KR19990074002A - DMI management system with event handling function and event processing method - Google Patents

Abstract

The present invention relates to a DMI management system having an event processing function operating in computer systems connected by a network, and to a method for processing the same. The present invention relates to a management information database storing event occurrence information and a network for reading event occurrence information from a management information database. A DMI management system comprising a DMI service provider transmitting to another computer system connected by a network and a console monitor displaying event occurrence information received through a network to a user, wherein the event detection unit continuously monitors whether an event occurs in an operating system. ; An event data changing unit which receives an instruction indicating that an event has occurred from the event detecting unit and changes the event data generated by the operating system into a DMI indicator data type; And an event agent reading event occurrence information in the form of DMI indicator data from an event data changing unit and storing the event occurrence information in the management information database and informing the DMI service provider of the storage.

According to the present invention, the event processing function of the DMI management system is simply implemented and is operated regardless of the type of the component to be managed.

Description

DM management system having an event processing function and an event processing method

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to computer systems operating on a network, and more particularly to a D. M. management system (hereinafter referred to as DMI) operating on computer systems connected to a network.

The DMI management system is a management system that applies the DMI specification established by the Desktop Management Task Force. It monitors other computer systems from one computer system connected to the network and changes the configuration of other computer systems. Support to do

Computer systems on the network on which the DMI management system operates are divided into managed systems and managed systems. The managed system has a plurality of agents that deliver information collected from the managed components contained therein to the management system, and the management system retrieves the information transferred from the managed system or manages the configuration of the managed system. It is equipped with a console monitor to change. Therefore, each computer system on the network may be a management target system or a management system according to a role relationship with other computer systems in a specific situation.

The functions supported by the DMI management system are largely capable of retrieving system configuration information from other remote computer systems, changing the system configuration, and monitoring the contents of the console monitor when an abnormality occurs in the managed components included in the other computer system. It is classified as a function to detect.

However, according to the related art, a separate device driver and an agent must be developed for each component in order to detect events generated from the components to be managed.

Therefore, when the managed system has many managed parts, the development cost of the DMI management system increases, and when a new managed part is added, additional development costs are generated, which makes it difficult to maintain the DMI management system.

The present invention was created to solve the above problems, and provides a DMI management system capable of processing events generated from all managed components included in a managed system by one event agent with the help of an operating system. For that purpose.

Another object of the present invention is to provide an event processing method in the DMI management system.

1 is a block diagram of an overall configuration of a DMI management system according to the present invention.

FIG. 2 is a detailed block diagram of the management system of FIG. 1.

FIG. 3 is a detailed block diagram of the system to be managed in FIG. 1.

In order to achieve the above object, a management information database for storing event occurrence information according to the present invention, a DMI service provider for reading the event occurrence information from the management information database and transmitting it to another computer system connected by a network and received through a network The DMI management system including a console monitor displaying the event occurrence information to the user, the event detection unit for continuously monitoring whether the event occurs in the operating system; An event data changing unit which receives an instruction indicating that an event has occurred from the event detecting unit and changes the event data generated by the operating system into a DMI indicator data type; And an event agent reading event occurrence information in the form of DMI indicator data from an event data changing unit and storing the event occurrence information in the management information database and informing the DMI service provider of the storage.

In order to achieve the above another object, in the DMI management system according to the present invention, a method for processing an event occurring in each component constituting the computer system is provided for an event generated in each component constituting the computer system by the operating system. Generating event data; Confirming, by the operating system, generating an event occurrence data; Changing the event occurrence data generated by the operating system into a DMI indicator data format; Recording event occurrence information in the form of the DMI indicator data in a management information database; Reading event occurrence information from the management information database and transferring the event occurrence information to a console monitor of another computer system connected to a network; And confirming event occurrence information by a user of another computer system on a console monitor.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

1, the DMI management system according to the present invention includes a console monitor 100 provided in the management system 10, a DMI service provider 200 and an agent unit 210 provided in the managed system 20. It is configured by.

The DMI management system according to the present invention is configured by the DMI specification. DMI standardizes data and provides a unified program interface to easily and conveniently manage various information or events on parts for management by the console monitor 100.

The function provided by the DMI management system according to the present invention includes a function for retrieving configuration information of a managed system located at a remote location through the console monitor 100, changing the configuration of the system, and managed hardware 230 and an operating system ( If an abnormality occurs in the management target component, such as 240), the content is divided into a function that can be confirmed through the console monitor (100).

The process of retrieving system configuration information and changing system configuration is as follows. When the user requests the managed system 20 to retrieve the information by the console monitor 100, the DMI service provider 200 included in the managed system 20 may select one of the agents constituting the agent unit 210. Instruct the information retrieval by selecting an agent that can handle the request. Then, the agent collects the information from the parts to be managed, transforms the collected information into the Management Interface Format (MIF) of the DMI, and stores the information in the management information database. The DMI service provider 200 reads the corresponding information from the management information database and delivers the information to the console monitor 100. The user may grasp the information received through the console monitor 100 and may transmit a request for changing the system configuration to the managed system 20. The process for changing the system configuration is also performed in a similar flow as the system information retrieval process.

The process of monitoring a problem occurring in the managed system 20 is as follows. Each agent constituting the agent unit 210 detects various problems generated in the corresponding management target part and stores the problems in the management information database 250. The DMI service provider 200 reads the contents stored in the management information database 250 and transmits a warning message to the console monitor 100. The user can view the warning message displayed by the console monitor 100 and take appropriate action.

Referring to FIG. 2, the console monitor 100 included in the management system 10 includes a communication interface 110, a management operation unit 120, and a user interface 120. The communication interface 110 and the management operation unit 120 are each implemented according to the DMI specification.

The user interface 130 is an interface for displaying system configuration information and warning messages to a user and receiving a system configuration change command from the user. The user interface 130 includes a server view window 132, a data view window 134, and a warning view window ( 136) and the like.

The server view window 132 shows a list of managed systems among computer systems connected to a network. The data view window 134 shows the system configuration information of the managed system selected in the server view window 132 by a tree structure. When the user selects a part to be searched or changed, the agent of the managed system is displayed. Show the information collected by. The alert view window 136 shows the problem occurring in the managed component of the managed system in the form of DMI event processing.

According to FIG. 3, the managed system includes a DMI service provider 200, an agent 210, a device driver 220, managed hardware 230, an operating system 240, a management information database 250, and the like. It is configured by.

The communication interface 202 and the service provider 204 constituting the DMI service provider 200 are each implemented according to the DMI specification.

In the present invention, the components to be managed include various components included in the system main board 232, an optional card such as a graphics card, a LAN card, a SCSI card 234, a mass storage device such as a RAID, a power supply, and a fan. All managed hardware 230 included in the computer system may be included, and the operating system 240 or an application program may also be included.

The agent unit 210 may be provided with a separate agent for each management target part, or a common agent for a plurality of management target parts may be installed.

There are three ways to interface between the managed part and each agent. First, the system driver 222 reads or writes information about components installed in the main board 232 to or from the DMI BIOS 290 included in the Basic Input / Output System (BIOS). The system agent 212 may exchange the information with the system driver 222 through the BIOS interface 280. Second, information about hardware that cannot be controlled by the system BIOS, such as Small Computer System Interface (SCSI) or Redundant Array of Inexpensive Disks (RAID), is provided between the agent and the device driver. That is, the SCSI agent 214 exchanges information about the SCSI driver 224 and the SCSI card 234. Third, information about software components such as an operating system or an application program is directly exchanged with the operating system agent 216 and the operating system 240.

In general, in order to detect anomalies occurring in the parts to be managed in the console monitor, device drivers and agents including an event handler that can directly interface with the parts must be developed for each part separately.

However, in the present invention, by using the event monitoring function provided by the operating system of the computer system, without having a separate device driver and agent for event detection for each part, the event detection unit 260, the event data changing unit 270 And one integrated event agent 218.

The event detector 260 continuously monitors whether an event occurs in the operating system and instructs the event data changer 270 to perform a task when an event occurs. If the operating system is Microsoft Windows NT, the event detection unit 260 is implemented using the NotifyChangeEventLog function provided by Microsoft's Win32 SDK.

The event data changing unit 270 changes the event data generated by the operating system in the form of DMI indicator data. If the operating system is Microsoft Windows NT, the event data changing unit 270 reads an eventlog record generated in Windows NT. Eventlog records that occur in Windows NT have the following data structure:

struct {

DWORD Length;

DWORD RecordNumber;

DWORD TimeGenerated; // time the event occurred

DWORD Timewritten;

DWORD EventID;

WORD EventType; // error, warning, information

WORD NumStrings; // number of strings that make up the event message

WORD EventCategory;

WORD ReservedFlags;

DWORD ClosingRecordNumber;

DWORD StringOffset;

DWORD UserSidLength;

DWORD UserSidOffset;

DWORD DataLength;

DWORD DataOffset;

TCHAR SourceName [] // name of the service that caused the event

TCHAR Computername [] // Computer Name

SID UserSid

TCHAR Strings [] // event strings

BYTE Data []

CHAR Pad []

DWORD Length;

} NTEVENTLOGRECORD

The event data changing unit 270 reads an eventlog record of Windows NT, and then determines the time and event severity of the event using the TimeGenerated field and the EventType field, and NumStrings, Strings [], Data []. And Pad [] field to configure an event message describing the content of the generated event. Using the data to be reconstructed as described above, the event data changing unit 270 configures DmiMultiRowData, which is a standard structure of the DMI event.

The standard structure of a DMI event has the following data structure:

GROUP NAME = "Event Generation Group"

ATTRIBUTE name = "Event Type" value = "Windows NT Event Log"

ATTRIBUTE name = "Event Severity" value = non-critical / critical

ATTRIBUTE name = "Is state-based?" value = "no"

ATTRIBUTE name = "Event state key" value = unknown

ATTRIBUTE name = "Associated Group" value = "" // Depends on event source

ATTRIBUTE name = "Event System" value = "Operating System"

ATTRIBUTE name = "Event Solution" value = "" // According to event source interpretation

ATTRIBUTE name = "Instance present?" value = no

ATTRIBUTE name = "Event massage" value = "" // event message

ATTRIBUTE name = "vendor specific data" value =

END GROUP

In FIG. 3, the flow of event information between event agents 218 in the operating system 240 according to the present invention is indicated by a thick line.

According to the present invention, the DMI management system having an event processing function is simple by processing an event generated from all managed components included in the managed system by one event agent with the help of an operating system. Implemented to work regardless of the type.

Claims (2)

A management information database that stores event occurrence information, a DMI service provider that reads event occurrence information from the management information database and transmits it to other computer systems connected by the network, and a console monitor that displays the event occurrence information received through the network. In the DMI management system, An event detection unit continuously monitoring whether an event occurs in the operating system; An event data changing unit which receives an instruction indicating that an event has occurred from the event detecting unit and changes the event data generated by the operating system into a DMI indicator data type; And And an event agent which reads event occurrence information in the form of DMI indicator data from an event data changer and stores the event occurrence information in the management information database and informs the DMI service provider of the storage. In the method for handling events occurring in each component constituting a computer system, Generating, by the operating system, event data about an event occurring in each component constituting the computer system; Confirming, by the operating system, generating an event occurrence data; Changing the event occurrence data generated by the operating system into a DMI indicator data format; Recording event occurrence information in the form of the DMI indicator data in a management information database; Reading event occurrence information from the management information database and transferring the event occurrence information to a console monitor of another computer system connected to a network; And A method of processing an event in a DMI management system, comprising: a user of another computer system confirming event occurrence information on a console monitor.