Method for controlling managing computer, medium for storing control program, and managing computer

A managing computer is provided having an acquiring device for acquiring log information and event information from among a plurality of computers connected via a network to each other into a common database of the managing computer. A data controller may be provided for storing into the common database of the managing computer, operation definition information used to define a schedule of process operations executed in the plurality of computers in relation to the log information and the event information acquired by the acquiring device. A display device may display the operation definition information in relation to event information related to a process operation defined by the operation defining information with reference to the information stored in the database.

BACKGROUND OF THE INVENTION

The present invention is related to a managing computer connected to a network to which a plurality of computers are connected, for managing these computers. More specifically, the present invention is directed to a technique capable of managing administrate operations executed in the respective computers in a batch mode by the managing computer.

Managing computers for managing administrate operations are described in U.S. Pat. No. 5,169,655 entitled to Weng et al., and U.S. Pat. No. 5,642,508 entitled to Miyazawa. The administrate operations involve a job execution process; and a process executed when a specific event occurs.

In a large-scaled computer system where a plurality of administrate operations may be combined with each other to be executed, since definitions as to the respective administrate operations must be separately performed and also execution results must be independently confirmed, the management for the total computer system can be hardly carried out.

More specifically, in a large-scaled computer system, there are certain possibilities that a plurality of administrate operations which are executed in combination with each other are executed over a plurality of computers. Under such a circumstance, in order to realize a total management as a computer system, processed contents as to all of administrate operations may be preferably defined and execution results thereof may be preferably confirmed by using a single computer, namely a single managing computer.

However, in the case that the definitions of the processed contents and the confirmations of the execution results as to all of the administrate operations may be performed by one managing computer, since the managing computer must be communicated with the respective computers, a specific care should be paid to the network traffics.

SUMMARY OF THE INVENTION

Therefore, an object of the present invention is to realize such a computer system to which a plurality of computers are connected. In this computer system, a managing computer for managing these computers can manage administrate operations executed in the respective computers are managed in a batch mode.

Furthermore, another object of the present invention is to avoid such that an extra load is given to a network connecting a managing computer group, which is caused by an operation managing computer.

To achieve the above-described object, there is provided a managing computer comprising:an acquiring device for acquiring log information and event information from any of plural computers connected via a network to each other, said log information indicating as to whether or not an execution of an operation process is carried out under normal condition, and said event information indicating concisely as to whether or not an execution of an operation process is carried out under normal condition;a data controller for storing into a database, operation definition information used to define a schedule of process operations executed in said plural computers in relation to said log information and said event information acquired by said acquiring device; anda display device for displaying said operation definition information in relation to event information related to a process operation defined by said operation definition information with reference to the information stored in said database. It is possible to provide a managing computer, according to a first aspect of the present invention, is featured by such a managing computer connected to a network to which a plurality of computers are connected, for managing these computers, comprising:acquisition means for acquiring log information indicative of an execution result of an administrate operation executed in each of the computers and also event information indicative of an event occurred in an execution stage of the administrate operation from each of said computers;storage means for into a database, operation definition information in which a schedule of the administrate operations executed in the respective computers, and also the log information and the event information acquired by said acquisition means; anddisplay means for displaying the operation definition information related to the respective computers in relation to log information and event information of an administrate operation defined by the operation definition information with reference to the information stored into the database by the storage means.

Also, a managing computer, according to a second aspect of the present invention, is featured by such a managing computer connected to a network to which a plurality of computers are connected, for managing these computers, comprising:acquisition means for acquiring log information indicative of an execution result of an administrate operation executed in each of the computers and also event information indicative of an event occurred in an execution stage of the administrate operation from each of said computers;storage means for into a database, operation definition information in which a schedule of the administrate operations executed in the respective computers, and also the log information and the event information acquired by said acquisition means; anddisplay means for displaying both a region for describing a list of administrate operations defined by the operation definition information related to each of the computers and also another region for describing log information of said computer on the same screen with reference to the information stored into the database by the storage means. It is possible to display relative information between an event and event definition information together with either of them.

Also, a managing computer, according to a third aspect of the present invention, is featured by such a managing computer connected to a network to which a plurality of computers are connected, for managing these computers, comprising:definition means for forming in a batch mode both a schedule of each of administrate operations and operation definition information in which a computer which should execute each of the administrate operations is defined;distribution means for distributing the operations definition information;acquisition means for acquiring the operation definition information individually formed by the computers from the respective computers and operation definition information in which a portion of the operation definition information distributed by the distribution means and related to the own computer is expanded by the computer from the distributed operation definition information, and also for acquiring log information indicative of an execution result of an administrate operation executed in each of the computers and also event information indicative of an event occurred in an execution stage of the administrate operation from each of said computers;storage means for into a database, the operation definition information acquired by the acquisition means, and also the log information and the event information acquired by the acquisition means; anddisplay means for displaying the operation definition information related to the respective computers in relation to log information and event information of an administrate operation defined by the operation definition information with reference to the information stored into the database by the storage means.

It should be understood that each of the computers managed by the managing computer according to the third aspect many expand the operation definition information of a portion related to the own computer from the operation definition information distributed from the managing computer, and also many convert both the log information and the event information of the administrate operation executed by the own computer into a predetermined common format.

Also, in the third aspect, the above-explained definition means may define such a computer which should execute the administrate operation by employing predetermined information for indicating all of the computers as to the administrate operations to be executed by all of the computers.

Also, in any of the first aspect to the third aspect, the above-described acquisition means may acquire at regular timing, or preselected timing a predetermined sort of log information among the log information of the respective computers, and further may acquire other sorts of log information when these sorts of log information is required to be displayed by the display means.

Also, in any of the first aspect to the third aspect, the display means may immediately display either all or a portion of the event information acquired by the acquisition means after being acquired.

It should also be understood in this specification that a “computer” implies not only an apparatus for merely performing a calculation, but also an apparatus for executing a communication process and further various sorts of information process.

DESCRIPTION OF THE PREFERRED EMBODIMENTS

Referring now to drawings, embodiment modes of the present invention will be described.

FIG. 1schematically indicates an entire arrangement of a computer system according to an embodiment of the present invention. In this drawing, reference numeral401indicates a managing computer; reference numerals402to407represent computers which constitute subjects managed by the managing computer; and reference numerals408to413show networks.

In the computer system according to this embodiment, the managing computer401can form in a batch mode operation definition information used to define schedules of administrate operations executed in the computers402to407, and furthermore the managing computer401can manage in a batch mode both log information indicative of execution results obtained from the computers402to407, and event information indicative of events occurred during execution stage.

As a result, since the managing computer401can save the operation definition information, the log information, and the event information in a database form, this managing computer401may refer to the above-described information, if necessary, and also may display various items related to the above-explained information.

FIG. 2schematically represents a system arrangement used to form by the managing computer401, the operation definition information which defines the schedules of the administrate operations executed by the computers402to407. It should be understood that althoughFIG. 2represents only one computer402and the managing computer401ofFIG. 1, other computers403to407may be similarly displayed.

As indicated inFIG. 2, the managing computer401is arranged by a managing application unit101, a definition information managing unit102, and a database103.

The managing application unit101contains a definition unit104and an integrated management screen display unit105. The batched definition unit104forms operation definition information used to define a schedule of administrate operations executed by the computers402to407. The integrated management screen display unit105displays an integrated management screen (will be discussed later) and so on. The definition information managing unit102contains a definition information distributing/acquiring unit106for distributing the operation definition information to the computers402to407, and for acquiring the operation definition information from the computers402to407. This definition information managing unit102stores the operation definition information into the database103, and retrieves/referring to the operation definition information stored in the database103.

As indicated inFIG. 2, each of the computers402to407is arranged by employing an operation execution unit and an integrated management agent113. This operation execution unit contains a job execution control unit110, a power supply control unit111, a print execution control unit112and the like, which execute the administrate operation defined by the operation definition information.

The integrated management agent113contains a definition information expanding unit114and a definition information notifying unit115. The definition information expanding unit114expands operation definition information of a portion related to the own computer from the operation definition information distributed from the managing computer401. The definition information notifying unit115notifies to the managing computer401, the operation definition information related to the own computer and involving also the operation definition information individually formed by the own computer.

FIG. 3represents a system arrangement in which both log information and event information of administrate operations executed by the computers402to407are managed in a batch mode by the managing computer401. AlthoughFIG. 3shows only the managing computer401and one computer402ofFIG. 1, other computers403to407are similarly applied to this computer402.

As indicated inFIG. 3, the managing computer401is arranged by employing a managing application unit101, an event/log managing unit201, and a database103.

The managing application unit101contains the integrated management screen display unit105for displaying the integrated management screen (will be explained later) and so on. The event/log managing unit201contains the event/log acquiring unit202for acquiring the event information and the log information from the computers402to407, and retrieves/refers to the event information and the log information, which are stored in the database103. Also, the event/log managing unit201stores into the database103and outputs to the integrated management screen display unit105as to event information which should be notified in real time to an operation manager and so on.

As indicated inFIG. 3, each of the computers402to407is arranged by employing an operation execution unit and an integrated management agent113. This operation execution unit contains a job execution control unit110, a power supply control unit111, a print execution control unit112and the like, which execute the administrate operation defined by the operation definition information.

The integrated management agent113contains a normalizing unit210and an event/log notifying unit211. The normalizing unit210converts both log information and event information of administrate operation executed by the own computer into a predetermined common format. The event/log notifying unit211notifies the normalized log information and the normalized event information to the managing computer401.

FIG. 4schematically indicates a hardware structure of the managing computer401and the computers402to407.

As indicated inFIG. 4, each of the computers is arranged by employing a central processing unit301, a main storage apparatus302, a network control apparatus305, a disk control apparatus307, and a display control apparatus309. The network control apparatus305controls input/output of data between this network control apparatus305and a network such as a communication line303and a local area network304. The disk control apparatus307controls a disk apparatus306and also input/output thereof. The display control apparatus309controls a display apparatus308and also input/output thereof.

Among the structural blocks of FIG.2andFIG. 3, the database103is realized on the disk apparatus306. Other structural blocks are realized in such a way that a program stored in the disk apparatus306is loaded by the central processing unit301on the main storage apparatus302. It should be noted that this program may be recorded on, for instance, a recording medium such as a CD-ROM, and then may be read into a driver (not shown) to be stored into the disk apparatus306.

Referring now toFIG. 5, a description will be made of a sequential operation for defining and distributing the operation definition information in the system arrangement of FIG.2.

As indicated inFIG. 5, in the managing computer401, the definition information managing unit102stores into the database103, the operation definition information defined by the batched definition unit104contained in the managing application unit101(step601). The operation definition information stored in the database103is distributed to the computers402to407at preselected timing by the definition information distributing/acquiring unit106contained in the definition information managing unit102(step602).

In the computers402to407to which the operation definition information is distributed, the definition information expanding unit114owned by the integrated management agent113expands operation definition information of a portion related to the own computer from the distributed operation definition information. The definition information expanding unit114transfers the expanded operation information to the operation execution unit such as the job execution control unit110, the power supply control unit111, and the print execution control unit112(step603). The operation execution unit executes the administrate operation defined by the respective transferred operation definition information (step604).

On the other hand, in the managing computer401, the definition information distributing/acquiring unit106of the definition information managing unit102acquires from the computers402to407, the operation definition information related to the computers402to407and also containing the operation definition information individually formed in the computers402to407(step605). Subsequently, the definition information managing unit102stores the acquired operation definition information into the database103(step606).

In the case that the integrated screen display unit105owned by the managing application unit101displays an integrated management screen (will be explained later) in response to a reference request issued from an operation manager and the like, the operation definition information stored into the database103in this manner will be retrieved/referred by the definition information managing unit102.

It should be understood that the operation definition information may be acquired in such a way that the definition information distributing/acquiring unit106contained in the definition information managing unit102in the managing computer401periodically issues a command to the computers402to407. Alternatively, the acquisition of the operation definition information may be realized by such that the definition information notifying unit115owned by the integrated management agent113in the computers402to407initiatively notifies the operation definition information to the managing computer401at preselected timing.

FIG. 6shows an example of operation definition information which is defined by the managing computer401. In this drawing, reference numeral701shows operation definition information.

In a definition of the operation definition information701, a “definition subject710” corresponds to a portion for defining a computer to be defined. The definition subject710may designate a group constituted by a plurality of computers, and a single computer. As represented inFIG. 6, it should be understood that when predetermined information (in this case, “default”) is designated in “definition subject710”, this information implies that all of the computers are the definition subjects.

A “power supply control (711)” corresponds to a portion used to define an execution schedule of a power supply turning ON/OFF process of a computer to be defined, and a turning OFF method. A “job execution control (712)” corresponds to a portion used to define a job net on a computer to be defined, and a job on the job net. In the example ofFIG. 6, a “job net A” defines that after an execution of a “job A1” has been completed, a “job A21” and a “job A22” are executed in a parallel manner, and then when the executions of both these jobs A21 and A22 are completed, a “job A3” is executed.

As previously explained, since the operation manager and the like designate such a computer for executing the schedule of the respective administrate operations and also the respective administrate operations in the managing computer401, the operation definition information can be formed in a batch manner, on which the schedule of the administrate operation to be executed by the computer is defined.

FIG.7A andFIG. 7Bshow an example of the operation definition information701ofFIG. 6which is expanded by the computer. In FIG.7A andFIG. 7B, there are shown operation definition information801to802which have been expanded in the computers402to407of FIG.2. Each of the above-described operation definition information801and802is transferred to the power supply control unit111and the job execution control unit110.

Next, a sequential operation for acquiring and for managing in a batch mode the event information and the log information in the system arrangement ofFIG. 3will now be described with reference to FIG.5.

As indicated inFIG. 5, in such a case that either the event information or the log information notified from the administrate operation unit is equal to a preselected sort of information which should be notified to the managing computer401, the normalizing unit210owned by the integrated management agent113in each of the computers402to407converts this event, or log information into a common format to which a discrimination of event/log information is added. Then, the converted common format is notified by the event/log notifying unit211to the managing computer401(step610).

In the managing computer401to which either the event information or the log information is notified, the event/log acquiring unit202owned by the event/log managing unit201stores the notified event information, or the notified log information into the database103(step611). The log information is related to an abnormal state occurred during processing operation and includes information related to an abnormal state occurred during processing operation, whereas the event information is such information which is more important and concise than the former and necessary to inform to the manager computer in real time as to an urgent abnormal event occurred in the operation stage to be cared for by an operator. As a result, in the case that the event information is notified, it is preferable to immediately display this event information on the display apparatus308by the integrated management screen display unit105owned by the managing application unit101(step612). It should also be noted that information may be discriminated as either log information or event information based upon discrimination contained in this information. As another embodiment, this information may be discriminated as either log information or even information based upon the path through which this information is transferred.

As explained above, in the case that the integrated management screen display unit105owned by the managing application unit101displays an integrated management screen (will be explained later) in response to a reference request sent from the operation manager, both the event information and the log information stored in the database103are retrieved/referred by the definition information managing unit102.

The notifications of the event information and the log information may be preferably realized as to such event information with a high real time characteristic (in particular, event information indicative of failure) as follows. In the computers402to407, the event/log notifying unit211owned by the integrated management agent113initiatively notifies the event information to the managing computer401. As to the notification of the log information, in the managing computer401, the event/log acquiring unit202owned by the event/log managing unit201may be realized by regularly issuing a command to the computers402to407. Alternatively, the notification of the log information may be realized by that in the computers402to407, the event/log notifying unit211owned by the integrated management agent113initiatively notifies the log information to the managing computer401at preselected timing.

Subsequently, referring now toFIG. 8, a description will be made of one example of an integrated management screen which is displayed by the integrated management screen display unit103owned by the managing application unit101in the managing computer401.

As previously explained, since the operation definition information, the event information, and the log information are stored in the database103in the managing computer401, the operation manager and the like may grasp the operations conditions of the computer system by utilizing the above-explained information. In other words, within the managing computer401, the integrated management screen display unit105owned by the managing application unit101causes the definition information managing unit102to retrieve/refer to such information which is required by the operation manager to refer to. Then, this integrated management screen display unit105forms as integrated management screen by using the retrieved/referred information, and displays the formed integrated management screen on the display apparatus308. As a result, the operation manager can grasp the operation condition of the computer system by observing the integrated management screen displayed on the display apparatus308.

InFIG. 8, a first screen501is an integrated management screen used to confirm computers managed by the managing computer401and also to confirm a group of these computers. In this example, four sets of computers A to D are indicated. The respective computers A to D are displayed as icons. For example, in the first screen501, the operation manager double-clicks “computer A (502)” by using a mouse, so that the first screen501can be transferred to a second screen503.

Also, inFIG. 8, the second screen503is an integrated management screen used to confirm an operation condition of “computer A (502)”. With respect to the “computer A (502)”, a present job execution condition (504), a list (505) of a job net whose execution is defined on the “computer A”, and a list (506) of log information corresponding to a past operation history are displayed in a message form on this second screen503. For example, when the operation manager wants to confirm an operation condition related to “job net A” on the second screen503, the operation manager double-clicks a column related to “job net A” listed in the job net list505by using the mouse, so that the second screen503can be transferred to a third screen507.

Also, inFIG. 8, the third screen507is an integrated management screen related to “job net A” on “computer A”. This integrated management screen indicates such operation definition information on which a series of administrate operations are defined as to “computer A”, i.e., “turning ON of power supply (509)”, “execution of job net A (510)”, and “printing of execution result (511)”.

It should be noted that these administrate operations509to511are displayed as icons. Since a display mode of each of these icons is changed (for instance, color and shape are changed), various sorts of conditions may be displayed such as “not yet executed”, “under execution”, “execution is ended under normal state”, and “execution is ended under abnormal state”. In this case, when the display modes of the respective icons are changed by the integrated management screen display unit105, the latest event information of the corresponding administrate operations (509to511) is preferably acquired by the event/log acquiring unit202owned by the event/log managing unit201.

For example, when “job net A (501)” is double-clicked by using the mouse by the operation manager, the third screen507can be transferred to a sixth screen514.

Also, inFIG. 8, a fifth screen512corresponds to an integrated management screen used to confirm the operation definition information displayed on the third screen (507) in a calendar format. For example, since the operation manager selects menu of “calendar display” (not shown) on the third screen507, the third screen507can be transferred to the fifth screen512. In this example, this fifth screen512displays that the job seen on the third screen is executed on a date513of a hatched portion.

Also, inFIG. 8, a sixth screen514is a detailed integrated management screen related to “job net A” on “computer A”. This sixth screen514defines such that as to “job net A”, after an execution of “job A1 (515)” is completed, both “job A21 (516)” and “job A22 (517)” are executed in a parallel manner, and when the executions of both “job A21 (516)” and “job A22 (517)” are completed, “job A3 (518)” is executed.

It should also be noted that these jobs are displayed as icons. Since a display mode of each of these icons is changed (for instance, color is changed), various sorts of conditions may be displayed such as “not yet executed”, “under execution”, “execution is ended under normal state”, and “execution is ended under abnormal state”. In this case, when the display modes of the respective icons are changed by the integrated management screen display unit105, the latest event information of the corresponding administrate operations (509to511) is preferably acquired by the event/log acquiring unit202owned by the event/log managing unit201.

Also, inFIG. 8, a fourth screen508corresponds to an integrated management screen used to confirm a log with respect to each of job nets. For instance, since the operation manager double-clicks a list (506) of the log information on the second screen503, the second screen503can be transferred to the fourth screen508. Alternatively, for example, while the operation manager designates a column related to “job net A” within the job list505by clicking this column by using the mouse, this operation manager selects menu of “log display” (not shown). As a result, the second screen503may be transferred to another screen (not shown) on which only log information of “job net A” is displayed.

It should be understood that when the operation manager selects, for example, the corresponding menu within any of the second screen504to the sixth screen514, the present screen may be transferred to other screens involving such not-shown screens (event information display screen, statistical display screen, operation definition information updating screen etc.). It will be possible to click a certain message shown in screen508to additionally display the window514or507as indicated with arrows.

As previously explained, in accordance with this embodiment, in the managing computer401, the operation definition information related to the respective computers is displayed in connection with both the log information and the event information of the administrate operations defined by this operation definition information. As a consequence the operation manager can grasp the operation conditions of the computer system, and furthermore can readily reflect the grasped operation conditions onto a further plan of the operation schedule.

As previously described, after the event information is notified, the managing computer401preferably and immediately displays this notified event information on the display apparatus308. At this time, a screen displayed in the managing computer401is represented in, for instance, FIG.9A.

FIG. 9Arepresents an example of a screen on which event information of a computer A is displayed as a message among the notified event information. In this drawing, the message is constructed of an importance degree901of the event information, day/time902to903when the event is notified, a computer904of a notification source, and a message main body905.

The managing computer401may display all of the notified event information as a message. Alternatively, as indicated inFIG. 9B, the managing computer401may display only pre-designated sorts of event information. As a pre-designated basis, the following items may be conceived, e.g., an importance degree; a range for a date and a time instant; a computer of a notification source; a sort of administrate operation; and a pattern of a character string contained in event information. The operation manager may designate a sort of event information displayed as a message by either the managing computer401or the respective computers402to407.

Then, in the managing computer401, the event/log managing unit201judges as to whether or not the notified event information is displayed as the message. The event/log managing unit201immediately notifies to the integrated management screen display unit105owned by the managing application unit101, such event information which is judged to be displayed as a message. Then, the integrated management screen display unit105displays this judged event information. Therefore, for instance, as represented inFIG. 9, only such event information indicative of a failure may be displayed as a message. It should be understood that event/log managing unit201stores the notified event information into the database103irrespective of such a judgment result as to whether or not the notified event information is displayed as the message.

FIG.10A andFIG. 10Brepresent one example of structures of various sorts of tables on the database103. In the drawings, reference numeral1001shows an event/log table, and reference numeral1002indicates an operation definition table.

The event/log table1001is such a table used to store thereinto the events and the log information acquired from the computer by the managing computer401in a time sequence. A single record is arranged by “identifier (1010)” “computer name (1011)”, “time (1012)”, “event/log sort (1013)”, “identifier (1014)”, and “detailed information (1015)”. The identifier1010is for the event information and the log information. The computer name1011is a name of a computer for notifying this information. The time1012is time when this information is notified. The sort1013is the sort of this information. The identifier1014is an identifier of operation definition information on which administrate operation where this information is produced is defined. In the computer, the information1010to1014other than the detailed information1015is normalized as the common format commonly used to all of the event information and the log information by the normalizing unit210owned by the integrated management agent113.

As indicated inFIG. 10BtoFIG. 10D, an operation definition table1002is constituted by a common table1003arranged by an identifier1016of operation definition information, a name (1017) of a computer to be defined, and a sort (1018) of operation definition information; and also operation definition detailed tables1004to1005corresponding to the respective sorts (1018) of the operation definition information.

The operation definition detailed table1004related to the power supply control is arranged by, for example, an identifier (1019) of operation definition information; a power supply initiation date (1020); a power supply initiation time (1021); and a power supply turn-OFF date (1022), and also a power supply turn-OFF time (1023). The operation definition detailed table1005related to the job net is arranged by, for instance, an identifier (1024) of operation definition information; a name (1025) of a job net; a job net initiation date (1026); a job net initiation time (1027); and a structural job (1028).

In the managing computer401, both the definition information managing unit102and the event/log managing unit201retrieve the tables1001to1004shown inFIG. 10AtoFIG. 10Dbased on a language of, for instance, SQL. As a result, the integrated management screen display unit105owned by the managing application unit101can display such a screen as indicated in FIG.8. In particular, the relationship among the event information, the log information, and the operation definition information may be established by employing the identifier (1014) of the operation definition information contained in the event/log table1001and the identifiers1016,1019,1024of the operation definition information contained in the operation definition table1002.

It should be noted that when the screen is displayed, in such a case that information required to be displayed is not present in the tables1001to1004ofFIG. 10, the managing computer401is operated in a similar manner to that shown inFIG. 5so as to acquire this information required to be displayed.

In the case that such information indicative of a failure occurred in operation conditions of the computer system is notified as an event, this computer system may be operated as follows. First, for example, when a specific job is accomplished under abnormal state while a job net is being executed, after removing a factor for causing this abnormally ended job (e.g., a specific file required to execute a job is not present), the computer system may instruct that this interrupted job is restarted. This instruction may be realized as follows. That is, as indicated inFIG. 11, in the managing computer, “reexecution command” for designating “subject computer”, “job net name”, “job name to be reexecuted” is entered (1101); this command is transferred to the above-explained subject computer (1102) so as to be executed (1103). Secondly, the computer system may instruct this job net to be canceled. This second idea may be realized as follows. That is, as shown inFIG. 11, in the managing computer, “cancel command” for designating “subject computer ” and “job net name” is entered (1101); this command is transferred to the above-described subject computer (1102) so as to be executed (1103). Furthermore, thirdly, when a specific job is ended under abnormal state while a job net is being executed, a specific job and also a specific job net, by which an abnormal end event is previously defined as a trigger, may be executed. This alternative method may be realized as follows. That is, as represented inFIG. 12, while the managing computer defines such a process operation which should be executed when a specific event is received (1201), when the managing computer receives this specific event as shown inFIG. 13(1301), this managing computer instructs a subject computer to execute the designated process operation (1302). Then, the subject computer may execute this instruction (1303). At this time, the definition of either the job or the job net which should be executed by the subject computer may be transferred to be registered when the instruction is issued. Otherwise, this definition may be previously transferred to be registered.

Subsequently, a description will now be made of effects achieved in such a case that the operation definition information, the event information, and the log information are processed in the database form by the managing computer401to be stored.

As a first effect, a network traffic can be reduced. In accordance with the present invention, since the operation definition information, the event information, and the log information are stored in the database form by the managing computer401, the managing computer401need not acquire the necessary information from the computer every time the operation manager and the like refer to these information.

For instance, in the network structure ofFIG. 1, when log information of 1 K bytes is acquired from each of the six computers402to407by the managing computer at a frequency of 1,000 messages/day, a network traffic of 6 M bytes/day is produced. In the case that the log information is referred by the operation manager at a frequency of 10 times/day, a network traffic of 60 M bytes/day in total is produced.

Furthermore, as to such log information with a low demand of a real-time characteristic, if such log information is collected within such a time range where the normal network traffic is low, for example, in a night time range, the network traffic reduction effect can be apparently achieved.

As a second effect, since the operation definition information, the event information, and the log information are stored in the database form by the managing computer401, as represented in the integrated management screen ofFIG. 8, there is another effect that the above-explained information can be readily displayed in various relationship aspects.

In the computer system according to this embodiment, the computers402to407are set to be defined in a batch mode by the managing computer401. However, it is conceivable that other computers which do not constitute a definition subject are connected to the networks408to413. In this case, as a method for recognizing a subject computer to be managed by the managing computer401, for example, there is a method for automatically detecting the integrated management agent113assembled into the computer by using, for example, a broadcasting method. As another method, a subject computer to be defined may be previously defined on the managing computer401.

Also, in accordance with the computer system according to this embodiment, the operation definition information in which the schedule of the administrate operations executed by the computers402to407is defined can be formed in a batch mode by the managing computer401, and furthermore both the log information and the event information of the administrate operations executed by the computers402to407can be managed by the managing computer401, resulting in better results. Alternatively, if at least both the log information and the event information can be managed, then the operation manager may grasp the operation condition of the computer system.