Abstract: The present invention provides a log management system which is devised so that improper behavior by managers with regard to the log information can easily be discovered. Virtual OS are respectively installed for respective users in a file server that can also be constructed as an NAS device. These virtual OS function as virtual NAS. The virtual OS and manager OS can exchange information relating to log information via an information exchange part constructed as a kernel. The log information produced in the virtual OS is transmitted to a first log management device via a first communications network, and is also transmitted to a second log management device via a second communications network. The respective networks are separated. As a result of the same log information being managed by multiplex management using separate management devices, it can be detected whether or not there has been any improper behavior with respect to the log information.

Abstract: The present invention provides a log management system which is devised so that improper behavior by managers with regard to the log information can easily be discovered. Virtual OS are respectively installed for respective users in a file server that can also be constructed as an NAS device. These virtual OS function as virtual NAS. The virtual OS and manager OS can exchange information relating to log information via an information exchange part constructed as a kernel. The log information produced in the virtual OS is transmitted to a first log management device via a first communications network, and is also transmitted to a second log management device via a second communications network. The respective networks are separated. As a result of the same log information being managed by multiplex management using separate management devices, it can be detected whether or not there has been any improper behavior with respect to the log information.

Abstract: Failures may occur during the execution of an operation by a user, for example, when a directory quota cannot be expanded, or when a directory lacking in storage resources, which are to be assigned from a file system, emerges even if the directory quota can be expanded. A storage subsystem of the invention is characterized by autonomously detecting quota expansion for a user; comparing the total of plural quotas with a limit value; and allocating a storage area set in a storage device in advance to the limit value if, based on the result of the comparison, the total value exceeds the limit value.

Abstract: A log management system is devised to easily discover improper handling log information by managers. Virtual operation systems (OS) are respectively installed for respective users in a file server constructed as an NAS device. These virtual OS function as virtual NAS. The virtual OS and manager OS exchange information relating to log information via an information exchange part constructed as a kernel. The log information produced in the virtual OS is transmitted to a first log management device via a first communications network, and is also transmitted to a second log management device via a second communications network separated from the first communications network. As a result of the same log information being managed by multiplex management using separate management devices, the system detects whether or not there has been any improper handling of the log information.

Abstract: Provided are a storage system, a data management apparatus, and a data management method capable of facilitating the add-on procedures of data management apparatuses for managing data groups such as directory groups. In a storage system comprising a plurality of data management apparatuses for managing storage destination management information of a data group stored in a storage extent of a prescribed storage controller, at least one of the data management apparatuses decides the respective data management apparatuses to newly manage the data group for each of the data groups based on the importance of each of the data groups or the loaded condition of each of the data management apparatuses, and migrates storage destination management information containing information regarding the storage destination of the data group to the data management apparatus to newly manage the data group based on the decision as necessary.

Abstract: To restrict actions such as spoofing and thereby prevent tapping and leakages of data by certifying whether or not each communication device such as a storage device on a communication line is to be connected to the communication line. Upon receipt of a packet that contains an IP address in its IP header and stores a certificate in its certificate payload from a storage device 300, an authentication device 200 compares an IP address that is recorded in the certificate and the IP address that is recorded on the IP header of the packet. If the comparison results in a match of these IP addresses, the authentication device 200 can certify that the storage device 300 is a device for which a certificate issuing device 100 has properly issued the certificate.

Abstract: The NAS device, upon detecting a virus infection of a file sent from a client computer, shuts down operation of any logical volume where the virus-infected file could possibly be stored. By so doing, even if one of the multiple logical volumes should become virus-infected, since it is possible to halt usage of only those logical volumes which could possibly become virus-infected, the spread of secondary damage to other logical volumes by virus infection is preventable while minimizing the operational loss in the computer system.

Abstract: Provided are a storage system, a data management apparatus, and a data management method capable of facilitating the add-on procedures of data management apparatuses for managing data groups such as directory groups. In a storage system comprising a plurality of data management apparatuses for managing storage destination management information of a data group stored in a storage extent of a prescribed storage controller, at least one of the data management apparatuses decides the respective data management apparatuses to newly manage the data group for each of the data groups based on the importance of each of the data groups or the loaded condition of each of the data management apparatuses, and migrates storage destination management information containing information regarding the storage destination of the data group to the data management apparatus to newly manage the data group based on the decision as necessary.

Abstract: A storage system connected to a network is provided which is capable of managing other devices connected to the network. A storage system (400) is connected via a switch (200) to a network (500) to provide clients (100) with data. The storage system has a control unit which sets the switch (200) and a setting command preserving unit which keeps a command for setting the switch (200). The control unit uses the preserved command to set the switch (200).

Abstract: The present invention provides a log management system which is devised so that improper behavior by managers with regard to the log information can easily be discovered. Virtual OS are respectively installed for respective users in a file server that can also be constructed as an NAS device. These virtual OS function as virtual NAS. The virtual OS and manager OS can exchange information relating to log information via an information exchange part constructed as a kernel. The log information produced in the virtual OS is transmitted to a first log management device via a first communications network, and is also transmitted to a second log management device via a second communications network. The respective networks are separated. As a result of the same log information being managed by multiplex management using separate management devices, it can be detected whether or not there has been any improper behavior with respect to the log information.

Abstract: When the system administrator, using an management terminal 600, changes the settings of a storage device 200, a log concentration device 400 is notified of the settings. These settings include the IP address of peripheral servers 300. On the basis of the IP address of the peripheral servers 300 of which it is notified by the storage device 200, the log concentration device 400 changes the log concentration targets. As a result, even if the system configuration of the computer system including the storage device should be modified, the log concentration device can concentrate the appropriate logs from the servers.

Abstract: A technology is provided, with which any add-on computer becomes able to automatically acquire setting information without using a distribution server or a shared disk. A computer system is provided with: a plurality of computers for network connection; a second network connected with the computers; and an add-on computer connected to both a first network and the second network. The add-on computer is any one of the computers connected to the second network, and acquires setting information from any computer connected also to the first network for setting to itself.

Abstract: A storage system connected to a network is provided which is capable of managing other devices connected to the network. A storage system (400) is connected via a switch (200) to a network (500) to provide clients (100) with data. The storage system has a control unit which sets the switch (200) and a setting command preserving unit which keeps a command for setting the switch (200). The control unit uses the preserved command to set the switch (200).

Abstract: Time information from a time server may be incorrect because of human mistakes or cracking. This may cause time errors of one year or more and then data recorded in a storage device might be altered or deleted before their retention periods expire, which would lead to serious troubles. Provided is a storage system including: a plurality of time servers that distribute time information; a time server management device that obtains the time information from the plurality of time servers and selects a most reliable time server; and a file management device that make a decision as to whether a retention period of the data recorded in the storage device ends after the time obtained from the most reliable time server and prohibits alteration and deletion of the data depending on the decision.

Abstract: To restrict actions such as spoofing and thereby prevent tapping and leakages of data by certifying whether or not each communication device such as a storage device on a communication line is to be connected to the communication line. Upon receipt of a packet that contains an IP address in its IP header and stores a certificate in its certificate payload from a storage device 300, an authentication device 200 compares an IP address that is recorded in the certificate and the IP address that is recorded on the IP header of the packet. If the comparison results in a match of these IP addresses, the authentication device 200 can certify that the storage device 300 is a device for which a certificate issuing device 100 has properly issued the certificate.