JPH08153024A - Log data display method - Google Patents

Abstract

PURPOSE: To easily change the log analysis function and log display control function and to improve the reliability, on a log data display method for computer system. CONSTITUTION: A log format holding part 21 holding the display log format of log data, a log analysis means holding part 23 holding, the analysis means of log data, a log data holding part 25 holding log data and operation confirming data and a log display control part 28 controlling the display of log data are provided. Log analysis data is inputted from the log analysis data holding means holding log analysis data including the log format, a log analysis means 24 and operation recognition data in an external storage means to the computer system. The log format is held in the log format holding part 21 and the log analysis means 24 is held in the log analysis means holding part 23. Operation recognition data is held in the log data holding part 25 and the log display control part 28 conducts the test of log analysis data which is newly inputted by using operation recognition data.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a log data display method for a computer system. In the computer system, when an abnormality occurs in a connected peripheral device, a driver (control program) corresponding to each peripheral device collects information indicating an error location of the device and creates log data.
Then, log analysis processing is performed and log information indicating an abnormal portion is displayed and output.

The present invention relates to a log display method capable of efficiently managing log analysis data (log format, log analysis means, etc.) in such a computer system.

[0003]

2. Description of the Related Art A conventional display control unit for displaying a log analysis and an analysis result is fixedly provided in each computer system. And driver (device control program)
When it was necessary to change the log display control unit due to changes in hardware or hardware, the log display control unit was changed separately from the driver registration operation.

FIG. 9 shows a conventional technique. In FIG.
100 is a computer system.

Reference numeral 112 is a log data collecting means for collecting log data when a failure occurs in a peripheral device connected to the computer system 100. Reference numeral 113 denotes a log data holding unit, which is a log data collecting unit 112.
The log data collected by is retained.

Reference numeral 114 denotes a log display control unit for performing log analysis based on the log data, incorporating the analysis result in the log format, and creating display data.
A log format 115 is a format of log information to be displayed.

Reference numeral 116 represents a log analysis function, and performs error analysis based on the log data. The log analysis function 116 regards a set of bits (for example, error is 1, normally is 0, etc.) representing an error of the devices 135 (usually a plurality of devices) connected to the computer system 100 as a code, decodes it, and fails. The syndrome function for identifying the device that caused the

A driver holding unit 117 holds a control program (driver) for the peripheral device. Reference numeral 120 denotes a display unit, which is a display, a printer or the like that outputs the log information obtained from the analysis result of the log data.

Reference numeral 130 denotes a driver holding medium, which is a medium such as a magnetic disk holding a control program for peripheral devices. Reference numeral 131 is log display control change data, which is input when the log display control unit needs to be changed due to a change in the peripheral device connected to the computer system 100.

A peripheral device 135 is a peripheral device such as a printer, a display, and a magnetic disk device connected to the computer system 100. The conventional technique of FIG. 9 will be described.

When a failure occurs in the peripheral device 135, the log data collecting means 112 collects the log data,
The log data is held in the log data holding unit 113. Log display control unit 1
Reference numeral 14 captures log data from the log data holding unit 113 and analyzes the error by the log analysis function 116. The log display control unit 114 selects the log format determined by the driver and creates the log display data by embedding the analysis result of the log data. The log information indicating the failure location of the peripheral device 135 is displayed and output on the display unit 120 via the log display control unit 114.

When the peripheral device 135 connected to the computer system 100 is changed, a new driver (control program) is registered in the computer system. The driver is usually a magnetic disk such as a floppy disk, C
It is stored in a driver holding medium 130 such as a DROM and is input to the computer system 100, and the driver holding unit 11
Held at 7. At that time, the log display control unit 114
If the change is required, the log display control change data 131 is input to the computer system 100 and the function of the log display control unit 114 is changed.

[0013]

The log display control unit of the conventional computer system is fixedly provided in the computer system independently of the driver log data generation function, and the function change operation is performed separately from the driver registration. Was going on. Therefore, the change may cause a content mismatch between the log data creation function of the new driver and the function (format, etc.) of the log display control unit. Further, in the case of a system that operates with a plurality of computer systems, it is necessary to change the log display control unit of all computer systems regardless of whether the device driver is registered. Therefore, the operation of changing the log display control unit when the driver is changed is troublesome.

Further, in the conventional log display method, when the driver is changed or the log display function is changed, it is not possible to easily confirm the operation of the changed contents. As a result, the operation has not been fully confirmed, and the log information displayed during operation may indicate that the device has actually failed.
In some cases, it was not clear whether the log was displayed due to a failure in the log display control unit.

An object of the present invention is to provide a log data display method in which the log analysis function, the log display function and the like can be easily changed, and the changed contents are highly reliable.

[0016]

SUMMARY OF THE INVENTION According to the present invention, a program of a log analysis unit, a log format (a display format of log information), and the like are integrated and managed with a driver of a peripheral device, and the driver of the peripheral device to be changed is changed. The program and display format of the log analysis section are now input to the computer system when inputting. In addition, at that time, the operation confirmation data is also input so that the operation of the input analysis program and format can be easily confirmed.

FIG. 1 shows the basic configuration of the present invention. In FIG. 1, reference numeral 1 is a log analysis data holding means, which is a control program (driver) for a device connected to the computer system 2.
The log format, the log analysis means, and the operation confirmation data are integrally stored in a medium that stores the data (hereinafter, the log format, the log analysis means, and the operation confirmation data are collectively referred to as log analysis data).

Reference numeral 2 is a computer system which can perform log analysis. In the log analysis data holding means 1, 9 is a driver.

Reference numeral 10 is a log format. Reference numeral 11 is a log analysis means. Reference numeral 12 is operation confirmation data.

In the computer system 2, reference numeral 21 is a log format holding unit, which is a log analysis data holding unit 1.
It holds the log format input from.

A log format 22 has a log format name. Reference numeral 23 is a log analysis means holding unit, which holds the log analysis means fetched from the log analysis data holding means 1.

Reference numeral 24 is a log analysis means. A log data holding unit 25 holds log data. 26 is log data.

Reference numeral 27 is operation confirmation data, which holds the operation confirmation data input from the log analysis data holding means 1. 28 is a log display control unit,
The analysis result of the log analysis means holding section 23 is incorporated into the display format and displayed on the display means 29.

Reference numeral 29 is a display means for displaying and outputting the log analysis result. A log analysis data management table 30 holds the name of the log format held in the computer system 2 and the log analysis name of the log analysis means.

Reference numeral 31 is a log format name, which is the name of the log format held in the log format holding unit 21. 32 'is a log analysis name, which is the name of the log analysis means 24 held in the log analysis means holding unit 23.

Reference numeral 32 is a log management table for registering whether the log format operates properly for each log format name. Reference numeral 33 represents the correspondence between the log format name and the information indicating whether the log format operates correctly and can be used or cannot be used.

[0027]

The operation of the basic configuration of the present invention shown in FIG. 1 will be described. The log format 10, the log analysis means 11, and the operation confirmation data 12 that are integrally stored with the driver in the log analysis data storage means 1 are input to the computer system 2. The log format 10 is held in the log format holding unit 21. The log analysis means 11 is held in the log analysis means holding section 23. The operation confirmation data 12 is the log data holding unit 2
Held at 5. At that time, the log analysis data management table 30 is referred to, and if the same content is already registered, the data is not taken in. Further, the name of the captured log format is held in the log management table 32.

When a new control program (driver 9) is input, the operation confirmation of the newly held log format 22 and log analysis means 24 is performed using the operation confirmation data 27.

The operation confirmation data 27 is taken into the log analysis means 24 from the log data holding section 25. Also, the log format name is registered in the log management table 32. The log display control unit 28 confirms whether the log format is properly created by the operation confirmation data 12 and the log format 22 and the log information can be displayed correctly. At this time, if log analysis is required, the log analysis means 24 analyzes the operation by the operation confirmation data 27. Then, the log display control unit 28 incorporates the analysis result into the log format,
It is displayed on the display means 29. If it operates correctly, the information indicating that the format operates correctly is registered corresponding to the log format name of the log management table 32. If it does not operate properly, register information indicating that it cannot be used.

When a failure occurs in the peripheral device (not shown), the log data collecting means (not shown) collects the log data and the log data is held in the log data holding unit 25. The log analysis means holding unit 23 analyzes the log data. The log display control unit 28 controls the display so that the log analysis result can be displayed according to the log format 22, and outputs it from the display unit 29.

According to the present invention, when the driver is input, the log format, the log analysis means, and the log analysis data including the operation confirmation data are incorporated into the computer system together with the driver. It is possible to ensure consistency with the log display control function. In addition, the consistency can be confirmed by the operation confirmation data. Therefore, it is possible to prohibit the use of log formats that do not operate correctly, which increases the reliability of the log analysis results during operation. Also, it becomes easy to change the log display control function according to the change of the peripheral device.

[0032]

FIG. 2 shows an embodiment of the present invention. In FIG. 2, reference numerals 41, 42 and 43 denote a product 1, a product 2 and a product N, respectively, and peripheral devices 1 and 1 connected to the computer system.
The storage medium includes a driver (a product control program) for the peripheral device 2 and peripheral device N (not shown), a log format, a log analysis means, and operation confirmation data.

Reference numeral 45 is a computer system. Reference numeral 50 denotes an installation unit, which is product 1 (41), product 2 (42), product N.
The contents of the storage medium (43) are copied to the computer system 45.

Reference numeral 51 is a registration process for storing a driver for each product. Reference numeral 52 denotes a log format holding unit for the product 1, which holds the log format of the product 1, and holds a log format name, content data of the log format, and the like.

Reference numeral 53 is a log format holding unit for the product 2. Reference numeral 54 is a log format holding unit for the product N.
Reference numeral 61 denotes a log analysis means holding unit for the product 1, which holds the log analysis unit for the product 1.

Reference numeral 62 is a log analysis means holding unit for the product 2. Reference numeral 63 is a log analysis means holding unit for the product N. A log file 65 corresponds to the log data holding unit 25 in FIG. Log data 1, log data 2, ...
.., holds the log data N.

Reference numeral 66 is an operation confirmation data area for holding the input operation confirmation data of the product 1 or the like. 67 is a log display control unit.

Reference numeral 68 denotes a display means, which is a display,
A printer or the like. 70 is a log management table,
The usable (OK) and unusable (NG) are registered for each log format.

Reference numeral 71 denotes a driver management table, which is a driver name of a driver registered in the computer system 45, a log format name, and a log analysis name (name of log analysis means).
And the like (corresponding to the log analysis data management table 30 in FIG. 1).

Reference numeral 72 denotes a driver deleting means for deleting the registered driver and the log analysis data when the registered driver becomes unnecessary. A log control unit 73 controls the collection of log data and the like.

Reference numeral 74 is a log data collecting means, which is a program for collecting log data. Before describing the operation of the configuration of FIG. 2, an example of the log data, log data format, and log analysis unit of the present invention will be described.

FIG. 3 shows an example of the log data and log format of the present invention. FIG. 3A shows an example of log data. FIG. 3B shows an example of the log format. Figure 3 (a), (b)
In the figure, 81 is the log data 1.

Reference numeral 82 is log data 2. Reference numeral 83 is a log format name, which is the log format name of the log data 1 (81).

Reference numeral 83 'is a log format name, which is the log format name of the log data 2 (82). Reference numeral 84 is error information of the log data 1 and represents the content of the error.

Reference numerals 84 'and 84 "are error information of the log data 2 and indicate the content of the error. Reference numeral 85 is a log format, which is the log format of the log data 1 (81).

Reference numeral 85 'is a log format of the log data 2 (82). 87 is a log analysis name, and is an error type of log data 1 (81).
It is the log analysis name of E, has a size of 2 bytes, and indicates that the character type is alphanumeric (CHR).

87 'is a log analysis name, which is a log analysis name of ERROR TYPE of the log data 2 (82), 2
It is the size of bytes and indicates that the character type is alphanumeric (CHR).

87 "is a log analysis name, which is a log analysis name of LOCATION (failure position) of the log data 2 (82), has a size of 1 byte, and has a character type of alphanumeric characters (CH.
R).

FIG. 4 is a diagram showing a flow chart of the log analysis unit of the present invention and an example of log display. FIG. 4A is a flow chart (1) of the log analysis unit, which is a flow chart of log analysis of the log data 1 (81). FIG. 4B is an example of a log display in which the analysis result of the log data 1 is displayed according to the log format 85.

In FIG. 4B, 90 is a display screen. Reference numeral 91 is a display of the log format name, which represents a faulty device name.

Reference numeral 92 is an error message of error information (corresponding to the error information 84 in FIG. 3A). Figure 4 (a)
The flowchart will be described (see FIG. 3).

The log format 85 is selected according to the log format name 83 of the S1 log data 1 (81), and the log analysis program (log analysis means) with the analysis name 0101 is started by the log analysis name "0101".

The S2 error information 84 is input. S3, S4, S5 In S4, the error information is 000.
It is determined to be 1.

S6, S7 The error message corresponding to the error information "0001" is selected and displayed on the display screen 90 (error message 92 of ERROR TYPE).
reference).

FIG. 5 is a diagram showing a flow chart of the log analysis unit of the present invention and an example of log display. Figure 5 (a), Figure 5
(b) is a flow chart (2) and a flow chart (3) of the log analysis unit, which is a flow chart of log analysis of the log data 2 (82). FIG. 5C is an example of a log display in which the analysis result of the log data 2 is displayed according to the log format 85 ′.

In FIG. 5 (c), 90 is a display screen. Reference numeral 91 is a display of the log format name, which represents a faulty device name.

Reference numerals 92 and 92 'are error messages of the error information (corresponding to the error information 84' and 84 "of FIG. 3A). The flowchart (2) of FIG. 5A will be described (FIG. See 3).

The log format 85 'is selected according to the log format name 83' of the S1 log data 2 (82), and the analysis name 020 is selected from the log analysis name "0201".
The log analysis program No. 1 is started.

The S2 error information 84 '"0011" is input. S3, S4, S5 In S4, the error information is "00.
11 ”is determined.

S6, S7 The error message "Reader" corresponding to the error information "0011" is determined and displayed on the display screen 90 (ERROR TYPE).
Error message 92).

The flowchart (3) of FIG. 5B will be described (see FIG. 3). The log format 85 ′ is selected according to the log format name 83 ′ of the S1 log data 2 (82), and the log analysis program with the analysis name 0202 is started by the log analysis name “0202”.

Input the S2 error information 84 "" 09 ". S3, S4, S5 In S4, the error information is "0.
9 ”is determined.

S6, S7 Error message "SI" of "Location" corresponding to error information "0011"
"MM11" is selected and displayed on the display screen 90 (LO
Error message 92 'of "CATION").

The operation of the configuration of FIG. 2 will be described. (1) When installing the driver. Product 1 (41) shall be registered.

The installation section 50 takes in the contents of the product 1. Then, referring to the driver management table 71, if the same driver (driver name, version number) is not registered, driver registration is performed by the driver registration processing 51. The log format name and content (title, size, analysis number, display character type, etc.) are held in the log format holding unit 52. The log analysis means is held in the log analysis means holding section 61. The operation confirmation data is held in the operation confirmation data area 66 of the log file 65. Newly registered driver name (including version number),
The log format name and the log analysis name are registered in the driver management table 71.

When the log display control section 67 recognizes the operation confirmation instruction, the operation confirmation data area 6 of the log file 65 is displayed.
The operation confirmation log data is read from 6, the log format name is recognized according to the format of the content of the log data, and the corresponding log format is acquired from the log format holding unit 52. The log format name is registered in the log management table 70. The display means 68 displays and prints according to the log format. At that time, if there is a log analysis name in the log data, the log analysis means holding unit 6
The log analysis process is executed according to 1, and the analysis result is obtained and displayed and printed by the display means 68.

If the newly registered log format allows correct log display, information (OK) indicating that the log format is normal is registered in the log management table 70 in association with the log format name. If the newly registered log format cannot correctly display the log, information (NG) indicating that the log cannot be used is registered in association with the log format name.

(2) Operation during operation When a failure occurs in a peripheral device during operation, the log control unit 7
The log data is collected by the log data collecting means 74 under the control of 3 and held in the log file 65 (log data 1, log data 2, log data N). The log data is taken into the log analysis means holding unit 61 and the log data is analyzed. The log display control unit 67 performs display control according to the log format of the log format holding unit 52. At that time, the log management table 70 is referred to, and if the log format operates, a message indicating that the log display function is abnormal is displayed, and the log is not displayed.

When the driver is no longer needed and is to be deleted, the driver deleting unit 72 deletes the driver and its log format, log analyzing unit, and operation confirmation data from the respective holding units, and the driver management table 7
That registration in 1 is also deleted.

FIG. 6 is a flow chart of the log data structure and product registration of the present invention. FIG. 6A shows log data, which holds the log format name and details of the contents of the log data.

FIG. 6B is a flow chart of product registration. Instruct to install S1 driver etc. Read the driver from the S2 product (external medium) etc. and incorporate it into the computer system.

S3 log format from an external medium,
Read the log analysis means. It is determined whether or not log formats having the same name and the same version are already registered in the S4 driver management table.

If S5 is already registered, the process ends.
If not registered, the process proceeds to S6. S6 The log format, the name of the log analysis means, the version number and the driver name are registered in the driver management table.

S7 log format, log analysis means log format directory (log analysis means holding unit)
Copy to. S8 Read the operation confirmation data from the external medium etc. and write it in the operation confirmation data area of the log file.

FIG. 7 is a flowchart for deleting the driver management table of the present invention. Instruct to delete the S1 driver. Delete the S2 driver etc. from the computer system.

The S3 driver management table is searched using the driver name and the driver version number as keys. S4 If the search results do not match, the process ends. S5 The log format and the log analysis means are deleted from the log format directory and the log analysis directory.

FIG. 8 is a flow chart of the log display control unit of the present invention. S1 Confirms the log display function (confirms the operation of the log display controller). The log data is read from the operation confirmation data area of the S2 log file.

The log format name is obtained from the contents of the S3 log data. S4 Register the log format name in the log management table. S5: Read the log format from the log format directory (log format holding unit).

The log data is embedded in the S6 log format. S7: It is determined whether there is an analysis process. If there is, the process proceeds to S8, and if not, the process proceeds to S9. S8 The log data is passed to the log analysis means to obtain the analysis result.

S9 The log data and the log analysis result are embedded in the log format and displayed or printed. S10 It is determined whether it is normal.

S11 If the log analysis result is not normal, the log format of the log management table is disabled (NG).

[0082]

According to the present invention, when the device connected to the computer system is changed and the driver is input, log analysis data (log analysis means, log format, operation confirmation data) is also sent. Since it can be input, the consistency between the driver and the log analysis data can be maintained, and the log analysis data can be managed easily. Moreover, since the operation of the newly input log analysis data can be confirmed, the reliability of the log information can be increased.

[Brief description of drawings]

FIG. 1 is a diagram showing a basic configuration of the present invention.

FIG. 2 is a diagram showing an example of the present invention.

FIG. 3 is a diagram showing an example of log data and a log format of the present invention.

FIG. 4 is a diagram showing a flowchart of a log analysis unit of the present invention and an example of log display.

FIG. 5 is a diagram showing a flowchart of a log analysis unit of the present invention and an example of log display.

FIG. 6 is a diagram showing a configuration of log data and a flowchart of product registration according to the present invention.

FIG. 7 is a diagram showing a flowchart for deleting a driver management table according to the present invention.

FIG. 8 is a diagram showing a flowchart of a log display control unit of the present invention.

FIG. 9 is a diagram showing a conventional technique.

[Explanation of symbols]

 1: Log analysis data holding unit 2: Computer system 9: Driver 10: Log format 11: Log analysis unit 12: Operation confirmation data 20: Input unit 21: Log format holding unit 22: Log format 23: Log analysis unit holding unit 24: Log analysis means 25: Log data holding section 26: Log data 27: Operation confirmation data 28: Log display control section 29: Display means 31: Log format name 32: Log management table 33: Log format name

Claims (5)

[Claims] 1. A log data display method in a computer system, wherein the computer system comprises a log format holding unit for holding a display log format of log data.
A log analysis unit holding unit that holds the log data analysis unit, a log data holding unit that holds the log data and operation confirmation data, a log display control unit that controls the display of the log data, and a display that displays the log information. Means for inputting log analysis data to the computer system from a log analysis data holding means for holding log analysis data including log format and log analysis means and operation confirmation data in an external storage medium of the computer system, and logging The format and the log analysis means and the operation confirmation data are held in the respective holding units, and the display control unit creates and displays the display data based on the log analysis data held in the respective holding units. How to display log data. 2. The log data display method according to claim 1, wherein the external storage medium is a control program for a device connected to the computer system, and includes log analysis data integrally with the control program. 3. The log management table according to claim 1 or 2, further comprising a log management table having a log format name and an identification symbol for identifying whether the log format can be normally used or not. The display control unit tests the newly input log analysis data by using the operation confirmation data, registers the test result of the log analysis data in the log management table, and manages the log management during log analysis during operation. A method of displaying log data, which refers to a table and uses only the data for log analysis with a normal log format name. 4. The computer system according to claim 1, wherein the computer system comprises a log analysis data management table holding a log format name and a log analysis name of the input log analysis data, and the log is input when the log analysis data is input. A log data display method characterized in that the analysis data management table is referenced and the already registered log analysis data is not imported. 5. The log analysis data of the control program to be deleted according to claim 4, further comprising: means for deleting the input log analysis data, and when deleting the control program, the log analysis data management table is referred to. And a log data display method characterized by deleting corresponding information in the log analysis data management table.