Management system for outputting information denoting recovery method corresponding to root cause of failure

A management system comprising:

• an interface for communicating with a plurality of node apparatuses;
• a processor comprising one or more computers, and configured to detect via the interface an event that occurs in the plurality of node apparatuses;
• a storage resource storing event information, meta rule information, and failure record information including a failure record entry;
• a display device configured to display information related to the plurality of node apparatuses;
• and
• an input device,
• wherein the event information includes an event entry representing information for identifying a generation-source node apparatus of the event that occurred, and an event type that occurred,
• wherein the meta rule information includes a meta rule representing a potential event type that could potentially occur in the node apparatus and an event type that can be identified as a root cause in a case where an event corresponding to the potential event type occurs, without including an identifier of the node apparatus,
• wherein the processor is configured:
• (A) to identify a first cause event, which is the root cause of a first event identified by an stored in the event information based on the meta rule information, and identifies a first meta rule used in identifying the first cause event;
• (B) to receive via the input device a first recovery method, which is a method for recovering from the first cause event, and into the failure record information, adds a first failure record entry including the first recovery method, an identifier of a first cause apparatus occurring the first cause event, and an identifier of the first meta rule;
• (C) to identify a second cause event, which is the root cause of a second event identified by the event entry stored in the event information based on the meta rule information, and identifies a second meta rule used in identifying the second cause event;
• and
• (D) to identify particular failure record entry including the identifier of the second meta rule, and
• the display device is configured:
• (X) to display information related to the second cause event as the root cause of the second event;
• and
• (Y) to display a recovery method from the second cause event by showing:
• (Y1) the first recovery method in the certain failure record entry, and (Y2) the identifier of the first cause apparatus in the particular failure record entry.

A non-transitory computer readable medium storing computer program code executable by a processor provided in a management system, the management system comprising:

• an interface configured to communicate with a plurality of node apparatuses;
• a processor comprising one or more computers, and configured to detect via the interface an event that occurs in the plurality of node apparatuses;
• a storage resource configured to store event information, meta rule information, and failure record information including a failure record entry;
• a display device configured to display information related to the plurality of node apparatuses;
• and
• an input device,
• wherein the event information includes an event entry representing information for identifying a generation-source node apparatus of the event that occurred, and an event type that occurred,
• wherein the meta rule information includes a meta rule representing a potential event type that could potentially occur in the node apparatus and an event type that can be identified as a root cause in a case where an event corresponding to the potential event type occurs, without including an identifier of the node apparatus,
• wherein the computer program code stored in the non-transitory computer readable medium, when executed, causes the processor to perform the functions of:
• (A) identifying a first cause event, which is the root cause of a first event identified by an stored in the event information based on the meta rule information, and identifying a first meta rule used in identifying the first cause event;
• (B) receiving via the input device a first recovery method, which is a method for recovering from the first cause event, and into the failure record information, adding a first failure record entry including the first recovery method, an identifier of a first cause apparatus occurring the first cause event, and an identifier of the first meta rule;
• (C) identifying a second cause event, which is the root cause of a second event identified by the event entry stored in the event information based on the meta rule information, and identifying a second meta rule used in identifying the second cause event;
• and
• (D) identifying a particular failure record entry including the identifier of the second meta rule, and
• wherein the processor, by executing the computer program code stored in the non-transitory computer readable medium, causes the display device to perform the functions of
• (X) displaying information related to the second cause event as the root cause of the second event;
• and
• (Y) displaying a recovery method from the second cause event by showing:
• (Y1) the first recovery method in the certain failure record entry, and (Y2) the identifier of the first cause apparatus in the particular failure record entry.