Abstract: An operation assistance system receives selection of a first procedure in a procedure manual including a plurality of procedures relating to an operation of an operation target. The operation assistance system displays an estimation structure obtained by structuring at least part of the first procedure based on an abstraction structure obtained by structuring a second abstraction procedure included in a first abstraction procedure corresponding to the first procedure and the selected first procedure.

Abstract: In a system where resources are used in a varying manner, when performances are monitored based on detected past behavior when the system was operating normally, if performance behavior is detected that is different, it is difficult to determine whether the detected performance behavior results from resources being used differently than when the system was operating normally. According to the present invention, monitoring accuracy is improved by determining whether performance behavior results from change in characteristics relating to the usage of the system by using means for measuring performances when the system is in operation and detecting a performance different from when the system was operating normally, means for measuring characteristics relating to the usage of the system and detecting whether the characteristics are different from when the system was operating normally, and means for comparing performance information with characteristic information relating to the usage of the system.

Abstract: It is necessary to allocate sufficient surplus resources to each service in order to maintain a service level of each service, but, as a result, many resources which are not used may be necessary. A resource allocation optimizing system performs, with respect to each of a plurality of services, a predictive judgement which is a determination of whether or not accurate prediction of a workload of the service is able to be anticipated, and controls allocation of a resource to the service on the basis of a result of the predictive judgement. With respect to each service, the predictive judgement is performed on the basis of at least one of (x) time-series measured workloads and time-series predicted workloads in a predefined period for the service and (y) at least one of a measured service level and a predicted service level in the predefined period for the service.

Abstract: A management device managing a storage device having a plurality of logical storage areas accessed by a computer has a monitor module for determining whether a setting is made by which the computer uniformly accesses the plurality of logical storage areas, obtaining respective access counts of the plurality of logical storage areas when it is determined that the setting is made, and comparing the obtained plurality of access counts, thereby determining whether a logical storage area having a problem exists; an analysis module for obtaining, when the problem exists, configuration information of the storage device assigned to the logical storage area having the problem, and identifying a configuration in the storage device as a bottleneck on the basis of the obtained configuration information; a creation module for creating a countermeasure of changing an access route passing through the configuration as the identified bottleneck.

Abstract: A log labeling apparatus is configured to include a label importance DB and a similarity DB configured to store importance information between a plurality of labels and an action set and action set information identifying a first action set for calculating a second similarity with each label of a first log unit, a similarity calculation unit configured to calculate the second similarity with each label of the first log unit on the basis of the importance information, an action set of the first log unit, and the action set of the action set information, a post processor configured to detect label candidates, and an accumulation determination unit configured to determine a second action set for calculating a second similarity of a second log unit and to store action set information on the second action set in the similarity DB.

Abstract: A technique for improving determination of handling of guides to events generated in an information system is provided. An event monitoring apparatus for monitoring an event including an event message indicated by a character string related to a phenomenon occurring in an information system includes a guide storage unit that stores a plurality of guides including guide messages indicated by a character string and indicating a method of handling the event and a threshold relating to similarity between the guide messages of the guides and event messages in association with each other; an event storage unit that records the event from the information system; and a guide provision unit that calculates the similarity between the event messages included in the event and the guide messages of the guide and associates a guide whose similarity exceeds a threshold with the event.

Abstract: An operation assistance system receives selection of a first procedure in a procedure manual including a plurality of procedures relating to an operation of an operation target. The operation assistance system displays an estimation structure obtained by structuring at least part of the first procedure based on an abstraction structure obtained by structuring a second abstraction procedure included in a first abstraction procedure corresponding to the first procedure and the selected first procedure.

Abstract: A technique for improving determination of handling of guides to events generated in an information system is provided. An event monitoring apparatus for monitoring an event including an event message indicated by a character string related to a phenomenon occurring in an information system includes a guide storage unit that stores a plurality of guides including guide messages indicated by a character string and indicating a method of handling the event and a threshold relating to similarity between the guide messages of the guides and event messages in association with each other; an event storage unit that records the event from the information system; and a guide provision unit that calculates the similarity between the event messages included in the event and the guide messages of the guide and associates a guide whose similarity exceeds a threshold with the event.

Abstract: It is necessary to allocate sufficient surplus resources to each service in order to maintain a service level of each service, but, as a result, many resources which are not used may be necessary. A resource allocation optimizing system performs, with respect to each of a plurality of services, a predictive judgement which is a determination of whether or not accurate prediction of a workload of the service is able to be anticipated, and controls allocation of a resource to the service on the basis of a result of the predictive judgement. With respect to each service, the predictive judgement is performed on the basis of at least one of (x) time-series measured workloads and time-series predicted workloads in a predefined period for the service and (y) at least one of a measured service level and a predicted service level in the predefined period for the service.

Abstract: An apparatus for monitoring a computer system includes a data collecting unit that collects performance data on a plurality of performance items related to the performance of the computer system; a performance degradation cause model 30 in which a cause event and degradation performance items which are one or more performance items degraded by the cause event are associated with one another; and an outlier score calculator 50 that specifies a degree of deviation, when target performance data which is performance data of degradation performance items collected by the data collecting unit deviates from a normal range under a condition that the normal range of the performance data of the one or more degradation performance items for the cause event is predetermined, and outputs information on the cause event based on a temporal change in the degree of deviation.

Abstract: Pursuant to the increase in the number of objects to be managed and the complication of relations of the objects to be managed, the current condition is that the visibility of the GUI of management software is deteriorating. As one such current condition, there is a problem in that the display name of equipment to be managed on the GUI cannot be entirely displayed depending on the screen. Thus, the present invention improves the readability on the GUI by changing the display name according to the objective of the administrator by using a label in which the display name is divided into morphemes and the priority assigned thereto, as well as using topology information, and fitting the display name within the display area prepared on the screen.

Abstract: In a system where resources are used in a varying manner, when performances are monitored based on detected past behavior when the system was operating normally, if performance behavior is detected that is different, it is difficult to determine whether the detected performance behavior results from resources being used differently than when the system was operating normally. According to the present invention, monitoring accuracy is improved by determining whether performance behavior results from change in characteristics relating to the usage of the system by using means for measuring performances when the system is in operation and detecting a performance different from when the system was operating normally, means for measuring characteristics relating to the usage of the system and detecting whether the characteristics are different from when the system was operating normally, and means for comparing performance information with characteristic information relating to the usage of the system.

Abstract: A management device managing a storage device having a plurality of logical storage areas accessed by a computer has a monitor module for determining whether a setting is made by which the computer uniformly accesses the plurality of logical storage areas, obtaining respective access counts of the plurality of logical storage areas when it is determined that the setting is made, and comparing the obtained plurality of access counts, thereby determining whether a logical storage area having a problem exists; an analysis module for obtaining, when the problem exists, configuration information of the storage device assigned to the logical storage area having the problem, and identifying a configuration in the storage device as a bottleneck on the basis of the obtained configuration information; a creation module for creating a countermeasure of changing an access route passing through the configuration as the identified bottleneck.

Abstract: It is provided an identification apparatus is configured to: obtain, from a first request group, same-type requests which are of the same type as an investigation subject request in a first request group; obtain, other-type requests that have been transmitted from a first apparatus to a second apparatus and a response to which has been transmitted from the second apparatus to the first apparatus, during a processing period; generate, for the investigation subject request and each of the same-type requests; search the generated sets for sets that have the matching other-type requests, and remove one of the found sets; obtain second requests that have been processed by the second apparatus during the processing period from the second request group; calculate, for the investigation subject request and each of the same-type requests after the removal, values of correlation with the obtained second requests.

Abstract: Pursuant to the increase in the number of objects to be managed and the complication of relations of the objects to be managed, the current condition is that the visibility of the GUI of management software is deteriorating. As one such current condition, there is a problem in that the display name of equipment to be managed on the GUI cannot be entirely displayed depending on the screen. Thus, the present invention improves the readability on the GUI by changing the display name according to the objective of the administrator by using a label in which the display name is divided into morphemes and the priority assigned thereto, as well as using topology information, and fitting the display name within the display area prepared on the screen.

Abstract: Monitoring apparatus is configured to execute: obtaining pieces of information about access in a first time slot by specifying the first time slot including access to a first apparatus in the system where a response time is long; selecting a feature common to the access in the first time slot from the pieces of information about the access in the first time slot that have been obtained; first extracting from pieces of information about access in a given period of time, pieces of information about access that has the common feature selected as a feature common to the access in the first time slot; and first generating a first graph which shows changes with time in response time, based on the pieces of information about the access having the feature common to the access in the first time slot that have been extracted.

Abstract: A management computer has a processor configured to: select a service performance name pairing with a received first apparatus performance name; select a performance value of the received first apparatus performance name and a performance value of the selected service performance name; select a threshold of the first apparatus performance name and a threshold of the selected service performance name; determine whether the performance value of the first apparatus performance name exceeds the threshold of the first apparatus performance name within a predetermined period; determine whether the performance value of the service performance name exceeds the threshold of the service performance name within the predetermined period; and when a determination result of the performance value of the first apparatus performance name and a determination result of the performance value of the service performance name are the same result simultaneously, increase evaluation of the threshold of the first apparatus name.

Abstract: A monitoring system for monitoring a service execution infrastructure for providing a service to client computers via a network manages baselines of monitoring values of components per load of the service provided by the infrastructure, and uses the baselines depending on a current service load. When detecting an abnormality of a service monitoring value or component monitoring value by use of the baselines, the monitoring system compares events up to predetermined minutes ago from now with events in the baseline time zone thereby to specify a differential event (or non-normal recent event).

Abstract: It is provided a resource management server comprising: a resource management module for managing virtual machines and use amounts of resources used by the virtual machines for deployment; a pool management module for managing a total amount of the resources and a total amount of available resources; a requirement specification reception module for receiving an allocation requirement for a new virtual machine along with requirement specifications including amounts of resources; and a search module for searching the virtual machines for deployment included in the resource management information for virtual machines for deployment having amounts of resources that satisfy the requirement specifications, and for virtual machines for deployment which do not have the amounts of resources that satisfy the requirement specifications but which allow the amounts of resources that satisfy the requirement specifications to be secured by adding the available resources included in the pool management information.

Abstract: A management computer for managing allocation of an application and an application probe in a computer system including a plurality of computers, the management computer comprising a probe management part configured to determine a computer for allocating a new application and a new application probe, the probe management part being configured to: retrieve a computer satisfying a configuration condition and a monitoring interval condition; compute a value of a monitoring spike, in a case where the new application and the new application probe are allocated to the retrieved computer, determine the retrieved computer as a candidate computer to which the application and the application probe are to be allocated, in a case where it is determined that the computed value of the monitoring spike is smaller than a predetermined threshold.