Abstract: A computer-readable, non-transitory medium stores the system analysis program which can accurately analyze the operational status of a system without modifying functions of the system for providing services. A message analysis unit analyzes the contents of collected messages, and determines the times of occurrence of the messages, the process types requested by the messages, and whether or not each of the messages is a request message or a response message. In response to an instruction for model generation, a model generation unit generates a transaction model satisfying at least one limiting condition related to caller-called relationships between processes, based on a set of messages selected in accordance with a selection criterion based on the certainty of existence of caller-called relationships. Then, in response to an instruction for analysis, an analysis unit analyzes the processing status of a transaction based on a protocol log conforming to the transaction model.

Abstract: A computer-readable, non-transitory medium stores the system analysis program which can accurately analyze the operational status of a system without modifying functions of the system for providing services. A message analysis unit analyzes the contents of collected messages, and determines the times of occurrence of the messages, the process types requested by the messages, and whether or not each of the messages is a request message or a response message. In response to an instruction for model generation, a model generation unit generates a transaction model satisfying at least one limiting condition related to caller-called relationships between processes, based on a set of messages selected in accordance with a selection criterion based on the certainty of existence of caller-called relationships. Then, in response to an instruction for analysis, an analysis unit analyzes the processing status of a transaction based on a protocol log conforming to the transaction model.

Abstract: A scenario creating apparatus which creates a scenario for verifying operation of an information processing system in which a plurality of servers including a database server are connected, includes a collector that collects messages transmitted and received between the plurality of servers, when operation of the information processing system is being verified by a terminal apparatus that performs verification of operation; an association unit that associates the collected messages with each other; a sorter that sorts work models in ascending order of time at which access is made to the database server, the work models each being a group of the associated messages; and a scenario creating unit that creates the scenario on the basis of the sorted work models.

Abstract: A computer-readable, non-transitory medium stores the system analysis program which can accurately analyze the operational status of a system without modifying functions of the system for providing services. A message analysis unit analyzes the contents of collected messages, and determines the times of occurrence of the messages, the process types requested by the messages, and whether or not each of the messages is a request message or a response message. In response to an instruction for model generation, a model generation unit generates a transaction model satisfying at least one limiting condition related to caller-called relationships between processes, based on a set of messages selected in accordance with a selection criterion based on the certainty of existence of caller-called relationships. Then, in response to an instruction for analysis, an analysis unit analyzes the processing status of a transaction based on a protocol log conforming to the transaction model.

Abstract: A method includes: collecting message sequences including a series of messages issued in response to one processing request; classifying the collected message sequences into groups of the message sequences whose simplified message sequences generated by excluding words other than reserved words from a database message that is a message including a SQL sentence are identical, wherein the database message is included in the series of messages; generating, for each group, a normalized expression including the reserved words in the database message as fixed character strings and arbitrary character strings replaced with portions other than the fixed character strings in the database message, for the database message included in the message sequence belonging to the group; and generating a rule for converting the database message considered to be identical with the normalized expression into a series of fixed character strings included in the normalized expression.

Abstract: A priority control apparatus, includes a job operation information storage unit stores, as job operation information on a per job operation basis for a plurality of job operations, a process and an object used by the process with the process mapped to the object, each job operation being executed by a plurality of processes; a delay determiner determines a first job operation that is delayed from among the plurality of job operations; and a priority controller identifies a second job operation sharing an object used in the first job operation by referencing the job operation information storage unit, identifies a process, using an object not used in the first job operation, from among the processes executing the second job operation identified, and lowers a priority at which the identified process is to be executed.

Abstract: This method includes: identifying, for each child log having a job type identifier in a message to a lower-layer server and a start time and end time of a processing executed in the lower-layer server, an inclusive parent log that is a parent log having a start time and end time of a processing executed in an upper-layer Web server, wherein the start time and end time of the inclusive parent log define an interval containing a period from the start time to the end time of the child log, and registering the job type identifier in the child log and a path of URI in the inclusive parent log, into a table, and registering a frequency for each combination of the identifier and the path of URI into the table. By using this table, features in the path of URI are extracted for each job type identifier.

Abstract: A computer-readable, non-transitory medium stores the system analysis program which can accurately analyze the operational status of a system without modifying functions of the system for providing services. A message analysis unit analyzes the contents of collected messages, and determines the times of occurrence of the messages, the process types requested by the messages, and whether or not each of the messages is a request message or a response message. In response to an instruction for model generation, a model generation unit generates a transaction model satisfying at least one limiting condition related to caller-called relationships between processes, based on a set of messages selected in accordance with a selection criterion based on the certainty of existence of caller-called relationships. Then, in response to an instruction for analysis, an analysis unit analyzes the processing status of a transaction based on a protocol log conforming to the transaction model.

Abstract: A system analysis program which can accurately analyze the operational status of a system without modifying functions of the system for providing services. A message analysis unit analyzes the contents of collected messages, and determines the times of occurrence of the messages, the process types requested by the messages, and whether or not each of the messages is a request message or a response message. In response to an instruction for model generation, a model generation unit generates a transaction model satisfying at least one limiting condition related to caller-called relationships between processes, based on a set of messages selected in accordance with a selection criterion based on the certainty of existence of caller-called relationships. Then, in response to an instruction for analysis, an analysis unit analyzes the processing status of a transaction based on a protocol log conforming to the transaction model.

Abstract: A scenario creating apparatus which creates a scenario for verifying operation of an information processing system in which a plurality of servers including a database server are connected, includes a collector that collects messages transmitted and received between the plurality of servers, when operation of the information processing system is being verified by a terminal apparatus that performs verification of operation; an association unit that associates the collected messages with each other; a sorter that sorts work models in ascending order of time at which access is made to the database server, the work models each being a group of the associated messages; and a scenario creating unit that creates the scenario on the basis of the sorted work models.

Abstract: A method includes: collecting message sequences including a series of messages issued in response to one processing request; classifying the collected message sequences into groups of the message sequences whose simplified message sequences generated by excluding words other than reserved words from a database message that is a message including a SQL sentence are identical, wherein the database message is included in the series of messages; generating, for each group, a normalized expression including the reserved words in the database message as fixed character strings and arbitrary character strings replaced with portions other than the fixed character strings in the database message, for the database message included in the message sequence belonging to the group; and generating a rule for converting the database message considered to be identical with the normalized expression into a series of fixed character strings included in the normalized expression.

Abstract: An apparatus for classifying a plurality of logs recorded in a log file includes: a parsing unit that performs a parsing of the logs in the log file; a rule generating unit that generates a rule for a data classification based on a result of the parsing; a data classifying unit that performs the data classification, based on the rule generated, to classify the logs into a plurality of groups; a display unit that displays a result of the data classification; and a rule editing that edits the rules based on an instruction from a user.

Abstract: A system analysis support system supports analysis of status of operation of a network system. A storage unit stores an actual processing time taken by a server at a destination of a request message. When the response message is not found as a result of the search, a decision unit reads the actual processing time and makes a decision from an instant of sending of the request message as to whether or not the actual processing time for the request message has elapsed. When the actual processing time is judged to have elapsed, a determination unit determines an estimated instant of sending based on the instant of sending of the request message and on the actual processing time on the assumption that the response message has been sent. An associating unit associates the determined estimated instant of sending with the request message. An output unit outputs results of the association.

Abstract: This method includes: identifying, for each child log having a job type identifier in a message to a lower-layer server and a start time and end time of a processing executed in the lower-layer server, an inclusive parent log that is a parent log having a start time and end time of a processing executed in an upper-layer Web server, wherein the start time and end time of the inclusive parent log define an interval containing a period from the start time to the end time of the child log, and registering the job type identifier in the child log and a path of URI in the inclusive parent log, into a table, and registering a frequency for each combination of the identifier and the path of URI into the table. By using this table, features in the path of URI are extracted for each job type identifier.

Abstract: Apparatus for storing information about collected messages in a message storage mechanism includes a mechanism for detecting a request message and for a process suspended as a suspended process request message, a mechanism for referring to a model storage mechanism to search for a transaction model beginning with a message having the same content as that of the suspended process request message and generating a partial model resulting from exclusion of the messages corresponding to the suspended process request message and a suspension message. Also included are a mechanism for extracting a plurality of messages composing an arrangement of messages similar to that of the partial model, and a mechanism for combining a partial transaction information with at least the suspended process request message, to generate suspended transaction information.

Abstract: There is provided a packet data analysis program and a packet data analyzer that analyze packet data captured at a plurality of locations on a network and correct the time at which the packet data is captured. A packet data analysis program allows a computer to execute analysis of packet data. The program allows the computer to execute: a packet data collection step that collects packet data captured at a plurality of locations on the network and a time stamp indicating the time at which the packet data is captured; a message information acquisition step that acquires message information, which is information related to a message, from the packet data collected by the packet data collection step; a time stamp correction step that corrects a difference in the time stamp depending on the location based on the message information acquired by the message information acquisition step.

Abstract: An apparatus for classifying a plurality of logs recorded in a log file includes: a parsing unit that performs a parsing of the logs in the log file; a rule generating unit that generates a rule for a data classification based on a result of the parsing; a data classifying unit that performs the data classification, based on the rule generated, to classify the logs into a plurality of groups; a display unit that displays a result of the data classification; and a rule editing that edits the rules based on an instruction from a user.

Abstract: A state of which a particular attribute of a record has a particular value is defined as an event. With a plurality of events and the relation of a sequence thereof, a search pattern is designated. A set of records as a search target are searched for a combination of records corresponding to the search pattern.

Abstract: A system analysis program which can accurately analyze the operational status of a system without modifying functions of the system for providing services. A message analysis unit analyzes the contents of collected messages, and determines the times of occurrence of the messages, the process types requested by the messages, and whether or not each of the messages is a request message or a response message. In response to an instruction for model generation, a model generation unit generates a transaction model satisfying at least one limiting condition related to caller-called relationships between processes, based on a set of messages selected in accordance with a selection criterion based on the certainty of existence of caller-called relationships. Then, in response to an instruction for analysis, an analysis unit analyzes the processing status of a transaction based on a protocol log conforming to the transaction model.

Abstract: An order relation extracted from a search pattern query is converted into a deterministic finite automaton (DFA). A process of determining whether or not a state transition can be performed by the DFA using each record, and of registering a transition destination and history information in a state transition set, is repeated, thereby obtaining a combination of records corresponding to the search pattern query.