JP5098887B2 - Alarm display device and alarm display method - Google Patents

Description

  The present invention relates to an alarm display device and an alarm display method.

  Conventionally, when an abnormality or failure of a system or device has occurred, an alarm including the time of occurrence, location of occurrence, severity, etc. is displayed, and the system administrator etc. displays an abnormality based on the information contained in the alarm. Recovery, normalization, etc. For example, Patent Document 1 discloses a technique of an alarm display device that preferentially displays a system or a device in which an alarm having a high importance level is generated by setting the importance level according to the type of alarm.

JP-A-6-46135

  However, the conventional alarm display device or the like warns the system administrator of the occurrence of a failure by displaying the generated alarms sequentially. Therefore, for example, when another important alarm is generated after displaying an important alarm, new alarms are sequentially displayed. As a result, important alarms may be handled as past events and may not be displayed on the screen in some cases. Therefore, there is a problem that the system administrator cannot recognize important alarms reliably and quickly.

  Also, when multiple alarms occur in a short time, these multiple alarms are displayed together, making it difficult for the system administrator to recognize which alarm needs to be addressed, There was a problem that it was left to the administrator's judgment.

  Therefore, the present invention has been made in view of the above problems, and an object of the present invention is to display a state transition of the degree of influence and the degree of urgency due to the occurrence of an alarm in a time series. It is an object of the present invention to provide a new and improved alarm display device and alarm display method capable of preventing a failure.

  In order to solve the above problems, according to an aspect of the present invention, an alarm control server that controls alarm information related to an event such as abnormality, failure, or recovery that occurs in an apparatus or system, and alarm information that stores the alarm information In an alarm display device comprising a storage unit and an alarm display unit for displaying the alarm information, the alarm information storage unit has at least values of the degree of influence and the degree of urgency that are given to the device or system due to the occurrence of the event. Alarm definition information to be included is alarm definition data recorded for each event, and information on the status of the device or system, and includes at least the impact level and the urgency level that change due to the occurrence of the event Information stores alarm status data recorded each time the event occurs, and the alarm When the event occurs in the device or the system, the control server includes an alarm receiving unit that receives an alarm related to the event that has occurred, and the degree of influence and emergency corresponding to the alarm event received by the alarm receiving unit. An alarm definition search unit that searches the alarm definition data for alarm definition information in which a degree value is defined, and an alarm status that searches the alarm status data for the latest alarm status information recorded in the alarm status data The influence included in the alarm definition information searched by the alarm definition search unit in the values of the influence level and the urgency level included in the alarm state information searched by the search unit and the alarm state search unit An alert that calculates the new impact and urgency by adding the degree and urgency values, respectively A state control unit; and an alarm state update unit that records, in the alarm state data, latest alarm state information including at least the new influence level and the urgency value calculated by the alarm state control unit, and the alarm The display unit is provided with an alarm display device that three-dimensionally displays the state transition of the degree of influence and the degree of urgency recorded in the alarm state data.

  With this configuration, the alarm receiving unit of the alarm display device can receive an alarm related to the event that has occurred when an event such as an abnormality, failure, or recovery occurs in the device or system. In addition, the alarm definition search unit of the alarm display device has alarm definition data in which the alarm information storage unit stores alarm definition information in which values of influence level and urgency level corresponding to the alarm event received by the alarm receiving unit are defined. You can search from. In addition, the alarm state search unit of the alarm display device can search the latest alarm state information recorded in the alarm state data stored in the alarm information storage unit. In addition, the alarm state control unit of the alarm display device is included in the alarm definition information searched by the alarm definition search unit in the influence and urgency values included in the alarm state information searched by the alarm state search unit. The new influence level and urgency level can be calculated by adding the values of the impact level and the urgency level. In addition, the alarm state update unit of the alarm display device can record the latest alarm state information including at least the new influence level and urgency value calculated by the alarm state control unit in the alarm state data. Furthermore, the alarm display unit of the alarm display device can display the influence degree recorded in the alarm state data and the state transition of the emergency degree in three dimensions.

  The alarm information storage unit may further store alarm display data in which alarm display information related to display contents of the alarm display unit is recorded. In this case, the alarm display unit can also display information on the alarm based on the alarm display data.

  The alarm display information may include information on predetermined threshold values set for the influence level and the urgency level. In this case, when the impact level and the urgency level recorded in the alarm state data exceed the threshold value, the alarm display unit displays the impact level or the urgency level recorded in the alarm status data. It is also possible to display the state transition of the influence level and the urgency level with a color different from the case of being less than the threshold.

  Further, the alarm state information may include status information indicating an occurrence state of the event in the device or system. In this case, the status information includes “start” status information that means that an event such as an abnormality or failure that adversely affects the device or system has occurred, an abnormality that adversely affects the device or system, "Complete" status information, which means that a failure has been recovered, and "Continue" status information, which means that an event such as an abnormality or failure that adversely affects the device or system continues to occur And at least may be included.

  Further, a status for determining new status information based on the status information included in the alarm status information searched by the alarm status search unit and the new influence level and urgency value calculated by the alarm status control unit A change unit may be further provided.

  The status change unit may determine that the new status information is “started” when the status information included in the alarm status information searched by the alarm status search unit is “completed”. In addition, when the status information is “start” or “continuation”, when the new influence level and urgency value calculated by the alarm state control unit are 0, the new status information is changed to “ If the new influence level and the urgency level calculated by the alarm state control unit are not 0, the new status information can be determined to be “continuation”.

  The alarm state update unit may record the latest alarm state information including new status information determined by the status change unit in the alarm state data.

  When the state transition of the influence level and the urgency level at a predetermined time displayed on the alarm display unit is selected by an administrator of the alarm display device, the alarm display unit displays the selected time. It is also possible to display information included in the alarm status information.

  The alarm information storage unit may store alarm handling data in which alarm handling information including information such as a handling method, an improvement method, and a normalization method for an event that adversely affects the device or system is recorded. In this case, the alarm display unit can also display the alarm handling information recorded in the alarm handling data.

  When the state transition of the influence level and the urgency level at a predetermined time displayed on the alarm display unit is selected by an administrator of the alarm display device, the alarm display unit displays the selected time. It is also possible to display information included in the alarm handling information for the event that occurred.

  In order to solve the above problems, according to another aspect of the present invention, an alarm control server that controls alarm information related to an event such as an abnormality, failure, or recovery that occurs in an apparatus or system, and the occurrence of the event The alarm definition information including at least the values of the degree of influence and urgency on the device or system according to the above is alarm definition data recorded for each event and information on the state of the device or system, and the event An alarm information storage unit that stores alarm state data that is recorded every time the event occurs, and alarm status information that includes at least the influence level and the urgency level that are transitioned by the occurrence of the event, and displays the alarm information An alarm display method for an alarm display device comprising: an alarm display unit; An alarm reception step for receiving an alarm relating to the event that has occurred when the event has occurred, and alarm definition information in which values of the impact level and the urgency level corresponding to the alarm event received by the alarm reception step are defined The alarm definition search step for searching from the alarm definition data, the latest alarm status information recorded in the alarm status data, the alarm status search step for searching from the alarm status data, and the alarm status search step The impact level and the urgency level value included in the alarm definition information searched in the alarm definition search step are respectively added to the impact level and the urgency level value included in the searched alarm state information. Add and calculate new impact and urgency Alarm status update step for recording the latest alarm status information including at least the new impact level and urgency value calculated by the alarm status control step in the alarm status data; and There is provided an alarm display method including an alarm display step of displaying in three dimensions the state transitions of the influence level and the urgency level recorded in the state data.

  As described above, according to the present invention, it is possible to prevent a fatal failure in advance by displaying the state transition of the influence level and the urgency level due to the occurrence of the alarm in time series.

Exemplary embodiments of the present invention will be described below in detail with reference to the accompanying drawings. In addition, in this specification and drawing, about the component which has the substantially same function structure, duplication description is abbreviate | omitted by attaching | subjecting the same code | symbol. The description will be made in the following order.
1. Outline of Embodiment of the Present Invention 2. Functional configuration of alarm display device 100 Process flow 4. Display example of alarm display unit 124 Modified example (display of alarm response method)

(1. Overview of Embodiment of the Present Invention)
In describing the details of an alarm display device according to one of the embodiments of the present invention, first, an outline of the present embodiment will be described. As described above, the conventional alarm display device generally displays the generated alarms sequentially. On the other hand, the alarm display device according to this embodiment does not simply display information about alarms sequentially, but displays the influence level and urgency level of alarms in chronological order so that the state transition of the system due to alarms is 3 Display in dimension. Here, the “degree of influence” means the magnitude of the influence on an apparatus or system due to the occurrence of an alarm. The “emergency level” means the urgency of countermeasures necessary for the occurrence of an alarm. In this way, by displaying the state transition based on the alarm influence level and the urgency level in time series, the administrator visually recognizes the state of the device or system by receiving the alarm. be able to.

  In addition, when an influence level or urgency level value exceeding a preset threshold value is exceeded, an alarm can be displayed with a color different from the normal alarm display. Thus, the administrator can easily recognize an alarm that may cause a fatal failure. In addition, management information related to history such as countermeasure processing, normalization processing, prevention processing etc. performed for abnormality or failure that occurred in the device or system is managed as a database, and when the abnormality or failure occurs again, Coping information can also be displayed. As a result, the administrator can easily recognize the coping method for the displayed alarm, and can prevent a fatal failure more surely. Details of the alarm display device according to the present embodiment having the above-described features will be described below.

(2. Functional configuration of alarm display device 100)
First, a functional configuration of the alarm display device 100 according to one embodiment of the present invention will be described. FIG. 1 is a block diagram illustrating an example of a functional configuration of the alarm display device 100 according to the present embodiment.

  As shown in FIG. 1, the alarm display device 100 mainly includes an alarm control server 102, an alarm information storage unit 104, and an alarm display unit 124. As shown in FIG. 1, the alarm control server 102 mainly includes an alarm receiving unit 106, an alarm recording unit 108, an alarm definition search unit 110, an alarm definition update unit 112, an alarm state search unit 114, The alarm state update unit 116, the alarm state control unit 118, the status change unit 120, and the alarm display setting unit 122 are configured. Hereinafter, the details of each of these functional components constituting the alarm display device 100 will be described.

(Alarm receiver 106)
The alarm receiving unit 106 receives an alarm as input data from a predetermined external device, external system, or the like. The alarm receiving unit 106 receives various types of alarm information related to abnormalities / failures / recoveries that occur in an external device or an external system via a network. As described above, the alarm receiving unit 106 can receive an alarm for notifying an abnormality or failure that has occurred in an external device or the like, an alarm for notifying that the abnormality or failure has been recovered or normalized, and the like. . The external devices and external systems that can be managed by the alarm display device 100 are not limited to a specific type or number. For example, the alarm display device 100 can naturally manage alarm information for each external device or external system connected via a network. Further, the network connecting the alarm display device 100 to an external device or an external system is not limited to a specific connection method regardless of wireless or wired.

(Alarm recording unit 108)
The alarm recording unit 108 stores the alarm received by the alarm receiving unit 106 in the alarm information storage unit 104. The alarm stored by the alarm recording unit 108 is stored in the alarm information storage unit 104 as alarm recording data 150, as shown in FIG.

  FIG. 2 is an explanatory diagram showing a description example of the alarm recording data 150 stored in the alarm information storage unit 104 by the alarm recording unit 108. As shown in FIG. 2, in the alarm recording data 150, information related to the alarm received by the alarm receiving unit 106 is recorded for each received alarm. In the example shown in FIG. 2, the alarm record data 150 describes the alarm number, the reception date and time, the type of service targeted for the alarm, and the alarm event (contents) as information about the alarm. For example, the alarm No. 1 is an alarm received at 20:15:45 on August 01, 2008, and it can be seen that it is an alarm for a process failure that has occurred with respect to the mail service. The alarm recording unit 108 records information on the newly received alarm in the alarm recording data 150 configured as described above, and stores the information in the alarm information storage unit 104.

  The alarm recording data 150 shown in FIG. 2 is an example for explaining the present embodiment, and is not limited to these. That is, the alarm recording data 150 can naturally record information related to alarms other than those shown in FIG.

(Alarm definition search unit 110)
Based on the alarm information received by the alarm receiver 106, the alarm definition search unit 110 searches the alarm definition data 152 stored in the alarm information storage unit 104 for alarm definition information corresponding to the received alarm. .

  Here, the alarm definition data 152 is data in which, for each alarm event, the degree of influence of the occurrence of the event on the device / system, the degree of urgency of event resolution, and the like are defined. The alarm definition data 152 is defined in advance by, for example, an administrator of the alarm display device 100 and stored in the alarm information storage unit 104.

  FIG. 3 is an explanatory diagram illustrating a description example of the alarm definition data 152 stored in the alarm information storage unit 104. As shown in FIG. 3, in the alarm definition data 152, information regarding an event number, an event type, an influence level, and an urgency level is recorded for each alarm event as alarm definition information. For example, the example illustrated in FIG. 3 is the alarm definition data 152 regarding the mail service, the event No1 is an event regarding the process failure, the influence degree of the event is “1”, and the urgency level is “5”. I understand that. Further, event No. 2 is an event related to recovery from a process failure, and it can be seen that the impact level of the event is “−1” and the urgency level is “−5”. Similarly, event No. 3 is an event related to resource abnormality, and it can be seen that the influence degree of the event is “6” and the urgency level is “4”.

  Normally, an abnormality or failure that occurs in an apparatus or the like has different effects on the system or apparatus depending on the event that occurs. In addition, the urgency of recovery work from an abnormality or failure varies depending on the event that occurs. Therefore, the administrator of the alarm display device 100 can define in advance the degree of influence and the degree of urgency for each alarm event in the alarm definition data 152.

  Note that the values of the influence level and the urgency level of the alarm definition data 152 shown in FIG. 3 are examples for explaining the present embodiment, and are not limited to these. Further, the alarm definition data 152 can be recorded with parameters other than those shown in FIG.

  The alarm definition search unit 110 can search the alarm definition information regarding the event of the received alarm from the alarm definition data 152 saved in the alarm information storage unit 104 in this way.

(Alarm definition update unit 112)
The alarm definition update unit 112 updates the contents of the alarm definition data 152 stored in the alarm information storage unit 104 described above. An administrator of the alarm display device 100 can add / delete / change alarm definition information described in the alarm definition data 152. For example, when a new system failure, failure, virus, or the like is discovered, the administrator of the alarm display device 100 can add alarm definition information regarding these events to the alarm definition data 152. Further, when there is a failure or failure that has not been resolved and does not occur, the administrator of the alarm display device 100 can delete the alarm definition information regarding these events from the alarm definition data 152. Further, when it is desired to change the degree of influence or urgency of the alarm record information already recorded in the alarm definition data 152, the administrator of the alarm display device 100 sets the alarm definition information described in the alarm definition data 152. Can also be changed.

  The alarm definition update unit 112 can update the contents of the alarm definition data 152 in response to a request from the administrator of the alarm display device 100. The administrator of the alarm display device 100 gives an update instruction to the alarm definition update unit 112 via, for example, an operation input unit (not shown) provided in the alarm display device 100 and stores it in the alarm information storage unit 104. The alarm definition data 152 being updated can be updated.

(Alarm state search unit 114)
Based on the information about the type of service included in the alarm received by the alarm receiving unit 106, the alarm state searching unit 114 uses the alarm state data 154 stored in the alarm information storage unit 104 to update the latest alarm state regarding the service. Search for information.

  Here, the alarm status data 154 is data in which statuses such as alarm occurrence date / time, alarm event, influence level, and emergency level are recorded in time series for each type of service to be alarmed. Further, although details will be described later, the alarm status data 154 has already recovered (completed) whether the current system status with respect to the alarm, for example, whether an abnormality or failure has occurred (started) or is ongoing. ) Status information about whether it is already completed is also described.

  FIG. 4 is an explanatory diagram showing a description example of the alarm state data 154 stored in the alarm information storage unit 104. As shown in FIG. 4, in the alarm status data 154, information on the occurrence No., occurrence date / time, event, impact level, urgency level, and status is recorded as alarm status information in time series for each service to be alarmed. Has been.

  In the alarm status data 154 shown in FIG. 4, new alarm status information is recorded by an alarm status update unit 116 described later every time the alarm receiving unit 106 receives an alarm. Further, in the alarm status information newly recorded by the alarm status update unit 116, an influence level and an urgency level calculated by an alarm status control unit 118 described later are recorded. Further, the alarm status information newly recorded by the alarm status update unit 116 records the status updated by the status change unit 120 described later.

  In this way, the alarm status search unit 114 obtains the latest alarm status information related to the service targeted for the received alarm from the alarm status data 154 in which new alarm status information is recorded in response to the reception of the alarm. You can search. That is, the alarm state search unit 114 can specify the type of service that is the target of the received alarm, and can search the latest alarm state information related to the service from the alarm state data 154.

(Alarm state update unit 116)
Each time the alarm state update unit 116 receives an alarm, the alarm state update unit 116 records new alarm state information in the alarm state data 154 shown in FIG. In addition, the alarm state update unit 116 may record new alarm state information reflecting the degree of influence, the degree of urgency, and the status updated by the alarm state control unit 118 and the status change unit 120 described later in the alarm state data 154. it can. Note that an example of a processing flow in which the alarm state update unit 116 records new alarm state information in the alarm state data 154 will be described in a processing flow described later.

(Alarm state control unit 118)
The alarm state control unit 118 adds the influence level and urgency level value of the received alarm to the impact level and urgency level values recorded in the latest alarm status information searched by the alarm status search unit 114 described above. To do. As described above, the alarm state control unit 118 can recognize the influence level and the urgency level of the alarm received by the alarm reception unit 106 based on the alarm definition information searched by the alarm definition search unit 110. Further, the alarm state control unit 118 recognizes the immediately preceding influence level and urgency level regarding the service that is the target of the alarm received by the alarm receiving unit 106 based on the alarm state information searched by the alarm state searching unit 114. be able to. Therefore, the alarm state control unit 118 is recorded in the alarm definition information retrieved by the alarm definition retrieval unit 110 in the values of the influence level and the urgency level recorded in the alarm state information retrieved by the alarm state retrieval unit 114. The impact level and the urgency level value can be added.

  The influence value and the urgency value added by the alarm state control unit 118 are reflected in the alarm state information newly recorded by the alarm state update unit 116 described above. Note that an example of a processing flow in which the alarm state control unit 118 calculates the value of the influence level and the urgency level will be described in a processing flow to be described later.

(Status change unit 120)
The status change unit 120 changes status information indicating what the current state of the device / system is. As described above, the status change unit 120 can recognize the status immediately before the service that is the target of the received alarm based on the alarm status information searched by the alarm status search unit 114. Further, as described above, the status change unit 120 recognizes the latest influence level and urgency level reflecting the currently received alarm information based on the influence level and urgency level calculated by the alarm state control unit 118. be able to.

  Therefore, for example, if the value of the influence level and the urgency level immediately before the service that is the target of the alarm received this time is “0”, the status change unit 120 receives the current alarm, Change to “Start”, which means that a system error or failure has occurred. Further, when the value of the impact level and the urgency level becomes “0” due to the current alarm, the status is changed to “completed” which means that the system abnormality / failure has been recovered. In addition, if the impact and urgency values do not become “0” due to the reception of this alarm, the status is changed to “continuation”, which means that the system abnormality / failure is continuing. change.

  The status information changed by the status change unit 120 is reflected in the alarm status information newly recorded by the alarm status update unit 116 described above. Note that an example of a processing flow in which the status change unit 120 updates status information will be described in a processing flow described later.

(Alarm display setting unit 122)
The alarm display setting unit 122 sets / changes the alarm display data 156 stored in the alarm information storage unit 104.

  Here, the alarm display data 156 is data in which items to be displayed on the alarm display unit 124, display conditions, and the like are defined. The alarm display data 156 is defined in advance by, for example, an administrator of the alarm display device 100 and stored in the alarm information storage unit 104.

  FIG. 5 is an explanatory diagram illustrating a description example of the alarm display data 156 stored in the alarm information storage unit 104. As shown in FIG. 5, the alarm display data 156 describes various setting items and display conditions related to the setting items.

  In the example illustrated in FIG. 5, a condition “08/08/01 00:00:00 to 08/08/31 23:59:59” is set for the “display period” setting item. Yes. Accordingly, the alarm display unit 124 displays only information related to alarms received between 08/01/08 00:00:00 and 08/08/31 23:59:59. .

  In addition, only the “mail” service is set for the setting item of “display service”. Therefore, only alarm information related to the mail service is displayed on the alarm display unit 124. For example, by displaying the display unit 124 on two screens, it is also possible to display alarm information regarding two or more services at the same time.

  Further, “5/5” is set for the setting item of “threshold of impact and urgency”. Therefore, for example, information relating to an alarm having an impact level of 5 or more and an urgency level of 5 or more is determined to be high in importance, and alarm information is displayed in a color different from normal. For example, information regarding an alarm having an impact level and an urgency level of 5 or more may be displayed in red, and information regarding an alarm having an impact level or an urgency level of less than 5 may be displayed in blue. Thereby, the administrator can easily visually recognize an alarm having a high importance, that is, an alarm having a high possibility of causing a fatal failure. Although not shown in FIG. 5, it is naturally possible to set the type of color to be displayed. Further, the threshold value is not limited to one, and a plurality of threshold values may be set. As a result, it is possible to perform color coding step by step according to the importance of the alarm and display it on the alarm display unit 124.

  In addition, “OFF” is set for the setting item “display of completed alarm”. Therefore, the alarm display unit 124 does not display information regarding an alarm whose status is “completed”.

  Further, “ON” is set for the setting item “event display by points”. Therefore, when the administrator selects a predetermined alarm displayed on the alarm display unit 124 via the operation input unit, the alarm display unit 124 displays the event details of the details of the selected alarm. It becomes. Of course, it is possible to set so that the event details of the alarm details are always displayed regardless of the selection by the administrator.

  Note that the setting items, setting contents, and the like of the alarm display data 156 shown in FIG. 5 are examples for explaining the present embodiment, and are not limited to these. That is, the alarm display data 156 can naturally record various setting items and setting contents other than the example shown in FIG.

  The alarm display setting unit 122 can update the contents of the alarm display data 156 in response to a request from the administrator of the alarm display device 100. The administrator of the alarm display device 100 gives an update instruction to the alarm display setting unit 122 via, for example, an operation input unit provided in the alarm display device 100, and the alarm display stored in the alarm information storage unit 104 is displayed. Data 156 can be updated. That is, the administrator of the alarm display device 100 can add / delete new setting items to the alarm display data 156 and change the setting contents.

(Alarm display unit 124)
The alarm display unit 124 is a display device including, for example, a CRT (Cathode Ray Tube), an LCD (Liquid Crystal Display), an organic EL display (Organic ElectroLuminescence display), and the like. Further, the display unit 154 can receive an operation input from the user by providing a touch panel function or the like, for example.

  The alarm display unit 124 displays alarm information based on various data stored in the alarm information storage unit 104. Further, as described above, the alarm display device 100 according to the present embodiment displays the state transition of the system due to the alarm in a three-dimensional manner by displaying the degree of influence and the degree of urgency given to the device or the system by the alarm in time series. It is characterized by letting. Thereby, the administrator of the alarm display device 100 can visually recognize the state transition of the system or the device due to the alarm based on the information displayed on the alarm display unit 124.

(3. Processing flow)
Heretofore, the functional configuration of the alarm display device 100 according to the present embodiment has been described. Next, an example of the flow of various processes performed by the alarm display device 100 having the above-described functional configuration will be described.
(Alarm information display processing)
First, a flow of processing in which the alarm display device 100 according to the present embodiment displays alarm information on the alarm display unit 124 in response to reception of an alarm will be described. FIG. 6 is a flowchart showing a flow of processing in which the alarm display device 100 displays alarm information on the alarm display unit 124 in response to reception of an alarm.

  As shown in FIG. 6, first, in step 600, the alarm receiving unit 106 receives an alarm data signal related to an abnormality / failure / recovery that has occurred in an external device or an external system connected to the alarm display device 100.

  Next, in step 602, the alarm recording unit 108 records the received alarm information in the alarm recording data 150 stored in the alarm information storage unit 104. As described above, the alarm recording unit 108 can record, for example, the alarm reception date and time, the service to be alarmed, the alarm event (content), and the like in the alarm recording data 150.

  In step 604, the alarm definition search unit 110 searches the alarm definition data 152 stored in the service information storage unit 104 for alarm definition information corresponding to the alarm event received in step 600. As described above, the alarm definition data 152 records the degree of influence and the degree of urgency for each alarm event. Therefore, the alarm definition search unit 110 can recognize the influence level and the urgency value of the alarm by searching the alarm definition information corresponding to the received alarm event.

  Next, in step 606, the alarm state search unit 114 obtains the latest alarm state information corresponding to the service to be alarmed received in step 600 from the alarm state data 154 stored in the service information storage unit 104. Search for. As described above, in the alarm status data 154, alarm status information is recorded in time series for each service to be alarmed. Therefore, the alarm state search unit 114 searches the alarm state information corresponding to the service that is the target of the received alarm, and thereby the state such as the immediately preceding influence level, urgency level, and status of the external device in which the alarm has occurred. Can be recognized.

  Next, in step 608, the alarm state control unit 118 records the influence level and the urgency value recorded in the alarm definition information searched in step 604 in the alarm state information searched in step 606. Add to the impact and urgency values. Thereby, the alarm state control unit 118 can calculate the latest influence level and urgency level due to the occurrence of the alarm received at step 600 this time. Note that the values of the impact level and the urgency level calculated in this way are used for updating the alarm status information in step 620, which will be described later, and are therefore transmitted to the alarm status update unit 116.

  Next, in step 610, the status changing unit 120 checks the status status recorded in the alarm status information searched in step 606.

  As described above, the alarm status data 154 records status information indicating the current status of the external device or the like in which the alarm has occurred. As described above, the status is classified into three stages of “start”, “continue”, and “complete”. That is, in a state where there is no abnormality or failure (the values of the influence level and the urgency level are “0”), the status is “complete”. In addition, when an alarm relating to an abnormality or failure is received while the status is “complete”, the status is “start”. Further, when the status is “start” and an alarm regarding abnormality or failure is further received, the status is “continuation”. Of course, in the state where the status is “continuation”, even when an alarm relating to an abnormality or failure is received, the status is maintained as “continuation”.

  Therefore, when the status of the alarm state information retrieved in step 606 is “completed”, it means that an abnormality or failure is newly started by the alarm received in step 600 this time. Therefore, when it is determined in step 610 that the status is “completed”, in step 612, the status change unit 120 determines to change the status to “start”.

  On the other hand, if the status of the alarm status information retrieved in step 606 is “start” or “continue”, it means that an abnormality or failure has already occurred before the alarm is received in step 600 this time. means. Therefore, when it is determined in step 610 that the status is not “complete”, in step 614, the status change unit 120 indicates that both the impact level and the urgency level value calculated by the alarm state control unit 118 in step 608 are “ It is determined whether or not “0”.

  If the values of the influence level and the urgency level calculated by the alarm state control unit 118 in step 608 are both “0”, it means that the abnormality or failure of the external device or the like has been recovered by the alarm received this time. Accordingly, when it is determined in step 614 that both the impact level and the urgency level value are “0”, in step 616, the status change unit 120 determines to change the status to “completed”.

  On the other hand, if the values of the impact level and the urgency level calculated by the alarm state control unit 118 in step 608 are not “0”, it means that the abnormality or failure of the external device or the like has not been recovered by the alarm received this time. To do. In other words, it means that problems such as abnormalities and failures are still continuing in the external device where the alarm has occurred. Therefore, if it is determined in step 614 that both the impact level and the urgency level are not “0”, in step 618, the status change unit 120 determines to change the status to “continue”.

  Note that the new status information determined by the status change unit 120 in steps 612, 616, and 618 is transmitted to the alarm state update unit 116 because it is used to update the alarm state information in step 620 described later.

  Thereafter, in step 620, the alarm state update unit 116 determines the influence level and urgency level calculated by the alarm state control unit 118 in step 608 and the status information determined by the status change unit 120 in step 612, 616, or 618. Based on this, new alarm state information is recorded in the alarm state data 154. That is, the alarm state update unit 116 records the latest alarm state information including information on the degree of influence, the degree of urgency, and the status updated by the currently received alarm in the alarm state data 154 and saves it in the alarm information storage unit 104. Can be kept.

  Thereafter, in step 622, the alarm display unit 124 displays various information related to the alarm based on the alarm state data 154 recorded in step 620. As a result, the administrator of the alarm display device 100 can recognize the transition of the current and previous alarm states. A display example of alarm information by the alarm display unit 124 will be described later.

  Through the above steps, the alarm display device 100 can cause the alarm display unit 124 to display information reflecting the contents of the received alarm. Further, the alarm display device 100 can display the alarm state transition on the alarm display unit 124 by performing the process shown in FIG. 6 every time an alarm is received.

(Update process flow of alarm definition data 152)
Next, a process in which the alarm definition update unit 112 updates the alarm definition data 152 stored in the alarm information storage unit 104 will be described. As described above, the alarm definition data 152 is data that defines the value of the degree of influence or urgency due to the occurrence of an alarm for each event. In general, the degree of influence, urgency, etc. on alarms change due to the establishment of countermeasures for abnormalities and failures. In addition, when a new type of virus or the like is found, it is necessary to add the impact level and urgency level of the new event to the alarm definition data 152. Therefore, the administrator of the alarm display device 100 can appropriately change the degree of abnormality or urgency set in the alarm definition data 152, or add alarm definition information for a new event.

  FIG. 7 is a flowchart showing a flow of update processing of the alarm definition data 152 performed by the alarm definition update unit 112. As shown in FIG. 7, in step 700, the alarm definition update unit 112 receives an input of update information from the administrator. The administrator can input the updated content of the alarm definition data 152 via, for example, an operation input unit. The alarm definition updating unit 112 can accept information input in this way via the operation input unit.

  Thereafter, in step 702, the alarm definition update unit 112 updates the alarm definition data 152 stored in the alarm information storage unit 104 based on the update information input by the administrator. The alarm definition update unit 112 adds, for example, alarm definition information related to a new alarm event, deletes already recorded alarm definition information, or changes an already recorded value of influence or urgency. Can be.

(Update processing flow of alarm display data 156)
Next, a process in which the alarm display setting unit 122 updates the alarm display data 156 stored in the alarm information storage unit 104 will be described. As described above, the alarm display data 156 is data in which the period, type, condition, and the like of the alarm displayed on the alarm display unit 124 are recorded. The administrator can update the display setting of the alarm display unit 124 by arbitrarily changing the setting information recorded in the alarm display data 156 or adding a new setting condition.

  FIG. 8 is a flowchart showing a flow of update processing of the alarm display data 156 performed by the alarm display setting unit 122. As shown in FIG. 8, in step 800, the alarm display setting unit 122 receives an input of update information from the administrator. The administrator can input the updated content of the alarm display data 156 via, for example, an operation input unit. The alarm display setting unit 122 can accept information input in this way via the operation input unit.

  Thereafter, in step 802, the alarm display setting unit 122 can update the alarm display data 156 stored in the alarm information storage unit 104 based on the update information input by the administrator. For example, the alarm display setting unit 122 can add a new display setting condition, delete or change the currently recorded display setting.

(4. Display example of the display unit 124)
Next, a display example of information related to an alarm displayed on the display unit 124 according to the processing flow described above will be described. 9 to 12 are conceptual diagrams illustrating an example in which alarm information displayed on the display unit 124 is updated every time an alarm is received. 9 is a display example of the display unit 124 at time t1, FIG. 10 is a display example of the display unit 124 at time t2, FIG. 11 is a display example of the display unit 124 at time t3, and FIG. It is an example of a display of the display part 124 in the time t4. In each figure, the vertical axis represents the “influence” value recorded in the alarm state data 154, and the horizontal axis represents the “emergency” value. Further, the depth direction represents a time axis, the values of the influence level and the urgency level are displayed in three dimensions in time series, and the latest alarm information is displayed in the front side direction of the display unit 124. The setting of “display service” in the alarm display data shown in FIG. 5 assumes a case where only mail is selected.

  Of course, FIGS. 9 to 12 show one display example of the alarm display unit 124 in the present embodiment, and the display position, the vertical axis and the horizontal axis are interchanged, the size, and the like are limited to these. It is not a thing. For example, the display content of the alarm display unit 124 can be arbitrarily changed by updating the alarm display data 156 shown in FIG.

  First, referring to FIG. 9, it can be seen that an alarm display frame indicating the magnitude of the degree of influence and urgency of the alarm received at time t1 is displayed. In the example shown in FIG. 9, the alarm received at time t1 is an alarm related to the mail service, and the alarm event is a resource abnormality. Therefore, according to the alarm definition data 152 shown in FIG. 3, the influence degree of “resource abnormality” is “6” and the urgency degree is “4”. Further, since the status before time t1 is “complete” in which no abnormality or failure has occurred, the status is changed to “start” by receiving the alarm. Therefore, the alarm display frame at time t1 in the example illustrated in FIG. 9 is represented by connecting points with an influence degree of “6” on the vertical axis and an emergency degree of “4” on the horizontal axis. Further, for example, when the setting item of “event display by points” shown in FIG. 5 is set to “ON”, when the administrator of the alarm display device 100 selects the alarm display frame at time t1, FIG. As shown in FIG. 9, alarm events, impact and urgency values, status information, etc. are popped up and displayed.

  Next, when a new alarm is received at time t2, the alarm display unit 124 is updated as in the display example shown in FIG. In the example shown in FIG. 10, the alarm received at time t2 is an alarm related to the mail service, and the alarm event is a log file error. Therefore, according to the alarm definition data 152 shown in FIG. 3, the influence degree of “log file error” is “3” and the urgency degree is “3”. Therefore, as described above, the alarm state control unit 118 sets the influence degree “3” and the urgency degree “3” of the alarm received at the time t2 to the influence degree “6” and the urgency degree “4” at the time t1, respectively. to add. As a result, the influence level at time t2 of the alarm state data 154 is “9”, and the urgency level is “7”. Further, since the status before time t2, that is, at time t1, is “start”, the status change unit 120 changes the status to “continue”. Therefore, the status of the alarm state data 154 at time t2 is “continuation”.

  As a result, the alarm display frame at time t2 in the example shown in FIG. 10 is represented by connecting points with an influence degree of “9” on the vertical axis and an emergency degree of “7” on the horizontal axis. Here, the degree of influence and the degree of urgency at time t2 both exceed 5. Therefore, for example, when the setting item of “threshold (impact / urgent)” shown in FIG. 5 is set to “5/5”, the alarm display frame at time t2 is the alarm display at time t1. It is displayed in a different color from the frame. Thereby, the administrator of the alarm display device 100 can easily visually recognize an alarm that may cause a fatal failure.

  Next, when a new alarm is received at time t3, the alarm display unit 124 is updated as in the example shown in FIG. In the example shown in FIG. 11, the alarm received at time t3 is an alarm related to the mail service, and the alarm event is normal for the resource. That is, it means that the resource abnormality that occurred at time t1 has recovered at time t3. Here, according to the alarm definition data 152 shown in FIG. 3, the influence degree of “resource normal” is “−6”, and the urgency degree is “−4”. Therefore, as described above, the alarm state control unit 118 sets the influence degree “−6” and the emergency degree “−4” of the alarm received at the time t3 to the influence degree “9” and the emergency degree “7” at the time t2. Are respectively added. As a result, the influence level at time t3 of the alarm state data 154 is “3”, and the urgency level is “3”. Further, the status before time t3, that is, at time t2, is “continuation”, and the influence level and the urgency level are not “0” due to the reception of the alarm at time t3. Is done. Therefore, the status of the alarm state data 154 at time t3 is “continuation”.

  As a result, the alarm display frame at time t3 in the example shown in FIG. 11 is represented by connecting points with an influence degree of “3” on the vertical axis and an emergency degree of “3” on the horizontal axis. Here, the influence level and the urgency level at time t3 do not exceed 5. Therefore, for example, the alarm display frame at time t3 is displayed again in the same color as the alarm display frame at time t1, unlike the alarm display frame at time t2. Thereby, the administrator of the alarm display device 100 can easily visually recognize that a state in which a fatal failure may occur has been recovered.

  Next, when a new alarm is received at time t4, the alarm display unit 124 is updated as in the example shown in FIG. In the example shown in FIG. 12, the alarm received at time t4 is an alarm related to the mail service, and the alarm event is normal in the log file. That is, it means that the log file abnormality that occurred at time t2 has been recovered at time t4. Here, according to the alarm definition data 152 shown in FIG. 3, the influence degree of “log file normal” is “−3”, and the urgency degree is “−3”. Therefore, as described above, the alarm state control unit 118 sets the influence degree “−3” and the emergency degree “−3” of the alarm received at time t4 to the influence degree “3” and the emergency degree “3” at time t3. Are respectively added. As a result, the influence degree at time t4 of the alarm state data 154 becomes “0”, and the urgency degree becomes “0”. Further, the status before time t4, that is, the status at time t3 is “continuation”, and the influence level and the urgency level are both “0” due to the reception of the alarm at time t4. Change to “Complete”. Therefore, the status of the alarm state data 154 at time t4 is “completed”.

  As a result, the alarm display frame is not displayed at time t4 in the example shown in FIG.

  As described above with reference to FIGS. 9 to 12, the alarm display device 100 according to the present embodiment can display the influence level and the urgency level of the received alarm three-dimensionally in time series. Thereby, the administrator can easily visually recognize the state transition of the influence level and the urgency level of the received alarm. Further, when the influence level and the urgency level are equal to or higher than a preset threshold value, an alarm display frame having a color different from that of the normal alarm display frame can be displayed. This allows the administrator to easily visually recognize alarms that can cause fatal faults in the system, and to take measures and preventive measures before a fatal fault occurs. It is. That is, the alarm display device 100 according to the present embodiment can prevent a fatal failure in advance by displaying the state transition of the influence level and the emergency level due to the occurrence of the alarm in time series.

(5. Modified example (display of alarm handling method))
The alarm display device 100 according to the embodiment described above can further prevent a fatal failure in advance by providing another function in addition to the above-described function. As an example of such another function, an alarm display device 200 according to a modification of the above-described embodiment will be described below.

  The alarm display device 200 includes a recovery process, a countermeasure process, a prevention process, and the like applied to a system abnormality or failure in addition to the state transition of the influence level and the emergency level due to the alarm displayed by the alarm display apparatus 100 described above. The countermeasure content is displayed on the display unit 124.

  FIG. 13 is a block diagram illustrating a functional configuration of the alarm display device 200. The alarm display device 200 is different from the alarm display device 100 shown in FIG. 1 in that the alarm receiving unit 206 receives a coping method for the alarm signal together with the alarm signal, and the alarm control server 102 uses the alarm coping setting unit 226. The difference is that alarm handling data 158 is recorded in the alarm information storage unit 158. Therefore, in the following description, these differences will be mainly described.

  When an abnormality or failure that has occurred in an external device or an external system is recovered, the alarm receiving unit 206 included in the alarm control server 102 is recovered or normalized in the same manner as the alarm receiving unit 106 according to the above-described embodiment. The alarm signal is received from an external device or the like. At this time, the alarm receiving unit 206 can also receive, from an external device or the like, coping information related to the contents of processing performed when an abnormality or failure is restored or normalized. Thereafter, the alarm receiving unit 206 transmits the received handling information regarding the processing content to the alarm handling setting unit 226.

  The alarm handling setting unit 226 records the handling information received by the alarm receiving unit 206 in the alarm handling data 158 stored in the alarm information storage unit 104. Here, the alarm handling data 158 is a database in which handling information such as a handling method performed on the event or a preventive measure to be performed is recorded for each alarm event.

  The alarm handling setting unit 226 can record the handling information received by the alarm receiving unit 206 in the alarm handling data 158. In addition, for example, when an administrator inputs countermeasure information such as an arbitrary countermeasure method, prevention method, and recovery process via an operation input unit, the alarm countermeasure setting unit 226 is recorded in the alarm countermeasure data 158. The countermeasure information can be updated or new countermeasure information can be added.

  For example, in the example shown in FIG. 11, the resource abnormality related to the mail service is normalized by the alarm received at time t3. At this time, the alarm handling setting unit 226 records the contents of the processing performed when normalizing the resource abnormality in the alarm handling data 158 as handling information. Thereby, for example, when a resource abnormality relating to the mail service occurs again, the alarm display device 200 causes the alarm display unit 124 to display the countermeasure information for the mail service resource abnormality recorded in the alarm countermeasure data 158. Can do.

  FIG. 14 is a conceptual diagram illustrating a display example of the display unit 124 of the alarm display device 200. In the example shown in FIG. 14, the alarm received at time t2 is an alarm related to a resource abnormality related to the mail service, and an alarm display frame with an influence level “9” and an urgency level “7” is displayed on the display unit 124. Yes.

  Here, for example, when the administrator selects the alarm display frame at time t2, as shown in FIG. 14, a countermeasure method, a normalization process, a preventive measure, etc. that have been performed previously for a resource abnormality related to the mail service, Various countermeasure information is displayed. As a result, the administrator can easily recognize the countermeasure method, normalization process, prevention measure, and the like to be performed for the alarm displayed on the display unit 124, and the occurrence of a fatal failure can be anticipated. Can be prevented.

  As described above, the alarm display device 200 stores alarm countermeasure data 158 including countermeasure methods, normalization processing, recovery processing, and the like performed in the past for abnormalities and failures occurring in the external device or the external system. It can be stored in the unit 104. As a result, the alarm display device 200 can cause the display unit 124 to display specific contents of the countermeasure method, normalization process, and prevention measure for the received alarm based on the alarm countermeasure data 158. As a result, the administrator can easily recognize how to deal with alarms that may cause a fatal failure in the system, and can take countermeasures and preventive measures before a fatal failure occurs. It is. That is, the alarm display device 200 according to the modified example displays the state transition of the influence level and the urgency level due to the occurrence of the alarm in time series, and displays a countermeasure for the displayed alarm, thereby more reliably preventing a fatal failure. It is possible to prevent in advance.

  The preferred embodiments of the present invention have been described in detail above with reference to the accompanying drawings, but the present invention is not limited to such examples. It is obvious that a person having ordinary knowledge in the technical field to which the present invention pertains can come up with various changes or modifications within the scope of the technical idea described in the claims. Of course, it is understood that these also belong to the technical scope of the present invention.

  For example, the external devices and external systems that can be received by the alarm display devices 100 and 200 described in the above embodiment are not limited to specific types of devices and systems, specific quantities, and the like. In other words, the alarm display devices 100 and 200 can also receive alarms related to abnormalities and failures that occur in a plurality of devices and systems, and manage alarm information for each of the connected devices and systems. is there. Further, the alarm display devices 100 and 200 not only manage alarm information of connected external devices and external systems, but can also manage and display the status of an abnormality or failure of its own device as alarm information. Of course it is possible.

It is a block diagram which shows an example of a function structure of the alarm display apparatus 100 which concerns on this embodiment. 5 is an explanatory diagram illustrating a description example of alarm recording data 150 stored in an alarm information storage unit 104 by the alarm recording unit 108 in the embodiment. FIG. 4 is an explanatory diagram illustrating a description example of alarm definition data 152 stored in an alarm information storage unit 104 in the embodiment. FIG. 5 is an explanatory diagram illustrating a description example of alarm state data 154 stored in the alarm information storage unit 104 in the embodiment. FIG. 5 is an explanatory diagram illustrating a description example of alarm display data 156 stored in the alarm information storage unit 104 in the embodiment. FIG. FIG. 6 is a flowchart showing an example of a process flow in which the alarm display device 100 according to the embodiment displays alarm information on an alarm display unit 124 in response to reception of an alarm. 7 is a flowchart showing an example of a flow of processing in which an alarm definition update unit 112 according to the embodiment updates alarm definition data 152. FIG. 7 is a flowchart showing an example of a flow of processing in which an alarm display setting unit 122 according to the embodiment updates alarm display data 156. FIG. In the embodiment, it is a conceptual diagram which shows the example of a display of the display part 124 in the time t1. In the embodiment, it is a conceptual diagram which shows the example of a display of the display part 124 in the time t2. In the embodiment, it is a conceptual diagram which shows the example of a display of the display part 124 in the time t3. In the embodiment, it is a conceptual diagram which shows the example of a display of the display part 124 in the time t4. It is a block diagram showing an example of functional composition of alarm display device 200 which is a modification of the embodiment. In the modification, it is a conceptual diagram which shows the example of a display of the display part 124 which displays countermeasure information.

Explanation of symbols

100, 200 Alarm display device 102 Alarm control server 104 Alarm information storage unit 106, 206 Alarm reception unit 108 Alarm recording unit 110 Alarm definition search unit 112 Alarm definition update unit 114 Alarm status search unit 116 Alarm status update unit 118 Alarm status control unit 120 Status change part 122 Alarm display setting part 124 Alarm display part 150 Alarm record data 152 Alarm definition data 154 Alarm state data 156 Alarm display data 158 Alarm countermeasure data 226 Alarm countermeasure setting part

Claims (11)

An alarm control server that controls alarm information related to an event such as an abnormality, failure, or recovery that occurs in an apparatus or system, an alarm information storage unit that stores the alarm information, and an alarm display unit that displays the alarm information In the alarm display device:
The alarm information storage unit;
Alarm definition information including at least an impact level and an urgency level value on the device or system due to the occurrence of the event, alarm definition data recorded for each event,
Alarm status data recorded every time the event occurs, information on the status of the device or system, the alarm status information including at least the impact level and the urgency level transitioned by the occurrence of the event,
Remember
The alarm control server;
An alarm receiver for receiving an alarm relating to the generated event when the event occurs in the device or the system;
An alarm definition search unit that searches the alarm definition data for alarm definition information in which values of the impact level and the urgency level corresponding to the alarm event received by the alarm reception unit are defined;
An alarm status search unit for searching the latest alarm status information recorded in the alarm status data from the alarm status data;
The influence level and urgency level included in the alarm definition information searched by the alarm definition search unit are added to the values of the influence level and urgency level included in the alarm status information searched by the alarm state search unit. An alarm state control unit that calculates the new impact level and urgency level by adding the values of
An alarm status update unit that records the latest alarm status information including at least the new impact level and the urgency value calculated by the alarm status control unit in the alarm status data;
Including
The alarm display unit is;
An alarm display device that displays the state transition of the influence level and the urgency level recorded in the alarm status data in a three-dimensional manner. The alarm information storage unit further stores alarm display data in which alarm display information related to display contents of the alarm display unit is recorded,
The alarm display device according to claim 1, wherein the alarm display unit displays information related to the alarm based on the alarm display data. The alarm display information includes information on predetermined threshold values set for the impact level and the urgency level,
When the influence level and the urgency level recorded in the alarm state data exceed the threshold value, the alarm display unit displays the influence level or the urgency level recorded in the alarm state data as the threshold value. The alarm display device according to claim 2, wherein the state transition of the influence level and the urgency level is displayed in a color different from that in the case of being less than. The alarm state information includes status information indicating the occurrence state of the event in the device or system,
The status information includes “start” status information that means that an event such as an abnormality or failure that adversely affects the device or system has occurred, and an abnormality or failure that adversely affects the device or system. "Complete" status information that means that it has recovered, and "Continue" status information that means that an event such as an abnormality or failure that adversely affects the device or system has occurred continuously. The alarm display device according to claim 3, wherein at least the alarm display device is included.   A status change unit that determines new status information based on the status information included in the alarm status information searched by the alarm status search unit and the new influence level and urgency value calculated by the alarm state control unit The alarm display device according to claim 4, further comprising: The status change unit determines that the new status information is “start” when the status information included in the alarm status information searched by the alarm status search unit is “completed”,
When the status information is “start” or “continue”,
If the new impact level and urgency level value calculated by the alarm state control unit is 0, the new status information is determined to be “completed”;
6. The alarm display device according to claim 5, wherein when the new influence level and urgency level calculated by the alarm state control unit are not 0, the new status information is determined as “continuation”. .   The alarm display device according to claim 6, wherein the alarm state update unit records the latest alarm state information including new status information determined by the status change unit in the alarm state data. When the influence level and the urgency state transition at a predetermined time displayed on the alarm display unit are selected by an administrator of the alarm display device,
The alarm display device according to claim 1, wherein the alarm display unit displays information included in the alarm state information at the selected time. The alarm information storage unit stores alarm handling data in which alarm handling information including information such as a handling method, an improvement method, and a normalization method for an event that adversely affects the device or system is recorded,
The alarm display device according to claim 1, wherein the alarm display unit displays the alarm response information recorded in the alarm response data. When the influence level and the urgency state transition at a predetermined time displayed on the alarm display unit are selected by an administrator of the alarm display device,
The alarm display device according to claim 9, wherein the alarm display unit displays information included in alarm handling information for an event that occurred at the selected time. An alarm control server that controls alarm information related to events such as abnormalities, failures, and recovery occurring in devices and systems;
Alarm definition information including at least an impact level and an urgency level value on the device or system due to the occurrence of the event, alarm definition data recorded for each event,
Alarm status data recorded every time the event occurs, information on the status of the device or system, the alarm status information including at least the impact level and the urgency level transitioned by the occurrence of the event,
An alarm information storage unit for storing
An alarm display unit for displaying the alarm information;
An alarm display method in an alarm display device comprising:
An alarm receiving step of receiving an alarm regarding the occurred event when the event occurs in the device or the system;
An alarm definition search step of searching the alarm definition data for alarm definition information in which values of the impact level and the urgency level corresponding to the alarm event received in the alarm reception step are defined;
An alarm status search step of searching the latest alarm status information recorded in the alarm status data from the alarm status data;
The influence level included in the alarm definition information searched by the alarm definition search step is added to the value of the influence level and the urgency level included in the alarm state information searched by the alarm state search step. An alarm state control step that calculates the new impact and urgency by adding the urgency values respectively;
An alarm state update step of recording the latest alarm state information including at least the new influence level and the urgency value calculated by the alarm state control step in the alarm state data;
An alarm display step for displaying in three dimensions the state transition of the degree of influence and the degree of urgency recorded in the alarm state data;
The alarm display method characterized by including.

Images