Information processor, control method, and program

Abstract

To solve a problem that the conventional technology has an insufficient mechanism for appropriately managing log information stored in an information processor.SOLUTION: An information processor, which includes a storage device and can store and manage a history of file operations performed on a file stored in the storage device via a network as log information in a log storage area within the storage device, includes: output means that outputs a message notifying a user that a free space in the log storage area falls below a fixed amount according to the log information stored in the storage device; and control means that controls, according to a first setting for transferring the log information stored in the log storage area to an external log server via the network and a second setting for creating a link for referencing the log information stored in the log storage area, such that log data corresponding to a history of file operations is not stored as the log information in the log storage area.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present invention relates to a technique for managing log information in an information processing device that provides a storage function and is connected to a network. [Background technology]

[0002] Regarding information processing devices such as network attached storage (NAS), information processing devices having a log management function for recording and saving the history of file operations performed within the information processing device as log information are becoming widespread. The log management function makes it possible to output the log information or link information to the log information to a shared folder, etc., so that the log information can be referenced from other client PCs.

[0003] Furthermore, the log management function can transfer log information to an external log server such as a syslog server or an rsyslog server. Syslog and rsyslog are standards for transferring log data over a network.

[0004] Regarding the function of transferring logs to an external log server, there is a technology described in Patent Document 1. In Patent Document 1, when a client device and a log server cannot be connected via a network, the log is stored in the client device, and when the connection is established, the log stored in the client device is sent to the server. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2006-330791 A Summary of the Invention [Problem to be solved by the invention]

[0006] In the log management function described above, there is an upper limit to the data size of the storage area in which log information can be stored. Therefore, when file operations in the information processing device are performed frequently, the data size of the history information to be stored may exceed the upper limit. To address this, a warning message can be displayed on the display of the information processing device when the free space in the log storage area falls below a certain amount to encourage the administrator of the information processing device to manually delete or move the log information. Furthermore, when the free space in the log storage area runs out, old history records can be automatically deleted and new history can be saved as log information. However, even in the latter case, the administrator may need to check the contents of the log information to see if it is OK to delete it. If the upper limit is approaching, it can be said that deletion is necessary soon and the deadline for completing the confirmation is approaching, and the confirmation work in such a case can be particularly troublesome for the administrator.

[0007] Incidentally, some of the history recorded as log information does not need to be recorded and kept, and if such historical data is not saved for longer than necessary, the limit may not be exceeded in the first place.

[0008] History that does not need to be kept may exist, for example, when log transfer settings to a log server are configured. This is a setting that assumes that multiple information processing devices are managed centrally in an external log server, and there is no need to store log information in the information processing device for a long period of time.

[0009] In addition, history that does not need to be kept may also occur, for example, when the log information stored in an information processing device is not set to be referenced from other client PCs. This is presumably because the aforementioned log server is used for centralized management of logs, and if reference settings are not set, there is no need to access the information processing device individually to check the stored log information.

[0010] In addition, there may be a history that does not need to be saved, for example, when the log transfer to the log server is successful. Here, even if the log transfer to the log server is set, it is considered necessary to store the log information for which the transfer process has failed in the information processing device.

[0011] The present invention provides a mechanism for appropriately managing log information in an information processing device, taking into consideration at least any one of a plurality of conditions including the above-mentioned example conditions. [Means for solving the problem]

[0012] The present invention is an information processing device that is equipped with a storage device and can store and manage a history of file operations performed on files stored in the storage device via a network as log information in a log storage area within the storage device, and is characterized by having an output means for outputting a message notification in response to the free space in the log storage area falling below a certain amount based on the log information stored in the storage device, a setting means for setting a first setting for transferring the log information stored in the log storage area to an external log server via the network and a second setting for creating a link for referencing the log information stored in the log storage area, and a control means for controlling log data corresponding to the history of file operations not to be stored as log information in the log storage area in accordance with the log transfer in accordance with the first setting and the creation of the link in accordance with the second setting. Effect of the Invention

[0013] According to the present invention, it is possible to provide a mechanism for managing log information in an information processing device more appropriately than in the past, by taking into consideration several conditions. [Brief description of the drawings]

[0014] [Figure 1] Overall system configuration diagram. [Diagram 2] FIG. 2 is a block diagram showing an example of the hardware configuration of each device. [Diagram 3]FIG. 2 is a block diagram showing an example of a software configuration of an information processing device. [Figure 4] 11 is a flowchart illustrating a process related to log storage in the first embodiment. [Diagram 5] 4 is an example of an initial setting screen in the first embodiment. [Figure 6] 13 is a flowchart illustrating a process related to log storage in the second embodiment. [Figure 7] 13 is a flowchart illustrating a process related to log storage in the third embodiment. [Figure 8] 13 is an example of an initial setting screen in the third embodiment. [Figure 9] 13 is an example of a management screen in the fourth embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

[0016] Example 1 1 is a diagram showing an example of the overall configuration of a system according to this embodiment. An information processing device 100, a client terminal 101, and a log server 102 are connected to a network 110 and are capable of communicating with each other. In this embodiment, one device is shown, but multiple devices of each device may be connected to the network 100.

[0017] The information processing device 100 is a device that provides a storage function connected to a network, such as a NAS (Network Attached Storage). The information processing device 100 has a file sharing function and a log function for detecting each operation on a file system, recording each operation as a history, and saving the operation as log information. The file sharing function includes the creation of shared folders and access right management, as well as file operations such as creating, editing, and deleting files.

[0018] The client terminal 101 is a client terminal through which a user performs file operations on the information processing device 100 .

[0019] The log server 102 has a function of receiving log information from various information devices and managing it in a centralized manner. For example, it is a syslog server or an rsyslog server that receives log messages via a network. In this embodiment, for example, the log server 102 receives and accumulates log information such as a file operation log from the information processing device 100. An administrator can check the accumulated log information and monitor abnormal access to files, etc.

[0020] Fig. 2 is a block diagram showing an example of a hardware configuration of the information processing device 100 shown in Fig. 1. In addition to the information processing device 100 of this embodiment, the client terminal 101 and the log server 102 may adopt the hardware configuration of a general information processing device as shown in Fig. 2.

[0021] The CPU 200 controls the overall operation by reading out the control program stored in the ROM 201 and executing various processes. The RAM 202 is used as a temporary storage area such as the main memory and work area of ​​the CPU 200. The storage device 203 is a large-capacity storage unit that stores files and various programs operated from the client terminal 101. A portion of the storage area of ​​the storage device 203 is provided to the outside as a storage service via the network. Log information is also stored in a portion of the storage device 203. The communication device 204 is an interface that connects the information processing device to the Internet. The CPU 200 accepts file operations from the client terminal via the communication device 204.

[0022] The display device 206 displays the status of the information processing device, etc., and also displays a setting screen for receiving instructions from the user. The display device 206 can also display a warning message when the free space in the log storage area falls below a certain amount. The user issues setting instructions to the information processing device and performs file operations by inputting characters and data using an input device 205 such as a keyboard and a mouse.

[0023] Fig. 3 is a block diagram showing an example of a software configuration of the information processing device 100 in the embodiment 1. The software configuration shown in Fig. 3 is realized by the CPU 200 reading a program stored in the ROM 201, for example, into the RAM 202 and executing it.

[0024] The setting management unit 301 stores settings related to various functions of the information processing device 100 in each storage device such as the RAM 202 and the storage device 203, and reads them from each storage device. Here, the setting is, for example, the setting of a location for saving and sharing files (hereinafter, a shared folder). It also includes the setting of the storage period and log file size of the log information, the transfer destination of the log information, and the link information to the log information shown in FIG. 5.

[0025] The operation management unit 302 detects file operations in the information processing device 100, generates a history indicating the time and operation content, and saves the log information in a predetermined storage destination. The storage destination may be a fixed folder in the storage device 203 in the information processing device, or may acquire a log storage destination setting (not shown) from the setting management unit 301. Alternatively, it may be a database or the like. The communication unit 303 communicates with, for example, a client terminal and a log server, and realizes the reception of file operations and the transmission of log information. The operation management unit 302 also has a functionality to automatically delete the log information saved in the log saving area according to predetermined conditions such as the upper limit of the saved file in the saving destination, the upper limit of the saving area, and the possible saving period.

[0026] The data storage unit 304 stores setting values ​​and files in the storage device 203 in response to a request from the setting management unit 301 or the client terminal 101. The file is stored in a shared folder that can be operated from the client terminal 101, for example.

[0027] The UI control unit 305 displays a screen on the display device 206 in response to a request from the user or the setting management unit 301. For example, the UI control unit 305 displays an initial setting screen or a management screen shown in FIG. 5, or a screen for setting an e-mail destination (not shown) on the display device 206, and stores setting values ​​specified via the setting management unit 301 in each storage device. The e-mail control unit 306 transmits e-mail to an e-mail address specified in advance by the user in response to a request from the setting management unit 301 or the operation management unit 302. In addition, a user who can access a shared folder of the information processing device 100 may be restricted using an authentication function (including an external authentication service) (not shown).

[0028] 4 is a flowchart for explaining a process related to log storage when a file operation is detected by the operation management unit 302 of the information processing device 100 according to this embodiment. Each step indicates a process realized by the CPU 200 executing a program.

[0029] 5 shows examples of an initial setting screen 500 and a management screen 510 related to log storage provided by the information processing device 100. The UI control unit 305 of the information processing device 100 uses a web server function to provide the screen to a web browser. The setting items related to log storage shown on the initial setting screen 500 are set in advance as the initial settings of the information processing device 100.

[0030] The process shown in FIG. 4 is executed when the operation management unit 302 of the information processing device 100 detects a file operation on a previously set shared folder based on a request from a client terminal or the like.

[0031] In S402 , the operation management unit 302 generates a log indicating a history including the date and time, details, etc. of the detected file operation, and stores the log in the RAM 202 .

[0032] In S403, the operation management unit 302 acquires setting information from the setting management unit 301, and checks whether the log transfer destination setting is valid. Specifically, it checks whether the radio button "Enable" is selected in "Log Transfer Destination Setting" 501 in Fig. 5. In S403, if the "Log Transfer Destination Setting" is valid, the process proceeds to S404, and if it is not valid, the process proceeds to S405.

[0033] 5, if "Enable" is selected in the "Log Transfer Destination Settings" radio button 501, an input check is performed on the "Log Server Information" indicating the transfer destination when the "OK" button is pressed. This ensures that the transfer destination is specified when the "Log Transfer Destination Settings" is enabled. The value specified in "Log Server Information" 501 is, for example, the IP address of the log server. Therefore, in S403, only the radio button selection value can be checked.

[0034] In S404, the operation management unit 302 transfers data including the log stored in RAM 202 in S402 to the destination specified in "log server information" 501 via the communication unit 303. The operation management unit 302 also stores in RAM 202 or the like, via the communication unit 303, whether or not the log transfer has been performed and the transfer result (information on whether or not the log has been transferred). Note that the log to be transferred may be the log stored in RAM 202 in S402 converted into a format compatible with the destination, or may be saved in a transfer file.

[0035] In S405, the operation management unit 302 acquires setting information from the setting management unit 301, and checks whether the log link creation setting is enabled. Specifically, it checks whether the radio button "Enable" is selected in "Log link creation setting" 502 in Fig. 5. In S405, if the "Log link creation setting" is enabled, the process proceeds to S406, and if it is not enabled, the process proceeds to S408.

[0036] 5, if "Enable" is selected in the radio button of "Log link creation setting" 502, an input check of "Link creation destination" is performed when the "OK" button is pressed. This ensures that the link destination is specified when "Log link creation setting" is enabled. In S405, only the radio button selection value can be confirmed.

[0037] In S406, the operation management unit 302 outputs the log data recorded in the RAM 202 in S402 to a log file as one record of log information via the data storage unit 304. This makes it possible to store a file operation log as log information in a storage device within the information processing device 100. In S407, the operation management unit 302 creates a link to the log information output in S406 in the shared folder specified in "link creation destination" 502 via the data storage unit 304. Using this link, the contents recorded in the log can be confirmed from the client terminal 101 via the network.

[0038] In S408, the operation management unit 302 checks whether the log data recorded in RAM 202 in S402 was transferred in S404, or checks information on the success or failure of the transfer. If the log transfer has not been executed or has failed, the process proceeds to S409. In S409, the operation management unit 302 outputs the log data recorded in RAM 202 in S402 to the log file via the data storage unit 304 as one record of log information.

[0039] Here, it is assumed that the management screen 510 will be periodically referred to by the administrator of the information processing device 100. Therefore, on the management screen 510, the overall system status of the information processing device 100 can be confirmed, and for example, "CPU usage" 512, "memory usage" 513, "system information" 514, etc. of the information processing device are displayed.

[0040] Then, when the free space of the storage area (log storage area) secured in the storage device for log information falls below a certain amount due to the log storage in S406 or S409, the UI control unit 305 may display notification information indicating the lack of free space in the log storage area on the management screen 510. For example, in "notification information" 511, a message such as "There is insufficient free space in the storage area for log files" is displayed. This is a notification output to the administrator of the information processing device 100.

[0041] Similarly, if the free space in the log storage area falls below a certain amount in S406 or S409, the email control unit 306 may send an email to an email address specified in advance (not shown). This allows the administrator of the information processing device 100 to be notified by email of the lack of free space in the log storage area.

[0042] Furthermore, if the free space in the log storage area becomes full due to log storage in S406 or S409, log storage in S406 or S409 may be executed after deleting the log data showing the oldest history among the stored log information. Here, when saving a log in the log storage area, the log is written to a log file. The upper limit of the file size of this log file is, for example, the "log file size" shown in "log storage setting" 503 in Fig. 5. In "log storage setting" 503, the "storage period" for saving log data in the information processing device 100 can also be specified, and past log information that has passed the storage period can be automatically deleted.

[0043] Example 2 In the second embodiment, an example will be described in which unnecessary logs are deleted from a log file after the logs are stored in the information processing device 100. The unnecessary case here assumes a case in which the log has already been transmitted to the log server and there is no plan for other client PCs to refer to the log (the link creation setting is disabled).

[0044] The configuration and processing not specifically stated are the same as those in the first embodiment.

[0045] Fig. 6 is a flowchart for explaining a process related to log storage in the second embodiment. The following mainly explains the differences from Fig. 4.

[0046] The process shown in FIG. 6 is also executed when the operation management unit 302 of the information processing device 100 detects a file operation on a previously set shared folder based on a request from a client terminal or the like.

[0047] In S602, the operation management unit 302 generates a log indicating a history including the date and time, contents, etc. of the detected file operation, and stores it in the RAM 202. In S603, similar to S406 or S409, the operation management unit 302 outputs the log data recorded in the RAM 202 in S602 to a log file as one record of log information via the data storage unit 304. This makes it possible to store the file operation log as log information in the storage device within the information processing device 100.

[0048] In S604 and S605, the same processing as in S403 and S404 is executed. In addition, in S606 and S607, the same processing as in S405 and S407 is executed. In addition, in S607, the operation management unit 302 creates a link to the log information in the shared folder specified in "link creation destination" 502 via the data storage unit 304. Using this link, the contents recorded in the log can be confirmed from the client terminal 101 via the network.

[0049] In S608, the same process as in S408 is executed. If it is determined in S608 that the log transfer has been completed or that the log transfer has been successful, in S609, the operation management unit 302 deletes the log data stored in S603 via the data storage unit 304.

[0050] Example 3 In the third embodiment, in addition to the processes described in the first and second embodiments, an embodiment will be described in which the user can specify in advance whether or not to automatically delete log data. Note that the configuration and processes that are not specifically stated are all the same as those in the first and second embodiments.

[0051] Fig. 7 is a flowchart for explaining the process related to log storage in the third embodiment. The difference from Fig. 4 will be mainly explained. The process shown in Fig. 7 is also executed when the operation management unit 302 of the information processing device 100 detects a file operation on a shared folder that has been set in advance based on a request from a client terminal or the like. In addition, Fig. 8 also explains an example of an initial setting screen related to log storage in this embodiment.

[0052] The setting items 801 to 803 on the setting screen 800 shown in Fig. 8 are the same as the items 501 to 503 described in Fig. 5, and therefore the description will be omitted. On the setting screen 800, when the radio button "Enable" is selected in "Log transfer destination setting" 801 and the radio button "Disable" is selected in "Log link creation setting" 802, the radio button of "Automatic log deletion setting" 804 becomes selectable. In "Automatic log deletion setting" 804, it becomes possible to select whether to enable or disable the function of automatically deleting log data when the conditions listed in Fig. 7 described later are satisfied.

[0053] S702 to S707 are the same as S402 to S407 in FIG. 4, and therefore the description will be omitted.

[0054] In S708, the operation management unit 302 acquires setting information from the setting management unit 301, and checks whether the automatic log data deletion setting is enabled or not according to the designation in "automatic log deletion setting" 804. In S708, if it is determined that the automatic log data deletion setting is enabled, the process proceeds to S709, and if it is determined that the automatic log data deletion setting is not enabled, the process proceeds to S710. Here, in S709 to S710, the same process as in S408 to S409 is executed.

[0055] In this way, in this embodiment, it is possible to clearly confirm with the user whether or not he or she wishes to automatically delete logs.

[0056] (Application Example 1 of Example 3) In the above description, the difference between this embodiment and embodiment 1 has been described. This embodiment can also be applied to embodiment 2. In that case, a process equivalent to S708 is executed immediately before S608 shown in FIG.

[0057] If the radio button “Enable” is selected in “Log transfer destination setting” 801 and “Automatic log deletion setting” 804, and if it is determined that the log transfer is successful, the deletion process in S609 may be automatically executed.

[0058] (Application Example 2 of Example 3) Also, when the radio button "Disable" is selected for "Log link creation settings" on the setting screen 800 shown in FIG. 8, the radio button (enable or disable) for "Log automatic deletion settings" 804 may be made selectable.

[0059] Example 4 This embodiment shows an example in which a link to log information is displayed on the management screen.

[0060] Fig. 9 shows another form of the management screen 510 in Fig. 5. The management screen 900 in Fig. 9 is provided by the UI control unit 305 of the information processing device 100 as a web server function via a network.

[0061] In the management screen 900, information similar to that in 511 to 514 described above with reference to FIG.

[0062] In "Log Reference" 905, a link to the log information output by the operation management unit 302 in accordance with the processes in S407, S607, and S707 in each embodiment is placed. In this embodiment, in addition to a link to display the file operation log, a link to display the system log related to the system is also displayed.

[0063] When the administrator uses the input device 205 to select a link placed in "Log View" 905, the contents of the shared folder or log file in which the target log information is placed are displayed. The administrator can also send this link by email or the like. The link may simply be displayed on the management screen, like "Log View" 901 in this embodiment.

[0064] (Other Examples) The present invention also includes an apparatus or system configured by appropriately combining the above-described embodiments, and a method thereof.

[0065] Here, the present invention is a device or system that executes one or more pieces of software (programs) that realize the functions of the above-mentioned embodiments. Also, a method for realizing the above-mentioned embodiments executed by the device or system is also one aspect of the present invention. Also, the program is supplied to the system or device via a network or various storage media, and the program is read into one or more memories by one or more computers (CPU, MPU, etc.) of the system or device and executed. In other words, as one aspect of the present invention, the program itself, or various storage media that store the program and can be read by a computer, are also included. Also, the present invention can be realized by a circuit (e.g., ASIC) that realizes the functions of the above-mentioned embodiments. [Explanation of symbols]

[0066] 100 Information processing device 101 Client terminals 102 Log Server 110 Network

Claims

1. An information processing device comprising a storage device, capable of storing and managing a history of file operations on a file stored in the storage device via a network as log information in a log storage area within the storage device, a setting means for setting a first setting for transferring log information to an external log server via a network, and a second setting for creating a link for referencing the log information stored in the log storage area; When link creation is enabled in the second setting, a history of file operations is saved as log information in the log saving area, When link creation is disabled in the second setting, the history of file operations that have already been transferred according to the first setting is not saved as log information in the log saving area, and the history of file operations that have not yet been transferred is saved as the log information in the log saving area.

1. An information processing device comprising:

2. An information processing device as described in Claim 1, further characterized in that it has an output means for outputting a message notification in response to the log information stored in the storage device causing the free space in the log storage area to fall below a certain amount.

3. An information processing device as described in Claim 1, further characterized in that it has a providing means for providing a screen including a link for referencing log information stored in the log storage area when link creation is enabled in the second setting.

4. 2. The information processing apparatus according to claim 1, further comprising: a providing unit that provides, via a network, a screen for a user to perform the first setting and the second setting.

5. 1. A control method for an information processing device that includes a storage device and that can store and manage a history of file operations on files stored in the storage device via a network as log information in a log storage area within the storage device, comprising: a setting step of setting a first setting for transferring log information to an external log server via a network and a second setting for creating a link for referencing the log information stored in the log storage area, When link creation is enabled in the second setting, a history of file operations is saved as log information in the log saving area, When link creation is disabled in the second setting, the history of file operations that have already been transferred according to the first setting is not saved as log information in the log saving area, and the history of file operations that have not yet been transferred is saved as the log information in the log saving area. A control method comprising:

6. An information processing device includes a storage device, and is capable of storing and managing a history of file operations on a file stored in the storage device via a network as log information in a log storage area in the storage device, A program for executing a setting means for setting a first setting for transferring log information to an external log server via a network, and a second setting for creating a link for referencing the log information stored in the log storage area, When link creation is enabled in the second setting, a history of file operations is saved as log information in the log saving area, When link creation is disabled in the second setting, the history of file operations that have already been transferred according to the first setting is not saved as log information in the log saving area, and the history of file operations that have not yet been transferred is saved as the log information in the log saving area. A program characterized by:

Images