Operation management device, operation management method

Abstract

An operation management to grasp a metric in which a continuous abnormality has occurred in a system, easily, is provided. An operation management apparatus 100 includes a metric collection unit ( 101 ) and an abnormality score calculation unit ( 104 ). The metric collection unit ( 101 ) collects a measured value of each of a plurality of metrics in a system sequentially. The abnormality score calculation unit ( 104 ) calculates and outputs, on the basis of a continuity level indicating a degree of continuity of an abnormality of the measurement value for each of the plurality of metrics at each time, an abnormality score for the metric.

1 - 21 . (canceled) 
     
     
         22 . An operation management apparatus comprising:
 a processor; and   a memory configured to store a program logic, the program logic comprising:   an abnormality detection unit configured to detect, from among a plurality of metrics, one or more abnormal metrics;   a clustering unit configured to generate one or more clusters, the clusters each including two or more of the abnormal metrics; and   a display image generation unit configured to generate a display image including one or more first graphical symbols and one or more second graphical symbols, the first graphical symbols each corresponding to each of the clusters and the second graphical symbols each corresponding to one of the abnormal metrics not included in the clusters, wherein   the first graphical symbol is displayed, in the display image, at a size determined based on abnormal metrics included in the cluster corresponding to the first graphical symbol.   
     
     
         23 . The operation management apparatus according to  claim 22 , wherein the size of the first graphical symbol is determined larger than the size of the second graphical symbol. 
     
     
         24 . The operation management apparatus according to  claim 22 , wherein the first graphical symbol is displayed at a first height determined by a first score of the corresponding cluster, the first score being determined based on an attribute value of the corresponding cluster. 
     
     
         25 . The operation management apparatus according to  claim 24 , wherein the first graphical symbol is displayed at a higher position when the first score is larger. 
     
     
         26 . The operation management apparatus according to  claim 24 , wherein the first score is determined based on the abnormal metrics included in the corresponding cluster. 
     
     
         27 . The operation management apparatus according to  claim 24 , wherein the second graphical symbol is displayed at a second height determined by a second score of the corresponding abnormal metric, the second score being determined based on an attribute value of the corresponding abnormal metric. 
     
     
         28 . The operation management apparatus according to  claim 22 , wherein the metrics are acquired from a plurality of data sources. 
     
     
         29 . An operation management method comprising:
 detecting, from among a plurality of metrics, one or more abnormal metrics;   generating one or more clusters, the clusters each including two or more of the abnormal metrics; and   generating a display image including one or more first graphical symbols and one or more second graphical symbols, the first graphical symbols each corresponding to each of the clusters and the second graphical symbols each corresponding to one of the abnormal metrics not included in the clusters, wherein   the first graphical symbol is displayed, in the display image, at a size determined based on abnormal metrics included in the cluster corresponding to the first graphical symbol.   
     
     
         30 . The operation management method according to  claim 29 , wherein the size of the first graphical symbol is determined larger than the size of the second graphical symbol. 
     
     
         31 . The operation management method according to  claim 29 , wherein the first graphical symbol is displayed at a first height determined by a first score of the corresponding cluster, the first score being determined based on an attribute value of the corresponding cluster. 
     
     
         32 . The operation management method according to  claim 31 , wherein the first graphical symbol is displayed at a higher position when the first score is larger. 
     
     
         33 . The operation management method according to  claim 31 , wherein the first score is determined based on the abnormal metrics included in the corresponding cluster. 
     
     
         34 . The operation management method according to  claim 31 , wherein the second graphical symbol is displayed at a second height determined by a second score of the corresponding abnormal metric, the second score being determined based on an attribute value of the corresponding abnormal metric. 
     
     
         35 . The operation management method according to  claim 29 , wherein the metrics are acquired from a plurality of data sources. 
     
     
         36 . A non-transitory computer readable storage medium recording thereon a program, causing a computer to perform a method comprising:
 detecting, from among a plurality of metrics, one or more abnormal metrics;   generating one or more clusters, the clusters each including two or more of the abnormal metrics; and   generating a display image including one or more first graphical symbols and one or more second graphical symbols, the first graphical symbols each corresponding to each of the clusters and the second graphical symbols each corresponding to one of the abnormal metrics not included in the clusters, wherein   the first graphical symbol is displayed, in the display image, at a size determined based on abnormal metrics included in the cluster corresponding to the first graphical symbol.   
     
     
         37 . The non-transitory computer readable storage medium recording thereon the program according to  claim 36 , wherein the size of the first graphical symbol is determined larger than the size of the second graphical symbol. 
     
     
         38 . The non-transitory computer readable storage medium recording thereon the program according to  claim 36 , wherein the first graphical symbol is displayed at a first height determined by a first score of the corresponding cluster, the first score being determined based on an attribute value of the corresponding cluster. 
     
     
         39 . The non-transitory computer readable storage medium recording thereon the program according to  claim 38 , wherein the first graphical symbol is displayed at a higher position when the first score is larger. 
     
     
         40 . The non-transitory computer readable storage medium recording thereon the program according to  claim 38 , wherein the first score is determined based on the abnormal metrics included in the corresponding cluster. 
     
     
         41 . The non-transitory computer readable storage medium recording thereon the program according to  claim 38 , wherein the second graphical symbol is displayed at a second height determined by a second score of the corresponding abnormal metric, the second score being determined based on an attribute value of the corresponding abnormal metric. 
     
     
         42 . The non-transitory computer readable storage medium recording thereon the program according to  claim 36 , wherein the metrics are acquired from a plurality of data sources.