JP4343526B2 - ERROR MONITORING DEVICE, ERROR MONITORING METHOD, COMPUTER-READABLE STORAGE MEDIUM, AND PROGRAM - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an error monitoring apparatus and error monitoring method for monitoring error logs of a plurality of data processing apparatuses that can communicate via a network, a computer-readable storage medium, and a program.
[0002]
[Prior art]
In recent years, personal computers have rapidly spread due to price reductions, and a lot of application software has been developed and sold.
[0003]
Many application softwares do not operate alone, cooperate with an operating system, and operate in cooperation with other software / hardware.
[0004]
Therefore, even if an error occurs while using certain application software, there are various factors such as other related software, network and hardware, not the application used at the front itself. It takes a lot of time.
[0005]
As a coping method when such an error occurs, the user himself / herself voluntarily connects to a support site such as the Internet to obtain a solution.
[0006]
On the other hand, the support site is designed to return answers to inquiries, but in order to make inquiries, it is necessary to be familiar with the knowledge of each product and the installed system environment. In addition, it is not uncommon for actual cases to take a lot of time and effort.
[0007]
Japanese Patent Application Laid-Open No. 8-314763 proposes a log information analysis device that analyzes the contents of a log file and notifies necessary information according to a log information reference person in an easily understandable content when necessary. Yes.
[0008]
[Patent Document 1]
JP-A-8-314763
[0009]
[Problems to be solved by the invention]
However, the above method does not take into account the occurrence of errors in multiple software. As described above, in an environment where multiple software and hardware are operating in conjunction, It is difficult to identify.
[0010]
In addition, it is necessary to register a possible error handling method in advance, and when a handling method cannot be obtained, there is no further solution, and there is a problem that it is not possible to shift to an error solving operation.
[0011]
The present invention has been made to solve the above problems, and the object of the present invention is , Double Error management that flexibly responds to various and complex application software errors that occur in multiple monitored devices by centrally managing effective and appropriate countermeasures against application software errors consisting of combinations of factors An object of the present invention is to provide an error monitoring apparatus and an error monitoring method, which can be clearly shown to a system administrator, and a computer-readable storage medium and program.
[0012]
[Means for Solving the Problems]
The present invention is an error monitoring device that monitors error logs of a plurality of data processing devices that can communicate via a network, and an acquisition unit that periodically acquires error log files stored in the data processing device; A handling method database that stores and manages the name of the error log file and a handling method of an error corresponding to one error message included in the error log file in association with a handling method ID, and is included in the error log file One If there are multiple ways to deal with the error message, A combination of the plurality of countermeasures and a countermeasure included in the plurality of countermeasures, and a countermeasure result indicating one or more countermeasures that have been implemented to resolve the error A combination log database for storing and managing the association ID by combination ID, and the number of error coping methods acquired by searching the coping method database using error messages included in all error log files acquired by the acquiring unit If there is a plurality, the combination log database Above Corresponds to the combination of multiple error handling methods obtained as a result of the search Action result And when the number of error handling methods obtained by searching the handling method database based on error messages included in all error log files obtained by the obtaining unit is less than two. Notifies a predetermined notification destination of a handling method ID corresponding to the handling method of the error acquired by searching the handling method database. On the other hand, if there are a plurality of handling methods of the error, the searching unit Searched by Combination ID And a notification means for notifying a predetermined notification destination.
[0022]
DETAILED DESCRIPTION OF THE INVENTION
FIG. 1 is a system configuration diagram illustrating an example of a data processing system to which the error monitoring apparatus according to the first embodiment of the present invention can be applied.
[0023]
In FIG. 1, reference numerals 1 to 3 denote maker Web servers, which are managed individually by manufacturers who develop and sell various applications, and are configured to be able to communicate with the error monitoring device 5 via the Internet 4.
[0024]
The error monitoring device 5 is configured to be able to communicate with the monitored devices 7 and 8 via the local network 6.
[0025]
Reference numeral 11 denotes a keyword database, which manages log files and keywords for each keyword ID in the data structure shown in FIG. Reference numeral 12 denotes a coping method database, which manages information on coping methods for each coping method ID in the data structure shown in FIG.
[0026]
A combination log database 13 manages a combination of a plurality of countermeasures for each combination ID in the data structure shown in FIG. Reference numeral 14 denotes a Web server database that manages information related to a URL file for acquiring a coping method for each URL_ID in the data structure shown in FIG. Each of the databases 11 to 14 includes, for example, a storage unit configured by a hard disk and a computer that responds to a data request. The error monitoring device 5 refers to each of the databases 11 to 14 and determines an error handling method on the network. To an administrator PC (not shown).
[0027]
7 and 8 are devices to be monitored, which activate various applications installed on a hard disk or the like with a predetermined OS and perform desired data processing. The monitored device 7 stores and manages the log file 9 with a hard disk or the like (not shown). Similarly, the monitored device 8 stores and manages the log file 10 using a hard disk (not shown).
[0028]
FIG. 6 is a block diagram for explaining the configuration of the error monitoring device 5 shown in FIG. In the system shown in FIG. 1, a case where the databases 11 to 14 are configured as external devices is shown, but in the present embodiment, it is constructed in an external storage device (storage unit) 29 connected via an I / F. Indicates when to do.
[0029]
In FIG. 6, reference numeral 21 denotes a communication unit, which communicates with the monitored devices 7 and 8 via the network 6 and a predetermined protocol between the manufacturer Web servers 1 to 3 or a commercial server (not shown) via the Internet 4. Communication processing. A control unit 22 includes a CPU, a RAM, and a ROM, loads an OS stored in the storage unit 29 onto the RAM, and loads various applications from the storage unit 29 onto the RAM to perform various data processing and An error monitoring process according to the present invention is performed.
[0030]
In the storage unit 29, the keyword database 29-1 is equivalent to the database 11 shown in FIG. 1, and manages log files and keywords for each keyword ID in the data structure shown in FIG.
[0031]
Reference numeral 29-2 denotes a coping method database, which manages information on coping methods for each coping method ID in the data structure shown in FIG.
[0032]
Reference numeral 29-3 denotes a combination log database, which manages combinations of a plurality of countermeasures for each combination ID in the data structure shown in FIG. Reference numeral 29-4 denotes a Web server database that manages information related to a URL file for acquiring a coping method for each URL_ID in the data structure shown in FIG.
[0033]
Each of the databases 29-1 to 29-4 is configured by, for example, a hard disk, and the control unit 22 acquires an error log file from the monitored device 7 or the monitored device 8, and each of the databases 29-1 to 29-4. , An error handling method is notified to an administrator PC (not shown) on the network.
[0034]
Here, each database is described as a separate database, but may be configured as one database that can manage items for each ID.
[0035]
Reference numeral 29-5 denotes an acquired information storage area in which an error log file is temporarily stored from the monitored device 7 or the monitored device 8.
[0036]
A storage control unit 28 controls a database reference request to the storage unit 29, database update, and the like. Reference numeral 30 denotes an input unit, which includes a keyboard and a pointing device.
[0037]
An error log monitoring unit 24 acquires the error log files 9 and 10 from the monitored device 7 or the monitored device 8 on the network 6 at a preset timing or at a designated timing. Reference numeral 25 denotes a DB search unit. The DB search unit 25 searches the databases 29-1 to 29-4 from the monitored device 7 or the monitored device 8 on the network 6 based on the error log files 9 and 10. The result of the search via the communication unit 21 is notified to the administrator PC of the administrator on the network 6. A display control unit 26 controls data display on the display unit 27.
[0038]
FIG. 7 is a flowchart showing an example of a first data processing procedure in the error monitoring apparatus according to the present invention. The control unit 22 shown in FIG. 6 loads a monitoring processing program from the storage unit 29 or the like onto the RAM. Corresponds to the procedure to be executed. In addition, S301-S316 show each step.
[0039]
First, in step S301, according to a preset schedule, for example, it is monitored whether there is an error log file on the history area managed in the storage device in the monitored device 7, and in step S302, an error is detected. Whether or not there is a log is determined for the log file written in the log file name of the keyword DB shown in FIG. For example, if the log file is of a type that can be created when an error occurs, the existence of the error log is determined based on whether there is an error log file, and when an error occurs, an error occurs in the existing file as shown in FIG. If it is an error log file of the type in which the contents are appended, the presence / absence of an error log is determined by whether there is an error log file and there is a newly written part. If it is determined that there is no error log, the process returns to step S301, and the error log file is monitored again according to the schedule interval.
[0040]
On the other hand, if it is determined in step S302 that there is an error log, the process proceeds to step S303, where the DB search unit 25 searches whether or not the set keyword is included in the keyword DB 29-1, and step S304 is executed. Then, it is determined whether or not the keyword is hit.
[0041]
In the present embodiment, most log files are written in text, so that a text-based search can be easily performed. If it is not in text format, it can be handled by using a separately searchable program. In the present embodiment, “?” In the keyword column shown in FIG. 2 is an arbitrary character.
[0042]
On the other hand, if it is determined in step S304 that the keyword has been hit, the process proceeds to step S305, in which the DB search unit 25 searches the coping method DB 29-2 having the data structure shown in FIG. It is determined whether there is an error message corresponding to.
[0043]
For example, in Step S304, if there is an error message “err.200” in SoftA \ apl.log, the keyword “Err. ???” is hit, so it becomes “keyword hit” and the countermeasure DB is searched.
[0044]
In this case, since only “err.204” is registered in the SoftA \ apl.log of the handling method DB 29-2, the error message is not hit in step S306.
[0045]
On the other hand, if it is determined in step S304 that the keyword has not been hit, it becomes an unknown problem. Therefore, the process proceeds to step S315, and that fact is notified to the administrator PC (not shown) via the network 6, The process proceeds to step S308.
[0046]
If it is determined in step S306 that the error message has not been hit, the error message is an unknown error message. In step S314, the Web server reference processing routine is executed, and the process proceeds to step S308.
[0047]
On the other hand, if it is determined in step S306 that the error message has been hit, in step S307, the corresponding handling method ID is acquired from the handling method DB 29-2 having the data structure shown in FIG. Store in -5.
[0048]
Next, in step S308, it is determined whether or not all keywords in the error log file obtained in step S302 have been processed, and if it is determined that there are remaining unsearched keywords, the process returns to step S303. Repeat the same process.
[0049]
On the other hand, if it is determined in step S308 that all keywords have been processed, it is determined in step S309 whether all error log files obtained in step S301 have been processed. Is determined to remain, the process returns to step S302 and the same process is performed again.
[0050]
As a result, all error log files and keywords have been processed.
[0051]
On the other hand, if it is determined in step S309 that all error log file searches have been completed, it is determined in step S310 whether the number of countermeasure method IDs acquired in step S307 is plural (two or more). If it is determined that the number is two or more, in step S311, the DB search unit 25 searches the combination log DB 29-3 having the data structure shown in FIG.
[0052]
Then, in step S312, it is determined whether there is a combination of the same IDs with the handling method IDs indicated by the number of acquired handling method IDs.
[0053]
For example, if it is determined that the handling method ID acquired in step S307 is “th001” and “th002” shown in FIG. 3, “ku001” in the combination log DB 29-3 having the data structure shown in FIG. Since “ku004” is hit, the above four ID numbers (“th001”, “th002”, “ku001”, “ku004”) are notified to the administrator PC (not shown) via the network 6 in step S313. This process is terminated.
[0054]
Here, the configuration may be such that other items (for example, coping methods) required together with the ID number are notified.
[0055]
Also, if the plurality of acquired countermeasure IDs are “th001” and “th004”, since there is no combination of the same IDs, the determination in step S312 is NO, and the process proceeds to step S316, where the corresponding ID number (“th001 "" Th004 ") is notified to the administrator PC (not shown) via the network 6, and the process is terminated.
[0056]
In this case as well, the configuration may be such that other items (for example, countermeasures) required together with the ID number are notified.
[0057]
If it is determined in step S310 that the number of countermeasure method IDs is less than two, the process proceeds to step S316, the same process is performed, and the process ends.
[0058]
FIG. 9 is a flowchart showing an example of a second data processing procedure in the error monitoring apparatus according to the present invention. The control unit 22 shown in FIG. 6 loads a monitoring processing program from the storage unit 29 or the like onto the RAM. This corresponds to the detailed procedure of the Web server reference processing routine of step S314 shown in FIG. S401 to S412 indicate each step.
[0059]
First, in step S401, the Web server DB 29-4 having the data structure shown in FIG. 5 is referred to.
[0060]
Then, in step S402, the log file item on the Web server DB 29-4 is referred to, and it is determined whether or not there is a corresponding reference URL. In step S412, the fact that the error has occurred is notified as a result to the administrator PC (not shown) via the network 6 (S411), and this process ends.
[0061]
On the other hand, when it is determined in step S402 that the corresponding reference URL exists, in step S403, the communication unit 21 performs connection processing to the Web server of the URL set via the Internet 4, and in step S404, the connection is established. It is determined whether confirmation (connection OK) has been obtained. If the connection is NG, the process proceeds to step S412 as an error, and the result is sent to the administrator PC (not shown) via the network 6. And this processing is terminated.
[0062]
On the other hand, if it is determined in step S404 that the connection confirmation (connection OK) has been obtained, a coping method is searched on the connected site based on the keyword in step S405 (the same keyword as in step S305 shown in FIG. 7). Search process).
[0063]
In step S406, it is determined whether there is a coping method corresponding to the keyword. If it is determined that there is a coping method corresponding to the keyword, in step S407, the acquired information storage area of the storage unit 29 of the error monitoring device. 29-5 and proceed to step S408.
[0064]
In the present embodiment, the determination method in step S406 includes a method of searching whether there is a part including the countermeasure method keyword in the Web server DB 29-4.
[0065]
In other words, it may be a method of downloading an html file containing the keyword by ftp or the like, or collect all information linked from the corresponding site for later management by the administrator. Information may be registered in the reference URL of the Web server DB 29-4. Further, when the storage capacity is insufficient, the URL itself may be saved.
[0066]
On the other hand, if it is determined in step S406 that there is no coping method, the process proceeds to step S408.
[0067]
Then, in step S408, it is searched whether there is patch information such as a software correction program. In step S409, it is determined whether there is a patch file corresponding to the keyword. In step S410, the information is stored in the acquired information storage area 29-5 of the storage unit 29 of the error monitoring apparatus, and the process proceeds to step S411.
[0068]
In this embodiment, as a determination method in step S409, many manufacturers often name patch files according to a certain rule. Therefore, the patch file keyword in the Web server DB in which the file name is set is included. There is a method of searching whether there is a part that is. A method of downloading the corresponding patch file by ftp or the like may be used, or only the URL may be stored.
[0069]
On the other hand, if it is determined in step S409 that there is no patch information, the process proceeds to step S411.
[0070]
In step S411, the results of the processes performed from step S401 to step S410 and step S412 are notified as a result to an administrator PC (not shown) via the network 6, and the process ends.
[0071]
FIG. 10 is a flowchart showing an example of a third data processing procedure in the error monitoring apparatus according to the present invention, and corresponds to the database registration acceptance processing procedure by the storage control unit 28 shown in FIG. S501 to S506 indicate each step.
[0072]
11 and 12 are diagrams showing an example of the database update menu screen displayed on the display unit 27 shown in FIG. 6. FIG. 11 corresponds to the main update menu screen, and FIG. 12 is shown in FIG. This corresponds to the update menu screen of the combination log data selected on the main update menu screen.
[0073]
In FIG. 11, SB1 to SB4 are selection bars. When the selection bar SB1 is selected, an update menu screen (not shown) for the keyword database 29-1 is displayed on the display unit 27. When the selection bar SB2 is selected, an update menu screen (not shown) for the coping method database 29-2 is displayed on the display unit 27. When the selection bar SB3 is selected, an update menu screen (shown in FIG. 12) for the combination log database 29-3 is displayed on the display unit 27. When the selection bar SB4 is selected, an update menu screen (not shown) for the Web server database 29-4 is displayed on the display unit 27.
[0074]
In FIG. 11, B1 indicates a decision button, and B2 indicates an end button. In FIG. 12, B11 indicates a decision button, B12 indicates a cancel button, and B13 indicates an end button.
[0075]
First, in step S501, the storage control unit 28 displays a database update menu (not shown) on the display unit 27, and selects an instruction to update any of the databases 29-1 to 29-4 shown in FIG. (S502), NO, for example, if it is determined that the end button B2 provided in the database update menu shown in FIG. 11 is pressed, this processing is terminated.
[0076]
On the other hand, if it is determined in step S502 that any of the selection bars SB1 to SB4 shown in FIG. 11 has been selected, an input menu screen corresponding to the selected selection bar in step S503, for example, shown in FIG. An input menu screen is displayed on the display unit 27.
[0077]
In the example shown in FIG. 12, after inputting items such as a terminal number, status, handling method, handling date, handling result, and the like from the input unit 30, in step S504, the button B11 shown in FIG. If it is determined whether an instruction to determine the input content has been made and it is determined that the button B11 has been pressed, in step S505, in this case, it is registered in the combination log data 29-3. Update the contents of the database and finish the process.
[0078]
On the other hand, it is determined in step S504 whether the button B11 is not pressed and the button B12 for instructing cancellation or the button B13 for instructing termination is instructed. In step S506, it is determined whether the termination is instructed. If it is determined that the button B13 has been instructed to be pressed, this process ends.
[0079]
On the other hand, if it is determined in step S506 that the button B12 has been instructed to be pressed, the process returns to step S501, and the update process of another database is continued.
[0080]
As a result, the administrator who receives the notification in the flowcharts of FIGS. 7 and 8 updates the contents of the databases 29-1 to 29-4 shown in FIG. 6 and determines the appropriate error log processing. Can be optimized. Hereinafter, FIGS. 13 and 14 show the update status of the countermeasure database and the combination log database.
FIG. 13 is a diagram showing an update state of the coping method database shown in FIG.
[0081]
FIG. 14 is a diagram showing an update state of the combination log database shown in FIG.
[0082]
FIG. 15 is a schematic diagram illustrating an example of a processing result notification screen from the monitoring server 5 to the administrator.
[0083]
In this embodiment, the notification to the administrator may be configured to notify the administrator PC (not shown) of the processing result notification screen shown in FIG. 15 via the network 6 or may be registered in advance. 15 may be configured such that the same contents as those shown in FIG. 15 are transmitted to the administrator's e-mail address by e-mail, and a pre-registered site (regular May be configured to notify the administrator by describing the contents shown in FIG.
[0084]
The configuration of the data processing program that can be read by the error monitoring apparatus according to the present invention will be described below with reference to the memory map shown in FIG.
[0085]
FIG. 16 is a diagram for explaining a memory map of a storage medium for storing various data processing programs that can be read by the error monitoring apparatus according to the present invention.
[0086]
Although not particularly illustrated, information for managing a program group stored in the storage medium, for example, version information, creator, etc. is also stored, and information depending on the OS on the program reading side, for example, a program is identified and displayed. Icons may also be stored.
[0087]
Further, data depending on various programs is also managed in the directory. In addition, a program for installing various programs in the computer, and a program for decompressing when the program to be installed is compressed may be stored.
[0088]
The functions shown in FIGS. 7, 9, and 10 in this embodiment may be performed by a host computer by a program installed from the outside. In this case, the present invention is applied even when an information group including a program is supplied to the output device from a storage medium such as a CD-ROM, a flash memory, or an FD, or from an external storage medium via a network. Is.
[0089]
As described above, a storage medium storing software program codes for realizing the functions of the above-described embodiments is supplied to the system or apparatus, and the computer (or CPU or MPU) of the system or apparatus stores the storage medium in the storage medium. It goes without saying that the object of the present invention can also be achieved by reading and executing the programmed program code.
[0090]
In this case, the program code itself read from the storage medium realizes the novel function of the present invention, and the storage medium storing the program code constitutes the present invention.
[0091]
As a storage medium for supplying the program code, for example, a flexible disk, a hard disk, an optical disk, a magneto-optical disk, a CD-ROM, a CD-R, a magnetic tape, a nonvolatile memory card, a ROM, an EEPROM, or the like is used. it can.
[0092]
Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) or the like running on the computer based on the instruction of the program code. It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the actual processing and the processing is included.
[0093]
Further, after the program code read from the storage medium is written to a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. It goes without saying that the case where the CPU or the like provided in the board or the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.
[0094]
The present invention is not limited to the above embodiments, and various modifications (including organic combinations of the embodiments) are possible based on the spirit of the present invention, and these are excluded from the scope of the present invention. is not.
[0095]
According to the above-described embodiment, since the error handling method is acquired in advance, the labor and time of the search when actually responding are reduced.
[0096]
In addition, it is possible to obtain a countermeasure for an error caused by a combination of specific applications that is difficult to obtain on the support site of the manufacturer.
[0097]
Also, by accepting the result of the handling, useful information can be accumulated and notified at the beginning of the error handling.
[0098]
【The invention's effect】
As explained above, according to the present invention, , Double Error management that flexibly responds to various and complex application software errors that occur in multiple monitored devices by centrally managing effective and appropriate countermeasures against application software errors consisting of combinations of factors The method can be specified to the system administrator.
[0099]
In addition, effective and appropriate countermeasures against application software errors consisting of combinations of multiple factors are centrally managed to flexibly handle various and complex application software errors that occur on multiple monitored devices. There is an effect that it is possible to freely construct an error handling system excellent in convenience that can clearly indicate the error handling method to the system administrator.
[Brief description of the drawings]
FIG. 1 is a system configuration diagram illustrating an example of a data processing system to which an error monitoring apparatus according to a first embodiment of the present invention can be applied.
FIG. 2 is a diagram illustrating a data structure of a keyword database shown in FIG.
FIG. 3 is a diagram for explaining a data structure of a handling method database shown in FIG. 1;
4 is a diagram for explaining the data structure of the combination database shown in FIG. 1; FIG.
FIG. 5 is a diagram for explaining the data structure of the Web server database shown in FIG. 1;
6 is a block diagram illustrating a configuration of the error monitoring apparatus illustrated in FIG. 1. FIG.
FIG. 7 is a flowchart showing an example of a first data processing procedure in the error monitoring apparatus according to the present invention.
8 is a diagram showing an example of an error log file stored in the monitored apparatus shown in FIG. 1. FIG.
FIG. 9 is a flowchart showing an example of a second data processing procedure in the error monitoring apparatus according to the present invention.
FIG. 10 is a flowchart showing an example of a third data processing procedure in the error monitoring apparatus according to the present invention.
11 is a diagram showing an example of a database update menu screen displayed on the display unit shown in FIG. 6. FIG.
12 is a diagram illustrating an example of an input menu screen for database update displayed on the display unit illustrated in FIG. 6;
FIG. 13 is a diagram showing an update state of the handling method database shown in FIG. 3;
14 is a diagram showing an update state of the combination log database shown in FIG. 4. FIG.
FIG. 15 is a schematic diagram illustrating an example of a processing result notification screen from the monitoring server to the administrator.
FIG. 16 is a diagram illustrating a memory map of a storage medium storing various data processing programs that can be read by the error monitoring apparatus according to the present invention.
[Explanation of symbols]
21 Communication Department
22 Control unit
23 System bus
24 Error log monitoring unit
25 DB search part
26 Display controller
27 Display section
28 Storage controller
29 Memory unit
29-1 Keyword Database
29-2 Solution Database
29-3 Combination Log Database
29-4 Web log database
29-5 Acquired information storage area
30 Input section

Claims (10)

An error monitoring device that monitors error logs of a plurality of data processing devices that can communicate via a network,
Acquisition means for periodically acquiring error log files stored in the data processing device;
A handling method database for storing and managing a name of the error log file and a handling method of an error corresponding to one error message included in the error log file in association with a handling method ID;
When there are a plurality of error handling methods for one error message included in the error log file, a combination of the plurality of handling methods and a handling method included in the plurality of handling methods are implemented. A combination log database that stores and manages a management result in association with a combination ID that indicates one or a plurality of countermeasures that have led to the resolution of the error ;
If the number of the Action retrieved by error Action get the database by the error message that is included in all the error log files acquired by the acquisition means is plural, the search from the combination log database A search means for searching for a response result corresponding to a combination of a plurality of error response methods acquired as a result of
If the number of error coping methods acquired by searching the coping method database based on error messages included in all error log files obtained by the obtaining unit is less than two, When a predetermined notification destination is notified of a coping method ID corresponding to an error coping method acquired by the search, and there are a plurality of error coping methods, the combination ID retrieved by the retrieval unit is A notification means for notifying a predetermined notification destination;
An error monitoring apparatus comprising: The error monitoring apparatus according to claim 1, wherein the combination log database stores and manages the countermeasure result in association with a terminal ID of the data processing apparatus.   And a Web server reference unit that searches a predetermined Web server based on the error log file acquired by the acquisition unit and acquires an effective response file when the search unit cannot search for an effective response method. The error monitoring apparatus according to claim 1.   The error monitoring apparatus according to claim 3, wherein the notification unit notifies a predetermined notification destination of information regarding an effective handling file acquired by the Web server reference unit. Monitors error logs of multiple data processing devices that can communicate via a network, and supports the names of error log files stored in the data processing devices and one error message contained in the error log file when the the error of Action that have addressed the Action database for storing managed in association with the method ID, Action of the plurality of error for a single error message included in the error log file, the plurality of address A combination of methods and a handling method included in the plurality of handling methods, and a handling result indicating one or a plurality of handling methods that have been implemented to resolve the error is stored in association with a combination ID. An error monitoring method in an error monitoring device having a combination log database to be managed,
An acquisition step of periodically acquiring an error log file stored in the data processing device;
When the search means has a plurality of error handling methods obtained by searching the handling method database based on error messages included in all error log files obtained by the obtaining step, the combination log a search step of searching the address result corresponding to the combination of Action of the plurality of error obtained as a result of the search from the database,
When the number of error coping methods acquired by searching the coping method database based on error messages included in all error log files acquired by the acquiring step is less than two, The coping method ID corresponding to the coping method of the error acquired by the coping method database search is notified to a predetermined notification destination. On the other hand, when there are a plurality of coping methods of the error, it is retrieved by the retrieval step. A notification step of notifying the predetermined combination destination of the combination ID ,
An error monitoring method comprising: 6. The error monitoring method according to claim 5, wherein the combination log database stores and manages the countermeasure result in association with a terminal ID of a data processing apparatus.   Web server reference that searches a predetermined Web server based on the error log file acquired by the acquisition unit and acquires an effective response file when the Web server reference unit cannot search for an effective response method by the search step 6. The error monitoring method according to claim 5, further comprising steps.   The error monitoring method according to claim 7, wherein the notifying step notifies a predetermined notification destination of information on an effective handling file acquired by the Web server referring step.   A computer-readable storage medium storing a program for causing a computer to implement the error monitoring method according to claim 5.   The program for making a computer implement | achieve the error monitoring method of any one of Claims 5-8.

Images