ANALYSIS METHOD, ANALYSIS APPARATUS AND COMPUTER-READABLE RECORDING MEDIUM HAVING STORED THEREIN ANALYSIS PROGRAM

• US 20150301866A1
• Filed: 03/25/2015
• Published: 10/22/2015
• Est. Priority Date: 04/18/2014
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: HOTTA, Yuuji
• Granted Patent: US 9,720,751 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 11/00 Error detection; Error correction; Monitoring error detection, correction or monitoring in information storage based on relative movement between record carrier and transducer G11B20/18; monitoring, i.e. supervising the progress of recording or reproducing G11B27/36; in static stores G11C29/00
• CPC Class Codes: G06F 11/3466 Performance evaluation by tracing or monitoring
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: H04L 41/5009 Determining service level performance parameters or violations of service level contracts, e.g. violations of agreed response time or mean time between failures [MTBF]

Abstract

Relating to services each including a plurality of processes having a plurality of hierarchies, service information is stored in which processes for each service are grouped in a predetermined hierarchy taking presence or absence of a common hierarchy into consideration. Then, based on log data and the service information relating to a plurality of services, a first decision process for deciding presence or absence of an abnormality relating to a process included in one or more services is performed. Further, a second decision process is performed for developing, where a process decided as an abnormal process is a grouped grouping process, the grouping process decided as an abnormal process to one or more processes in a lower hierarchy than the predetermined hierarchy based on the service information and deciding presence or absence of an abnormality relating to the one or more developed processes.

Claims

1. An analysis method, comprising:

storing, relating to services each including a plurality of processes having a plurality of hierarchies, service information in which processes for each service are grouped in a predetermined hierarchy taking presence or absence of a common hierarchy into consideration;

performing, based on log data and the service information relating to a plurality of services, a first decision process for deciding presence or absence of an abnormality relating to a process included in one or more services; and

performing a second decision process for developing, where a process decided as an abnormal process is a grouped grouping process, the grouping process decided as an abnormal process to one or more processes in a lower hierarchy than the predetermined hierarchy based on the service information and deciding presence or absence of an abnormality relating to the one or more developed processes.

2. The analysis method according to claim 1, wherein the service information includes, for each service, first information with which a grouping process included in the service is associated;

and

in the first information, a first grouping process included in a first service and a second grouping process which is included in a second service and in which one or more but less than all of the plurality of grouped processes is common to that of the first grouping process are stored distinguishably from each other.

3. The analysis method according to claim 1, wherein the service information includes second information indicating a process included in the grouping process for each grouped hierarchy;

and

in the first decision process, presence or absence of an abnormality is decided relating to the grouping process from among the processes included in the one or more services after development to one or more processes in the lower hierarchy than the predetermined hierarchy is performed based on the second information.

4. The analysis method according to claim 1, wherein the service information includes second information indicating a process included in the grouping process for each grouped hierarchy;

a processing result of the second decision process is stored; and

the predetermined hierarchy is varied into a different hierarchy based on the stored processing result.

5. The analysis method according to claim 1, wherein the service information includes second information indicating a process included in the grouping process for each grouped hierarchy;

a processing result of the second decision process is stored; and

a predetermined grouping process is divided into a plurality of grouping processes based on the stored processing result.

6. The analysis method according to claim 1, wherein, in the second decision process, where the process decided as an abnormal process is a grouping process, the process decided as an abnormal process is developed stepwise to one or more processes in a lower hierarchy and then presence or absence of an abnormality is decided relating to the one or more developed processes, the stepwise development being performed until a result of the decision that the process decided as an abnormal process is not a grouping process any more is obtained.

7. The analysis method according to claim 1, wherein a time period interval within which both of a normal state and an abnormal state are not included at the same time in each service state is acquired based on the log data relating to the plurality of services;

and

in the first decision process, presence or absence of an abnormality is decided relating to the process included in one or more services executed within the acquired time period interval.

8. An analysis apparatus, comprising:

a storage unit that stores, relating to services including a plurality of processes having a plurality of hierarchies, service information in which processes for each service are grouped in a predetermined hierarchy taking presence or absence of a common hierarchy into consideration; and

a processor configured to;

perform, based on log data and the service information relating to a plurality of services, a first decision process for deciding presence or absence of an abnormality relating to a process included in one or more services; and

develop, where a process decided as an abnormal process is a grouped grouping process, the grouping process decided as an abnormal process to one or more processes in a lower hierarchy than the predetermined hierarchy based on the service information and decide presence or absence of an abnormality relating to the one or more developed processes.

9. The analysis apparatus according to claim 8, wherein the service information includes, for each service, first information with which a grouping process included in the service is associated;

and

the storage unit stores the first information in which a first grouping process included in a first service and a second grouping process which is included in a second service and in which one or more but less than all of the plurality of grouped processes is common to that of the first grouping process are set distinguishably from each other.

10. The analysis apparatus according to claim 8, wherein the service information includes second information indicating a process included in the grouping process for each grouped hierarchy;

and

the processor decides presence or absence of an abnormality relating to the grouping process from among the process included in the one or more services after development to one or more processes in the lower hierarchy than the predetermined hierarchy is performed based on the second information.

11. The analysis apparatus according to claim 8, wherein the service information includes second information indicating a process included in the grouping process for each grouped hierarchy;

the storage unit stores a processing result of the second decision process; and

the processor varies the predetermined hierarchy into a different hierarchy based on the stored processing result.

12. The analysis apparatus according to claim 8, wherein the service information includes second information indicating a process included in the grouping process for each grouped hierarchy;

the storage unit stores a processing result of the second decision process; and

the processor divides a predetermined grouping process into a plurality of grouping processes based on the stored processing result.

13. The analysis apparatus according to claim 8, wherein, where the process decided as an abnormal process is a grouping process, the processor develops the process decided as an abnormal process stepwise to one or more processes in a lower hierarchy and then decides presence or absence of an abnormality relating to the one or more developed processes, the processing performing the development until a result of the decision that the process decided as an abnormal process is not a grouping process any more is obtained.

14. A non-transitory computer-readable recording medium having stored therein an analysis program for causing a computer to execute a process, the process comprising:

storing, relating to services each including a plurality of processes having a plurality of hierarchies, service information in which processes for each service are grouped in a predetermined hierarchy taking presence or absence of a common hierarchy into consideration;

performing, based on log data and the service information relating to a plurality of services, a first decision process for deciding presence or absence of an abnormality relating to a process included in one or more services; and

performing a second decision process for developing, where a process decided as an abnormal process is a grouped grouping process, the grouping process decided as an abnormal process to one or more processes in a lower hierarchy than the predetermined hierarchy based on the service information and deciding presence or absence of an abnormality relating to the one or more developed processes.

15. The non-transitory computer-readable recording medium having stored therein an analysis program according to claim 14, wherein the service information includes, for each service, first information with which a grouping process included in the service is associated;

and

the analysis program causes a computer to execute;

storing a first grouping process included in a first service and a second grouping process which is included in a second service and in which one or more but less than all of the plurality of grouped processes is common to that of the first grouping process distinguishably from each other in the first information.

16. The non-transitory computer-readable recording medium having stored therein an analysis program according to claim 14, wherein the service information includes second information indicating a process included in the grouping process for each grouped hierarchy;

and

in the first decision process, presence or absence of an abnormality is decided relating to the grouping process from among the processes included in the one or more services after development to one or more processes in the lower hierarchy than the predetermined hierarchy is performed based on the second information.

17. The non-transitory computer-readable recording medium having stored therein an analysis program according to claim 14, wherein the service information includes second information indicating a process included in the grouping process for each grouped hierarchy;

the analysis program causes a computer to execute;

storing a processing result of the second decision process; and

varying the predetermined hierarchy into a different hierarchy based on the stored processing result.

18. The non-transitory computer-readable recording medium having stored therein an analysis program according to claim 14, wherein the service information includes second information indicating a process included in the grouping process for each grouped hierarchy;

the analysis program causes a computer to execute;

storing a processing result of the second decision process; and

dividing a predetermined grouping process into a plurality of grouping processes based on the stored processing result.

19. The non-transitory computer-readable recording medium having stored therein an analysis program according to claim 14, wherein, in the second decision process, where the process decided as an abnormal process is a grouping process, the process decided as an abnormal process in stages is developed stepwise to one or more processes in a lower hierarchy and then presence or absence of an abnormality is decided relating to the one or more developed processes, the stepwise development being performed until a result of the decision that the process decided as an abnormal process is not a grouping process any more is obtained.

20. The non-transitory computer-readable recording medium having stored therein an analysis program according to claim 14, wherein the analysis program causes a computer to execute a process for acquiring a time period interval within which both of a normal state and an abnormal state are not included at the same time in each service state based on the log data relating to the plurality of services;

and

in the first decision process, presence or absence of an abnormality is decided relating to the process included in one or more services executed within the acquired time period interval.