Fujitsu Corporation

Lilian Harada

Yuuji Hotta

Riichiro Take

Motoyuki Kawaba

Hidekazu Takahashi

Naoki Akaboshi

Ken Yokoyama

Kazumi Kubota

Nobuhiro Yugami

Kenichi Kobayashi

Hiroshi Otsuka

Yukiko Seki

Kazutaka Ogihara

Shinji Kikuchi

Kenichi Shimazaki

Akira Takeyama

Koji Ishibashi

Satoshi Ikuta

A character string which is unique in each transaction and a character string common to different transactions are extracted from a message log obtained when the same transaction is processed for a plurality of number of times. Then, messages stored by practically operating an information system are associated with each transaction by utilizing these character strings, and the character string common to the transactions of which execution times overlap with each other is deleted, so that the remained character strings are provided as linking keywords.

Computer readable recording medium storing linking keyword automatically extracting program, linking keyword automatically extracting method and apparatus

This message tying processing method include: extracting tying keys from a key definition database storing, for each protocol, tying keys included in messages relating to the protocol and used in a message tying processing, and generating data of a structure including nodes respectively corresponding to the extracted tying keys and links connecting between the nodes of the tying keys belonging to the same protocol: judging whether or not a loop is formed in the structure by the links; when it is judged that the loop is not formed in the structure, identifying, among allocation patterns that are combinations of allocation of the tying keys to each of plural tying processors, that respectively carry out the tying processing in cooperation with each other, an allocation pattern satisfying a first condition that a communication load between the tying processors is the minimum.

Message tying processing method and apparatus

An apparatus has a unit that receives plural messages, which belong to plural transactions and respectively have a pertinent transaction identifier, in an indefinite order; plural processors each having a queue storing the messages belonging to a transaction in charge, and outputting, after the messages belonging to one of the transactions in charge have become complete, the complete messages in the queue to a message processing unit; an allocation unit that outputs the received message to one of the plural processors, wherein one of the processors is identified based on the transaction identifier of the received message and an allocation rule predetermined for the transaction identifier; and a change unit that changes the allocation rule when activating or stopping the processor. When the change unit changes the allocation rule, each of the processors outputs at least messages for which re-allocation is necessary to the allocation unit.

Message binding processing technique

A computer-readable, non-transitory medium stores the system analysis program which can accurately analyze the operational status of a system without modifying functions of the system for providing services. A message analysis unit analyzes the contents of collected messages, and determines the times of occurrence of the messages, the process types requested by the messages, and whether or not each of the messages is a request message or a response message. In response to an instruction for model generation, a model generation unit generates a transaction model satisfying at least one limiting condition related to caller-called relationships between processes, based on a set of messages selected in accordance with a selection criterion based on the certainty of existence of caller-called relationships. Then, in response to an instruction for analysis, an analysis unit analyzes the processing status of a transaction based on a protocol log conforming to the transaction model.

System analysis program, system analysis method, and system analysis apparatus

A processing time can be defined in a system including a plurality of computers for which the processing time is calculated, by displaying candidates of paths corresponding to flow of a series of processings as to transmission and reception of each message based on transmission and reception of messages among a plurality of computers; receiving an input that selects one path among the displayed candidates; and creating a processing time in each of computers in the flow of a series of processings as to transmission and reception of messages based on the received input.

Processing-time-definition creating program, processing-time-definition creating method, and information processing apparatus

A linkage support system links related messages among a plurality of messages sent and received among a plurality of communication terminals. The linkage support system includes an information acquisition unit that acquires message types of the plurality of messages, character strings included in the plurality of messages, and amount of data flow when the character strings are transferred. An unnecessary character strings exclusion unit that excludes character strings that are not required as keywords for linkage processing, based on the information acquired by the information acquisition unit, and a processing order determination unit determines order for using a plurality of character strings from which unnecessary character strings are excluded by the unnecessary character strings exclusion unit.

Linkage support apparatus and method thereof

A system analyzing apparatus analyzes a processing state of a computer system that includes a plurality of types of unit processing. The system analyzing apparatus includes a selecting unit that selects a plurality of representative unit processing based on similarities between individual units of the unit processing; and a grouping unit that groups each unit processing based on similarity between the each unit processing and each of representative unit processing selected by the selecting unit.

Computer product, method, and apparatus for analyzing computer system

An apparatus receives messages having a linking keyword for identification of a transaction, classifies the received messages in terms of transaction using message patterns and the linking keyword. It compares a series of messages associated with the transaction with the message patterns. It makes a decision as to whether the series of messages associated with the transaction matches any one of the message patterns. It creates a record including an identifier for the transaction and the linking keyword. It searches for the unclassified messages based on the linking keywords contained in the unclassified messages, and identifies the record containing the identical linking keyword. It stores the identifiers for the unclassified messages into a linked candidate list in a corresponding manner to linked candidate transactions. It adds the unclassified messages to the message pattern which corresponds to the linked candidate transaction to create a new message pattern.

Computer-readable recording medium, method, and apparatus for creating message patterns

In determining a condition of a case under which the occurrence rate of the performance abnormality is high based on information related to a resource utilization situation acquired in a resource utilization situation acquisition step and an occurrence frequency of a request acquired in a request occurrence frequency acquisition step, and information related to the existence/nonexistence of the performance abnormality determined in a performance abnormality existence/nonexistence determination step, when branching a parent node that represents a situation of a decision tree to two child nodes using the method of decision tree, the decision tree is generated using an evaluation function which performs branching such that most of normal samples which belong to the parent node are contained in the one child node, and most of abnormal values which belong to the parent node are contained in the other child node.

Performance abnormality analysis apparatus, method, and program, and analysis result display method for performance abnormality analysis apparatus

A system analysis program which can accurately analyze the operational status of a system without modifying functions of the system for providing services. A message analysis unit analyzes the contents of collected messages, and determines the times of occurrence of the messages, the process types requested by the messages, and whether or not each of the messages is a request message or a response message. In response to an instruction for model generation, a model generation unit generates a transaction model satisfying at least one limiting condition related to caller-called relationships between processes, based on a set of messages selected in accordance with a selection criterion based on the certainty of existence of caller-called relationships. Then, in response to an instruction for analysis, an analysis unit analyzes the processing status of a transaction based on a protocol log conforming to the transaction model.

An apparatus for classifying a plurality of logs recorded in a log file includes: a parsing unit that performs a parsing of the logs in the log file; a rule generating unit that generates a rule for a data classification based on a result of the parsing; a data classifying unit that performs the data classification, based on the rule generated, to classify the logs into a plurality of groups; a display unit that displays a result of the data classification; and a rule editing that edits the rules based on an instruction from a user.

Method and apparatus for supporting log analysis

A state of which a particular attribute of a record has a particular value is defined as an event. With a plurality of events and the relation of a sequence thereof, a search pattern is designated. A set of records as a search target are searched for a combination of records corresponding to the search pattern.

Searching apparatus and searching method using pattern of which sequence is considered

A group-by processing system performs a specified operation computing average value, etc. on a group of records having the same key value, efficiently accesses a secondary storage device, and realizes a high speed process. The group-by processing system includes a unit for storing records; a unit for storing pointers to the records in the unit for storing records at positions, each of which corresponds to a hash function value calculated using the key value of the pointed record; a unit for outputting the records pointed to by the pointers in the unit for storing pointers to secondary storage device, given the hash function values; and a unit for reading a list of output hashed records, sorting the records by key value, and performing a group-by operation on the sorted records. The system also includes a combination generation unit for outputting a combination of two or more items satisfying a combination generation restriction condition; an occurrence count unit for counting occurrences of the combinations; a combination selection unit for selecting the combination which satisfies the given condition of the number of occurrences; and a restriction condition generation unit for assigning the restriction condition to the combination generation unit according to the selection result. The combinations of items can be counted efficiently by performing a high-speed group-by operation.

Growing community of inventors

Kawasaki, Japan

Lilian Harada