Fujitsu Corporation

Ken Yokoyama

Hiroshi Otsuka

Yukihiro Watanabe

Masahiro Asaoka

Shinji Kikuchi

Eiichi Takahashi

Reiko Kondo

Lilian Harada

Kuniaki Shimada

Nobuhiro Yugami

Naoki Akaboshi

Tsuneo Katsuyama

Kenichi Kobayashi

Riichiro Take

Kazumi Kubota

Yuuji Hotta

Junichi Higuchi

Takeshi Aoki

Takashi Shinzaki

Takeshi Kawasaki

Yusaku Fujii

Toshihiko Kurita

Naohiro Tamura

Kenichi Shimazaki

Keiichi Oguro

Akira Takeyama

Yukiko Seki

Koichi Takaba

Koji Ishibashi

Hiroyasu Kageyama

Takashi Shimizu

Hirokazu Iwakura

Takeshi Kodama

Tetsuya Okano

Hiroshi Murakawa

Seiya Shindo

Tamami Sugasaka

Taiji Sasage

Noriaki Murata

Takamitsu Maeda

Yasuo Kubota

Koutarou Tsuro

Kazuhiro Ikemoto

Junichi Sakaguchi

Syogo Hayashi

Kouji Honma

Takuto Tsuji

A method of an abnormality detection, the method including: calculating an occurrence degree of a packet loss in each of multiple queues on the basis of a first time period in which each of multiple processes that receives a packet is in a waiting state and an arrival frequency of a packet in each of the multiple queues that stores the packets received by the multiple processes; distributing the number of packet losses occurred in a communication device that includes the multiple queues to each of the multiple queues on the basis of the calculated occurrence degree; and determining whether or not an abnormality occurs in each of the multiple processes on the basis of a correspondence relationship between an operation state of each process and the number of packet losses distributed to the queue that corresponds to each process among the multiple queues for each of the multiple processes.

Abnormality detection method and a non-transitory computer-readable storage medium for storing abnormality detection program

A non-transitory computer-readable storage medium storing a program that causes a computer to execute a process, the process includes determining an information transmission path between two devices with a correlation in use status of resources based on system configuration information and use resource information; generating, for each of a plurality of software, an influence propagation model in which a direction from a first device to a second device is set as an influence propagation direction, when a co-occurrence probability that the second device outputs a message within a certain time after the first device outputs a message through execution of the software is equal to or greater than a threshold, based on a message log; acquiring failure information indicating a failed device; specifying an influenced device reached by tracing the information transmission path from the failed device in an influence propagation direction; and outputting information indicating the influenced device.

Influence range specifying method, influence range specifying apparatus, and storage medium

An operation management apparatus includes a processor. The processor generates a VM load model for each virtual machine running on an information processing system, generates resource utilization rate estimation data based on VM load models of a virtual machine group running on the physical machine and a VM load model of a first virtual machine, for each of physical machines except for a first physical machine on which the first virtual machine is running, generates a resource competition occurrence model based on the resource utilization rate of the physical machine, calculates a statistical value of competition occurrence probabilities of the resource, for each of the physical machines except for the first physical machine, based on the resource utilization rate estimation data and the resource competition occurrence model, specifies the migration destination physical machine based on the statistical value, and outputs information of a specified migration destination physical machine.

Operation management apparatus, migration destination recommendation method, and storage medium

An influence range identification apparatus includes a processor configured to acquire information indicating a first device in which a failure occurs. The processor searches for second devices starting from the first device based on a connection relationship among a plurality of devices. The second devices exist in a first influence range. The processor determines whether a third device exists among the second devices. The third device has abnormality due to the failure. The processor determines whether each of the second devices other than the third device exits in a second influence range starting from the third device based on the connection relationship among the second devices. The processor determines a rank of a degree of a possibility of being affected by the failure with respect to each of the second devices other than the third device.

Influence range identification method and influence range identification apparatus

An information processing apparatus includes: a processor configured to: acquire message data that indicate a message size and a response time of each response message identified from an encrypted packet group; identify, based on the message data, first peak sizes that satisfy a first condition from a first size distribution of the message size of each response message; determine based on the message data, when the first peak sizes include a second peak size different from third peak sizes, whether a first time distribution satisfies a second condition, the third peak sizes being peak sizes of the message size of each response message in a normal state, the first time distribution being a frequency distribution of the response time of each response message having the second peak size; and determine that a service is abnormal, when the first time distribution satisfies the second condition.

Information processing apparatus and abnormality diagnosis method

An information processing apparatus includes: a memory configured to store first system time; and a processor configured to: receive, from an information acquisition apparatus after the first system time is written in the memory, first information acquired by the information acquisition apparatus and first time information indicating acquisition time of the first information; receive, from the information acquisition apparatus after receiving the first information and the first time information, second information and second time information indicating acquisition time of the second information; converting, based on the first system time, reception time at which the first information and the first time information are received into second system time; convert, based on the second system time and the first time information, the second time information into third system time; attach the second system time to the first information; and attach the third system time to the second information.

Information processing apparatus, time synchronization method, and computer-readable recording medium recording time synchronization program

A non-transitory computer-readable storage medium storing therein a failure analysis program that causes a computer to execute a process includes: extracting, for respective incidents, first material names that satisfy a first condition from character strings included in each incident; extracting, for the respective incidents, second material names, which are the same material names as the first material names, from the character strings included in each incident; calculating a combination of feature values corresponding respectively to the one or more features from character strings correlated with the extracted second material names, for the respective incidents and for the respective second material names; and specifying a specific combination that satisfies a second condition from the combinations of feature values corresponding to the respective material names, for the respective second material names.

Failure analysis program, failure analysis device, and failure analysis method

With reference to information storing a co-occurrence probability of each of plural words in association with each of distribution-destinations, the apparatus extracts, from a message to be distributed, an unknown-word that is not included in the plural words, where the co-occurrence probability indicates a probability that each word is included in a message to be distributed to each distribution-destination. When the unknown-word is present in the message at a predetermined ratio or greater, the apparatus extracts first-words included in all of a first-group of messages each including the unknown-word, calculates the co-occurrence probability of the unknown-word for each distribution-destination, based on the information regarding the distribution-destinations to which a message including the first-words and a second-word, which is included in all of a second-group of messages each including the first-words and not including the unknown-word, is to be distributed, and registers the calculated co-occurrence probability in the information.

Apparatus and method to determine a distribution destination of a message based on a probability of co-occurrence of words included in distributed messages

For each setting-file, an apparatus obtains, from first action-records, an occurrence-count value that is associated with the each first action-record and indicates a number of occurrences of a setting-item name identifying each setting-item for the each setting-file, in association with a sequence number assigned to the each first action-record, where each first action-record records an action that is taken in response to a first-incident. When there exists a first setting-file for which an occurrence-pattern generated based on a sequence of occurrence-count values that are each associated with different one of the sequence numbers assigned to the first action-records is similar to a model pattern that is in advance obtained from second action-records for second-incidents occurring due to a setting error of a setting-value that is set to the first setting file, the apparatus stores the first setting-file in association with an identifier identifying the first-incident.

Apparatus and method to determine a setting item causing an incident based on action records therefor

A computer executes a process of: generating co-occurrence-message bunches by summarizing messages based on a relation in which the messages output from an apparatus are mutually output within a predetermined period; classifying the generated co-occurrence-message bunches into groups based on similarity among the co-occurrence-message bunches; determining a first message which is a representative of each of the groups based on an appearance characteristic of a word or a word string included in each message of each of the groups; determining a second message which is a representative of each of the co-occurrence-message bunches and is not repeated based on an appearance characteristic of a word or a word string included in each message in each co-occurrence-message bunch of each of the groups; and outputting the first message determined for the group including each co-occurrence-message bunch and the second message determined for each co-occurrence-message bunch in correlation with each co-occurrence-message bunch.

Information processing apparatus and control method for information processing apparatus

A computer-implemented method includes: acquiring learning data from the plurality of processing devices in which a setting item, a setting value that include a setting error included in configuration information acquired when a fault in a system has occurred, and a fault type are associated with each other; determining whether each of fault types included in the learning data depends on a software configuration; extracting first software configuration information indicating a combination of setting files in which settings related to software are described, from the configuration information, based on a result of the determining; extracting second software configuration information indicating a combination of setting files in which settings related to software are described, from configuration information of a detection target; and determining whether to output an indication of a fault occurrence within the detection target by comparing the second software configuration information with the first software configuration information.

Computer-implemented method, information processing device, and recording medium

An information processing apparatus includes a processor configured to collect data received and transmitted between a plurality of virtual machines within a physical apparatus, the plurality of virtual machines running on the physical apparatus; and a communication unit configured to output the data collected by the processor to an external apparatus.

Information processing apparatus, information processing system, and communication data output method

A method includes: acquiring messages output by items in the system, each of messages including an output time; referring to the messages and setting item pairs which combine two items among the items, as target item pairs; determining, for each of the item pairs, a strength of relevancy between the target item pairs based on a co-occurrence probability which indicates that a message is output from one of the target item pair within a prescribed time period before or after the output time of a message output from other of the target item pair; and determining a priority ranking for investigating one or more the items among the items other than a certain item based on the strength of relevancy of each of item pairs, as a response to an input of an investigation ranking determination instruction which designates the certain item among the items as an investigation start position.

Computer-implemented method, system, and storage medium

A device carries out a receiving process to receive a message transmitted or received by a server from a communication device connected to the server. The device stores the message in a message storing unit in connection with a time when the receiving process is carried out. The device extracts a message for synchronization from the message storing unit. The device produces log data including identification data to identify the message for synchronization and a time when the message for synchronization is received. The device produces log data including a time when a message other than the message for synchronization is received. The device stores the log data in a log data storing unit. The device transmits the log data stored in the log data storing unit to a log data processing device connected to a network on an opposite side of a firewall connected to the communication device.

Computer-readable medium storing system visualization processing program, method and device

A transmission destination of a packet to be transmitted by a web server () and an application server () incorporated in the same machine () is set to a loopback device (). When a packet is received from one of the servers (and), the loopback device () decides whether or not a combination of a source IP address, a source port number, and a destination port number in the packet is known. If the combination is known, the source IP address and a destination IP address of the received packet are exchanged, and the packet is transmitted to the other server. Further, the packet received from the one of the servers and the packet transmitted to the one of the servers are copied, and the copied packets are transmitted to a communication state visualizing machine ().

Loopback device and mirroring method

Growing community of inventors

Kawasaki, Japan

Ken Yokoyama