Abstract: A computer system includes a business system operating services each providing a function corresponding to a request. the computer system comprises: a controller generating a schedule for changing an allocation amount of a resource of the business system for a service; and an allocation change unit changing the allocation amount of the resource for the service based on the schedule. The controller calculates in a case of detecting reception of a request for starting processing, a reception count of the detected request; identifies related services; calculate a predicted value of an index indicating a load of each of the related services based on the reception count of the request; determines whether it is necessary to change the allocation amount of the resource for the each of the related services; and generates the schedule of a determined related service.

Abstract: A failure analysis support system calculates a failure analysis period based on a metric performance value of a bottleneck candidate resource and a metric base value corresponding to the metric performance value, identifies a bottleneck candidate related resource related to the bottleneck candidate resource by referring to inter-resource relation information, calculates an evaluation value of the bottleneck candidate related resource based on a metric performance value of the bottleneck candidate related resource and a metric base value corresponding to the metric performance value, identifies a to-be-displayed bottleneck candidate related resource from the bottleneck candidate related resource based on the evaluation value, and displays a mutual relationship between display resources including a base point resource, a base point-related resource, the bottleneck candidate resource, and the to-be-displayed bottleneck candidate related resource, and a status of the display resources at each time point in the fa

Abstract: A method for a storage monitoring system including a storage device, a manager, and agents, wherein said manager: stores information about a first range of components of a first type that are among types of components included in the storage device, and that are to be monitored by a first agent of the agents, said stored information being associated with information about the first agent; notifies the first agent of the information about the first range of components to be monitored; stores information about a second range of components of the first type that are among the types of components, and that are to be monitored by a second agent of the agents, said stored information being associated with information about the second agent; and notifies the second agent of the information about the second range of components to be monitored.

Abstract: Provided is a performance information management system which includes a target apparatus having a plurality of components as monitoring targets and a management computer for managing the target apparatus and which manages performance information of the target apparatus with the management computer, wherein the target apparatus is capable of acquiring performance information for each monitoring target, and the management computer is configured to: allocate an initial storage area of which capacity differs for each monitoring target to each of the monitoring targets; detect depletion of a storage area allocated to a monitoring target when attempting to store the performance information of the monitoring target to the storage area; additionally allocate a consecutive storage area with a prescribed capacity to the monitoring target with the depleted storage area; and store the performance information of the monitoring target in the additionally-allocated storage area.

Abstract: A monitor system transmits a request requesting event occurrence information to multiple node apparatuses, detects occurrence of an event on the basis of event occurrence information included in a response, calculates an index value of each of conclusions of multiple rules indicating corresponding relationship between one or more condition events and a conclusion, and generates, at a predetermined time point, a snapshot indicating an index value at that time point. When the monitor system receives a first response in reply to a first request, the monitor system updates the index value indicated by the snapshot generated in a period from a transmission date/time of the first request to a reception date/time of the first response, on the basis of the first response.

Abstract: A method for a storage monitoring system including a storage device, a manager, and agents, wherein said manager: stores information about a first range of components of a first type that are among types of components included in the storage device, and that are to be monitored by a first agent of the agents, said stored information being associated with information about the first agent; notifies the first agent of the information about the first range of components to be monitored; stores information about a second range of components of the first type that are among the types of components, and that are to be monitored by a second agent of the agents, said stored information being associated with information about the second agent; and notifies the second agent of the information about the second range of components to be monitored.

Abstract: Provided is a performance information management system which includes a target apparatus having a plurality of components as monitoring targets and a management computer for managing the target apparatus and which manages performance information of the target apparatus with the management computer, wherein the target apparatus is capable of acquiring performance information for each monitoring target, and the management computer is configured to: allocate an initial storage area of which capacity differs for each monitoring target to each of the monitoring targets; detect depletion of a storage area allocated to a monitoring target when attempting to store the performance information of the monitoring target to the storage area; additionally allocate a consecutive storage area with a prescribed capacity to the monitoring target with the depleted storage area; and store the performance information of the monitoring target in the additionally-allocated storage area.

Abstract: A monitoring system performs cause analysis of an event occurring in any of a plurality of monitoring-target objects to be monitored based on a rule. In this case, the monitoring system makes a detection during the analysis time width and determines a plurality of conclusions based on an event corresponding to the condition for determining the conclusion. Moreover, the monitoring system performs one or more of (A) displaying change of certainty to be used for determination of a conclusion in a case where the analysis time width is assumed to be changed, (B) performing sort display of the determined conclusion based on an index value showing an affected range and (C) calculating the analysis time width based on the index value.

Abstract: In analyzing an elaborate computer system which requires large-scale or numerous event propagation models, a law-of-causality matrix gains size, so that significant amount of storage resources has been used in a management computer. To solve such a problem, the management computer to manage the computer system stores topologies, event propagation models, and causality information including one or more causal relations in the storage resources, determines, when the management computer analyzes or detects an event, whether a causal relation has already been created for the event to be analyzed, and creates the causal relation based on a topology and event propagation models, if not yet.

Abstract: To analyze the cause if an event occurred to a plurality of monitoring targets. A monitoring computer 101 includes a general rule storing part 136 configured to store a general rule, wherein the general rule previously associates a first event which can occur in any of the plurality of monitoring targets and a second event which can cause the first event, an correlation rule generating part 129 configured to generate an correlation rule, wherein the correlation rule is created based on the general rule and configuration information, and in the case where a predetermined number or more of events corresponding to the second events are detected, the correlation rule indicates that an event corresponding to the first event will occur, and an analyzing part 125 configured to analyze a cause of an event indicated by the event information based on received event information and the correlation rule.

Abstract: A management server includes a meta rule for identifying an event to be a root cause and a failure recovery method that corresponds to the meta rule for an event capable of occurring in a plurality of node apparatuses, and also displays a cause event to be a root cause of an event detected by the management server, and a method for recovering from this cause event.

Abstract: A monitor system transmits a request requesting event occurrence information to multiple node apparatuses, detects occurrence of an event on the basis of event occurrence information included in a response, calculates an index value of each of conclusions of multiple rules indicating corresponding relationship between one or more condition events and a conclusion, and generates, at a predetermined time point, a snapshot indicating an index value at that time point. When the monitor system receives a first response in reply to a first request, the monitor system updates the index value indicated by the snapshot generated in a period from a transmission date/time of the first request to a reception date/time of the first response, on the basis of the first response.

Abstract: In analyzing an elaborate computer system which requires large-scale or numerous event propagation models, a law-of-causality matrix gains size, so that significant amount of storage resources has been used in a management computer. To solve such a problem, the management computer to manage the computer system stores topologies, event propagation models, and causality information including one or more causal relations in the storage resources, determines, when the management computer analyzes or detects an event, whether a causal relation has already been created for the event to be analyzed, and creates the causal relation based on a topology and event propagation models, if not yet.

Abstract: A control unit of an information processing unit defines one or more monitoring target groups including a monitoring target device or a component of the monitoring target device as input by a monitoring user; and wherein when a first component is included in the monitoring target group, a failure occurs at a second component, and there is a specified relationship between the first component and the second component, and if a status of the first component is to be displayed via the monitoring target group, the control unit displays that the first component is in a critical state; and if the status of the first component is to be displayed without intermediary of the monitoring target group, the control unit displays that the first component is in a normal state and the first monitoring target device or the second component is in a critical state.

Abstract: A monitoring system quantifies either a configuration change or a status change of a monitoring target, and displays a change value thereof. Furthermore, the monitoring target refers to either a monitoring-target apparatus or a component of a monitoring-target apparatus. Moreover, in a case where multiple monitoring information acquisition intervals are used a change value may be computed and displayed for each of multiple monitoring targets. There may also be a case in which a time axis of a chronological graph of monitoring numeric values and a time axis of a chronological graph of change values are displayed collectively.

Abstract: In analyzing an elaborate computer system which requires large-scale or numerous event propagation models, a law-of-causality matrix gains size, so that significant amount of storage resources has been used in a management computer. To solve such a problem, the management computer to manage the computer system stores topologies, event propagation models, and causality information including one or more causal relations in the storage resources, determines, when the management computer analyzes or detects an event, whether a causal relation has already been created for the event to be analyzed, and creates the causal relation based on a topology and event propagation models, if not yet.

Abstract: A system management apparatus for managing a computer system receives plug-in distribution data from a plug-in distribution apparatus. The plug-in distribution data comprises plug-in definition information and template definition information. The system management apparatus uses the plug-in definition information to acquire information from the management target apparatus, and determines whether or not to issue an alert based on the template definition information. The distribution of the plug-in and the template at the same time means that the user can avoid confusion regarding the threshold setting.

Abstract: A monitoring system performs cause analysis of an event occurring in any of a plurality of monitoring-target objects to be monitored based on a rule. In this case, the monitoring system makes a detection during the analysis time width and determines a plurality of conclusions based on an event corresponding to the condition for determining the conclusion. Moreover, the monitoring system performs one or more of (A) displaying change of certainty to be used for determination of a conclusion in a case where the analysis time width is assumed to be changed, (B) performing sort display of the determined conclusion based on an index value showing an affected range and (C) calculating the analysis time width based on the index value.

Abstract: A monitoring system performs cause analysis of an event occurring in any of a plurality of monitoring-target objects to be monitored based on a rule. In this case, the monitoring system makes a detection during the analysis time width and determines a plurality of conclusions based on an event corresponding to the condition for determining the conclusion. Moreover, the monitoring system performs one or more of (A) displaying change of certainty to be used for determination of a conclusion in a case where the analysis time width is assumed to be changed, (B) performing sort display of the determined conclusion based on an index value showing an affected range and (C) calculating the analysis time width based on the index value.

Abstract: The present invention achieves data relocation in accordance with a user's policies, in an environment where a plurality of storage devices coexist. The volumes belonging to storage devices A-D are managed virtually integrally. A host recognizes a plurality of storage devices A-D as a single virtual storage device. The user is able to group arbitrarily each volume belonging to the storage system, as a plurality of storage layers 1-3. For example, storage layer 1 can be defined as a high-reliability layer, storage layer 2, as a low-cost layer, and storage layer 3, as an archive layer. Each storage layer is constituted by a group of volumes corresponding to respective policies (high reliability, low cost, archiving). The user designates volumes V1 and V2 to be moved, in group units, and indicates a storage layer forming a movement destination, whereby the data is relocated.