JP7208939B2 - Message monitoring server, message monitoring method and message monitoring program - Google Patents

Description

The present invention relates to a message monitoring server, a message monitoring method, and a message monitoring program for monitoring messages from a business server (control server) in a data center that controls controlled machines such as ATMs (Automatic Teller Machines).

For example, in a system for realizing ATM services for stores installed in convenience stores, etc., a business server installed in a data center controls ATM transaction processing (accounting system) at each base, and each business server We have adopted a centralized system that manages information such as logging and backup processing (information management system).

In the system as described above, when an abnormality occurs in the ATM and/or the business server, a message indicating the abnormality is output from the business server, and the message is input to the message monitoring server. An operator who handles the message monitoring server reads the contents of messages input from the business server and, if necessary, contacts system engineers (SEs) and customer engineers (CEs) to detect incidents. to manage. In this way, investigation/restoration of the ATM and/or the business server is performed according to the message from the business server.

Further, Japanese Patent Application Laid-Open No. 2002-200002 discloses an information processing apparatus for realizing setting monitoring while reducing the load on the network. This information processing apparatus acquires an operation log file, determines whether or not there is a changed monitoring item on the device, and performs a process of notifying the system administrator of the setting change.

JP 2013-080387 A

By the way, the message monitoring server determines the rank indicating the degree of importance of the message input from the business server (sorts the messages according to the rank), and responds according to the rank. For example, if the message is the most important rank, the system engineer or customer engineer will be requested to investigate and solve it as a most important incident, and if the message is the most important rank, the system engineer will or a customer engineer to investigate and solve the problem, and if the message is ignored and the message is ignored, no action is required.

However, the conventional message monitoring server may not be able to appropriately determine the rank indicating the importance of the message input from the business server. For example, if the level of the actual incident is ignored (no action required), but the corresponding message is determined to be the most important or important, operators, system engineers, and customer engineers will be burdened with unnecessary work. It hangs.

Alternatively, in the message monitoring server, a predetermined message and a predetermined rank are defined in association with each other, and when a message not defined in the message monitoring server is input from the business server, the message is automatically assigned the most important rank. It is also conceivable to decide However, among the messages automatically determined to be the most important rank, there are a considerable number of incidents with an actual incident level of ignore rank (no action required), so operators, system engineers, and customer engineers Unnecessary work load is applied.

The present invention has been completed based on the awareness of the above problems, and provides a message monitoring server, a message monitoring method, and a message monitoring program capable of appropriately determining the rank indicating the importance of a message from a control server. intended to

A message monitoring server according to an aspect of the present invention includes: a first status information input unit to which first status information of a control target machine is input; a second status information input part to which second status information of a control server is input; a message input unit for inputting a message from the control server; and a rank determination for determining a rank indicating importance of the message input from the control server based on the first state information and the second state information. and

A message monitoring method according to an aspect of the present invention includes the steps of inputting first state information of a controlled machine, inputting second state information of a control server, and inputting a message from the control server. and determining a rank indicating importance of the message input from the control server based on the first state information and the second state information.

A message monitoring program according to an aspect of the present invention includes a step of inputting first state information of a machine to be controlled, a step of inputting second state information of a control server, and a step of inputting a message from the control server. and determining a rank indicating importance of the message input from the control server based on the first status information and the second status information.

According to the present invention, it is possible to provide a message monitoring server, a message monitoring method, and a message monitoring program capable of appropriately determining a rank indicating importance of a message from a control server.

It is a figure which shows schematic structure of the ATM management system which has the message monitoring server of this embodiment. It is a conceptual diagram for explaining the basic technical idea of this embodiment. 3A and 3B are a functional block diagram and a hardware configuration diagram of a message monitoring server according to the present embodiment; FIG. It is a figure which shows an example of the data structure of 1st state information (ATM state information). It is a figure which shows an example in the case of notifying 1st state information (ATM state information) from ATM to a message monitoring server at the time of ATM starting (normal time), and ATM operating (at the time of abnormality). It is a figure which shows an example of a specific structure of a control server. FIG. 11 is a diagram showing an example of the data structure of second state information (control server state information); FIG. 10 is a diagram showing an example of a case where second status information (control server status information) is notified from the control server to the message monitoring server when the control server is abnormal; FIG. 10 is a diagram showing an example of a case where the control server notifies the message monitoring server of the second state information (control server state information) when the control server is normal; FIG. 10 is a diagram showing an example of a data structure of a message from a control server; FIG. FIG. 10 is a diagram showing an example of server message filter definitions held by a message/rank definition unit; FIG. 11 is a first diagram showing an example of rank determination processing (pre-processing) by a rank determination unit; FIG. 11 is a second diagram showing an example (main processing) of rank determination processing by the rank determination unit; It is the 1st flowchart which shows an example of the message monitoring process of this embodiment. FIG. 21 is a 2-1 flowchart showing an example of message monitoring processing according to the present embodiment; FIG. FIG. 10 is a second-2 flowchart showing an example of message monitoring processing according to the present embodiment; FIG. It is the 3rd flowchart which shows an example of the message monitoring process of this embodiment. FIG. 14 is a fourth flowchart showing an example of message monitoring processing according to the embodiment; FIG. FIG. 15 is a fifth flowchart showing an example of message monitoring processing according to the embodiment; FIG. FIG. 16 is a sixth flowchart showing an example of message monitoring processing according to the embodiment; FIG. FIG. 16 is a seventh flowchart showing an example of message monitoring processing according to the embodiment; FIG.

FIG. 1 is a diagram showing a schematic configuration of an ATM management system 10 having a message monitoring server 310 of this embodiment.

The ATM management system 10 has an ATM (machine to be controlled) 100 , a data center 200 and a monitoring center 300 . The ATM 100 and the data center 200 are connected via a network, and the data center 200 and the monitoring center 300 are connected via a network. Therefore, the ATM 100 and the monitoring center 300 are indirectly connected by a network. Note that the ATM 100 and the monitoring center 300 may be directly connected via a network. The data center 200 is networked with a host 400 of a partner bank. The monitoring center 300 is connected by a network to an SE base 500 where system engineers reside. Data, control signals, and the like can be exchanged between each component of the ATM management system 10 via the network described here.

The ATM 100 is a plurality of ATMs 100-1, 100-2, 100-3, . ). Each of the plurality of ATMs 100-1 to 100-N generates "first state information (ATM state information)" regarding the operating state of its own device, and sends the first state information to the message monitoring server 310 of the monitoring center 300. Notice. Although the details of the first status information will be described later, for example, in addition to information to the effect that the ATM is operating normally, it also includes information indicating an ATM device abnormality (such as a banknote jam that cannot be ejected due to clogging of banknotes). . In the example of FIG. 1, a device failure has occurred in the ATM 100-2, and the message monitoring server 310 of the monitoring center 300 has been notified of the first status information indicating the device failure.

The data center 200 is a WWW server as a business server (control server) that comprehensively controls the accounting system (main functions of ATM transactions) and the information management system (backup) of the ATMs 100 (100-1 to 100-N). 210 , a DB server 220 and a backup server 230 . WWW server 210, DB server 220, and backup server 230 of data center 200 cooperate with host 400 of the affiliated bank, so that ATM 100 (100-1 to 100-N) operates properly. Although three servers are depicted as business servers in FIG. 1, the actual data center 200 may include several tens of servers, for example.

For example, the WWW server 210 and the DB server 220 can function as an "accounting system server" that controls the accounting system (main functions of ATM transactions) of the ATMs 100 (100-1 to 100-N). On the other hand, the backup server 230 can function as an "information management system server" that controls the information management system (backup) of the ATMs 100 (100-1 to 100-N).

The WWW server 210 and the DB server 220, which are accounting servers, can function as a "most important control server" with a relatively high priority as a business server of the data center 200. FIG. On the other hand, the backup server 230, which is an information management server, can function as an “important control server” with a relatively low priority as a business server of the data center 200. FIG.

It should be noted that the types of business servers (control servers) and the separation of the most important control server and the important control server described here are merely examples, and various design changes are possible. For example, a business server (control server) having functions other than the accounting server and the information management server may be provided, or the importance of the accounting server and the information management server may be reversed. That is, the accounting system server may function as an important control server with relatively low priority, and the information management system server may function as a most important control server with relatively high priority. In this way, one of the most important control server and the important control server may be used as an accounting server and the other as an information management server. Furthermore, the priority of the data center as a business server may be set in three stages, four stages, five stages or more.

The message monitoring server 310 of the monitoring center 300 periodically monitors (polls) the WWW server 210 , DB server 220 and backup server 230 of the data center 200 . As a result, the WWW server 210, the DB server 220, and the backup server 230 of the data center 200 generate "second state information (control server state information)" regarding the operating state of their own servers and devices, and It notifies the message monitoring server 310 of the monitoring center 300 of the information. Details of the second state information will be described later.

The WWW server 210, the DB server 220, and the backup server 230 of the data center 200 send messages including event information and log information of their own servers and devices in addition to the ATMs 100 (100-1 to 100-N) as machines to be controlled. (information) and notifies the message monitoring server 310 of the monitoring center 300 of the message. Details of the message will be described later.

Message monitoring server 310 of monitoring center 300 stores first state information (ATM state information) from ATM 100 (100-1 to 100-N), WWW server 210, DB server 220 and backup server 230 of data center 200. Second state information (control server state information) and messages from are input. The message monitoring server 310 refers to the information management table and the server message filter definition, analyzes the first state information (ATM state information), the second state information (control server state information) and the message, and determines the importance of the message. determine the degree of rank. The message monitoring server 310 displays the status on the monitoring screen in a form in which messages and ranks are associated with each other. At this time, depending on the rank of the message, the monitor screen is highlighted in red, or the patrol light is sounded. The monitoring operator looks at the messages and ranks displayed on the monitoring screen and, if necessary, issues an investigation request to the system engineer or customer engineer to manage the incident (investigation and restoration are carried out). For example, if the message is the most important rank, the system engineer or customer engineer will be requested to investigate and solve it as a most important incident, and if the message is the most important rank, the system engineer will or a customer engineer to investigate and solve the problem, and if the message is ignored and the message is ignored, no action is required. A specific configuration, control contents, and effects of the message monitoring server 310 will be described later.

As described above, in the ATM management system 10 of the present embodiment, the business servers (WWW server 210, DB server 220, backup server 230) installed in the data center 200 operate the ATMs 100 (100-1 to 100-N) ), and manages and backs up information such as logging of each business server (information management system).

The ATM adopts the Web type, and the main control applications are installed in the server group in the data center, and the partner bank host and message control, screen transition, and various transactions are realized. The monitoring center monitors the status of each system in order to ensure the stable operation of the ATM, which is the core of this service, and the server group in the data center. Various messages such as banknote jams and transaction errors are output from ATMs, and hardware, middleware, and ATM application messages are output from servers in the data center. display. When the monitoring operator looks at the monitoring screen and determines that there is an abnormality, the system engineer or customer engineer is requested to investigate the problem and take recovery measures, for example, 24 hours a day, 365 days a year.

As a conventional (existing) ATM management system, if a message that detects an abnormality is output from the business server and the message exists in the server message filter definition, the rank of the message (most important rank, important rank, ignore rank) and automatically ranks the message to the most important rank if the message does not exist in the server message filter definition.

However, according to the inventor's intensive research, some of the messages automatically determined as the most important rank without being present in the server message filter definition have an actual incident level of ignore rank (no action required). It turned out that the operator, the system engineer, and the customer engineer were burdened with unnecessary work because a considerable number of items were included. An actual incident level of ignore rank (no action required) corresponds to, for example, a case where a setting change (for example, an application update) occurs in the server during maintenance. Since such a setting change is a setting change scheduled to be implemented in advance and is not an abnormality of the apparatus or the like, there is no need for the operator to issue an investigation request to the engineer. Furthermore, if the ATM management system has been in operation for a long time, failures of devices and parts (parts) that have not occurred before will also occur, increasing the load even more.

In addition, messages output from servers, devices, OSs, and middleware are basically confidential and generally not described in product manuals. Therefore, it is difficult to define all messages in the server message filter definition in the system test before operation.

On the other hand, it is also difficult to analyze messages generated after the system has started and to timely reflect and register them in the server message filter definition. This is because when updating the server message filter definition, work (apply) can only be done during the maintenance time (for example, once a month at a fixed time), and it is necessary to work with maintenance of other projects and adjust the time. is.

In this way, the monitoring center 300 (message monitoring server 310), it is required to construct a mechanism that can determine that the message is of ignore rank (no action required). Also, regardless of whether or not it is defined in the server message filter definition, it is required to appropriately determine the rank indicating the importance of the message input from the business server.

In this embodiment, the above problem is regarded as an important technical problem, and when a message that is not specified (not completed) in the server message filter definition is detected, the message The rank of the message is automatically determined (sorted) in the monitoring server. ATM management systems that provide services that include messages that are not (cannot be) stipulated in the conventional (existing) server message filter definition, even if the infrastructure (servers/equipment) cannot be started due to failure, the user can As long as transactions using ATMs are completed without problems, top priority is given to the operating status of ATMs, and priority is given to handling and resolving problems.

FIG. 2 is a conceptual diagram for explaining the basic technical idea of this embodiment. In (1), first status information (ATM status information) is input from the ATMs 100 (100-1 to 100-N) to the message monitoring server 310 of the monitoring center 300 . In (2), second status information (control server status information) is input from the WWW server 210 , the DB server 220 and the backup server 230 of the data center 200 to the message monitoring server 310 of the monitoring center 300 . In (3), a message is input from the WWW server 210 , the DB server 220 and the backup server 230 of the data center 200 to the message monitoring server 310 of the monitoring center 300 . In (4), the message monitoring server 310 of the monitoring center 300 changes the first state information (ATM state information) input in (1) and the second state information (control server state information) input in (2). Based on this, the rank indicating the importance of the message input in (3) is determined.

FIG. 3A is a functional block diagram of the message monitoring server 310 of this embodiment. The message monitoring method and message monitoring program of this embodiment are implemented by causing the computer that constitutes the message monitoring server 310 to execute various processing steps.

FIG. 3B is a hardware configuration diagram of the message monitoring server 310 of this embodiment. The message monitoring server 310 has a CPU 310A, a DRAM 310B, a ROM 310C, a storage section 310D, an input/output IF 310E, a communication IF 310F, and a bus 310G connecting these components. The CPU 310A reads and executes various control programs stored in the ROM 310C. The DRAM 310B provides a working area for temporarily storing control programs and various data. The ROM 310C is a storage medium that nonvolatilely stores various control programs. The storage unit 310D stores programs and data used for various processes, and is composed of a flash memory, a hard disk, or the like. The input/output IF 310E transmits and receives data to and from an external device such as a console. The communication IF 310F performs communication with the host and ATM. Each functional block of the message monitoring server 310 is realized by cooperation of these hardware components.

Returning to FIG. 3A, the message monitoring server 310 includes a first status information input section (ATM status information input section) 311, a second status information input section (control server status information input section) 312, a message input section 313, It has a message/rank definition section 314 and a rank determination section 315 . The message monitoring server 310 also has an ATM status management table 316 , a control server status management table 317 and a message management table 318 .

A first state information input unit (ATM state information input unit) 311 receives first state information (ATM state information) of the ATMs 100 (100-1 to 100-N), which are machines to be controlled.

4A, 4B, and 4C are diagrams showing an example of the data structure of the first state information (ATM state information).

As shown in FIG. 4A, the first state information (ATM state information) includes unique information (a serial number starting from 1) that identifies the ATM, and the most recent update time (0:00, 0:00, 0:00, 00:00). 0 minutes and 0 seconds) and the ATM status (0 (normal) is operable, 1 (abnormal) is not operable).

FIG. 4B shows a specific example of the data structure, which corresponds to the information of ATM No.1 to ATM No.2000. ATM No. 1 was updated at 6:05:01 on November 5, 2019, and the ATM status is 0 (normal, operable). ATM No. 2 was updated at 6:05:02 on November 5, 2019, and the ATM status is 1 (abnormal, inoperable). ATM No. 2000 was updated at 6:10:01 on November 5, 2019, and the ATM status is 0 (normal, operable).

FIG. 4C shows an example of a message format notified from ATM. The most recent update time is indicated by "notification time (2019/12/1 17:30:01)", the unique information identifying the ATM is indicated by "ATM identification information (ATM=#1)", and the ATM The state is indicated by "Status=0".

5A and 5B are diagrams showing an example of a case where the ATM notifies the message monitoring server of the first state information (ATM state information) when the ATM is activated (normal) and when the ATM is in operation (abnormal).

In FIG. 5A, when the ATMs are activated (in a normal state), the first state information (ATM state information) indicating normal operation is notified from the ATM No. 1 and the ATM No. 2 to the message monitoring server. The message monitoring server holds an ATM status management table 316 (FIG. 3) that manages the status of all ATMs under its jurisdiction, analyzes the received first status information (ATM status information), and determines the ATM status. The corresponding part of the management table 316 is set (updated).

In FIG. 5B, the first status information (ATM status information) indicating a transaction abnormality is notified from the ATM No. 1 to the message monitoring server when the ATM is in operation (at the time of abnormality). The message monitoring server holds an ATM status management table 316 that manages the status of all ATMs under its jurisdiction, analyzes the received first status information (ATM status information), and updates the ATM status management table 316. Set (update) the corresponding part.

A second state information input unit (control server state information input unit) 312 receives second state information (control server state information) of the WWW server 210, the DB server 220, and the backup server 230, which are control servers. The message monitoring server 310 periodically checks whether the control servers 210 to 230 are alive or dead (polling), and manages the states of the control servers 210 to 230 according to second state information (control server state information).

Since the WWW server 210, the DB server 220, and the backup server 230, which are control servers, are important financial server systems (social infrastructure systems), it is preferable to have a redundant configuration of two or more for each function server. For example, in FIG. 6, there are three WWW servers 210 as accounting servers, two DB servers 220 as accounting servers, and two backup servers 230 as information management servers.

7A and 7B are diagrams showing an example of the data structure of the second state information (control server state information).

As shown in FIG. 7A, the second state information (control server state information) includes unique information (serial numbers starting from 1 for each server type) that identifies the server, and the most recent update time (year 0 AD). It has a data structure that associates the server status (0 (normal) means normal operation (no problem), 1 (abnormal) means an error occurred).

FIG. 7B shows a specific example of the data structure, which corresponds to information on WWW server No. 1, WWW server No. 2, DB server No. 2, and backup server No. 2. FIG. WWW server No. 1 was updated at 4:30:01 on November 4, 2019, and the server status is 0 (normal, no problem). WWW server No. 2 was updated at 4:35:01 on November 4, 2019, and the server status is 1 (abnormal occurrence). DB server No. 2 was updated at 4:40:01 on November 4, 2019, and the server status is 1 (abnormality). The backup server No. 2 was updated at 4:40:03 on November 4, 2019, and the server status is 1 (abnormal occurrence).

FIG. 8 is a diagram showing an example of a case in which the control server notifies the message monitoring server of the second state information (control server state information) when the control server is abnormal.

In FIG. 8, WWW server No. 2, DB server No. 2, and backup server No. 2 respond to life-and-death confirmation (polling) of the message monitoring server, and confirm that the server status is 0 (normal, no problem). 2 state information (control server state information) is notified to the message monitoring server. On the other hand, WWW server No. 1 does not respond to the message monitoring server's life-or-death confirmation (polling). This is equivalent to notifying the message monitoring server of the second status information (control server status information) indicating that the server status is 1 (abnormal occurrence). The message monitoring server holds a control server status management table 317 (FIG. 3) that manages the status of all control servers under its jurisdiction, and analyzes the received second status information (control server status information) to , sets (updates) the corresponding part of the control server status management table 317 .

FIG. 9 is a diagram showing an example of a case where the control server notifies the message monitoring server of the second state information (control server state information) when the control server is normal.

In FIG. 9, WWW server No. 1, WWW server No. 2, DB server No. 2, and backup server No. 2 respond to life-and-death confirmation (polling) of the message monitoring server, and the server status is 0 (normal, no problem). The message monitoring server is notified of the second state information (control server state information) to the effect that it is. The message monitoring server holds a control server status management table 317 (FIG. 3) that manages the status of all control servers under its jurisdiction, and analyzes the received second status information (control server status information) to , sets (updates) the corresponding part of the control server status management table 317 .

Message input unit 313 receives messages from WWW server 210, DB server 220, and backup server 230, which are control servers.

10A and 10B are diagrams showing an example of the data structure of a message from the control server (business server).

As shown in FIG. 10A, the message from the control server (business server) contains the time when the message occurred (year 0/0/0/0:00:00) and unique information that identifies the server (server type A serial number starting from 1 for each message) and a message body (a character string as a message output from the server) are associated with each other.

FIG. 10B shows a specific example of a message from the control server (business server), corresponding to messages from WWW server No. 1, WWW server No. 2, WWW server No. 3, DB server No. 1, and backup server No. 1. ing. WWW server No. 1 generated a message AAA at 6:05:01 on November 5, 2019. WWW server No. 2 generated a message BBB at 6:05:02 on November 5, 2019. WWW server No. 3 generated a message CCC at 6:05:02 on November 5, 2019. DB server No. 1 generates message ZZZ at 6:10:01 on November 5, 2019. Backup server No. 1 generated a message 111 at 6:10:03 on November 5, 2019. The message monitoring server holds a message management table 318 (FIG. 3) for managing messages from all control servers (business servers) under its jurisdiction, and analyzes messages received from control servers (business servers). Then, the corresponding part of the message management table 318 is set (updated).

The message/rank definition section 314 associates and defines a predetermined message and a predetermined rank. In other words, the message/rank definition unit 314 filters messages from the control server (business server) based on the server message filter definition, assigns a rank indicating the degree of importance to defined messages, and undefined messages. is used for automatically assigning a rank to the message by the rank determining unit 315, which will be described later.

FIG. 11 is a diagram showing an example of a server message filter definition held by the message/rank definition unit 314. As shown in FIG.

In the example of FIG. 11, the message AAA is associated with the most important rank that makes the message the most important, and the message BBB is associated with the ignore rank that ignores the message. The message CCC is associated with an importance rank that makes the message important, and the message DDD is associated with an importance rank that makes the message important. ing. Therefore, if the message from the control server (business server) is message AAA, BBB, CCC, or DDD, the rank of the message can be determined without relying on the rank determination unit 315 .

On the other hand, if a message other than the above that is not defined in the message/rank definition unit 314 is input from the control server (business server), the server message filter definition cannot determine the rank of the message. Therefore, the rank determination unit 315 determines the rank of the message (moving to the "rank determination process").

The rank determination unit 315 receives the first state information (ATM state information) input to the first state information input unit (ATM state information input unit) 311 and held in the ATM state management table 316, and the second state information input unit. Based on the second state information (control server state information) input to the (control server state information input unit) 312 and held in the control server state management table 317, the WWW server 210 and the DB server 220, which are control servers, A rank indicating the importance of the message input from the backup server 230 and held in the message management table 318 is determined.

More specifically, the rank determination unit 315 defines in the message/rank definition unit 314 the messages input from the WWW server 210, the DB server 220, and the backup server 230, which are control servers, and held in the message management table 318. If not, determine a rank indicating the importance of the message.

12A, 12B, and 12C are first diagrams showing an example of rank determination processing (pre-processing) by the rank determination unit 315. FIG.

In FIG. 12A, when an event (such as the end of a job) occurs in the control server (here, WWW server No. 1) and an abnormality or warning event is suggested, the message monitoring server 310 monitors the control server (here, WWW server 1). The message FFF output from the server No. 1) is received, and the message is input to the message input unit 313 .

In FIG. 12B, the message monitoring server 310 analyzes the message FFF output from the control server (here, WWW server No. 1) and sets (updates) the corresponding portion of the message management table 318 .

In FIG. 12C, the rank determination unit 315 refers to the message/rank definition unit 314 and attempts to determine the rank of the message FFF output from the control server (here, WWW server No. 1). Here, in the server message filter definition shown in FIG. 12C (similar to FIG. 11), messages AAA, BBB, CCC, and DDD are defined, but messages output from the control server (here, WWW server No. 1) FFF is undefined. Therefore, the rank determination unit 315 determines the rank of the message FFF based on the first state information (ATM state information) and the second state information (control server state information). After temporarily setting the rank of a message not defined in the message/rank definition unit 314 to “most important”, the rank of the message may be updated (overwritten) according to the processing of the rank determination unit 315 .

13A and 13B are second diagrams showing an example (main processing) of the rank determination processing by the rank determination unit 315. FIG.

In FIG. 13A, according to the combination of the first state information (ATM state information) and the second state information (control server state information), the following methods (1) to (3) are used to rank the message importance. have decided.
(1) If even one of a plurality of ATMs is abnormal, the rank of the message is set as the most important rank regardless of the state of the control server.
(2) If the status of all ATMs is normal and the status of the control server is normal, the rank of the message is ignored.
(3) If the status of all ATMs is normal but the status of the control server is abnormal, the message rank is the most important rank.

Summarizing the above (1) to (3), the rank determining unit 315 indicates that the controlled machine (ATM 100 (100-1 to 100-N)) is normal by the first state information, and If the second status information indicates that the control servers (WWW server 210, DB server 220, and backup server 230) are normal, the rank is determined to ignore the message. In addition, the rank determining unit 315 determines that the first state information indicates that the machine to be controlled (ATM 100 (100-1 to 100-N)) is abnormal and/or the second state information indicates that the control server (WWW If the server 210, the DB server 220, and the backup server 230) are indicated to be abnormal, determine the most important rank that makes the message the most important as the rank.

In the second state information input unit (control server state information input unit) 312, the most important control servers (for example, WWW server 210 and DB server 220 as accounting servers) are stored as second state information (control server state information). 2-1 status information (most important control server status information) and 2-2 status information (important control server status information) of important control servers (for example, backup server 230 as an information management server) are input. .

In FIG. 13B, depending on the combination of the first state information (ATM state information), the 2-1 state information (most important control server state information) and the 2-2 state information (important control server state information) , the rank indicating the importance of the message is determined by the following methods (1) to (8).
(1) If even one of a plurality of ATMs has an abnormality and the state of the most important control server is normal, the rank of the message is set as the most important rank.
(2) If even one of a plurality of ATMs has an abnormality and the state of the important control server is normal, the rank of the message is set as the important rank.
(3) If even one of a plurality of ATMs is abnormal and the state of the most important control server is abnormal, the rank of the message is made the most important rank.
(4) If even one of a plurality of ATMs is abnormal and the state of the important control server is abnormal, the rank of the message is set as the importance rank.
(5) If the status of all ATMs is normal and the status of the most important control server is normal, the rank of the message is ignored.
(6) If the status of all ATMs is normal and the status of the important control server is normal, the rank of the message is set to ignore rank.
(7) If the status of all ATMs is normal and the status of the most important control server is abnormal, the rank of the message is set as the most important rank.
(8) If the status of all ATMs is normal and the status of the important control server is abnormal, the rank of the message is set as the importance rank.

Summarizing the above (1) to (8), the rank determining unit 315 indicates that the controlled machine (ATM 100 (100-1 to 100-N)) is normal by the first state information, and The 2-1 state information indicates that the most important control servers (for example, the WWW server 210 and the DB server 220 as accounting servers) are normal, or the 2-2 state information indicates that the important control servers (for example, information If the backup server 230) as a management system server is shown to be normal, then the ignore rank is determined to ignore the message as the rank. In addition, the rank determining unit 315 indicates that the first state information indicates that the machine to be controlled (ATM 100 (100-1 to 100-N)) is abnormal, and the 2-2 state information indicates that the important control server ( For example, when the backup server 230) as an information management system server is normal or abnormal, and the first status information indicates that the machine to be controlled (ATM 100 (100-1 to 100-N)) is normal is shown, and the 2-2 status information indicates that the important control server (for example, the backup server 230 as an information management server) is abnormal, as the rank, the importance rank that makes the message important decide. Furthermore, the rank determining unit 315 determines that the first state information indicates that the machine to be controlled (ATM 100 (100-1 to 100-N)) is abnormal, and the 2-1 state information indicates that the most important control server (For example, the WWW server 210 and the DB server 220 as accounting servers) are normal or abnormal, and the first state information indicates that the machine to be controlled (ATM 100 (100-1 to 100-N)) If it is normal and the 2-1 status information indicates that the most important control server (for example, WWW server 210 and DB server 220 as accounting servers) is abnormal, the rank is as follows: Determine the most important rank, which makes the message the most important.

In this way, among the control servers, the most important control server (e.g., accounting server) and the important control server (information management server) have different rank determination methods (the most important control server is prioritized and weighted). doing) enables proper rank determination to ensure the operation of the ATM management system.

Here, the rank determination processing described with reference to FIGS. 13A and 13B is merely an example. For example, how to use the combination of the first state information (ATM state information) and the second state information (control server state information) in FIG. 13A; There is a degree of freedom in how to use the combination of 2-1 state information (most important control server state information) and 2-2 state information (important control server state information), and various design changes are possible. .

Furthermore, in FIGS. 13A and 13B, a plurality of ATMs are put together and the message rank is determined based on whether or not even one of them has an abnormality, but this is not the only option. For example, a plurality of ATMs may be divided into several groups, and the message rank may be determined based on whether or not there is an abnormal ATM in each ATM group. Also, for example, the rank determination process of FIG. 13A is applied to a certain ATM group, and the rank determination process of FIG. 13B is applied to another ATM group. Treatment may be applied.

FIG. 14 is a first flowchart showing an example of message monitoring processing (message receiving processing from a server) of this embodiment.

In step S1, it is determined whether or not a message has been received from the control server (business server). If a message has been received from the control server (business server) (step S1: Yes), the process proceeds to step S2. If no message has been received from the control server (business server) (step S1: No), the process proceeds to step S11.

In step S2, the message from the control server (business server) is analyzed, and the contents of the analysis are set (updated) in the message management table. In step S3, the server message filter definition in the message/rank definition section is confirmed.

In step S4, it is determined whether or not the message from the control server (business server) is defined (prescribed) in the server message filter definition of the message/rank definition section. If the message from the control server (business server) is defined (prescribed) in the server message filter definition of the message/rank definition section (step S4: Yes), the process proceeds to step S5. If the message from the control server (business server) is not defined (prescribed) in the server message filter definition of the message/rank definition section (step S4: No), the process proceeds to step S8.

In step S5, the rank of the message from the control server (business server) is determined according to the server message filter definition of the message/rank definition section. In step S6, the result of the rank determination process in step S5 is stored (memorized). In step S7, "processing by rank" (described later in a subroutine) is called. After step S7 (processing by rank) is completed, the process proceeds to step S11.

In step S8, a "rank determination process" (described later in a subroutine) is called. In step S9, the result of the rank determination process in step S8 is stored (memorized). In step S10, "processing by rank" (described later in a subroutine) is called. After step S10 (processing by rank) ends, the process proceeds to step S11.

In step S11, WAIT processing is executed for a certain period of time. The fixed-time WAIT process can be executed, for example, using a SLEEP value (eg, 0 to 65535 (seconds), the initial value is 1) for executing the fixed-time WAIT process.

In step S12, it is determined whether or not there is an end interrupt. If there is no termination interrupt (step S12: No), the process returns to step S1. If there is an end interrupt (step S12: Yes), the process ends.

15 and 16 are flowcharts 2-1 and 2-2 showing an example of message monitoring processing (rank determination processing) of this embodiment.

In steps S21 to S23, among all the ATM status information held in the ATM status management table, ATM status information updated within a predetermined time (for example, within 5 minutes) is stored (updated). That is, in step S21, it is determined whether or not all the ATM status information held in the ATM status management table has been confirmed. If all ATM status information held in the ATM status management table has been confirmed (step S21: Yes), the process proceeds to step S24. If all of the ATM status information held in the ATM status management table has not been confirmed (step S21: No), the process proceeds to step S22 to check unconfirmed ATM status information in a predetermined order. In step S22, it is determined whether or not the ATM status management table has been updated within a predetermined period of time (for example, within 5 minutes). If the ATM status management table has been updated within the predetermined time (step S22: Yes), the process proceeds to step S23, stores (memo) the updated ATM confirmation information, and returns to step S21. If the ATM status management table has not been updated within the predetermined time (step S22: No), the process returns to step S21.

The predetermined time used in step S22 has a degree of freedom, and various design changes are possible. is preferably set to A predetermined time setting value (eg, 0 to 65535 (minutes), the initial value is 5) can be used.

In step S24, for example, input parameters such as server identification information are set to prepare for confirmation processing of the importance of the control server. In step S25, a "control server importance confirmation process" (to be described later in a subroutine) is called. In step S26, the result of the process of confirming the importance of the control server in step S25 (for example, whether it is the most important control server or the important control server) is stored (memorized).

In step S27, for example, input parameters such as server identification information are set to prepare for confirmation processing of the state of the control server. In step S28, a "control server state confirmation process" (to be described later in a subroutine) is called. In step S29, the result of the process of confirming the state of the control server in step S28 (for example, whether it is normal or abnormal) is stored (memorized).

In step S30, it is determined whether the ATM status is normal or abnormal. If the ATM status is normal, the process proceeds to step S31, and if the ATM status is abnormal, the process proceeds to step S32. In step S31, it is determined whether the server status is normal or abnormal. If the server status is normal, the process proceeds to step S34, and if the server status is abnormal, the process proceeds to step S33.

In step S33, it is determined whether the server (abnormal server) is the most important server or the important server. If the server (abnormal server) is the most important server, the process proceeds to step S35, and if the server (abnormal server) is the important server, the process proceeds to step S36.

In step S32, it is determined whether the server (whether abnormal or not) is the most important server or the important server. If the server (whether abnormal or not) is the most important server, go to step S37; if the server (whether abnormal or not) is the important server, go to step S38.

In step S34, the rank of the message from the control server (business server) is determined to be the ignore rank. In step S35, the rank of the message from the control server (business server) is determined as the most important rank. In step S36, the rank of the message from the control server (business server) is determined as the importance rank. In step S37, the rank of the message from the control server (business server) is determined as the most important rank. In step S38, the rank of the message from the control server (business server) is determined as the importance rank. The process ends via any one of steps S34, S35, S36, S37 and S38.

The rank determination processing described with reference to FIGS. 15 and 16 can be summarized as follows. That is, the rank determining unit 315 determines that the first state information indicates that the machine to be controlled (the ATM 100 (100-1 to 100-N)) is normal, and the second state information indicates that the control server (the WWW server 210 , the DB server 220, and the backup server 230) are normal, the ignore rank for ignoring the message is determined as the rank. In addition, the rank determining unit 315 determines that the first state information indicates that the machine to be controlled (ATM 100 (100-1 to 100-N)) is abnormal and/or the second state information indicates that the control server (WWW If the server 210, DB server 220, and backup server 230) is indicated to be abnormal, the second status information is the most important control server (for example, WWW server 210 and DB server 220 as accounting servers). 1 status information or 2-2 status information of an important control server (for example, backup server 230 as an information management server). Furthermore, if the second status information is the 2-1 status information of the most important control servers (for example, the WWW server 210 and the DB server 220 as accounting servers), the rank determination unit 315 ranks the message as the highest. Determine the most important rank to be important, and if the second status information is the 2-2 status information of the important control server (for example, the backup server 230 as an information management server), make the message important as the rank Determine importance rank.

FIG. 17 is a third flowchart showing an example of message monitoring processing (processing by rank) of this embodiment.

In step S41, it is determined whether the input parameter (rank value), which is the rank determined for the message from the control server (business server), is the ignore rank, the importance rank, or the most important rank. If the message has the ignore rank, the process proceeds to step S42; if the message has the importance rank, the process proceeds to step S43; and if the message has the most important rank, the process proceeds to step S44.

In step S42, since the message is of the ignore rank, the processing according to rank is not performed. In step S43, since the message is of the importance rank, a warning message is displayed on the monitoring screen to call the attention of the operator (for example, the warning message is colored). In step S44, since the message is of the highest priority, a warning message is displayed on the monitoring screen (for example, the warning message is colored or blinked), and a patrol light is sounded. and other emergency notifications. The process ends via any one of steps S42, S43, and S44.

FIG. 18 is a fourth flowchart showing an example of message monitoring processing (server importance confirmation processing) of this embodiment.

In step S51, the importance of the control server (business server) is specified based on the input parameter (server specifying information) using the second state information, for example. At that time, the message monitoring server can refer to the "server importance definition table". This server importance definition table defines (regulates) that, for example, the accounting server is the most important control server and the information management server is the important control server.

In step S52, it is determined whether the importance of the control server (business server) is the most important or important. For example, if the control server (business server) is an accounting server, it is determined to be most important, and if the control server (business server) is an information management server, it is determined to be important. If the control server (business server) is most important, the process proceeds to step S53, and if the control server (business server) is important, the process proceeds to step S54.

In step S53, the control server (business server) corresponding to the determination in step S52 is set as the most important server. In step S54, the control server (business server) corresponding to the determination in step S52 is set as an important server. The process ends via either step S53 or step S54.

FIG. 19 is a fifth flowchart showing an example of message monitoring processing (server state confirmation processing) of this embodiment.

In step S61, the state of the control server (work server) is specified based on the input parameter (server specifying information) using the second state information, for example. At that time, the message monitoring server can refer to the control server state management table.

In step S62, it is determined whether the state of the control server (business server) is normal or abnormal. If the state of the control server (business server) is normal, the process proceeds to step S63, and if the state of the control server (business server) is abnormal, the process proceeds to step S64.

In step S63, the state of the control server (business server) corresponding to the determination in step S62 is set to normal. In step S64, the status of the control server (business server) corresponding to the determination in step S62 is set to abnormal. The process ends via either step S63 or step S64.

FIG. 20 is a sixth flowchart showing an example of message monitoring processing (ATM state management processing) of this embodiment.

In step S71, it is determined whether or not ATM status information (first status information) has been received from the ATM. When the ATM status information (first status information) is received from the ATM, the process proceeds to step S72. If the ATM status information (first status information) has not been received from the ATM, the process proceeds to step S73.

In step S72, the ATM status information (first status information) from the ATM is analyzed, and the analyzed content is set (updated) in the ATM status management table.

In step S73, the WAIT process is executed for a certain period of time. The fixed-time WAIT process can be executed, for example, using a SLEEP value (eg, 0 to 65535 (seconds), the initial value is 1) for executing the fixed-time WAIT process.

In step S74, it is determined whether or not there is an end interrupt. If there is no termination interrupt (step S74: No), the process returns to step S71. If there is an end interrupt (step S74: Yes), the process ends.

FIG. 21 is a sixth flowchart showing an example of message monitoring processing (server state management processing) of this embodiment.

In steps S81 and S82, all server status information held in the server status management table is confirmed. In step S81, it is determined whether or not all server status information held in the server status management table has been confirmed. If all server status information held in the server status management table has been confirmed (step S81: Yes), the process proceeds to step S83. If all the server status information held in the server status management table has not been confirmed (step S81: No), the process advances to step S82 to check unconfirmed server status information in a predetermined order. In step S82, server status information is acquired by confirming the status (whether or not there is a response) of the relevant server by confirming life or death (polling) from the monitoring center 300 (message monitoring server 310). Set (update) in the table. After the process of step S82 is finished, the process returns to step S81.

In step S83, WAIT processing is executed for a certain period of time. The fixed-time WAIT process can be executed, for example, using a SLEEP value (eg, 0 to 65535 (seconds), the initial value is 1) for executing the fixed-time WAIT process.

In step S84, it is determined whether or not there is an end interrupt. If there is no termination interrupt (step S84: No), the process returns to step S81. If there is an end interrupt (step S84: Yes), the process ends.

As described above, according to the message monitoring server, message monitoring method, and message monitoring program of this embodiment, based on the first status information (ATM status information) and the second status information (control server status information), the control server It is possible to appropriately determine the rank indicating the importance of the message input from (business server).

The above-described embodiments are specific examples for easy understanding of the invention, and the invention is not limited to these embodiments. The message monitoring server, message monitoring method, and message monitoring program described above can be modified and modified in various ways without departing from the scope of the present invention defined in the claims.

In the above embodiment, the case where the ATM is used as the machine to be controlled has been exemplified and explained. However, various transaction devices (for example, terminal devices installed in convenience stores for purchasing tickets and merchandise) other than ATMs that can be controlled by the control server can be used as control target devices.

In the above embodiment, the rank determining unit 315 of the message monitoring server 310 defines in the message/rank defining unit 314 the messages input from the control servers (WWW server 210, DB server 220, backup server 230) of the data center 200. The case where the rank indicating the degree of importance of the message is determined when the message is not received has been described as an example. However, the rank determination unit 315 of the message monitoring server 310 assigns ranks indicating the importance of the messages to some or all of the messages, regardless of whether the messages are defined in the message/rank definition unit 314. may decide.

In the above embodiments, the case where the rank indicating the importance of the message is determined in two stages of ignore rank and most important rank, or in three stages of ignore rank, important rank and most important rank has been described. , it is also possible to determine the rank indicating the importance of the message in four or more stages.

10 ATM management system 100 (100-1 to 100-N) ATM (machine to be controlled)
200 data center 210 WWW server (business server, control server, accounting server)
220 DB server (business server, control server, accounting server)
230 backup server (business server, control server, information management server)
300 Monitoring center 310 Message monitoring server 310A CPU
310B DRAM
310C ROM
310D storage unit 310E input/output IF
310F Communication interface
310G bus 311 first status information input section (ATM status information input section)
312 second state information input unit (control server state information input unit)
313 Message input unit 314 Message/rank definition unit 315 Rank determination unit 316 ATM status management table 317 Control server status management table 318 Message management table 400 Partner bank host 500 SE base

Claims (8)

a first state information input unit to which first state information of the controlled machine is input;
a second status information input unit to which second status information of the control server is input;
a message input unit into which a message from the control server is input;
a rank determination unit that determines a rank indicating importance of the message input from the control server based on the first state information and the second state information;
A message monitoring server characterized by comprising: further having a message/rank definition part in which a predetermined message and a predetermined rank are defined in association with each other;
When the message input from the control server is not defined in the message/rank definition unit, the rank determination unit determines a rank indicating the importance of the message.
The message monitoring server according to claim 1, characterized by: The rank determining unit,
disregarding the message as the rank when the first state information indicates that the controlled machine is normal and the second state information indicates that the control server is normal; determine the ignore rank,
When the first status information indicates that the controlled machine is abnormal and/or the second status information indicates that the control server is abnormal, the message is selected as the rank. determine the most important rank to be the most important,
3. The message monitoring server according to claim 1, wherein: 2-1 state information of the most important control server and 2-2 state information of the important control server are inputted as the second state information into the second state information input unit;
The rank determining unit,
The first state information indicates that the controlled machine is normal, and the 2-1 state information indicates that the most important control server is normal, or the 2-2 determining, as the rank, an ignoring rank for ignoring the message when the status information indicates that the critical control server is normal;
When the first state information indicates that the controlled machine is abnormal and the 2-2 state information indicates that the important control server is normal or abnormal; When the state information indicates that the controlled machine is normal and the 2-2 state information indicates that the important control server is abnormal, the message is regarded as important as the rank. determine the importance rank to
When the first state information indicates that the controlled machine is abnormal and the 2-1 state information indicates that the most important control server is normal or abnormal; and 1 state information indicates that the controlled machine is normal and the 2-1 state information indicates that the most important control server is abnormal, the message is given as the rank. determine the most important rank to be the most important,
3. The message monitoring server according to claim 1, wherein: The rank determining unit,
disregarding the message as the rank when the first state information indicates that the controlled machine is normal and the second state information indicates that the control server is normal; determine the ignore rank,
When the first status information indicates that the controlled machine is abnormal and/or the second status information indicates that the control server is abnormal, the second status information is the most Determining whether it is the 2-1 state information of the important control server or the 2-2 state information of the important control server,
when the second state information is the 2-1 state information of the most important control server, determining the most important rank that makes the message the most important as the rank;
When the second state information is the 2-2 state information of the important control server, determining, as the rank, an importance rank that makes the message important;
3. The message monitoring server according to claim 1, wherein: one of the most important control server and the important control server is an accounting server;
The other of the most important control server and the important control server is an information management server,
6. The message monitoring server according to claim 4 or 5, characterized by: a step of inputting the first state information of the machine to be controlled;
receiving second state information of the control server;
receiving a message from the control server;
determining a rank indicating importance of the message input from the control server based on the first state information and the second state information;
A message monitoring method, comprising: a step of inputting the first state information of the machine to be controlled;
receiving second state information of the control server;
receiving a message from the control server;
determining a rank indicating importance of the message input from the control server based on the first state information and the second state information;
A message monitoring program characterized by causing a computer to execute

Images