JP2013005365A - Monitoring device, monitoring method, and program - Google Patents

Abstract

A monitoring device, a monitoring method, and a program capable of specifying a notification and a related notification when a highly important notification is made from a device to be monitored and presenting them together. I will provide a.
A monitoring device determines whether a notification notifying a failure from a device to be monitored corresponds to an emergency notification, and if so, identifies a notification related to the notification A condition is set, the determination unit 12 specifies a notification that matches the selection condition among notifications other than the emergency notification, and when the selection unit 16 and the determination unit 12 determine that it corresponds, the emergency notification and the selection unit And an emergency notification unit 17 that generates a dedicated screen 22 for notifying the outside of the notification identified by 16.
[Selection] Figure 1

Description

  The present invention relates to a monitoring device and a monitoring method for monitoring a device such as a server computer, and further relates to a program for realizing them.

  Conventionally, in a computer system including a plurality of server devices, a monitoring system has been introduced to manage the occurrence of a failure in each server device. In general, in the monitoring system, a notification notifying the occurrence of a failure is output from each server device to a central management device. The central management apparatus sequentially displays the notifications on the screen of the display device, so that the supervisor takes action based on the display content of the screen.

  However, in such a monitoring system, as the number of server devices to be managed increases, the burden on the administrator increases. Therefore, there is a possibility that a failure requiring urgent action may be overlooked. For this reason, for example, Patent Document 1 discloses a monitoring system in which the importance is determined in two stages for each failure received and displayed on the display screen with priority from the failure having the higher importance.

  According to such a monitoring system disclosed in Patent Literature 1, since it is easy for the monitor to grasp a failure having a high degree of importance (high urgency), a failure that requires urgent action is overlooked. Is considered to be avoided.

JP-A-8-242230

  By the way, since the server apparatus to be monitored is complicated at present, items to be monitored by the monitoring system are various items such as performance, resource usage status, log message, and process status. Along with this, the types of reports are increasing.

  For this reason, if the failure is simply classified into the importance as in the monitoring system disclosed in Patent Document 1, it takes time for the monitor to investigate and confirm the circumstances leading to the occurrence of the failure. As a result, there is a possibility that the initial action of the emergency response (recovery, etc.) of the observer is delayed, or that it takes time until the response (recovery, etc.) takes place after an emergency situation occurs.

  For example, it is assumed that a notification “CPU usage rate is in warning range” is given from a server device, and then a notification “throughput is reduced” is given. These are related to each other, but when the importance level of the former is set to “low” and the importance level of the latter is set to “high”, the latter notification is preferentially displayed on the screen. However, the former notification will be displayed on the screen later. As a result, it takes time for the monitor to identify the cause of the reduced throughput, making it difficult to take appropriate measures quickly.

  An example of the object of the present invention is to solve the above problems, and when a highly important report is made from a device to be monitored, the report and a related report are identified and presented together. An object is to provide a monitoring device, a monitoring method, and a program.

In order to achieve the above object, the monitoring device according to one aspect of the present invention determines whether or not a notification of a failure from a device to be monitored corresponds to an emergency notification, and if so, A determination unit that sets screening conditions for identifying related reports;
Among the notifications other than the notification determined by the determination unit to correspond to the emergency call, the selection unit that specifies a notification that matches the selection condition; and
An emergency call that generates a dedicated screen for notifying the outside of the report determined by the determination unit to correspond to the emergency call and the report specified by the selection unit when the determination unit determines that the determination is applicable And
It is characterized by having.

In order to achieve the above object, a monitoring method according to one aspect of the present invention includes:
(A) determining whether a notification notifying a failure from a device to be monitored corresponds to an emergency call and, if applicable, setting a selection condition for identifying a report related to the notification; and ,
(B) identifying a report that matches the selection condition among reports other than the report determined to correspond to the emergency call in the step (a); and
(C) When it is determined that it corresponds in the step (a), the notification determined to correspond to the emergency call in the step (a) and the notification specified in the step (b) Creating a dedicated screen to inform, steps,
It is characterized by having.

Furthermore, in order to achieve the above object, a program according to one aspect of the present invention is provided.
To the computer connected to the device to be monitored,
(A) determining whether or not a report notifying a failure from the device to be monitored corresponds to an emergency call, and if so, setting a selection condition for specifying a report related to the report; When,
(B) identifying a report that matches the selection condition among reports other than the report determined to correspond to the emergency call in the step (a); and
(C) When it is determined that it corresponds in the step (a), the notification determined to correspond to the emergency call in the step (a) and the notification specified in the step (b) Creating a dedicated screen to inform, steps,
Is executed.

  As described above, according to the present invention, when a highly important report is made from a device to be monitored, it is possible to identify the report and a report related to the report and present them together. it can.

FIG. 1 is a block diagram showing a configuration of a monitoring apparatus according to an embodiment of the present invention. FIG. 2 is a flowchart showing the operations of the report receiving unit and the determining unit that constitute the monitoring device according to the embodiment of the present invention. FIG. 3 is a flowchart showing the operation of the selection unit constituting the monitoring apparatus according to the embodiment of the present invention. FIG. 4 is a flowchart showing the operation of the emergency call unit constituting the monitoring device according to the embodiment of the present invention. FIG. 5 is a block diagram illustrating an example of a computer that implements the monitoring device according to the embodiment of the present invention.

(Embodiment)
Hereinafter, a monitoring device, a monitoring method, and a program according to an embodiment of the present invention will be described with reference to FIGS.

[Device configuration]
First, the configuration of the monitoring apparatus according to the embodiment of the present invention will be described with reference to FIG. FIG. 1 is a block diagram showing a configuration of a monitoring apparatus according to an embodiment of the present invention.

  As shown in FIG. 1, when the monitoring device 10 according to the present embodiment receives a notification notifying a failure from a device 30 to be monitored, the monitoring device 10 displays the received notification on the screen of the display device 20 such as a liquid crystal display. It is a device to let you.

  As shown in FIG. 1, the monitoring device 10 includes a determination unit 12, a selection unit 16, and an emergency notification unit 17. First, the determination unit 12 determines whether or not a report that notifies a failure from the device 30 to be monitored corresponds to an emergency call. And if the judgment part 12 determines with it being applicable, it will set the screening condition which specifies the report relevant to the said report.

  The sorting unit 15 identifies a report that matches the sorting condition among reports other than the report that the determination unit 12 determines to be an emergency call. The emergency notification unit 17 is a dedicated monitoring unit for notifying the outside of the notification that the determination unit 12 determines to be an emergency call and the notification that the selection unit 15 has identified when the determination unit 12 determines that the determination is applicable. A screen 22 is generated. The monitoring screen 22 is generated for each emergency call and is displayed on the screen of the display device 20.

  As described above, when the monitoring apparatus 10 receives a highly important emergency call from the apparatus 30 to be monitored, the monitoring apparatus 10 specifies a report related to the emergency call. And the monitoring apparatus 10 displays this emergency call and the related report collectively on a dedicated screen. For this reason, the supervisor of the monitoring device 10 can quickly investigate and confirm the circumstances leading to the occurrence of the failure, so that the initial action of emergency response (recovery, etc.) can be taken quickly, and an emergency state occurs. The time until the response (recovery, etc.) is reduced.

  Here, the configuration of the monitoring apparatus 10 in the present embodiment will be described more specifically. As shown in FIG. 1, in this embodiment, there are a plurality of devices 30 to be monitored, and each device 30 is a server computer (hereinafter referred to as “server computer 30”). The server computer 30 is connected to the monitoring device 10 via the network 40.

  Each server computer 30 incorporates a monitoring program 31 for detecting an internal failure, and a report is output by the monitoring program 31. Further, the monitoring program 31 outputs a report including the identifier of the server computer 30 in which the monitoring program 31 is incorporated and the content of the failure that has occurred.

  As shown in FIG. 1, in this embodiment, the monitoring device 10 includes, in addition to the determination unit 12, the selection unit 16, and the emergency notification unit 17, the notification reception unit 11, the notification storage unit 13, A reporting unit 14 and a reporting storage unit 15 are provided.

  The communication receiving unit 11 receives a report from each server computer 30 and delivers the received report to the determination unit 12. In the present embodiment, the determination unit 12 determines whether or not the above-described emergency notification is made with respect to the delivered notification.

  In the present embodiment, the determination unit 12 manages emergency call condition information including emergency call conditions and selection condition information including selection conditions. The emergency call condition is a condition that prescribes a call corresponding to the emergency call in advance, and the determination unit 12 determines whether the call corresponds to the emergency call based on the emergency call condition. In the present embodiment, the emergency notification condition and the selection condition are defined by the identifier of one of the server computers 30 and the content of the failure that has occurred.

  Further, in the present embodiment, the determination unit 12 specifies a selection condition corresponding to this emergency call from the selection condition information in order to specify a report related to a report (emergency call) that matches the emergency call condition. And set this to “valid”. In addition, when the specific selection condition is set to “valid”, the determination unit 12 first determines whether or not the notification matches the specific selection condition before making a determination based on the emergency notification condition thereafter. If they do not match, a decision is made based on the emergency call conditions.

  In addition, when the determination unit 12 determines that the notification matches the emergency notification condition, the determination unit 12 notifies the selection unit 16 of the set selection condition, and further notifies the emergency notification unit 17 and the notification storage unit 13. Notify emergency calls.

  The report accumulation unit 12 reports a report that the determination by the determination unit 12 is completed, specifically, a report that the determination unit 12 determines to meet the selection conditions, and a report that is a determination target whether the determination unit 12 is an emergency call. Accumulate temporarily. In addition, the notification storage unit 12 outputs the temporarily stored notifications to the normal notification unit 14 in the notified order, and deletes the notifications in the output order.

  The normal reporting unit 14 generates a monitoring screen 21 for notifying the reports stored in the report storage unit 13 to the outside, and displays the reports stored in the report storage unit 12 on the monitoring screen 21 in the order of notification. Unlike the monitoring screen 22 generated for each notification described above, only one monitoring screen 21 is generated regardless of whether there is an emergency notification. Moreover, all the notified reports are displayed on the monitoring screen 21 in time series.

  In this embodiment, the sorting unit 16 specifies a report that matches the sorting condition from the reports stored in the report storage unit 13 and the reports displayed on the monitoring screen 21 by the normal report unit 14. . That is, the sorting unit 16 specifies a report related to the emergency call from among the notifications waiting for processing and the already processed notifications.

[Device operation]
Next, operation | movement of the monitoring apparatus 10 in embodiment of this invention is demonstrated using FIGS. In the following description, FIG. 1 is taken into consideration as appropriate. Furthermore, in this embodiment, the monitoring method is implemented by operating the monitoring device 10. Therefore, the description of the monitoring method in the present embodiment is replaced with the following description of the operation of the monitoring device 10.

  In the following description, each server computer 30 is any one of a Web server, an application server, and a database server, and it is assumed that a plurality of these server computers are monitored. Further, it is assumed that the plurality of server computers constitute one system that provides various Web services.

  In the above case, in the Web server to be monitored, the monitoring program 31 monitors the CPU usage rate, the memory usage amount, the disk access rate, the network (number of input / output packets), and the Web service throughput. In the application server, the monitoring program 31 monitors the CPU usage rate, the memory usage amount, the disk access rate, and the status of the activated application. In the database server, the monitoring program 31 monitors the CPU usage rate, the memory usage amount, and the disk access rate.

  In addition, each monitoring program 31 notifies the monitoring device 10 when the status of the monitoring item is set, for example, when the threshold value reaches the warning range, or when it returns to the normal range. Output. “Notification” includes information such as “identification number (serial number) set for notification”, “monitoring item”, “content of notification”, “issue server name”, and “importance”. Yes.

  Furthermore, in the following description, for example, as an emergency notification condition, “issue server name” is “Web server”, and “contents of notification” is “Web service throughput is decreasing”. The condition is used. Further, when the emergency call condition is as described above, as the selection condition for the emergency call condition, the “issuing server name” is any one of “Web server”, “application server”, and “database server”, and “content of notification” Are “CPU usage rate is warning range”, “Memory usage is warning range”, or “Disk access rate is warning range”.

  In the present embodiment, the selection condition may be set in common for all the server computers 30 to be monitored, or may be set under different conditions for each server computer 30 to be monitored. good.

[Device Operation: Report Receiving Unit 11, Determination Unit 12]
First, the operations of the notification receiving unit 11 and the determination unit 12 illustrated in FIG. 1 will be described with reference to FIG. FIG. 2 is a flowchart showing the operations of the report receiving unit and the determining unit that constitute the monitoring device according to the embodiment of the present invention.

  First, as shown in FIG. 2, the communication receiving unit 11 receives a report from the monitoring program 31 of the server computer 30 to be monitored, and hands it over to the determining unit 12 (step A1). For example, it is assumed that a notification “Web service throughput is decreasing” is received under the condition that the emergency notification condition and the selection condition are set as described above.

  Next, the determination unit 12 determines whether or not a stop instruction is input from the monitor of the monitoring device 10 (step A2). If the result of determination in step A2 is that a stop instruction has been input, the process ends. Thereby, the operation of the monitoring device 10 is also stopped. On the other hand, if the result of determination in step A2 is that a stop instruction has not been input, the determination unit 12 executes the subsequent processing after step A3.

  Next, the determination unit 12 collates the notification acquired from the notification reception unit 11 in Step A1 with the selection condition validated in Step A6 described later (Step A3). Then, the determination unit 12 determines whether the notification corresponds to the validated selection condition based on the collation result (Step A4).

  As a result of the determination in step A4, when the acquired notification corresponds to the selection condition, the determination unit 12 executes step A11 and subsequent steps described later. On the other hand, as a result of the determination in step A4, when the acquired notification does not correspond to the selection condition, the determination unit 12 collates the acquired notification with the emergency notification condition (step A5).

  Then, the determination unit 12 determines whether or not the acquired notification satisfies a preset emergency notification condition based on the collation result (step A6). For example, if the notification is a notification that “the throughput of the Web service is decreasing”, this notification corresponds to the above-described emergency notification condition, and therefore, it is determined that the notification is an emergency notification.

  As a result of the determination in step A6, when the acquired report does not match the emergency call, the determination unit 12 notifies the acquired message to the report storage unit 13 (step A14).

  On the other hand, if the result of determination in step A6 is that the notification matches the emergency notification condition, the determination unit 12 instructs the emergency notification unit 17 to create a dedicated monitoring screen 22 and displays this on the screen of the display device 20. (Step A7).

  Next, the determination unit 12 specifies the selection condition corresponding to the notification determined to be an emergency call in Step A6 from the selection condition information, and sets this to “valid” (Step A8). Subsequently, the determination unit 12 notifies the selection unit 16 of the selection condition set to “valid” (step A9). When Steps A8 and A9 are executed, the determination in Step A4 for subsequent notifications output from the monitoring program 31 is made based on the selection condition set to “valid” in Step A8. Further, by executing step A9, the selection unit 12 executes step B1 and subsequent steps shown in FIG.

  Next, the determination unit 12 notifies the emergency notification unit 17 of a notification that matches the emergency notification condition (step A10). By executing Step A10, the emergency call unit 17 executes Step C1 and subsequent steps shown in FIG. The determination unit 12 also notifies the notification storage unit 13 of a notification that matches the emergency notification conditions (step A14).

  In addition, as a result of the determination in Step A4 described above, when the acquired report satisfies the selection condition, the determination unit 12 confirms whether the acquired report is a recovery report output for the emergency call. (Step A11). The recovery report is a report that is output in response to an emergency call, and the monitoring program of the server computer 30 outputs a recovery report when the failure that caused the emergency call is recovered.

  If the acquired notification is a recovery notification as a result of the determination in step A11, the determination unit 12 notifies the emergency notification unit 17 of the recovery notification (step A12). Further, the determination unit 12 sets the selection condition set to “valid” to “invalid” and notifies the selection unit 16 of this (step A13). When step A13 is executed, processing described later in the sorting unit 16 is stopped. Next, the determination part 12 performs step A15 after implementation of step A13.

  Further, even if the acquired report is not a recovery report as a result of the determination in step A11, the determination unit 12 notifies the emergency report unit 17 of a report other than the recovery report (step A14). Subsequently, the determination unit 12 also executes Step A15 in this case.

  And after execution of step A15, if the monitoring program 31 which operate | moves with a web server, an application server, or a database server outputs a report further, the judgment part 12 will perform step A1 again.

  In addition, after the execution of step A15, the report storage unit 12 temporarily stores the report notified from the determination unit 12. In addition, the notification storage unit 12 outputs the temporarily stored notifications to the normal notification unit 14 in the notified order, and deletes the notifications in the output order. Thereafter, the normal reporting unit 14 displays the reports stored in the report storage unit 12 on the monitoring screen 21 in the order of notification. Thereby, all the notified reports are displayed on the monitoring screen 21 in time series.

[Device Operation: Sorting Unit 16]
Next, the operation of the selection unit 16 shown in FIG. 1 will be described with reference to FIG. FIG. 3 is a flowchart showing the operation of the selection unit constituting the monitoring apparatus according to the embodiment of the present invention.

  First, when step A9 shown in FIG. 2 is executed, as shown in FIG. 3, the selection unit 16 acquires the selection condition set to “valid” from the determination unit 12 (step B1).

  Next, the sorting unit 16 reports from the reports stored in the report storage unit 13 that matches the screening conditions enabled by the determination unit 12, specifically, the “issue server name” of the screening conditions and A report whose "content of report" matches is selected (step B2).

  Subsequently, the sorting unit 16 also reports from the reports stored in the report storage unit 15 that matches the screening conditions enabled by the determination unit 12, specifically, the “issue server name” of the screening conditions. And the report whose “contents of report” matches is selected (step B3).

  Thereafter, the sorting unit 16 notifies the emergency notification unit 17 of the notification selected in step B2 and the notification selected in step B3 (step B4). After execution of step B4, the sorting unit 16 automatically ends the process. By executing step B4, the emergency call unit 17 executes step C2 shown in FIG.

  For example, it is assumed that the report A and the report B are stored in the report storage unit 13 or the report storage unit 15. In the case of notification A, it is assumed that “issue server name” is “application server” and “contents of notification” is “CPU usage is in warning area”. In report B, it is assumed that “issue server name” is “database server” and “content of report” is “disk access rate is in warning area”. In such a case, since the notifications A and B meet the above-described selection conditions, they are selected by the selection unit 16 and notified to the emergency notification unit 17.

[Device operation: Emergency call section 17]
Next, the operation of the emergency call unit 17 shown in FIG. 1 will be described with reference to FIG. FIG. 4 is a flowchart showing the operation of the emergency call unit constituting the monitoring device according to the embodiment of the present invention.

  First, when step A10 shown in FIG. 2 is executed, the emergency call unit 17 acquires the emergency call notified from the determination unit 12 (step C1). Subsequently, when step B4 shown in FIG. 3 is executed, the emergency notification unit 17 acquires a notification that matches the selection condition (step C2).

  Next, the emergency call unit 17 displays the emergency call and the call acquired in step C2 in chronological order on the dedicated monitoring screen 22 for the emergency call acquired in step C1 (step C3). .

  For example, in the emergency call notified from the determination unit 12, as described above, the “issue server name” is “Web server” and the “contents of the report” is “Web service throughput is decreasing”. And In this case, the above-described notification A and notification B are displayed on the dedicated monitoring screen 22 in time series.

  As a result, the monitor (or responder) of the monitoring apparatus 10 confirms the dedicated monitoring screen 22 and the cause of the decrease in the throughput of the Web service is that the CPU usage rate of the application server and the disk of the database server It can be easily understood that it is in the access rate.

  In addition, since the determination part 12 has also notified the emergency call notified to the emergency call part 17 also to the call storage part 13 (refer step A15), as above-mentioned, this emergency call is the normal call part 14 and It is also displayed on the monitoring screen 21 via the notification storage unit 15. The monitoring screen 21 is an entire monitoring screen that displays all reports.

  Next, the emergency call unit 17 determines whether or not the determination unit 12 has received a stop instruction in Step A2 shown in FIG. 2 (Step C4). If the result of determination in step C4 is that the determination unit 12 has received a stop instruction, the emergency call unit 17 ends the process. On the other hand, if the result of determination in step C4 is that the determination unit 12 has not received a stop instruction, the emergency notification unit 17 is not the recovery notification notified by the determination unit 12 in step A12 or the recovery notification notified in step A14 Is obtained (step C5).

  Next, the emergency notification unit 17 determines whether the determination unit 12 has acquired a recovery notification in step A11 based on the notification acquired from the determination unit 12 in step C5 (step C6).

  As a result of the determination in step C6, when the determination unit 12 has not acquired the recovery notification in step A11, the emergency notification unit 17 uses the dedicated monitoring screen for notifications other than the recovery notification acquired from the determination unit 12 in step C5. (Step C8). Thereafter, the emergency call unit 17 executes Step C4 again.

  On the other hand, as a result of the determination in step C6, when the determination unit 12 has acquired the recovery notification in step A11, the emergency notification unit 17 displays the recovery notification acquired from the determination unit 12 in step C5 on the dedicated monitoring screen 22. Display (step C7), and then the process ends. As a result, the dedicated monitoring screen 22 displays that the restoration has been completed. Thereafter, the monitor screen 22 is closed by the operation of the monitor.

[effect]
As described above, in the present embodiment, when an emergency call is received, a call related to the emergency call is automatically selected from the accumulated calls, and the selected call and the emergency call are dedicated. Displayed on the monitoring screen.

  Therefore, the monitor only has to concentrate on this dedicated monitoring screen, so that it is not affected by irrelevant notifications from other server computers that have not output emergency notifications, and the circumstances leading to the occurrence of a failure. Investigation and confirmation can be performed quickly. As a result, according to the present embodiment, it is possible to quickly take the initial action of emergency response (recovery, etc.), and as a result, it is possible to shorten the time from the occurrence of an emergency state to response (recovery, etc.). .

  Moreover, in this Embodiment, since the report relevant to an emergency call is automatically selected using the preset selection conditions, the influence of the skill level of a monitoring person (or responder) is suppressed. As a result, according to the present embodiment, a certain management level is ensured.

[program]
The program in the present embodiment may be a program that causes a computer to execute steps A1 to A14 shown in FIG. 2, steps B1 to B4 shown in FIG. 3, and steps C1 to C7 shown in FIG. By installing and executing this program on a computer, the monitoring device 10 and the monitoring method in the present embodiment can be realized.

  In this case, a CPU (Central Processing Unit) of the computer functions as the determination unit 12, the normal notification unit 14, the selection unit 16, and the emergency notification unit 17, and performs processing. Further, a memory provided in the computer functions as the notification storage unit 13, and a storage device such as a hard disk functions as the passbook storage unit 15.

  Here, a computer that realizes the monitoring apparatus 10 by executing the program according to the present embodiment will be described with reference to FIG. FIG. 5 is a block diagram illustrating an example of a computer that implements the monitoring device according to the embodiment of the present invention.

  As shown in FIG. 5, the computer 110 includes a CPU 111, a main memory 112, a storage device 113, an input interface 114, a display controller 115, a data reader / writer 116, and a communication interface 117. These units are connected to each other via a bus 121 so that data communication is possible.

  The CPU 111 performs various calculations by developing the program (code) in the present embodiment stored in the storage device 113 in the main memory 112 and executing them in a predetermined order. The main memory 112 is typically a volatile storage device such as a DRAM (Dynamic Random Access Memory). Further, the program in the present embodiment is provided in a state of being stored in a computer-readable recording medium 120. Note that the program in the present embodiment may be distributed on the Internet connected via the communication interface 117.

  Specific examples of the storage device 113 include a hard disk and a semiconductor storage device such as a flash memory. The input interface 114 mediates data transmission between the CPU 111 and an input device 118 such as a keyboard and a mouse. The display controller 115 is connected to the display device 119 and controls display on the display device 119. The data reader / writer 116 mediates data transmission between the CPU 111 and the recording medium 120, and reads a program from the recording medium 120 and writes a processing result in the computer 110 to the recording medium 120. The communication interface 117 mediates data transmission between the CPU 111 and the server computer 30 to be monitored.

  Specific examples of the recording medium 120 include general-purpose semiconductor storage devices such as CF (Compact Flash) and SD (Secure Digital), magnetic storage media such as a flexible disk, or CD-ROM (Compact Disk). Optical storage media such as Read Only Memory).

  Part or all of the above-described embodiments can be expressed by (Appendix 1) to (Appendix 12) described below, but is not limited to the following description.

(Appendix 1)
A determination unit that determines whether or not a notification that reports a failure from a device to be monitored corresponds to an emergency call, and if so, sets a selection condition that identifies a report related to the notification;
Among the notifications other than the notification determined by the determination unit to correspond to the emergency call, the selection unit that specifies a notification that matches the selection condition; and
An emergency call that generates a dedicated screen for notifying the outside of the report determined by the determination unit to correspond to the emergency call and the report specified by the selection unit when the determination unit determines that the determination is applicable And
A monitoring device comprising:

(Appendix 2)
A message storage unit for temporarily storing a report for which the determination by the determination unit is completed; and
A normal notification unit that generates a screen for notifying the notification accumulated in the report storage unit to the outside, and displays the reports stored in the report storage unit on the screen in the order in which the notification is notified;
The sorting unit identifies a report that matches the sorting condition from the reports stored in the report storage unit and the reports displayed on the screen by the normal reporting unit.
The monitoring apparatus according to appendix 1.

(Appendix 3)
The monitoring apparatus according to appendix 1 or 2, wherein the determination unit determines whether a report corresponding to the emergency call corresponds to the emergency call based on a predetermined emergency call condition.

(Appendix 4)
The device to be monitored is a server computer, and the monitoring program incorporated in the server computer notifies the report including the identifier of the server computer and the content of the failure that has occurred,
The emergency call condition and the selection condition are defined by the identifier of the server computer and the content of the failure that has occurred,
The monitoring device according to attachment 3.

(Appendix 5)
(A) determining whether a notification notifying a failure from a device to be monitored corresponds to an emergency call and, if applicable, setting a selection condition for identifying a report related to the notification; and ,
(B) identifying a report that matches the selection condition among reports other than the report determined to correspond to the emergency call in the step (a); and
(C) When it is determined that it corresponds in the step (a), the notification determined to correspond to the emergency call in the step (a) and the notification specified in the step (b) Creating a dedicated screen to inform, steps,
The monitoring method characterized by having.

(Appendix 6)
(D) temporarily storing the notification that the determination in step (a) is completed; and
(E) generating a screen for notifying the outside of the notification accumulated in the step (d) and displaying the notification accumulated in the step (d) on the screen in the order of notification; Further comprising
In the step (b), the notification that matches the selection condition is identified from the notifications accumulated in the step (d) and the notifications displayed on the screen in the step (e). To
The monitoring method according to attachment 5.

(Appendix 7)
The monitoring method according to appendix 5 or 6, wherein, in the step (a), it is determined whether a report corresponding to an emergency call corresponds to the emergency call based on an emergency call condition defined in advance.

(Appendix 8)
The device to be monitored is a server computer, and the monitoring program incorporated in the server computer notifies the report including the identifier of the server computer and the content of the failure that has occurred,
The emergency call condition and the selection condition are defined by the identifier of the server computer and the content of the failure that has occurred,
The monitoring method according to appendix 7.

(Appendix 9)
To the computer connected to the device to be monitored,
(A) determining whether or not a report notifying a failure from the device to be monitored corresponds to an emergency call, and if so, setting a selection condition for specifying a report related to the report; When,
(B) identifying a report that matches the selection condition among reports other than the report determined to correspond to the emergency call in the step (a); and
(C) When it is determined that it corresponds in the step (a), the notification determined to correspond to the emergency call in the step (a) and the notification specified in the step (b) Creating a dedicated screen to inform, steps,
A program that executes

(Appendix 10)
In the computer,
(D) temporarily storing the notification that the determination in step (a) is completed; and
(E) generating a screen for notifying the outside of the notification accumulated in the step (d) and displaying the notification accumulated in the step (d) on the screen in the order of notification; Is executed further,
In the step (b), the notification that matches the selection condition is identified from the notifications accumulated in the step (d) and the notifications displayed on the screen in the step (e). To
The program according to appendix 9.

(Appendix 11)
The program according to appendix 9 or 10, wherein, in the step (a), it is determined whether a report corresponding to an emergency call corresponds to the emergency call based on an emergency call condition defined in advance.

(Appendix 12)
The device to be monitored is a server computer, and the monitoring program incorporated in the server computer notifies the report including the identifier of the server computer and the content of the failure that has occurred,
The emergency call condition and the selection condition are defined by the identifier of the server computer and the content of the failure that has occurred,
The program according to appendix 11.

  As described above, according to the present invention, when a highly important report is made from a device to be monitored, the report and a report related thereto are specified, and these are collectively presented to the monitor. can do. The present invention is useful for a monitoring system that monitors the occurrence of failures in a plurality of server computers.

DESCRIPTION OF SYMBOLS 10 Monitoring apparatus 11 Report receiving part 12 Judgment part 13 Report storage part 14 Normal notification part 15 Report storage part 16 Sorting part 17 Emergency call part 20 Display apparatus 21 Overall monitoring screen 22 Dedicated monitoring screen 30 Apparatus (server) to be monitored Computer)
31 Monitoring program 40 Network 110 Computer 111 CPU
112 Main Memory 113 Storage Device 114 Input Interface 115 Display Controller 116 Data Reader / Writer 117 Communication Interface 118 Input Device 119 Display Device 120 Recording Medium 121 Bus

Claims (6)

A determination unit that determines whether or not a notification that reports a failure from a device to be monitored corresponds to an emergency call, and if so, sets a selection condition that identifies a report related to the notification;
Among the notifications other than the notification determined by the determination unit to correspond to the emergency call, the selection unit that specifies a notification that matches the selection condition; and
An emergency call that generates a dedicated screen for notifying the outside of the report determined by the determination unit to correspond to the emergency call and the report specified by the selection unit when the determination unit determines that the determination is applicable And
A monitoring device comprising: A message storage unit for temporarily storing a report for which the determination by the determination unit is completed; and
A normal notification unit that generates a screen for notifying the notification accumulated in the report storage unit to the outside, and displays the reports stored in the report storage unit on the screen in the order in which the notification is notified;
The sorting unit identifies a report that matches the sorting condition from the reports stored in the report storage unit and the reports displayed on the screen by the normal reporting unit.
The monitoring apparatus according to claim 1.   The monitoring apparatus according to claim 1, wherein the determination unit determines whether a notification corresponding to the emergency notification corresponds to the emergency notification based on a predetermined emergency notification condition. The device to be monitored is a server computer, and the monitoring program incorporated in the server computer notifies the report including the identifier of the server computer and the content of the failure that has occurred,
The emergency call condition and the selection condition are defined by the identifier of the server computer and the content of the failure that has occurred,
The monitoring device according to claim 3. (A) determining whether a notification notifying a failure from a device to be monitored corresponds to an emergency call and, if applicable, setting a selection condition for identifying a report related to the notification; and ,
(B) identifying a report that matches the selection condition among reports other than the report determined to correspond to the emergency call in the step (a); and
(C) When it is determined that it corresponds in the step (a), the notification determined to correspond to the emergency call in the step (a) and the notification specified in the step (b) Creating a dedicated screen to inform, steps,
The monitoring method characterized by having. To the computer connected to the device to be monitored,
(A) determining whether or not a report notifying a failure from the device to be monitored corresponds to an emergency call, and if so, setting a selection condition for specifying a report related to the report; When,
(B) identifying a report that matches the selection condition among reports other than the report determined to correspond to the emergency call in the step (a); and
(C) When it is determined that it corresponds in the step (a), the notification determined to correspond to the emergency call in the step (a) and the notification specified in the step (b) Creating a dedicated screen to inform, steps,
A program that executes

Images