Abstract: An apparatus receives messages having a linking keyword for identification of a transaction, classifies the received messages in terms of transaction using message patterns and the linking keyword. It compares a series of messages associated with the transaction with the message patterns. It makes a decision as to whether the series of messages associated with the transaction matches any one of the message patterns. It creates a record including an identifier for the transaction and the linking keyword. It searches for the unclassified messages based on the linking keywords contained in the unclassified messages, and identifies the record containing the identical linking keyword. It stores the identifiers for the unclassified messages into a linked candidate list in a corresponding manner to linked candidate transactions. It adds the unclassified messages to the message pattern which corresponds to the linked candidate transaction to create a new message pattern.

Abstract: A character string which is unique in each transaction and a character string common to different transactions are extracted from a message log obtained when the same transaction is processed for a plurality of number of times. Then, messages stored by practically operating an information system are associated with each transaction by utilizing these character strings, and the character string common to the transactions of which execution times overlap with each other is deleted, so that the remained character strings are provided as linking keywords.

Abstract: An apparatus has a unit that receives plural messages, which belong to plural transactions and respectively have a pertinent transaction identifier, in an indefinite order; plural processors each having a queue storing the messages belonging to a transaction in charge, and outputting, after the messages belonging to one of the transactions in charge have become complete, the complete messages in the queue to a message processing unit; an allocation unit that outputs the received message to one of the plural processors, wherein one of the processors is identified based on the transaction identifier of the received message and an allocation rule predetermined for the transaction identifier; and a change unit that changes the allocation rule when activating or stopping the processor. When the change unit changes the allocation rule, each of the processors outputs at least messages for which re-allocation is necessary to the allocation unit.

Abstract: A linkage support system links related messages among a plurality of messages sent and received among a plurality of communication terminals. The linkage support system includes an information acquisition unit that acquires message types of the plurality of messages, character strings included in the plurality of messages, and amount of data flow when the character strings are transferred. An unnecessary character strings exclusion unit that excludes character strings that are not required as keywords for linkage processing, based on the information acquired by the information acquisition unit, and a processing order determination unit determines order for using a plurality of character strings from which unnecessary character strings are excluded by the unnecessary character strings exclusion unit.

Abstract: A server management system includes a management server and a mail server. The management server includes a source determination unit and an alert mail creator. The source determination unit determines as a source a symbol identifying a failure cause of a system according to the failure cause. The alert mail creator creates an alert mail with the source and with the system administrator of the system as a destination. The mail server sends the alert mail to a terminal device that the system administrator uses.

Abstract: A trouble-factor detecting device retrieves data packets on a transaction, determines whether the retrieved data is abnormal, and counts an access count and an abnormality count of the data in associated with each of resources that is accessed in the transaction. Moreover, the trouble-factor detecting device calculates an abnormality ratio of each of the resources based on the access count and the abnormality count, and selects a trouble factor that could cause a trouble in the system to be managed based on the abnormality ratio.

Abstract: The present invention provides an apparatus for evaluating the performance of an MP system which is configured, to simulate the MP system highly accurately and speedily, in such a way as to comprise: a trace-data sampling part for sampling execution-trace data for each processor; a trace-data conversion part for converting execution-trace data sampled for each processor by the trace-data sampling part, thus estimating substantial processing time in the processor; and a simulation part for performing simulation of the MP system based on the processing time estimated for each processor by the trace-data conversion part, in order to evaluate the performance of the MP system.