Method for controlling managing computer, medium for storing control program, and managing computer

Abstract

A managing computer is arranged by an acquiring device for acquiring log information and event information from any of plural computers connected via a network to each other, the log information indicating as to whether or not an execution of an operation process is carried out under normal condition, and the event information indicating concisely as to whether or not an execution of an operation process is carried out under normal condition; a data controller for storing into a database, operation definition information used to define a schedule of process operations executed in the plural computers in relation to the log information and the event information acquired by the acquiring device; and a display device for displaying the operation definition information in relation to event information related to a process operation defined by the operation definition information with reference to the information stored in the database. Each of the log information and the event information owns a tag indicative of said log information and a tag representative of said event information. This managing computer may have a definition device for forming a schedule of process operations which are commonly executed in all of the plural computers; and a distributor for distributing the process operation schedule formed by the definition device to all of the plural computers. The display device displays on the same display screen, the operation definition information and the event information in relation to predetermined log information among the log information. The acquiring device acquires a preselected sort of log information at predetermined timing. The acquiring device acquires information other than the preselected sort of log information in response to a request. Thus, an integrated management screen can be provided to a user.

Description

BACKGROUND OF THE INVENTION

[0001] The present invention is related to a managing computer connected to a network to which a plurality of computers are connected, for managing these computers. More specifically, the present invention is directed to a technique capable of managing administrate operations executed in the respective computers in a batch mode by the managing computer.

[0002] Managing computers for managing administrate operations are described in U.S. Pat. No. 5,169,655 entitled to Weng et al., and U.S. Pat. No. 5,642,508 entitled to Miyazawa. The administrate operations involve a job execution process; and a process executed when a specific event occurs.

[0003] In a large-scaled computer system where a plurality of administrate operations may be combined with each other to be executed, since definitions as to the respective administrate operations must be separately performed and also execution results must be independently confirmed, the management for the total computer system can be hardly carried out.

[0004] More specifically, in a large-scaled computer system, there are certain possibilities that a plurality of administrate operations which are executed in combination with each other are executed over a plurality of computers. Under such a circumstance, in order to realize a total management as a computer system, processed contents as to all of administrate operations may be preferably defined and execution results thereof may be preferably confirmed by using a single computer, namely a single managing computer.

[0005] However, in the case that the definitions of the processed contents and the confirmations of the execution results as to all of the administrate operations may be performed by one managing computer, since the managing computer must be communicated with the respective computers, a specific care should be paid to the network traffics.

SUMMARY OF THE INVENTION

[0006] Therefore, an object of the present invention is to realize such a computer system to which a plurality of computers are connected. In this computer system, a managing computer for managing these computers can manage administrate operations executed in the respective computers are managed in a batch mode.

[0007] Furthermore, another object of the present invention is to avoid such that an extra load is given to a network connecting a managing computer group, which is caused by an operation managing computer.

[0008] To achieve the above-described object, there is provided a managing computer comprising:

[0009] an acquiring device for acquiring log information and event information from any of plural computers connected via a network to each other, said log information indicating as to whether or not an execution of an operation process is carried out under normal condition, and said event information indicating concisely as to whether or not an execution of an operation process is carried out under normal condition;

[0010] a data controller for storing into a database, operation definition information used to define a schedule of process operations executed in said plural computers in relation to said log information and said event information acquired by said acquiring device; and

[0011] a display device for displaying said operation definition information in relation to event information related to a process operation defined by said operation definition information with reference to the information stored in said database. It is possible to provide a managing computer, according to a first aspect of the present invention, is featured by such a managing computer connected to a network to which a plurality of computers are connected, for managing these computers, comprising:

[0012] acquisition means for acquiring log information indicative of an execution result of an administrate operation executed in each of the computers and also event information indicative of an event occurred in an execution stage of the administrate operation from each of said computers;

[0013] storage means for into a database, operation definition information in which a schedule of the administrate operations executed in the respective computers, and also the log information and the event information acquired by said acquisition means; and

[0014] display means for displaying the operation definition information related to the respective computers in relation to log information and event information of an administrate operation defined by the operation definition information with reference to the information stored into the database by the storage means.

[0015] Also, a managing computer, according to a second aspect of the present invention, is featured by such a managing computer connected to a network to which a plurality of computers are connected, for managing these computers, comprising:

[0016] acquisition means for acquiring log information indicative of an execution result of an administrate operation executed in each of the computers and also event information indicative of an event occurred in an execution stage of the administrate operation from each of said computers;

[0017] storage means for into a database, operation definition information in which a schedule of the administrate operations executed in the respective computers, and also the log information and the event information acquired by said acquisition means; and

[0018] display means for displaying both a region for describing a list-of administrate operations defined by the operation definition information related to each of the computers and also another region for describing log information of said computer on the same screen with reference to the information stored into the database by the storage means. It is possible to display relative information between an event and event definition information together with either of them.

[0019] Also, a managing computer, according to a third aspect of the present invention, is featured by such a managing computer connected to a network to which a plurality of computers are connected, for managing these computers, comprising:

[0020] definition means for forming in a batch mode both a schedule of each of administrate operations and operation definition information in which a computer which should execute each of the administrate operations is defined;

[0021] distribution means for distributing the operations definition information;

[0022] acquisition means for acquiring the operation definition information individually formed by the computers from the respective computers and operation definition information in which a portion of the operation definition information distributed by the distribution means and related to the own computer is expanded by the computer from the distributed operation definition information, and also for acquiring log information indicative of an execution result of an administrate operation executed in each of the computers and also event information indicative of an event occurred in an execution stage of the administrate operation from each of said computers;

[0023] storage means for into a database, the operation definition information acquired by the acquisition means, and also the log information and the event information acquired by the acquisition means; and

[0024] display means for displaying the operation definition information related to the respective computers in relation to log information and event information of an administrate operation defined by the operation definition information with reference to the information stored into the database by the storage means.

[0025] It should be understood that each of the computers managed by the managing computer according to the third aspect many expand the operation definition information of a portion related to the own computer from the operation definition information distributed from the managing computer, and also many convert both the log information and the event information of the administrate operation executed by the own computer into a predetermined common format.

[0026] Also, in the third aspect, the above-explained definition means may define such a computer which should execute the administrate operation by employing predetermined information for indicating all of the computers as to the administrate operations to be executed by all of the computers.

[0027] Also, in any of the first aspect to the third aspect, the above-described acquisition means may acquire at regular timing, or preselected timing a predetermined sort of log information among the log information of the respective computers, and further may acquire other sorts of log information when these sorts of log information is required to be displayed by the display means.

[0028] Also, in any of the first aspect to the third aspect, the display means may immediately display either all or a portion of the event information acquired by the acquisition means after being acquired.

[0029] It should also be understood in this specification that a “computer” implies not only an apparatus for merely performing a calculation, but also an apparatus for executing a communication process and further various sorts of information process.

BRIEF DESCRIPTION OF THE DRAWINGS

[0030] For a more better understanding of the present invention, reference is made of a detailed description to be read in conjunction with the accompanying drawings; in which:

[0031] FIG. 1 schematically shows an overall structural diagram of a computer system according to an embodiment of the present invention;

[0032] FIG. 2 is an explanatory diagram for explaining a system arrangement used to form by a managing computer in operation definition information for defining schedules of administrate operations executed by computers;

[0033] FIG. 3 is an explanatory diagram for explaining a system arrangement used to manage by the managing computer in both log information of administrate operations and event information, executed by the computers;

[0034] FIG. 4 schematically represents a hardware structural diagram of the managing computer and the computers;

[0035] FIG. 5 explanatorily indicates a sequential operation for defining/distributing in a batch mode the operation definition information in the system arrangement of FIG. 1, and another sequential operation for acquiring/managing in a batch mode the event information and the log information in the system arrangements of FIG. 3;

[0036] FIG. 6 is an explanatory diagram for showing an example of the operation definition information defined in a batch mode by the managing computer;

[0037] FIG. 7A and FIG. 7B are explanatory diagrams for indicating an example of the operation definition information of FIG. 6, which has been expanded;

[0038] FIG. 8 is an explanatory diagram for representing an example of an integrated management screen displayed in the managing computer;

[0039] FIGS. 9A and 9B are explanatory diagrams for showing examples of the event information displayed in the managing computer;

[0040] FIGS. 10A to 10D are explanatory diagrams for representing examples of structures of various sorts of tables on a database;

[0041] FIG. 11 is a flow chart for describing a process operation after a job is ended under abnormal state;

[0042] FIG. 12 is a diagram for indicating a definition of a process operation after the job is ended under abnormal state; and

[0043] FIG. 13 is a flow chart for explaining a process operation by the managing computer which receives a specific event.

DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0044] Referring now to drawings, embodiment modes of the present invention will be described.

[0045] FIG. 1 schematically indicates an entire arrangement of a computer system according to an embodiment of the present invention. In this drawing, reference numeral 401 indicates a managing computer; reference numerals 402 to 407 computers which constitute subjects managed by the managing computer; and reference numerals 408 to 413 show networks.

[0046] In the computer system according to this embodiment, the managing computer 401 can form in a batch mode operation definition information used to define schedules of administrate operations executed in the computers 402 to 407, and furthermore the managing computer 401 can manage in a batch mode both log information indicative of execution results obtained from the computers 402 to 407, and event information indicative of events occurred during execution stage.

[0047] As a result, since the managing computer 401 can save the operation definition information, the log information, and the event information in a database form, this managing computer 401 may refer to the above-described information, if necessary, and also may display various items related to the above-explained information.

[0048] FIG. 2 schematically represents a system arrangement used to form by the managing computer 401, the operation definition information which defines the schedules of the administrate operations executed by the computers 402 to 407. It should be understood that although FIG. 2 represents only one computer 402 and the managing computer 401 of FIG. 1, other computers 403 to 407 may be similarly displayed.

[0049] As indicated in FIG. 2, the managing computer 401 is arranged by a managing application unit 101, a definition information managing unit 102, and a database 103.

[0050] The managing application unit 101 contains a definition unit 104 and an integrated management screen display unit 105. The batched definition unit 104 forms operation definition information used to define a schedule of administrate operations executed by the computers 402 to 407. The integrated management screen display unit 105 displays an integrated management screen (will be discussed later) and so on. The definition information managing unit 102 contains a definition information distributing/acquiring unit 106 for distributing the operation definition information to the computers 402 to 407, and for acquiring the operation definition information from the computers 402 to 407. This definition information managing unit 102 stores the operation definition information into the database 103, and retrieves/referring to the operation definition information stored in the database 103.

[0051] As indicated in FIG. 2, each of the computers 402 to 407 is arranged by employing an operation execution unit and an integrated management agent 113. This operation execution unit contains a job execution control unit 110, a power supply control unit 111, a print execution control unit 112 and the like, which execute the administrate operation defined by the operation definition information.

[0052] The integrated management agent 113 contains a definition information expanding unit 114 and a definition information notifying unit 115. The definition information expanding unit 114 expands operation definition information of a portion related to the own computer from the operation definition information distributed from the managing computer 401. The definition information notifying unit 115 notifies to the managing computer 401, the operation definition information related to the own computer and involving also the operation definition information individually formed by the own computer.

[0053] FIG. 3 represents a system arrangement in which both log information and event information of administrate operations executed by the computers 402 to 407 are managed in a batch mode by the managing computer 401. Although FIG. 3 shows only the managing computer 401 and one computer 402 of FIG. 1, other computers 403 to 407 are similarly applied to this computer 402.

[0054] As indicated in FIG. 3, the managing computer 401 is arranged by employing a managing application unit 101, an event/log managing unit 201, and a database 103.

[0055] The managing application unit 101 contains the integrated management screen display unit 105 for displaying the integrated management screen (will be explained later) and so on. The event/log managing unit 201 contains the event/log acquiring unit 202 for acquiring the event information and the log information from the computers 402 to 407, and retrieves/refers to the event information and the log information, which are stored in the database 103. Also, the event/log managing unit 201 stores into the database 103 and outputs to the integrated management screen display unit 105 as to event information which should be notified in real time to an operation manager and so on.

[0056] As indicated in FIG. 3, each of the computers 402 to 407 is arranged by employing an operation execution unit and an integrated management agent 113. This operation execution unit contains a job execution control unit 110, a power supply control unit 111, a print execution control unit 112 and the like, which execute the administrate operation defined by the operation definition information.

[0057] The integrated management agent 113 contains a normalizing unit 210 and an event/log notifying unit 211. The normalizing unit 210 converts both log information and event information of administrate operation executed by the own computer into a predetermined common format. The event/log notifying unit 211 notifies the normalized log information and the normalized event information to the managing computer 401.

[0058] FIG. 4 schematically indicates a hardware structure of the managing computer 401 and the computers 402 to 407.

[0059] As indicated in FIG. 4, each of the computers is arranged by employing a central processing unit 301, a main storage apparatus 302, a network control apparatus 305, a disk control apparatus 307, and a display control apparatus 309. The network control apparatus 305 controls input/output of data between this network control apparatus 305 and a network such as a communication line 303 and a local area network 304. The disk control apparatus 307 controls a disk apparatus 306 and also input/output thereof. The display control apparatus 309 controls a display apparatus 308 and also input/output thereof.

[0060] Among the structural blocks of FIG. 2 and FIG. 3, the database 103 is realized on the disk apparatus 306. Other structural blocks are realized in such a way that a program stored in the disk apparatus 306 is loaded by the central processing unit 301 on the main storage apparatus 302. It should be noted that this program may be recorded on, for instance, a recording medium such as a CD-ROM, and then may be read into a driver (not shown) to be stored into the disk apparatus 306.

[0061] Referring now to FIG. 5, a description will be made of a sequential operation for defining and distributing the operation definition information in the system arrangement of FIG. 2.

[0062] As indicated in FIG. 5, in the managing computer 401, the definition information managing unit 102 stores into the database 103, the operation definition information defined by the batched definition unit 104 contained in the managing application unit 101 (step 601). The operation definition information stored in the database 103 is distributed to the computers 402 to 407 at preselected timing by the definition information distributing/acquiring unit 106 contained in the definition information managing unit 102 (step 602).

[0063] In the computers 402 to 407 to which the operation definition information is distributed, the definition information expanding unit 114 owned by the integrated management agent 113 expands operation definition information of a portion related to the own computer from the distributed operation definition information. The definition information expanding unit 114 transfers the expanded operation information to the operation execution unit such as the job execution control unit 110, the power supply control unit 111, and the print execution control unit 112 (step 603). The operation execution unit executes the administrate operation defined by the respective transferred operation definition information (step 604).

[0064] On the other hand, in the managing computer 401, the definition information distributing/acquiring unit 106 of the definition information managing unit 102 acquires from the computers 402 to 407, the operation definition information related to the computers 402 to 407 and also containing the operation definition information individually formed in the computers 402 to 407 (step 605). Subsequently, the definition information managing unit 102 stores the acquired operation definition information into the database 103 (step 606).

[0065] In the case that the integrated screen display unit 105 owned by the managing application unit 101 displays an integrated management screen (will be explained later) in response to a reference request issued from an operation manager and the like, the operation definition information stored into the database 103 in this manner will be retrieved/referred by the definition information managing unit 102.

[0066] It should be understood that the operation definition information may be acquired in such a way that the definition information distributing/acquiring unit 106 contained in the definition information managing unit 102 in the managing computer 401 periodically issues a command to the computers 402 to 407. Alternatively, the acquisition of the operation definition information may be realized by such that the definition information notifying unit 115 owned by the integrated management agent 113 in the computers 402 to 407 initiatively notifies the operation definition information to the managing computer 401 at preselected timing.

[0067] FIG. 6 shows an example of operation definition information which is defined by the managing computer 401. In this drawing, reference numeral 701 shows operation definition information.

[0068] In a definition of the operation definition information 701, a “definition subject 710” corresponds to a portion for defining a computer to be defined. The definition subject 710 may designate a group constituted by a plurality of computers, and a single computer. As represented in FIG. 6, it should be understood that when predetermined information (in this case, “default”) is designated in “definition subject 710”, this information implies that all of the computers are the definition subjects.

[0069] A “power supply control (711)” corresponds to a portion used to define an execution schedule of a power supply turning ON/OFF process of a computer to be defined, and a turning OFF method. A “job execution control (712)” corresponds to a portion used to define a job net on a computer to be defined, and a job on the job net. In the example of FIG. 6, a “job net A” defines that after an execution of a “job A1” has been completed, a “job A21” and a “job A22” are executed in a parallel manner, and then when the executions of both these jobs A21 and A22 are completed, a “job A3” is executed.

[0070] As previously explained, since the operation manager and the like designate such a computer for executing the schedule of the respective administrate operations and also the respective administrate operations in the managing computer 401, the operation definition information can be formed in a batch manner, on which the schedule of the administrate operation to be executed by the computer is defined.

[0071] FIG. 7A and FIG. 7B show an example of the operation definition information 701 of FIG. 6 which is expanded by the computer. In FIG. 7A and FIG. 7B, there are shown operation definition information 801 to 802 which have been expanded in the computers 402 to 407 of FIG. 2. Each of the above-described operation definition information 801 and 802 is transferred to the power supply control unit 111 and the job execution control unit 110.

[0072] Next, a sequential operation for acquiring and for managing in a batch mode the event information and the log information in the system arrangement of FIG. 3 will now be described with reference to FIG. 5.

[0073] As indicated in FIG. 5, in such a case that either the event information or the log information notified from the administrate operation unit is equal to a preselected sort of information which should be notified to the managing computer 401, the normalizing unit 210 owned by the integrated management agent 113 in each of the computers 402 to 407 converts this event, or log information into a common format to which a discrimination of event/log information is added. Then, the converted common format is notified by the event/log notifying unit 211 to the managing computer 401 (step 610).

[0074] In the managing computer 401 to which either the event information or the log information is notified, the event/log acquiring unit 202 owned by the event/log managing unit 201 stores the notified event information, or the notified log information into the database 103 (step 611). The log information is related to an abnormal state occurred during processing operation and includes information related to an abnormal state occurred during processing operation, whereas the event information is such information which is more important and concise than the former and necessary to inform to the manager computer in real time as to an urgent abnormal event occurred in the operation stage to be cared for by an operator. As a result, in the case that the event information is notified, it is preferable to immediately display this event information on the display apparatus 308 by the integrated management screen display unit 105 owned by the managing application unit 101 (step 612). It should also be noted that information may be discriminated as either log information or event information based upon discrimination contained in this information. As another embodiment, this information may be discriminated as either log information or even information based upon the path through which this information is transferred.

[0075] As explained above, in the case that the integrated management screen display unit 105 owned by the managing application unit 101 displays an integrated management screen (will be explained later) in response to a reference request sent from the operation manager, both the event information and the log information stored in the database 103 are retrieved/referred by the definition information managing unit 102.

[0076] The notifications of the event information and the log information may be preferably realized as to such event information with a high real time characteristic (in particular, event information indicative of failure) as follows. In the computers 402 to 407, the event/log notifying unit 211 owned by the integrated management agent 113 initiatively notifies the event information to the managing computer 401. As to the notification of the log information, in the managing computer 401, the event/log acquiring unit 202 owned by the event/log managing unit 201 may be realized by regularly issuing a command to the computers 402 to 407. Alternatively, the notification of the log information may be realized by that in the computers 402 to 407, the event/log notifying unit 211 owned by the integrated management agent 113 initiatively notifies the log information to the managing computer 401 at preselected timing.

[0077] Subsequently, referring now to FIG. 8, a description will be made of one example of an integrated management screen which is displayed by the integrated management screen display unit 103 owned by the managing application unit 101 in the managing computer 401.

[0078] As previously explained, since the operation definition information, the event information, and the log information are stored in the database 103 in the managing computer 401, the operation manager and the like may grasp the operations conditions of the computer system by utilizing the above-explained information. In other words, within the managing computer 401, the integrated management screen display unit 105 owned by the managing application unit 101 causes the definition information managing unit 102 to retrieve/refer to such information which is required by the operation manager to refer to. Then, this integrated management screen display unit 105 forms as integrated management screen by using the retrieved/referred information, and displays the formed integrated management screen on the display apparatus 308. As a result, the operation manager can grasp the operation condition of the computer system by observing the integrated management screen displayed on the display apparatus 308.

[0079] In FIG. 8, a first screen 501 is an integrated management screen used to confirm computers managed by the managing computer 401 and also to confirm a group of these computers. In this example, four sets of computers A to D are indicated. The respective computers A to D are displayed as icons. For example, in the first screen 501, the operation manager double-clicks “computer A (502)” by using a mouse, so that the first screen 501 can be transferred to a second screen 503.

[0080] Also, in FIG. 8, the second screen 503 is an integrated management screen used to confirm an operation condition of “computer A (502)”. With respect to the “computer A (502)”, a present job execution condition (504), a list (505) of a job net whose execution is defined on the “computer A”, and a list (506) of log information corresponding to a past operation history are displayed in a message form on this second screen 503. For example, when the operation manager wants to confirm an operation condition related to “job net A” on the second screen 503, the operation manager double-clicks a column related to “job net A” listed in the job net list 505 by using the mouse, so that the second screen 503 can be transferred to a third screen 507.

[0081] Also, in FIG. 8, the third screen 507 is an integrated management screen related to “job net A” on “computer A”. This integrated management screen indicates such operation definition information on which a series of administrate operations are defined as to “computer A”, i.e., “turning ON of power supply (509)”, “execution of job net A (510)”, and “printing of execution result (511)”.

[0082] It should be noted that these administrate operations 509 to 511 are displayed as icons. Since a display mode of each of these icons is changed (for instance, color and shape are changed), various sorts of conditions may be displayed such as “not yet executed”, “under execution”, “execution is ended under normal state”, and “execution is ended under abnormal state”. In this case, when the display modes of the respective icons are changed by the integrated management screen display unit 105, the latest event information of the corresponding administrate operations (509 to 511) is preferably acquired by the event/log acquiring unit 202 owned by the event/log managing unit 201.

[0083] For example, when “job net A (501)” is double-clicked by using the mouse by the operation manager, the third screen 507 can be transferred to a sixth screen 514.

[0084] Also, in FIG. 8, a fifth screen 512 corresponds to an integrated management screen used to confirm the operation definition information displayed on the third screen (507) in a calendar format. For example, since the operation manager selects menu of “calendar display” (not shown) on the third screen 507, the third screen 507 can be transferred to the fifth screen 512. In this example, this fifth screen 512 displays that the job seen on the third screen is executed on a date 513 of a hatched portion.

[0085] Also, in FIG. 8, a sixth screen 514 is a detailed integrated management screen related to “job net A” on “computer A”. This sixth screen 514 defines such that as to “job net A”, after an execution of “job A1 (515)” is completed, both “job A21 (516)” and “job A22 (517)” are executed in a parallel manner, and when the executions of both “job A21 (516)” and “job A22 (517)” are completed, “job A3 (518)” is executed.

[0086] It should also be noted that these jobs are displayed as icons. Since a display mode of each of these icons is changed (for instance, color is changed), various sorts of conditions may be displayed such as “not yet executed”, “under execution”, “execution is ended under normal state”, and “execution is ended under abnormal state”. In this case, when the display modes of the respective icons are changed by the integrated management screen display unit 105, the latest event information of the corresponding administrate operations (509 to 511) is preferably acquired by the event/log acquiring unit 202 owned by the event/log managing unit 201.

[0087] Also, in FIG. 8, a fourth screen 508 corresponds to an integrated management screen used to confirm a log with respect to each of job nets. For instance, since the operation manager double-clicks a list (506) of the log information on the second screen 503, the second screen 503 can be transferred to the fourth screen 508. Alternatively, for example, while the operation manager designates a column related to “job net A” within the job list 505 by clicking this column by using the mouse, this operation manager selects menu of “log display” (not shown). As a result, the second screen 503 may be transferred to another screen (not shown) on which only log information of “job net A” is displayed.

[0088] It should be understood that when the operation manager selects, for example, the corresponding menu within any of the second screen 504 to the sixth screen 514, the present screen may be transferred to other screens involving such not-shown screens (event information display screen, statistical display screen, operation definition information updating screen etc.). It will be possible to click a certain message shown in screen 508 to additionally display the window 514 or 507 as indicated with arrows.

[0089] As previously explained, in accordance with this embodiment, in the managing computer 401, the operation definition information related to the respective computers is displayed in connection with both the log information and the event information of the administrate operations defined by this operation definition information. As a consequence the operation manager can grasp the operation conditions of the computer system, and furthermore can readily reflect the grasped operation conditions onto a further plan of the operation schedule.

[0090] As previously described, after the event information is notified, the managing computer 401 preferably and immediately displays this notified event information on the display apparatus 308. At this time, a screen displayed in the managing computer 401 is represented in, for instance, FIG. 9A.

[0091] FIG. 9A represents an example of a screen on which event information of a computer A is displayed as a message among the notified event information. In this drawing, the message is constructed of an importance degree 901 of the event information, day/time 902 to 903 when the event is notified, a computer 904 of a notification source, and a message main body 905.

[0092] The managing computer 401 may display all of the notified event information as a message. Alternatively, as indicated in FIG. 9B, the managing computer 401 may display only pre-designated sorts of event information. As a pre-designated basis, the following items may be conceived, e.g., an importance degree; a range for a date and a time instant; a computer of a notification source; a sort of administrate operation; and a pattern of a character string contained in event information. The operation manager may designate a sort of event information displayed as a message by either the managing computer 401 or the respective computers 402 to 407.

[0093] Then, in the managing computer 401, the event/log managing unit 201 judges as to whether or not the notified event information is displayed as the message. The event/log managing unit 201 immediately notifies to the integrated management screen display unit 105 owned by the managing application unit 101, such event information which is judged to be displayed as a message. Then, the integrated management screen display unit 105 displays this judged event information. Therefore, for instance, as represented in FIG. 9, only such event information indicative of a failure may be displayed as a message. It should be understood that event/log managing unit 201 stores the notified event information into the database 103 irrespective of such a judgment result as to whether or not the notified event information is displayed as the message.

[0094] FIG. 10A and FIG. 10B represent one example of structures of various sorts of tables on the database 103. In the drawings, reference numeral 1001 shows an event/log table, and reference numeral 1002 indicates an operation definition table.

[0095] The event/log table 1001 is such a table used to store thereinto the events and the log information acquired from the computer by the managing computer 401 in a time sequence. A single record is arranged by “identifier (1010)” “computer name (1011)”, “time (1012)”, “event/log sort (1013)”, “identifier (1014)”, and “detailed information (1015)”. The identifier 1010 is for the event information and the log information. The computer name 1011 is a name of a computer for notifying this information. The time 1012 is time when this information is notified. The sort 1013 is the sort of this information. The identifier 1014 is an identifier of operation definition information on which administrate operation where this information is produced is defined. In the computer, the information 1010 to 1014 other than the detailed information 1015 is normalized as the common format commonly used to all of the event information and the log information by the normalizing unit 210 owned by the integrated management agent 113.

[0096] As indicated in FIG. 10B to FIG. 10D, an operation definition table 1002 is constituted by a common table 1003 arranged by an identifier 1016 of operation definition information, a name (1017) of a computer to be defined, and a sort (1018) of operation definition information; and also operation definition detailed tables 1004 to 1005 corresponding to the respective sorts (1018) of the operation definition information.

[0097] The operation definition detailed table 1004 related to the power supply control is arranged by, for example, an identifier (1019) of operation definition information; a power supply initiation date (1020); a power supply initiation time (1021); and a power supply turn-OFF date (1022), and also a power supply turn-OFF time (1023). The operation definition detailed table 1005 related to the job net is arranged by, for instance, an identifier (1024) of operation definition information; a name (1025) of a job net; a job net initiation date (1026); a job net initiation time (1027); and a structural job (1028).

[0098] In the managing computer 401, both the definition information managing unit 102 and the event/log managing unit 201 retrieve the tables 1001 to 1004 shown in FIG. 10A to FIG. 10D based on a language of, for instance, SQL. As a result, the integrated management screen display unit 105 owned by the managing application unit 101 can display such a screen as indicated in FIG. 8. In particular, the relationship among the event information, the log information, and the operation definition information may be established by employing the identifier (1014) of the operation definition information contained in the event/log table 1001 and the identifiers 1016, 1019, 1024 of the operation definition information contained in the operation definition table 1002.

[0099] It should be noted that when the screen is displayed, in such a case that information required to be displayed is not present in the tables 1001 to 1004 of FIG. 10, the managing computer 401 is operated in a similar manner to that shown in FIG. 5 so as to acquire this information required to be displayed.

[0100] In the case that such information indicative of a failure occurred in operation conditions of the computer system is notified as an event, this computer system may be operated as follows. First, for example, when a specific job is accomplished under abnormal state while a job net is being executed, after removing a factor for causing this abnormally ended job (e.g., a specific file required to execute a job is not present), the computer system may instruct that this interrupted job is restarted. This instruction may be realized as follows. That is, as indicated in FIG.11, in the managing computer, “reexecution command” for designating “subject computer”, “job net name”, “job name to be reexecuted” is entered (1101); this command is transferred to the above-explained subject computer (1102) so as to be executed (1103). Secondly, the computer system may instruct this job net to be canceled. This second idea may be realized as follows. That is, as shown in FIG. 11, in the managing computer, “cancel command” for designating “subject computer ” and “job net name” is entered (1101); this command is transferred to the above-described subject computer (1102) so as to be executed (1103). Furthermore, thirdly, when a specific job is ended under abnormal state while a job net is being executed, a specific job and also a specific job net, by which an abnormal end event is previously defined as a trigger, may be executed. This alternative method may be realized as follows. That is, as represented in FIG. 12, while the managing computer defines such a process operation which should be executed when a specific event is received (1201), when the managing computer receives this specific event as shown in FIG. 13 (1301), this managing computer instructs a subject computer to execute the designated process operation (1302). Then, the subject computer may execute this instruction (1303). At this time, the definition of either the job or the job net which should be executed by the subject computer may be transferred to be registered when the instruction is issued. Otherwise, this definition may be previously transferred to be registered.

[0101] Subsequently, a description will now be made of effects achieved in such a case that the operation definition information, the event information, and the log information are processed in the database form by the managing computer 401 to be stored.

[0102] As a first effect, a network traffic can be reduced. In accordance with the present invention, since the operation definition information, the event information, and the log information are stored in the database form by the managing computer 401, the managing computer 401 need not acquire the necessary information from the computer every time the operation manager and the like refer to these information.

[0103] For instance, in the network structure of FIG. 1, when log information of 1 K bytes is acquired from each of the six computers 402 to 407 by the managing computer at a frequency of 1,000 messages/day, a network traffic of 6 M bytes/day is produced. In the case that the log information is referred by the operation manager at a frequency of 10 times/day, a network traffic of 60 M bytes/day in total is produced.

[0104] Furthermore, as to such log information with a low demand of a real-time characteristic, if such log information is collected within such a time range where the normal network traffic is low, for example, in a night time range, the network traffic reduction effect can be apparently achieved.

[0105] As a second effect, since the operation definition information, the event information, and the log information are stored in the database form by the managing computer 401, as represented in the integrated management screen of FIG. 8, there is another effect that the above-explained information can be readily displayed in various relationship aspects.

[0106] In the computer system according to this embodiment, the computers 402 to 407 are set to be defined in a batch mode by the managing computer 401. However, it is conceivable that other computers which do not constitute a definition subject are connected to the networks 408 to 413. In this case, as a method for recognizing a subject computer to be managed by the managing computer 401, for example, there is a method for automatically detecting the integrated management agent 113 assembled into the computer by using, for example, a broadcasting method. As another method, a subject computer to be defined may be previously defined on the managing computer 401.

[0107] Also, in accordance with the computer system according to this embodiment, the operation definition information in which the schedule of the administrate operations executed by the computers 402 to 407 is defined can be formed in a batch mode by the managing computer 401, and furthermore both the log information and the event information of the administrate operations executed by the computers 402 to 407 can be managed by the managing computer 401, resulting in better results. Alternatively, if at least both the log information and the event information can be managed, then the operation manager may grasp the operation condition of the computer system.

Claims

1. A managing computer comprising: an acquiring device for acquiring log information and event information from any of plural computers connected via a network to each other, said log information indicating as to whether or not an execution of an operation process is carried out under normal condition, and said event information indicating concisely as to whether or not an execution of an operation process is carried out under normal condition; a data controller for storing into a database, operation definition information used to define a schedule of process operations executed in said plural computers in relation to said log information and said event information acquired by said acquiring device; and a display device for displaying said operation definition information in relation to event information related to a process operation defined by said operation definition information with reference to the information stored in said database.

2. A managing computer as claimed in claim 1 wherein: each of said log information and said event information respectively owns a tag indicative of said log information and a tag representative of said event information.

3. A managing computer as claimed in claim 1 wherein: said managing computer is comprised of: a definition device for forming a schedule of process operation which are commonly executed in all of said plural computers; and a distributor for distributing said process operation schedule formed by said definition device to all of said plural computers.

4. A managing computer as claimed in claim 1 wherein: said display device displays on the same display screen, said operation definition information and said event information in relation to predetermined log information among said log information.

5. A managing computer as claimed in claim 1 wherein: said acquiring device acquires a preselected sort of log information at predetermined timing.

6. A managing computer as claimed in claim 5 wherein: said acquiring device acquires information other than said preselected sort of log information in response to a request.

7. A managing computer as claimed in claim 1, wherein a definition for a process to be executed when a specified event is received and a command for executing the process is transmitted to a computer when said specified event is received.

8. A program product for storing thereinto a program executed on a computer managed by the managing computer as recited in claim 1, said program comprising: a defining process for forming operation definition information used to define a schedule of process operations executed in said plural computers; an expanding process for expanding a portion within said operation definition information distributed from said managing computer, said portion being related to said managed computer; a normalizing process for respectively adding a tag indicative of a log for an operation process and a tag representative of an event for an operation process to log information and event information with respect to a process operation executed in said computer to be converted into a normalized format; and an outputting process for outputting said operation definition information and said event information.

9. A program product according to claim 8, wherein a definition for a process to be executed in a computer when a specified event is received and a command for executing the process is transmitted to the computer when said event is received.

10. In a storage medium for storing thereinto a program executed on a managing computer for managing a plurality of computers connected via a network to said managing computer, said program is comprised of: an acquiring process for acquiring log information and event information from any of plural computers, said log information indicating as to whether or not an execution of an operation process is carried out under normal condition, and said event information indicating as to whether or not an execution of an operation process is carried out under normal condition and necessary to inform to an operator; a storing process for storing into a database, operation definition information used to define a schedule of process operations executed in said plural computers in relation to said log information and said event information acquired by said acquiring device; and a displaying process for displaying said operation definition information in relation to event information related to a process operation defined by said operation definition information with reference to the information stored in said database.

11. A storage medium as claimed in claim 10 wherein: said program is comprised of: a defining process for forming a schedule of process operations which are commonly executed in all of said plural computers; and a distributing process for distributing said process operation schedule formed by said defining process to all of said plural computers.

12. A storage medium as claimed in claim 10 wherein: said displaying process displays on the same display screen said operation definition information and said event information in relation to predetermined log information among said log information.

13. A storage medium as claimed in claim 10 wherein: said acquiring process of said program acquires a preselected sort of log information at predetermined timing.

14. A storage medium as claimed in claim 13 wherein: said acquiring process acquires information other than said preselected sort of log information in response to a request.

15. A method for managing a plurality of computers by employing a managing computer connected via a network to said plurality of computers, comprising: a step for acquiring log information and event information from any of plural computers connected via a network to each other, said log information indicating as to whether or not an execution of an operation process is carried out under normal condition, and said event information being more concise than said log information and indicating as to whether or not an execution of an operation process is carried out under normal condition; a step for storing into a database, operation definition information used to define a schedule of process operations executed in said plural computers in relation to said log information and said event information acquired by said acquiring device; and a step for displaying said operation definition information in relation to event information related to a process operation defined by said operation definition information with reference to the information stored in said database.

16. A computer managing method as claimed in claim 15, wherein: each of said log information and said event information respectively owns a tag indicative of said event information and a tag representative of said event information.

17. A computer managing method as claimed in claim 15 wherein: said computer managing method is comprised of: a defining step for forming a schedule of process operations which are commonly executed in all of said plural computers; and a distributing step for distributing said process operation schedule formed by said defining step to all of said plural computers.

18. A computer managing method as claimed in claim 15 wherein: said displaying step displays on the same display screen, said operation definition information and said event information in relation to predetermined log information among said log information.

19. A computer managing method as claimed in claim 15 wherein: said acquiring step acquires a preselected sort of log information at predetermined timing.

20. A computer managing method as claimed in claim 19 wherein: said acquiring step acquires information other than said preselected sort of log information in response to a request.

21. A computer managing method as claimed in claim 20, further comprising steps of: defining a process to be executed in a computer when a specified event is received, and transmitting a command for executing the process when said specified event is received.

22. A computer operation managing method employed in a computer system in which a plurality of computers are connected via a network to a managing computer for managing said plural computers wherein: said managing computer forms in a batch mode operation definition information in which a schedule of administrate operations is defined and a computer for executing each of the administrate operations is defined, and distributes the formed operation definition information to the respective computers; each of said computers individually forms operation definition information in which a schedule of operations executed by the own computer is defined, and also forms operation definition information in which a portion related to the own computer is expanded from said operation definition information distributed from said managing computer; said managing computer acquires operation definition information related to said computer, log information indicative of an execution result of the operation process executed in said computer, and event information indicative of an event occurred in an execution stage of said operation process, and then stores the acquired information into a database; and said managing computer displays the operation related to each of said computers in relation to log information and event invention of administrate operation defined by said operation definition information with reference to the information stored in said database.

23. A computer operation managing method as claimed in claim 22, wherein said managing computer defines a process to be executed in a computer when a specified event is received, and said computer executes said process when said event is received.