Abstract: Monitoring apparatus is configured to execute: obtaining pieces of information about access in a first time slot by specifying the first time slot including access to a first apparatus in the system where a response time is long; selecting a feature common to the access in the first time slot from the pieces of information about the access in the first time slot that have been obtained; first extracting from pieces of information about access in a given period of time, pieces of information about access that has the common feature selected as a feature common to the access in the first time slot; and first generating a first graph which shows changes with time in response time, based on the pieces of information about the access having the feature common to the access in the first time slot that have been extracted.

Abstract: It is provided an identification apparatus is configured to: obtain, from a first request group, same-type requests which are of the same type as an investigation subject request in a first request group; obtain, other-type requests that have been transmitted from a first apparatus to a second apparatus and a response to which has been transmitted from the second apparatus to the first apparatus, during a processing period; generate, for the investigation subject request and each of the same-type requests; search the generated sets for sets that have the matching other-type requests, and remove one of the found sets; obtain second requests that have been processed by the second apparatus during the processing period from the second request group; calculate, for the investigation subject request and each of the same-type requests after the removal, values of correlation with the obtained second requests.

Abstract: A monitoring system for monitoring a service execution infrastructure for providing a service to client computers via a network manages baselines of monitoring values of components per load of the service provided by the infrastructure, and uses the baselines depending on a current service load. When detecting an abnormality of a service monitoring value or component monitoring value by use of the baselines, the monitoring system compares events up to predetermined minutes ago from now with events in the baseline time zone thereby to specify a differential event (or non-normal recent event).

Abstract: To achieve a balance between reduction of a disk capacity required to maintain measurement data and retention of necessary measurement data to analyze events. A monitoring computer stores measurement data about a monitoring target computer at a plurality of points in time in a storage device, specifies an event, which has occurred at the monitoring target computer, and event occurrence time based on the measurement data, and selects part of the measurement data at the plurality of points in time as a deletion target in consideration of the measurement data which should not be deleted, based on a capacity of the storage device or a predetermined retention period of the measurement data, and a deletion exception period calculated from the event occurrence time.

Abstract: A file system corresponding to virtual hard disk files is identified, and a file size of the virtual hard disk files after optimization is calculated from the size of the volume in use of the file system so that a volume size can be ensured by the optimization is calculated. Specifically, a management server performs the above-described processing, and has the following structure. The management server is connected to a physical server that is virtually composed of virtual servers including virtual hard disks. The management server comprises a volume acquiring unit that acquires the volume in use of a first file system on the virtual hard disks; a file size acquiring unit that acquires the file size of virtual hard disk files corresponding to the first file system; and a calculating unit that calculates an optimized file size of the virtual hard disk files on the basis of a difference between the acquired volume in use and the file size.

Abstract: The present invention obtains an estimated load of a virtual machine which is scheduled to operate from estimated information which operates a virtual machine in a computer system and determines an executing entity of the virtual machine which arranges a computer to be operated before an operation starting time of a virtual machine which is scheduled to operate in the computer system from the estimated load and an actual load of the virtual machine which is being operated.

Abstract: It is provided a resource management server comprising: a resource management module for managing virtual machines and use amounts of resources used by the virtual machines for deployment; a pool management module for managing a total amount of the resources and a total amount of available resources; a requirement specification reception module for receiving an allocation requirement for a new virtual machine along with requirement specifications including amounts of resources; and a search module for searching the virtual machines for deployment included in the resource management information for virtual machines for deployment having amounts of resources that satisfy the requirement specifications, and for virtual machines for deployment which do not have the amounts of resources that satisfy the requirement specifications but which allow the amounts of resources that satisfy the requirement specifications to be secured by adding the available resources included in the pool management information.

Abstract: There is provided a failure analysis function capable of reducing the time required to resolve a failure in a piece of equipment to be monitored. When the failure analysis function senses that the status of a piece of equipment which had been abnormal has returned to normal, it displays, of failure analysis results, one based on an equipment abnormality which has been resolved in a GUI separately from the other analysis results. If a failure analysis result is derived based on a plurality of failure events, the failure analysis function displays the failure analysis result in the GUI separately from the other failure analysis results when all of the failure events are confirmed to be resolved (see FIG. 16).

Abstract: A file system corresponding to virtual hard disk files is identified, and a file size of the virtual hard disk files after optimization is calculated from the size of the volume in use of the file system so that a volume size can be ensured by the optimization is calculated. Specifically, a management server performs the above-described processing, and has the following structure. The management server is connected to a physical server that is virtually composed of virtual servers including virtual had disks. The management server comprises a volume acquiring unit that acquires the volume in use of a first file system on the virtual hard disks; a file size acquiring unit that acquires the file size of virtual hard disk files corresponding to the first file system; and a calculating unit that calculates an optimized file size of the virtual hard disk files on the basis of a difference between the acquired volume in use and the file size.

Abstract: There is provided a failure analysis function capable of reducing the time required to resolve a failure in a piece of equipment to be monitored. When the failure analysis function senses that the status of a piece of equipment which had been abnormal has returned to normal, it displays, of failure analysis results, one based on an equipment abnormality which has been resolved in a GUI separately from the other analysis results. If a failure analysis result is derived based on a plurality of failure events, the failure analysis function displays the failure analysis result in the GUI separately from the other failure analysis results when all of the failure events are confirmed to be resolved (see FIG. 16).

Abstract: A load monitoring apparatus is provided to monitor a load state of one or more information processing apparatuses in a network and to control the load of such an information processing apparatus based on the monitoring result. Such a load monitoring apparatus comprises a measured value storage unit which stores both measured values and measurement time of performance information (for example, a queue length, a response time and the like) of each information processing apparatus; a fluctuation calculation unit which reads a plurality of measured values measured in a given time from the measured value storage unit for each information processing apparatus, and calculates a fluctuation of the plurality of measured values; and a load state judgment unit which compares the fluctuation calculated with a given threshold to judge the load state of each information processing apparatus. Using a fluctuation, the load state of an information processing apparatus in the network can be detected more accurately.

Abstract: The monitoring technology capable of reducing total monitoring cost without degrading the monitoring capability in accordance with the configuration of the large-scale service system and quickly comprehending the state of the service system after the configuration change. A monitoring system in which information processing apparatuses constituting the service system are objects to be monitored has a monitoring manager program and a plurality of monitoring agent programs, and objects to be monitored having the same performance characteristics are sorted into the same groups. In each of the groups, parties where monitoring is carried out at a short monitoring interval and parties where the monitoring is carried out at a long monitoring interval are provided. The performance of objects to be monitored in the party of the long monitoring interval is estimated from the performance of the objects to be monitored in the party of the short monitoring interval.

Abstract: There is provided a file search method executed in a file search apparatus for searching for a file relevant to an application, the file search apparatus having an interface, a processor coupled to the interface, and a memory coupled to the processor. The file search method comprising the steps of: obtaining process information which includes an execution start time and file path of the application; identifying, from the obtained file path, a directory that serves as a start point in a search for a file relevant to the application; and searching, with the identified directory as the start point, for a file accessed after the execution start time of the application.

Abstract: There is provided a file search method executed in a file search apparatus for searching for a file relevant to an application, the file search apparatus having an interface, a processor coupled to the interface, and a memory coupled to the processor. The file search method comprising the steps of: obtaining process information which includes an execution start time and file path of the application; identifying, from the obtained file path, a directory that serves as a start point in a search for a file relevant to the application; and searching, with the identified directory as the start point, for a file accessed after the execution start time of the application.

Abstract: The monitoring technology capable of reducing total monitoring cost without degrading the monitoring capability in accordance with the configuration of the large-scale service system and quickly comprehending the state of the service system after the configuration change. A monitoring system in which information processing apparatuses constituting the service system are objects to be monitored has a monitoring manager program and a plurality of monitoring agent programs, and objects to be monitored having the same performance characteristics are sorted into the same groups. In each of the groups, parties where monitoring is carried out at a short monitoring interval and parties where the monitoring is carried out at a long monitoring interval are provided. The performance of objects to be monitored in the party of the long monitoring interval is estimated from the performance of the objects to be monitored in the party of the short monitoring interval.

Abstract: A symptom state shifting from a low load state to a high load state is detected. A measured value collection unit 131 stores measured values of a queue length measured by a queue length measurement unit 31 of each server 3, into a measured value storage unit 14. A fluctuation calculation unit 132 calculates a fluctuation of measured values that have been measured in a given time for each server. A symptom state judgment unit 133 compares the calculated fluctuation with a threshold to judge whether the server 3 for which the fluctuation has been calculated is in the symptom state or the high load state.

Abstract: Disclosed here is a simulator for simulating the propriety of each created policy less-expensively and fast in an autonomic management system controlled by a policy. The simulator that analyzes the behavior of the above described autonomic management system that receives information inputs of system configuration, load balance setting, system load conditions, software performance, software's transitional performance, and target autonomic management policy to calculate the system behavior (resource utilization rate, software response time, and system throughput) by giving consideration to the system's transitional behavior at a time, then apply an autonomic management policy to the behavior, determine the system configuration and load balance setting at the next time, and use the new system configuration and load balance setting for the next time simulation.

Abstract: A load distribution method is adopted by a client-server system comprising a plurality of clients 100 and a server cluster 1100, which includes a plurality of servers 800 each used for processing requests made by the clients 100 and allows the number of the servers 800 to be changed dynamically. Each of the clients 100 detects the number of servers 800 composing the server cluster 1100, sets an allocation of requests transmissible out to a newly added server 900 at a value small in comparison with that set for each of the other servers 800 right after detecting an increase in server count and then transmits out requests to the servers on the basis of the set allocation. It is thus possible to provide the clients 100 and the server-cluster system 1100 with the load distribution method suitable for a cluster reconfiguration technology for changing the number of servers composing the server-cluster system 1100 in accordance with an increase and a decrease in demand for a service.

Abstract: To provide a method for managing data processing devices, in which the misidentification of a management target can be prevented. The method for managing data processing devices is applied to a system in which a plurality of container mechanisms are provided each of which contains a plurality of data processing devices and a management unit is provided which monitors each data processing device to collect information concerning the state of the data processing devices and orders management operations to be performed on the data processing devices based on the collected information, this method for managing data processing devices including: specifying a container mechanism containing a data processing device on which a management operation needs to be performed; and displaying information about the management operation on a specified container mechanism side.