JP2011145898A - System, method and program for managing operation information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce a processing load relating to the extraction processing of motion information in a monitoring object device. <P>SOLUTION: The operation information management system includes: a monitoring object device 100 having a message analyzing part 13 for determining whether a message as self-motion information conforms to primary filter conditions and a history information imparting part 15 for imparting corresponding history information when history information as the identifier of secondary filter conditions is associated with the primary filter conditions; and a monitoring device 200 having a message analyzing part 22 for performing message processing 24 to obtain the message, and to extract motion information which conforms to the secondary filter conditions, and for determining the secondary filter conditions to be used for the message processing 24 in response to the processing load state of the resource related to the message processing 24. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to operation management of a computer device, and more particularly to a system for processing monitoring information indicating an operation state of a computer device such as failure information.

As computer systems become larger and more complex, the management costs required to maintain the systems are also increasing.
Specifically, for example, when the number of computer devices belonging to the same network increases, or even for one computer device, the contents that must be monitored in relation to the operation of the computer device are complicated and enlarged. A problem has occurred.

Therefore, a dedicated device for monitoring the operation status of other computers belonging to the same network may be provided in the computer network. Here, such a device is referred to as a monitoring device, and a computer device to be monitored by the monitoring device is referred to as a monitoring target device.
The monitoring target device sends a message (monitoring information) indicating its own operation status to the monitoring device via the network. The monitoring device collects and displays this monitoring information. A system in which the monitoring device and the monitoring target device are connected to the same network is referred to as an operation information management system here.

  By the way, the operation information management system checks the monitoring information received from the monitoring target device in the monitoring device based on all the preset extraction conditions (filters), and extracts the monitoring information suitable for the filter ( When performing (extraction processing), it is necessary to allow sufficient system resources for the extraction processing of monitoring information that does not know when it occurs, resulting in inconvenience that the utilization efficiency of system resources is reduced.

  In addition, in order to provide support for troubleshooting, which is the main purpose of the operation information management system, it is necessary to construct a system assuming that a large number of warning messages are generated compared to normal operation, and the system is expensive. Therefore, it has been difficult to optimize the utilization efficiency of system resources related to monitoring information processing in the monitoring device.

  As a related technique for this, a technique for reducing the processing load of the filter in the monitoring device by setting the monitoring device to not check the already generated message (monitoring information) is disclosed (Patent Document 1). ).

Japanese Patent Application No. 2008-267757

  However, in the related art disclosed in Patent Document 1, in a situation where monitoring information that completely matches a preset message does not occur, the processing load for monitoring information extraction processing increases compared to normal times. For this reason, in a situation where a large amount of monitoring information such as a large number of different warning messages is generated in a short time, there may be a disadvantage that the processing load further increases.

[Object of invention]
The present invention provides an operation information management system, an operation information management method, and an operation information management program capable of improving the inconvenience of the related technology and effectively reducing the processing load related to the process of extracting the operation information of the monitoring target device. Its purpose is to provide.

  In order to achieve the above object, an operation information management system according to the present invention includes a monitoring target device that generates operation information indicating its own operation state, and obtains the operation information and extracts a preset from the operation information. An operation information management system comprising a monitoring device that performs a process of extracting operation information that conforms to conditions, wherein the monitoring target device determines whether or not the operation information conforms to a preset first operation determination condition A first motion determination unit that performs the conformity determination, and the motion information that conforms to the first motion determination condition conforms to a second motion determination condition that is preset in the monitoring device. A history information storage unit that stores an identifier of two motion determination conditions in association with the first motion determination condition as a history information list, and the second motion determination in the first motion determination condition to which the motion information is adapted. A history information addition processing unit that assigns an identifier of the second motion determination condition to the motion information when the identifier is associated, and the monitoring device performs the extraction process in the monitoring device. A processing load detection unit that detects a processing load value indicating the processing load value, a condition storage unit that stores the second operation determination condition including a plurality of different operation determination conditions, and the detected processing load value A second operation determining unit that determines whether or not the operation information acquired from the monitoring target device meets each operation determination condition of the second operation determination condition when lower than a certain value; and the detected When the processing load value is higher than a predetermined constant value, the second operation determination condition included in the history information list is an operation determination condition corresponding to the identifier of the second operation determination condition given to the operation information. A high load operation determination unit that determines whether or not the operation information conforms to, and an extraction that outputs and displays the operation information determined to conform to the second operation state determination condition or the selected operation determination condition And an operation information output unit.

  In addition, the operation information management method according to the present invention includes a monitoring target device that generates operation information indicating its own operation state, the operation information is acquired, and a second operation determination condition set in advance from the operation information is set. An operation information management system comprising a monitoring device that performs a process of extracting suitable operation information, and an operation information management method that outputs operation information extracted based on the extraction condition, wherein the monitoring target device includes the monitoring information It is determined whether or not the operation information meets a preset first operation determination condition, and an identifier of the second operation determination condition for the first operation determination condition that matches the operation information. If the history information is associated, the history information corresponding to the operation information is added and the operation information is transmitted to the monitoring device. When the processing load value indicating the value of the processing load related to the extraction processing is detected, and the detected processing load value is lower than a certain value, the operation information acquired from the monitoring target device is the second operation determination. It is determined whether or not each operation determination condition of the condition is met, and the operation determination condition corresponding to the history information given to the operation information when the detected processing load value is higher than a predetermined constant value Is selected from among the second operation determination conditions, and whether or not the operation information is suitable for each of the selected operation determination conditions, the second operation state determination condition or the selected operation determination is determined. It is characterized by extracting operation information that meets the conditions.

  Furthermore, the operation information management program according to the present invention includes a monitoring target device that generates operation information indicating its own operation state, and obtains the operation information and sets a second operation determination condition set in advance from the operation information. An operation information management system including a monitoring device that extracts suitable operation information, the operation information management program for outputting the extracted operation information, wherein the operation information is set in advance. A first motion determination function for determining whether or not the motion determination condition is satisfied, and history information that is an identifier of the second motion determination condition in the first motion determination condition that conforms to the motion information Is associated with the history information corresponding to the operation information, and the processing load indicating the processing load value for the extraction process in the monitoring device A processing load detection function for detecting a value, and when the detected processing load value is lower than a certain value, the operation information acquired from the monitoring target device conforms to each operation determination condition of the second operation determination condition A second operation determination function for determining whether or not to perform, and an operation determination condition corresponding to the history information given to the operation information when the detected processing load value is higher than a predetermined constant value. A high load operation determination function that selects from among the second operation determination conditions and determines whether or not the operation information conforms to each selected operation determination condition; and the second operation state determination condition or It is characterized by having a computer set in advance execute an operation information extraction function for extracting operation information that conforms to the selected operation determination condition.

  Since the present invention is configured and functions as described above, according to this, the operation determination condition for performing the operation information (message) extraction process is determined based on the load state (load information) in the monitoring device. Accordingly, it is possible to provide an operation information management system, an operation information management method, and an operation information management program that can effectively reduce the processing load on the monitoring device related to the process of extracting the operation information in the monitoring target device. .

It is a schematic block diagram which shows one Embodiment in the operation information management system by this invention. It is explanatory drawing which shows an example of the message produced | generated by the monitoring object apparatus in the operation information management system disclosed in FIG. It is explanatory drawing which shows an example of the list | wrist of the primary filter conditions preset in the monitoring function main-body part in the operation information management system disclosed in FIG. It is explanatory drawing which shows an example of the list | wrist of the secondary filter conditions preset in the management function main-body part in the operation information management system disclosed in FIG. It is explanatory drawing which shows an example of the historical information list stored in the historical information storage part in the operation information management system disclosed in FIG. It is explanatory drawing which shows an example of the message to which historical information was provided by the monitoring object apparatus in the operation information management system disclosed in FIG. It is explanatory drawing which shows an example of the message to which the message number was provided with the monitoring apparatus in the operation information management system disclosed in FIG. It is explanatory drawing which shows an example of the message to which the matching filter was provided with the monitoring apparatus in the operation information management system disclosed in FIG. It is a flowchart which shows the operation | movement process step in the monitoring apparatus in the operation information management system disclosed in FIG.

[Embodiment]
Next, the basic configuration content of the embodiment of the present invention will be described.

  As shown in FIG. 1, the present embodiment includes a monitoring target device 100 including a monitoring function main body 101 that generates operation information (monitoring information) indicating its own operation state as a computer device, and a management target device 100. A monitoring apparatus 200 having a management function main body 201 that performs processing for extracting a sent message and outputs and displays the extracted message, and a connection to the management apparatus 200 are provided to receive a message from the management function main body 201 In addition, instead of the management function main body unit 201, an analysis auxiliary device 300 that performs auxiliary analysis of messages is included.

The monitoring target device 100, the monitoring device 200, and the analysis auxiliary device 300 are assumed to be computer devices each having a CPU that performs execution processing based on a preset program such as an OS (operating system).
In addition, the operation functions set in the monitoring function main unit 101 and the management function main unit 201 of the present embodiment are executed by execution processing of a program such as an operating system set in advance in each of the monitoring target device 100 and the monitoring device 200. It shall be realized.

  The monitoring function main unit 101 of the monitoring target apparatus 100 includes an information acquisition unit 11 that collects monitoring information generated in the monitoring function main unit 101, and the monitoring target apparatus 100 based on the monitoring information passed from the information acquisition unit 11. The message generation unit 12 that generates a message for notification of the operation state in FIG. 2 (FIG. 2), and the filter condition (first condition) in which the message passed from the message generation unit 12 is preset by the administrator ) Has a message analysis unit 13 that determines whether or not it conforms.

  The monitoring function main unit 101 also includes a history information receiving unit 17 that receives, as history information, an identifier (filter identifier) of an extraction condition (filter) used for message extraction in the monitoring device 200, and a history information receiving unit 17. Refers to the history information storage unit 16 that stores and holds the history information received from the monitoring device 200, and the filter condition (the first condition) that is set in the monitoring device 200 by referring to the history information storage unit 16. 2), the history information giving unit 15 that gives the history information to the message when there is history information that matches and the monitoring device 200 is connected It has a configuration including a message transmission unit 14 that transmits a message that has been set and received from the history information addition unit 15 to the management apparatus 200.

  The message analysis unit 13 determines whether or not the filter condition (hereinafter referred to as “primary filter condition”) of the monitoring function main body unit 101 set in advance by the administrator is satisfied (primary filter conformity determination function).

  As shown in FIG. 3, the primary filter condition (primary filter) includes a message importance level, an application in which the message is generated, a body text indicating the content of the message, and a filter identifier. FIG. 3 shows an example of the list of the primary filters.

  Here, when the message conforms to the primary filter condition, the message analysis unit 13 assigns a filter identifier of the adapted primary filter to the message (primary filter identifier provision function) and the history information provision unit 15. To pass.

The history information adding unit 15 checks information in the history information storage unit 16 based on the primary filter condition identifier (primary filter identifier) given to the message.
Here, in the history information storage unit 16, the identifier of the primary filter that matches the message, and the filter condition (hereinafter referred to as “secondary filter condition”) in the monitoring apparatus 200 that matches (matches) this message. ) Is associated with the identifier (FIG. 5).

  The history information adding unit 15 searches for a filter identifier based on a primary filter identifier (here, AG_B) given to the message, and stores MG_2 and MG_4 (MG_2) stored corresponding to the primary filter identifier (AG_1). The matched secondary filter identifier) is acquired and given to the message as history information.

Here, an example of a message to which history information is given is shown in FIG.
In this message, history information (primary filter identifier and matched secondary filter identifier) is added to the message generated by the message generation unit 12 and including the importance, occurrence time, application, and text. ing.

The management function main body unit 201 of the management apparatus 200 has a processing load monitoring function for monitoring a processing load related to message filtering in the management apparatus 200.
Further, the management information management function main body 201 has a management function filter storage function for storing and holding a preset filter condition (management function filter: secondary filter condition) for message extraction processing (for example, by an administrator). ing. Here, FIG. 4 shows an example of a list of secondary filter conditions.
As shown in FIG. 4, the secondary filter condition (secondary filter) includes a message importance level, an application in which the message is generated, a text indicating the content of the message, a filter condition identifier (filter identifier), and a distribution destination. Shall be included.

  Further, the management function main unit 201 receives the message sent from the monitoring target device 101 (message transmission unit 14) and attaches a unique (unique) message number to the message, and the message reception unit 21 Message analysis unit 22 that determines whether or not a message matches a filter condition set as a management function filter, and message processing that sorts messages determined to meet the filter condition and rearranges messages based on message numbers And a message output unit 203 for outputting and displaying the message processed by the message processing unit 24.

  In addition, the management function main body unit 201 acquires information (load information) related to the processing load related to message filtering from the management function main body unit 201, and notifies the message analysis unit 22 of the load information, and a load notification unit 25, It has a configuration including a history information transmitting unit 26 that notifies the monitoring target device 100 of a filter identifier of a management function filter that matches the message.

  The message receiving unit 21 of the monitoring apparatus 200 assigns a message number that is unique in the present embodiment to the message received from the message transmitting unit 14 as described above. Here, FIG. 7 shows an example of a message given a message number.

The message analysis unit 22 analyzes the load information passed from the load notification unit 25, and the load information is in a state where the operation load related to message filtering of the monitoring device 200 is lower than a preset load value (low load state) ), It is determined whether or not the message received from the message receiving unit 21 matches all preset secondary filter conditions.
Further, when the message matches any of the secondary filter conditions, the message analysis unit 22 assigns a matching secondary filter identifier (hereinafter referred to as “match filter”) to this message, and this message (see FIG. 8) is passed to the message processing unit 24.
At this time, the message analysis unit 22 passes the filter identifier of the matched secondary filter and the identifier of the primary filter attached to the message to the history information transmission unit 26 as history information.

  When the load information passed from the load notification unit 25 indicates that the operation load related to message filtering of the monitoring device 200 is higher than a preset load value (high load state), the message analysis unit 22 For the message received from the receiving unit 21, it is determined whether or not only the secondary filter conditions included in the history information list (FIG. 5) are met (high load filter condition determination function).

  As a result, secondary filtering conditions that are subject to message and filter condition determination are limited. Therefore, even when the processing load for message filtering is higher than a certain value, the frequency of acquisition is high, and the importance level is high. For the secondary filter condition included in the history information list that can be estimated to be high, the condition can be quickly determined.

In addition, when the message analysis unit 22 matches the secondary filter included in the history information, the message analysis unit 22 assigns a filter name that matches the message and passes the message to the message processing unit 24.
Note that the message analysis unit 22 executes the filter condition determination function (low load and high load), and then transmits a message to the auxiliary analysis unit 31 of the analysis auxiliary device 300 regardless of the result of matching with the filter condition. Shall.

  The message processing unit 24 sorts the messages according to the matched secondary filter identifiers included in the received message, rearranges the messages by the message numbers, and passes them to the message display unit 23. Further, the message display unit 23 displays the received information to the monitor.

The load notification unit 25 passes the load status of the monitoring device 200 to the message analysis unit 22.
The history information transmission unit 26 transmits the history information received from the auxiliary analysis unit 31 of the analysis auxiliary function 301 included in the message analysis unit 22 and the analysis auxiliary device 300 to the history information reception unit 17 of the monitoring target device 100.

The auxiliary analysis unit 31 confirms the history information given to the message received from the message analysis unit 22 of the management function 201 of the monitoring device 200, and matches the message for the secondary filter condition not included in the history information list. It is determined whether or not to perform (out-list condition determination function).
Here, the auxiliary analysis unit 31 assigns an identifier of the secondary filter that matches the message when the condition of the secondary filter is met, and an identifier giving transmission function for sending the message to the message processing unit 24 of the management function 201 And an identifier transmission notification function for transmitting the filter identifier of the matched secondary filter and the identifier of the primary filter attached to the message to the history information transmission unit 26 of the management function 201.

  In the present embodiment, a configuration in which the monitoring target device 100 and the monitoring device 200 function on different computer devices is shown. However, these are provided in a single computer device, and the computer device It is good also as a structure for monitoring an operation state.

[Description of Operation of Embodiment]
Next, an outline of the operation of this embodiment will be described.
First, the message analysis unit 13 of the monitoring target device 100 determines whether or not the operation information (monitoring information and message) satisfies a preset first operation determination condition (primary filter condition) ( (First operation determination step), when a history information list in which the second operation determination condition is associated with the first operation determination condition suitable for the operation information is set, Then, history information corresponding to the identifier of the second operation determination condition is attached to the operation information, and the message transmission unit 14 transmits the operation information to the monitoring device (history information addition processing step).
Next, the management function main body 201 of the monitoring device detects a processing load value indicating a processing load value for the extraction processing in the monitoring device 200 (processing load detection step), and the detected processing load value is lower than a certain value. In this case, the message analysis unit 22 determines whether or not the operation information acquired from the monitoring target device matches each operation determination condition of the second operation determination condition (second operation determination step).
On the other hand, when the detected processing load value is higher than a predetermined constant value, the operation information is included in the history information list when the detected processing load value is higher than a predetermined constant value. It is determined whether or not the second operation determination condition is satisfied (high load operation determination step).
Next, the operation information suitable for the operation determination condition selected in the second operation determination step or the high load operation determination step is extracted (operation information extraction step).

  Here, the execution contents of the first operation determination step, history information addition processing step, processing load detection step, second operation determination step, high load operation determination step, and operation information extraction step are programmed. The computer may be configured to execute.

  Next, the operation of this embodiment will be described in detail.

First, the information acquisition unit 11 of the monitoring function main body 101 of the monitoring target device 100 collects monitoring information generated by the monitoring function main body 101 and passes it to the message generation unit 12.
Next, the message generation unit 12 generates a message based on the monitoring information and passes the generated message to the message analysis unit 13.

  The message analysis unit 13 determines whether or not the message passed from the message generation unit 12 matches (matches) the filter condition (primary filter condition) set in advance by the administrator, and there is a filter that matches. In this case, an identifier of a filter that matches the message is attached to the message and the message is passed to the history information adding unit 15.

  The history information adding unit 15 searches the history information list of the history information storage unit 16 based on the filter identifier of the primary filter condition given to the message, acquires the history information included in the history information list, and The history information is attached to the message and passed to the message transmission unit 14.

  The message transmission unit 14 transmits a message (including history information) to the message reception unit 21 of the monitoring device 200.

Here, the monitoring device 200 performs a filtering process for extracting a specific message for the message sent from the monitoring target device 100.
Hereinafter, the operation of the monitoring apparatus 200 will be described based on the flowchart of FIG.

First, the message receiver 21 of the monitoring device 200 receives a message from the message transmitter 14 (START).
Here, the management function main body unit 201 checks the load state of the monitoring device 22, generates load information indicating the load state, and notifies the message analysis unit 22 of the load information.
The management function main unit 201 may be configured to periodically monitor the load state of the resources related to the filtering process in the monitoring device 200 and calculate the load information.

Next, the message analysis unit 22 determines whether or not the monitoring device 200 is in a higher load state than the preset load state based on the load information sent from the load notification unit 25 (step S10). .
Here, when it is determined that the load is not high, it is checked whether or not the message matches all the secondary filter conditions (step S16: low load determination function).

Here, when there is a filter condition that matches the secondary filter condition (Y: Step S17), the message analysis unit 22 passes the message to the message processing unit 24 (Step S18).
As a result, the message is output and displayed on the message display unit 23.

The message analysis unit 22 passes the primary filter identifier and the secondary filter identifier assigned to the message to the history information transmission unit 26 as history information (step S19).
Thereby, since the new history information is transmitted from the history information transmitting unit 26 to the history information receiving unit 17, the history information list in the history information storage unit 16 is updated, and the history information (filter condition) in the history information list is updated. The accuracy of adaptation to the message can be improved.

Further, the message analysis unit 22 may be set to store and hold an identifier (history condition identifier) of a secondary filter condition adapted to the message (adapted condition identifier storage function).
Thereby, the message analysis part 22 can perform a message process rapidly based on the said log | history condition identifier at the time of a heavy load state.

  For example, when the secondary filter condition set in the management function main body 201 is changed, the history information transmitting unit 26 sends a command for requesting deletion from the history information list of the filter condition corresponding thereto. The information may be transmitted to the information reception unit 17 and the corresponding filter condition may be deleted from the history information list.

  On the other hand, when it is determined that the monitoring device 200 is in a high load state (Y: Step S10), the message analysis unit 22 checks whether history information is attached to the message (Step S11).

  Here, when history information is not given (N: step S11), the message analysis unit 22 transmits a message to the auxiliary analysis unit 31 of the analysis auxiliary device 300 (step S15: sends a message to the analysis auxiliary unit). hand over).

  On the other hand, when it is determined that the monitoring device 200 is in a high load state and history information is added to the message (Y: Step S11), the message analysis unit 22 sends the history information to the history information transmission unit 26 as history information. It is limited to the notified secondary filter condition, that is, it is checked whether or not the message matches (adapts) to the secondary filter condition registered in the history information list (step S12: high load determination function). .

Accordingly, the message analysis unit 22 checks the conformity only for the secondary filter (secondary filter condition included in the history information list) that has been conformed to the previously generated message. Message processing can be performed quickly while suppressing the processing load.
It can be said that the secondary filter condition that has been matched before is a filter condition that is more likely to be matched than a secondary filter condition that is not in the history information list even for a newly generated message.

  As a result of the high load determination, if the message does not meet the filter condition included in the history information list (N: Step S13), the message analysis unit 22 transmits this message to the analysis auxiliary device 300 (Step S15). ).

On the other hand, when the message matches the secondary filter included in the history information list (Y: Step S13), the message analysis unit 22 passes this message to the message processing unit 24 (Step S14).
Next, the message analysis unit 22 also transmits a message to the analysis auxiliary device 300 (auxiliary analysis unit 31) (step S15).

  Accordingly, the auxiliary analysis unit 31 determines whether or not the message matches the secondary filter condition not included in the history information list, instead of the message analysis unit 22.

Here, when the secondary filter condition is met, the auxiliary analysis unit 31 gives an identifier of the secondary filter condition that matches the message and passes the message to the message processing unit 24 of the management function 201.
The auxiliary analysis unit 31 passes the filter identifier of the matched secondary filter and the identifier of the primary filter attached to the message to the history information transmission unit 26 of the management function 201 as history information.

  As a result, a filter condition that matches the secondary filter condition not included in the history information list can be additionally registered as history information with respect to the existing history information list. It becomes possible to improve the conformity (possibility of matching) to the message.

  As described above, in the present embodiment, even when the monitoring device 200 is in a high load state, the auxiliary analysis unit 31 performs message filtering processing (message processing) instead of the message filtering processing. It is possible to effectively reduce such a load and improve the number of message processes per unit time when the load is high.

    The present invention can be applied to a monitoring device that monitors the operating status of other computers in a computer network and a message management system including such a monitoring device. In particular, the present invention can be effectively applied to a message management system that monitors the operation status of a plurality of computers in a large-scale computer network.

DESCRIPTION OF SYMBOLS 11 Information acquisition part 12 Message generation part 13 Message analysis part 14 Message transmission part 15 History information provision part 16 History information storage part 17 History information reception part 21 Message reception part 22 Message analysis part 23 Message display part 24 Message processing part 25 Load notification Unit 26 history information transmission unit 31 auxiliary analysis unit 100 monitoring target device 101 monitoring function main unit 200 monitoring device 201 management function main unit 300 analysis auxiliary device 301 analysis auxiliary function main unit

Claims (6)

An operation including a monitoring target device that generates operation information indicating its own operation state, and a monitoring device that acquires the operation information and performs an operation information extraction process that satisfies a preset extraction condition from the operation information. An information management system,
The device to be monitored is
A first motion determination unit that performs a conformity determination as to whether or not the motion information meets a preset first motion determination condition;
When the operation information that conforms to the first operation determination condition conforms to a second operation determination condition that is set in advance in the monitoring device, an identifier of the second operation determination condition is used as the first operation determination. A history information storage unit that stores the history information as an association history list;
History information that gives an identifier of the second motion determination condition to the motion information when the identifier of the second motion determination condition is associated with the first motion determination condition to which the motion information matches. A grant processing unit,
The monitoring device
A processing load detection unit that detects a processing load value indicating a value of a processing load related to the extraction processing in the monitoring device;
A condition storage unit for storing the second operation determination condition including a plurality of different operation determination conditions;
A second operation for determining whether or not the operation information acquired from the monitoring target device meets each operation determination condition of the second operation determination condition when the detected processing load value is lower than a certain value. A determination unit;
When the detected processing load value is higher than a preset constant value, the history information list includes an operation determination condition corresponding to an identifier of the second operation determination condition given to the operation information. A high load operation determination unit that determines whether or not the operation information conforms to an operation determination condition;
An operation information management system comprising: an extraction operation information output unit that outputs and displays operation information determined to match the second operation state determination condition or the selected operation determination condition. In the operation information management system according to claim 1,
The monitoring device
A history information transmission unit that transmits an identifier of the second operation determination condition of the operation determination condition suitable for the operation information among the operation determination conditions of the second operation determination condition to the history information storage unit;
The device to be monitored is
An operation information management system comprising: a history information list update unit for additionally registering an identifier of the second operation determination condition sent from the history information transmission unit in the history information list. In the operation information management system according to claim 1 or 2,
When the detected processing load value is higher than a predetermined constant value, the operation information to which the history information is not given is acquired from the monitoring device, and the second operation state determination condition is met from the operation information An operation information management system characterized in that an analysis auxiliary device for extracting operation information is provided in the monitoring device. In the operation information management system according to claim 2,
The analysis auxiliary device is
When the detected processing load value is higher than a predetermined constant value, the operation information to which the history information is not given is acquired from the monitoring device, and the second operation state determination condition is met from the operation information An analysis auxiliary device for extracting operation information is attached to the monitoring device,
The analysis auxiliary device is
An output operation information transmitting unit that transmits the extracted operation information to the extracted operation information output unit;
An operation information management system comprising: a history information notifying unit that notifies the history information transmitting unit of history information that is an identifier of the second operation determination condition to which the operation information is adapted. A monitoring target device that generates operation information indicating its own operation state; a monitoring device that acquires the operation information and performs an operation information extraction process that conforms to a second operation determination condition set in advance from the operation information; An operation information management system that outputs operation information extracted based on the extraction condition,
The monitored device is
It is determined whether or not the motion information conforms to a preset first motion determination condition,
When a history information list in which an identifier of the second operation determination condition is associated with the first operation determination condition that matches the operation information is set, the second operation is performed on the operation information. Giving an identifier of a determination condition and transmitting the operation information to the monitoring device,
The monitoring device
Detecting a processing load value indicating a processing load value for the extraction processing in the monitoring device;
When the detected processing load value is lower than a certain value, it is determined whether or not the operation information acquired from the monitoring target device meets each operation determination condition of the second operation determination condition;
When the detected processing load value is higher than a predetermined constant value, an identifier of the second operation determination condition given to the operation information is included in the second operation determination condition included in the history information list. Determine whether it fits,
An operation information management method, comprising: extracting operation information suitable for the second operation state determination condition or the selected operation determination condition. A monitoring target device that generates operation information indicating its own operation state; and a monitoring device that acquires the operation information and extracts operation information that conforms to a preset second operation determination condition from the operation information. An operation information management program for outputting the extracted operation information, comprising:
A first operation determination function for determining whether or not the operation information conforms to a preset first operation determination condition;
The second operation determination condition corresponding to the operation information when a history information list in which the identifier of the second operation determination condition is associated with the first operation determination condition suitable for the operation information is set. A history information adding function for assigning an identifier of
A processing load detection function for detecting a processing load value indicating a processing load value for the extraction processing in the monitoring device;
When the detected processing load value is lower than a certain value, a second determination is made as to whether or not the operation information acquired from the monitoring target device meets each operation determination condition of the second operation determination condition. Motion judgment function,
When the detected processing load value is higher than a predetermined constant value, an identifier of the second operation determination condition given to the operation information is included in the second operation determination condition included in the history information list. An operation judgment function at the time of high load that judges whether or not it conforms;
An operation information management program for causing a preset computer to execute an operation information extraction function for extracting operation information suitable for the second operation state determination condition or the selected operation determination condition.

Images