JP2024042264A - Information processing device, information processing method, and program - Google Patents

Abstract

[Problem] To output more appropriate information regarding an error. [Solution] The information processing device of the present invention includes a log acquisition means for acquiring a log of a device to be analyzed, an information extraction means for extracting error information and information before the error occurred from the log, a two-dimensional code generation means for generating a two-dimensional code based on the error information and the information before the error occurred, and a two-dimensional code output means for outputting a two-dimensional code. [Selected Figure] Figure 1

Description

TECHNICAL FIELD The present invention relates to processing logs, and in particular to transmitting logs.

For example, as described in Patent Documents 1 and 2, two-dimensional codes are used to transfer error information contained in logs, etc.

JP2008-067878A Japanese Patent Application Publication No. 2014-030541

In error analysis, it is desirable to use pre-error information, such as the operating state of the computer before the error occurs, in addition to error information. However, Patent Documents 1 and 2 do not disclose the output of information before an error occurs.

An object of the present invention is to provide an information processing device that outputs more appropriate information regarding errors.

An information processing device according to an embodiment of the present invention includes: a log acquisition unit that acquires a log of an analysis target device; an information extraction unit that extracts error information and pre-error information from the log; The present invention includes two-dimensional code generation means for generating a two-dimensional code based on the two-dimensional code, and two-dimensional code output means for outputting the two-dimensional code.

An information processing method according to an embodiment of the present invention acquires a log of a device to be analyzed, extracts error information and pre-error information from the log, and generates a two-dimensional code based on the error information and pre-error information. and outputs a two-dimensional code.

A program in one embodiment of the present invention causes a computer to execute a process of acquiring a log of a device to be analyzed, a process of extracting error information and information before the error occurred from the log, a process of generating a two-dimensional code based on the error information and the information before the error occurred, and a process of outputting the two-dimensional code.

According to the present invention, it is possible to output more appropriate information regarding errors.

1 is a block diagram showing an example of a configuration of an information processing device according to a first embodiment of the invention. FIG. 2 is a flow diagram illustrating an example of the operation of the information processing device according to the first embodiment. FIG. 2 is a block diagram showing an example of a hardware configuration of an information processing device. FIG. 1 is a block diagram illustrating an example of an information processing system that uses an information processing device.

Embodiments of the present invention will be described with reference to the drawings. The drawings are for explaining the embodiments. However, the embodiments of the present invention are not limited to the description in the drawings.

<First embodiment>
FIG. 1 is a block diagram showing an example of the configuration of an information processing device 10 according to the first embodiment. The information processing device 10 includes a log acquisition section 110, an information extraction section 120, a two-dimensional code generation section 130, and a two-dimensional code output section 140. Note that the information processing device 10 can be located at any location as long as it can acquire the log of the device to be analyzed. For example, the information processing device 10 may be connected to a device to be analyzed, or may be connected to a storage device that saves a log of the device to be analyzed. Alternatively, the information processing device 10 may be included in the analysis target device or may include the analysis target device.

The log acquisition unit 110 acquires a log of an analysis target device in which an error has occurred. For example, the log acquisition unit 110 acquires logs from a storage device that stores logs of the analysis target device. If the device to be analyzed is a computer, the log includes information related to the event that occurred in the computer, such as the event identifier (ID), event type, date and time of occurrence, and the configuration that caused the event. . Hereinafter, information related to an event will be referred to as "event information." The configuration that generated the event is, for example, an application or software. Hereinafter, the configuration that caused the event to occur will be collectively referred to as the "event configuration." Further, the log includes information indicating the content of the error, such as an error code. For example, if the log is event information, the event information may include an error code as information indicating the content of the error. The log acquisition unit 110 may acquire logs at any timing. For example, the log acquisition unit 110 may acquire logs in response to a predetermined condition such as a user's instruction, or may acquire logs periodically.

Note that maintenance personnel generally use a filter to extract predetermined information from text-format logs in error analysis. Therefore, the log data format is generally a text format. The following explanation also assumes that the log is in text format. However, the log may be data in a format different from text format. For example, a maintenance person may decide the log data format depending on the analysis method to be used.

The information extraction unit 120 extracts error information and pre-error information from the log. Error information is information that includes information indicating the state of the analysis target device at the time the error occurs and the details of the error such as an error code. When an error is stored as event information in the log, the error information is, for example, event information including an error code, event ID, event type, occurrence date and time, and event configuration that caused the error. The pre-error information is a predetermined range of information included in the log before the error occurs. For example, a maintenance person may decide the time range to be extracted as pre-error information or the amount of information to be extracted, depending on the analysis method to be used. Note that in many cases, the pre-error information is event information that does not result in an error. Therefore, the pre-error information is information equivalent to the above error information that includes a code indicating that there is no error as an error code, or information that does not include an error code. However, the pre-error information may include other error information that occurred before the error corresponding to the above error information occurred.

The information extraction unit 120 may extract multiple pieces of error information and pre-error information corresponding to each piece of error information. Alternatively, the information extraction unit 120 may extract post-error information in addition to the error information and pre-error information. The amount of post-error information may be the same as the amount of pre-error information, or may be a different amount. For example, a maintenance technician may determine the time range to be extracted as post-error information or the amount of information to be extracted depending on the analysis method to be used.

An example of the extraction operation in the information extraction unit 120 will be explained. However, the operation of the information extraction unit 120 is not limited to the following example. The log is a log that includes the above event information. Further, the event information corresponding to the event in which the error occurred includes an error code indicating the error that occurred. In this way, the error code is information included in the log, and is information indicating the error that has occurred. Then, the information extraction unit 120 extracts error information and pre-error information based on the error code included in the log, as described below. First, the information extraction unit 120 refers to the error code included in the log, identifies event information in which an error has occurred, and extracts the identified event information as error information. For example, the information extraction unit 120 extracts event information including an error code as error information. Further, the information extraction unit 120 obtains, as the error occurrence time, the occurrence time of the event information extracted as the error information. Then, the information extraction unit 120 extracts event information up to a predetermined time before the error occurrence time, such as up to 60 seconds before the error occurrence time, as pre-error information. Note that the information extraction unit 120 may extract error information and pre-error information for some error codes instead of all error codes.

In addition to or instead of the judgment with reference to the error code, the information extraction unit 120 may use other judgments to judge the occurrence of an error. For example, the information extraction unit 120 may extract error information and information before the occurrence of an error based on the order of occurrence of events. For example, the information extraction unit 120 judges the order of occurrence of events with reference to the event type, etc. Then, the information extraction unit 120 identifies an event whose order of occurrence is abnormal, and judges the identified event to be an error. Then, the information extraction unit 120 may extract event information corresponding to the event judged to be an error as error information.

The information extraction unit 120 may change the range of information to be extracted as pre-error information based on the extracted error information. For example, the information extraction unit 120 stores extraction ranges corresponding to each error code in advance. The information extraction unit 120 then determines the extraction range based on the error code included in the extracted error information. Then, the information extraction unit 120 may extract event information in the determined extraction range as the pre-error information. For example, hardware operations take more time compared to software operations. Therefore, in the case of an error code related to hardware, the information extraction unit 120 may extract pre-error information in a longer time range compared to an error code related to software.

Further, the information extraction unit 120 may change the range of information to be extracted as pre-error information in accordance with the configuration that caused the error, such as the event configuration. For example, processing related to a network often requires more time than processing related to internal processing of a device. Therefore, in the case of an error related to the network, the information extraction unit 120 may extract pre-error information in a longer time range compared to an error related to internal processing of the device. Alternatively, the information extraction unit 120 may extract the pre-error information based on the configuration that caused the error, such as the event configuration. For example, if the error information is event information, the information extraction unit 120 determines the event configuration in the error information, that is, the event configuration that caused the error. Then, the information extraction unit 120 may extract event information whose event configuration is the same as the event configuration in the error information from the extracted event information as the pre-error information. Furthermore, when extracting post-error information, the information extraction unit 120 may change the range of post-error information to be extracted based on the error information, similarly to the pre-error information.

The two-dimensional code generating unit 130 generates a two-dimensional code based on the error information and the pre-error information extracted by the information extracting unit 120. The two-dimensional code generating unit 130 generates, for example, a two-dimensional code including the error information and the pre-error information. In detail, for example, the two-dimensional code generating unit 130 generates a two-dimensional code including the error information and the pre-error information in text format, that is, the character strings of the error information and the pre-error information. The two-dimensional code generating unit 130 may include other information in the two-dimensional code. For example, the two-dimensional code generating unit 130 may include information related to the analysis target device, such as an identifier of the analysis target device, in the two-dimensional code. When the information extracting unit 120 also extracts the post-error information, the two-dimensional code generating unit 130 may generate a two-dimensional code based on the error information, the pre-error information, and the post-error information. The two-dimensional code generating unit 130 may generate a two-dimensional code including information on the location where the error information and the pre-error information are stored, such as a URL (Uniform Resource Locator). The two-dimensional code generation unit 130 may use a general method for generating the target two-dimensional code as the method for generating the two-dimensional code.

The two-dimensional code output unit 140 outputs the generated two-dimensional code. For example, if the information processing device 10 includes a display device, the two-dimensional code output unit 140 may display the two-dimensional code on the screen of the display device. Alternatively, the two-dimensional code output unit 140 may output the two-dimensional code information to a display device (not shown). In this case, the display device may display the two-dimensional code.

Figure 2 is a flow diagram showing an example of the operation of the information processing device 10 according to the first embodiment. The log acquisition unit 110 acquires the log of the device to be analyzed (step S201). The information extraction unit 120 extracts error information and information before the error occurs from the log (step S202). If no error occurs in the log, the information processing device 10 may end the process or may return to step S201. The two-dimensional code generation unit 130 generates a two-dimensional code based on the error information and the information before the error occurs (step S203). The two-dimensional code output unit 140 outputs the two-dimensional code (step S204).

In this way, the information processing device 10 outputs a two-dimensional code including error information and pre-error information included in the log of the analysis target device. Therefore, the user of the information processing device 10 uses a camera or the like to photograph the two-dimensional code output from the information processing device 10 to send error information and pre-error information in the log, and maintains the photographed image. Just send it to the person in charge. Note that the information processing device 10 may use a two-dimensional code with error correction capability in order to reduce transmission errors. In this case, the user can more reliably transmit error information and pre-error information in the log to the maintenance person. The maintenance person can then decode the received two-dimensional code to obtain error information and pre-error information. Decoding two-dimensional codes is an easy task with many applications. In other words, the maintenance person can easily obtain error information and pre-error information from the received two-dimensional code. Therefore, the maintenance person can accurately and efficiently proceed with analysis work using pre-error information in addition to error information. In this way, the information processing device 10 can output more appropriate information regarding errors.

Note that the information processing device 10 may generate a one-dimensional code such as a barcode as the code to be generated. However, for error analysis, it is desirable to use information before the error occurs over a certain period of time. In other words, error analysis requires a certain amount of information. Two-dimensional codes can contain more information than one-dimensional codes. Therefore, it is preferable that the information processing device 10 uses a two-dimensional code that can contain a large amount of information.

[Hardware configuration]
Next, the hardware configuration of the information processing device 10 will be explained. Each component of the information processing device 10 may be configured with a hardware circuit. Alternatively, in the information processing device 10, each component may be configured using a plurality of devices connected via a network. For example, the information processing device 10 may be configured using cloud computing. Alternatively, in the information processing device 10, the plurality of components may be configured by one piece of hardware. Alternatively, the information processing device 10 may include a central processing unit (CPU), a read only memory (ROM), a random access memory (RAM), and a network interface card ( It may also be realized as a computer device including a NIC (Network Interface Card). FIG. 3 is a block diagram showing the configuration of a computer device 600, which is an example of the hardware configuration of the information processing device 10. Computer device 600 includes a CPU 610, ROM 620, RAM 630, storage device 640, and NIC 650.

CPU 610 reads a program from at least one of ROM 620 and storage device 640. Then, the CPU 610 controls the RAM 630, the storage device 640, and the NIC 650 based on the read program. Then, the computer device 600 including the CPU 610 controls these configurations to generate the log acquisition section 110, information extraction section 120, two-dimensional code generation section 130, and two-dimensional code output shown in FIG. The function as the section 140 is realized. In this way, the information processing device 10 may realize functions as a combination of hardware and software. The CPU 610 may read a program included in a recording medium 690 that stores a computer-readable program using a recording medium reading device (not shown). Alternatively, the CPU 610 may receive a program from an external device (not shown) via the NIC 650, store it in the RAM 630 or the storage device 640, and operate based on the stored program.

The ROM 620 stores programs executed by the CPU 610 and fixed data. The ROM 620 is, for example, a programmable ROM (P-ROM) or a flash ROM. The RAM 630 temporarily stores programs and data executed by the CPU 610. The RAM 630 is, for example, a dynamic RAM (D-RAM). The storage device 640 stores data and programs that are stored long-term by the computer device 600. Furthermore, the storage device 640 may operate as a temporary storage device for the CPU 610. The storage device 640 is, for example, a hard disk device, a magneto-optical disk device, a solid state drive (SSD), or a disk array device.

The ROM 620 and the storage device 640 are non-volatile (non-transitory) recording media. On the other hand, the RAM 630 is a volatile (transitory) recording medium. The CPU 610 can operate based on programs stored in the ROM 620, the storage device 640, or the RAM 630. In other words, the CPU 610 can operate using either a nonvolatile recording medium or a volatile recording medium. When implementing each function, the CPU 610 may use at least one of the RAM 630 and the storage device 640 as a temporary storage medium for programs and data.

The NIC 650 relays data exchange with external devices (not shown) via the network. The NIC 650 is, for example, a local area network (LAN) card. Furthermore, the NIC 650 is not limited to being wired, and may be wireless.

The computer device 600 configured in this manner executes the operations of each component in the information processing device 10 and realizes the functions of the information processing device 10.

[Example of a system that uses information processing equipment]
As a reference for the operation of the information processing device 10, an example of a system that uses the information processing device 10 will be described. FIG. 4 is a block diagram illustrating an example of an information processing system 60 that uses the information processing device 10. The information processing system 60 includes an information processing device 10, a display device 20, a smartphone 30, a smartphone 40, and an information decoding device 50. As described above, the information processing device 10 outputs a two-dimensional code corresponding to error information and pre-error information. The display device 20 displays the two-dimensional code. The user of the information processing device 10 uses the smartphone 30 to photograph the two-dimensional code, and transmits the two-dimensional code to the maintenance person's smartphone 40 via the telephone line. The maintenance person displays the two-dimensional code received by the smartphone 40.

The information decoding device 50 outputs error information and pre-error information using the displayed two-dimensional code. For example, as shown in FIG. 4, the information decoding device 50 includes an image acquisition section 510, an information decoding section 520, and an information output section 530. The image acquisition unit 510 acquires an image of the two-dimensional code displayed on the smartphone 40. For example, the image acquisition unit 510 acquires an image from a camera (not shown) or the like. Note that the image acquisition unit 510 may include a photographing device such as a camera. Alternatively, the image acquisition unit 510 may acquire the two-dimensional code from the smartphone 40 via a cable, a wireless line, or the like. The information decoding unit 520 decodes error information and pre-error information from the two-dimensional code. Note that when the log is in text format, the information decoding unit 520 decodes error information and pre-error information in text format from the two-dimensional code. The information output unit 530 outputs decoded error information and pre-error information. For example, the information output unit 530 outputs the decoded error information and pre-error information to a storage device connected to a device used for analysis by a maintenance person. In this case, the maintenance person analyzes the error using the error information and pre-error information stored in the storage device.

The present invention has been described above with reference to the embodiments, but the present invention is not limited to the above embodiments. Various modifications that can be understood by a person skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention.

10 information processing device 20 display device 30 smartphone 40 smartphone 50 information decoding device 60 information processing system 110 log acquisition unit 120 information extraction unit 130 two-dimensional code generation unit 140 two-dimensional code output unit 510 image acquisition unit 520 information decoding unit 530 information output Department 600 Computer equipment 610 CPU
620 ROM
630 RAM
640 Storage device 650 NIC
690 Recording medium

Claims (6)

a log acquisition means for acquiring logs of the analysis target device;
information extraction means for extracting error information and pre-error information from the log;
two-dimensional code generation means for generating a two-dimensional code based on the error information and the pre-error information;
and two-dimensional code output means for outputting the two-dimensional code. The information processing apparatus according to claim 1 , wherein the information extracting means extracts the error information and the information before the error occurrence based on an error code included in the log. The information processing apparatus according to claim 1, wherein the information extraction means extracts the error information and the pre-error information based on the order of occurrence of events included in the log. The information processing apparatus according to any one of claims 1 to 3, wherein the information extraction means extracts the pre-error information based on the error information. Obtain the log of the device to be analyzed,
extracting error information and pre-error information from the log;
generating a two-dimensional code based on the error information and the pre-error information;
An information processing method for outputting the two-dimensional code. Processing to obtain logs of the device to be analyzed;
a process of extracting error information and pre-error information from the log;
a process of generating a two-dimensional code based on the error information and the pre-error information;
A program that causes a computer to execute a process of outputting the two-dimensional code.

Images