Log management system, log management method, and log management program

Abstract

To optimize the amount of log data sent from an electronic device to a server.SOLUTION: A log management system comprises a failure occurrence rate calculation unit, a log level setting unit, and a log output ratio calculation unit. The failure occurrence rate calculation unit calculates the failure occurrence rate of each of a plurality of modules on the basis of log information of a plurality of electronic devices. The log level setting unit sets a log level for each of the plurality of modules of a specific electronic device on the basis of the failure occurrence rate of each of the plurality of modules of the plurality of electronic devices. The log output ratio calculation unit calculates the log output ratio of each of the plurality of modules of a specific electronic device on the basis of the log levels.SELECTED DRAWING: Figure 4

Description

[Technical Field]

[0001] The present disclosure relates to a log management system, a log management method, and a log management program that manage the amount of log transmission from an electronic device. [Background technology]

[0002] When a malfunction occurs in an electronic device, the electronic device transmits a log acquired by the electronic device to a server, and the server analyzes the malfunction. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2007-241540 [Patent Document 2] Patent No. 7293975 [Patent Document 3] Japanese Patent Application Publication No. 08-179974 Summary of the Invention [Problem to be solved by the invention]

[0004] When a malfunction occurs in an electronic device, the size of the log acquired by the electronic device becomes large, and accordingly, the amount of communication required to send the log from the electronic device to the server increases. Conversely, if the log size is fixed, the amount of communication required to send the log from the electronic device to the server can be reduced, but there is a risk that the log that is effective in resolving the malfunction may not be acquired.

[0005] In view of the above circumstances, an object of the present disclosure is to optimize the amount of logs sent from an electronic device to a server. [Means for solving the problem]

[0006] A log management system according to an embodiment of the present disclosure includes: a failure occurrence rate calculation unit that calculates a failure occurrence rate for each of a plurality of modules based on log information of a plurality of electronic devices; a log level setting unit that sets a log level for each of the plurality of modules of a specific electronic device based on a failure occurrence rate of each of the plurality of modules of the plurality of electronic devices; a log output ratio calculation unit that calculates a log output ratio of the plurality of modules of the specific electronic device based on the log level; It is equipped with:

[0007] A log management method according to an embodiment of the present disclosure includes: Electronic equipment computers, setting a log level for each of a plurality of modules of a specific electronic device based on a failure rate of each of the plurality of modules of the plurality of electronic devices; Based on the log level, a log output ratio of the plurality of modules of the specific electronic device is calculated.

[0008] A log management program according to an embodiment of the present disclosure includes: Electronic equipment computers, a log level setting unit that sets log levels for a plurality of modules of a specific electronic device based on a failure occurrence rate for each of the plurality of modules of the plurality of electronic devices; a log output ratio calculation unit that calculates a log output ratio of the plurality of modules of the specific electronic device based on the log level; Operate as. [Effects of the Invention]

[0009] According to the present disclosure, the amount of logs sent from an electronic device to a server can be optimized.

[0010] The effects described here are not necessarily limited to those described herein, and may be any of the effects described in this disclosure. [Brief explanation of the drawings]

[0011] [Figure 1] 1 illustrates a log management system according to an embodiment of the present disclosure. [Figure 2]1 shows a hardware configuration of an image forming apparatus when the electronic device is an image forming apparatus. [Figure 3] 1 shows the functional configuration of a log management system. [Figure 4] 1 shows the operation flow of the log management system. [Figure 5] Examples of log levels and log output rates are shown below. DETAILED DESCRIPTION OF THE INVENTION

[0012] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings.

[0013] 1. Log Management System

[0014] FIG. 1 illustrates a log management system according to an embodiment of the present disclosure.

[0015] The log management system 1 includes a log management server 20 and a plurality of electronic devices 10 connected to the log management server 20 via a network N. The electronic devices 10 are, for example, image forming devices such as MFPs (Multifunction Peripherals), and may be referred to as image forming devices 10 hereinafter. The electronic devices 10 transmit their own log information (operation logs, job logs, operation logs, etc.) to the log management server 20. The log management server 20 analyzes the log information from the electronic devices 10.

[0016] 2. Image forming equipment

[0017] FIG. 2 shows the hardware configuration of an image forming apparatus when the electronic device is an image forming apparatus.

[0018] The image forming apparatus 10 includes a control circuit 100 that constitutes a computer. The control circuit 100 is composed of a processor, such as a CPU 11a (Central Processing Unit), a RAM 11b (Random Access Memory), a ROM 11c (Read Only Memory), and dedicated hardware circuits, and is responsible for overall operational control of the image forming apparatus 10. The CPU 11a loads an information processing program stored in the ROM 11c into the RAM 11b and executes it to perform the operations described in the operational flow below and control the display and operational input of the touch panel 17. The ROM 11c permanently stores the programs and data executed by the CPU 11a. The ROM 11c is an example of a non-transitory computer-readable recording medium.

[0019] The control circuit 100 is connected to an image reading unit 12 (image scanner), an image processing unit 14 (including a GPU (Graphics Processing Unit)), an image memory 15, an image forming unit 16 (printer), a touch panel (front panel) 17 which is an operation unit equipped with a display unit 17a, a large-capacity non-volatile storage device 18 such as an HDD (Hard Disk Drive) or an SSD (Solid State Drive), a facsimile communication unit 19, and a network communication interface 13 (communication unit). The control circuit 100 controls the operation of each of the above-mentioned connected units and transmits and receives signals or data to and from each unit. The operation unit of the touch panel 17 is one form of input device, and a voice input device including a microphone may be provided as the input device.

[0020] 3. Functional configuration of the log management system

[0021] FIG. 3 shows the functional configuration of the log management system.

[0022] In the control circuit 100 constituting the computer of the electronic device 10, the CPU 11a loads a log management program recorded in the ROM 11c into the RAM 11b and executes it, thereby operating as a log information transmission unit 110, a malfunction occurrence rate reception unit 120, a log level setting unit 130, and a log output ratio calculation unit 140.

[0023] In the control circuit 200 constituting the computer of the log management server 20, the CPU operates as a malfunction occurrence rate calculation unit 210 and a malfunction occurrence rate transmission unit 220 by loading a program recorded in the ROM into the RAM and executing it.

[0024] 4. Log management system operation flow

[0025] FIG. 4 shows the operation flow of the log management system.

[0026] The log information transmission units 110 of the multiple electronic devices 10 periodically or at a predetermined timing transmit log information to the log management server 20 (step S1). The log information is, for example, an operation log, a job log, an operation log, or the like.

[0027] The failure occurrence rate calculation unit 210 of the log management server 20 calculates the failure occurrence rate for each of the multiple modules based on the log information of the multiple electronic devices 10 (step S2). In this specification, a module is synonymous with a function realized by the cooperation of hardware and software, such as a scan function using the image reading unit 12 (image scanner) of the image forming device 10, a print function using the image forming unit 16 (printer), and a facsimile function using the facsimile communication unit 19. Specifically, the failure occurrence rate calculation unit 210 calculates the failure occurrence rate for each of the multiple modules for each model and software version of the electronic device 10.

[0028] For example, the malfunction rate of module A of multiple image forming devices 10 is 40%, the malfunction rate of module C is 25%, the malfunction rate of module D is 25%, the malfunction rate of module B is 10%, and the malfunction rate of module E is 0%.

[0029] The failure occurrence rate transmitting unit 220 of the log management server 20 transmits to each electronic device 10 the failure occurrence rate corresponding to the model and software version of the electronic device 10 (step S3).

[0030] The malfunction occurrence rate receiving unit 120 of each electronic device 10 receives from the log management server 20 the malfunction occurrence rate corresponding to the model and software version of this electronic device 10. The log level setting unit 130 of the electronic device 10 sets (updates) the log levels of the multiple modules AE of its own device (specific electronic device) 10 based on the malfunction occurrence rate of each of the multiple modules of the multiple electronic devices 10 (step S4).

[0031] The log output ratio calculation unit 140 calculates the log output ratio of the multiple modules AE of the local device (specific electronic device) 10 based on the log levels of each of the multiple modules AE (step S5). Specifically, the log output ratio calculation unit 140 sets a score for each of the multiple log levels, and calculates the log output ratio of each of the multiple modules AE based on the number and scores of the modules AE to which each of the multiple log levels is set.

[0032] FIG. 5 shows an example of log levels and log output rates.

[0033] As shown in (A), the default values ​​of the log levels 301 of multiple modules AE (values ​​before updating in step S4) may all be the same level (medium level). If the log levels of multiple modules AE are the same, the log output ratios 302 of the multiple modules AE are also the same (100 / 5=20%).

[0034] As shown in (B), the log level setting unit 130 may classify multiple modules AE into multiple log levels 311 according to the value of the failure occurrence rate 310. Specifically, if the failure occurrence rate is greater than 30%, the level may be high, if the failure occurrence rate is greater than 10% but not greater than 30%, the level may be medium, if the failure occurrence rate is 10% or less, the level may be low, etc. In this example, module A (failure occurrence rate 40%) is at the high level, modules C and D (failure occurrence rate 25%) are at the medium level, and module B (failure occurrence rate 10%) and module E (failure occurrence rate 0%) are at the low level.

[0035] The log output ratio calculation unit 140 sets a score 313 for each of a plurality of log levels (high, medium, low). For example, the log output ratio calculation unit 140 sets the scores 313 as follows: 4 points for the high level, 2 points for the medium level, and 1 point for the low level.

[0036] The log output ratio calculation unit 140 calculates the log output ratio 312 for each of the multiple modules AE based on the number and scores of modules AE each set to one of multiple log levels (high, medium, low). For example, there is one module (A) set to a high level (4 points), two modules (C, D) set to a medium level (2 points), and two modules (B, E) set to a low level (1 point). 4 points x 1 module + 2 points x 2 modules + 1 point x 2 modules = 10 units. 100% / 10 units = 10% (per unit). Therefore, the log output ratio of module A set to a high level is 10% x 4 points = 40%, the log output ratios of modules C and D set to a medium level are 10% x 2 points = 20%, and the log output ratio of modules B and E set to a low level is 10% x 1 point = 10%.

[0037] As shown in (C), when a malfunction occurs in a specific module (e.g., modules A and E) in the own device (specific electronic device) 10, the log level setting unit 130 may set the log level of the specific modules A and E to a high level. Specifically, in the malfunction occurrence rate 320 of the own device (specific electronic device) 10, the malfunction occurrence rates of modules A and E are 80% and 20%. In this case, the malfunction occurrence rate of module E is 20%, which is a medium level (greater than 10% and equal to or less than 30%), but is exceptionally set to a high level as shown in log level 321.

[0038] In this case, there are two modules (A and E) set to a high level (4 points), two modules (C and D) set to a medium level (2 points), and one module (B) set to a low level (1 point). 4 points x 2 + 2 points x 2 + 1 point x 1 = 13 units. 100% / 13 units = 7.7% (per unit). Therefore, the log output ratio of module A, which is set to a high level, is 7.7% x 4 points = 30.8%, approximately 30%. The log output ratios of modules C and D, which are set to a medium level, are 7.7% x 2 points = 15.4%, approximately 15%. The log output ratios of modules B and E, which are set to a low level, are 7.7% x 1 point = 7.7%, approximately 10%.

[0039] Thereafter, the electronic device 10 acquires logs of the multiple modules AE of the device itself based on the log output ratio (%) calculated by the log output ratio calculation unit 140, and transmits the logs to the log management server 20. This makes it possible to optimize the amount of communication by not sending logs of modules that are stable and have no malfunctions.

[0040] As a modified example, the log management server 20 may have the functions of the log level setting unit 130 and the log output ratio calculation unit 140 .

[0041] 5. Conclusion

[0042] When a malfunction occurs in an electronic device, the size of the log acquired by the electronic device becomes large, and accordingly, the amount of communication required to send the log from the electronic device to the server increases. Conversely, if the log size is fixed, the amount of communication required to send the log from the electronic device to the server can be reduced, but there is a risk that the log that is effective in resolving the malfunction may not be acquired.

[0043] Therefore, according to this embodiment, log information (operation log / job log / operation log, etc.) is acquired, a log level is set based on the malfunction occurrence rate of each module, and the amount of logs to be sent is automatically optimized according to the log level. As a result, logs with high log levels account for a higher proportion of the total. Conversely, logs with low log levels (low malfunction occurrence frequency) account for a smaller proportion. The log level can be dynamically changed based on the results of collecting and analyzing log information from multiple electronic devices 10 connected to the log management server 20. This reduces the amount of communication when sending logs from the electronic devices 10 to the log management server 20, optimizing the amount of logs sent from the electronic devices 10 to the log management server 20, and enabling logs that are effective in resolving malfunctions to be sent to the management server 20.

[0044] Although the embodiments and modified examples of the present technology have been described above, the present technology is not limited to the above-described embodiments, and it goes without saying that various modifications can be made within the scope of the gist of the present technology. [Explanation of symbols]

[0045] Log Management System 1 electronic equipment 10 Log information transmission unit 110 Defect occurrence rate receiving unit 120 Log level setting unit 130 Log output ratio calculation unit 140 Log management server 20 Defect occurrence rate calculation unit 210 Malfunction occurrence rate transmission unit 220

Claims

1. a failure occurrence rate calculation unit that calculates a failure occurrence rate for each of a plurality of modules based on log information of a plurality of electronic devices; a log level setting unit that sets a log level for each of the plurality of modules of a specific electronic device based on a failure occurrence rate of each of the plurality of modules of the plurality of electronic devices; a log output ratio calculation unit that calculates a log output ratio of the plurality of modules of the specific electronic device based on the log level; A log management system comprising:

2. 2. The log management system according to claim 1, The defect occurrence rate calculation unit calculates the defect occurrence rate of each of a plurality of modules for each model and software version of the electronic device. Log management system.

3. 2. The log management system according to claim 1, When a malfunction occurs in a specific module of the specific electronic device, the log level setting unit sets the log level of the specific module to a high level. Log management system.

4. 4. The log management system according to claim 1, The log output ratio calculation unit sets a score for each of a plurality of log levels, and calculates a log output ratio for each of the plurality of modules based on the number of modules to which each of the plurality of log levels is set and the scores. Log management system.

5. 4. The log management system according to claim 1, a management server having the defect occurrence rate calculation unit; the plurality of electronic devices each having the log level setting unit and the log output ratio calculation unit; Equipped with The log level setting unit and the log output ratio calculation unit of each electronic device calculate the log level and the log output ratio of the specific electronic device itself. Log management system.

6. Electronic equipment computers, setting a log level for each of a plurality of modules of a specific electronic device based on a failure rate of each of the plurality of modules of the plurality of electronic devices; Calculating a log output ratio of the plurality of modules of the specific electronic device based on the log level. Log management methods.

7. Electronic equipment computers, a log level setting unit that sets log levels for a plurality of modules of a specific electronic device based on a failure occurrence rate for each of the plurality of modules of the plurality of electronic devices; a log output ratio calculation unit that calculates a log output ratio of the plurality of modules of the specific electronic device based on the log level; A log management program that acts as a

Images