JP6812831B2 - Monitoring equipment, monitoring systems, monitoring methods, and programs - Google Patents

Description

The present invention relates to a monitoring device, a monitoring system, a monitoring method, and a program.

Conventionally, a system for monitoring the operating state of a device such as a server device or a network device via a network has been developed.

For example, Patent Document 1 below describes a technique for outputting a failure notification to a user based on a monitoring result for each of a plurality of monitored devices.

Japanese Unexamined Patent Publication No. 2012-249250

However, in the technique described in Patent Document 1, the same content is always monitored for the monitored device. For example, in the technique described in Patent Document 1, the same content is monitored for the monitored device regardless of the time.

Therefore, the present invention has been made in view of the above problems, and an object of the present invention is that it is possible to monitor the monitored device and the contents adapted to the timing for the monitored device. To provide new and improved monitoring equipment, monitoring systems, monitoring methods, and programs.

In order to solve the above problem, according to a certain viewpoint of the present invention, whether or not the present corresponds to each of at least one monitored device outside the normal monitoring period associated with the monitored device. Of the plurality of monitoring items associated with the monitoring target device as monitoring items to be monitored within the normal monitoring period for each of the determination unit and the monitoring target device determined to fall outside the normal monitoring period, the above-mentioned A monitoring device including a monitoring control unit that executes monitoring of some monitoring items set as monitoring targets outside the normal monitoring period for the monitored device and detects an alarm based on the execution result. Provided.

The monitoring control unit is set as a monitoring target outside the normal monitoring period among a plurality of monitoring items associated with the monitoring target device for each monitoring target device determined to fall outside the normal monitoring period. It is not necessary to perform monitoring on the monitored device that has not been monitored.

With respect to each of the at least one monitored device, the plurality of monitoring items associated with the monitored device are the monitoring items of the monitoring target within the normal monitoring period associated with the monitored device. May be good.

For each of the at least one monitored device, the monitored device and at least one monitoring function are associated with each other, and the monitoring control unit is used for each monitored device determined to fall outside the normal monitoring period. In addition, for each of the at least one monitoring function associated with the monitored device, the monitoring set as the monitoring target outside the normal monitoring period among the plurality of monitoring items associated with the monitoring function. Monitoring of the item may be performed on the monitored device.

The monitoring control unit is associated with the monitoring function for each of the monitoring target devices determined to be outside the normal monitoring period, and for each of the at least one monitoring functions associated with the monitoring target device. It is not necessary to perform monitoring on the monitored device for the monitoring items that are not set as the monitoring targets outside the normal monitoring period among the plurality of monitoring items.

The monitoring device is set as a monitoring target outside the normal monitoring period among a plurality of monitoring items associated with the monitoring target device for each monitoring target device determined to fall outside the normal monitoring period. It further includes an acquisition unit that acquires information corresponding to each of the monitoring items from the monitored device, and a cause identification unit that identifies the cause of the failure when the acquisition of the information by the acquisition unit fails. May be good.

The monitoring device may further include a transmission control unit that causes an error information indicating the occurrence of an error to be transmitted to a predetermined device to a communication unit depending on whether or not the cause identified by the cause identification unit is a predetermined cause. Good.

When the cause identified by the cause identification unit is other than the predetermined cause, the transmission control unit causes the predetermined device to transmit the error information to the communication unit, and the cause identification unit transmits the error information to the communication unit. When the identified cause is the predetermined cause, the transmission control unit does not have to transmit the error information to the predetermined device to the communication unit.

The monitoring device is set as a monitoring target outside the normal monitoring period among a plurality of monitoring items associated with the monitoring target device for each monitoring target device determined to fall outside the normal monitoring period. For each of the monitoring items, if the execution result of the monitoring related to the monitoring item satisfies a predetermined condition, a transmission control unit for transmitting alarm information to a predetermined device to the communication unit may be further provided.

For each of the monitoring items set as the monitoring target outside the normal monitoring period, when the execution result of the monitoring related to the monitoring item satisfies the predetermined condition, the transmission control unit is associated with the monitoring item. The alarm information may be transmitted to the communication unit to the predetermined device according to the importance.

The monitoring device includes a schedule management unit that manages each of the at least one monitoring target device in association with the normal monitoring period of the monitoring target device, and each of the at least one monitoring target device and a plurality of monitoring items. A storage unit that stores the above in association with each other may be further provided.

Further, in order to solve the above problem, according to another viewpoint of the present invention, for each of the at least one monitored devices, does the present correspond to the outside of the normal monitoring period associated with the monitored device? A plurality of monitoring items associated with the monitoring target device as monitoring items to be monitored within the normal monitoring period for each of the determination unit for determining whether or not the device and the monitoring target device determined to be outside the normal monitoring period. Of these, a monitoring control unit that executes monitoring of some of the monitoring items set as monitoring targets outside the normal monitoring period for the monitored device and detects an alarm based on the execution result is provided. A surveillance system is provided.

Further, in order to solve the above problem, according to another viewpoint of the present invention, for each of the at least one monitored devices, does the present correspond to the outside of the normal monitoring period associated with the monitored device? A step of determining whether or not, and a plurality of monitoring items associated with the monitored device as monitoring items to be monitored within the normal monitoring period for each monitored device determined to fall outside the normal monitoring period. Among them, the monitoring method includes a step of executing monitoring of some monitoring items set as monitoring targets outside the normal monitoring period for the monitored device and detecting an alarm based on the execution result. Provided.

Further, in order to solve the above problem, a determination unit for determining whether or not the computer currently corresponds to each of at least one monitored device outside the normal monitoring period associated with the monitored device. And, for each monitored device determined to fall outside the normal monitoring period, of the plurality of monitoring items associated with the monitored device as monitoring items to be monitored within the normal monitoring period, the outside of the normal monitoring period A program is provided to execute monitoring of some of the monitoring items set as the monitoring target of the device, and to function as a monitoring control unit that detects an alarm based on the execution result. ..

As described above, according to the present invention, it is possible to perform monitoring of the monitored device and the contents adapted to the timing for the monitored device.

It is explanatory drawing which showed the structural example of the monitoring system by the comparative example of this invention. It is explanatory drawing which showed the configuration example of the monitoring policy by the comparative example. It is a flowchart which showed the whole flow of the process by the same comparative example. It is a flowchart which showed the flow of "monitoring process" by the same comparative example. It is a flowchart which showed the flow of "error processing" by the same comparative example. It is a flowchart which showed the flow of "alarm detection processing" by the same comparative example. It is explanatory drawing which showed the structural example of the monitoring system by embodiment of this invention. It is a functional block diagram which showed the configuration example of the monitoring server 10 by embodiment of this invention. It is explanatory drawing which showed the configuration example of the monitoring policy by the same embodiment. It is explanatory drawing which showed an example of the monitoring control by the same embodiment. It is a flowchart which showed the overall flow of the process by the same embodiment. It is a flowchart which showed the flow of the "monitoring process" by this embodiment. It is a flowchart which showed the flow of "error processing" by the same embodiment. It is a flowchart which showed the flow of "policy inspection process" by the same embodiment. It is a flowchart which showed the flow of "alarm detection processing" by the same embodiment. It is explanatory drawing which showed the hardware configuration of the monitoring server 10 by the same embodiment.

Preferred embodiments of the present invention will be described in detail below with reference to the accompanying drawings. In the present specification and the drawings, components having substantially the same functional configuration are designated by the same reference numerals, so that duplicate description will be omitted.

Further, in the present specification and the drawings, a plurality of components having substantially the same functional configuration may be distinguished by adding different alphabets after the same reference numerals. For example, a plurality of components having substantially the same functional configuration are distinguished as required, such as the monitored device 20a and the monitored device 20b. However, if it is not necessary to distinguish each of the plurality of components having substantially the same functional configuration, only the same reference numerals are given. For example, when it is not necessary to distinguish between the monitored device 20a and the monitored device 20b, it is simply referred to as the monitored device 20.

In addition, the "mode for carrying out the invention" will be described in accordance with the order of items shown below.
1. 1. Comparative example of the present invention 2. Detailed description of the embodiment 3. Hardware configuration 4. Modification example

<< 1. Comparative example of the present invention >>
<1-1. Monitoring system by comparative example>
First, in order to clearly show the features of the present invention, a monitoring system according to a comparative example of the present invention will be described. FIG. 1 is an explanatory diagram showing a configuration of a monitoring system according to this comparative example. As shown in FIG. 1, the monitoring system includes a monitoring device group 2, a plurality of monitored devices 20, and a communication network 22. Further, the monitoring device group 2 includes a monitoring server 90, a monitoring system console 30, a monitoring terminal 32, and a display device 34.

{1-1-1. Monitored device 20}
The monitoring target device 20 is a device to be monitored by the monitoring server 90, which will be described later. For example, the monitoring target device 20 may be a server device or a network device connected to the communication network 22 described later.

{1-1-2. Monitoring server 90}
The monitoring server 90 is a device that monitors each of the plurality of monitored devices 20. For example, the monitoring server 90 monitors the status (hardware status, software status, etc.), operating status, and the like of the monitored device 20 for each monitored device 20.

Further, the monitoring server 90 manages the time required for executing monitoring for each monitoring function, and manages information on the scheduled monitoring period (monitoring period) for the monitored device 20 for each monitored device 20. Then, the monitoring server 90 executes monitoring of the monitored device 20 for each monitored device 20 during the monitoring period associated with the monitored device 20. The time zone in which the monitored device 20 is stopped due to maintenance work or the like is set in advance by the administrator, for example, as a non-monitoring period. Then, the monitoring server 90 does not perform monitoring on the monitored device 20 for each monitored device 20 during the non-monitoring period associated with the monitored device 20.

Further, the monitoring server 90 executes monitoring for each of the plurality of monitored devices 20 in accordance with a monitoring policy 40 in which monitoring conditions for each of the plurality of monitored devices 20 are predetermined. For example, the monitoring server 90 associates the monitoring target device 20 with the monitoring for each of all the monitoring items registered in the monitoring policy 40 in association with the monitoring target device 20. It is executed for the monitored device 20 within the monitoring period.

Further, the monitoring server 90 detects an alarm for each monitoring target device 20 according to the execution result of monitoring for the monitoring target device 20. Here, the alarm may be, for example, an event (highly important) that needs to be issued to an external device (display device 34, etc.) among the events detected by executing monitoring of the monitored device 20. ..

For example, for each monitored device 20, when the execution result of monitoring related to the monitoring item whose importance is equal to or higher than a predetermined value, which is associated with the monitored device 20, satisfies a predetermined condition, the monitoring server 90 , The monitoring result is detected as an alarm of the importance. Then, when the alarm is detected, the monitoring server 90 notifies the external device of the alarm information indicating the content of the detected alarm.

(1-1-2-1. Monitoring policy 40)
The monitoring policy 40 is a database in which monitoring conditions for each of the plurality of monitored devices 20 according to this comparative example are registered. FIG. 2 is an explanatory diagram showing a configuration example of the monitoring policy 40. As shown in FIG. 2, the monitoring policy 40 includes each monitoring policy information 400 of the plurality of monitored devices 20. In addition, each monitoring policy information 400 includes a host name 410, an IP address 420, a non-monitoring schedule 430, and a monitoring execution policy 440. Here, the host name or IP address for uniquely identifying the corresponding monitored device 20 is recorded in the host name 410 and the IP address 420, respectively. Further, in the non-monitoring schedule 430, a period during which monitoring is not executed for the corresponding monitored device 20 (non-monitoring period) is recorded. Here, the non-monitoring schedule 430 includes an interval 432, a condition 434, a time zone 436, and a reason 438. In the interval 432, the condition 434, and the time zone 436, the interval of the non-monitoring period of the corresponding monitored device 20, the date of the non-monitoring period, or the time zone of the non-monitoring period is recorded, respectively. Further, in the reason 438, the reason why the monitoring is not executed during the non-monitoring period is recorded. Further, in the monitoring execution policy 440, the content of the monitoring executed for the corresponding monitored device 20 is recorded. Here, the monitoring execution policy 440 includes the monitoring function 442, the target 444, No. 446, the monitoring item 448, and the level 450. The monitoring function 442 records a monitoring function (monitoring type) executed for the corresponding monitored device 20. Here, specific examples of the monitoring function include, for example, event monitoring, log monitoring, and resource monitoring. The event monitoring is, for example, a function of monitoring the contents of the event log of the corresponding monitored device 20. Further, the log monitoring is a function of monitoring the contents of the log information of the corresponding monitored device 20, for example. Further, the resource monitoring is a function of monitoring, for example, resource information of the corresponding monitored device 20 (for example, CPU (Central Processing Unit) usage rate, free disk space, etc.).

In addition, information to be monitored by the corresponding monitoring function is recorded in the target 444. Further, in No. 446, the monitoring item 448, and the level 450, the serial number, item name, or level (importance) of each monitoring item included in the corresponding monitoring function is recorded. Here, at level 450, any one of a plurality of levels such as "emergency", "important", and "attention" is recorded for each monitoring item. As described above, when it is detected that the monitoring result for the monitoring item whose set level is equal to or higher than the predetermined value satisfies the predetermined condition, the monitoring server 90 determines the monitoring result as important. Detect as a degree alarm.

For example, in the example of the monitoring policy 40 shown in FIG. 2, the monitoring server 90 monitors the "system event" in the "event monitoring" for the monitored device 20 called the "monitoring target 1". Specifically, the monitoring server 90 uses the wording of each monitoring item (for example, "warning", "disk failure", "application crash", and "application crash" registered in the monitoring policy 40 in association with "event monitoring". Monitor whether (such as "error") was recorded (or output) in a "system event".

{1-1-3. Surveillance system console 30}
The monitoring system console 30 is a terminal used by an observer or the like to change, for example, the registered contents of the monitoring policy 40 or the setting information of the monitoring server 90.

{1-1-4. Monitoring terminal 32}
The monitoring terminal 32 is, for example, a terminal used by the observer to check the status of each of the plurality of monitored devices 20 being monitored by the monitoring server 90, the occurrence status of an alarm, and the like.

{1-1-5. Display device 34}
The display device 34 is a device that displays an alarm (alarm information, etc.) received from the monitoring server 90. For example, the display device 34 may be a warning light, or may have a display such as a liquid crystal display.

{1-1-6. Communication network 22}
The communication network 22 is a wired or wireless transmission path for information transmitted from a device connected to the communication network 22. For example, the communication network 22 may include a public line network such as a telephone line network, the Internet, and a satellite communication network, and various LANs (Local Area Network) including Ethernet (registered trademark), WAN (Wide Area Network), and the like. .. Further, the communication network 22 may include a dedicated line network such as IP-VPN (Internet Protocol-Virtual Private Network).

<1-2. Processing flow by comparative example>
The configuration of the monitoring system according to this comparative example has been described above. Subsequently, the flow of processing according to this comparative example will be described with reference to FIGS. 3 to 6.

{1-2-1. Overall flow}
FIG. 3 is a flowchart showing the overall flow of processing according to this comparative example. As shown in FIG. 3, first, the monitoring server 90 manages the execution timing of monitoring for each monitoring target device 20 for each monitoring target device 20 and for each monitoring function (S901).

Then, when the periodic period elapses or when the predetermined date and time is reached (S903: Yes), the monitoring server 90 first refers to the monitoring policy 40, and the plurality of monitored devices 20 For each of the above, it is determined whether or not the present corresponds within the non-monitoring period associated with the monitored device 20 (S905). If the current status falls within the non-monitoring period associated with at least one of the plurality of monitored devices 20 (S905: Yes), the monitoring server 90 monitors the monitored device 20. Skips the execution of, and waits until the next execution trigger. That is, the monitoring server 90 does not monitor the monitored device 20 currently applicable within the non-monitoring period registered in the monitoring policy 40. After that, the process of S901 is executed again.

On the other hand, when the present does not correspond within the non-monitoring period associated with at least one of the plurality of monitored devices 20 (that is, when the present corresponds within the monitoring period) (S905: No). , The monitoring server 90 performs a “monitoring process” described later for each corresponding monitored device 20 (S907).

{1-2-2. Monitoring process}
Next, with reference to FIG. 4, the flow of the “monitoring process” in S907 will be described in detail. As shown in FIG. 4, the monitoring server 90 first obtains information necessary for monitoring (hereinafter, may be referred to as monitoring information) for each of all the monitoring items associated with the monitored device 20. The acquisition request is transmitted to the monitored device 20 (S911). Here, the monitoring information may be, for example, event log information in the case of event monitoring, or resource information of the monitored device 20 in the case of resource monitoring.

After that, for example, when the acquisition of the monitoring information corresponding to at least one monitoring item fails (S913: No), the monitoring server 90 performs "error processing" described later (S915). Then, the flow of the process ends.

On the other hand, if the acquisition of the monitoring information is successful (S913: Yes), then the monitoring server 90 is out of the information while the inspection for all the acquired information is not completed (S917: No). The processing of S919 to S921 described later is performed on one piece of uninspected information. When the inspection for all of the acquired information is completed (S917: Yes), the "monitoring process" is completed.

Specifically, first, the monitoring server 90 performs "alarm inspection processing" described later for one uninspected monitoring item among all the monitoring items associated with the corresponding monitored device 20 (). S919).

After that, if there is an uninspected monitoring item among all the monitoring items associated with the monitored device 20 (S921: No), the monitoring server 90 repeats the process of S919 again. On the other hand, when the inspections related to all the monitoring items associated with the monitored device 20 are completed (S921: Yes), the monitoring server 90 repeats the process of S917 again.

{1-2-3. Error handling}
Next, the flow of "error processing" in S915 will be described in detail with reference to FIG. As shown in FIG. 5, the monitoring server 90 first stores the content of the failure, that is, information indicating the content of the error that has occurred (hereinafter, may be referred to as error information) (S931). Then, the monitoring server 90 notifies a predetermined device (for example, a display device 34, etc.) of the error information (S933).

{1-2-4. Alarm detection process}
Next, with reference to FIG. 6, the flow of the “alarm detection process” in S919 will be described in detail. As shown in FIG. 6, the monitoring server 90 first monitors (inspects) the relevant information in light of the relevant monitoring item (S941). Then, when the monitoring result satisfies a predetermined condition and the importance associated with the monitoring item is equal to or higher than the predetermined value, the monitoring server 90 sets the monitoring result as the importance. Detected as an alarm (S943). If no alarm is detected for the monitored item (S943: No), the "alarm detection process" ends.

On the other hand, when an alarm is detected (S943: Yes), first, the monitoring server 90 stores alarm information indicating the content of the detected alarm (S945). Then, the monitoring server 90 notifies a predetermined device (for example, a display device 34, etc.) of the alarm information (S947).

<1-3. Arrangement of issues>
{1-3-1. Exercise 1}
The comparative example of the present invention has been described above. By the way, during the non-monitoring period described above, an unexpected and unavoidable abnormal situation (that is, a situation corresponding to an alarm) such as a hardware failure may occur in the monitored device 20.

However, as described above, the monitoring server 90 according to this comparative example does not monitor the corresponding monitored device 20 during the non-monitoring period. Therefore, the occurrence of such an abnormal situation is overlooked. Further, even when monitoring is performed after the end of the non-monitoring period, the detection of the abnormal situation is delayed. As a result, serious problems can occur that can lead to system or service outages.

{1-3-2. Task 2}
As a method for solving this problem, one or more monitoring items and a plurality of monitoring schedules are set for each monitored device 20, and by making full use of them, a specific period (for example, a maintenance work period) can be set. It is also conceivable to make specific monitoring contents feasible.

However, even if this method is feasible, there is a problem that the setting and management of the schedule and the monitoring execution policy become complicated, and setting errors are likely to occur.

{1-3-3. Exercise 3}
Further, as another method, a method of constantly monitoring the monitored device 20 without setting a non-monitoring period can be considered. However, this method detects even meaningless alarms that are expected to occur naturally during, for example, periodic restarts and maintenance. As a result, the monitoring and operation work becomes complicated and the load increases significantly.

Therefore, with the above circumstances as the first point of view, the monitoring server 10 according to the present embodiment has been created. The monitoring server 10 determines, for each of the at least one monitored device 20, whether or not the current state falls outside the normal monitoring period associated with the monitored device 20, and then, outside the normal monitoring period. For each monitoring target device 20 determined to correspond to, the monitoring of the monitoring items set as monitoring targets outside the normal monitoring period among the plurality of monitoring items associated with the monitoring target device 20 is monitored. This is executed for the target device 20. As a result, it is possible to monitor the monitored device 20 and the contents adapted to the timing for the monitored device 20. For example, monitoring of a specific monitoring item can be performed on the monitored device 20 even outside the normal monitoring period. Hereinafter, such an embodiment will be described in detail in order.

<< 2. Detailed description of the embodiment >>
<2-1. Monitoring system configuration>
First, the configuration of the monitoring system according to the present embodiment will be described with reference to FIG. 7. As shown in FIG. 7, the monitoring system according to the present embodiment has a monitoring server 10 instead of the monitoring server 90 as compared with the monitoring system according to the present comparative example (shown in FIG. 1). Here, the monitoring server 10 is an example of the monitoring device in the present invention. The other components are substantially the same as those of the comparative example of the present invention.

<2-2. Configuration>
The configuration of the monitoring system according to the present embodiment has been described above. Next, the configuration according to the present embodiment will be described in detail. FIG. 8 is a functional block diagram showing the configuration of the monitoring server 10 according to the present embodiment. As shown in FIG. 8, the monitoring server 10 has a control unit 100, a communication unit 120, and a storage unit 122.

{2-2-1. Control unit 100}
The control unit 100 comprehensively controls the operation of the monitoring server 10 by using hardware such as a CPU 150 and a RAM (Random Access Memory) 154 built in the monitoring server 10. Further, as shown in FIG. 8, the control unit 100 includes a schedule management unit 102, a determination unit 104, a monitoring information acquisition unit 106, an error identification unit 108, a monitoring control unit 110, and a transmission control unit 112.

{2-2-2. Schedule management unit 102}
The schedule management unit 102 manages the schedule for appropriately monitoring each of the plurality of monitored devices 20. For example, each of the plurality of monitored devices 20 can be associated with the exception monitoring period of the monitored device 20 and registered in the monitoring policy 42 described later. Here, the exception monitoring period may be a period outside the normal monitoring period. In this case, the schedule management unit 102 can manage the normal monitoring period and the exception monitoring period for each of the plurality of monitored devices 20 according to the monitoring policy 42.

(2-2-2-1. Monitoring policy 42)
The monitoring policy 42 is a monitoring policy according to the present embodiment, and is a database in which monitoring conditions for each of the plurality of monitored devices 20 are registered. More specifically, in the monitoring policy 42, the monitoring target device 20 and the plurality of monitoring items are registered in association with each other for each of the plurality of monitoring target devices 20. Here, all of the plurality of monitoring items may be monitoring items set as monitoring targets within the normal monitoring period of the monitoring target device 20. For example, in the monitoring policy 42, for each of the plurality of monitored devices 20, the monitored device 20 and at least one monitoring function are associated with each other, and each of the at least one monitoring function and a plurality of such monitoring functions are associated with each other. It can be associated with the monitoring item.

FIG. 9 is an explanatory diagram showing a configuration example of the monitoring policy 42. As shown in FIG. 9, the monitoring policy 42 has an exception monitoring schedule 460 instead of the non-monitoring schedule 430 as compared with the monitoring policy 40 according to this comparative example. Here, in the exception monitoring schedule 460, information on the exception monitoring period registered in association with the corresponding monitored device 20 is recorded. Specifically, as shown in FIG. 9, the exception monitoring schedule 460 includes an interval 462, a condition 464, a time zone 466, and a reason 468. In addition, in the interval 462, the condition 464, and the time zone 466, the interval of the exception monitoring period registered in association with the corresponding monitored device 20, the date of the exception monitoring period, or the exception monitoring period. Each time zone is recorded. Further, in the reason 468, the reason why the corresponding period is set as the exception monitoring period is recorded. Further, the monitoring policy 42 further has an exception flag 470 in the monitoring execution policy 440 as compared with the monitoring policy 40 according to this comparative example. The exception flag 470 indicates whether or not each monitoring item 448 in the monitoring execution policy 440 is set as a monitoring target within the exception monitoring period (“ON” in the example shown in FIG. 9) or not (shown in FIG. 9). In the example, "OFF") is recorded.

{2-2-3. Judgment unit 104}
The determination unit 104 determines whether or not the present corresponds to each of the plurality of monitoring target devices 20 within the exception monitoring period associated with the monitoring target device 20. For example, the determination unit 104 first identifies the exception monitoring period registered in the monitoring policy 42 in association with the monitored device 20 at predetermined time intervals for each of the plurality of monitored devices 20. Then, the determination unit 104 determines whether or not the present falls within the exception monitoring period (that is, outside the normal monitoring period) by comparing the specified exception monitoring period with the present.

{2-2-4. Monitoring information acquisition unit 106}
The monitoring information acquisition unit 106 is an example of the acquisition unit in the present invention. For each of the plurality of monitored devices 20, the monitoring information acquisition unit 106 provides information (monitoring information) necessary for monitoring corresponding to each of at least one monitoring function associated with the monitored device 20. Obtained from the monitored device 20. For example, the monitoring information acquisition unit 106 refers to each of the plurality of monitoring target devices 20 and all of the monitoring functions associated with the monitoring target device 20 (or all of the monitoring functions associated with the monitoring function). The monitoring information is acquired from the monitoring target device 20 by transmitting a monitoring information acquisition request corresponding to each of the monitoring items) to the monitoring target device 20 to the communication unit 120 described later.

{2-2-5. Error identification part 108}
The error identification unit 108 is an example of the cause identification unit in the present invention. When the monitoring information acquisition unit 106 fails to acquire at least one monitoring information from the monitoring target device 20 for each of the plurality of monitoring target devices 20, the error identification unit 108 provides information on the failure (type of failure). And the cause of the failure). For example, if an error code is received from the monitored device 20 after a request for acquisition of monitoring information is transmitted to the monitored device 20, the error specifying unit 108 causes the failure (for example, the cause of the failure (for example). (Login error, connection error, etc.) may be specified based on the error code, or the error corresponding to the error code may be specified as the type of failure. If no response is received from the monitored device 20 within a predetermined time after the monitoring information acquisition request is transmitted to the monitored device 20, the error specifying unit 108 fails. The cause may be specified as the monitored device 20 being stopped.

The error specifying unit 108 may specify the cause of the failure of each of the plurality of monitored devices 20 according to the timing at which the acquisition of the monitoring information fails. For example, the error specifying unit 108 may identify the cause of the failure only when the timing at which the acquisition of the monitoring information from the monitored device 20 fails is within the exception monitoring period of the monitored device 20.

{2-2-6. Monitoring control unit 110}
(2-2-6-1. Execution of monitoring)
The monitoring control unit 110 controls the execution of monitoring for each of the plurality of monitored devices 20. For example, among the plurality of monitored devices 20, the monitoring control unit 110 associates the monitoring control device 20 with each of the monitoring target devices 20 determined by the determination unit 104 that the current state falls within the normal monitoring period. Monitoring of all the monitored items is executed for the monitored device 20.

Further, among the plurality of monitored devices 20, the monitoring control unit 110 associates each of the monitored devices 20 determined by the determination unit 104 that the current state falls within the exception monitoring period with the monitored device 20. Of all the monitored items, only the monitoring items set as the monitoring targets within the exception monitoring period (hereinafter referred to as the exception monitoring target monitoring items) are monitored for the monitored device 20. .. That is, among all the monitoring items associated with the monitored device 20, the monitoring items that are not set as monitoring targets within the exception monitoring period (hereinafter referred to as monitoring items that are not subject to exception monitoring) The monitoring control unit 110 does not perform monitoring on the monitored device 20.

More specifically, for each of the monitored devices 20 determined by the determination unit 104 that the current state falls within the exception monitoring period, the monitoring control unit 110 monitors all the monitoring associated with the monitored device 20. For each of the functions, it is possible to perform monitoring on the monitoring target device 20 only for the monitoring items of the exception monitoring target among all the monitoring items associated with the monitoring function. That is, with respect to each of the monitoring functions associated with the monitored device 20, the monitoring control unit 110 refers to the monitoring items not subject to exception monitoring among all the monitoring items associated with the monitoring function. Does not perform monitoring on the monitored device 20.

For example, in the example of the monitoring policy 42 shown in FIG. 9, the monitoring control unit 110 makes an exception to the monitored device 20 called “monitoring target 1” with respect to “event monitoring” within the exception monitoring period. Only (exceptionally) monitors whether the wording "disk failure", which is a monitoring item whose flag is set to "ON", is recorded during a "system event". In addition, the monitoring control unit 110 does not perform monitoring of other monitoring items (that is, monitoring items for which the exception flag is set to "OFF") with respect to "event monitoring".

(2-2-6-2. Alarm detection)
Further, the monitoring control unit 110 can detect an alarm based on the execution result of monitoring for each of the plurality of monitored devices 20. For example, in the monitoring control unit 110, for each of the plurality of monitoring target devices 20, first, for each monitoring item associated with the monitoring target device 20, the execution result of monitoring for the monitoring item satisfies a predetermined condition. Determine if it meets or not. Then, when the execution result of the monitoring satisfies a predetermined condition, the monitoring control unit 110 detects the execution result of the monitoring as an alarm of the importance associated with the monitoring item.

-Specific Example Here, the function of the above-mentioned monitoring control unit 110 will be described in more detail with reference to FIG. FIG. 10 is an explanatory diagram showing an execution example of normal monitoring and an execution example of exception monitoring by the monitoring control unit 110. As shown in FIG. 10, "n" monitoring items are registered in the monitoring policy 42 in association with the monitored device 20a, and "monitoring item 2" (among the n monitoring items). It is assumed that only "" is set as the monitoring target for exception monitoring.

As shown in FIG. 10, within the normal monitoring period 50 associated with the monitored device 20a, the monitoring control unit 110 monitors the monitored device 20a for all n monitoring items. Then, the monitoring control unit 110 detects an alarm according to the execution result of monitoring for each monitoring item and the importance associated with each monitoring item.

Further, as shown in FIG. 10, within the exception monitoring period 52 associated with the monitored device 20a, the monitoring control unit 110 monitors only the “monitoring item 2” for the monitored device 20a. To do. Then, the monitoring control unit 110 detects an alarm according to the execution result of the monitoring related to the "monitoring item 2" and the importance associated with the "monitoring item 2".

{2-2-7. Transmission control unit 112}
(2-2-7-1. Transmission of error information)
The transmission control unit 112 controls the transmission of various types of information to other devices. For example, when the cause of the failure identified by the error specifying unit 108 is a predetermined cause (or when the type of the failure is a predetermined type), the transmission control unit 112 causes an error corresponding to the failure. Information is transmitted to a predetermined device (for example, a display device 34) to the communication unit 120. When the cause of the failure identified by the error specifying unit 108 is other than the predetermined cause (or the type of the failure is other than the predetermined type), the transmission control unit 112 responds to the failure. The error information is not transmitted to the predetermined device to the communication unit 120. That is, the failure is not treated as an error. The error information may include, for example, identification information of the monitored device 20 in which the error has occurred, the date and time when the error occurred, the type and cause of the error specified by the error specifying unit 108, and the like.

Here, the predetermined cause may be a cause corresponding to an expected error (for example, a network error or a login error) within the exception monitoring period. In addition, an expected error is a type of error that is expected to occur within the exception monitoring period, and is basically not treated as an error. Further, a list of error codes corresponding to each of the expected errors can be stored in the storage unit 122.

(2-2-7-2. Transmission of alarm information)
Further, when at least one alarm is detected by the monitoring control unit 110 for each of the plurality of monitored devices 20, the transmission control unit 112 communicates the alarm information corresponding to the detected alarm to a predetermined device. Have 120 send. For example, each time one alarm is detected by the monitoring control unit 110 for each of the plurality of monitored devices 20, the transmission control unit 112 transmits the alarm information corresponding to the alarm to the predetermined device to the communication unit 120. Send sequentially. Here, the alarm information includes the importance of the alarm, the identification information of the monitored device 20 in which the alarm is detected, the information of the monitoring function and the monitoring item corresponding to the alarm, the detection date and time of the alarm, and the like. May include.

Here, the predetermined device may be, for example, a display device 34, a device higher than the monitoring server 10 (not shown), or the like. For example, when the display device 34 includes a warning light and alarm information is transmitted to the display device 34, the warning light may be turned on. Alternatively, the predetermined device may be a terminal (monitoring terminal 32 or the like) used by a person concerned (monitoring person or the like). In this case, when the terminal receives the alarm information, the terminal can automatically display the alarm information on the display screen.

As a modification, when at least one alarm is detected, the transmission control unit 112 may send an e-mail or SMS (Short Message Service) to the communication unit 120 to the e-mail address of the person concerned. Good. Alternatively, the transmission control unit 112 may automatically make a call to the telephone number of the person concerned, or cause the communication unit 120 to transmit a predetermined notification to the mobile device (pager or the like) of the person concerned. You may.

The device to which the alarm information is transmitted and the device to which the error information is transmitted are basically different. However, the present invention is not limited to this, and the alarm information and the error information may be transmitted to the same device.

{2-2-8. Communication unit 120}
The communication unit 120 transmits / receives information to / from other devices via, for example, a communication network 22. For example, the communication unit 120 receives monitoring information from each of the plurality of monitoring target devices 20. Further, the communication unit 120 transmits error information and alarm information to another device such as the display device 34 under the control of the transmission control unit 112.

{2-2-9. Storage unit 122}
The storage unit 122 stores various data and various software. For example, the storage unit 122 stores the monitoring information acquired from the individual monitoring target devices 20, the history of the alarm information, the monitoring policy 42, and the like. The monitoring policy 42 is not limited to the example stored in the storage unit 122, and may be stored in another device capable of communicating with the monitoring server 10. Further, all the information in the monitoring policy 42 may be stored in the same medium, or may be distributed and stored in a plurality of media.

<2-3. Process flow>
The configuration according to the present embodiment has been described above. Subsequently, the flow of processing according to this embodiment will be described with reference to FIGS. 11 to 15.

{2-3-1. Overall flow}
FIG. 11 is a flowchart showing the overall flow of processing according to the present embodiment. As shown in FIG. 11, first, the schedule management unit 102 of the monitoring server 10 performs each monitoring target device 20, for example, each monitoring function registered in the monitoring policy 42 in association with the monitoring target device 20. It manages the execution start timing of monitoring (S101).

After that, when a periodic period elapses or when a predetermined date and time is reached (S103: Yes), the determination unit 104 refers to the monitoring policy 42 and each of the plurality of monitored devices 20. With respect to, it is determined whether or not the present corresponds within the exception monitoring period associated with the monitored device 20 (S105). When the current does not correspond within the exception monitoring period associated with at least one of the plurality of monitored devices 20 (that is, when the current corresponds within the normal monitoring period) (S105: No), The monitoring control unit 110 performs a “monitoring process” described later for each corresponding monitoring target device 20 (S111). After that, the monitoring server 10 repeats the process of S101 again.

On the other hand, if the current state falls within the exception monitoring period associated with at least one of the plurality of monitored devices 20 (S105: Yes), first, the monitoring control unit 110 determines the monitoring policy 42. By referring to (S107), it is confirmed whether or not there is an exception monitoring target monitoring item among all the monitoring items associated with the monitoring target device 20 for each corresponding monitoring target device 20 (S107). Exception Regarding the monitored device 20 in which the monitored item to be monitored exists (S109: Yes), the monitoring control unit 110 performs a “monitoring process” described later for each corresponding monitored device 20 (S111). After that, the monitoring server 10 repeats the process of S101 again.

On the other hand, regarding the monitored device 20 for which there is no monitoring item to be exceptionally monitored (S109: No), the monitoring server 10 skips monitoring of the corresponding monitored device 20. After that, the monitoring server 10 repeats the process of S101 again.

{2-3-2. Monitoring process}
Next, with reference to FIG. 12, the flow of the “monitoring process” in S111 will be described in detail. As shown in FIG. 12, the communication unit 120 of the monitoring server 10 acquires monitoring information corresponding to all the monitoring items associated with the corresponding monitoring target device 20, for example, according to the control of the monitoring information acquisition unit 106. The request is transmitted to the monitored device 20 (S121).

After that, for example, when the acquisition of at least one monitoring information fails (S123: No), the monitoring server 10 performs "error processing" described later (S125). Then, the "monitoring process" ends.

On the other hand, when the acquisition of the monitoring information is successful (S123: Yes), the monitoring control unit 110 is one of the uninspected information while the inspection of all the acquired information is not completed (S127: No). Regarding the two pieces of information, the processes of S129 to S131 described later are performed. When the inspection of all the acquired information is completed (S127: Yes), the "monitoring process" is completed.

Specifically, first, the monitoring control unit 110 performs the "policy inspection process" described later for one uninspected monitoring item among all the monitoring items associated with the corresponding monitored device 20. (S129).

After that, when at least one uninspected monitoring item exists among all the monitoring items associated with the monitored device 20 (S131: No), the monitoring control unit 110 again processes S129. repeat. On the other hand, when the inspection of all the monitoring items associated with the monitoring target device 20 is completed (S131: Yes), the monitoring control unit 110 repeats the process of S127 again.

{2-3-3. Error handling}
Next, with reference to FIG. 13, the flow of “error processing” in S125 will be described in detail. As shown in FIG. 13, when the present is outside the exception monitoring period of the corresponding monitored device 20 (that is, when it is within the normal monitoring period) (S141: No), the monitoring server 10 is set to S145, which will be described later. Subsequent processing is performed.

On the other hand, if the current status is within the exception monitoring period of the monitored device 20 (S141: Yes), the error specifying unit 108 first identifies the cause of the failure. Then, it is determined whether or not the specified cause corresponds to the cause corresponding to the predetermined expected error (S143). If the identified cause corresponds to the cause corresponding to the expected error (S143: Yes), the monitoring server 10 does not treat the failure as an error. Then, the "error processing" ends.

On the other hand, when the identified cause does not correspond to the cause corresponding to the expected error (S143: No), the control unit 100 records the error information indicating the content of the failure in the storage unit 122 (S145). ). Subsequently, the communication unit 120 transmits the error information to a predetermined device (for example, a display device 34 or the like) under the control of the transmission control unit 112 (S147). Then, the "error processing" ends.

{2-3-4. Policy inspection process}
Next, with reference to FIG. 14, the flow of the “policy inspection process” in S129 will be described in detail. As shown in FIG. 14, when the current status is outside the exception monitoring period of the monitored device 20 (that is, within the normal monitoring period) (S151: No), the monitoring control unit 110 of the monitoring server 10 Performs the process of S155 described later.

On the other hand, when the present is within the exception monitoring period of the corresponding monitored device 20 (S151: Yes), first, the monitoring control unit 110 refers to the monitoring policy 42 to monitor the exception of the corresponding monitoring item. It is confirmed whether or not it is a target monitoring item (S153). When the corresponding monitoring item is not the monitoring item to be the exception monitoring target (S153: No), the monitoring control unit 110 does not execute monitoring for the corresponding monitoring item. Then, the "policy inspection process" ends.

On the other hand, when the corresponding monitoring item is an exception monitoring target monitoring item (S153: Yes), the monitoring control unit 110 performs "alarm detection processing" described later (S155). Then, the "policy inspection process" ends.

{2-3-5. Alarm detection process}
Next, with reference to FIG. 15, the flow of the “alarm detection process” in S155 will be described in detail. As shown in FIG. 15, first, the monitoring control unit 110 monitors (inspects) the information of the corresponding inspection target in light of the corresponding monitoring item. Then, when the monitoring result satisfies a predetermined condition and the importance associated with the monitoring item is equal to or higher than the predetermined value, the monitoring control unit 110 sets the monitoring result as the importance. It is detected as an alarm of (S161). If no alarm is detected for the monitored item (S163: No), the "alarm detection process" ends.

On the other hand, when an alarm is detected for the monitoring item (S163: Yes), the monitoring control unit 110 first records the alarm information indicating the content of the detected alarm in the storage unit 122 (S165). Subsequently, the communication unit 120 transmits the alarm information to a predetermined device (for example, a display device 34 or the like) under the control of the transmission control unit 112 (S167). Then, the "alarm detection process" ends.

<2-4. Effect>
{2-4-1. Effect 1}
As described above, the monitoring server 10 according to the present embodiment determines whether or not the present corresponds to each of the plurality of monitored devices 20 within the exception monitoring period associated with the monitored device 20. Then, for each monitored device 20 determined to fall within the exception monitoring period, the monitoring of the monitoring item of the exception monitoring target among the plurality of monitoring items associated with the monitored device 20 is monitored. This is executed for the target device 20. Therefore, monitoring of a specific monitoring item can be performed on the monitored device 20 even outside the normal monitoring period.

For example, the monitoring server 10 affects the operation of the system or device, such as a hardware failure, for each of the plurality of monitored devices 20 even outside the normal monitoring period (unlike the comparative example of the present invention). Certain alarms can be detected immediately. For example, an alarm based on a hardware failure that occurs independently of the work during the maintenance work period of the monitored device 20, a specific alarm that occurs in the startup process of the monitored device 20 after the work is completed, and the like. Can be detected immediately by the monitoring server 10. Therefore, it is possible to prevent the occurrence of serious problems leading to the outage of systems and services. For example, when an alarm is detected, the monitoring server 10 can automatically notify the alarm information to the outside, so that the persons concerned (monitoring operator, administrator, etc.) can immediately grasp the occurrence of the abnormality. be able to. This allows the parties concerned to understand the impact on systems and services in advance and to act in a timely manner so that serious problems do not occur.

{2-4-2. Effect 2}
Further, the monitoring server 10 monitors the monitoring items that are not the exception monitoring target among the plurality of monitoring items associated with the monitoring target device 20 for each monitoring target device 20 determined to fall within the exception monitoring period. Do not execute. Therefore, even if an expected error occurs during the exception monitoring period, an alarm (that is, an alarm that does not need to be dealt with) is not detected, and external notification is not performed. That is, even if exception monitoring is executed, the load of monitoring work such as a monitoring operator or an administrator does not increase. Further, since the unnecessary alarm is not recorded, unnecessary historical data is not recorded.

{2-4-3. Effect 3}
Further, according to the present embodiment, for example, setting work and management of the monitoring policy 42 and the like are easy. For example, for each monitored device 20, the administrator simply sets a specific monitoring item as the monitoring target for exception monitoring, and the monitoring server 10 executes monitoring for the specific monitoring item within the exception monitoring period. Can be done.

<< 3. Hardware configuration >>
Next, the hardware configuration of the monitoring server 10 according to the present embodiment will be described with reference to FIG. As shown in FIG. 16, the monitoring server 10 includes a CPU 150, a ROM (Read Only Memory) 152, a RAM 154, an internal bus 156, an input / output interface 158, an HDD (Hard Disk Drive) 160, and a network interface 162.

The CPU 150 functions as an arithmetic processing device and a control device, and controls the overall operation in the monitoring server 10 according to various programs. Further, the CPU 150 realizes the function of the control unit 100. The CPU 150 is composed of a processor such as a microprocessor.

The ROM 152 stores programs, calculation parameters, and the like used by the CPU 150.

The RAM 154 temporarily stores a program used in the execution of the CPU 150, parameters that are appropriately changed in the execution, and the like.

The internal bus 156 is composed of a CPU bus and the like. The internal bus 156 connects the CPU 150, the ROM 152, and the RAM 154 to each other.

The input / output interface 158 connects the HDD 160 and the network interface 162 to the internal bus 156.

The HDD 160 is a device for storing data. The HDD 160 includes, for example, a storage medium, a recording device for recording data on the storage medium, a reading device for reading data from the storage medium, a deleting device for deleting the data recorded on the storage medium, and the like. Further, the HDD 160 stores a program executed by the CPU 150 and various data. The HDD 160 functions as a storage unit 122.

The network interface 162 is a communication interface composed of, for example, a communication device for connecting to the communication network 22. The network interface 162 functions as a communication unit 120. The network interface 162 may be a wireless LAN (Local Area Network) compatible communication device, an LTE (Long Term Evolution) compatible communication device, or a wire communication device that performs wired communication.

<< 4. Modification example >>
Although the preferred embodiments of the present invention have been described in detail with reference to the accompanying drawings, the present invention is not limited to such examples. It is clear that a person having ordinary knowledge in the field of technology to which the present invention belongs can come up with various modifications or modifications within the scope of the technical ideas described in the claims. , These are also naturally understood to belong to the technical scope of the present invention.

<4-1. Modification 1>
For example, the method of notifying alarm information according to the present embodiment is not limited to the above-mentioned example. For example, the monitoring server 10 may change the content of the information to be notified and the notification method according to the importance of the detected alarm. Further, the monitoring server 10 may change the alarm notification method (for example, even when an alarm of the same importance is detected) according to the monitored device 20 from which the alarm is detected. Further, when the alarm information is transmitted to a predetermined terminal (monitoring terminal 32 or the like), the monitoring server 10 sets an alarm notification method for each user (monitoring person or the like) logged in to the predetermined terminal. You may change it.

<4-2. Modification 2>
Further, the monitoring system according to the present embodiment is not limited to the example shown in FIG. For example, the monitoring system console 30 and the monitoring terminal 32 may be configured as an integrated device instead of being configured as separate devices. Alternatively, any one or more of the monitoring system console 30, the monitoring terminal 32, and the display device 34 may be configured as an integrated device with the monitoring server 10. Further, in FIG. 7, one monitoring terminal 32 and one display device 34 are shown, but the present invention is not limited to this, and a plurality of monitoring terminals 32 or display devices 34 may be installed.

Further, according to the present embodiment, it is possible to provide a computer program for making hardware such as the CPU 150, the ROM 152, and the RAM 154 exhibit the same functions as the configuration of the monitoring server 10. A recording medium on which the computer program is recorded is also provided.

2 Monitoring device group 10, 90 Monitoring server 20 Monitoring target device 22 Communication network 30 Monitoring system console 32 Monitoring terminal 34 Display device 100 Control unit 102 Schedule management unit 104 Judgment unit 106 Monitoring information acquisition unit 108 Error identification unit 110 Monitoring control unit 112 Transmission control unit 120 Communication unit 122 Storage unit

Claims (14)

For each of the at least one monitored device, a determination unit for determining whether or not the current state falls outside the normal monitoring period associated with the monitored device, and
Of the plurality of monitoring items associated with the monitored device as monitoring items to be monitored within the normal monitoring period for each monitored device determined to fall outside the normal monitoring period, monitoring outside the normal monitoring period A monitoring control unit that executes monitoring of some of the monitoring items set as targets for the monitored device and detects an alarm based on the execution result .
A monitoring device. The monitoring control unit is set as a monitoring target outside the normal monitoring period among a plurality of monitoring items associated with the monitoring target device for each monitoring target device determined to fall outside the normal monitoring period. The monitoring device according to claim 1, which does not perform monitoring on the monitored device that has not been performed. With respect to each of the at least one monitored device, the plurality of monitored items associated with the monitored device are the monitored items of the monitored target within the normal monitoring period associated with the monitored device. The monitoring device according to claim 1 or 2. For each of the at least one monitored device, the monitored device and at least one monitoring function are associated with each other.
The monitoring control unit is associated with the monitoring function for each of the monitoring target devices determined to be outside the normal monitoring period, and for each of the at least one monitoring functions associated with the monitoring target device. The monitoring device according to any one of claims 1 to 3, which monitors the monitoring target device for the monitoring item set as the monitoring target outside the normal monitoring period among the plurality of monitoring items. .. The monitoring control unit is associated with the monitoring function for each of the monitoring target devices determined to be outside the normal monitoring period, and for each of the at least one monitoring functions associated with the monitoring target device. The monitoring device according to claim 4, wherein monitoring of a monitoring item that is not set as a monitoring target outside the normal monitoring period is not executed for the monitoring target device among the plurality of monitoring items. The monitoring device is set as a monitoring target outside the normal monitoring period among a plurality of monitoring items associated with the monitoring target device for each monitoring target device determined to fall outside the normal monitoring period. An acquisition unit that acquires information corresponding to each of the monitored items from the monitored device, and
The monitoring device according to any one of claims 1 to 5, further comprising a cause specifying unit that identifies the cause of the failure when the acquisition of the information by the acquisition unit fails. The monitoring device further includes a transmission control unit that causes a predetermined device to transmit error information indicating the occurrence of an error to a predetermined device depending on whether or not the cause identified by the cause specifying unit is a predetermined cause. Item 6. The monitoring device according to item 6. When the cause identified by the cause identification unit is other than the predetermined cause, the transmission control unit causes the predetermined device to transmit the error information to the communication unit, and the transmission control unit transmits the error information to the communication unit.
The monitoring device according to claim 7, wherein when the cause identified by the cause specifying unit is the predetermined cause, the transmission control unit does not transmit the error information to the predetermined device to the communication unit. .. The monitoring device is set as a monitoring target outside the normal monitoring period among a plurality of monitoring items associated with the monitoring target device for each monitoring target device determined to fall outside the normal monitoring period. Any of claims 1 to 8, further comprising a transmission control unit for transmitting alarm information to a predetermined device to a predetermined device when the execution result of monitoring related to the monitoring item satisfies a predetermined condition for each of the monitoring items. The monitoring device according to the first paragraph. For each of the monitoring items set as the monitoring target outside the normal monitoring period, when the execution result of the monitoring related to the monitoring item satisfies the predetermined condition, the transmission control unit is associated with the monitoring item. The monitoring device according to claim 9, wherein the alarm information is transmitted to the predetermined device to the communication unit according to the degree of importance. The monitoring device includes a schedule management unit that manages each of the at least one monitoring target device in association with the normal monitoring period of the monitoring target device.
The monitoring device according to any one of claims 1 to 10, further comprising a storage unit that stores each of the at least one monitoring target device in association with a plurality of monitoring items. For each of at least one monitored device, a determination unit for determining whether or not the current state falls outside the normal monitoring period associated with the monitored device, and
Of the plurality of monitoring items associated with the monitored device as monitoring items to be monitored within the normal monitoring period for each monitored device determined to fall outside the normal monitoring period, monitoring outside the normal monitoring period A monitoring control unit that executes monitoring of some of the monitoring items set as targets for the monitored device and detects an alarm based on the execution result .
A monitoring system equipped with. For each of the at least one monitored device, a step of determining whether or not the current state falls outside the normal monitoring period associated with the monitored device, and
For each monitored device determined to fall outside the normal monitoring period, of the plurality of monitoring items associated with the monitored device as monitoring items to be monitored within the normal monitoring period, monitoring outside the normal monitoring period A step of executing monitoring of some of the monitoring items set as targets for the monitored device and detecting an alarm based on the execution result, and
Monitoring methods, including. Computer,
For each of the at least one monitored device, a determination unit for determining whether or not the current state falls outside the normal monitoring period associated with the monitored device, and
Of the plurality of monitoring items associated with the monitored device as monitoring items to be monitored within the normal monitoring period for each monitored device determined to fall outside the normal monitoring period, monitoring outside the normal monitoring period A monitoring control unit that executes monitoring of some of the monitoring items set as targets for the monitored device and detects an alarm based on the execution result .
A program to function as.

Images