Computer product, method, and apparatus for analyzing computer system

Abstract

A system analyzing apparatus analyzes a processing state of a computer system that includes a plurality of types of unit processing. The system analyzing apparatus includes a selecting unit that selects a plurality of representative unit processing based on similarities between individual units of the unit processing; and a grouping unit that groups each unit processing based on similarity between the each unit processing and each of representative unit processing selected by the selecting unit.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a detailed functional block diagram of a transaction analyzing apparatus according to a first embodiment of the present invention;

FIG. 2 is an example of transaction information present in a transaction information storage unit in the transaction analyzing apparatus shown in FIG. 1;

FIGS. 3A and 3B are schematics for explaining a structure and elements of a transaction, and a symbolic description of the elements, included in the transaction information shown in FIG. 2;

FIG. 4 is an example of transaction information that includes symbolic descriptions in addition to the transaction information shown in FIG. 2;

FIG. 5 is an example of a set of elements present in a transaction-element dissimilarity storage unit in the transaction analyzing apparatus shown in FIG. 1;

FIG. 6 is a schematic for explaining dissimilarity between elements in transactions according to the first embodiment;

FIG. 7 is an example of calculation results of dissimilarity between elements according to the first embodiment;

FIG. 8 is a schematic for explaining transaction dissimilarity according to the first embodiment;

FIG. 9 is an example of calculation results of transaction dissimilarity to be stored in a transaction-dissimilarity storage unit in the transaction analyzing apparatus shown in FIG. 1;

FIG. 10 is an example of selected representative transactions according to the first embodiment;

FIG. 11 is an example of grouping derivative transactions according to the first embodiment;

FIG. 12 is an example of creating transaction groups according to the first embodiment;

FIG. 13 is a schematic for explaining a procedure of forming the transaction groups shown in FIG. 12;

FIG. 14 is a flowchart of a processing procedure of transaction summarizing performed by the transaction analyzing apparatus shown in FIG. 1;

FIG. 15 is a flowchart of a processing procedure of calculation of dissimilarity between transaction elements shown in FIG. 14;

FIG. 16 is a flowchart of a processing procedure of calculation of dissimilarity between transactions shown in FIG. 14;

FIG. 17 is a flowchart of processing procedure of transaction group creation shown in FIG. 14;

FIG. 18 is a flowchart of a processing procedure of displaying shown in FIG. 14;

FIG. 19 is examples of a summary display screen and a detail display screen on a display device of the transaction analyzing apparatus shown in FIG. 1;

FIG. 20 is a detailed functional block diagram of a transaction analyzing apparatus according to a second embodiment of the present invention;

FIGS. 21 to 23 are schematics for explaining monitoring processing performed by a new-transaction evaluating unit in the transaction analyzing apparatus shown in FIG. 20;

FIG. 24 is a flowchart of a processing procedure performed by the transaction analyzing apparatus shown in FIG. 20;

FIG. 25 is a flowchart of a processing procedure of registered-information reading shown in FIG. 24, when a new transaction is compared only with representative transactions;

FIG. 26 is a flowchart of a processing procedure of the registered-information reading, when a new transaction is compared with both representative transactions and derivative transactions;

FIG. 27 is a flowchart of a processing procedure of new-transaction information reading shown in FIG. 24;

FIG. 28 is a flowchart of a processing procedure of new transaction evaluation shown in FIG. 24, when a new transaction is compared only with representative transactions;

FIG. 29 is a flowchart of a processing procedure of the new transaction evaluation, when a new transaction is compared with both representative transactions and derivative transactions;

FIG. 30 is a flowchart of a processing procedure of monitoring information displaying shown in FIG. 24;

FIG. 31 is an example of graphs indicating criteria for representative transactions subjected to monitoring according to the second embodiment;

FIG. 32 is an example of a graph indicating reference ranges being changed in accordance with a time zone according to the second embodiment;

FIG. 33 a schematic for explaining an example of monitoring a representative transaction m1 subjected to monitoring according to the second embodiment;

FIG. 34 is a flowchart of a processing procedure of monitoring representative transactions subjected to monitoring according to the second embodiment;

FIG. 35 is a flowchart of processing procedure of selection of representative transaction subjected to monitoring shown in FIG. 34;

FIG. 36 is a functional block diagram of a computer that executes a transaction-analyzing computer program according to the first embodiment.

Claims

1. A computer-readable recording medium that stores therein a computer program that causes a computer to analyze a processing state of a computer system that includes a plurality of types of unit processing, wherein the computer program causes the computer to execute: selecting a plurality of representative unit processing based on similarities between individual units of the unit processing; andgrouping each unit processing based on similarity between the each unit processing and each of representative unit processing selected at the selecting.

2. The computer-readable recording medium according to claim 1, wherein the similarity is based on a weighted edit distance between symbolic descriptions each of which symbolically describes elements that constitute a unit processing, and an appearance frequency of each unit processing.

3. The computer-readable recording medium according to claim 2, wherein the similarity is based on the weighted edit distance between symbolic descriptions of a pair of unit processing, and an appearance frequency of one of the pair.

4. The computer-readable recording medium according to claim 2, wherein the weighted edit distance between symbolic descriptions is based on a similarity between respective elements included in respective units of unit processing.

5. The computer-readable recording medium according to claim 4, wherein the computer system is a computer system for business, and the unit processing is a transaction,elements that constitute the transaction include a protocol-type that indicates protocol information, andthe similarity between the elements is based on an edit distance between the elements each treated as a character-string, string lengths, and protocol types.

6. The computer-readable recording medium according to claim 5, wherein the computer system for business is a web service system that provides web-based services, andthe protocol information is information related to a protocol belongs to a layer related to web-based service in layers included in a transaction.

7. The computer-readable recording medium according to claim 6, wherein the layers are a web server layer, an application server layer, and a database server layer.

8. The computer-readable recording medium according to claim 1, wherein the selecting includes selecting a group of representative unit processing so as to maximize a total sum of similarities in a unit processing set between each unit processing and a most similar representative unit processing to the each unit processing.

9. The computer-readable recording medium according to claim 1, wherein the computer program further causes the computer to execute: displaying a grouping result obtained at the grouping, whereinthe displaying includes displaying a summary that presents-information related to representative unit processing, and displaying details that present information related to other unit processing in addition to representative unit processing.

10. The computer-readable recording medium according to claim 1, wherein the computer program further causes the computer to execute monitoring a processing state of the computer system using the representative unit processing selected at the selecting.

11. The computer-readable recording medium according to claim 10, wherein the monitoring includes monitoring the processing state of the computer system based on similarity between new unit processing newly processed by the computer system and each representative unit processing selected at the selecting.

12. The computer-readable recording medium according to claim 10, wherein the monitoring includes monitoring the processing state of the computer system based on a grouping result obtained at the grouping.

13. The computer-readable recording medium according to claim 12, wherein the monitoring includes monitoring the processing state of the computer system based on an occurrence frequency of unit processing that belong to none of unit processing groups obtained at the grouping.

14. The computer-readable recording medium according to claim 13, wherein the monitoring includes monitoring the processing state of the computer system based on a ratio between the occurrence frequency of unit processing that belongs to none of the unit processing groups obtained at the grouping, and an occurrence frequency of unit processing that belongs to any one of the unit processing groups.

15. The computer-readable recording medium according to claim 10, wherein the monitoring includes issuing an alert, if an occurrence frequency per unit time of a representative unit processing that is within a reference range during a selecting period departs from the reference range during a monitoring period.

16. The computer-readable recording medium according to claim 15, wherein the reference range varies in accordance with a time zone.

17. The computer-readable recording medium according to claim 10, wherein the selecting is re-executed every time when number of new unit processing newly processed by the computer system reaches a certain number, andthe monitoring includes monitoring a processing state of the computer system based on representative unit processing newly selected at re-executed selecting if the selecting is re-executed.

18. A method of analyzing a processing state of a computer system that includes a plurality of types of unit processing, the method comprising: selecting a plurality of representative unit processing based on similarities between individual units of the unit processing; andgrouping each unit processing based on similarity between the each unit processing and each of representative unit processing selected at the selecting.

19. A system analyzing apparatus that analyzes a processing state of a computer system that includes a plurality of types of unit processing, the system analyzing apparatus comprising: a selecting unit that selects a plurality of representative unit processing based on similarities between individual units of the unit processing; anda grouping unit that groups each unit processing based on similarity between the each unit processing and each of representative unit processing selected by the selecting unit.