IT Log Analysis Information Distribution System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IT system log analysis techniques struggle to distribute log analysis information effectively between organizations, leading to increased management costs and inefficiencies in failure detection and handling, as they do not consider distribution and management rules, resulting in unclear relationships between contents and unnecessary duplication.
Innovation Solution
An information distribution system comprising monitoring devices and a sharing device that collect, merge, and manage know-how information, including detection and handling procedures, and distribute it across organizations, using unique identification numbers to aggregate log messages and manage contents and rules consistently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If log analysis information is distributed between organizations without standardized management rules, then information sharing capability is improved, but management complexity and duplication increase
Solution Approach 1:
The patent applies universality by creating a standardized management rule system that can be universally applied across different organizations. The sharing device implements common identification number assignment, content management rules, and metadata standards that enable multiple organizations to share log analysis information using the same framework, thus improving information sharing capability while avoiding management complexity through standardization
Solution Approach 2:
The patent changes the parameter of information management by introducing standardized identification numbers, classification categories, and metadata parameters. These parameter changes enable consistent representation of log analysis information across different organizations, allowing efficient sharing without duplication while reducing management complexity through uniform parameter structures
2Reliability
If each organization manages log analysis information independently with own rules, then management control is improved, but information distribution efficiency deteriorates
Solution Approach 1:
The patent applies segmentation by dividing the information management system into independent yet standardized components. Each organization maintains control over its own log analysis information through local monitoring devices that collect and initially process data according to their specific needs. The sharing device then segments information into standardized categories using common identification numbers and metadata structures, enabling efficient distribution while preserving organizational management control
Solution Approach 2:
The sharing device acts as an intermediary between organizations with independent management rules. It receives log analysis information from various monitoring devices, applies standardized management rules including identification number assignment and content classification, and distributes processed information to requesting organizations. This intermediary function enables efficient information distribution while maintaining the reliability of independent organizational control
3Ease of manufacture
If log messages are not aggregated with identification numbers, then processing simplicity is improved, but analysis accuracy and efficiency deteriorate
Solution Approach 1:
The patent applies copying by creating standardized identification number representations of log messages. Instead of processing raw log messages directly, the system creates copied representations in the form of identification numbers that reference standardized content. This copying approach maintains processing simplicity through standardized data structures while improving analysis accuracy by enabling precise matching and aggregation of similar log messages across different organizations
4Adaptability or versatility
If know-how information is not merged and managed centrally, then organizational autonomy is improved, but information availability across organizations deteriorates
Solution Approach 1:
The patent applies merging by combining log analysis information from multiple organizations into a centralized management structure at the sharing device. The sharing device merges information using standardized identification numbers, content categories, and metadata, creating a unified knowledge base that is available to all participating organizations. This merging approach improves information availability across organizations while managing system structure complexity through standardized consolidation rules
Data Source
AI summary
An information distribution system includes a plurality of monitoring devices that monitor Information Technology (IT) systems associated with respective monitoring devices, and a sharing device that transmits and receives information to and from the monitoring devices, wherein each of the plurality of monitoring devices includes first processing circuitry configured to provide the sharing device with know-how information including at least detection information and handling procedure information, the detection information being information for detecting a failure based on a log message output from the corresponding IT system, the handling procedure information being information in which a log message related to each failure and a handling procedure for the failure are associated with each other, and acquire the know-how information managed by the sharing device, and the sharing device includes second processing circuitry configured to collect the know-how information provided by the plurality of monitoring devices, and merge the collected know-how information.