JP2009146001A - Business performance monitoring system and method - Google Patents

Abstract

A system and method for grasping the performance of a business system are provided.
In a system in which a system user terminal and a computer system including one or more servers are connected via a network, a system for acquiring log information of the computer system is a system user terminal. Log information acquisition unit (202) that acquires, for each received data processing instruction, log information relating to data processing executed on one or more servers in the computer system in accordance with the data processing instruction received from the network And a log information database (206) for storing log information acquired for each received data processing instruction. The log information acquisition unit (202) acquires the log information at the time of starting and ending each data processing based on the received data processing command, and stores it in the log information database (206). .
[Selection] Figure 2

Description

  The present invention relates to a maintenance and operation system and method for a computer system. More particularly, the present invention relates to a system and method for grasping the performance of a business system.

  In recent years, in business activities of companies, computer systems have been utilized in many business areas, and thanks to such computer systems, the service level of business activities has been maintained and improved.

  In such a computer system, resources (resources) such as various hardware, software, and networks are used, and these resources are appropriately managed to make the computer system smooth and stable. Management is becoming increasingly important. In other words, in order to maintain and improve the service level of business activities, it is increasingly important to maintain and operate computer systems including resource management (capacity management and resource management).

  In the field of computer system maintenance and operation, resource management and failure management are performed so that operating costs (running costs) do not become excessive.

  Resource management is performed in order to continuously maintain stable operation of a computer system while effectively using resources such as hardware, software, and a network. Resource management types include hardware resource management, software resource management, network resource management, and the like.

  In addition, failure management is performed for computer system monitoring, operation status grasping, system abnormality detection, recovery processing when a failure occurs, and the like for normal and stable operation of the computer system.

  A failure in a computer system is often pointed out by a user or discovered by a maintenance / operation administrator during system monitoring, but the fact of failure occurrence or failure occurrence in the performance management in the above resource management. You may discover a tendency to foreshadow.

  As described above, a system that collects information on system performance (for example, log information) periodically or temporarily, monitors a computer system, and grasps a trend of the system operating status is used. (See Patent Documents 1 and 2).

Japanese Patent No. 3937341 JP 2005-018103 A

  However, the conventional method of grasping the processing status of a computer system using log information (see FIG. 9 of Patent Document 1) can grasp the access status of a system user and the time when a processing request occurs, but as log information There is a problem that internal processing time for each processing unit is not retained.

  In addition, when the processing speed of the computer system is gradually deteriorating, it is difficult to immediately recognize it as a failure, and there is a problem that a delay in the discovery leads to a failure at a later date.

  Furthermore, from the viewpoint of performance monitoring, there has been a problem that it takes enormous time to generate and analyze statistical information using log information.

  The present invention has been made in view of such problems, and an object of the present invention is to provide a system and method for grasping the performance of a business system.

  In order to achieve the above object, the present invention provides a system in which a system user terminal and a computer system including one or more servers are connected via a network. A system for acquiring log information of a computer system, which is executed on one or more servers in the computer system in accordance with a data processing command received from a terminal of a system user via a network It is characterized by comprising a log information acquisition unit that acquires log information related to processing for each received data processing instruction, and storage means for storing log information acquired for each received data processing instruction.

  According to this configuration, the operating status of the computer system can be grasped, and it is possible to confirm how the operating status of the computer system has been improved as a result of the system modification.

  The invention according to claim 2 is the system according to claim 1, wherein the log information acquisition unit executes log data at both the time of starting and ending each data processing based on the received data processing command. It is acquired at the point of time and stored in the storage means.

  The invention according to claim 3 is the system according to claim 1, wherein the log information is read from the storage means, the log analysis is totaled for each type of data processing, and the totaled result is visually displayed. And a display unit for displaying automatically.

  The invention according to claim 4 is the system according to claim 1, wherein the log information includes a work identification code, a processing content, and a key item to be processed at the start time, the end time, the start time and the end time. And at least any information that the system user desires to aggregate using the information analysis unit.

  According to a fifth aspect of the present invention, in a computer system including one or more servers capable of communicating with a computer inside or outside a network, the operation status of the computer system is monitored and data on the monitoring result is accumulated. Log information relating to data processing executed on one or more servers in the computer system in accordance with data processing instructions received from the computer inside or outside the network via the network. Log information acquisition unit for acquiring each received data processing instruction, storage means for storing log information acquired for each received data processing instruction, and reading log information from the storage means, and logging for each type of data processing The information analysis department that aggregates information and the aggregated results And a display unit for displaying the Satoshiteki, aggregated results, characterized in that it is used to improve the health of the computer system.

  According to this configuration, the operating status of the computer system can be grasped, and it is possible to confirm how the operating status of the computer system has been improved as a result of the system modification.

  The invention according to claim 6 is the system according to claim 5, wherein the log information acquisition unit is configured to receive log information both when starting and ending each data processing based on the received data processing command. It is acquired at the point of time and stored in the storage means.

  The invention according to claim 7 is the system according to claim 5, wherein the log information includes a job identification code, a processing content, and a key item to be processed at a start time, an end time, a start time and an end time. And at least any information that the system user desires to aggregate using the information analysis unit.

  The invention according to claim 8 is a method for acquiring log information of a computer system in a system in which a terminal of a system user and a computer system including one or more servers are connected via a network. The method receives (a) log information relating to data processing executed on one or more servers in a computer system in accordance with a data processing command received from a system user terminal via a network. A step of acquiring for each data processing instruction; and (b) storing log information acquired for each received data processing instruction.

  The invention according to claim 9 is the method according to claim 8, wherein step (a) ends (c) log information when each data processing based on the received data processing instruction starts and ends. It further comprises the step of obtaining at both time points.

  The invention described in claim 10 is the method according to claim 8, wherein (d) reading stored log information and totaling log information for each type of data processing; and (e) totaling And visually displaying the result obtained.

  The invention according to claim 11 is the method according to claim 8, wherein the log information includes a work identification code, a processing content, and a key item to be processed at the start time, at the end time, at the start time and at the end time. And at least any information that the system user desires to be tabulated in step (d).

  The invention according to claim 12 is a program for causing a computer to execute the method according to any one of claims 8 to 10.

  According to a thirteenth aspect of the present invention, in a computer system including one or more servers capable of communicating with a computer inside or outside a network, the operation status of the computer system is monitored and data on the monitoring result is accumulated. The method comprises: (a) data processing performed on one or more servers in a computer system in accordance with data processing instructions received via a network from a computer internal or external to the network Log information regarding each received data processing instruction, (b) storing log information acquired for each received data processing instruction, and (c) reading the stored log information and data A step of aggregating log information for each type of processing; (d) aggregating Comprising a step of visually displaying the the the result, aggregated results, characterized in that it is used to improve the health of the computer system.

  The invention according to claim 14 is the method according to claim 13, wherein step (a) ends (e) log information, when each data processing based on the received data processing instruction starts and ends. It further comprises the step of obtaining at both time points.

  The invention according to a fifteenth aspect is the method according to the thirteenth aspect, wherein the log information is obtained at the start time, at the end time, at the start time and at the end time for each business identification code, processing contents, and key items to be processed. And at least any information that the system user desires to be tabulated in step (c).

  The invention according to claim 16 is a program for causing a computer to execute the method according to any one of claims 13 to 14.

  As described above, according to the present invention, since the log information acquisition unit and the storage unit are provided, performance monitoring can be performed for each process performed in an arbitrary computer system.

  In other words, as a result of maintaining the internal processing speed for each business processing unit as log information, even if an event that is not immediately recognized as a failure occurs, It becomes possible to monitor and investigate in detail the events that can become obstacles.

  In addition, according to the present invention, log information can be used to easily generate and analyze statistical information in the computer system in a short time.

  Furthermore, the present invention makes it possible to visually confirm the effect of any improvement that has been made, in addition to early detection of a sign of performance degradation.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram showing a schematic configuration of a system 100 according to an embodiment of the present invention. The system 100 includes a plurality of personal computers (PCs) 101 and a computer system 103, which are connected via a network 102. In FIG. 1, an example of a range targeted by the performance grasping system 104 according to the present invention is surrounded by a dotted line. Details of the performance grasping system 104 will be described in detail in FIG.

  The PC 101 indicates a computer used by a system user, and is not limited to a personal computer (PC) described in this specification. Other embodiments include a system dedicated terminal, a mobile notebook computer, a PDA, and the like. Any portable information terminal or mobile phone may be used as long as it can be connected to the network 102 and can access the computer system 103.

  The network 102 can be an arbitrary network such as a LAN or a WAN, and is not particularly limited.

  The computer system 103 has a general configuration of a conventional Web application, and includes a Web server 105, an application (AP) server 106, and a database (DB) server 107. In FIG. 1, arrows indicate how a command (for example, a request) from the PC 101 received via the network 102 is transmitted to the Web server 105, the AP server 106, and the DB server 107. Further, the transmission path of the processing result (for example, response) according to the command is also shown in FIG. Details of the configuration of the computer system 103, that is, the roles of the servers 105 to 107 inside the computer system 103, are conventional techniques, and will not be described in this specification.

  FIG. 2 is a block diagram showing the function of each unit in the performance grasping system 104 according to an embodiment of the present invention. With such a configuration, it is possible to provide a system and method for grasping the performance of the business system, which is the subject of the present invention.

  The control unit 201 controls each unit 202 to 206 in the performance grasping system 104. When the control unit 201 receives various commands from a plurality of PCs 101 via the network 102, the control unit 201 operates an application on the AP server 106 and accesses a corresponding database in the DB server 107. The control unit 201 corresponds to a CPU (Central Processing Unit).

  The log information acquisition unit 202 stores log information of processing contents (for example, calling, changing, and deleting data by operating a program) when the received command is executed by the AP server 106 and the DB server 107. get. The log information is acquired for each processing content executed by the AP server 106 and the DB server 107. The log information acquisition unit 202 acquires log information not only at the start of processing but also at the end of processing. Further, in the performance grasping system 104 according to the embodiment of the present invention, it is possible to arbitrarily set information to be obtained, and for example, the data items shown in FIG. 3 can be obtained. Log information acquired at the start and end of the process is stored in a log information database 206 described later after the process ends.

  In the above description, an example has been described in which log information of processing contents executed by the AP server 106 and the DB server 107 is acquired. However, the present invention is not limited to this. For example, the Web server 105 in FIG. 1 can be included in the log acquisition target server, and an arbitrary request reception time and a response time of the request in the Web server 105 can be acquired as log information. It is.

  The data acquisition / update processing unit 203 performs a process in which an application on the AP server 106 accesses the DB server 107 to acquire corresponding data, a process of updating, a process of deleting, and the like in accordance with the above command.

  When the performance information analysis unit 204 receives an instruction from the control unit 201 to execute performance information analysis on the AP server 106 and the DB server 107, the performance information analysis unit 204 accesses the log information database 206 to acquire log information. The performance information analysis unit 204 uses the acquired log information to calculate the number of uses, average / maximum processing time, etc. for each process (for example, screen reference, form printing), and displays the table as shown in FIG. Generates a list of formatted data and, in some cases, a graphical output. For this reason, as shown in FIG. 3, if the number of uses, average / maximum processing time, etc. for each process for each customer ID and operation user ID are tabulated, for example, who printed when and how much It is possible to display information such as how much information has been searched. Thereafter, the performance information analysis unit 204 transmits the generated tabular or graph data to the analysis result display unit 205.

  When the analysis result display unit 205 receives the data from the performance information analysis unit 204, the data is displayed on a display device such as a display connected to a personal computer or the like according to the format of the received data (table format, graph format, etc.). Is displayed. Based on the displayed results, the results of analysis of the operating status of the AP server 106 and the DB server 107 are used to confirm a plurality of indices output by the system according to the present invention, where there is a problem from the viewpoint of performance degradation. Can be discovered. For this reason, for example, it is possible to repair a program having an abnormally high CPU usage rate.

  The log information database 206 is a database that stores log information acquired by the log information acquisition unit 202. This log information is acquired for each process at both the process start time and the process end time. Further, as shown in FIG. 8, the log information includes at least the business type, the processing content, and the processing target as key items, and the difference time between the start of the process, the end of the process, and the start and end of the process ( IntervalTime) and other detailed information. The other detailed information can arbitrarily determine information that the system user wants to acquire, and includes, for example, information such as the number of acquired data and whether or not the processing itself has ended normally.

  Next, a log information acquisition process executed by the performance grasping system 104 according to the embodiment of the present invention from the start of the process of the AP server 106 to the end of the process will be described with reference to the process flow of FIG.

  In step 501, the log information acquisition unit 202 acquires “StartTime” that is a processing start time and user information that is going to execute the processing instruction (for example, a user ID and a customer identification number when logged in).

  In step 502, the AP server 106 accesses the DB server 107 in accordance with the processing instruction, and performs processing such as data call, editing, and deletion. Such data calling, editing, and deletion processes are implemented as conventional techniques and are not special program processes.

  In step 503, the log information acquisition unit 202 acquires information such as “EndTime” that is the processing end time, processing content (such as an SQL sentence), and the number of data that has been processed from the AP server 106 and the DB server 107. .

  In step 504, the log information acquisition unit 202 stores the information acquired in steps 501 and 503 in the log information database 206.

  Next, an example of performance monitoring of the computer system 103 performed by the performance grasping system 104 according to an embodiment of the present invention will be described with reference to FIGS.

  First, the performance information analysis unit 204 receives an instruction to execute performance information analysis of the AP server 106 and the DB server 107 via the personal computer that can access the performance grasping system 104 and the control unit 201. After receiving the instruction, the performance information analysis unit 204 accesses the log information database 206 to acquire log information, and uses the acquired information to execute each process executed in the AP server 106 and the DB server 107. The number of uses, average / maximum processing time, etc. are calculated for the data, and a tabular data list as shown in FIG.

  In the example of FIG. 4, the number of times of processing for each day, the average (processing) time, and the maximum (processing) time are shown, and the end of the current month (August) is compared with the end of the previous month (July). . If it is determined in FIG. 4 that there is a problem with the processing of “△△ form printing” (that is, the processing speed is slower than usual), the details of “△△ form printing” as shown in FIG. Analysis results can be displayed on the analysis result display unit 205, and it can be determined whether or not there is a failure (for example, in the case of FIG. Therefore, it can be determined that this is not a malfunction of the program or the base part). In the example of FIG. 4, the end of the current month (August) is compared with the end of the previous month (July), but the comparison target is obtained by calculating the average value in the past predetermined period. You may make it compare using the average value previously set as a threshold value.

  Furthermore, the performance information analysis unit 204 can generate a graph-format output. For example, FIG. 7 shows a graph plotting the average daily processing speed of a print job in a certain system using the performance grasping system 104 according to an embodiment of the present invention. That is, FIG. 7 shows the time-series changes in the performance of the processing when the performance is continuously monitored for the arbitrary processing in the system whose performance is to be grasped, the cause is identified and the problem is addressed. Represents.

  The inflection points indicated by A to D in FIG. 7 will be described in detail below.

  The portion indicated by D indicates that immediately after the new system is fully operational (released), a high value appears due to the concentration of use of the new system by the user. The portion indicated by A indicates that the processing time has increased because the number of users of the new system has increased. The portion indicated by B indicates that the effect of the system modification has appeared. The portion indicated by C indicates that the effect of replacing the server with a high-performance server has appeared.

  In the above description, the average processing time of one day is targeted, but it is of course possible to set the unit of the averaging time to an arbitrary time such as 12 hours, 1 hour, 10 minutes, 1 minute. By making it possible to set an arbitrary time in this way, it becomes possible to grasp a situation that appears only in a very short time.

  Note that the inflection points indicated by A to D in FIG. 7 calculate the average processing time per unit time to be measured (one day in the example of FIG. 7), and are longer than the predetermined time interval (unit time to be measured). Time interval: In the example of FIG. 7, (1) the point where the increase or decrease with a certain rate of change between 3 days or 5 days), or (2) the decrease from the increase It can be derived by calculating the point turned to.

  FIG. 8 conceptually shows the data structure of log information used by the performance grasping system 104 according to an embodiment of the present invention.

  The log information is acquired in units with the job type, the processing content, and the processing target as key items. For this reason, it becomes possible to grasp whether or not a processing target such as a screen or a form includes a problem in any process in which business. Further, as a feature of the present invention, the log information can include a set of start time (StartTime) and end time (EndTime) for each process. Many of the conventional log information holds the start time for each process as information. In the present invention, the embodiment described with reference to FIGS. 4, 6, and 7 has a set of start time and end time. Like, it becomes easy to do performance analysis.

  By using the performance grasping system 104 according to the present invention, performance monitoring can be performed for each process performed in the AP server 106 and the DB server 107 of the computer system 103. That is, as a result of maintaining the internal processing speed for each business processing unit as log information, even if an event that is not immediately recognized as a failure has occurred, It is possible to monitor and investigate in detail the events that can become obstacles. In addition, using the log information, the performance information analysis unit 204 and the analysis result display unit 205 can easily generate and analyze statistical information in the computer system 103 in a short time.

  The present invention is also characterized in that, in addition to finding a sign of performance deterioration at an early stage, it is possible to visually confirm the effect of any improvement made.

It is a figure which shows schematic structure of the system which concerns on one Embodiment of this invention. It is a block diagram which shows the function of each part in the performance grasping | ascertainment system which concerns on one Embodiment of this invention. In the performance grasp system concerning one embodiment of the present invention, it is a figure showing an example of the information to acquire which can be set up arbitrarily. It is an example of the output which the performance information analysis part which concerns on one Embodiment of this invention produces | generates. It is a figure explaining the log information acquisition process performed by the performance grasping system concerning one embodiment of the present invention from the processing start of AP server to the end of processing. It is an example of the output which the performance information analysis part which concerns on one Embodiment of this invention produces | generates. The performance grasp system according to the embodiment of the present invention is used to continuously monitor the performance of an arbitrary process, identify the cause, and deal with the problem. It is a figure showing a typical change. It is a figure which shows notionally the data structure of the log information which the performance grasping | ascertainment system which concerns on one Embodiment of this invention uses.

Explanation of symbols

101 Personal computer (PC)
DESCRIPTION OF SYMBOLS 102 Network 103 Computer system 104 Performance grasp system 105 Web server 106 AP server 107 DB server 201 Control part 202 Log information acquisition part 203 Data acquisition / update process part 204 Performance information analysis part 205 Analysis result display part 206 Log information database

Claims (16)

A system for acquiring log information of the computer system in a system in which a terminal of a system user and a computer system including one or more servers are connected via a network,
The received data processing instruction log information relating to data processing executed on the one or more servers in the computer system in accordance with the data processing instruction received from the system user terminal via the network Log information acquisition unit to be acquired every time,
And a storage means for storing log information acquired for each received data processing instruction.   The log information acquisition unit acquires the log information at both the time of starting and ending each data processing based on the received data processing command, and stores the log information in the storage unit. The system according to claim 1. An information analysis unit that reads the log information from the storage unit and totals the log information for each type of data processing;
The system according to claim 1, further comprising: a display unit that visually displays the aggregated results.   The log information is calculated for each business identification code, processing content, and key item to be processed, at the start time, at the end time, the difference time between the start time and the end time, and the system user totals using the information analysis unit The system of claim 1, including at least any information desired to be performed. In a computer system including one or a plurality of servers capable of communicating with a computer inside or outside a network, the system monitors the operating status of the computer system and accumulates data on the monitoring result.
The system
The received data processing log information relating to data processing executed on the one or more servers in the computer system in accordance with a data processing instruction received from the computer inside or outside the network via the network A log information acquisition unit for each instruction;
Storage means for storing log information acquired for each received data processing instruction;
An information analysis unit that reads the log information from the storage unit and totals the log information for each type of data processing;
A display unit for visually displaying the aggregated results,
A system characterized in that the aggregated results are used to improve the operating status of the computer system.   The log information acquisition unit acquires the log information at both the time of starting and ending each data processing based on the received data processing command, and stores the log information in the storage unit. The system according to claim 5.   The log information is calculated for each business identification code, processing content, and key item to be processed, at the start time, at the end time, the difference time between the start time and the end time, and the system user totals using the information analysis unit 6. The system of claim 5, comprising at least any information desired to do. A method for obtaining log information of a computer system in a system in which a terminal of a system user and a computer system including one or more servers are connected via a network,
The method
(A) The log information relating to data processing executed on the one or more servers in the computer system is received in accordance with a data processing command received from the system user's terminal via the network. Acquiring for each data processing instruction;
(B) storing log information acquired for each received data processing instruction. The step (a)
9. The method of claim 8, further comprising the step of: (c) obtaining the log information at both the time of starting and ending each data processing based on the received data processing command. . (D) reading the stored log information and counting the log information for each type of data processing;
9. The method of claim 8, further comprising: (e) visually displaying the aggregated results.   The log information is totaled by the system user at the start, end, difference time between the start and end, and the step (d) for each business identification code, process content, and key item to be processed. 9. The method of claim 8, including at least any information desired.   A program for causing a computer to execute the method according to any one of claims 8 to 10. In a computer system including one or a plurality of servers capable of communicating with a computer inside or outside a network, a method for monitoring an operating state of the computer system and storing data on the monitoring result,
The method
(A) receiving log information relating to data processing executed on the one or more servers in the computer system in accordance with a data processing instruction received from the computer inside or outside the network via the network; Obtaining each data processing instruction,
(B) storing log information acquired for each received data processing instruction;
(C) reading the stored log information and counting the log information for each type of data processing;
(D) visually displaying the aggregated results, and
The aggregated result is used to improve the operating status of the computer system. The step (a)
14. The method of claim 13, further comprising the step of: (e) obtaining the log information at both the time of starting and ending each data processing based on the received data processing instruction. .   The log information is totaled by the system user in the step (c) at the start time, at the end time, the difference time between the start time and the end time, for each business identification code, processing contents, and key items to be processed. 14. The method of claim 13, comprising at least any information desired.   A program for causing a computer to execute the method according to any one of claims 13 to 14.

Images