JP5267564B2 - Output program, output method, output device, troubleshooting support program, troubleshooting support method, and troubleshooting support device - Google Patents

Description

  The present invention relates to a troubleshooting support technique for ascertaining and solving a cause of a trouble occurring in an information system.

In troubleshooting information systems, resource performance information collected by an agent or the like is used as described in JP-A-6-222963 (Patent Document 1) and JP-A-2-91939 (Patent Document 2). Assistive technologies that present in a graph or table format have been proposed. Then, the system administrator investigates the location causing the trouble from the behavior of the displayed resource. At this time, the system administrator relies on his / her own experience and intuition to refer to the resource performance information related to the resource that is the starting point for investigating the cause of the trouble in order, and whether there is any behavior related to the trouble. Must be confirmed one by one.
JP-A-6-222963 Japanese Patent Laid-Open No. 2-91939

  However, since the number of resources related to each other becomes enormous when the information system becomes large, troubleshooting that relies on the experience and intuition of the system administrator takes a great deal of work to identify the resources related to the trouble. It will take. Moreover, unless the system administrator knows which resources are related to a specific resource, accurate troubleshooting cannot be performed. Furthermore, since the troubleshooting depends on the experience and intuition of the system administrator, the system administrator who has insufficient experience cannot easily investigate the cause of the trouble and solve it.

  Therefore, in view of the conventional problems, the present invention presents performance information for each resource information related to the resource information that is the starting point for investigating the cause of the trouble, taking into consideration the degree of relevance to the starting resource information, thereby troubleshooting. The purpose is to make it easy.

This troubleshooting support technology includes a related information database in which resource information related to each other is defined, and a performance information database in which performance information periodically collected in each device constituting the information system is stored. . Here, the resource information includes at least a resource name and its detailed information name. The performance information includes at least a collection date and time, a resource name and its detailed information name, and a performance value. Then, when there is a start instruction with the resource name and its detailed information name and date and time as the attached information as the starting point for investigating the cause of the trouble, it is identified by referring to the related information database and by the resource name and the detailed information name of the attached information Resource information and related resource information are extracted. Once the resource information is extracted, the performance information database is referred to, and the performance information related to each resource information is acquired within a predetermined period starting from the date and time of the attached information, and the average value and standard deviation of the performance values are obtained. calculate. After that, for the performance information related to each resource information, the relationship between the resource value of the attached information and the resource information specified by the detailed information name is calculated from the relationship between the performance value at the date and time of the attached information, the average value, and the standard deviation. Determine and present a thumbnail for each piece of performance information with the same degree of related influence.
In addition, when there is an instruction to output information related to a specific resource among a plurality of resources, a specific resource is generated based on the identification information and the related resource information assigned to each of the plurality of resources stored in the storage unit. Extract resources related to the resource. And the performance information which shows operation | movement of the extracted resource is acquired, and the performance information of the acquired resource is output by arrangement | positioning according to the content of the acquired performance information.

  According to this troubleshooting support technology, the system administrator can identify a resource that is highly likely to cause a trouble from the presented thumbnail without relying on his own experience and intuition. In addition, resource information related to the resource information specified by the attached information is automatically extracted with reference to the related information database, so the system administrator knows which resource is related to the specific resource. There is no need, and accurate troubleshooting can be performed. Furthermore, since the resource evaluation result is presented as a thumbnail, even a system administrator who lacks experience can easily investigate the cause of the trouble and solve it. Therefore, it is possible to reduce the load on the system administrator related to troubleshooting, and to perform troubleshooting not depending on the system administrator.

It is a block diagram explaining one Embodiment of a troubleshooting assistance apparatus. It is explanatory drawing of a resource relevant-information database. It is explanatory drawing of a resource structure information database. It is explanatory drawing of a performance information database. It is explanatory drawing of a temporary storage database. It is a flowchart explaining a performance information collection process. It is a flowchart explaining a resource information extraction process. It is a flowchart explaining a resource information extraction process. It is explanatory drawing of a list list. It is a flowchart explaining a resource evaluation process. It is a flowchart explaining a resource evaluation process. It is explanatory drawing of an evaluation list. It is a flowchart explaining an evaluation result presentation process. It is explanatory drawing of an evaluation result presentation screen. It is explanatory drawing of a detailed information presentation screen.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Troubleshooting support apparatus 10A Performance information collection part 10B Resource information extraction part 10C Resource evaluation part 10D Evaluation result presentation part 10E List list 10F Evaluation list 12 Resource related information database 14 Resource configuration information database 16 Performance information database 18 Temporary storage database 20 Server 22 Agent 30 Management console

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.
FIG. 1 shows an embodiment of a troubleshooting support apparatus embodying the present invention.
The troubleshooting support apparatus 10 is constructed by a management server composed of a computer, and is connected to each device that constructs an information system via a network such as the Internet, a LAN (Local Area Network), and a WAN (Wide Area Network). As each device, for example, a server 20 including an OS (Operating System), middleware, and a DBMS (DataBase Management System) can be applied. The troubleshooting support apparatus 10 is connected to a management console 30 that investigates the cause of a trouble that has occurred in the information system via a network.

  Each server 20 incorporates an agent 22 that periodically collects performance information including a server name, a resource name and its detailed information name, and a performance value, and transmits the performance information to the troubleshooting support apparatus 10 via the network. Here, as the performance value, for example, a CPU (Central Processing Unit), memory, and disk usage status of the server 20, operating status of a process operating on the server 20, and the like can be applied.

  The troubleshooting support apparatus 10 includes a resource related information DB (database) 12, a resource configuration information DB 14, a performance information DB 16, and a temporary storage DB 18. The resource related information DB 12 defines resource information related to each other with respect to resource information including at least a resource name and its detailed information name. Specifically, as shown in FIG. 2, the resource related information DB 12 includes resource information including a group name to which the server belongs, a server name, a resource name, and a detailed information name thereof, and resource information related thereto (hereinafter, “ Related resource information ”) and are stored in association with each other. The resource configuration information DB 14 defines the configuration of resources to be managed. As shown in FIG. 3, the resource configuration information 14 and the performance information to be evaluated are expressed numerically as a cause of trouble. Are stored in association with each other. The performance information DB 16 stores performance information transmitted from an agent installed in the server. As shown in FIG. 4, the performance information collection date and performance information are sequentially stored in association with each other. The The temporary storage DB 18 is provided to improve the response speed. As shown in FIG. 5, the performance information collection start date and time, the collection end date and time, the server name, the resource name and its detailed information name, and the related effects indicating the evaluation result Degrees and relevance points are stored in association with each other. The temporary storage DB 18 stores the collection date and time, the server name, the resource name, the detailed information name, and the performance value in association with each other as the performance information transmitted from the agent.

  The troubleshooting support apparatus 10 implements the performance information collection unit 10A, the resource information extraction unit 10B, the resource evaluation unit 10C, and the evaluation result presentation unit 10D by executing the installed troubleshooting support program. When the performance information collection unit 10A receives performance information from the agent 22, the performance information collection unit 10A associates the collection date and time with the performance information and sequentially stores them in the performance information DB 16. When there is an activation instruction from the management console 30, the resource information extraction unit 10 </ b> B refers to the resource related information DB 12 and the resource configuration information DB 14, and extracts resource information that is a starting point for finding the cause of the trouble and resource information related thereto. The created list 10E is created. The resource evaluation unit 10C refers to the performance information DB 16, obtains performance information regarding each resource information registered in the list 10E, and creates an evaluation list 10F. Further, the resource evaluation unit 10C uses the evaluation list 10F to evaluate the relevance of each resource information with the resource information that is the starting point of the trouble cause investigation, and stores the evaluation result in the temporary storage DB 18. The evaluation result presentation unit 10D refers to the temporary storage DB 18 and presents the evaluation result of the resource information to the management console 30.

  The resource information extracting unit 10B embodies the step of extracting resource information and the resource information extracting means. In addition, the resource evaluation unit 10C obtains performance information, calculates an average value and standard deviation, determines a related influence level, updates a relevance point, and sets the performance information with the maximum related influence level. A step of adding resource information, a step of storing in a temporary storage database, a performance information acquisition unit, a statistical unit, and an influence degree determination unit are embodied. Further, the evaluation result presentation unit 10D embodies a step of presenting thumbnails, a step of presenting a graph of performance information related to thumbnails, and thumbnail presentation means.

FIG. 6 shows a performance information collection process executed when the performance information collection unit 10A receives performance information from the agent 22.
In step 1 (abbreviated as “S1” in the figure, the same applies hereinafter), the performance information collection date and performance information are associated with each other and stored in the performance information DB 16 sequentially.
FIG. 7 and FIG. 8 are executed when the resource information extraction unit 10B receives a start instruction from the management console 30 with the resource name, the detailed information name, and the date and time as the starting information for investigation of the cause of the trouble. Resource information extraction processing is shown. The attached information includes a flag indicating whether or not “extended extraction mode I” and “extended extraction mode II” to be described later are selected.

  In step 11, it is determined whether or not the attached information related to the start instruction has been changed, that is, whether or not at least one of the resource name, the detailed information name, and the date / time of the attached information related to the previous start instruction has been changed. If the attached information has been changed, the process proceeds to step 12 (Yes). On the other hand, if the attached information has not been changed, the process proceeds to Step 26 (No), and the presentation is instructed to the evaluation result presentation unit 10D.

In step 12, the resource related information DB 12 is referred to, and all resource information specified by the resource name of the attached information and the detailed information name thereof are acquired.
In step 13, as shown in FIG. 9, among the resource information acquired in step 12, the server name, the resource name, and the detailed information name thereof are associated with each other and sequentially stored in the list 10E. In the list 10E, data having the same server name, resource name, and detailed information is not stored repeatedly (the same applies hereinafter).

  In step 14, the resource related information DB 12 is referred to, and related resource information related to the resource information specified by the server name, the resource name, and the detailed information name stored in the list 10E is acquired. Note that the related resource information is sequentially acquired so as to be related to the first resource information in the first process, and related to the second resource information in the second process.

In step 15, among the related resource information acquired in step 14, the server name, the resource name, and the detailed information name thereof are associated with each other and sequentially stored in the list 10 </ b> E.
In step 16, it is determined whether all the resource information stored in the list 10E has been processed. If all the resource information has been processed, the process proceeds to step 17 (Yes), while if all the resource information has not been processed, the process returns to step 14 (No).

In step 17, it is determined whether or not “extended extraction mode I” for extracting all resources of the server having the resource specified by the resource name of the attached information is selected. If “extended extraction mode I” is selected, the process proceeds to step 18 (Yes), while if “extended selection mode I” is not selected, the process proceeds to step 21 (No).
In step 18, the resource configuration information DB 14 is referred to, and the server name having the resource specified by the resource name of the attached information is acquired.

In step 19, the resource related information DB 12 is referred to, and all resource information related to the server specified by the server name acquired in step 18 is acquired.
In step 20, among the resource information acquired in step 19, the server name, the resource name, and the detailed information name thereof are associated with each other and sequentially stored in the list 10E.
In step 21, it is determined whether or not “extended extraction mode II” in which all resources of other servers belonging to the group of servers with the resource specified by the resource name of the attached information are selected is selected. If “extended extraction mode II” is selected, the process proceeds to step 22 (Yes), while if “extended extraction mode II” is not selected, the process proceeds to step 25 (No).

In step 22, the resource configuration information DB 14 is referred to, and the group name of the server having the resource specified by the resource name of the attached information is acquired.
In step 23, the resource related information DB 12 is referred to, and all resource information of other servers belonging to the group specified by the group name acquired in step 22 is acquired.
In step 24, among the resource information acquired in step 23, the server name, the resource name, and the detailed information name thereof are associated with each other and sequentially stored in the list 10E.

In step 25, the list 10E and the date and time of the attached information are delivered to the resource evaluation unit 10C.
FIGS. 10 and 11 show resource evaluation processing that is executed in the resource evaluation unit 10C when the list information 10E and the date and time of the attached information are delivered from the resource information extraction unit 10B.

In step 31, the associated server name, resource name, and detailed information name are sequentially extracted from the list 10E. The server name, the resource name, and the detailed information name thereof are sequentially acquired, such as the first one in the first process and the second one in the second process.
In step 32, the performance information DB 16 is referred to, and the resource information specified by the server name, resource name, and its detailed information name acquired in step 31 within the range of 24 hours (predetermined time) from the date and time of the attached information. Get all performance information.

In step 33, as shown in FIG. 12, the performance value of each piece of performance information acquired in step 32 is sequentially stored in the evaluation list 10F in association with the collection start date and time and the collection end date and time.
In step 34, the average value μ and the standard deviation σ of the performance values stored in the evaluation list 10F are obtained at different time intervals starting from the date and time of the attached information, for example, 1 hour, 12 hours, and 24 hours. Calculate each one.

In step 35, the performance value f (t) at the date and time of the attached information is acquired by referring to the evaluation list 10F.
In step 36, for each piece of performance information acquired in step 32, it is determined whether f (t) is within the range of μ ± σ, that is, whether μ−σ ≦ f (t) ≦ μ + σ. To do. If f (t) is within the range of μ ± σ, the process proceeds to step 37 (Yes), and after determining that the related influence is C (weak), the process proceeds to step 42. Here, the “relevant influence degree” is an index indicating the possibility that the performance information to be evaluated causes a trouble. In this embodiment, “A (strong)”, “B (medium)”. And “C (weak)”. Note that the degree of related influence is not limited to three levels A to C, and may be expressed in four or more levels by applying a known statistical method. On the other hand, if f (t) is not in the range of μ ± σ, the process proceeds to step 38 (No).

  In step 38, for each piece of performance information acquired in step 32, it is determined whether f (t) is within a range of μ ± 2σ, that is, whether μ−2σ ≦ f (t) ≦ μ + 2σ. To do. If f (t) is within the range of μ ± 2σ, the process proceeds to step 39 (Yes), and after determining that the related influence is B (medium), the process proceeds to step 42. On the other hand, if f (t) is not within the range of μ ± 2σ, the process proceeds to step 40 (No), and after determining that the related influence is A (strong), the process proceeds to step 41.

In step 41, a resource relation definition that associates the resource information that becomes the starting point for investigating the cause of the trouble and the resource information of the relation influence degree A is added to the resource relation information DB 12.
In step 42, the performance information evaluated at each time interval is selected with the highest degree of related influence, that is, the highest degree of related influence in the order of A>B> C.
In step 43, the relevance point of the resource configuration information DB 14 is appropriately updated based on the relevance influence level of the performance information adopted in step 42. That is, the relevance point is incremented by +1, ± 0, −1 in accordance with the relevance degree A to C, respectively.

In step 44, the performance information collection start date / time, collection end date / time, server name, resource name and its detailed information name, related influence degree, relevance point, and performance value are associated and stored in the temporary storage DB 18.
In step 45, the evaluation list 10F is cleared.
In step 46, it is determined whether or not processing has been completed up to the end of the list 10E. If the process has been completed up to the end of the list 10E, the process proceeds to step 47 (Yes), while if the process has not been completed up to the end of the list 10E, the process returns to step 31 (No).

In step 47, the evaluation result presentation unit 10D is instructed to present.
FIG. 13 shows an evaluation result presentation process executed in response to a presentation instruction from the resource information extraction unit 10B or the resource evaluation unit 10C in the evaluation result presentation unit 10D.
In step 51, all the performance information of the related influence degree A is read from the temporary storage DB 18, and a graph indicating the details and a thumbnail indicating the outline are created for each performance information.

In step 52, the thumbnails created in step 51 are rearranged in descending order from the largest relevance point of the performance information to the smallest.
In step 53, as shown in FIG. 14, an evaluation result presentation screen for displaying a thumbnail list of the related influence level A, a resource name as a starting point for investigating the cause of trouble, a detailed information name thereof, a collection start date and time, and a collection end date and time. Create Note that the evaluation result presentation screen includes a button for scrolling the thumbnail list in the horizontal direction and an evaluation tab for displaying a thumbnail list of any relevant influence degree.

In step 54, the evaluation result presentation screen is transferred to the management console 30.
In step 55, the management console 30 determines whether or not an instruction to end presentation of evaluation results has been issued. If an instruction to end presentation of the evaluation result is given, the troubleshooting process is finished (Yes). On the other hand, if an instruction to end presentation of the evaluation result is not given, the process proceeds to step 56 (No).

In step 56, the management console 30 determines whether or not an evaluation tab switching operation has been performed. If the evaluation tab switching operation is performed, the process proceeds to step 57 (Yes), while if the evaluation tab switching operation is not performed, the process proceeds to step 58 (No).
In step 57, all the performance information of the related influence degree according to the evaluation tab is read from the temporary storage DB 18, and a graph indicating the details and a thumbnail indicating the outline are created for each performance information. Thereafter, the process returns to step 52.

In step 58, for example, it is determined whether or not a thumbnail has been selected from the thumbnail list through an operation such as double-clicking. If a thumbnail has been selected, the process proceeds to step 59 (Yes), while if a thumbnail has not been selected, the process returns to step 55 (No).
In step 59, as shown in FIG. 15, a detailed information presentation screen for presenting a graph of performance information related to the thumbnail selected in step 58 is created. On the detailed information presentation screen, a tree-type directory structure showing the resource dependency in a hierarchical format, the resource name of the performance information related to the graph, its detailed information name and display period, and troubleshooting using this as the starting point for investigating the cause of the trouble It also includes a date and time specification for continuing, a troubleshooting button, and an extended extraction mode specification box.

  In step 60, the detailed information presentation screen is transferred to the management console 30. In the management console 30, when the date and time and the extended extraction mode are specified and the troubleshoot button is pressed, the troubleshooting support device issues a start instruction with the resource name, its detailed information name, date and time, and the extended extraction mode flag as attached information. Sent to. As a result, trouble causes can be narrowed down.

According to the troubleshooting support apparatus 10, when performance information from the agent 22 incorporated in the server 20 is received, the collection date and time and the performance information are associated with each other and sequentially stored in the performance information DB 16. For this reason, the performance information of the server 20 collected periodically is accumulated in the performance information DB 16 in time series.
On the other hand, if there is a start instruction from the management console 30 with the resource name that is the starting point for investigating the cause of the trouble, its detailed information name, and the date and time as attached information, the resource information specified by the attached information from the resource related information DB 12 and this Related resource information is extracted. That is, if the resource information related to each other is defined in the resource related information DB 12, the resource information and the related resource information at the starting point are automatically extracted only by instructing the starting point of the cause investigation of the trouble. At this time, if “extended extraction mode I” or “extended extraction mode II” for expanding the extraction target is selected, the resource information related to the server 20 having the resource specified by the resource name of the attached information and the server 20 Resource information in the other servers 20 to which the group belongs is also extracted. For this reason, even if it takes time, it aims at improving the trouble cause investigation precision, and it can respond also to the system administrator who requests troubleshooting work for a wide range of resource information.

  Then, for each extracted resource information, the performance information is acquired from the performance information DB 16 within a range of 24 hours starting from the date and time of the attached information, and the average value μ and the standard deviation σ of the performance values are calculated. . Thereafter, for each resource information, the relational influence degree with the resource information that is the starting point of the trouble cause investigation is determined from the relationship between the performance value f (t) of the performance information at the date and time of the attached information and the average values μ and σ. For each piece of performance information having the same related influence degree, a thumbnail list indicating the outline is presented. Here, thumbnails are created from performance information adopted based on the maximum degree of relational influence among the degree of influence relation determined using the average value μ and standard deviation σ calculated at different time intervals. Therefore, only those that are likely to cause trouble can be presented.

  Therefore, the system administrator can identify a resource that is likely to cause a trouble from the thumbnail list displayed on the management console 30 without depending on his own experience and intuition. Moreover, since the related resource information related to the resource information specified by the attached information is automatically extracted with reference to the resource related information DB 12, which resource is related to the specific resource by the system administrator. There is no need to grasp and accurate troubleshooting can be performed. Furthermore, since the resource evaluation results are presented as a thumbnail list, even a system administrator who lacks experience can easily investigate the cause of the trouble and solve it. Therefore, the burden on the system administrator related to troubleshooting can be reduced, and troubleshooting that does not depend on the system administrator can be performed.

  In the thumbnail list, thumbnails that are sorted in descending order from large to small are displayed according to the degree of related influence, so the degree of attention to resources that are likely to cause trouble is improved. Can be made. In addition, in the thumbnail list, thumbnails related to resources with the highest degree of related influence are initially presented, and those with the related influence degree according to the operator's instructions are switched and presented, so resources that are likely to cause trouble Can be evaluated from. Further, when a thumbnail is selected in the thumbnail list, a performance information graph, a resource name and its detailed information name, and a collection period are presented, so that a detailed evaluation of the resource can be performed.

Since the resource information of the performance information with the maximum degree of related influence is added to the resource related information DB 12 in association with the attached information, even when there is an information system configuration change, resource addition, etc., in the next and subsequent troubleshooting This can be an evaluation target.
Furthermore, since the evaluation result presentation screen and the detailed information presentation screen are created based on the data stored in the temporary storage DB 18, for example, even if the presentation target is changed, the presentation can be performed in a short time.

Claims (11)

On the computer,
When there is an instruction to obtain the output of the performance information of a particular resource of a plurality of resources, stored in the storage means, said granted to each of the plurality of resources, and identification information identifying each of the plurality of resources for each identification information, it extracts the associated resource information identifying resources associated with a resource identified by the identification information, based on the resources associated with the particular resource,
Obtaining the performance information of the specific resource and the performance information of the extracted related resource;
And performance information about said particular resource, and the associated performance information of the resource, the value of the performance information of the acquired specific resource-related influence of the value of the relevant performance information of the resource Output in accordance with the
An output program characterized by causing The related resource information includes information for identifying a group to which a server device including the resource belongs,
The output program is
In the computer,
The resource included in the server device belonging to the group specified by the information for identifying the group included in the related resource information stored in the storage unit in association with the identification information for identifying the specific resource is the specific resource. Extract as resources related to
The output program according to claim 1.   The output program according to claim 1, wherein the performance information includes information indicating a resource use state or an operation state of a process that operates using the resource. Said performance information, the acquired from each of the plurality of resources is information and information indicating the usage, and when the information is acquired is associated resources,
The output program is
In the computer,
When there is an instruction to output the performance information of the specific resource including the specification of the date and time, from the extracted performance information of the related resource, in a predetermined period starting from the specified date and time and outputs performance information of date and time contained,
3. The output program according to claim 1, wherein the output program is executed. The output program is
In the computer,
Outputting the performance information of the extracted resources arranged in descending order of correlation with the performance information of the specific resource;
The output program according to claim 1, wherein the output program is executed. The output program is
In the computer,
Among the extracted performance information of the resource, select and output performance information whose correlation with the performance information of the specific resource is greater than a predetermined value.
The output program according to claim 1, wherein the output program is executed. Computer
When receiving an instruction to obtain the output of the performance information of a particular resource of a plurality of resources, stored in the storage means, given to each of the plurality of resource, identification information for identifying each of the plurality of resources If, for each identification information, it extracts the associated resource information identifying resources associated with a resource identified by the identification information, based on the resources associated with the particular resource,
Obtaining the performance information of the specific resource and the performance information of the extracted related resource;
And performance information about said particular resource, and the associated performance information of the resource, the value of the performance information of the acquired specific resource-related influence of the value of the relevant performance information of the resource Output in accordance with the
An output method characterized by that. Granted to each of the plurality of resources, and identification information identifying each of the plurality of resources, for each identification information, stores and associated resource information identifying resources associated with a resource identified by the identification information Storage means;
When there is an instruction to output performance information of a specific resource among a plurality of resources, the storage is associated with the identification information of the specific resource among the identification information stored in the storage unit Extracting means for extracting a resource related to the specific resource based on the related resource information stored in the means;
Obtaining means for obtaining performance information of the specific resource and performance information of the extracted related resource;
And performance information about said particular resource, and the associated performance information of the resource, the value of the performance information of the acquired specific resource-related influence of the value of the relevant performance information of the resource Output means for outputting in an arrangement according to
An output device comprising: On the computer,
When there is a start instruction with the resource name and its detailed information name and date and time as the attached information as the starting point for investigating the cause of the trouble, the resource information related to at least the resource name and the detailed information name is related to each other. Referring to a defined related information database, extracting resource information specified by the resource name of the attached information and its detailed information name, and resource information related thereto, and
Refers to the performance information database that is periodically collected by each device that constructs the information system and stores performance information including at least the collection date and time, the resource name and its detailed information name, and the performance value. Obtaining performance information on each resource information extracted in the step within a predetermined time range starting from the date and time of the information;
Calculating a mean value and a standard deviation for the performance value of the performance information related to each resource information acquired in the step;
Regarding the performance information related to each resource information, from the relationship between the performance value of the performance information at the date and time of the attached information and the average value and standard deviation, the resource information specified by the resource name of the attached information and the detailed information name thereof, Determining a related influence level of
Presenting a thumbnail showing an overview of each piece of performance information having the same degree of related influence determined in the step;
Troubleshooting support program to realize On the computer,
When there is a start instruction with the resource name and its detailed information name and date and time as the attached information as the starting point for investigating the cause of the trouble, the resource information related to at least the resource name and the detailed information name is related to each other. Referring to a defined related information database, extracting resource information specified by the resource name of the attached information and its detailed information name, and resource information related thereto, and
Refers to the performance information database that is periodically collected by each device that constructs the information system and stores performance information including at least the collection date and time, the resource name and its detailed information name, and the performance value. Obtaining performance information on each resource information extracted in the step within a predetermined time range starting from the date and time of the information;
Calculating a mean value and a standard deviation for the performance value of the performance information related to each resource information acquired in the step;
Regarding the performance information related to each resource information, from the relationship between the performance value of the performance information at the date and time of the attached information and the average value and standard deviation, the resource information specified by the resource name of the attached information and the detailed information name thereof, Determining a related influence level of
Presenting a thumbnail showing an overview of each piece of performance information having the same degree of related influence determined in the step;
A troubleshooting support method characterized by causing the system to execute. A resource information including at least a resource name and its detailed information name, a related information database in which resource information related to each other is defined; and
A performance information database that is periodically collected in each device that constructs the information system and stores performance information including at least the collection date and time, the resource name and its detailed information name, and the performance value;
When there is a start instruction with the resource name and its detailed information name and date and time as the attached information as the starting point for investigating the cause of the trouble, refer to the related information database and specify the resource name and the detailed information name of the attached information Resource information extracting means for extracting resource information to be performed and resource information related thereto,
Performance information acquisition means for referring to the performance information database and for acquiring performance information on each resource information extracted by the resource information extraction means within a predetermined time range starting from the date and time of the attached information;
Statistical means for calculating an average value and a standard deviation for the performance value of the performance information related to each resource information acquired by the performance information acquisition means,
Regarding the performance information related to each resource information, from the relationship between the performance value of the performance information at the date and time of the attached information and the average value and standard deviation, the resource information specified by the resource name of the attached information and the detailed information name thereof, An impact determination means for determining the related impact level of
Thumbnail presenting means for presenting a thumbnail indicating the outline for each piece of performance information having the same related influence degree determined by the influence degree determining means;
A troubleshooting support apparatus comprising:

Images