Management system and management program

Patent metadata

Field	Value
Publication number	US-2016004582-A1
Application number	US-201314427958-A
Country	US
Kind code	A1
Filing date	Apr 5, 2013
Priority date	Apr 5, 2013
Publication date	Jan 7, 2016
Grant date	—

Abstract

A management system manages a plurality of management target devices. A storage device stores one or more rules, plan information, and plan history information. A control device specifies a first cause event that is a candidate of a cause of the event that has occurred in any one of the management target devices based on the one or more rules, specifies a plurality of first plans that can be executed in the case in which the first cause event is a cause based on the plan information, calculates an index value indicating a possibility of succeeding in a failure recovery in the case in which the plan is executed for each of the plurality of first plans based on the plan history information, and displays data indicating any one or more plans of the plurality of first plans according to a display mode decided based on the index value.

First claim

1 . A management program for causing a computer that configures a management system configured to manage a computer system comprising a plurality of management target devices, to execute the following:
executing a cause analysis of an event that has occurred in any one of the plurality of management target devices and specifying a first cause event that is a candidate of a cause of the event that has occurred based on one or more rules indicating a correspondence relationship between a cause event related to any one of the plurality of management target devices and one or more condition events related to any one of the plurality of management target devices that is a condition under which the cause event is a cause; specifying a plurality of first plans that can be executed in the case in which the first cause event is a cause, based on plan information indicating a correspondence relationship between the rule and a plan that is a recovery measure that can be executed in the case in which a cause event of the rule is a cause; calculating an index value indicating a possibility of succeeding in a failure recovery in the case in which the plan is executed for each of the, plurality of first plans, based on plan history information indicating the success or failure of a failure recovery by an execution of the plan, every when the plan is executed; and displaying data indicating any one or more plans of the plurality of first plans according to a display mode decided based on the index value.

2 . The management program according to claim 1 , being configured to cause the computer to execute the following:
extracting one or more plans in which the index value is equal to or larger than a predetermined value from the plurality of first plans and displaying data indicating the one or more extracted plans.

3 . A management program according to claim 2 , being configured to cause the computer to execute the following,
arranging and displaying the one or more extracted plans in an order from larger index value.

4 . The management program according to claim 3 , being configured to cause the computer to execute the following:
calculating a certainty factor indicating the certainty of the cause event being the cause for each cause event of one or more rules in the cause analysis of an event that has occurred, and specifying the first cause event based on the certainty factor; and executing a second plan in which the index value is largest for the plurality of first plans in the case in which the certainty factor of the first cause event, is equal to or larger than a predetermined value.

5 . The management program according to claim 4 , being configured to cause the computer to execute the following:
executing the second Plan in the case in which the certainty factor of the first cause event is equal to or larger than a predetermined value and the index value of the second plan is equal to or larger than a predetermined value.

6 . A management program according to claim 5 , being configured to cause the computer to execute the following:
after executing one plan of the plurality of first plans, adding data indicating the success or failure of a failure recovery by an execution of the one plan to the plan history information.

7 . The management program according to claim 6 ,
wherein the plan history information includes a plurality of history elements indicated by associating a rule including a cause event specified as a candidate of a cause in the past, a plan executed in the case in which a cause event of the rule is specified as a candidate of a cause, and the success or failure of a failure recovery by an execution of the plan with each other, and wherein the management program is configured to cause the computer to execute the following:
determining whether or not, for every combination of one rule of one or more rules and one plan corresponded to the rule, history elements related to a combination of which the number is equal to or larger than a predetermined number are included in the plan history information based on the plan information and the plan history information; and
under a failure situation in which a cause event of the rule that, configures the combination is a cause, for a combination in which history elements of which the number is equal to or larger than the predetermined number are not included, executing a test for executing a plan that configures the combination, creating a history element related to the combination based on the result of the test, and adding the created history element, to the plan history information.

8 . The management program according to claim 7 ,
wherein the plan history information includes a plurality of history elements indicated by associating a rule including a cause event specified as a candidate of a cause in the past, a plan executed in the case in which a cause event of the rule is specified as a candidate of a cause, and the success or failure of a failure recovery by an execution of the plan with each other, and wherein the management program is configured to cause the computer to execute the following:
in the case in which history elements, of which the number is equal to or larger than a predetermined number, related to a combination of a rule indicated by a first history element included in the plan history information and a plan indicated by the first history element are included in the plan history information, transmitting data including a history element related to the combination to a management system configured to manage a computer system different from the computer system; and
in the case in which the data including a history element is received from the management system configured to manage a computer system different from the computer system, adding a history element included in the received data to the Plan history information.

9 . The management program according to claim 8 ,
wherein the rule has a general rule in which a management target device related to the cause event and the condition event is represented by a type of the management target device and an expansion rule in which a type of a management target device related to the cause event and the condition event is represented by data indicating a specific management target device, wherein the plan has a general plan that is a recovery measure in the form independent of an actual configuration of the computer system and an expansion plan that is a recovery measure obtained by expanding the general plan in consideration of an actual configuration of the computer system, wherein the plan information indicates a correspondence relationship between the general rule and the general plan that can be executed in the case in which to cause event of the general rule is a cause, wherein the plan history information indicates the success or failure of a failure recovery by an execution of the expansion plan every when the expansion plan is executed, and includes a plurality of history elements indicated by associating an expansion rule including a cause event specified as a candidate of a cause in the past, an expansion plan executed in the case in which a cause event of the expansion rule is specified as a candidate of a cause, and the success or failure of a failure recovery by an execution of the expansion plan with each other, and wherein the management program is configured, to cause the computer to execute the following:
creating a plurality of expansion rules based on connection information indicating a connection relations hip between the plurality of management target devices and the general rule;
specifying the first cause event based on the certainty factor calculated for each cause event of the

Assignees

• Hitachi Ltd

Inventors

• Nagura Masataka
• Nakajima Jun
• Nagai Takayuki
• Kudou Yutaka

Classifications

• G06F11/30

  Monitoring · CPC title

• G06F11/079 Primary

  Root cause analysis, i.e. error or fault diagnosis (in a hardware test environment G06F11/22; in a software test environment G06F11/36) · CPC title

• G06F11/0793

  Remedial or corrective actions (recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40) · CPC title

• G06F11/34

  Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation {; Recording or statistical evaluation of user activity, e.g. usability assessment} · CPC title

• G06F11/2094

  Redundant storage or storage space (G06F11/2056 takes precedence) · CPC title