JP2006185312A - Failure analysis apparatus and failure analysis method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To identify a faulty part of an access route accurately and automatically and switch to an access route without a fault.
When a failure is detected, all the components on the access route that has executed normal access are determined as failure location candidates. Test access is performed to the candidate failure location. As a result of the test access being executed by one or more access routes by the failure specifying means 11c, the constituent element of the failure location candidate that becomes the last one is set as the failure location. The access route switching unit 11d switches to an access route that does not go through the component identified as the failure location.
[Selection] Figure 1

Description

  The present invention relates to a failure analysis device and failure analysis method for a computer system, and more particularly to a failure analysis device and failure analysis method for a computer system including redundant access routes and a plurality of devices.

  The computer system stores data in a storage device and extracts data from the storage device. For this reason, the storage device is indispensable for the computer system.

  In addition, since data to be used in a computer system increases year by year, a large-capacity storage device is required. Currently, low-priced large-capacity storage devices have emerged and are easily available.

  Further, in the computer system, a plurality of storage devices are logically used as one storage device (disk array) in order to cope with all-day operation. In a computer system employing this disk array, a spare storage device is prepared in the computer system. Then, the data of the storage device operating in the spare storage device is automatically transferred at the normal time. In this way, it becomes possible to cope with a case where a failure that makes it unusable occurs in one storage device in the computer system.

Computer systems using a disk array and having a plurality of access routes have also appeared. Here, regarding the failure of the access route, the operator has specified the failure location or automatically specified the approximate failure location. This is because a multi-vendor computer system is generally used, and only a rough interface is unified. Then, the access route to be used is changed manually or automatically so that the troubled part is not used (see, for example, Patent Document 1).
JP-A-9-259001

However, when manually changing the access route to be used, the operator tends to cause a connection error.
In addition, when changing the access route to be used automatically, it is only known that there is a faulty part, so the active part that has no functional problem may be stopped as described later, and the operation of the computer system may be stopped. It is reducing efficiency. For example, in the case of a network in which a repeater is present, it is difficult to identify a fault location, resulting in poor operational efficiency such as exchanging all related components. Moreover, if the active location is stopped, it takes time to recover. Specifically, this will be described with reference to FIG.

FIG. 30 is a diagram illustrating an example of handling a failure in a conventional system configuration diagram.
A conventional system configuration diagram includes a first computer 110, a second computer 210, repeaters 310 and 410, a storage device 530, and transmission lines L31, L32, L33, L34, L35, L36, L37, and L38. The The first computer 110 and the second computer 210 are user terminal devices, and respond to a user service request or transmit a user service request to a server. The repeaters 310 and 410 connect the first computer 110, the second computer 210, and the storage device 530 to each other. The storage device 530 can store data from the first computer 110 and the second computer 210. The first computer 110, the second computer 210, the repeaters 310 and 410, and the storage device 530 communicate with each other via transmission lines L31, L32, L33, L34, L35, L36, L37, and L38. .

  The first computer 110 includes adapters 111 and 112. The adapters 111 and 112 connect the first computer 110 to the network. The adapters 111 and 112 are in communication with each other.

  The second computer 210 includes adapters 211 and 212. In the relationship between the first computer 110 and the second computer 210, if the component has the same name, the function of the component is the same.

  The storage device 530 includes controllers 531 and 532 and a storage device body 533. The controllers 531 and 532 connect the storage device 530 to the network. The storage device main body 533 is a main body of the storage device 530. The controllers 531 and 532 and the storage device main body 533 communicate with each other.

  Conventionally, in order to unify the environment of the first computer 110 and the second computer 210, access routes between the adapter 111, the transmission line L31, the repeater 310, the transmission line L35, and the controller 531 in the first computer 110. If a failure is detected, the access route between the adapter 211, the transmission line L33, the repeater 310, the transmission line L35, and the controller 531 in the second computer 210 is not used.

Here, when the failure point is the adapter 111, the redundancy in the second computer 210 is lost and the reliability is lowered.
The present invention has been made in view of the above points, and relates to an access route that is used, a failure analysis device that automatically identifies a failure location of an access route and switches to an access route without a failure, and The object is to provide a failure analysis method.

  In the present invention, in order to solve the above-described problem, as shown in FIG. 1, when a failure is detected in a normal access between a plurality of devices, all the components on the access route that has executed the normal access are regarded as failure location candidates. If a failure is detected by the failure detection means 11a and the failure detection means 11a, a test access is executed to the failure location candidate, and if no failure is detected by the test access, the access route that executed the test access If all the above components are excluded from the failure location candidates and a failure is detected by the test access, a failure that excludes all the components that are not placed on the access route that performed the test access from the failure location candidates As a result of the test access being executed by one or more access routes in the diagnosis unit 11b and the failure diagnosis unit 11b, the last 1 The failure specifying unit 11c that uses the component of the candidate failure location that has become the failure location, and the access route for normal access between a plurality of devices that does not pass through the component specified as the failure location by the failure specifying unit 11c Access route switching means 11d for switching to a route is provided.

  In this way, when a failure is detected in a normal access between a plurality of devices, the failure detection unit 11a sets all the components on the access route where the normal access has been performed as failure location candidates. When a failure is detected by the failure detection means 11a, a test access is executed to the failure location candidate. When no failure is detected in the test access by the failure diagnosis unit 11b, all the components on the access route that executed the test access are excluded from the failure location candidates. When a failure is detected in the test access by the failure diagnosis unit 11b, all components that are not arranged on the access route that has executed the test access are excluded from the failure location candidates. As a result of execution of test access by one or more access routes in the failure diagnosis unit 11b by the failure identification unit 11c, the component of the failure portion candidate that becomes the last one is set as the failure point. The access route switching unit 11d switches the access route for normal access between a plurality of devices to an access route that does not pass through the component specified as the failure location by the failure specifying unit 11c.

  In the present invention, when a failure is detected in normal access, the test access is repeated. Then, the fault location is specified, and the access route is switched to not via the component specified as the fault location.

  As a result, the fault location can be accurately identified, and the fault location can be easily replaced.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
First, the concept of the present invention will be described, and then the specific contents of the embodiment will be described.
FIG. 1 is a conceptual diagram of the present invention.

  The failure analysis system in which the failure analysis device of the present invention is used includes the computer 10, the repeaters 20, 30, the device 40, and the transmission lines L1, L2, L3, L4, L5, L6, L7, L8. The computer 10 is a user terminal device and responds to a user service request or transmits a user service request to a server. The repeaters 20 and 30 connect the computer 10 and the device 40 to each other. The device 40 can store data from the computer 10. The computer 10, the repeaters 20, 30 and the device 40 communicate with each other via transmission lines L1, L2, L3, L4, L5, L6, L7, and L8.

  The computer 10 includes a failure analysis device 11 and adapters 12 and 13. The failure analysis apparatus 11 identifies the location of a failure in the access route with respect to the access route being used, and switches to an access route without a failure. The adapters 12 and 13 connect the computer 10 to the network. The failure analysis device 11 and the adapters 12 and 13 communicate with each other.

  The device 40 includes controllers 41 and 42 and a device main body 43. The controllers 41 and 42 connect the device 40 to the network. The device main body 43 is the main body of the device 40. The controllers 41 and 42 and the apparatus main body 43 communicate with each other.

The failure analysis device 11 includes a failure detection unit 11a, a failure diagnosis unit 11b, a failure identification unit 11c, and an access route switching unit 11d.
When the failure detection unit 11a detects a failure in normal access between a plurality of devices, the failure detection unit 11a sets all components on the access route that executed the normal access as failure location candidates.

  When a failure is detected by the failure detection unit 11a, the failure diagnosis unit 11b executes a test access to the failure location candidate. If no failure is detected by the test access, the failure diagnosis unit 11b Are excluded from the candidate failure points. Further, when a failure is detected by the test access, the failure diagnosis unit 11b excludes all components that are not arranged on the access route that has executed the test access from the failure location candidates.

  The failure identification unit 11c uses the component of the failure location candidate that becomes the last one as a result of execution of the test access by one or more access routes in the failure diagnosis unit 11b as the failure location.

  The access route switching unit 11d switches the access route for normal access between a plurality of devices to an access route that does not pass through the component specified as the failure location by the failure specifying unit 11c.

The failure detection unit 11a, the failure diagnosis unit 11b, the failure identification unit 11c, and the access route switching unit 11d communicate with each other.
For example, communication between the computer 10 and the device 40 is realized using the transmission lines L1 and L5. When an error occurs in the transmission lines L1 and L5, the transmission line is switched to the transmission lines L3 and L5. If there is no error, the transmission line L1 or the adapter 12 is a failure location. Further, when there is no error by switching to the transmission lines L2 and L7, the transmission line L1 is a failure location. Thereafter, the transmission lines L1 and L5 are switched to the transmission lines L2 and L7 having no error.

If it does in this way, the component which generated the fault can be grasped automatically automatically, and can be exchanged easily.
Hereinafter, specific contents of the embodiment will be described.

[First Embodiment]
FIG. 2 is a system configuration diagram of the first embodiment. The first computer 100 and the second computer 200 identify the faulty part of the access route with respect to the access route being used, and switch to the access route without a fault.

  The system configuration diagram of the first embodiment includes a first computer 100, a second computer 200, repeaters 300, 400, a storage device 500, transmission lines L11, L12, L13, L14, L15, L16, L17, L18. The first computer 100 and the second computer 200 write data to the storage device 500 and pull data from the storage device 500. The repeaters 300 and 400 connect the first computer 100, the second computer 200, and the storage device 500 to each other. The storage device 500 stores data sent from the first computer 100 and the second computer 200. The first computer 100, the second computer 200, the repeaters 300 and 400, and the storage device 500 communicate with each other via transmission lines L11, L12, L13, L14, L15, L16, L17, and L18. .

The first computer 100 includes a failure identification unit 103, an access route switching unit 104, and adapters 101 and 102.
When a failure is detected in the normal access to the storage device 500, the failure identifying unit 103 sets all the components on the access route that executed the normal access as failure location candidates. Then, a test access is executed to the failure location candidate. When no failure is detected in the test access, all the components on the access route that executed the test access are excluded from the failure location candidates. When a failure is detected in the test access, all the components that are not arranged on the access route that has executed the test access are excluded from the failure location candidates. Finally, as a result of executing the test access with one or more access routes, the constituent element of the fault location candidate that becomes the last one is set as the fault location.

  The access route switching unit 104 switches the access route in which the normal access to the storage device 500 is executed and the failure is detected to an access route that does not pass through the component identified as the failure location.

The adapters 101 and 102 connect the first computer 100 to the network.
The failure identification unit 103, the access route switching unit 104, and the adapters 101 and 102 communicate with each other.

  The second computer 200 includes a failure identification unit 203, an access route switching unit 204, and adapters 201 and 202. In the relationship between the first computer 100 and the second computer 200, if the component has the same name, the function of the component is the same.

  The storage device 500 includes controllers 501 and 502 and a storage device body 503. The controllers 501 and 502 connect the storage device 500 to the network. The storage device main body 503 is the main body of the storage device 500. The controllers 501 and 502 and the storage device main body 503 communicate with each other.

Further, the failure identification unit 103 of the first computer 100 and the failure identification unit 203 of the second computer 200 communicate with each other and operate together.
FIG. 3 is a diagram illustrating an example of the failure identification unit. The failure identification unit 103 has a plurality of failure confirmation units for each component on all access routes. The failure identification unit 103 monitors each component using a daemon. A command is issued from the daemon to each component, and the failure identifying unit 103 acquires a response from each component.

  The failure identification unit 103 is a failure confirmation unit for each component, a failure confirmation unit 103a for the storage device body, a failure confirmation unit 103b for the adapter, a failure confirmation unit 103c for the controller (own route), and a failure confirmation for the controller (other route). 103d, a failure confirmation unit 103e for the repeater and the transmission path before the repeater, and a failure confirmation unit 103f for the transmission path after the repeater and the repeater. Failure confirmation unit 103a for the storage device main body, failure confirmation unit 103b for the adapter, failure confirmation unit 103c for the controller (own route), failure confirmation unit 103d for the controller (other route), failure confirmation unit for the repeater and the transmission path before the repeater 103e and the failure confirmation unit 103f for the repeater and the post-relay transmission path communicate with each other.

Hereinafter, the failure confirmation unit for each component will be described.
FIG. 4 is a diagram illustrating an example of processing of the failure confirmation unit for the storage device body.
When the failure confirmation unit 103a for the storage device main body confirms the access route shown in bold in FIG. 4, if the access route is normal, the access route to the storage device main body 503 is normal. If it is abnormal, the access route to the storage device main body 503 is abnormal, and any of the adapter 101, the transmission path L11, the repeater 300, the transmission path L15, the controller 501, and the storage device main body 503 is abnormal.

  Note that, in principle, when the storage device main body 503 itself is abnormal, the storage device main body 503 itself notifies the outside of the fact that the storage device main body 503 is abnormal by the function of managing its own failure. That is, there are cases where the access route to the storage device main body 503 is abnormal and cases where the storage device main body 503 itself is abnormal, but the latter is clear.

FIG. 5 is a diagram illustrating an example of processing of the failure confirmation unit for the adapter. Here, the test access is executed via a part of the access route that has executed the normal access.
When the failure confirmation unit 103b for the adapter confirms the access route shown in bold in FIG. 5, if it is normal, the access route to the adapter 101 is normal. If abnormal, the access route to the adapter 101 is abnormal, and the adapter 101 is abnormal.

  FIG. 6 is a diagram illustrating an example of processing of the failure confirmation unit for the controller (own route). Here, the test access is executed via a part of the access route that has executed the normal access.

  When the failure confirmation unit 103c for the controller (own route) confirms the access route shown in bold in FIG. 6, if it is normal, the access route to the controller 501 is normal. If it is abnormal, the access route to the controller 501 is abnormal, and any of the adapter 101, the transmission line L11, the repeater 300, the transmission line L15, and the controller 501 is abnormal.

  FIG. 7 is a diagram illustrating an example of processing of the failure confirmation unit for the controller (other route). Here, a test access via an access route different from the access route that executed the normal access is executed.

  When the failure confirmation unit 103d for the controller (other route) confirms the access route shown in bold in FIG. 7, if it is normal, the access route to the controller 501 is normal. If it is abnormal, the access route to the controller 501 is abnormal.

Here, when both the own route and the other route are abnormal, the controller 501 is abnormal.
It should be noted that the failure confirmation unit 103d for the controller (other path) is accompanied by processing inside the storage device 500. In this case, for example, the SEND DIAGNOSTIC / RECEIVE DIAGNOSTIC of UNIX (registered trademark) USCSI command is used to communicate between the controller 501 and the controller 502.

  FIG. 8 is a diagram illustrating an example of processing of the failure confirmation unit for the repeater and the pre-repeater transmission path. Here, the test access is executed via a part of the access route that has executed the normal access. Then, a test access via an access route different from the access route that executed the normal access is executed.

  When the failure confirmation unit 103e for the repeater and the transmission path before the repeater confirms two access routes shown in bold in FIG. 8, if the left side is normal, the left access route to the controller 501 is normal. If the left side is abnormal, the left access route to the controller 501 is abnormal. If the right side is normal, the right access route to the controller 501 is normal. If the right side is abnormal, the right access route to the controller 501 is abnormal.

  Here, if the left side is normal and the right side is abnormal, one of the adapter 201 and the transmission line L13 is abnormal. If the right side is normal and the left side is abnormal, one of the adapters 101 and the transmission line L11 is abnormal.

  FIG. 9 is a diagram illustrating an example of processing of the failure confirmation unit for the repeater and the transmission path after the repeater. Here, the test access is executed via a part of the access route that has executed the normal access. Then, a test access via an access route different from the access route that executed the normal access is executed.

  When the failure confirmation unit 103f for the repeater and the post-relay transmission path confirms two access routes shown in bold in FIG. 9, if the left side is normal, the left access route to the controller 501 is normal. If the left side is abnormal, the left access route to the controller 501 is abnormal. If the right side is normal, the right access route to the controller 502 is normal. If the right side is abnormal, the right access route to the controller 502 is abnormal.

  Here, if the left side is normal and the right side is abnormal, one of the transmission lines L16 and the controller 502 is abnormal. If the right side is normal and the left side is abnormal, one of the transmission lines L15 and the controller 501 is abnormal.

In the above, for example, the failure confirmation unit other than the failure confirmation unit 103d for the controller (other path) uses the UNIX USCSI command TEST UNIT READY.
Below, the specific process of a failure location is demonstrated using each failure confirmation part mentioned above.

FIG. 10 is the first half of a flowchart illustrating an example of processing according to the first embodiment.
[S11] The failure identification unit 103 acquires access route information that is already stored as an initial setting. The access route information can be specified in the setting file. Here, the access route information is information indicating what exists in the access route from the start point to the end point.

  [S12] The failure identification unit 103 acquires a failure confirmation unit for each component already stored as an initial setting. Note that in the order of execution, the failure confirmation unit for each component can be described in a setting file described later.

  [S13] The failure confirmation unit 103a for the storage device body in the failure identification unit 103 determines whether there is a failure up to the storage device body 503. If a failure exists, the process proceeds to S15 to check other components. If there is no failure, the process proceeds to S11 to confirm the next access route.

[S15] In the case of a failure in the storage device body 503 itself, the failure identifying unit 103 notifies the access route switching unit 104 of the presence of the failure.
[S16] The failure confirmation unit 103b for the adapter in the failure identification unit 103 determines whether there is a failure up to the adapter 101. If there is a failure, the failure of the adapter 101 has been discovered, and the process proceeds to S17. If no failure exists, the process proceeds to S18 in order to check other components.

[S17] The failure identification unit 103 confirms the failure of the adapter 101. And in order to confirm the next access route, it progresses to S11.
[S18] The failure confirmation unit 103c for the controller on its own route in the failure identification unit 103 determines whether there is a failure up to the controller 501. If there is a failure, the process proceeds to S20 to check other components. If no failure exists, the failure of the storage device main body 503 has been found, and the process proceeds to S19.

[S19] The failure identification unit 103 confirms the failure of the storage device main body 503. And in order to confirm the next access route, it progresses to S11.
[S20] The failure identification unit 103 confirms any failure in the transmission lines L11 and L15, the repeater 300, and the controller 501. Then, the process proceeds to A of FIG.

FIG. 11 is the second half of the flowchart illustrating an example of processing according to the first embodiment.
[S21] From FIG. 10A, the failure confirmation unit 103d for the controller on the other path in the failure identification unit 103 determines whether there is a failure up to the controller 501. If there is a failure, the failure of the controller 501 has been found, so the process proceeds to S22. If no failure exists, the process proceeds to S23 in order to check other components.

[S22] The failure identification unit 103 confirms the failure of the controller 501. And in order to confirm the next access route, it progresses to S11 via B of FIG.
[S23] The failure identifying unit 103 confirms any failure in the transmission lines L11 and L15 and the repeater 300.

  [S24] The failure confirmation unit 103e for the repeater in the failure identification unit 103 and the transmission path before the repeater determines whether there is a failure up to the transmission line L13. If a failure exists, the process proceeds to S26 in order to check other components. If there is no failure, a failure in the transmission line L11 has been found, and the process proceeds to S25.

[S25] The failure identifying unit 103 confirms a failure in the transmission line L11. And in order to confirm the next access route, it progresses to S11 via B of FIG.
[S26] The failure identifying unit 103 confirms any failure in the transmission line L15 and the repeater 300.

  [S27] The failure confirmation unit 103f for the repeater and the post-relay transmission line in the failure identification unit 103 determines whether there is a failure up to the transmission line L16. If there is a failure, since a failure of the repeater 300 has been found, the process proceeds to S28. If there is no failure, since a failure in the transmission line L15 has been found, the process proceeds to S29.

[S28] The failure identification unit 103 confirms the failure of the repeater 300. And in order to confirm the next access route, it progresses to S11 via B of FIG.
[S29] The failure identifying unit 103 confirms a failure in the transmission line L15. And in order to confirm the next access route, it progresses to S11 via B of FIG.

  In this way, the fault location can be automatically and accurately identified. As a result, it is possible to prevent an error in identifying a fault location by a computer system maintainer. In addition, the efficiency of maintenance can be greatly improved.

The case where an access route including a failure location is changed to an access route not including a failure location will be described below.
FIG. 12 is a diagram illustrating an example of a communication table.

  The communication table 60 includes a name, a used transmission path, and a communication status. The name is the name of the access route. The used transmission line is a transmission line used by the access route related to the name. The communication status is the status of the access route related to the name. The communication status is for operation when the access route is operated, for standby when the access route is waiting, and for diagnosis when the access route is for the purpose of diagnosing the access route.

  Here, the descriptions of FIG. 12 for operation, diagnosis, and standby are initial values of the first embodiment. Communication 1 uses transmission lines L11 and L15 and is for operation. Communication 2 uses transmission lines L11 and L16 and is used for diagnosis. Communication 3 uses transmission lines L12 and L17 and is used for diagnosis. Communication 4 uses transmission lines L12 and L18 and is for standby. Communication 5 uses transmission lines L13 and L15 and is for operation. Communication 6 uses transmission lines L13 and L16 and is used for diagnosis. Communication 7 uses transmission lines L14 and L17 and is used for diagnosis. Communication 8 uses transmission lines L14 and L18 and is for standby.

  The access route switching units 104 and 204 create the communication table 60 when the first computer 100, the second computer 200, and the storage device 500 are connected. When input / output to / from the storage device 500 is started, the failure information of the failure identification units 103 and 203 causes the failure of the access route where the failure location exists so that the computer does not access the access route where the failure location exists when replacing the failure location. Switch to an access route that does not exist.

FIG. 13 is a diagram illustrating an example of access route information.
The access route information 80 is expressed by a first computer expression unit 81 and a second computer expression unit 82. The first computer expression unit 81 represents an access route related to the first computer 100. The second computer expression unit 82 represents an access route related to the second computer 200.

  Further, the existing access route information 80 is expressed by an adapter expression unit 83, a repeater expression unit 84, and a controller expression unit 85. The adapter expression unit 83 represents an adapter used by the access route. The repeater expression unit 84 represents the repeater used by the access route. The controller expression unit 85 represents a controller used by the access route.

The access route information 80 is defined in the OS (Operating System).
The failure information uses the information in FIG.
FIG. 14 is a diagram illustrating an example of access route selection information. Originally, a plurality of access routes are shown as one virtual device.

  The access route selection information 90 includes a virtual device name 91, a virtual device number 92, a first name 93, a second name 94, a user name 95, a first spare name 96, and a second spare name 97. It is expressed from

  The virtual device name 91 is the name of the virtual device. The virtual device number 92 is a virtual device number related to the virtual device name 91. The first name 93 is a name of an access route to be a virtual device related to the virtual device name 91. The second name 94 is a name of an access route to be a virtual device related to the virtual device name 91. Normally, the access route related to the first name 93 is a virtual device. The user name 95 is a name for a user of an access route to be a virtual device. The first spare name 96 is a name for the user of the access route related to the first name 93 when the virtual device is not used. The second spare name 97 is a name for the user of the access route related to the second name 94 when the virtual device is not used.

FIG. 15 is a diagram illustrating an example of expression of failure information.
The failure information 600 is expressed by a failure name 601, a failure description start unit 602, a first failure description unit 603, a second failure description unit 604, and a failure description end unit 605.

  The failure name 601 is the name of the access route where the failure is detected. The failure description start unit 602 declares the start of the description of the failure. In the first failure explanation unit 603, when cmd_flag = 3, it is a failure other than the adapter 101, and when cmd_flag = 1, it is a failure of the adapter 101. In the second failure explanation unit 604, when es_key = 0x4, the failure is other than the storage device 500, and when es_key = 0x3, the failure is in the storage device 500. When es_key = 0x4 and es_key = 0x3, the controller of the storage device 500 reports to the failure identifying unit 103. Note that this function is originally possessed by the storage device 500. The fault explanation end unit 605 declares the end of the fault explanation.

FIG. 16 is a diagram illustrating an example of processing of the access route switching unit for the adapter.
When the adapter 101 is identified as a failure location by the failure identifying unit 103, the affected access routes are communication 1 and communication 2. In this case, the access route switching units 104 and 204 stop the communication 1 and make the communication 4 operational. The access route switching units 104 and 204 stop the communication 2.

FIG. 17 is a diagram illustrating an example of processing of the access route switching unit for the controller.
When the controller 501 is specified as a failure location by the failure specifying unit 103, the affected access routes are communication 1, communication 3, communication 5, and communication 7. In this case, the access route switching units 104 and 204 stop the communication 1 and make the communication 4 operational. The access route switching units 104 and 204 stop the communication 3. The access route switching units 104 and 204 stop the communication 5 and use the communication 8 for operation. The access route switching units 104 and 204 stop the communication 7.

FIG. 18 is a diagram illustrating an example of processing of the access route switching unit for the transmission path before the repeater.
When the transmission path L11 is specified as a failure location by the failure specifying unit 103, the affected access routes are communication 1 and communication 2. In this case, the access route switching units 104 and 204 stop the communication 1 and make the communication 4 operational. The access route switching units 104 and 204 stop the communication 2.

FIG. 19 is a diagram illustrating an example of processing of an access route switching unit for a repeater.
When the repeater 300 is identified as a failure location by the failure identification unit 103, the affected access routes are communication 1, communication 2, communication 5, and communication 6. In this case, the access route switching units 104 and 204 stop the communication 1 and make the communication 4 operational. The access route switching units 104 and 204 stop the communication 2. The access route switching units 104 and 204 stop the communication 5 and use the communication 8 for operation. The access route switching units 104 and 204 stop the communication 6.

FIG. 20 is a diagram illustrating an example of processing of the access route switching unit for the transmission path after the repeater.
When the transmission path L15 is specified as a failure location by the failure specifying unit 103, the affected access routes are the communication 1 and the communication 5. In this case, the access route switching units 104 and 204 stop the communication 1 and make the communication 4 operational. The access route switching units 104 and 204 stop the communication 5 and use the communication 8 for operation.

  This eliminates the need for an operation on the computer system when replacing the constituent elements, so that an operation error cannot occur. In addition, even a person with little knowledge of a computer system can easily exchange components.

Further, it is possible to realize a highly reliable computer system that can be continuously operated without degrading the processing performance in normal business.
[Second Embodiment]
Hereinafter, a case will be described in which a setting file in which the order of activation of the failure confirmation unit for each component is stored is used as compared with the first embodiment.

FIG. 21 is a system configuration diagram of the second embodiment.
In the system configuration diagram of the second embodiment, the first computer 100 is changed to the first computer 100z, and the second computer 200 is changed to the second computer 200z, compared to the first embodiment. The failure identification unit 103 is changed to the failure identification unit 103z, and the failure identification unit 203 is changed to the failure identification unit 203z. A setting file 50 is added to the first computer 100z and the second computer 200z.

  In the relationship between the first embodiment and the second embodiment, when the names of the constituent elements excluding the failure specifying units 103z and 203z are the same, the functions of the constituent elements are also the same. The setting file 50 stores the activation order of the failure confirmation unit for each component. Then, it is referred to by the failure identification units 103z and 203z.

FIG. 22 is a diagram illustrating an example of a setting file. The order of starting the failure confirmation unit for each component is specified in the configuration file.
The setting file 50 includes a component name, an abbreviation of the failure confirmation unit, a failure location at the time of an abnormal response, and a failure location at the time of a normal response. The component name is the name of the component. The abbreviation of the failure confirmation unit is an abbreviation of means for confirming the failure of the component related to the component name. The failure part at the time of an abnormal response is a component that has caused a failure when the component related to the component name is abnormal. The failure part at the time of normal response is a component that has caused a failure when the component related to the component name is normal.

  Specifically, the order of activation of the failure confirmation unit for each component is described in the setting file 50 in the order of execution. If the processing of FIG. 10 and FIG. 11 is described in the setting file 50, it will be as shown in FIG.

  The setting file 50 includes a failure confirmation unit 51 for the storage device body, a failure confirmation unit 52 for the adapter, a failure confirmation unit 53 for the controller (own route), a failure confirmation unit 54 for the controller (other route), the relay and the transmission before the relay. It comprises a fault confirmation unit 55 for the path, and a fault confirmation unit 56 for the repeater and the transmission path after the repeater.

The failure confirmation unit 51 for the storage device main body executes failure confirmation for a component called the storage device main body 503 and is abbreviated as (a).
The failure confirmation unit 52 for the adapter performs failure confirmation for the constituent element of the adapter 101, which is abbreviated as (b), and uses the adapter 101 as a failure location during an abnormal response.

  The failure confirmation unit 53 for the controller (own route) executes failure confirmation for the component called the controller 501, which is abbreviated as (c), and sets the storage device body 503 as a failure point during normal response.

  The failure confirmation unit 54 for the controller (other route) executes failure confirmation for a component called the controller 501, and is abbreviated as (d). The controller 501 is used as a failure location during an abnormal response, and the transmission path L11, Let L15 and the repeater 300 be faulty locations.

  The failure confirmation unit 55 for the repeater and the transmission line before the repeater performs failure confirmation for the constituent element called the repeater 300, which is abbreviated as (e). Sometimes, the transmission line L11 is used as a failure location.

  The failure confirmation unit 56 for the repeater and the transmission line after the repeater performs failure confirmation for the component called the transmission line L16, which is abbreviated as (f). Sometimes, the transmission line L15 is used as a failure location.

  As described above, by using the setting file 50, the test access can be freely executed, and even in the case of a computer system having a complicated configuration of the constituent elements, it is easy to specify the fault location. And it becomes easy to specify the cause of the failure of a component.

  Specifically, when a repeater such as a Hub is added to an existing computer system, if the component has a function that allows the computer to confirm a failure, the component can be added to the setting file 50. , Automatic identification of the fault location becomes possible.

[Third Embodiment]
Hereinafter, a case where the number of storage devices is increased from one to two as compared with the first embodiment will be described.

FIG. 23 is a system configuration diagram of the third embodiment.
The system configuration diagram of the third embodiment includes a first computer 100, a second computer 200, repeaters 300, 400, a first storage device 510, a second storage device 520, transmission lines L11, L12, L13, L14, L15, L16, L17, L18, L19, L20, L21, and L22. The first computer 100 and the second computer 200 are user terminal devices that respond to a user service request or transmit a user service request to a server. The repeaters 300 and 400 connect the first computer 100, the second computer 200, the first storage device 510, and the second storage device 520 to each other. The first storage device 510 can store data from the first computer 100 and the second computer 200. The second storage device 520 can store data from the first computer 100 and the second computer 200. The first computer 100, the second computer 200, the repeaters 300, 400, the first storage device 510, and the second storage device 520 include transmission lines L11, L12, L13, L14, L15, L16, L17, It communicates with each other via L18, L19, L20, L21, and L22.

The first computer 100 is as described in the first embodiment.
The second computer 200 is as described in the first embodiment.
The first storage device 510 includes controllers 511 and 512 and a storage device body 513. The controllers 511 and 512 connect the first storage device 510 to the network. The storage device main body 513 is the main body of the first storage device 510. The controllers 511 and 512 and the storage device main body 513 communicate with each other.

  The second storage device 520 includes controllers 521 and 522 and a storage device body 523. The controllers 521 and 522 connect the second storage device 520 to the network. The storage device main body 523 is the main body of the second storage device 520. The controllers 521 and 522 and the storage device main body 523 communicate with each other.

FIG. 24 is a diagram illustrating an example of a communication table.
The communication table 70 includes a name, a used transmission path, and a communication status. The name is the name of the access route. The used transmission line is a transmission line used by the access route related to the name. The communication status is the status of the access route related to the name. The communication status is for operation when the access route is operated, for standby when the access route is waiting, and for diagnosis when the access route is for the purpose of diagnosing the access route.

  Here, the descriptions in FIG. 24 for operation, diagnosis, and standby are initial values of the third embodiment. Communication 1 uses transmission lines L11 and L15 and is for operation. Communication 2 uses transmission lines L11 and L16 and is used for diagnosis. Communication 3 uses transmission lines L11 and L17 and is for operation. Communication 4 uses transmission lines L11 and L18 and is used for diagnosis. Communication 5 uses transmission lines L12 and L19 and is for diagnosis. Communication 6 uses transmission lines L12 and L20 and is for standby. Communication 7 uses transmission lines L12 and L21 and is used for diagnosis. Communication 8 uses transmission lines L12 and L22 and is for standby. Communication 9 uses transmission lines L13 and L15 and is for operation. The communication 10 uses transmission lines L13 and L16 and is for diagnosis. The communication 11 uses transmission lines L13 and L17 and is for operation. The communication 12 uses transmission lines L13 and L18 and is used for diagnosis. Communication 13 uses transmission lines L14 and L19 and is used for diagnosis. Communication 14 uses transmission lines L14 and L20 and is for standby. Communication 15 uses transmission lines L14 and L21 and is used for diagnosis. Communication 16 uses transmission lines L14 and L22 and is for standby.

  The access route switching units 104 and 204 create the communication table 70 when the first computer 100, the second computer 200, the first storage device 510, and the second storage device 520 are connected. When input / output is started with respect to the first storage device 510 and the second storage device 520, the failure information of the failure identification units 103 and 203 prevents the computer from accessing the access route where the failure location exists when replacing the failure location. In addition, the access route in which the failure point exists is switched to the access route in which the failure point does not exist.

FIG. 25 is a diagram illustrating an example of processing of the access route switching unit for the transmission path after the repeater.
When the transmission path L15 is specified as a failure location by the failure specifying unit 103, the affected access routes are the communication 1 and the communication 9. In this case, the access route switching units 104 and 204 stop the communication 1 and use the communication 6 for operation. The access route switching units 104 and 204 stop the communication 9 and make the communication 14 operational.

FIG. 26 is a diagram illustrating changes in the communication table in the case of FIG.
In the communication table 70, the communication 1 changes to stop, the communication 6 changes to operation, the communication 9 changes to stop, and the communication 14 changes to operation.

FIG. 27 is a diagram illustrating an example of processing of the access route switching unit for the controller.
When the controller 511 is specified as a failure location by the failure specifying unit 103, the affected access routes are communication 1, communication 5, communication 9, and communication 13. In this case, the access route switching units 104 and 204 stop the communication 1 and use the communication 6 for operation. The access route switching units 104 and 204 stop the communication 5. The access route switching units 104 and 204 stop the communication 9 and make the communication 14 operational. The access route switching units 104 and 204 stop the communication 13.

FIG. 28 is a diagram showing changes in the communication table in the case of FIG.
In the communication table 70, communication 1 is changed to stop, communication 6 is changed to operation, communication 5 is changed to stop, communication 9 is changed to stop, communication 14 is changed to operation, and communication 13 is changed to stop.

  This eliminates the need for an operation on the computer system when replacing the constituent elements, so that an operation error cannot occur. In addition, even a person with little knowledge of a computer system can easily exchange components.

Further, it is possible to realize a highly reliable computer system that can be continuously operated without degrading the processing performance in normal business.
FIG. 29 is a diagram illustrating an example of a hardware configuration of a computer. The entire computer 800 is controlled by a CPU (Central Processing Unit) 801. A random access memory (RAM) 802, a hard disk drive (HDD) 803, a graphic processing device 804, an input interface 805, and a communication interface 806 are connected to the CPU 801 via a bus 807.

  The RAM 802 temporarily stores at least part of an OS program and application programs to be executed by the CPU 801. The RAM 802 stores various data necessary for processing by the CPU 801. The HDD 803 stores an OS and application programs.

  A monitor 901 is connected to the graphic processing device 804. The graphic processing device 804 displays an image on the screen of the monitor 901 in accordance with a command from the CPU 801. A keyboard 902 and a mouse 903 are connected to the input interface 805. The input interface 805 transmits a signal transmitted from the keyboard 902 or the mouse 903 to the CPU 801 via the bus 807.

  The communication interface 806 is connected to the network 904. The communication interface 806 transmits / receives data to / from other computers via the network 904.

With the hardware configuration as described above, the processing functions of the present embodiment can be realized.
The above processing functions can be realized by a computer. In that case, a program describing the processing contents of the function that the failure analysis apparatus should have is provided. By executing the program on a computer, the above processing functions are realized on the computer. The program describing the processing contents can be recorded on a computer-readable recording medium. Examples of the computer-readable recording medium include a magnetic recording device, an optical disk, a magneto-optical recording medium, and a semiconductor memory. Examples of the magnetic recording device include a hard disk device (HDD), a flexible disk (FD), and a magnetic tape. Examples of the optical disc include a DVD (Digital Versatile Disc), a DVD-RAM (Random Access Memory), a CD-ROM (Compact Disc Read Only Memory), and a CD-R (Recordable) / RW (ReWritable). Magneto-optical recording media include MO (Magneto-Optical disk).

  When distributing the program, for example, a portable recording medium such as a DVD or a CD-ROM in which the program is recorded is sold. It is also possible to store the program in a storage device of a server computer and transfer the program from the server computer to another computer via a network.

  The computer that executes the program stores, for example, the program recorded on the portable recording medium or the program transferred from the server computer in its own storage device. Then, the computer reads the program from its own storage device and executes processing according to the program. The computer can also read the program directly from the portable recording medium and execute processing according to the program. In addition, each time the program is transferred from the server computer, the computer can sequentially execute processing according to the received program.

(Supplementary note 1) In a failure analysis apparatus for analyzing a communication failure between a plurality of information devices and a plurality of devices capable of communicating with a plurality of access routes having one or more transmission paths connecting the information devices as constituent elements ,
When a failure is detected in normal access between the plurality of devices, failure detection means that sets all components on the access route that has executed the normal access as failure location candidates;
When a failure is detected by the failure detection means, a test access is executed to the failure location candidate, and if no failure is detected by the test access, all the access routes on which the test access is executed When a component is excluded from the failure location candidates and a failure is detected by the test access, all components that are not arranged on the access route that has executed the test access are excluded from the failure location candidates. Fault diagnosis means to
In the failure diagnosis unit, as a result of execution of the test access through one or more access routes, a failure identification unit that uses the component of the failure point candidate that is the last one as a failure point;
An access route switching unit that switches the access route for normal access between the plurality of devices to an access route that does not pass through a component identified as a failure location by the failure identifying unit;
A failure analysis apparatus characterized by comprising:

  (Additional remark 2) The said fault diagnosis means refers to the setting file in which the order of starting of the test access is stored, and executes the test access in the order indicated by the setting file. The failure analysis device described.

  (Supplementary note 3) The fault analysis device according to supplementary note 1, wherein the fault diagnosis unit executes the test access by an access route that passes through some components of the access route that has executed the normal access.

  (Supplementary note 4) The fault analysis device according to supplementary note 1, wherein the fault diagnosis unit executes the test access by an access route that passes through a component different from the access route that has executed the normal access.

  (Supplementary Note 5) The plurality of devices are a storage device and a computer that accesses the storage device via a network, and the information device includes a device main body that stores data in the storage device, and the device main body. The failure analysis apparatus according to claim 1, further comprising: a controller for controlling, a relay for relaying data on the network, and an adapter for controlling communication in the computer.

(Additional remark 6) The failure which analyzes the failure of communication between several apparatuses which can communicate by several access route which makes a component a 1 or more transmission path which connects between several information devices and the said information devices with a computer In the analysis method,
When the failure detection means detects a failure in normal access between the plurality of devices, all the components on the access route that executed the normal access are set as failure location candidates,
If the failure diagnosis unit detects a failure by the failure detection unit, the failure diagnosis unit performs a test access to the failure location candidate, and if the failure is not detected by the test access, the access that has performed the test access When all the components on the route are excluded from the failure location candidates and a failure is detected by the test access, all the components not arranged on the access route that has executed the test access are Exclude from failure candidate,
As a result of the execution of the test access by one or more access routes in the failure diagnosis unit, the failure identification unit sets the component of the failure location candidate that is the last one as a failure location,
The access route switching means switches the access route for normal access between the plurality of devices to an access route that does not pass through a component identified as a failure location by the failure identification means.
A failure analysis method characterized by the above.

(Supplementary note 7) In a failure analysis program for analyzing a communication failure between a plurality of information devices and a plurality of devices communicable by a plurality of access routes having one or more transmission paths connecting the information devices as constituent elements ,
On the computer,
When detecting a failure in normal access between the plurality of devices, the failure detection means sets all components on the access route that executed the normal access as failure location candidates,
When a failure is detected by the failure detection unit, the failure diagnosis unit executes a test access to the failure location candidate, and if the failure is not detected by the test access, the access that has executed the test access When all the components on the route are excluded from the failure location candidates and a failure is detected by the test access, all the components not arranged on the access route that has executed the test access are Exclude from failure candidate,
The failure identifying means uses the component of the failure location candidate that has become the last one as a result of the execution of the test access by one or more access routes in the failure diagnosis means as a failure location,
The access route switching means switches the access route for normal access between the plurality of devices to an access route that does not pass through a component identified as a failure location by the failure identifying means.
A failure analysis program characterized by causing a process to be executed.

(Supplementary Note 8) A failure analysis program for analyzing a communication failure between a plurality of information devices and a plurality of devices communicable by a plurality of access routes having one or more transmission paths connecting the information devices as constituent elements In a recorded computer-readable recording medium,
On the computer,
When detecting a failure in normal access between the plurality of devices, the failure detection means sets all components on the access route that executed the normal access as failure location candidates,
When a failure is detected by the failure detection unit, the failure diagnosis unit executes a test access to the failure location candidate, and if the failure is not detected by the test access, the access that has performed the test access When all the components on the route are excluded from the failure location candidates and a failure is detected by the test access, all the components not arranged on the access route that has executed the test access are Exclude from failure candidate,
The failure identifying means uses the component of the failure location candidate that has become the last one as a result of the execution of the test access by one or more access routes in the failure diagnosis means as a failure location,
The access route switching means switches the access route for normal access between the plurality of devices to an access route that does not pass through the component identified as the failure location by the failure identification means.
A computer-readable recording medium on which a failure analysis program is recorded.

It is a conceptual diagram of this invention. It is a system configuration figure of a 1st embodiment. It is a figure which shows the example of a failure specific | specification part. It is a figure which shows the example of a process of the failure confirmation part with respect to a memory | storage device main body. It is a figure which shows the example of a process of the failure confirmation part with respect to an adapter. It is a figure which shows the example of a process of the failure confirmation part with respect to a controller (own path). It is a figure which shows the example of a process of the failure confirmation part with respect to a controller (other path | route). It is a figure which shows the example of a process of the failure confirmation part with respect to a repeater and a transmission line before a repeater. It is a figure which shows the example of a process of the failure confirmation part with respect to a repeater and a transmission line after a repeater. It is the first half of the flowchart which shows the example of a process of 1st Embodiment. It is the second half of the flowchart which shows the example of a process of 1st Embodiment. It is a figure which shows the example of a communication table. It is a figure which shows the example of the expression of the existing access route. It is a figure which shows the example of expression of access route information. It is a figure which shows the example of expression of fault information. It is a figure which shows the example of a process of the access route switching part with respect to an adapter. It is a figure which shows the example of a process of the access route switching part with respect to a controller. It is a figure which shows the example of a process of the access route switching part with respect to the transmission line before a repeater. It is a figure which shows the example of a process of the access route switching part with respect to a repeater. It is a figure which shows the example of a process of the access route switching part with respect to the transmission line after a repeater. It is a system configuration figure of a 2nd embodiment. It is a figure which shows the example of a setting file. It is a system configuration figure of a 3rd embodiment. It is a figure which shows the example of a communication table. It is a figure which shows the example of a process of the access route switching part with respect to the transmission line after a repeater. It is a figure which shows the change of the communication table by the case of FIG. It is a figure which shows the example of a process of the access route switching part with respect to a controller. It is a figure which shows the change of the communication table by the case of FIG. It is a figure which shows the example of the hardware constitutions of a computer. It is a figure which shows the example of the response | compatibility to the failure in the conventional system block diagram.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Computer 11 Failure analysis device 11a Failure detection means 11b Failure diagnosis means 11c Failure identification means 11d Access route switching means 12 Adapter 13 Adapter 20 Repeater 30 Repeater 40 Device 41 Controller 42 Controller 43 Device main body L1 Transmission path L2 Transmission path L3 Transmission Path L4 transmission path L5 transmission path L6 transmission path L7 transmission path L8 transmission path

Claims (5)

In a failure analysis device that analyzes a failure in communication between a plurality of information devices and a plurality of devices that can communicate with a plurality of access routes having one or more transmission paths connecting the information devices as components,
When a failure is detected in normal access between the plurality of devices, failure detection means that sets all components on the access route that has executed the normal access as failure location candidates;
When a failure is detected by the failure detection means, a test access is executed to the failure location candidate, and if no failure is detected by the test access, all the access routes on which the test access is executed When a component is excluded from the failure location candidates and a failure is detected by the test access, all components that are not arranged on the access route that has executed the test access are excluded from the failure location candidates. Fault diagnosis means,
In the failure diagnosis unit, as a result of execution of the test access through one or more access routes, a failure identification unit that uses the component of the failure point candidate that is the last one as a failure point;
An access route switching unit that switches the access route for normal access between the plurality of devices to an access route that does not pass through a component identified as a failure location by the failure identifying unit;
A failure analysis apparatus characterized by comprising:   The failure according to claim 1, wherein the failure diagnosis unit refers to a setting file in which a start order of test access is stored, and executes the test access in an order indicated by the setting file. Analysis device.   The failure analysis apparatus according to claim 1, wherein the failure diagnosis unit executes the test access with an access route that passes through some components of the access route that has executed the normal access.   The failure analysis apparatus according to claim 1, wherein the failure diagnosis unit executes the test access using an access route that passes through a component different from the access route that executed the normal access. In a failure analysis method for analyzing a failure in communication between a plurality of devices capable of communicating with a plurality of access routes having a plurality of information devices and one or more transmission paths connecting the information devices as components, by a computer,
When the failure detection means detects a failure in normal access between the plurality of devices, all the components on the access route that executed the normal access are set as failure location candidates,
If the failure diagnosis unit detects a failure by the failure detection unit, the failure diagnosis unit performs a test access to the failure location candidate, and if the failure is not detected by the test access, the access that has performed the test access When all the components on the route are excluded from the failure location candidates and a failure is detected by the test access, all the components not arranged on the access route that has executed the test access are Exclude from failure candidate,
As a result of the execution of the test access by one or more access routes in the failure diagnosis unit, the failure identification unit sets the component of the failure location candidate that is the last one as a failure location,
The access route switching means switches the access route for normal access between the plurality of devices to an access route that does not pass through a component identified as a failure location by the failure identification means.
A failure analysis method characterized by the above.

Images