Abstract: The present invention relates to a method for monitoring a computer system in which one manager computer is connected to a plurality of agent computers over a network. The manager computer sends information on the types of log to be collected to the plurality of agent computers. In response, the plurality of agent computers collect the specified types of log. Then, the plurality of agent computers send the collected logs to the manager computer. Thus, the plurality of agent computers are able to collect the types of log specified by the manager computer.

Abstract: The present invention relates to a method for monitoring a computer system in which one manager computer is connected to a plurality of agent computers over a network. The manager computer sends information on the types of log to be collected to the plurality of agent computers. In response, the plurality of agent computers collect the specified types of log. Then, the plurality of agent computers send the collected logs to the manager computer. Thus, the plurality of agent computers are able to collect the types of log specified by the manager computer.

Abstract: When a computer as a logical connection destination which detected a search objective user issues a search request to first one of computers which established logical connections associated with the search objective user, the first computer selects users who used my computer in a use time of the search objective user, and executes the search request over the computers which established the logical connections associated with the selected users. The same search request is sequentially carried out over m candidates of the logical connection originator computer of my computer down to an m-th computer. Search results (a computer identifier of my computer and user identifiers of the selected users) obtained by the m computers are collected in the respective computers and returned to the logical connection destination computer in an order opposite to the search request order.

Abstract: A managing computer is provided having an acquiring device for acquiring log information and event information from among a plurality of computers connected via a network to each other into a common database of the managing computer. A data controller may be provided for storing into the common database of the managing computer, operation definition information used to define a schedule of process operations executed in the plurality of computers in relation to the log information and the event information acquired by the acquiring device. A display device may display the operation definition information in relation to event information related to a process operation defined by the operation defining information with reference to the information stored in the database.

Abstract: A detection method of an illegal access to a computer system includes a step a) of collating user identification information inputted from an input unit in one or more log-in operations with user authentication information registered in the computer system, a step b) of detecting the number of times that the identification information is not coincident with the authentication information in a series of log-in operations within a predetermined term, a step c) of obtaining final log-in information indicating whether the identification information is coincident with the authentication information or not in a final log-in operation, and a step d) of comparing the number of times in respect to the incoincidence and the final log-in information with a predetermined judgment standard to thereby detect the presence of the illegal access.

Abstract: A computer for gathering log data includes a device for normalizing the log data by cutting out values corresponding to pre-defined data items from log data in log files of respective computers on the alert and re-arranging the values of data items defined, and storing the normalized log data therein and a device for gathering the stored normalized log data into a computer having a manager function. Further, when the normalized log data have log data output times corrected on the basis of a time of the computer having the manager function, the normalized log data are stored in order of the corrected log data output times.

Abstract: In a computer system to which a plurality of computers are connected, a managing computer manages operations performed in the respective computers in an integrated manner, or manages the operations in relation to the computers themselves. As a result, problems occurring in the processes can be easily solved, and furthermore a load on a network is reduced. The managing computer manages a series of operations in an integrated manner in which when an operation is executed by each of the plurality of computers, or by the respective computers in combination with each other, the managing computer performs an operation designated when a specific event happens to occur on a computer. The managing computer displays each of the operations executed on the computers by a symbol; displays an execution sequence of the operations by a link with a direction among symbols; and further displays an execution condition of the computer by a color of a symbol.

Abstract: An identifier of each management module is obtained on the basis of management information commonly handled by network management information and administration management information, and management information of the two is collected on the basis of the identifier, and a client/server configuration map is generated, and a network map corresponding to the map is displayed from the display element of the generated configuration map on the basis of the correspondence of the two, and the client/server configuration is displayed in relation to the network map, and an administrative role and a related object node can be identified easily.

Abstract: When a computer as a logical connection destination which detected a search objective user issues a search request to first one of computers which established logical connections associated with the search objective user, the first computer selects users who used a searched computer in a use time of the search objective user, and executes the search request over the computers which established the logical connections associated with the selected users. The same search request is sequentially carried out over m candidates of the logical connection originator computer of the searched computer down to an m-th computer. Search results (a computer identifier of the searched computer and user identifiers of the selected users) obtained by the m computers are collected in the respective computers and returned to the logical connection destination computer in an order opposite to the search request order.

Abstract: A hierarchical communication network management system is structured by a plurality of agents and sub-managers connected to lower communication networks and an integration manager connected to a higher communication network. Each of the sub-managers functions as an agent to the integration manager and functions as a manager to each agent, so that it becomes possible to employ a Simple Network Management Protocol (SNMP) between each agent and its sub-manager and between a sub-manager and the integration manager.