KR20180029666A - Integrated monitoring method - Google Patents

Abstract

The present invention relates to an integrated control method which comprises the following steps: an integrated control server collects control information of a work system; the integrated control server generates a pattern on the control information by analyzing the control information; the integrated control server generates a policy on a symptom expression method by combining one or more patterns; and the integrated control server expresses a symptom through a dashboard module according to policy on the symptom expression method.

Description

INTEGRATED MONITORING METHOD

The present invention relates to an integrated control method, and more particularly, to an integrated control method for monitoring failure and performance of a business system in real time.

In general, electronic finance is the provision of financial services by means of electronic media. Electronic finance combines information and communication technology with information processing techniques, and adopts electronicization of financial transaction information, electronic response method, electronic behavior and electronic payment method, and conducts financial transaction and settlement business of customer and financial institution electronically Financial services.

The usual financial form is branch-oriented financial form, which is the most common and most prevalent form of financial business. It is a system in which financial transactions are processed by face-to-face meetings between employees and customers, and the branches (including branch offices) Improvement has become a strategic key factor in attracting customers.

Recently, the financial system has become more complicated and diversified due to the introduction of Internet banking using the Internet and smart banking service using smart phones. As a result, the necessity of operation and management of disruption of computer resources for financial services has increased.

Recently, integrated control system has been introduced. The integrated control system monitors real-time failure and performance of major IT equipment such as servers, networks, security, communications, and backup.

BACKGROUND ART [0002] The background art of the present invention is disclosed in Korean Patent Laid-Open Publication No. 10-2000-0021396 (Apr. 25, 2000) entitled " Branch fault management method of financial computing network ".

A conventional integrated control system collects data from a linkage system associated with the above-mentioned main equipment, processes and processes the collected data, notifies to a plurality of notification systems and visualizes them on a screen. In particular, the dashboard displays the above-described failure event on the screen so that the administrator can recognize the current failure event.

However, in the past, it was not enough for the manager to predict in advance whether or not a major failure could occur, and it was also difficult to analyze the cause of the failure. In addition, conventionally, a dashboard module is used to display and deal with a fault event of the highest grade, and there is a strong problem of the nature of the after-action to take action after the occurrence of the fault event.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and it is an object of one aspect of the present invention to provide a system and method for analyzing a failure event and a performance value of a business system to detect an abnormal symptom and visually express the detected abnormal symptom Method.

Another object of the present invention is to provide an integrated control method that enables an administrator to grasp the influence of a failure and easily analyze the cause of the failure by visualizing an abnormal symptom of a business system and expressing it through a dash mode.

Yet another object of the present invention is to provide an integrated control method for establishing a policy for anomaly indication using past event inquiry, performance numerical value inquiry, and simulation function.

Yet another object of the present invention is to provide an integrated control method that enables an administrator to more actively cope with a failure of a business system by detecting abnormality signs and expressing them through a dashboard based on failure event and performance numerical conditions of the business system will be.

Another object of the present invention is to provide a system and a method for managing a fault in a business system, including a server resource status, a database (DB) resource status, a WAS (Web Application Server) resource status, a TP The present invention provides an integrated control method that enables an administrator to more easily solve the cause of a trouble by integrating the status, the program operation status, the task system configuration diagram, the topology, the event history, and the failure history.

According to an aspect of the present invention, an integrated control method includes: a step in which an integrated control server collects control information of a business system; Analyzing the control information by the integrated control server to generate a pattern of the control information; The integrated control server combining at least one pattern to generate a policy for an anomaly indication mode; And displaying the abnormal symptom through the dashboard module according to the policy for the abnormal symptom display method.

In the present invention, the management information includes a failure event for the failure condition of the business system and performance information on the performance of the business system.

In the step of generating the pattern for the control information according to the present invention, when the control information is a fault event, the integrated control server selects a condition of the fault event, generates a pattern according to the selected condition, A pattern is simulated for the generated fault event to check whether a fault event occurred during the past period is searched, and a pattern is finally generated according to the result of the check.

In the present invention, the condition of the fault event includes at least one of a class of a fault event, a repetition count, an application type, a group of messages, an object of a message, an occurrence time at which an event was generated, .

In the step of determining the policy for the abnormality symptom display method of the present invention, the integrated control server defines a policy by combining at least one pattern, simulates the defined policy for a fault event for a predetermined period, And the policy is finally determined on the basis of the detected accuracy.

In the step of generating a pattern for the control information according to the present invention, if the control information is performance information, the integrated control server selects at least one condition suitable for the performance information, defines at least one pattern using the selected condition, A pattern is simulated with respect to performance information for a predetermined past period to confirm whether performance information for a past period is searched for, and a pattern is finally generated according to the check result.

In the present invention, the integrated control server is configured to check the performance value of the performance information and to generate a pattern corresponding to the performance information when the performance value of the checked performance information is out of a predetermined threshold range in the business system .

In the step of determining the policy for the abnormal symptom display method of the present invention, the integrated control server creates a policy by combining at least one pattern, simulates the generated policy against performance information for a predetermined past period And the policy is finally determined based on the detected accuracy after detecting the accuracy of the policy.

In the present invention, in the step of determining the policy, the integrated control server generates at least one group policy or a single policy according to the number of patterns.

In the step of exposing the abnormal symptom of the present invention through the dashboard module, the dashboard module may include an abnormality symptom detection timeline, a detection result of an abnormality symptom, a topology selection button, a configuration diagram selection button, a task plan selection button, A history selection button, a failure history selection button, and performance information on a single screen.

An integrated control method according to an aspect of the present invention analyzes abnormality events and performance values of a business system to detect an abnormal symptom and visually express the detected abnormal symptom through a dashboard module.

The integrated control method according to one aspect of the present invention visualizes an abnormal symptom of a business system and expresses the abnormal symptom through a dash mode module so that an administrator can grasp the influence of the obstacle and easily analyze the cause of the obstacle.

The integrated control method according to one aspect of the present invention detects abnormality symptom information based on a condition of a fault event in a fault event of a business system, detects a performance abnormality symptom in a performance value, and displays it through a dashboard, So that it can cope more actively.

The integrated control method according to one aspect of the present invention is a method of managing an integrated control system according to one aspect of the present invention, including a server resource status, a database (DB) resource status, a WAS (Web Application Server) resource status, a TP By integrating the status, system operation status, program operation status, business system configuration diagram, topology, event history, and failure history, the screen is configured as a whole so that the administrator can more easily solve the cause of the failure.

1 is a block diagram of an integrated control apparatus according to an embodiment of the present invention.
2 is a block diagram of an integrated control server according to an embodiment of the present invention.
FIG. 3 is a conceptual view illustrating a process of analyzing a condition of a fault event according to an embodiment of the present invention to display an abnormal symptom. Referring to FIG.
4 is a conceptual diagram illustrating a process of analyzing conditions of performance information according to an embodiment of the present invention to display an abnormal symptom.
FIG. 5 is a diagram illustrating an example of a screen displaying an abnormal symptom and associated information according to an embodiment of the present invention. Referring to FIG.
FIG. 6 is a diagram illustrating a topology configuration of association information according to an exemplary embodiment of the present invention. Referring to FIG.
FIG. 7 is a view showing an example of a screen displaying an abnormal symptom and related information in the past according to an embodiment of the present invention.
8 is a flowchart illustrating an integrated control method according to an embodiment of the present invention.
FIG. 9 is a flowchart illustrating a fault generation process based on a fault event according to an embodiment of the present invention. Referring to FIG.
10 is a flowchart illustrating a process of generating a performance information based policy according to an embodiment of the present invention.

Hereinafter, an integrated control method according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings. In this process, the thicknesses of the lines and the sizes of the components shown in the drawings may be exaggerated for clarity and convenience of explanation. Further, terms to be described later are terms generated in consideration of functions in the present invention, which may vary depending on the user, the intention or custom of the operator. Therefore, definitions of these terms should be made based on the contents throughout this specification.

FIG. 1 is a block diagram of an integrated control apparatus according to an embodiment of the present invention. FIG. 2 is a block diagram of a combined control server according to an embodiment of the present invention. FIG. FIG. 4 is a conceptual diagram illustrating a process of analyzing conditions of performance information according to an exemplary embodiment of the present invention to display abnormality symptoms. FIG. FIG. 5 is a diagram illustrating an example of a screen displaying abnormality indications and related information according to an embodiment of the present invention, FIG. 6 is a diagram illustrating a topology configuration of association information according to an embodiment of the present invention And FIG. 7 is a view showing an example of a screen displaying an abnormal symptom and related information in the past according to an embodiment of the present invention.

Referring to FIG. 1, an integrated control apparatus according to an exemplary embodiment of the present invention includes an integrated control server 20 and a dashboard module 30.

The dashboard module 30 exposes the information transmitted from the integrated control server 20. The information displayed through the dashboard module 30 includes abnormality indication information on a failure event or performance occurring in a business system or the like.

In this case, the dashboard module 30 promptly changes the screen when the abnormal symptom information is transmitted from the integrated control server 20, thereby improving the attention, thereby allowing the administrator to immediately recognize and cope with the trouble event.

Furthermore, the dashboard module 30 displays association information for the failed business system group 10 in order to allow the administrator to find and solve the cause of the failure event. The association information includes an abnormality detection detection time line, A detection result for the symptom, a topology, a configuration diagram, a work plan, an event history, a failure history, and performance information.

Here, the performance information may include resource performance information, DB (DataBase) performance information, WAS (Web Application Server) performance information, and TP (Transaction Processing) performance information.

Accordingly, the manager can find the cause of the fault event by referring to the related information, and resolve the fault event.

That is, when the failure event occurs, the dashboard module 30 displays association information related to the failure event and the performance information of the business system 11 in which the failure event has occurred, so that the administrator can grasp the influence degree of the failure event, So that fault events can be solved.

The integrated control server 20 collects control information for the business system 11. The control information includes a failure event for the failure situation of the business system 11 and performance information on the performance of the business system 11. [

The integrated control server 20 analyzes the collected control information to generate a pattern, combines the patterns to generate a policy for the anomaly indication system, and then transmits the generated anomaly notification to the dashboard module .

That is, when the management information is a failure event, the failure event occurring in the business system 11 is collected, and at least one pattern is generated by combining the collected failure event conditions.

Then, the integrated control server 20 generates a policy for an abnormal symptom display mode by combining at least one pattern, and displays a symptom of a malfunction event abnormality according to the generated policy through at least one of video and audio through the dashboard module 30 .

Also, when the control information is performance information, the integrated control server 20 collects performance information of the business system 11 and detects patterns of the collected performance information. Then, the integrated control server 20 generates a policy for the display mode by combining at least one pattern, and transmits the event abnormal symptom processing module 20 via at least one of video and audio through the dysfunction module 30 And

For reference, the financial service consists of a plurality of business groups, for example, a card, financial accounting, electronic finance, management information, banking, etc., and the tasks of the respective task groups are performed by the task system group 10.

Also, the business system group 10 includes a plurality of business systems 11, and each business system 11 includes a plurality of hosts. Failure event and performance information may be generated at the host.

Here, the failure event may include all of the faults generated in the server, the network, the security, the communication, the backup, and the like provided for performing the above-mentioned financial service.

The performance information is information on the performance of the host or the business system 11 and the like.

Referring to FIG. 2, the integrated control server 20 includes a data collection module 21, an event anomaly processing module 22, and an event anomaly processing module 23.

The data acquisition module 21 is connected to a server management system (SMS) (not shown) to collect fault events from the server management system.

The data collection module 21 also collects performance information from a unit system, for example, a host or business system 11, from an integrated control agent (not shown).

The data acquisition module 21 also inputs the failure event collected from the server management system to the event anomaly notification processing module 22 and inputs the performance information collected from the integrated control agent to the event anomaly notification processing module processing module 23 do.

The event abnormality symptom processing module 22 generates at least one pattern by combining the conditions of the fault event of the fault event input from the data collection module 21, and combines at least one of the patterns to generate an abnormality symptom After creating the policy, the dysfunction module 30 exposes a fault event abnormality according to this policy.

The event abnormality symptom processing module 22 includes an event pattern generator 221 and an event policy generator 222.

Referring to FIG. 3, the event pattern generation unit 221 generates at least one pattern according to the condition of the fault event input from the data collection module 21. FIG.

First, the event pattern generation unit 221 selects a condition suitable for a fault event, and defines at least one pattern using the selected condition.

The condition of the fault event includes at least one of the class of the fault event, the number of repetitions, the type of the application, the group of the message, the object of the message, the occurrence time at which the event occurred, the host name and the occurrence period of the fault event.

In addition, the event pattern generator 221 designates a preset past period, and simulates the pattern for a fault event occurring during a specified past period to check whether a fault event occurred during the past period is searched, As shown in FIG.

In this case, the event pattern generation unit 221 may repeat the above process to generate a plurality of patterns.

For reference, in this embodiment, generation of a plurality of patterns has been described as an example, but the technical scope of the present invention also includes generating one pattern.

Here, the past period may be preset by the administrator or automatically set around the current point of view.

For example, the event pattern generator 221 generates a pattern 1 if the number of times the fault event is repeated over the set time is equal to or greater than the set number of times, generates the pattern 2 if the class of the application is equal to or higher than the set rating, Generates pattern 3 according to the time, and generates pattern 4 according to the host name of the message. In addition, the event pattern generation unit 221 may combine the conditions of two or more fault events to generate one pattern.

The event policy generating unit 222 combines the patterns generated by the event pattern generating unit 221 to generate a policy for an abnormal symptom display mode.

Here, the policy is information on a method of expressing an abnormal symptom, and can be variously determined according to the number and type of combined patterns. In this case, it can be created as a group policy or a single policy depending on the number of patterns.

Accordingly, the abnormality event of the fault event can be provided in various forms depending on the number and characteristics of the combined patterns.

That is, the event policy generating unit 222 defines a policy by combining the patterns generated by the event pattern generating unit 221.

Then, the event policy generation unit 222 detects the accuracy of the policy by simulating the policy for the failure event during the past period, and finally generates the policy based on the accuracy.

For example, the event policy generating unit 222 generates the group policy 1 by combining the pattern 1, the pattern 2, and the pattern 3, generates the group policy 2 by combining the pattern 4 and the pattern 5, Can be combined to create Group Policy 3.

The event policy creating unit 222 exposes an abnormal symptom in various ways through the dashboard module 30 according to the policy generated as described above. Failure event anomalies can be visualized and visualized.

The failure event abnormality indication information displayed through the dashboard module 30 may include association information of the corresponding business system 11 with respect to the failure event.

Related information includes server resource status, DB (database) resource status, WAS (Web Application Server) resource status, TP (Transaction Processing) resource status, system operation status, program operation status, business system configuration diagram, topology, At least one of history may be included.

That is, when the fault event having a relatively low fault class is collected by the data collection module 21, the event fault symptom processing module 22 generates at least one pattern through the condition of the fault event of the collected fault event. The event abnormality symptom processing module 22 generates a policy for displaying an abnormality symptom using at least one pattern, and then displays a fault abnormality abnormality through the dashboard module 30 according to the policy. Accordingly, even if a failure event of a relatively low failure class occurs, the association information is displayed so that the administrator can analyze the cause of the failure event and the event failure and cope with the failure event.

The performance abnormality symptom processing module 23 checks the performance numbers of the performance information collected through the data collection module from the unit system and compares the performance numbers of the checked performance information with predetermined threshold ranges in the corresponding unit system, And generates at least one pattern by combining the conditions of the performance information according to the performance information. Then, at least one of the patterns is combined to generate a policy for the performance abnormality symptom processing module exposing method, Through the module (30).

In addition, the critical range can be composed of several grades, and it can be deduced that a fault or an error has occurred, and is set for each of the above-mentioned business systems. Therefore, if the performance value of the performance information deviates from the critical range, it can be deduced that the failure occurs in the unit system.

That is, the performance abnormality symptom processing module 23 checks the performance numerical value of the performance information inputted from the data acquisition module 21, and when the performance numerical value of the checked performance information is out of the predetermined threshold range, At least one of the patterns is combined to generate a policy for the performance abnormality symptom processing module display method by combining at least one of the patterns, and then a performance abnormality indication is displayed through the dashboard module 30 according to the policy do.

The performance abnormality symptom processing module 23 includes a performance new pattern generator 231 and a performance policy generator 232.

The performance pattern generation is used to check whether the threshold range is set based on the reference performance information using the statistical method based on the past performance information and whether the reference threshold range is out of range. Performance group policies consist of a combination of multiple performance patterns.

The performance new pattern generation unit 231 checks performance numbers of performance information for each unit system whenever performance information is collected from each unit system through the data collection module.

The performance new pattern generation unit 231 compares the performance value of the performance information with a preset threshold range in the corresponding unit system, and when the performance value of the performance information is out of the threshold range, Define a pattern.

Here, the threshold range can be set for each time period (5 minutes) based on time / day, etc., and is set using a statistical method based on past performance information. If this performance value falls outside the critical range, one pattern can be defined based on the performance information.

4, the performance new pattern generator 231 checks the performance numbers of the performance information for each unit system, and when the performance numbers of the checked performance information exceed the predetermined threshold range in the unit system A pattern corresponding to the performance information is defined.

In this case, the performance pattern generator 231 selects a condition suitable for the performance information, and defines at least one pattern using the selected condition. Then, the performance pattern generator 231 specifies a preset past period, simulates the pattern for the performance information for the specified past period to check whether the performance information for the past period is searched, Create a pattern.

In this case, the performance pattern generator 231 may repeat the above-described process to generate a plurality of patterns. For reference, in this embodiment, generation of a plurality of patterns has been described as an example, but the technical scope of the present invention also includes generating one pattern.

Meanwhile, when a plurality of patterns are generated as described above, the performance policy generator 232 combines the patterns generated by the performance pattern generator 221 as described above to generate a policy for the performance abnormality indication scheme do. That is, the performance policy generation unit 232 detects the accuracy of the policy by simulating the generated policy with respect to the performance information for the past period, and finally generates the policy based on the accuracy.

Here, the policy is a method of expressing a performance abnormality indication, and can be variously generated according to the number and type of combined patterns. In this case, it can be created as a group policy or a single policy depending on the number of patterns.

Accordingly, the performance abnormality indication may be provided in various forms depending on the number and characteristics of the combined patterns.

The dashboard module 30 exposes the information transmitted from the integrated control server 20. That is, the dashboard module 30 immediately switches from the integrated control server 20 to the screen for a fault event abnormality or a performance abnormality indication if a fault event abnormality or performance abnormality indication is transmitted.

In this case, the dashboard module 30 displays association information of the failed business system 11 in order to allow the manager to find out the cause of the failure event abnormality or the performance abnormality symptom.

Referring to FIG. 5, the dashboard module 30 includes an abnormality detection detection time line, a detection result of an abnormality symptom, a button (topology selection button, a configuration diagram selection button, a task plan selection button, an event history selection button, Button), and a screen for confirming performance information immediately on one screen.

In other words, the dashboard module 30 can display events, performance information, and key information based on the business system in which anomalous indications are generated by providing a screen in which all related information can be integrated when the anomalous indications occur, Information about the element and the affected business system, the person in charge and the configuration information (CI).

FIG. 6 shows main topology information. When the topology shown in FIG. 5 is selected by the administrator, the dashboard module displays the topology among the related information.

Referring to FIG. 6, the dashboard module 30 maintains a new topology around a corresponding object when any one of a task, a task system, a contact person, and configuration information is selected (double clicked) by an administrator, Detailed information about the object is displayed.

Based on this, the manager can check the influence of the business or the person in charge when the abnormal symptom occurs.

The topology includes the business systems, tasks, configuration CI, and personnel responsible for the tasks, as described above. The business system includes the task and configuration CI based on the business system, the business includes the business system and the person in charge of the task based on the business, and the configuration CI includes the business system and the constituent CI person, The person in charge of the task includes the task information mainly in charge of the task person in charge.

Meanwhile, FIG. 7 shows the association information of the abnormal symptom at the past time point designated by the administrator. Here, the past time point can be arbitrarily selected by the administrator, so that the manager can compare the association information for each of the current time point and the past time point, thereby making it possible to more effectively cope with the current abnormal point of view.

Hereinafter, an integrated control method according to an embodiment of the present invention will be described in detail with reference to FIGS.

8 is a flowchart illustrating an integrated control method according to an embodiment of the present invention.

Referring to FIG. 8, the integrated control server 20 collects fault events from the server management system (S10).

The integrated control server 20 then defines at least one pattern according to the condition of the fault event of the fault event (S20). Here, the condition of the fault event may include at least one of the number of times the fault event is repeated during the set period, the type of the application, the group of the message, the object of the message, the class of the event, the time when the event occurred, and the host name.

After defining the pattern based on the condition of the fault event, the integrated control server 20 combines the patterns to create a policy for the anomaly indication system (S30). In this case, the integrated control server 20 generates the policy as either a group policy or a single policy according to the number of patterns.

For example, the integrated control server 20 creates a policy as a group policy by combining a plurality of patterns, and creates a policy as a single policy using one pattern.

In step S40, the integrated control server 20 exposes an abnormal symptom to the user through the dashboard module 30 in accordance with the policy created as described above.

At this time, the abnormal symptom displayed through the dashboard module 30 may include the failure event information and the association information.

The failure event information may include various information about the failure event, such as the status of the host or business system 11 in which the failure event occurred, or the failure event class.

Even if a failure event of a relatively low failure grade is detected, the integrated control server 20 displays the association information based on the failure event so that the administrator can analyze the cause of the failure event and the event failure, do.

The integrated control server 20 also collects performance information from each of the unit systems (S50).

The integrated control server 20 checks performance numbers of performance information for each unit system whenever performance information is collected from each unit system and compares the performance numbers of the checked performance information with preset threshold ranges in the corresponding unit system .

At this time, if the performance value of the checked performance information is out of the predetermined threshold range, the integrated control server 20 generates at least one pattern by combining the conditions of the performance information (S60).

Then, the integrated control server 20 determines at least one of these patterns to determine the policy for the performance abnormality indication mode (S70), and then displays the performance abnormality indication through the dashboard module 30 according to this policy (S80).

Hereinafter, a process in which the integrated control server 20 generates the respective policies based on the fault event and performance information will be described in detail with reference to FIGS. 9 and 10. FIG.

FIG. 9 is a flowchart illustrating a fault generation process based on a fault event according to an embodiment of the present invention. Referring to FIG.

Referring to FIG. 9, when a fault event occurs, the event pattern generator 221 selects a condition suitable for the fault event (S110) and defines at least one pattern using the selected condition (S120).

Then, the event pattern generation unit 221 designates a predetermined past period, and simulates a pattern corresponding to a fault event occurring during a specified past period (S130), thereby checking whether a fault event occurred during the past period is searched , And generates the pattern according to the result of the check.

In particular, after generating the pattern as described above, the event pattern generator 221 re-selects the condition of the fault event at the time of occurrence of the fault event and repeats the above process to generate a new pattern Thereby generating a plurality of patterns (S140).

Meanwhile, when a plurality of patterns are generated as described above, the event policy generating unit 222 defines the policies by combining the patterns generated as described above (S150).

Then, the event policy generating unit 222 simulates the generated policy for the fault event during the past period (S160), detects the accuracy of the policy, and finally generates the policy based on the detected policy (S170).

10 is a flowchart illustrating a process of generating a performance information based policy according to an embodiment of the present invention.

Referring to FIG. 10, the performance pattern generator 231 selects a condition suitable for performance information (S210) and defines at least one pattern using the selected condition (S220).

Then, the performance pattern generation unit 231 designates a predetermined past period, and simulates the pattern for the performance information for the specified past period (S230), thereby confirming whether the performance information for the past period is searched, As shown in FIG.

Particularly, after generating the pattern as described above, the performance pattern generator 232 re-selects the condition of the performance information at the time when the performance information is collected, and repeats the above process to generate a new pattern Thereby generating a plurality of patterns (S240).

Meanwhile, when a plurality of patterns are generated as described above, the performance policy generating unit 232 defines the policies by combining the patterns generated as described above (S250).

Then, the performance policy generating unit 232 detects the policy accuracy by simulating the generated policy with performance information for the past period (S260), and finally generates a policy based on the detected policy accuracy (S270).

As described above, the integrated control method according to an embodiment of the present invention analyzes failure event information of the business system 11 to detect anomalous symptom information and display the detected anomalous symptom information through the dashboard module 30 in real time , The administrator can identify the impact of the failure and easily analyze the cause of the failure.

In addition, the integrated control method according to an embodiment of the present invention detects abnormality symptom information based on the condition of the fault event in the fault event information of the business system 11 and expresses the abnormality symptom information through the dashboard module 30, 11) to be able to cope with the disorder more actively.

In addition, the integrated control method according to an embodiment of the present invention is a method for managing a total of a server resource status, a DB resource status, a WAS resource status, a TP resource status, and a system operation status of the entire group to which the failed business system 11 belongs among the business systems 11 By integrating the status, program operation status, and work system configuration diagram, the screen is configured as a whole so that the administrator can more easily solve the cause of the trouble.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is clearly understood that the same is by way of illustration and example only and is not to be taken by way of limitation, I will understand. Accordingly, the true scope of the present invention should be determined by the following claims.

10: Business system group
11: Business system
20: Integrated control server
21: Data acquisition module
22: Event Notification Signaling Module
221: Event pattern generation unit
222: Event policy generation unit
23: Performance Error Signaling Module
231: Performance information counter section
232: Performance policy generation unit
30: Dashboard Module

Claims (10)

Collecting control information of the business system by the integrated control server;
Analyzing the control information by the integrated control server to generate a pattern of the control information;
The integrated control server combining at least one pattern to generate a policy for an anomaly indication mode; And
And the integrated control server displays the abnormal symptom through the dashboard module according to the policy on the abnormal symptom display method.
The integrated control method according to claim 1, wherein the control information includes a failure event for a failure condition of the business system and performance information on the performance of the business system.
3. The method according to claim 2, wherein in the step of generating the pattern for the control information,
If the control information is a failure event, the integrated control server selects a condition of the fault event, defines a pattern according to the selected condition, simulates a pattern of a fault event generated during a predetermined past period, And a pattern is finally generated in accordance with the result of the check.
4. The method of claim 3, wherein the condition of the fault event includes at least one of a class of a fault event, a repetition frequency, an application type, a group of messages, an object of a message, a generation time at which an event is generated, And an integrated control method.
4. The method according to claim 3, wherein, in the step of generating the policy for the abnormality symptom display method,
The integrated control server defines a policy by combining at least one pattern, detects the accuracy of the policy by simulating the defined policy for a failure event for a predetermined past period, and finally generates a policy based on the detected accuracy And a control unit for controlling the integrated control unit.
3. The method according to claim 2, wherein in the step of generating the pattern for the control information,
If the management information is performance information, the integrated control server selects at least one pattern by selecting a condition suitable for the performance information, using the selected conditions, simulates a pattern for performance information for a predetermined past period, The performance information is searched for, and the pattern is finally generated according to the result of the verification.
The integrated control server according to claim 6, wherein the integrated control server checks a performance value of the performance information and generates a pattern corresponding to the performance information if the performance value of the checked performance information is out of a predetermined threshold range in the business system .
The method according to claim 6, wherein, in the step of generating the policy for the abnormality symptom display method,
The integrated control server defines a policy by combining at least one pattern, simulates the created policy against performance information for a predetermined past period, detects the accuracy of the policy, and then, based on the detected accuracy, Wherein the method comprises:
2. The method of claim 1, wherein in creating the policy,
Wherein the integrated control server generates at least one group policy or a single policy according to the number of patterns.
The method according to claim 1, wherein in the step of displaying the abnormal symptom through the dashboard module,
The dashboard module displays an abnormality symptom detection timeline, a detection result of an abnormality symptom, a topology selection button, a configuration diagram selection button, a work plan selection button, an event history selection button, a fault history selection button, And a control unit for controlling the integrated control unit.

Images