unit (step S103B). In addition, the message analysis unit 34 sends this message and the newly assigned identifier to the monitoring device 20 via the message transmission unit 35 (step S104B).

  In the monitoring device 20, the message is received by the message receiving unit 41, and the second message analyzing unit 42 analyzes that the received message includes the message content and the identifier (step S105B). The correspondence between the identifiers is registered in the second analysis table 45 (step S106B). Thereafter, the message display unit 44 displays the message to the operator (step S107).

  If the message is registered in the first analysis table 36 in step S102 (step S102: YES), the message content is converted into an identifier registered in the first analysis table 36 (step S103A). The converted message is sent to the monitoring apparatus 20 via the message transmission unit 35 (step S104A).

  In the monitoring device 20, the message is received by the message receiving unit 41, and the second message analyzing unit 42 analyzes that the received message is converted into an identifier (step S105A), and based on the identifier. The corresponding message content is acquired from the second analysis table 45, and the message is restored (step S106A). Thereafter, the message display unit 44 displays the message on the display 25 (step S107).

(Example of operation)
FIG. 3 is an explanatory diagram showing an example of the message 300 generated by the message generator 32 shown in FIG. The message 300 includes a fixed unit 301 and message content 302. The fixed unit 301 indicates contents that are highly likely to change for each message, such as date and time, and the contents corresponding to the first message analyzing unit 33 and the message analyzing unit 34 are registered in advance as fixed units. Keep it.

  FIG. 4 is an explanatory diagram showing an example of the data structure of the first analysis table 36 shown in FIG. The first analysis table 36 stores message contents 302 and an identifier 401 in association with each other. A second analysis table 45 on the monitoring device 20 side to be described later also has the same data configuration and data content as the first analysis table 36. In the example shown in FIG. 4, numbers such as “1”, “2”, “3”... Are used as the identifier 401, but in actuality, any character or symbol can be used as the identifier 401. FIG. 5 is an explanatory diagram showing an example of the post-conversion message 500 converted from the message 300 by the processing by the message analysis unit 34 shown in steps S103A and S103B.

  The first message analysis unit 33 analyzes the message content 302 for the message 300 in step S102. In the first line of the message 300 shown in FIG. 3, the message content 302a “aaa was cccc” matches the first line of the first analysis table 36 shown in FIG. Is replaced with the identifier “1” (indicated by the replaced identifier 502a in FIG. 5A), and the fixing unit 301a is sent as it is to the monitoring device 20 in step S104A.

  FIG. 5A shows a post-conversion message 500 a that has been subjected to the above-described processing by the message analysis unit 34. The post-conversion message 500a includes a fixed part 301a that is not converted and a post-substitution identifier 502a that indicates “1”.

  The monitoring device 20 that has received the post-conversion message 500a analyzes this in step S105A by the second message analysis unit 42. The second analysis table 45 used here shows the second analysis table 45 shown in FIG. Since the same contents as those of the first analysis table 36 are recorded, the second message analysis unit 42 replaces the message contents indicated by this identifier “1” with “aaa was cccc” in step S106A, as shown in FIG. The original message 300a can be restored. The message display unit 44 displays this on the display 25 in step S107.

  On the other hand, the message content 302d “xxxx host1 zzz” of the message 300d shown in the fourth line of FIG. 3 does not match the first analysis table 36 shown in FIG. Therefore, the message analysis unit 34 issues a new identifier “4” and registers it in the first analysis table 36 in step S103B.

  In step S104B, the message analysis unit 34 sends the converted message 500d obtained by converting the message 300d to the monitoring device 20. In the post-conversion message 500d, the fixed part 301a and the message content 302d are not converted, but a new identifier 503d (“4” in this case) issued between the fixed part 301d and the message content 302d is added. FIG. 5B shows a post-conversion message 500 d that has been subjected to the above-described processing by the message analysis unit 34. The post-conversion message 500d may have a form other than the form shown in FIG. 5B, for example, a new identifier 503d after the fixed part 301d and the message content 302d.

  The monitoring device 20 that has received the post-conversion message 500d analyzes this in step S105B by the second message analysis unit 42. In the second analysis table 45 used here, the new identifier 503d is not registered. Therefore, the second message analysis unit 42 newly adds the new identifier 503d and the corresponding message content 302d (in this case, “4” and “xxxx host1 zzz”) to the second analysis table 45 in step S106B. sign up. Then, the new identifier 503d is removed from the converted message 500d and returned to the original message 300d, which is displayed on the display 25 by the message display unit 44 in step S107.

  FIG. 6 is an explanatory diagram showing the first analysis tables 36 and 45 after the new identifier 503d and the corresponding message content 302d are registered by the above-described processing. The identifier issued in response to the new message content on the monitoring target device 10 side is recorded in the first analysis table 36, and at the same time, the same content is sent to the monitoring device 20 and the second analysis table 45 is sent. To be recorded. Therefore, the same contents are recorded in the first analysis tables 36 and 45.

(Overall operation of the first embodiment)
Next, the overall operation of the first embodiment will be described. The operation according to the present embodiment is a message management system 1 in which the monitoring target device 10 and the monitoring device 20 which are one or a plurality of computer devices are connected to each other, and monitors the operation state of the monitoring target device 10. In the message management method, the monitoring target device 10 generates a first message including the message content indicating its own operation status (FIG. 2: step S100), and stores the correspondence between the message content and the identifier in advance. Referring to the analysis table 1, if an identifier corresponding to the message content is stored in the first analysis table, the message content is replaced with the identifier to generate a second message (FIG. 2: step S102). -103A), the second message is transmitted to the monitoring device (FIG. 2: step S104A), and the monitoring device 20 receives the second message. Is received from the monitoring target device (FIG. 2: Step S105A), and the second message contains the identifier by referring to the second analysis table in which the same contents as the first analysis table are stored. In this case, the identifier is replaced with the message content based on the content stored in the second analysis table to restore the first message (FIG. 2: step S106A), and the restored first message is displayed ( FIG. 2: Step S107).

  The first message analysis unit provided in advance in the monitoring target device 10 issues a new identifier when the identifier corresponding to the message content is not stored in the first analysis table, and then the message content and the new identifier. (FIG. 2: Steps S102 to 103B), and subsequently, the monitoring target device 10 transmits the third message to the monitoring device (FIG. 2: Step S104B). However, in response to receiving the third message, the message content and the new identifier are stored in the second analysis table (FIG. 2: steps S105B to 106B).

Here, each of the above operation steps may be programmed to be executable by a computer, and may be executed by the monitoring target device 10 and the monitoring device 20 which are computers that directly execute the respective steps.
By this operation, this embodiment has the following effects.

  In the present embodiment, when an existing message is generated, only an identifier corresponding to the message content is sent, so a message exchanged between the monitoring target device and the monitoring device The amount of data can be reduced and messages can be sent and received efficiently.

  Further, in the present embodiment, when the first message is generated, when the message is sent, the identifier corresponding to the message content is sent together, so that the monitoring target device and the monitoring device Can efficiently share message contents and identifiers corresponding to them.

  Moreover, in this Embodiment, the message which generate | occur | produced can be displayed on the display 25 in real time, without buffering. For this reason, it is possible to monitor the operation state of the monitoring target device without losing the real-time property.

(Second Embodiment)
Hereinafter, the configuration of the second embodiment of the present invention will be described with reference to FIG.
First, the basic content of the present embodiment will be described, and then more specific content will be described.

  In the second embodiment of the present invention, the operation in the case where the message contents that the monitoring target device 610 intends to send to the monitoring device 620 is stored in the first and second analysis tables 36 and 45 is the same as that described above. This is the same as in the first embodiment. However, the operation when the message content is not stored in the first and second first analysis tables 36 and 45 is different from that in the first embodiment. Except for this point, the present embodiment has the same configuration and the same functions and effects as the first embodiment described above.

  When the monitoring target apparatus 610 does not store an identifier corresponding to the message content in the first analysis table 36, the message transmission unit 635 transmits the message to the monitoring apparatus 620 as it is, and the monitoring apparatus 620 determines that the message content is A second message analysis unit 642 that generates a third message that includes a message content and a new identifier when a message that has not been replaced with an identifier is received, and monitors the third message And an analysis result transmission unit 646 that transmits the target device. The monitoring target device 610 includes an analysis result receiving unit 637 that receives the third message and stores the message content and the new identifier in the first analysis table 36.

This configuration can also achieve the same effects as those of the first embodiment described above.
Hereinafter, this will be described in more detail.

  FIG. 7 is an explanatory diagram showing the configuration of the message management system 601 according to the second embodiment of the present invention. The message management system 601 includes a monitoring target device 610 and a monitoring device 620 that collects messages from the monitoring target device 610. The monitoring target device 610 and the monitoring device 620 are both computer devices and are connected to each other by a LAN or the like.

  In the monitoring target device 610, an analysis result receiving unit 637 is further added to the configuration of the monitoring target device 10 according to the first embodiment of the present invention, and the first message analysis unit 633, the message conversion unit 634, and the message The operation of the transmission unit 635 is partially changed as will be described later compared to the function unit of the same name in the first embodiment. The analysis result receiving unit 637 is a computer program stored in the RAM 12 and executed by the CPU 11. The analysis result receiving unit 637 receives the analysis result received from the monitoring device 620 via the communication interface 14 and stores the analysis result in the first analysis table 36. Record. The other functions of the components are the same as those described in the description of the monitoring target device 10 according to the first embodiment, and therefore will be referred to by the same name and reference number.

  In the monitoring device 620, an analysis result transmission unit 646 is further added to the configuration of the monitoring device 20 according to the first embodiment of the present invention, and the operations of the second message analysis unit 642 and the message restoration unit 643 are the first. Compared with the function part of the same name in the embodiment, a part of the function part is changed as will be described later. The analysis result transmission unit 646 is a computer program stored in the RAM 22 and executed by the CPU 21, and sends the analysis result of the second message analysis unit 42 to the monitoring target device 610 via the communication interface 24 as necessary. . The other functions of the components are the same as those described in the description of the monitoring device 20 according to the first embodiment, and are therefore referred to by the same name and reference number.

  FIG. 8 is a flowchart showing the operation of the message management system 601 shown in FIG. The flow chart of FIG. 8 includes many operations that are common to the message management system 1 according to the first embodiment of the present invention shown in FIG. Only the operation will be described.

  If the monitoring target device 610 determines that the message is not registered in the first analysis table 36 in the determination in step S102 (step S102: NO), the first message analysis unit 633 determines the content of this message. Is sent to the monitoring device 620 through the message transmission unit 35 (step S703B).

  In the monitoring device 620, the message is received by the message reception unit 41, and the second message analysis unit 642 analyzes that the identifier is not included in the received message (step S704B), and this message content and a new issue are issued. The identifier thus registered is registered in the second analysis table 45 (step S705B). The operation related to this analysis is the same as the operation already described by the first message analysis unit 633 in the first embodiment of the present invention. Thereafter, the message display unit 44 displays the message on the display 25 (step S109).

  Simultaneously with the display of the message, the second message analysis unit 642 transmits the message content registered in step S705B and the corresponding identifier to the monitoring target device 610 through the analysis result transmission unit 646 (step S706B). In the monitoring target device 610, the combination of the message content and the identifier is received by the analysis result receiving unit 637 (step S707B), and is registered in the first analysis table 36 (step S708B).

  Here, the contents registered in the second and first analysis tables 45 and 36 are also the same as in the case of the first embodiment of the present invention shown in FIGS. However, the newly issued identifier and the corresponding message content are first registered in the second analysis table 45 of the monitoring device 620 in step S705B, and then the first analysis table of the monitoring target device 610 in step S708B. This embodiment is different from the first embodiment described above in that it is registered in No. 36. Also, the message transmitted to the monitoring target device 610 in step S706B is not the same form as the converted message 500d shown in FIG. 5B, but includes only the message content 302d and the issued new identifier 503d. (The fixing portion 301a is not necessarily present).

  If the message is already registered in the first analysis table 36 in the determination in step S102 described above (step S102: YES), the operation is the same as that shown in FIG. 2 (steps S103A to 107).

(Overall operation of the second embodiment)
Next, the overall operation of the second embodiment will be described.
In the second embodiment of the present invention, the operation in the case where the message contents that the monitoring target device 610 intends to send to the monitoring device 620 is stored in the first and second analysis tables 36 and 45 is as follows. This is the same as in the case of the first embodiment described above.

  However, when the message contents are stored in the first and second first analysis tables 36 and 45, the message transmitting unit 635 in the monitoring target device 610 transmits the message as it is to the monitoring device 620 (FIG. 8: In step S703B), in the monitoring device 620, the second message analysis unit 642 prepared in advance issues a new identifier, generates a third message including the message content and the new identifier, and monitors the third message. The monitoring target device 610 receives this third message and stores the message content and the new identifier in the first analysis table (FIG. 8: Step S707B). ~ 708B).

Here, each of the above-described operation steps may be programmed to be executable by a computer, and may be executed by the monitoring target device 610 and the monitoring device 620 which are computers that directly execute the respective steps.
By this operation, this embodiment has the following effects.

  Compared with the first embodiment described above, this embodiment performs a new issuance on the message content on the monitoring device 620 side, and transmits a set of the message content and identifier issued to the monitoring target device 610. Are different. In the first embodiment, issuance is performed on the monitoring target device 10 side. However, in this case, in an environment where a plurality of monitoring target devices exist for one monitoring device, the same message content is processed. There is a possibility that different monitoring target devices 10 give identifiers, and therefore, a plurality of identifiers may be given by different monitoring target devices 10 to the same message content, and there may be a problem caused by this.

  In the present embodiment, even in an environment where a plurality of monitoring target devices 610 exist for one monitoring device 620, the monitoring device 620 always gives an identifier. For this reason, if there is one monitoring device 620, there is no duplication of identifiers and no problems resulting therefrom. Therefore, this embodiment is more suitable for an environment in which a plurality of monitoring target devices 610 exist for one monitoring device 620.

  The present invention has been described with reference to the specific embodiments shown in the drawings. However, the present invention is not limited to the embodiments shown in the drawings, and any known hitherto provided that the effects of the present invention are achieved. Even if it is a structure, it is employable.

  The present invention can be applied to a monitoring device that monitors the operating status of other computers in a computer network and a message management system including such a monitoring device. In particular, it is suitable for a message management system that monitors the operation status of a plurality of computers in a large-scale computer network.

It is explanatory drawing which shows the structure of the message management system which concerns on the 1st Embodiment of this invention. It is a flowchart which shows operation | movement of the message management system shown in FIG. It is explanatory drawing which shows an example of the message produced | generated by the message production | generation part shown in FIG. It is explanatory drawing which shows an example of a data structure of the analysis table shown in FIG. FIG. 5 is an explanatory diagram showing an example of the converted message converted from the message in the processing by the message conversion unit shown in steps S103A and S103B. FIG. 5A shows a post-conversion message that has been subjected to the above-described processing by the message conversion unit for the first line of the message. FIG. 5B shows a post-conversion message that has been subjected to the above-described processing by the message conversion unit for the fourth line of the message. It is explanatory drawing shown about the analysis table after a new identifier and the message content corresponding to it are registered by the above-mentioned process. It is explanatory drawing which shows the structure of the message management system which concerns on the 2nd Embodiment of this invention. 8 is a flowchart showing an operation of the message management system shown in FIG.

Explanation of symbols

1, 601 Message management system 10, 610 Monitoring target device 11 CPU
12 RAM
13 HDD
DESCRIPTION OF SYMBOLS 14 Communication interface 31 Information acquisition part 32 Message generation part 33,633 Message analysis part 34,634 Message conversion part 35,635 Message transmission part 36 First analysis table 637 Analysis result reception part 20,620 Monitoring apparatus 21 CPU
22 RAM
23 HDD
24 communication interface 25 display 41 message receiving unit 42, 642 message analyzing unit 43, 643 message restoring unit 44 message display unit 45 second analysis table 646 analysis result transmitting unit

Claims (14)

A message management system in which a monitoring target device that is one or a plurality of computer devices and a monitoring device that monitors an operation state of the monitoring target device are connected to each other,
The monitoring target device generates a first message including a message content indicating its own operation status, a first analysis table that stores in advance the correspondence between the message content and the identifier, and the message content A message conversion unit that generates a second message by replacing the identifier with the identifier, and a message transmission unit that transmits the second message to the monitoring device,
A message receiving unit that receives the second message from the monitoring target device; a second analysis table that stores in advance the same contents as the first analysis table; and the second analysis table. A message restoration unit that restores the first message by replacing the identifier with the message content based on the content stored in the message, and a message display unit that displays the restored first message. A featured message management system. The monitoring target device has a first message analysis unit that issues a new identifier when an identifier corresponding to the message content is not stored in the first analysis table;
In the monitoring target device, the message conversion unit generates a third message including the message content and the new identifier, and the message transmission unit transmits the generated third message to the monitoring device. And
A second message analyzer that stores the message content and the new identifier in the second analysis table in response to the monitoring device receiving the third message by the message receiver; The message management system according to claim 1, further comprising: When the monitoring target device does not store an identifier corresponding to the message content in the first analysis table, the message transmission unit transmits the message as it is to the monitoring device,
When the monitoring device receives a message in which the message content is not replaced by the identifier, the monitoring device issues a new identifier to the message content, and a third message including the message content and the new identifier A second message analysis unit that generates the analysis result transmission unit that transmits the third message to the monitoring target device,
The monitoring target apparatus includes an analysis result receiving unit that receives the third message and stores the message content and the new identifier in the first analysis table. The message management system described. A monitoring target device interconnected with a monitoring device that monitors the operating state,
A message generation unit that generates a first message including message content indicating its own operation status;
An analysis table that stores in advance the correspondence between the message content and the identifier;
A message converter that replaces the message content with the identifier to generate a second message;
A monitoring target device, comprising: a message transmission unit configured to transmit the second message to the monitoring device. A message analysis unit that issues a new identifier when an identifier corresponding to the message content is not stored in the analysis table;
The message conversion unit generates a third message including the message content and the new identifier, and the message transmission unit transmits the generated third message to the monitoring device. The monitoring object device according to claim 4. Receiving a message including the message content and a new identifier from the monitoring device, and having an analysis result receiving unit for storing the message content and the new identifier in the analysis table;
The monitoring target device according to claim 4, wherein the message transmission unit transmits the message as it is to the monitoring device when an identifier corresponding to the message content is not stored in the analysis table. A monitoring device that is mutually connected to a monitoring target device that is one or a plurality of computer devices, and that monitors the operating state of the monitoring target device,
A message receiving unit for receiving a message including an identifier from the monitoring target device;
An analysis table that stores the correspondence between message contents and identifiers in advance;
A message restoration unit that restores the message by replacing the identifier with the message content based on the content stored in the analysis table when the message includes the identifier;
And a message display unit for displaying the restored message.   In response to the message reception unit receiving a message including a new identifier corresponding to the message content, the message reception unit includes a message analysis unit that stores the message content and the new identifier in the analysis table. The monitoring device according to claim 7. A message analysis unit that issues a new identifier for the message content when receiving a message in which the message content is not replaced with the identifier, and generates a message including the message content and the new identifier;
The monitoring apparatus according to claim 7, further comprising: an analysis result transmitting unit that transmits the message to the monitoring target apparatus. A message management method for monitoring an operating state of a monitoring target device in a message management system in which a monitoring target device and a monitoring device, which are one or a plurality of computer devices, are connected to each other
The monitoring target device generates a first message including a message content indicating its own operation status, refers to a first analysis table in which a correspondence between the message content and an identifier is stored in advance, and determines the message content. Replacing the identifier to generate a second message, and transmitting the second message to the monitoring device;
The monitoring device receives the second message from the monitoring target device, refers to a second analysis table in which the same contents as the first analysis table are stored in advance, and stores them in the second analysis table. A message management method comprising: replacing the identifier with the message content based on the stored content, restoring the first message, and displaying the restored first message. The first message analysis unit provided in advance in the monitoring target device issues a new identifier when an identifier corresponding to the message content is not stored in the first analysis table, and subsequently the message content and the message Generating a third message including the new identifier;
Following this, the monitored device sends the third message to the monitoring device,
The second message analysis unit provided in advance in the monitoring device stores the message content and the new identifier in the second analysis table in response to the reception of the third message. The message management method according to claim 10. When the monitoring target device does not store an identifier corresponding to the message content in the first analysis table, the monitoring target device transmits the message as it is to the monitoring device,
The second message analysis unit provided in advance in the monitoring device issues a new identifier when the identifier corresponding to the message content does not exist in the second analysis table, and subsequently the message content and the new identifier. And a third message containing
Following this, the monitored device sends the third message to the monitored device,
The message management method according to claim 10, wherein the monitoring target device receives the third message and stores the message content and the new identifier in the first analysis table. A message management system in which a monitoring target device that is one or a plurality of computer devices and a monitoring device that monitors the operation state of the monitoring target device are connected to each other, and the computer that the monitoring target device includes in advance In addition,
A procedure for generating a first message including a message content indicating its own operation status;
A procedure for referring to an analysis table in which the correspondence between the message content and the identifier is stored in advance;
Generating a second message by replacing the message content with the identifier;
And a procedure for transmitting the generated second message to the monitoring device. In a message management system in which a monitoring target device that is one or a plurality of computer devices and a monitoring device that monitors the operation state of the monitoring target device are connected to each other, ,
Receiving a message including an identifier from the monitoring target device;
A procedure for referring to an analysis table in which correspondence between message contents and identifiers is stored in advance;
A procedure for restoring the message by replacing the identifier with the message content based on the content stored in the analysis table;
A message management program for executing the procedure for displaying the restored message.

Images