JP6515653B2 - INFORMATION PROCESSING APPARATUS, MONITORING METHOD, AND PROGRAM - Google Patents

Description

  The present invention relates to monitoring of a system, and more particularly to an information processing apparatus for monitoring a system including a plurality of nodes relaying data, a monitoring method, and a program.

  The information processing system includes a plurality of information processing devices. Then, the information processing apparatus included in the information processing system transmits and / or receives data with another apparatus (see, for example, Patent Document 1).

  FIG. 6 is a block diagram showing an example of the configuration of a general information processing system 90 as described in Patent Document 1. As shown in FIG. An information processing system 90 shown in FIG. 6 includes a source node 10, a destination node 30, and a relay node group 91.

  The source node 10 is an information processing apparatus that transmits data. The destination node 30 is an information processing apparatus that receives data. The relay node group 91 relays data communication between the source node 10 and the destination node 30. That is, the source node 10 and the destination node 30 are connected via the relay node group 91.

  The relay node group 91 includes a plurality of relay nodes 92 which are information processing apparatuses that relay data. The relay node group 91 shown in FIG. 6 includes n (n is a predetermined natural number) relay nodes 92 as an example. The relay node group 91 configures a communication path connecting the source node 10 and the destination node 30 by using the relay node 92.

  In the following description, in order to distinguish the relay node 92, the relay node 92 closest to the source node 10 is taken as the relay node 92-1, the next relay node 92 is taken as the relay node 92-2, and so forth. Suppose you want to increase the number attached to. Then, the relay node 92 immediately before the destination node 30 is set as the relay node 92-n.

  When a failure occurs in any of the relay nodes 92, in the information processing system 90, a decrease in communication performance or a communication failure (hereinafter collectively referred to as "failure") occurs. When a failure occurs, the administrator of the information processing system 90 executes recovery processing. The administrator uses the information of the log in which the operation state of the relay node 92 is stored for the recovery process.

  FIG. 7 is a diagram showing collection of logs in the information processing system 90. In FIG. 7, the relay node 92 in which a failure has occurred is set as the relay node 92-m (m is a natural number less than or equal to n).

  As shown in FIG. 7, each relay node 92 included in the information processing system 90 collects and stores logs including communication history and failure information. Then, when a failure occurs in the information processing system 90, the manager of the information processing system 90 uses the log collected by the relay node 92 in order to identify the suspected relay node 92 that has caused the problem.

JP, 2011-170411, A

  As described above, in the event of a failure in the information processing system 90, the administrator is required to investigate the logs of the plurality of relay nodes 92 relaying data of the destination node 30 from the source node 10. However, as described above, each relay node 92 collects logs independently. That is, the logs stored by the relay node 92 do not include information on the mutual relationship. Therefore, in order to specify a suspected place (relay node 92-m) in the information processing system 90, the administrator needs to collate (match) the logs in the plurality of relay nodes 92.

  FIG. 8 is a diagram schematically illustrating general log matching.

  As shown in FIG. 8, the administrator needs to repeat the operation of acquiring and confirming the logs of each relay node 92 in order and acquiring the logs to the next relay node 92 after the confirmation. .

  For example, referring to FIG. 8, the following will be described in more detail.

  The administrator first confirms the log of the relay node 92-1 which is the relay node 92 closest to the source node 10. If the log of the relay node 92-1 is normal, the administrator checks the log of the relay node 92-2, which is the next relay node 92. Hereinafter, the administrator sequentially checks the logs up to the log of the relay node 92-m which is the relay node 92 in which the failure has occurred.

  As described above, the administrator's failure analysis work requires many man-hours to repeat the work of acquiring and checking the logs in order.

  As described above, the technique described in Patent Document 1 has a problem that a log (monitoring data) effective for failure analysis can not be created.

  An object of the present invention is to provide an information processing apparatus, a monitoring method, and a program that solve the above problems and create more effective monitoring data.

  An information processing apparatus according to an aspect of the present invention is connected to a plurality of relay nodes that relay communication data in a sequence that is communication processing from a source node that is a transmission source of communication data to a destination node that is a transmission destination of communication data. A connection means, and a signal related to communication data in a sequence are collected from the relay node through the connection means, and a signal related to a session which is a communication process of communication data of one or a predetermined unit included in the collected signal It includes: a collection means for generating session data which is information on a session basis, and a storage means for storing session data as a part of sequence data related to a sequence.

  A monitoring method according to an aspect of the present invention is connected to a plurality of relay nodes that relay communication data in a sequence that is communication processing from a source node that is a transmission source of communication data to a destination node that is a transmission destination of communication data. A session is information based on a signal related to a session which is a communication process of communication data of one or a predetermined unit included in collected signals, collecting signals related to communication data in a sequence from a relay node. Generate data and save session data as part of the sequence data associated with the sequence.

  A program according to one aspect of the present invention includes a process of connecting to a plurality of relay nodes that relay communication data in a sequence that is communication processing from a source node that is a transmission source of communication data to a destination node that is a transmission destination of communication data. Processing for collecting a signal related to communication data in a sequence from the relay node through the connection means, and a signal related to a session which is communication processing of one or a predetermined unit of communication data included in the collected signal. And causing the computer to execute a process of generating session data which is information for each session, and a process of storing session data as a part of sequence data related to a sequence.

  According to the present invention, the effect of creating more effective monitoring data can be achieved.

FIG. 1 is a block diagram showing an example of the configuration of an information processing system including an information processing apparatus according to a first embodiment of the present invention. FIG. 2 is a block diagram showing an example of the configuration of the information processing apparatus according to the first embodiment. FIG. 3 is a diagram for explaining signal collection in the information processing apparatus according to the first embodiment. FIG. 4 is a view showing an example of sequence data of the information processing apparatus according to the first embodiment. FIG. 5 is a diagram illustrating an example of another configuration of the information processing apparatus according to the first embodiment. FIG. 6 is a diagram showing an example of the configuration of a general information processing system. FIG. 7 is a diagram showing collection of logs of a general information processing system. FIG. 8 is a diagram schematically illustrating general log matching.

  Next, embodiments of the present invention will be described with reference to the drawings.

  Each drawing is for describing an embodiment of the present invention. However, the present invention is not limited to the description of each drawing. Moreover, the same number may be attached | subjected to the same structure as each drawing, and the description of the repetition may be abbreviate | omitted. Further, in the drawings used for the following description, the configuration of parts not related to the description of the present invention may be omitted or not shown.

First Embodiment
[Description of configuration]
First, the configuration of the information processing apparatus 50 according to the first embodiment will be described with reference to the drawings.

  FIG. 1 is a block diagram showing an example of the configuration of an information processing system 40 including an information processing apparatus 50 according to the first embodiment of the present invention.

  As shown in FIG. 1, the information processing system 40 includes a source node 10, a destination node 30, a relay node group 20, and an information processing apparatus 50.

  The originating node 10 is an information processing apparatus or a communication apparatus that transmits data (communication data).

  The destination node 30 is an information processing apparatus or a communication apparatus that receives data (communication data).

  The relay node group 20 relays communication of data (communication data) between the source node 10 and the destination node 30. That is, the source node 10 and the destination node 30 are connected via the relay node group 20. Therefore, the relay node group 20 includes a plurality of relay nodes 21 that are information processing devices or communication devices that relay data. That is, the relay node group 20 configures a communication path connecting the source node 10 and the destination node 30 by using the relay node 21. The relay nodes 21 included in the relay node group 20 do not have to be the same device as long as they can transmit signals to the information processing device 50 as described later. The relay node group 20 may include relay nodes 21 of different types.

  The relay node group 20 illustrated in FIG. 1 includes n (n is a predetermined natural number) relay nodes 21 as an example.

  In the following description, when the relay node 21 is to be distinguished, the relay node 21 closest to the source node 10 is taken as the relay node 21-1, the next relay node 21 is taken as the relay node 21-2, Suppose you want to increase the number attached to. Then, the relay node 21 immediately before the destination node 30 is set as the relay node 21-n. Furthermore, the relay node 21 in which the failure has occurred is set as the relay node 21-m (m is a natural number of n or less).

  The information processing apparatus 50 monitors communication processing (sequence) of data (communication data) in the information processing system 40, and generates sequence data 531 as a monitoring result. That is, the information processing device 50 is a monitoring node. The operation of the information processing apparatus 50 and the details of the sequence data 531 will be described later.

  Subsequently, a more detailed configuration of the information processing device 50 will be described.

  FIG. 2 is a block diagram showing an example of the configuration of the information processing apparatus 50. As shown in FIG.

  The information processing apparatus 50 includes a communication unit 510, a collection unit 520, and a storage unit 530.

  The communication unit 510 relays communication between the information processing device 50 and the relay node 21.

  The collection unit 520 collects, from the relay node 21 via the communication unit 510, a signal to be described later as monitoring data. Then, the collection unit 520 generates sequence data 531 based on the signal collected as monitoring, and stores the sequence data 531 in the storage unit 530. Therefore, the sequence data 531 is monitoring data. Furthermore, although details will be described later, the collection unit 520 generates session data 532 as the sequence data 531 or as a part of the sequence data 531 and stores the session data 532 in the storage unit 530.

  The storage unit 530 stores the sequence data 531 and the session data 532 generated by the collection unit 520.

[Description of operation]
Next, the operation of the information processing apparatus 50 will be described with reference to the drawings.

  FIG. 3 is a diagram for explaining signal collection in the information processing apparatus 50 according to the first embodiment. FIG. 4 is a diagram showing an example of the sequence data 531. As shown in FIG.

  As shown in FIG. 3, the information processing device 50 is connected to the relay node 21 via the communication unit 510 shown in FIG. 2. Then, the collection unit 520 of the information processing device 50 relates to relay of each relay node 21 in communication processing (sequence) of the source node 10, the destination node 30, and data (communication data), that is, transmission and reception of communication data. Collect signals (data signals).

  Then, the collection unit 520 relates to communication processing (hereinafter referred to as “session”) between the source node 10 and the destination node 30 regarding one or a predetermined unit of data (communication data) based on the collected signal. Information (hereinafter referred to as "session data 532") is generated. Then, the collection unit 520 stores the generated information (session data 532) in the sequence data 531 of the storage unit 530.

  As described above, as illustrated in FIG. 4, the collection unit 520 performs, as session data 532, communication processing (session) for each of the source node 10 and the destination node 30 relating to one or predetermined unit data (communication data). Collect the signal. Then, the collection unit 520 generates session data 532 which is information on a series of communication processes based on the series of information on the collected communication processes, and stores it in the sequence data 531. That is, the session data 532 included in the sequence data 531 includes a signal related to communication processing of a series of data in a predetermined unit, and stores information (data) such as a signal so as not to require collation processing in failure analysis. There is. Therefore, when using the session data 532 generated by the information processing device 50, the administrator does not need the matching process. That is, the information processing apparatus 50 creates effective monitoring data.

  The sequence data 531 may store information other than the session data 532. For example, the sequence data 531 may store information indicating a relationship between session data 532. However, this does not exclude the case where the sequence data 531 of the present embodiment does not include information other than the session data 532.

  In addition, when distinguishing a signal by the following description, the suffix of the relay node 21 of the transmission destination of communication is used as a code | symbol of a signal. For example, a signal between the relay node 21-1 and the relay node 21-2 is referred to as a signal-2.

  When a failure occurs in the relay node 21-m, the communication from the source node 10 to the destination node 30 is up to the relay node 21-m in which the failure has occurred. Therefore, session data 532 includes up to signal -m, as shown in FIG. However, even when a failure occurs in the relay node 21-m, communication may be continued to the subsequent relay node 21. In that case, the session data 532 includes a signal ahead of the relay node 21-m.

  In the present embodiment, the information included in the session data 532 included in the sequence data 531 is not particularly limited.

  For example, the information processing device 50 may store the signal transmitted and received between the relay nodes 21 as the session data 532 as it is. Here, the signals include transmitted and received data, amounts of transmitted and received data, times of transmission and reception, information of devices of transmission destination and reception source (for example, identifiers or names), states or results of transmission and reception Etc.

  Alternatively, the information processing apparatus 50 analyzes the signal and / or information related to the signal (for example, each parameter or processing time) in addition to the above signal, and information related to the session (hereinafter referred to as “related information”) May be generated. The related information is, for example, a determination result of communication. Then, the information processing device 50 may store the generated related information in association with the session data 532. Here, the method of associating the session data 532 with the related information is not particularly limited. For example, the information processing apparatus 50 may include the related information in the session data 532 and save it. Alternatively, the information processing device 50 may store the related information separately from the session data 532 and store information to associate them.

  Further, in the present embodiment, the storage format of data in the sequence data 531 and the session data 532 is not particularly limited.

  For example, the information processing device 50 may store the sequence data 531 and the session data 532 using a database (DB). Alternatively, the information processing apparatus 50 may use a tabular format or a link format as data storage.

  As described above, the information processing device 50 stores, as the session data 532 included in the sequence data 531, a signal between the originating node 10 and the terminating node 30 and the relay node 21 for each process (session) of data communication. . Therefore, the administrator can extract the session data 532 in which the failure has occurred from the sequence data 531 and analyze the failure based on the signal included in the session data 532. Therefore, for example, the administrator can analyze the failure without requiring many man-hours, such as checking the log of the relay node 21. That is, the information processing apparatus 50 can create sequence data 531 that is effective monitoring data.

  The collection unit 520 of the information processing device 50 may provide the stored sequence data 531 or session data 532 to a device not shown (for example, a maintenance terminal operated by a manager). For example, the information processing apparatus 50 may be connected to a network (not shown) using the communication unit 510, and transmit sequence data 531 or session data 532 in response to a request from a maintenance terminal (not shown).

  Alternatively, the information processing device 50 may display the sequence data 531 or the session data 532 on a display unit (not shown) based on the operation of the operator of the information processing device 50.

  In addition, the information processing apparatus 50 has no particular limitation on a method of detecting information for starting generation of session data 532. For example, the information processing apparatus 50 may start collecting the signal of the session data 532 based on the operation of the operator. Alternatively, the information processing device 50 may acquire start information of data communication from any of the relay nodes 21 and may start collecting the signal of the session data 532 based on the information. Alternatively, the information processing device 50 connects to the source node 10 and / or the destination node 30, acquires information on the start of the session data 532 from the source node 10 and / or the destination node 30, and starts collecting signals. It is also good.

  The information processing apparatus 50 may collect other information in addition to the signal between the relay nodes 21. For example, the information processing device 50 may collect statistical information of data between the relay nodes 21. In this case, the information processing apparatus 50 can provide the manager of the information processing system 40 with information used for analysis of the usage status of the information processing system 40 or traffic prediction.

[Description of effect]
The effects of this embodiment will be described.

  The information processing apparatus 50 according to the first embodiment can produce the effect of creating effective monitoring data.

  The reason is as follows.

  The collection unit 520 of the information processing device 50 generates session data 532 including a signal between the relay nodes 21 for each communication of data between the source node 10 and the destination node 30, and stores the session data 532 in the sequence data 531 of the storage unit 530. In order to

  Therefore, the administrator can analyze the failure with reference to the session data 532 without checking the logs of the plurality of relay nodes 21.

[Modification]
The information processing apparatus 50 described above is configured as follows.

  For example, each component of the information processing device 50 may be configured by a hardware circuit.

  In addition, the information processing apparatus 50 may be configured using a plurality of devices in which each component is connected via a network. For example, the storage unit 530 may be included in a storage device connected via a network.

  In addition, the information processing apparatus 50 may be configured with a plurality of configuration units by one hardware.

  Further, the information processing device 50 may be realized as a computer device including a central processing unit (CPU), a read only memory (ROM), and a random access memory (RAM). Furthermore, the information processing apparatus 50 may be realized as a computer apparatus including an input / output connection circuit (IOC: Input / Output Circuit) and a network interface circuit (NIC: Network Interface Circuit) in addition to the above configuration.

  FIG. 5 is a block diagram showing an example of the configuration of an information processing apparatus 600 according to the present modification.

  The information processing device 600 includes a CPU 610, a ROM 620, a RAM 630, an internal storage device 640, an IOC 650, and an NIC 680, and constitutes a computer device.

  The CPU 610 reads a program from the ROM 620. Then, the CPU 610 controls the RAM 630, the internal storage device 640, the IOC 650, and the NIC 680 based on the read program. Then, the computer including the CPU 610 controls these components, and realizes the functions as the communication unit 510, the collection unit 520, and the storage unit 530 shown in FIG.

  The CPU 610 may use the RAM 630 or the internal storage device 640 as a temporary storage or storage unit 530 of the program when realizing each function.

  Further, the CPU 610 may read a program included in the storage medium 700 storing a program readable by a computer using a storage medium reading device (not shown). Alternatively, the CPU 610 may receive a program from an external device (not shown) via the NIC 680, save the program in the RAM 630, and operate based on the saved program.

  The ROM 620 stores programs executed by the CPU 610 and fixed data. The ROM 620 is, for example, a P-ROM (Programmable-ROM) or a flash ROM.

  The RAM 630 temporarily stores programs and data that the CPU 610 executes. The RAM 630 is, for example, a D-RAM (Dynamic-RAM).

  The internal storage device 640 stores data and programs that the information processing apparatus 600 stores for a long time. The internal storage device 640 operates as the storage unit 530. Further, the internal storage device 640 may operate as a temporary storage device of the CPU 610. The internal storage device 640 is, for example, a hard disk device, a magneto-optical disk device, a solid state drive (SSD), or a disk array device.

  Here, the ROM 620 and the internal storage device 640 are non-transitory storage media. On the other hand, the RAM 630 is a volatile storage medium. The CPU 610 can operate based on a program stored in the ROM 620, the internal storage device 640, or the RAM 630. That is, the CPU 610 can operate using a non-volatile storage medium or a volatile storage medium.

  The IOC 650 mediates data between the CPU 610 and the input device 660 and the display device 670. The IOC 650 is, for example, an IO interface card or a USB (Universal Serial Bus) card.

  The input device 660 is a device that receives an input instruction from the operator of the information processing apparatus 600. Here, the operator is, for example, a manager of the information processing system 40. The input device 660 is, for example, a keyboard, a mouse or a touch panel.

  The display device 670 is a device that displays information to the operator of the information processing apparatus 600. The display device 670 is, for example, a liquid crystal display.

  The NIC 680 relays transmission and reception of data with the relay node 21 shown in FIGS. 1 and 3. That is, the NIC 680 operates as the communication unit 510. The NIC 680 is, for example, a LAN (Local Area Network) card.

  The information processing apparatus 600 configured in this way can obtain the same effects as the information processing apparatus 50.

  The reason is that the CPU 610 of the information processing device 600 can realize the same function as the information processing device 50 based on a program.

  Although the present invention has been described above with reference to the embodiments, the present invention is not limited to the above embodiments. The configuration and details of the present invention can be modified in various ways that can be understood by those skilled in the art within the scope of the present invention.

  Some or all of the above embodiments may be described as in the following appendices, but is not limited to the following.

(Supplementary Note 1)
Connection means for connecting to a plurality of relay nodes that relay communication data in a sequence that is communication processing from a source node that is a transmission source of communication data to a destination node that is a transmission destination of communication data;
The signal related to the communication data in the sequence is collected from the relay node through the connection means, and based on the signal related to the session which is the communication processing of the communication data of one or a predetermined unit included in the collected signal Collection means for generating session data which is information of
An information processing apparatus comprising: storage means for storing session data as a part of sequence data related to a sequence.

(Supplementary Note 2)
The collecting means is
The information processing apparatus according to appendix 1, wherein information on the start of a session is acquired from a relay node, a source node, or a destination node, and generation of session data is started based on information on the start.

(Supplementary Note 3)
The collecting means is
Generate relevant information related to the session based on the signal,
The information processing apparatus according to Appendix 1 or 2, wherein the related information is stored in association with session data.

(Supplementary Note 4)
The collecting means is
The information processing apparatus according to any one of appendices 1 to 3, wherein the storage unit transmits the information stored for each session through the communication unit based on a request from the other apparatus.

(Supplementary Note 5)
Connecting to a plurality of relay nodes that relay communication data in a sequence that is communication processing from a source node that is a transmission source of communication data to a destination node that is a transmission destination of communication data;
Collecting signals related to communication data in the sequence from the relay node;
Generating session data which is information for each session based on a signal related to a session which is a communication process of communication data of one or a predetermined unit included in the collected signal,
A monitoring method that saves session data as part of the sequence data associated with the sequence.

(Supplementary Note 6)
A process of connecting to a plurality of relay nodes that relay communication data in a sequence that is a communication process from a source node that is a transmission source of communication data to a destination node that is a transmission destination of communication data;
Collecting signals related to communication data in the sequence from the relay node via the connection means;
A process of generating session data which is information for each session based on a signal related to a session which is a communication process of one or a predetermined unit of communication data included in the collected signals;
A program that causes a computer to execute processing for storing session data as part of sequence data related to a sequence.

(Appendix 7)
A source node that is a transmission source of communication data;
A destination node to which communication data is sent;
A plurality of relay nodes relaying communication data in a sequence which is communication processing of communication data from a source node to a destination node, connection means for connecting with the relay node, and communication data in the sequence from the relay node via the connection means Collecting means for collecting signals and generating session data which is information for each session based on the signals related to the session which is communication processing of one or a predetermined unit of communication data included in the collected signals; An information processing system comprising: an information processing apparatus including storage means for storing session data as part of related sequence data.

DESCRIPTION OF SYMBOLS 10 origin node 20 relay node group 21 relay node 30 destination node 40 information processing system 50 information processing system 91 information processing system 91 relay node group 92 relay node 510 communication unit 520 collection unit 530 storage unit 531 sequence data 532 session data 600 information processing Device 610 CPU
620 ROM
630 RAM
640 Internal storage 650 IOC
660 Input device 670 Display device 680 NIC
700 storage media

Claims (6)

Connection means for connecting to a plurality of relay nodes relaying the communication data in a sequence which is a communication process from a source node which is a transmission source of communication data to a destination node which is a transmission destination of the communication data;
Transmission and reception data related to the communication data in the sequence from the relay node via the connection means, amount of data transmission and reception, time of transmission and reception, information of devices of transmission destination and reception source, and The signal which is the status or result of transmission and reception is collected, and the information for each session is based on the signal related to the session which is the communication processing of the communication data of one or a predetermined unit included in the collected signal. Collection means for generating certain session data;
An information storage device storing the session data as a part of sequence data related to the sequence; The collecting means
The information processing apparatus according to claim 1, wherein the information related to the start of the session is acquired from the relay node, the source node, or the destination node, and generation of the session data is started based on the information related to the start. The collecting means
Generating related information related to the session based on the signal;
The information processing apparatus according to claim 1, wherein the related information is stored in association with the session data. The collecting means
Based on the request from another apparatus, via said connecting means, the information processing according to information that the storage means has stored for each session to any one of claims 1 to 3 to send to the other device apparatus. The information processing apparatus
Connecting to a plurality of relay nodes that relay the communication data in a sequence that is communication processing from a source node that is a transmission source of communication data to a destination node that is a transmission destination of the communication data;
Transmission and reception data related to the communication data in the sequence from the relay node , transmission and reception data amount, transmission and reception time, information of transmission destination and reception source devices, and transmission and reception status or Collect the resulting signal ,
Session data which is information for each session based on a signal related to a session which is a communication process of the communication data of one or a predetermined unit included in the collected signal;
A monitoring method for storing the session data as part of sequence data associated with the sequence. A process of connecting to a plurality of relay nodes that relay the communication data in a sequence that is a communication process from a source node that is a transmission source of communication data to a destination node that is a transmission destination of the communication data;
Transmission and reception data related to the communication data in the sequence from the relay node , transmission and reception data amount, transmission and reception time, information of transmission destination and reception source devices, and transmission and reception status or A process of collecting the resulting signal ;
A process of generating session data which is information of each session based on a signal related to a session which is a communication process of the communication data of one or a predetermined unit included in the collected signal;
Storing the session data as part of sequence data associated with the sequence.

Images