WO2013035266A1 - 監視装置、監視方法およびプログラム - Google Patents
監視装置、監視方法およびプログラム Download PDFInfo
- Publication number
- WO2013035266A1 WO2013035266A1 PCT/JP2012/005357 JP2012005357W WO2013035266A1 WO 2013035266 A1 WO2013035266 A1 WO 2013035266A1 JP 2012005357 W JP2012005357 W JP 2012005357W WO 2013035266 A1 WO2013035266 A1 WO 2013035266A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- child
- monitoring
- area
- time
- evaluation result
- Prior art date
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/04—Processing captured monitoring data, e.g. for logfile generation
- H04L43/045—Processing captured monitoring data, e.g. for logfile generation for graphical visualisation of monitoring data
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
Definitions
- the present invention relates to a monitoring device, a monitoring method, and a program.
- IT services various methods for monitoring the status (operating status, etc.) of IT devices such as servers, storages, network devices, and various services (hereinafter referred to as “IT services”) realized using these devices have been provided. Yes.
- a monitoring system acquires information (monitoring messages, etc.) indicating the state of a monitoring target (IT service, IT device, etc.) in real time and outputs the information via a display or the like. Then, the monitoring operator monitors the information.
- the information indicating the status of the monitoring target includes information indicating that a failure has occurred in the monitoring target, and various inspection items (responses) performed every predetermined time to confirm the operating status of the monitoring target. Test results of time, CPU usage, etc.).
- Patent Document 1 stores a plurality of tag identifications, a plurality of positions, each tag identification being associated with at least one position, and information having a plurality of attributes. Each tag identification is associated with one or more attributes, and at least one location associated with the plurality of tag identifications, or generating a hierarchy based on at least one attribute; An automatic identification data processing method including displaying at least a part of information associated with each tag identification and at least a part of a position as a nested shape corresponding to a hierarchy is described. Patent Document 1 describes that data is visualized hierarchically in a nested structure known as a tree map.
- the inventor has found the following problems.
- the monitoring operator may monitor multiple monitoring targets in parallel.
- the monitoring operator can grasp that a defect has occurred in a plurality of monitoring targets and the details thereof.
- an object of the present invention is to provide a means by which a monitoring operator who monitors a plurality of monitoring objects in parallel can grasp the overall situation of the plurality of monitoring objects.
- the evaluation result acquisition means for acquiring an evaluation result obtained by evaluating each of the plurality of monitoring targets with the first and second indices, and the second index as the first index as one axis.
- a total calculation means for each child area for calculating how many monitoring objects are located in each of the plurality of child areas, and displaying the graph, and at least one of the plurality of child areas is placed on the plot area.
- a monitoring device having display means for displaying the information, and displaying information indicating the number of the monitoring targets located in the child area on the child area displayed in an identifiable manner.
- the computer has an evaluation result acquisition means for acquiring an evaluation result obtained by evaluating each of the plurality of monitoring targets with the first and second indices, the first index as one axis, and the first index.
- a plot area which is an area in which data on a graph with the index of 2 as the other axis is plotted, is divided into a plurality of child areas, and each of the plurality of monitoring targets is divided into the plot area using the evaluation result.
- a total calculation means for each child area for calculating how many monitoring targets are located in each of the plurality of child areas, displaying the graph, and plotting at least one of the plurality of child areas
- an evaluation result acquisition step for acquiring an evaluation result obtained by evaluating each of a plurality of monitoring targets with the first and second indices, and the second index with the first index as one axis.
- the plot area which is the area where the data on the graph with the index on the other axis is plotted, is divided into a plurality of child areas, and each of the plurality of monitoring targets is plotted in the plot area using the evaluation result
- a total calculation step for each child region that calculates how many of the monitoring objects are located in each of the plurality of child regions, and displaying the graph, and at least one of the plurality of child regions as the plot region
- a monitoring operator who monitors a plurality of monitoring objects in parallel can grasp the overall situation of the plurality of monitoring objects.
- the apparatus includes an arbitrary computer CPU, memory, and a program loaded in the memory (a program stored in the memory in advance from the stage of shipping the apparatus, a storage medium such as a CD, and the like on the Internet). And a storage unit such as a hard disk for storing the program, and a network connection interface, and any combination of hardware and software. It will be understood by those skilled in the art that there are various modifications to the implementation method and apparatus.
- each device is described as being realized by one device, but the means for realizing it is not limited to this. That is, it may be a physically separated configuration or a logically separated configuration.
- the monitoring apparatus acquires an evaluation result obtained by evaluating each of a plurality of monitoring targets using the first index and the second index. For example, the monitoring apparatus acquires the inspection results of a plurality of inspection items (response time, CPU usage rate, service life / death, etc.) performed on each of the plurality of monitoring targets. And the monitoring device uses the acquired inspection result, “customer satisfaction (first index)” indicating the quality of service that the customer can experience at the present time, and does not affect the customer at the present time, “Safety (second index)” indicating a risk of adversely affecting service quality in the future may be evaluated.
- the evaluation result can be, for example, an evaluation result with a perfect score of 100 points.
- the monitoring device is a graph in which the first index is taken on one axis (eg, x-axis) and the second index is taken on the other axis (eg, y-axis), and the data in the graph is plotted.
- a region (plot region) to be processed is divided into a plurality of child regions according to a predetermined rule (see FIG. 1).
- the plot area is equally divided into 100 child areas by 10 vertically and horizontally.
- the monitoring device calculates how many monitoring objects are located in each child area when each of the plurality of monitoring objects is plotted in the plot area using the evaluation results of the first and second indices of each monitoring object. To do.
- the monitoring device provides a graph as shown in FIG. 2 to the monitoring operator using the calculation result.
- the graph shown in FIG. 2 is a graph in which the first index is on the x-axis and the second index is on the y-axis, and 20 child areas are displayed in the plot area of the graph in an identifiable manner. Yes. The number of monitoring targets located in each child area is displayed on the 20 child areas displayed so as to be identifiable.
- a monitoring operator who monitors a plurality of monitoring targets in parallel can easily grasp the overall situation of the plurality of monitoring targets by browsing a graph as shown in FIG. It becomes possible to do.
- FIG. 3 is an example of a functional block diagram of the monitoring device 1 of the present embodiment.
- the monitoring apparatus 1 of the present embodiment includes an evaluation result acquisition unit 10, a sub-region total calculation unit 20, a sub-region change calculation unit 30, and a display unit 40.
- the evaluation result acquisition unit 10 acquires an evaluation result obtained by evaluating each of the plurality of monitoring targets with the first and second indexes.
- “Monitoring target” corresponds to IT devices such as servers, storages, and network devices, and various IT services realized using such IT devices.
- Each of the plurality of monitoring targets may be periodically or intermittently evaluated with the first and second indices, and the evaluation result acquisition unit 10 may acquire a plurality of such time-series evaluation results.
- the first and second indicators may be any indicator.
- “customer satisfaction (first indicator)” indicating the quality of service that the customer can experience at the present time, and the customer is not affected at all at the present time. It may be “safety (second index)” that does not affect, but indicates a risk of adversely affecting service quality in the future.
- the evaluation of such an index may be performed using, for example, inspection results of a plurality of inspection items performed on each of a plurality of monitoring targets.
- the “inspection item” includes all items for monitoring the operating state of the monitoring target. For example, the service response time, the CPU usage rate, the redundant configuration guarantee for checking the status of the redundant configuration, and the life and death of each IT device are inspected.
- the evaluation results of the first index and the second index may be indicated by points such as a maximum score of 100, a maximum score of 50, or may be indicated in five stages of A to E, Other methods may be used.
- the evaluation result acquisition unit 10 performs a plurality of inspection items for “customer satisfaction (first index)” and “safety (second index)” for each of a plurality of monitoring targets. Using the inspection result, the evaluation is made with a perfect score of 100 points.
- the evaluation result acquisition unit 10 includes an inspection result acquisition unit 11, a conversion rule holding unit 12, a conversion unit 13, a group evaluation unit 14, and a result. You may have the acquisition part 15.
- the inspection result acquisition unit 11 acquires inspection results of a plurality of inspection items performed for each of a plurality of monitoring targets. Inspection of a plurality of inspection items is performed regularly or intermittently. When the inspection item is inspected, the inspection result acquisition unit 11 can acquire the inspection result in real time. Such a configuration of the inspection result acquisition unit 11 can be realized in accordance with the prior art, and thus description thereof is omitted here.
- the conversion rule holding unit 12 holds a conversion rule for converting the inspection results of each of the plurality of inspection items into conversion values indicated by the same scale (100 points, 50 points, 5-step evaluation, etc.).
- the scale of the conversion value can be made the same as the evaluation result of the first index and the second index, and here, the scale is 100 points.
- a predetermined level eg, alert level
- the “predetermined level” may be a level different from the alert level.
- the predetermined level may be a level at which the monitoring operator needs to report the inspection result of each inspection item to a predetermined user (supervisor). In the following, it is assumed that the predetermined level is an alert level.
- the monitoring device calculates a reference value (eg, 80 points) from the response time “1 second”. Keep it. Further, when it is necessary to generate an alert when the redundant configuration of the first monitoring target falls below “n-duplication (active system)”, the monitoring apparatus determines the reference value from the redundant configuration “n-duplication (active system)”. A conversion rule for which (example: 80 points) is calculated is held.
- the conversion rule holding unit 12 can hold a plurality of at least one conversion rule in such common inspection items.
- the inspection item “response time” is a common inspection item that is performed for both the first and second monitoring targets.
- the conversion rule holding unit 12 can hold a conversion rule for converting the response time into a converted value for each of the first and second monitoring targets.
- the contents of each conversion rule may be different.
- the conversion rule holding unit 12 can hold a plurality of conversion rules corresponding to each. .
- FIG. 5 shows an example of the conversion rule held by the conversion rule holding unit 12.
- a conversion rule ID and a conversion rule are described in association with each inspection item.
- a plurality of conversion rules are associated with the response time, which is a common inspection item.
- FIG. 6 shows an example of conversion rule-monitoring target correspondence information. According to the conversion rule-monitoring target correspondence information shown in FIG. 6, the response time check result acquired from the monitoring target ID “000001” can be converted into a conversion value according to the conversion rule of the conversion rule ID [0000A]. It is shown.
- the details of the conversion rules are design matters and are not particularly limited.
- the conversion rule may be a function that calculates a conversion value when an inspection result is substituted.
- the conversion rule may be a rule for calculating a conversion value using only the latest inspection result, or calculating a conversion value using not only the latest inspection result but also the past inspection result. It may be a rule.
- an example of the conversion rule will be described.
- a system including a firewall (FW), a load balancer (LB), five web servers (Web01 to 05), and a database (DB) as shown in FIG. 7 is a monitoring target.
- Webs 01 to 05 have a redundant configuration. Further, it is assumed that the Webs 01 to 05 have a function of automatically recovering (automatic recovery function) when a failure occurs in the system.
- the inspection result of the inspection item “individual device (Web01) life and death” is “death (stop)”. Since Web01 is one of redundant configurations and has an automatic recovery function, stopping Web01 does not directly affect the operation of the system. For this reason, it is not necessary to generate an alert immediately when Web01 is stopped. However, when Web01 repeatedly stops and automatically recovers, it is considered that inspection is necessary, so it is better to generate an alert.
- the conversion rule in such a case is that when the inspection result of Web01 becomes “dead (stopped)”, a conversion value obtained by subtracting a predetermined value (here, “10 points”) from a full score (here, “100 points”) ( 90 points) may be calculated. After that, even if Web01 is automatically restored, the converted value (90 points) is not changed as it is, and when the inspection result becomes “dead (stopped)” again, the converted value (10 points) is subtracted from the converted value (10 points). 80 points) may be calculated. According to such a conversion rule, when Web01 repeats “stop-automatic recovery” a predetermined number of times, “80 points (reference value)” is calculated.
- the inspection result of the inspection item “redundant configuration guarantee” becomes “quadruple (active system)”.
- the system has no problem as long as the redundant configuration of the quadruple (active system) is maintained, and it is necessary to generate an alert when the system deteriorates to the triple (active system).
- the conversion rule in such a case is that the conversion value when the redundant configuration is 5-fold (active system) is a perfect score (here, “100 points”), and in the case of 4-fold (current system), “ 80 points (reference value) ”,“ 60 points ”for triple (active) system,“ 40 ”for dual (active) system, and“ 1 ”for one active web server. “20 points”, or “0 points” may be calculated when all web servers are stopped.
- the conversion unit 13 converts the inspection result acquired by the inspection result acquisition unit 11 into a converted value using a conversion rule.
- the conversion unit 13 identifies the monitoring target for which the inspection result has been performed, and then uses the conversion rule-monitoring target correspondence information (see FIG. 6) to associate it with the identified monitoring target.
- a conversion rule is specified, and then the inspection result is converted into a converted value using the specified conversion rule.
- the group-by-group evaluation unit 14 classifies a plurality of inspection items into a plurality of groups. Then, the group-by-group evaluation unit 14 calculates the evaluation value of each group using the conversion value of the inspection item classified into each group for each monitoring target.
- the group-by-group evaluation unit 14 immediately affects a plurality of inspection items when the inspection result of the inspection item does not satisfy a predetermined condition (for example, when a failure occurs), to a user who uses the monitoring target. May be classified into a group (immediate impact G) that has an impact and a group (future impact G) that does not affect immediately but may have a future impact.
- a predetermined condition is a design matter.
- the inspection items “service response time”, “service life / death”, “network performance”, and the like may be classified as an immediate effect G.
- one of a plurality of IT devices in a redundant configuration stops (Each device alive), maintains a certain level even if the redundancy of the redundant configuration decreases (redundant configuration guarantee), Even if some of the performance index values of the infrastructure are different from normal (correlation destruction level), or the resource usage is tight (resource capacity), the user who uses the service immediately Is considered to have no effect. However, if the state is continued, the situation further deteriorates and there is a possibility of affecting the user in the future. Therefore, the inspection items “life and death of each redundantly configured device”, “redundant configuration guaranteed”, “correlation destruction degree”, “resource capacity”, and the like may be classified as a future impact G.
- the group evaluation unit 14 holds in advance information (see FIG. 8) for identifying inspection items classified into each of a plurality of groups, and uses the information to classify the plurality of inspection items into each group. May be. Note that the above example of group classification is merely an example, and classification into other attribute groups is also possible. Hereinafter, the group-by-group evaluation unit 14 classifies the plurality of inspection items into an immediate effect G and a future effect G.
- the group-by-group evaluation unit 14 specifies the lowest value among the converted values of the inspection items classified into each group for each monitoring target, and calculates the lowest value as the evaluation value of the group. That is, the group-by-group evaluation unit 14 sets the converted value of the item having the worst inspection result among the inspection items classified into each group as the evaluation value of the group (hereinafter, “group evaluation value”).
- the group evaluation unit 14 holds data as shown in FIG. In the data shown in FIG. 9, in the “conversion value” column, a conversion value calculated based on the latest inspection result of each inspection item to be monitored is recorded. In the “group” column, the name of the group into which each inspection item is classified is recorded in association with each inspection item.
- the conversion value marked in the “minimum value” column means the lowest value in each group to be monitored.
- the redundant configuration guarantee conversion value is the lowest value among the plurality of inspection items classified into the future impact G of the monitoring target ID “000001”. In such a case, the group-by-group evaluation unit 14 determines the evaluation value of the future impact G of the monitoring target ID “000001” as “82 points”.
- the group-by-group evaluation unit 14 acquires the conversion value and updates the data illustrated in FIG. it can. Then, the group evaluation value is recalculated according to the updated contents. Such processing can be performed in real time.
- the result acquisition unit 15 acquires the evaluation values of the first and second groups as the evaluation results of the first and second indicators, respectively. For example, when the result acquisition unit 15 acquires the group evaluation value from the group-by-group evaluation unit 14, the result acquisition unit 15 may create and hold data as illustrated in FIG. And if a new group evaluation value is acquired from the evaluation part 14 for every group, the result acquisition part 15 may update the data shown in FIG. 10 as needed. In addition, the result acquisition part 15 is not only the latest evaluation value (the latest evaluation result of each of the first and second indicators) of each group to be monitored, but also the past evaluation value (first and second indicators). Each past evaluation result) may be accumulated in time series.
- the total calculation unit 20 for each child region is on a graph in which the first index is taken on one axis (eg, x-axis) and the second index is taken on the other axis (eg, y-axis).
- An area (plot area) where data is plotted is divided into a plurality of child areas (see FIG. 1), and each of a plurality of monitoring targets is plotted using the evaluation result (see FIG. 10) acquired by the evaluation result acquisition unit 10
- the number of monitoring objects located in each of a plurality of child areas is calculated.
- the total calculation unit 20 for each child area holds a division rule for dividing the plot area into a plurality of child areas.
- the division rule may be, for example, a rule for dividing the plot area into a predetermined number (design items) of square child areas by dividing the plot area evenly in the vertical and horizontal directions.
- the shape of the child region may be other shapes.
- the shape and size of all the child regions may be the same, or different ones may be mixed.
- the child area total calculation unit 20 may create and hold data as shown in FIG. 11, for example.
- the ID of the child area is described in the “child area ID” column.
- the column of “coordinates” information indicating the position and size of each child region on the plot region (“four coordinates” in the figure) is described.
- each child region is a quadrilateral connected by four coordinates.
- the number of monitoring targets located in each child area is described in the “number of monitoring targets” column. It is a matter of design which child region includes a monitoring target located on the boundary line of the child region.
- the child region total calculation unit 20 newly uses each updated result to update each
- the data shown in FIG. 11 may be updated by recalculating the number of monitoring targets located in the child area.
- the total calculation unit 20 for each child area may store not only the latest number of monitoring targets located in each child area but also the past number in association with time information in time series.
- the change calculation unit 30 for each child region uses the time-series calculation result (the number of monitoring targets located in each child region) by the total calculation unit 20 for each child region, to each of the plurality of child regions. Calculate time-series changes (increase, decrease, maintain) of the number of monitoring targets located.
- the display unit 40 displays a graph having the first index on one axis (eg, x-axis) and the second index on the other axis (eg, y-axis), for example, via a display ( 2), at least one of the plurality of child areas is displayed in an identifiable manner on the plot area.
- “display in an identifiable manner” means to display the child area so that it can be distinguished from other child areas.
- a plurality of child areas that are distinguishable from other child areas by displaying the outline are displayed. These child areas are displayed in an identifiable manner.
- processing such as an outline is not performed, so that a plurality of child areas located in the area are distinguished from other child areas. Not possible. For this reason, the child area
- 20 child areas are displayed in an identifiable manner.
- the display unit 40 may display only the child area where the monitoring target is located at that time, or the child area where a predetermined number (design items) or more of the monitoring objects are located at that time. May be displayed in an identifiable manner. In addition, the display unit 40 may display all child areas so that they can be identified.
- the display unit 40 displays information indicating the number of monitoring targets located in each child area on the child areas displayed in an identifiable manner. That is, the display unit 40 can realize the display using the calculation result (see FIG. 11) calculated by the total calculation unit 20 for each child region. And the display part 40 can update the content of a display in real time, if the total calculation part 20 for every child area recalculates a new result, and updates the information shown in FIG.
- a monitoring operator that monitors a plurality of monitoring targets in parallel can grasp the overall situation of the plurality of monitoring targets. For example, how many monitoring targets are high in the first index and the second index, how many monitoring targets are high in the first index but low in the second index, and high in the second index but the first It is possible to easily grasp how many monitoring targets have a low index and how many monitoring targets have a low first index and a second index.
- the display unit 40 may display a number as shown in FIG. 2 as information indicating the number of monitoring targets located in each child area, or take the number of monitoring targets on the z-axis, and 3 It may be displayed as a dimensional graph.
- the display unit 40 may highlight a child area located in a predetermined area on the plot area among the child areas displayed in an identifiable manner.
- a child region located in an area that satisfies the condition that the first index is less than 50 points or the second index is less than 50 points is highlighted.
- the highlighting means is not particularly limited, and the color scheme may be changed, the number size may be changed, or the blinking may be performed.
- the monitoring operator can move to the predetermined area (eg, an area where the evaluation result is not good). It is difficult to overlook the presence of the monitoring target.
- the display unit 40 may perform display as shown in FIG. FIG. 12 shows an extracted part of the child area displayed in an identifiable manner. This assumption is the same in FIGS. 13, 14, 18 to 20 used in the following description.
- the display unit 40 uses the first time calculation result (see FIG. 11) by the child region total calculation unit 20 on the child regions displayed in an identifiable manner, Information indicating the number of monitoring targets located in each child area at the first time is displayed (numerals in the figure).
- the display unit 40 displays the first time and the second time immediately before the first time (the time before the first time when the data shown in FIG. 10 or 11 is updated is closest to the first time). )
- the number of monitoring targets located in each child area when the first time is reached from the second time Displays information indicating changes in In the case of the example in FIG. 12, an increase is indicated by an upper right arrow, a no change is indicated by a right arrow, and a decrease is indicated by a lower right arrow.
- the change calculation unit 30 for each child region uses the calculation result (see FIG. 11) of the first time and the third time before the predetermined time (for example, five minutes before) to position each child region. It may be calculated how the number of monitoring targets to be changed changes from the third time to the first time (increase, no change, or decrease). And the display part 40 may show the said calculation result with the arrow as shown in FIG.
- the display unit 40 displays information indicating the number of monitoring targets located in each child area at the first time on each child area (number in the figure), and each child A time-series change in the number of monitoring targets located on the area may be displayed as a graph on each child area.
- the time is plotted on the horizontal axis and the number of monitoring targets is plotted on the vertical axis, but other graphs such as a bar graph can also be used.
- the horizontal axis may be set so that a change in the past predetermined time (eg, the past 30 minutes) from the first time is displayed.
- the setting of the horizontal axis is preferably common to all child regions.
- the scale of the vertical axis does not necessarily have to be common to all child areas, and may be different for each child area.
- each number is set so that the number of monitoring targets at the first time is at a predetermined position on the displayed vertical axis (middle, upper edge, lower edge, three quarters from the bottom, etc.)
- the vertical axis of the child area may be set.
- each target value and average value of each child area is at a predetermined position on the displayed vertical axis (middle, upper edge, lower edge, 3/4 position from the bottom, etc.)
- the vertical axis of the child area may be set.
- the display unit 40 may display information (information shown in parentheses) indicating a change in the number of monitoring targets in the past at the same timing on each child area.
- information can be created using the past information of the number of monitoring targets located in each child area, which is held by the total calculation unit 20 for each child area.
- the same timing may be the same time, the same time in the same month, the same time on the same day of the week, or other timing.
- the purpose of these displays is to detect the singularity of the current state by comparing the current state with the past state. For this reason, it is preferable that the past data is appropriate as such comparison data.
- the display unit 40 may display the number of monitoring targets at the same timing in the past together on each child area, or the target value of each child area at the timing or the time point Alternatively, the average value of each child area calculated using data traced back for a predetermined time may be displayed together.
- the user can grasp not only the state of the entire plurality of monitoring objects at that time but also how the states of the plurality of monitoring objects are changing.
- the monitoring device 1 of the present embodiment can be realized by installing the following program in a computer, for example.
- An evaluation result acquisition means for acquiring an evaluation result obtained by evaluating each of the plurality of monitoring targets with the first and second indices;
- the plot area which is an area on which data on the graph is plotted with the first index on one axis and the second index on the other axis, is divided into a plurality of child areas, and the evaluation result is used.
- a total calculation means for each child area that calculates how many monitoring objects are located in each of the plurality of child areas.
- at least one of the plurality of child regions is displayed in an identifiable manner on the plot region, and the monitoring located in the child region is displayed on the child region displayed in an identifiable manner.
- Display means for displaying information indicating the number of objects; Program to function as.
- the evaluation result acquisition unit 10 acquires an evaluation result (see FIG. 10) obtained by evaluating each of the plurality of monitoring targets with the first and second indexes.
- each child area total calculation step S20 the child area total calculation unit 20 divides the plot area of the graph with the first index on one axis and the second index on the other axis into a plurality of child areas. Then, when each of the plurality of monitoring objects is plotted in the plot area using the evaluation result acquired by the evaluation result acquisition unit 10 in S10, the number of monitoring objects located in each of the plurality of child areas is calculated (FIG. 11). reference).
- the display unit 40 displays a graph with the first index on one axis (eg, x-axis) and the second index on the other axis (eg, y-axis) on the display. , At least one of the plurality of child regions is displayed on the plot region in an identifiable manner, and information indicating the number of monitoring targets located in the child region is displayed on the child region displayed in an identifiable manner ( (See FIG. 2).
- the total calculation unit 20 for each child region recalculates how many monitoring targets are located in each of the plurality of child regions in S20, and then in S30.
- the display unit 40 changes the display content according to the result recalculated in S20.
- the monitoring operator can easily grasp the situation of the entire plurality of monitoring targets by browsing the display contents as shown in FIG.
- the evaluation result acquisition unit 10 evaluates “customer satisfaction (first index)” and “safety (second index)” using the results of a plurality of inspection items.
- the result of evaluation performed using only the inspection results of the two inspection items “service response time” and “CPU usage rate” may be used as the evaluation result of the first or second index.
- the evaluation result obtained using only the inspection result of “CPU usage rate” may be the evaluation result of the first or second index. That is, the result of evaluation performed using only a part of the results of the plurality of inspection items may be used as the evaluation result of the first or second index.
- the workload such as the number of transactions and the number of accesses may be acquired in accordance with the prior art, and each of these may be used as the evaluation result of the first or second index.
- the monitoring apparatus is the first in that a monitoring operator can easily understand how a plurality of monitoring targets are moving on a plurality of child areas as time passes. Different from the embodiment. Other configurations are the same as those of the first embodiment.
- FIG. 16 is an example of a functional block diagram of the monitoring device 1 of the present embodiment.
- the monitoring device 1 includes an evaluation result acquisition unit 10, a total calculation unit 20 for each child region, a change calculation unit 30 for each child region, a display unit 40, and a movement for each monitoring target. And a specific unit 50.
- the configurations of the evaluation result acquisition unit 10, the sub-region total calculation unit 20, and the sub-region change calculation unit 30 are the same as those in the first embodiment, and thus description thereof is omitted here.
- the configuration of the display unit 40 and the monitoring target movement specifying unit 50 will be described.
- the movement specifying unit 50 for each monitoring target specifies how each of the plurality of monitoring targets is moving on a plurality of child areas (movement trajectory). For example, the movement specifying unit 50 for each monitoring target uses a time-series past history of evaluation results (see FIG. 10) in which the evaluation result acquisition unit 10 evaluates each of the plurality of monitoring targets with the first and second indices.
- the data shown in FIG. 17 can be created and held.
- each monitoring target ID is described in the “monitoring target ID” column, the “child region ID” column is subdivided according to time, and each monitoring column at each time is displayed in each time column.
- the ID of the child area where the object is located is described. According to FIG. 17, the monitoring target with the monitoring target ID “000001” is located in the child area with the child area ID “0097” at the time A, and in the child area with the child area ID “0096” at the time B. You can see that it is located.
- the movement target identifying unit 50 having such data includes, for example, a monitoring target (example: child area ID “0097”) located at the first child area (example: child area ID “0097”) at the third time (example: time A). : “Monitoring target ID“ 000001 ”) can specify which child region is located at the fourth time immediately after (eg, time B). In addition, with the passage from the third time to the fourth time, how many monitoring objects have moved from the first child area to the second child area, and how many monitoring objects are in the second child area It is possible to specify whether or not it has moved to the first child area.
- the display unit 40 uses the identification result obtained by the movement identification unit 50 for each monitoring object, and the monitoring object located in the first child area at the third time on the displayed plot area is the fourth time. Indicates which child area has been moved to.
- the display unit 40 indicates that the monitoring target located in the first child region at the third time is the fourth by the arrow extending from the first child region to any of the plurality of child regions. Which child area moved to the time is displayed. That is, in the case of this example, it can be seen that a part of the monitoring target located in the child area A at the third time has moved to the child area B at the fourth time. It can also be seen that a part of the monitoring target located in the child area B at the third time has moved to the child area C or E at the fourth time. Further, it can be seen that a part of the monitoring target located in the child area C at the third time has moved to the child area E or F at the fourth time. Note that the number displayed in each child area may be the number of monitoring targets located in each child area at the fourth time.
- the display unit 40 represents the size of the number of monitored objects that have moved by the size of the arrow. Specifically, the larger the arrow, the greater the number of monitored objects that have moved. That is, in the example shown in FIG. 18, it can be seen that the number of monitoring targets moved from the region B to the region C is smaller than the number of monitoring targets moved from the region A to the region B.
- the display unit 40 may display only the arrow with the larger number of moved monitoring targets according to the difference. For example, a part of the monitoring target located in the child area A at the third time moves to the child area B at the fourth time, and a part of the monitoring target located in the child area B at the third time Is moved to the child area A at the fourth time.
- the arrows for displaying each of these are arrows in directions opposite to each other. Therefore, the display unit 40 calculates whether the number of monitoring targets moved from the child region A to the child region B or the number of monitoring targets moved from the child region B to the child region A is larger, and only the larger arrow is displayed. May be displayed. In such a case, an arrow may be displayed with a size corresponding to the difference between these numbers.
- the display unit 40 may not display all arrows, but may display arrows only when the number of moved monitoring targets (the above difference) is greater than a predetermined number. According to such a rule, in the example shown in FIG. 18, since the arrow extending from the child area A to the child area D is not displayed, the number of monitoring targets moved from the child area A to the child area D is predetermined. It can be seen that it is less than the number (including zero).
- the display unit 40 may also display comparison data such as past movements at the same timing (arrows in parentheses) on the plot area.
- the same time in the past may be the same time, the same time in the same month, the same time on the same day of the week, or other timing.
- the comparison data may be obtained by performing statistical processing such as an average value or a maximum value of a plurality of data (same month, same day, etc.).
- the purpose of displaying the comparison data is to detect a singular point in the current state by comparing the current state with the comparison data. For this reason, it is preferable that the comparison data is appropriate for such a comparison target.
- an alert may be displayed when the difference between the comparison data and the current data exceeds a predetermined value.
- the display part 40 may integrate and display them.
- an arrow from the region A to the region B and an arrow from the region B to the region C are continuous.
- an arrow from the region C to the region F and an arrow from the region F to the region I are continuous.
- the display part 40 may integrate each of these and perform a display as shown in FIG.
- the monitoring operator can grasp how the plurality of monitoring targets are moving on the plurality of child areas. As a result, the monitoring operator can grasp how the states of the plurality of monitoring objects change with the passage of time.
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Data Mining & Analysis (AREA)
- Quality & Reliability (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Debugging And Monitoring (AREA)
- General Factory Administration (AREA)
Abstract
Description
まず、本実施形態の概要について説明する。
複数の監視対象各々を第1及び第2の指標で評価した評価結果を取得する評価結果取得手段、
前記第1の指標を一方の軸に、前記第2の指標を他方の軸にとったグラフ上のデータがプロットされる領域であるプロット領域を複数の子領域に分割し、前記評価結果を利用して前記複数の監視対象各々を前記プロット領域にプロットした場合、前記複数の子領域各々にいくつの前記監視対象が位置するか算出する子領域毎合計算出手段、
前記グラフを表示するとともに、前記複数の子領域の中の少なくとも1つを前記プロット領域上に識別可能に表示し、識別可能に表示された前記子領域上に、当該子領域に位置する前記監視対象の数を示す情報を表示する表示手段、
として機能させるためのプログラム。
本実施形態の監視装置は、複数の監視対象が複数の子領域上を時間の経過とともにどのように移動しているのかを、監視オペレータが容易に把握できる表示を実現する点で、第1の実施形態と異なる。その他の構成は第1の実施形態と同様である。
Claims (10)
- 複数の監視対象各々を第1及び第2の指標で評価した評価結果を取得する評価結果取得手段と、
前記第1の指標を一方の軸に、前記第2の指標を他方の軸にとったグラフ上のデータがプロットされる領域であるプロット領域を複数の子領域に分割し、前記評価結果を利用して前記複数の監視対象各々を前記プロット領域にプロットした場合、前記複数の子領域各々にいくつの前記監視対象が位置するか算出する子領域毎合計算出手段と、
前記グラフを表示するとともに、前記複数の子領域の中の少なくとも1つを前記プロット領域上に識別可能に表示し、識別可能に表示された前記子領域上に、当該子領域に位置する前記監視対象の数を示す情報を表示する表示手段と、
を有する監視装置。 - 請求項1に記載の監視装置において、
前記評価結果取得手段は、定期的又は間欠的に評価された時系列な前記評価結果を取得し、
前記時系列な前記評価結果各々を利用した前記子領域毎合計算出手段による時系列な前記算出結果を利用して、前記複数の子領域各々に位置する前記監視対象の数の時系列な変化を算出する子領域毎変化算出手段をさらに有し、
前記表示手段は、前記子領域毎変化算出手段による算出結果を利用して、前記識別可能に表示された前記子領域上に、当該子領域に位置する前記監視対象の数の時系列な変化を示す情報を表示する監視装置。 - 請求項2に記載の監視装置において、
前記表示手段は、前記識別可能に表示された前記子領域上に、第1の時刻における前記評価結果を利用した前記子領域毎合計算出手段による前記算出結果を利用して、前記第1の時刻に前記子領域に位置する前記監視対象の数を示す情報を表示するとともに、前記第1の時刻の前記評価結果及びその直前の第2の時刻の前記評価結果を利用した前記子領域毎変化算出手段による前記算出結果を利用して、前記第2の時刻から前記第1の時刻になる際の前記子領域に位置する前記監視対象の数の変化を示す情報を表示する監視装置。 - 請求項2または3に記載の監視装置において、
前記表示手段は、前記識別可能に表示された前記子領域上に、当該子領域に位置する前記監視対象の数の時系列な変化を示す情報として、増加、変化なし、及び、減少の中の1つを示す情報を表示する監視装置。 - 請求項2または3に記載の監視装置において、
前記表示手段は、前記識別可能に表示された前記子領域上に、当該子領域に位置する前記監視対象の数の時系列な変化を示す情報として、グラフを表示する監視装置。 - 請求項2から5のいずれか1項に記載の監視装置において、
第3の時刻における前記評価結果及びその直後の第4の時刻における前記評価結果を利用して、前記第3の時刻において第1の前記子領域に位置した前記監視対象が、前記第4の時刻においていずれの前記子領域に位置するか特定する監視対象毎移動特定手段をさらに有し、
前記表示手段は、前記監視対象毎移動特定手段による特定結果を利用して、前記プロット領域上に、前記第3の時刻に前記第1の子領域に位置した前記監視対象が、前記第4の時刻にいずれの前記子領域に移動したかを表示する監視装置。 - 請求項6に記載の監視装置において、
前記表示手段は、前記第1の子領域から前記複数の子領域の中のいずれかに伸びる矢印により、前記第3の時刻に前記第1の子領域に位置した前記監視対象が、前記第4の時刻にいずれの前記子領域に移動したかを表示する監視装置。 - 請求項1から7のいずれか1項に記載の監視装置において、
前記評価結果取得手段は、
複数の監視対象各々に対して実施される複数の検査項目の検査結果を取得する検査結果取得手段と、
前記監視対象各々の前記検査項目各々の状況を同じスケールで示す変換値を、前記検査結果を利用して算出するための変換ルールを保持する変換ルール保持手段と、
前記測定結果取得手段が取得した前記検査結果、及び、前記変換ルールを利用して前記変換値を算出する変換手段と、
前記監視対象毎に、前記複数の検査項目を第1及び第2のグループに分類し、前記グループごとに各々のグループに分類される前記検査項目の前記変換値を利用して、評価値を算出するグループ毎評価手段と、
前記第1及び第2のグループ各々の前記評価値を、前記第1及び第2の指標各々の評価結果として取得する結果取得手段と、
を有する監視装置。 - コンピュータを、
複数の監視対象各々を第1及び第2の指標で評価した評価結果を取得する評価結果取得手段、
前記第1の指標を一方の軸に、前記第2の指標を他方の軸にとったグラフ上のデータがプロットされる領域であるプロット領域を複数の子領域に分割し、前記評価結果を利用して前記複数の監視対象各々を前記プロット領域にプロットした場合、前記複数の子領域各々にいくつの前記監視対象が位置するか算出する子領域毎合計算出手段、
前記グラフを表示するとともに、前記複数の子領域の中の少なくとも1つを前記プロット領域上に識別可能に表示し、識別可能に表示された前記子領域上に、当該子領域に位置する前記監視対象の数を示す情報を表示する表示手段、
として機能させるためのプログラム。 - 複数の監視対象各々を第1及び第2の指標で評価した評価結果を取得する評価結果取得ステップと、
前記第1の指標を一方の軸に、前記第2の指標を他方の軸にとったグラフ上のデータがプロットされる領域であるプロット領域を複数の子領域に分割し、前記評価結果を利用して前記複数の監視対象各々を前記プロット領域にプロットした場合、前記複数の子領域各々にいくつの前記監視対象が位置するか算出する子領域毎合計算出ステップと、
前記グラフを表示するとともに、前記複数の子領域の中の少なくとも1つを前記プロット領域上に識別可能に表示し、識別可能に表示された前記子領域上に、当該子領域に位置する前記監視対象の数を示す情報を表示する表示ステップと、
をコンピュータが実行する監視方法。
Priority Applications (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US14/241,868 US9356848B2 (en) | 2011-09-05 | 2012-08-27 | Monitoring apparatus, monitoring method, and non-transitory storage medium |
JP2013532420A JP6052177B2 (ja) | 2011-09-05 | 2012-08-27 | 監視装置、監視方法およびプログラム |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2011192649 | 2011-09-05 | ||
JP2011-192649 | 2011-09-05 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2013035266A1 true WO2013035266A1 (ja) | 2013-03-14 |
Family
ID=47831743
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/JP2012/005357 WO2013035266A1 (ja) | 2011-09-05 | 2012-08-27 | 監視装置、監視方法およびプログラム |
Country Status (4)
Country | Link |
---|---|
US (1) | US9356848B2 (ja) |
JP (1) | JP6052177B2 (ja) |
MY (1) | MY168302A (ja) |
WO (1) | WO2013035266A1 (ja) |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2016039219A1 (ja) * | 2014-09-09 | 2016-03-17 | 株式会社日立製作所 | 異常検知手順開発装置および異常検知手順開発方法 |
WO2016199411A1 (ja) * | 2015-06-11 | 2016-12-15 | 日本電気株式会社 | ログ表示装置とログ表示方法およびログ表示プログラム |
CN116740063A (zh) * | 2023-08-14 | 2023-09-12 | 山东众志电子有限公司 | 基于机器视觉的玻璃纤维丝生产质量检测方法 |
Families Citing this family (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9286179B1 (en) * | 2013-09-19 | 2016-03-15 | Amazon Technologies, Inc. | Service testing framework |
Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPH08147396A (ja) * | 1994-09-22 | 1996-06-07 | A & T:Kk | 臨床検査分析装置 |
JPH11353263A (ja) * | 1998-06-10 | 1999-12-24 | Nippon Telegr & Teleph Corp <Ntt> | アクセス傾向表示方法及び装置並びにアクセス傾向表示プログラムを記録した記録媒体 |
JP2007207173A (ja) * | 2006-02-06 | 2007-08-16 | Fujitsu Ltd | 性能分析プログラム、性能分析方法、および性能分析装置 |
JP2009516785A (ja) * | 2005-11-18 | 2009-04-23 | ウステル・テヒノロジーズ・アクチエンゲゼルシヤフト | ファンシーヤーンの特徴付け方法 |
JP2009211658A (ja) * | 2008-03-06 | 2009-09-17 | Nec Corp | 障害検知装置、障害検知方法及びそのプログラム |
WO2011083685A1 (ja) * | 2010-01-05 | 2011-07-14 | 日本電気株式会社 | 表示システム、表示方法、及びプログラム |
Family Cites Families (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7378969B2 (en) | 2005-10-25 | 2008-05-27 | Sap Ag | Systems and methods for visualizing auto-id data |
US8531514B2 (en) * | 2007-09-20 | 2013-09-10 | Nec Corporation | Image providing system and image providing method |
-
2012
- 2012-08-27 WO PCT/JP2012/005357 patent/WO2013035266A1/ja active Application Filing
- 2012-08-27 US US14/241,868 patent/US9356848B2/en active Active
- 2012-08-27 JP JP2013532420A patent/JP6052177B2/ja active Active
- 2012-09-04 MY MYPI2014000453A patent/MY168302A/en unknown
Patent Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPH08147396A (ja) * | 1994-09-22 | 1996-06-07 | A & T:Kk | 臨床検査分析装置 |
JPH11353263A (ja) * | 1998-06-10 | 1999-12-24 | Nippon Telegr & Teleph Corp <Ntt> | アクセス傾向表示方法及び装置並びにアクセス傾向表示プログラムを記録した記録媒体 |
JP2009516785A (ja) * | 2005-11-18 | 2009-04-23 | ウステル・テヒノロジーズ・アクチエンゲゼルシヤフト | ファンシーヤーンの特徴付け方法 |
JP2007207173A (ja) * | 2006-02-06 | 2007-08-16 | Fujitsu Ltd | 性能分析プログラム、性能分析方法、および性能分析装置 |
JP2009211658A (ja) * | 2008-03-06 | 2009-09-17 | Nec Corp | 障害検知装置、障害検知方法及びそのプログラム |
WO2011083685A1 (ja) * | 2010-01-05 | 2011-07-14 | 日本電気株式会社 | 表示システム、表示方法、及びプログラム |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2016039219A1 (ja) * | 2014-09-09 | 2016-03-17 | 株式会社日立製作所 | 異常検知手順開発装置および異常検知手順開発方法 |
JP2016057803A (ja) * | 2014-09-09 | 2016-04-21 | 株式会社日立製作所 | 異常検知手順開発装置および異常検知手順開発方法 |
WO2016199411A1 (ja) * | 2015-06-11 | 2016-12-15 | 日本電気株式会社 | ログ表示装置とログ表示方法およびログ表示プログラム |
CN116740063A (zh) * | 2023-08-14 | 2023-09-12 | 山东众志电子有限公司 | 基于机器视觉的玻璃纤维丝生产质量检测方法 |
CN116740063B (zh) * | 2023-08-14 | 2023-11-14 | 山东众志电子有限公司 | 基于机器视觉的玻璃纤维丝生产质量检测方法 |
Also Published As
Publication number | Publication date |
---|---|
JP6052177B2 (ja) | 2016-12-27 |
US20140195679A1 (en) | 2014-07-10 |
JPWO2013035266A1 (ja) | 2015-03-23 |
MY168302A (en) | 2018-10-25 |
US9356848B2 (en) | 2016-05-31 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
JP6394726B2 (ja) | 運用管理装置、運用管理方法、及びプログラム | |
CN111049705B (zh) | 一种监控分布式存储***的方法及装置 | |
JP5267736B2 (ja) | 障害検出装置、障害検出方法およびプログラム記録媒体 | |
US20170351563A1 (en) | Operation management apparatus, operation management method, and storage medium | |
US10747212B2 (en) | Management system and non-transitory computer-readable recording medium | |
US20160378583A1 (en) | Management computer and method for evaluating performance threshold value | |
US20080065928A1 (en) | Technique for supporting finding of location of cause of failure occurrence | |
CN105183619B (zh) | 一种***故障预警方法和*** | |
JP7221644B2 (ja) | 機器故障診断支援システムおよび機器故障診断支援方法 | |
CN107391335B (zh) | 一种用于检查集群健康状态的方法和设备 | |
JP6052177B2 (ja) | 監視装置、監視方法およびプログラム | |
CN110740061A (zh) | 故障预警方法、装置及计算机存储介质 | |
CN112380089A (zh) | 一种数据中心监控预警方法及*** | |
CN108809734A (zh) | 网络告警根源分析方法、***、存储介质及计算机设备 | |
JP2015075807A (ja) | 管理プログラム、管理方法、および情報処理装置 | |
US20230038164A1 (en) | Monitoring and alerting system backed by a machine learning engine | |
CN106911519A (zh) | 一种数据采集监控方法及装置 | |
EP3012701A1 (en) | Apparatus and method for managing operator alertness and enhancing operator effectiveness for industrial control systems | |
CN107666399A (zh) | 一种监控数据的方法和装置 | |
JP6002856B2 (ja) | 監視システム、及び、監視方法 | |
CN116755992B (zh) | 一种基于OpenStack云计算的日志分析方法及*** | |
CN117541217A (zh) | 基于三维可视化电网设备管理业务的运维方法 | |
CN106293975B (zh) | 信息处理方法、信息处理装置和信息处理*** | |
Kondo et al. | Process mining for alarm rationalization and fault patterns identification | |
JP6436644B2 (ja) | 分析装置およびコンピュータプログラム |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 12830583 Country of ref document: EP Kind code of ref document: A1 |
|
ENP | Entry into the national phase |
Ref document number: 2013532420 Country of ref document: JP Kind code of ref document: A |
|
WWE | Wipo information: entry into national phase |
Ref document number: 14241868 Country of ref document: US |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 12830583 Country of ref document: EP Kind code of ref document: A1 |