JP3319423B2 - Network management system and method - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network management system, and more particularly, to a network management system in which a monitored device notifies a monitored device of an event so that the monitoring device manages the status of the monitored device in real time. .

[0002]

2. Description of the Related Art Conventionally, in a network management system, one monitoring device centrally manages a plurality of monitored devices connected via a communication line.

Therefore, in a system in which one monitoring device centrally manages a plurality of monitored devices, when the number of monitored devices increases or when a large number of state changes occur in the monitored devices, the number of monitored devices changes. There has been a possibility that a large number of event notifications transmitted from the monitored device to the monitoring device will occur.

When a large number of event notifications occur, the communication messages between the monitoring device and the monitored device become overloaded, and the monitoring device terminating the event notification also becomes overloaded.

The above-mentioned event notification is a notification provided for the monitoring device to manage the monitored device in real time, and is a notification issued by the monitored device for each change in its own defined state. In the communication between the monitoring device and the monitored device, once any change in the status of the monitored device occurs, the status change of the related standard monitored device occurs continuously. As a result, a redundant event notification is generated. It was occurring in large quantities.

A retrospective study of the prior art for solving the above-mentioned problem from a past patent application shows that Japanese Patent Application Laid-Open No. 4-34528 first discloses a technique for deleting the number of events to be notified. A technique for storing a judgment reference value in a memory of a monitored device, a comparing unit comparing an alarm level value of each event with a judgment reference value stored in the memory, and reducing events having a low alarm level; There is disclosed a technology in which a reference value setting unit of the device changes the reference value to an optimum value according to the number of occurrences of an event, and notifies the monitoring device of the change.

Japanese Patent Application Laid-Open No. Hei 7-235966 describes a method of transferring an event report from a monitored device to a monitoring device in an OSI (Open System Interconnection) network (ISO / IEC10164-5). INFORMATION T
ECHNOLOGY-OPEN SYSTEMS INTERCONNECTION-SYSTEMS MAN
AGEMENT: EVENT REPORT MANAGEMENT FUNCTION) with the aim of improving the conventional method. For each generation request of the event transfer screen from each application program in the monitoring device, do not generate the event transfer screen in the monitored device. Instead, a technique for generating an internal filter in a monitoring device is disclosed.

[0008]

However, in the prior art, since one monitoring device manages a plurality of monitored devices in a network management system, the number of monitored devices increases and the number of monitored devices increases. As described above, a large amount of event notification occurs, the communication message of the inter-device communication becomes overloaded, and the monitoring device terminating the event notification becomes overloaded. At this time, there is a problem that the real-time processing cannot be ensured for the event notification realizing the real-time processing.

In addition, the monitoring device has a problem that the monitoring device cannot execute the processing tasks that the monitoring device should originally perform because the event notification transmitted from the monitored device is large as described above.

In the technology disclosed in Japanese Patent Application Laid-Open No. 4-34528, it is necessary to manage the alert level.
Since the reference value for determining the event is set on the monitored device side, the current workload of the monitoring device is not considered.

In the technique disclosed in Japanese Patent Application Laid-Open No. Hei 7-235966, the load of event processing on the monitored device is shifted to the monitoring device.

The present invention has been made in view of the above-described problems in the conventional network management system, and has reduced the number of times of notification of a status change of a monitored device from the monitored device to the monitoring device. It is an object of the present invention to provide a network management system capable of performing such operations.

[0013]

A network management system according to the present invention includes a monitoring device, and a plurality of monitored devices connected to the monitoring device via a network, wherein the internal state of the monitored device is determined by the monitoring device. A network management system, wherein a monitored device detects an event at a predetermined fixed period as an event, and after the detected event is determined by the monitored device, a confirmed event notification is reported to the monitoring device. However, the internal state is periodically detected, state detection means for outputting an event, state change detection means for detecting a change in the event and outputting a change detection signal, based on the change detection signal, A change that detects whether or not the changed state has continued for a predetermined period of time after the state change.
State continuation detecting means, and changes after the state change
When the condition after it has been detected has continued the predetermined time, to confirm the state after the change as a determined state, said shape
After the state change, the state after the change continues for the predetermined time
When it is detected that there is no
Means not determined as a defined state, there is a status change
Detected that the state after the change has continued for the predetermined time
Transmitting means for outputting the confirmed state as a confirmed event notification only when the confirmation is made.

Further, in the network management system according to the present invention, in the above-mentioned network management system, the predetermined time is given from the monitoring device to the monitored device.

Furthermore, a network management system according to the present invention is characterized in that, in the above-mentioned network management system, the predetermined time is prepared for each of the changed states.

Further, in the network management system according to the present invention, in the above-mentioned network management system, the internal state includes an alarm occurrence state and an alarm recovery state.

A network management method according to the present invention is a network management method for a monitoring device and a plurality of monitored devices connected to the monitoring device via a network, wherein the monitored device has Periodically detecting an internal state, a state detection step of outputting an event, and the monitored device detects a change in the event and outputs a change detection signal,
Based on the change detection signal, the monitored device determines whether the state after the change has continued for a predetermined time after the state change.
A change state continuation detecting means for detecting the state change;
Detected that the state after the change has continued for the predetermined time
When it is, it determines the state after the change as an established state
After the state change, the state after the change is the predetermined state.
When it is detected that the time has not continued, the change
A step of not determining a later state as a confirmed state, and a state after the monitored device has changed after the state change.
And transmitting the confirmed state as a confirmed event notification only when it is detected that the predetermined time has elapsed .

Further, the network management method according to the present invention is characterized in that, in the above-mentioned network management method, the monitoring device further includes a step of giving the predetermined time to the monitored device.

Further, in the network management method according to the present invention, in the above-described network management method, the predetermined time is prepared for each of the changed states.

Further, in the network management method according to the present invention, in the above network management method, the internal state includes an alarm occurrence state and an alarm recovery state.

[0021]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A network management system according to the present invention provides a real-time monitoring device for managing a monitored device in real time. (The status changes from recovery to recovery, and the recovery status of the alarm is not failed.) In the communication between the monitoring device and the monitoring device by the EVENT notification issued by the monitoring device to the monitoring device, the status change of the monitoring device There is intended to reduce the processing load in the monitoring device and the messaging load and monitoring device between the monitored devices as they occur.

Normally, since one monitoring device manages a plurality of monitored devices in a network management system, a large number of EVENT notifications are generated if the number of monitored devices increases or a large number of status changes occur in the monitored devices. Occurs, the communication message of the inter-device communication becomes overloaded, and the monitoring device terminating the EVENT notification becomes overloaded. At this time, the EVENT notification realizing the real-time processing cannot secure the real-time property. Then, because of the large number of EVENT notifications transmitted by the monitored device, the monitoring device cannot perform the processing itself that should be performed by the monitoring device.

In order to reduce this processing load in the monitoring device, the monitored device does not transmit, as an EVENT notification, an alarm that repeats occurrence and recovery due to a defined state change of the monitored device according to the setting of the monitoring device. The communication message load between the monitoring device and the monitored device is reduced.
At the same time, since the communication message load is reduced, the processing load on the monitoring device is also reduced.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

[Embodiment 1] Referring to FIG. 1, a monitoring device 1 and a monitored device 2 are connected by a communication path 3, and the monitored device 2 includes an alarm detecting unit for detecting a self-alarm at a fixed period. Determining unit 20 for determining the output of the alarm detecting unit
And a transmission unit 19 that transmits the output of the determination unit 20 as a final event to the monitoring device 1 via the communication path 3.

Referring to FIG. 2, the monitored device 2 is periodically in an alarm state (alarm occurrence state "1", alarm recovery state "0", or non-failure state "0" (note that the non-failure state and the alarm recovery state). alarm status change by comparing the alarm detector 11, an alarm signal 100 _n-1 which is detected before once the alarm signal 100 _n for outputting detected and a detection result equal)) as an alarm signal 100 _n and ( A change detection unit that outputs a change detection signal 200 indicating the presence or absence of a state change from an unfailed state “0” to an alarm occurrence state “1” and a change from an alarm occurrence state “1” to an alarm recovery state “0” 12, a buffer 13 for storing the alarm detection signal 100 _n-1 which is the result of the previous detection.

The control unit 14 compares the alarm detection signal 200 with a continuation signal 300 _n-1 which is a continuation signal indicating the processing result of the alarm change and which is the immediately preceding continuation signal. It has a buffer 15 for storing the signal 300 _n-1 .

Further, a buffer 17 for storing the number of continuations of the same alarm state is counted. An internal counter counts the number of continuations of the same alarm state. Confirmation signal 400
A detection memory 16 for sampling the alarm signal 100 _n when the determination signal 400 becomes active and storing the sampled alarm signal 100 _n as the determination alarm signal 500; The transmission unit 19 transmits the signal 500 to the monitoring device as an EVENT notification with the activation of the confirmation signal 400 as a trigger. Note that the fixed detection unit 16 stored in the buffer 17
The monitoring apparatus 1 may give the number of times of the same alarm state to be compared with each other through the communication path 3.

The change detection signal output from the change detection section 12 becomes active when the alarm signal 100 _n and the alarm signal _n-1 are different. When the change detection signal 200 becomes active, the continuation signal 300 _n output from the controller 14 becomes active continuously thereafter, and when the determination signal 400 becomes active, it becomes inactive thereafter. Therefore, the continuation signal 30
The active period of the 0 _n is when the alarm state changes as its beginning, to the time when the determination signal 400 becomes active and its final stage. That is, the continuation signal 300
_n is active from the time when the alarm state is changed until the number of times the same alarm state continues becomes the number of times stored in the buffer 17. The continuation signal 300 _n-1 output from the buffer 15 is used by the control unit 14 in an auxiliary manner to generate the continuation signal 300 _n . Control unit 14
Each signal 600, 700 to be input to confirm the detection unit 16 from are those with variation detection signal 200 _n similar to continuation signal 300 _n (may be the same), finalized detector 16
Is used as a load signal for loading a value 1 into a counter that counts the number of times the alarm state after the change continues after the change of the alarm state, and as an enable signal of the counter.

Accordingly, when the alarm state alternately repeats the alarm occurrence state and the alarm recovery state, the count value of the counter in the confirmation detection section 16 is not incremented, and the confirmation signal 400 does not become active. On the other hand, if the confirmation signal 400 becomes active as a result of the alarm state having been in any state and continuing the state a predetermined number of times, the count value of the counter in the confirmation detection unit 16 is reset, and thereafter is not counted up.

FIG. 3 shows the case where the alarm state changes from the alarm recovery state to the alarm occurrence state at time T101 and the alarm state changes from the alarm occurrence state to the alarm recovery state at time T104. 6 is a timing chart showing changes in each signal.

At time T101, the alarm signal 10
When 0 _n changes from LOW to HIGH, the change detection signal 200 becomes active (HIGH), and at the same time, the continuation signal 300 _n becomes active (HIGH). At this time, the count value of the counter in the confirmation detection unit 16 is set to 1. Assuming that the value 3 is held in the buffer 17, the count value 1 is different from the value 3 in the buffer 17, so that the determination signal 400 remains inactive (LOW).

[0033] At the time T102, so continue the alarm signal 100 _n is the time T101 is HIGH, change detection signal 200 while becomes inactive (LOW), continuation signal 300n remains active. Therefore, the count value of the counter in the fixed detection unit 16 changes from 1 to 2. At this time, the count value 2 and the buffer 17
Since the value 3 in is different, the confirmation signal 400 remains inactive (LOW).

At time T103, the alarm signal 100 _n is HIGH following time T102, so that the change detection signal 200 becomes inactive (LOW), while the continuation signal 300 _n remains active. Therefore, the count value of the counter in the fixed detection unit 16 changes from 2 to 3. At this time, the count value 3 and the buffer 17
Since the value 3 is equal, the determination signal 400 becomes active (HIGH). The alarm generation state is written into the alarm storage memory by the activated determination signal, and the transmission unit 19 notifies the monitoring device 1 of a determination alarm signal indicating the alarm generation state as an EVENT notification signal.

At time T104, the decision signal 400 becomes active at time T103, so that the count value of the counter of the decision detection unit 16 is reset to zero.

From time T105 to time T108, the monitored device 2 operates in the same manner as from time T101 to time T104. At time T107, the transmitting unit 19 uses a confirmed alarm signal indicating an alarm recovery state as an EVENT notification signal. Notify the monitoring device 1.

FIG. 4 is a timing chart showing a change in each signal in the monitored device when the alarm state alternates between the alarm recovery state and the alarm generation state at each time.

At time T201, the alarm signal 10
When 0 _n changes from LOW to HIGH, the change detection signal 200 becomes active (HIGH), and at the same time, the continuation signal becomes active (HIGH). At this time, the count value of the counter in the confirmation detection unit 16 is set to 1. Assuming that the value 3 is held in the buffer 17,
Since the count value 1 and the value 3 in the buffer 17 are different, the confirmation signal 400 remains inactive (LOW).

At time T202, the alarm signal 10
When 0 _n changes from HIGH to LOW, the change detection signal 200 becomes active (HIGH) again,
The continuation signal becomes active (HIGH) again. At this time, the count value of the counter in the fixed detection unit 16 is set to 1 again. Assuming that the value 3 is held in the buffer 17, since the count value 1 is different from the value 3 in the buffer 17, the determination signal 400 is inactive (LOW).
Remains.

After time T203, time T201, T2
02 is repeated. Therefore, the value of the counter in the confirmation detection unit 16 is always 1, and the confirmation signal 400 is not activated. Therefore, the transmission unit 19 uses the confirmation alarm signal indicating any alarm state as an EVENT notification signal as a monitoring device. No one is notified.

[Second Embodiment] FIG. 5 shows a configuration of a monitored device 2 according to a second embodiment. The difference from the monitored device 2 of the first embodiment shown in FIG. 2 is that a buffer 21 and a switch 22 are added, and the switch 22 is controlled by an alarm signal 100 _n .

The buffer 17 stores the number of times the alarm occurrence state continues until the alarm occurrence state is determined.
The buffer 21 stores the number of times the alarm recovery state continues until the alarm recovery state is determined. The contents of these buffers may be set by the monitoring device 1 via the communication path 3.

For example, by storing the value 3 in the buffer 17 and storing the value 5 in the buffer 21, the alarm state changes from the alarm recovery state to the alarm occurrence state, and thereafter, the alarm occurrence state continues three times. If you do
When the alarm occurrence state is determined, on the other hand, when the alarm state changes from the alarm occurrence state to the alarm recovery state, and the alarm recovery state continues five times thereafter, the alarm recovery state is determined. This makes it possible to weight each alarm state.

Another configuration for realizing the present embodiment is as follows.

The switch 22 is deleted so that the output of the buffer 21 and the output of the buffer 17 are input to the fixed detection unit 16.

The change detection signal 2 output from the change detection unit 12
00 is a change state signal consisting of 2 bits, and this value is "
00 "indicates that there is no alarm change in which a certain alarm recovery state continues twice consecutively, and this value is" 0 ".
When it is "1", it indicates "no alarm change in which a certain alarm occurrence state continues twice consecutively", and this value is "1".
When it is "0", it indicates "there is an alarm change in which the alarm occurrence state changes to the alarm recovery state", and when this value is "11", "there is an alarm change in which the alarm recovery state changes to the alarm occurrence state". As shown.

The control unit 14 determines the selection signal indicating whether the current continuation state is the alarm occurrence state or the alarm recovery state, by reflecting the value of the change state signal in addition to the signals 600 and 700. Output to the detection unit 16. The confirmation detection unit 16 internally includes two counters and two comparators, and one input terminal of each comparator is connected to a buffer 17.
And the value from the buffer 21 are input. The confirmation detection unit 16 further includes a switch, selects an output of one of the comparators according to the selection signal, and outputs the selected output as a confirmation signal 400.

[0048]

As described above, according to the network management system of the present invention, when an alarm is repeatedly generated and recovered from a monitored device, the monitoring device and the monitored device can communicate with each other. It is possible to reduce the communication message load between the monitored devices.

Further, the load of the processing related to the communication message of the monitoring device is reduced, and the monitoring device can concentrate on the original processing work.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an overall configuration of a network management system according to an embodiment of the present invention.

FIG. 2 is a block diagram illustrating a configuration of a monitored device 2 of the network management system according to the first embodiment of the present invention.

FIG. 3 is a time chart showing an operation based on a specific example of a self-state change detected by the monitored device 2 of the network management system according to the embodiment of the present invention.

FIG. 4 is a time chart showing an operation based on another specific example of the self-state change detected by the monitored device 2 of the network management system according to the embodiment of the present invention.

FIG. 5 is a block diagram illustrating a configuration of a monitored device 2 of the network management system according to the second embodiment of the present invention.

[Explanation of symbols]

 REFERENCE SIGNS LIST 1 monitoring device 2 monitored device 3 communication path 11 alarm detection unit 12 change detection unit 13, 15, 17, 21 buffer 14 control unit 16 confirmation detection unit 18 alarm storage memory 19 transmission unit 20 determination unit

──────────────────────────────────────────────────続 き Continued on the front page (58) Field surveyed (Int.Cl. ⁷ , DB name) H04L 29/14 H04L 12/24 H04L 12/26

Claims (8)

(57) [Claims] 1. A monitoring device, comprising: a plurality of monitored devices connected to the monitoring device via a network, wherein the monitored device detects an internal state of the monitored device as an event at a predetermined constant period. And after the detected event is determined by the monitored device, a network management system that reports a confirmed event notification to the monitoring device,
The monitored device periodically detects the internal state and outputs an event; a state change detecting unit that detects a change in the event and outputs a change detection signal; and the change detection signal. Based on the status change, it detects whether or not the status after the change has continued for a predetermined period of time.
Continuation detection means, and the state after the change has occurred after the state change is the predetermined time
When the continuation is detected , the state after the change is determined as a determined state, and the state is changed after the state change.
It is detected that the later state has not continued for the predetermined time.
The changed state is not
And means have, the state after the change from if there is the change in state the predetermined time
A transmission unit that outputs the confirmed state as a confirmed event notification only when it is detected that the continuation is continued . 2. The network management system according to claim 1, wherein the predetermined time is given from the monitoring device to the monitored device. 3. The network management system according to claim 1, wherein the predetermined time is prepared for each state after the change. 4. The apparatus according to claim 1, wherein the internal state includes an alarm occurrence state and an alarm recovery state.
The network management system according to claim 1. 5. A monitoring device and a network management method for a plurality of monitored devices connected to the monitoring device via a network, wherein the monitored device periodically checks an internal state of the monitored device. A state detection step of detecting and outputting an event; a state change detection step of the monitored device detecting a change in the event and outputting a change detection signal; and the monitored device outputs the change detection signal. Based on the state change, it is determined whether the changed state has continued for a predetermined time.
A change state continuation detecting means for detecting, and the state after the change after the state change is the predetermined time
When the continuation is detected , the state after the change is determined as a determined state, and the state is changed after the state change.
It is detected that the later state has not continued for the predetermined time.
The changed state is not
And step have, the monitored device, after the change from a said status change
When the state is detected to have continued for the predetermined time.
Network management method characterized by and a transmission step of outputting only the determined state as determined event notification. 6. The network management method according to claim 5, further comprising the step of the monitoring device giving the predetermined time to the monitored device. 7. The network management method according to claim 5, wherein the predetermined time is prepared for each state after the change. 8. The apparatus according to claim 5, wherein the internal state includes an alarm occurrence state and an alarm recovery state.
The network management method according to any one of the preceding claims.