Identification apparatus, identification method and identification program

Patent metadata

Field	Value
Publication number	US-9705772-B2
Application number	US-201314427954-A
Country	US
Kind code	B2
Filing date	Apr 26, 2013
Priority date	Apr 26, 2013
Publication date	Jul 11, 2017
Grant date	Jul 11, 2017

Abstract

It is provided an identification apparatus is configured to: obtain, from a first request group, same-type requests which are of the same type as an investigation subject request in a first request group; obtain, other-type requests that have been transmitted from a first apparatus to a second apparatus and a response to which has been transmitted from the second apparatus to the first apparatus, during a processing period; generate, for the investigation subject request and each of the same-type requests; search the generated sets for sets that have the matching other-type requests, and remove one of the found sets; obtain second requests that have been processed by the second apparatus during the processing period from the second request group; calculate, for the investigation subject request and each of the same-type requests after the removal, values of correlation with the obtained second requests.

First claim

What is claimed is:

1. An identification apparatus, comprising:
a memory; and
an interface communicatively coupled to a first apparatus and a second apparatus;
a processor communicatively coupled to the memory and the interface,
wherein the memory stores a first request group, which is a group of first requests received by the first apparatus, and a second request group, which is a group of second requests processed by the second apparatus in response to a request from the first apparatus, and
wherein the processor
stores, in the memory, association information and count information for the first request group and the second request group;
selects, from the first request group, a first addition subject request which has not been added to the association information;
obtains, from the first request group, a plurality of same-type requests which are of the same type as an investigation subject request in the first request group;
obtains from the first request group a plurality of other-type requests that have been transmitted from the first apparatus to the second apparatus and are of different types compared to the investigation subject request during a processing period of the investigation subject request and the each of the plurality of same-type requests; wherein the processing period starts with a transmission of the investigation subject request and the plurality of same-type requests from the first apparatus to the second apparatus and ends with a transmission of a response to the investigation subject request and the plurality of same-type requests from the second apparatus to the first apparatus;
identifies, from among the second request group, a second addition subject request that has been processed by the second apparatus during the processing period, and an appearance count of the second addition subject request;
updates a count based on the first addition subject request, the second addition subject request, and the appearance count;
generates second appearance count information, when there is no overlap, by counting any of the plurality of other-type requests in the association information that are different types of requests compared to the first addition subject request added to the association information;
removes, when the second appearance count is equal to or more than a given count, a third appearance count, wherein the third appearance count is equal to the first addition subject request added to the association information and the plurality of other-type requests identified from among the first request group from the association information;
updates the count information by subtracting the third appearance count from the count information;
determines whether or not a first count of a plurality of other-type requests stored among the first request group is greater than a second count of a plurality of other-type requests stored in the association information;
determines, when the first count is greater than the second count, whether or not there is an overlap between any of the plurality of other type requests that exist in the first request group and any of the plurality of other type requests that exist in the association information;
calculates, when there is no overlap, values of correlation with the first addition subject request and the second request group of a same processing period to generate a result; and
outputs the result by displaying, via the identification apparatus, a rating associated with the correlation.

2. The identification apparatus according to claim 1 , wherein the processor further:
removes, from the plurality of same-type requests a number of same type requests from the first group of requests that sum up to a given count or higher or are in a given place or lower in ascending order.

3. The identification apparatus according to claim 1 , is further configured to remove, from among the second requests that have been processed by the second apparatus during the processing period, all requests from the first group of requests whose processing started before reception of any of the plurality of same-type requests by the first apparatus.

4. The identification apparatus according to claim 1 , is further configured to remove, from among the second requests that have been processed by the second apparatus during the processing period, all requests whose processing period has a length that is less than a given length.

5. The identification apparatus according to claim 1 , wherein the investigation subject request is manually input.

6. The identification apparatus according to claim 1 ,
wherein the memory stores prediction information that indicates predicted fluctuations with time in load on the second apparatus in relation to a request count of the first request group, and
wherein the processor is configured to:
identify a predicted load fluctuation at a current time from the prediction information; and
change an interval of processing that is executed by the second apparatus to an interval based on the identified predicted load fluctuation.

7. A non-transitory computer readable storage medium storing instructions to be executed by a processor of an identification apparatus, that is coupled to a first apparatus and a second apparatus,
wherein the instructions cause the processor to:
store in a memory of the identification apparatus a first request group, a second request group, association information, and count information for the first request group, the second request group, and the association information,
wherein the first request group is a plurality of first requests received by the first apparatus comprising a plurality of other-type requests and a plurality of same-type requests,
wherein the second request group is a plurality of second requests processed by the second apparatus in response to a request from the first apparatus,
wherein the plurality of same-type requests are the same type of requests as the plurality of first requests,
wherein the association information comprises associations between the first request group and a plurality of same-type requests,

select, from the first request group, a first addition subject request which has not been added to the association information;
obtain, a plurality of other-type requests from a processing period that are requests of a different type compared to the first addition subject request, wherein the processing period starts with a transmission of the first addition selected subject request from the first apparatus to the second apparatus and ends with a transmission of a response to the first addition selected subject request from the second apparatus to the first apparatus;
identify, from among the second request group, a second addition subject request that has been processed by the second apparatus during the processing period, and an appearance count of the second addition subject request;
update a count based on the first addition subject request, the second addition subject request, and the appearance count;
generate second appearance count information, when there is no overlap, by counting any of the plurality of other-type requests in the association information that are different types of requests compared to the first addition subject request added to the association information;
remove, when the second appearance count is equal to or more than a given count, a third appearance count, wherein the third appearance count is equal to the first addition subject request added to the association information and the plurality of other-type requests identified from among the first request group from the association information;
update the count information by subtracting the third appearance count from the count information;
determ

Assignees

• Hitachi Ltd

Inventors

• Masuda Mineyoshi
• Wada Kiyomi
• Mizuno Jun

Classifications

• G06F11/3419 Primary

  by assessing time · CPC title

• H04L41/0631

  using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis · CPC title

• H04L43/0876 Primary

  Network utilisation, e.g. volume of load or congestion level · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L67/32

  Electricity · mapped topic