CN109753401A - Monitoring method, collection terminal, control end, monitoring system and device - Google Patents
Monitoring method, collection terminal, control end, monitoring system and device Download PDFInfo
- Publication number
- CN109753401A CN109753401A CN201711068434.5A CN201711068434A CN109753401A CN 109753401 A CN109753401 A CN 109753401A CN 201711068434 A CN201711068434 A CN 201711068434A CN 109753401 A CN109753401 A CN 109753401A
- Authority
- CN
- China
- Prior art keywords
- data
- dictionary
- monitoring
- collection terminal
- control end
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Abstract
The invention discloses a kind of monitoring method, collection terminal, control end, monitoring system and devices, are related to information technology field.Monitoring method therein includes: collection terminal acquisition monitoring data；Collection terminal is by the data structure of data dictionary set form to control end transmitting monitor data, and data dictionary set includes multiple data dictionaries, and each data dictionary includes dictionary item and dictionary item data；Collection terminal calculates the dictionary item data difference of this monitoring data to be transmitted and last time transmitting monitor data；Collection terminal transmits the data dictionary that dictionary item data difference in this monitoring data to be transmitted is more than or equal to transmission discrepancy threshold to control end.The present invention can more efficiently be monitored host platform.
Description
Technical field
The present invention relates to information technology field, in particular to a kind of monitoring method, collection terminal, control end, monitoring system and
Device.
Background technique
Host platform includes the bottom clothes of more be mutually related host and mating hardware environments and service-oriented
Business, it supports the orderly running of enterprise's IT business, and health condition, which directly determines, externally provides the quality of business.Therefore right
For IT operation maintenance personnel, the operating status of host platform in time, is accurately grasped, and can quickly position and ask when failure occurs
Topic, is of great significance.
For this problem, universal solution is deployment host platform monitoring system.Host platform monitoring system is a kind of
Quasi real time collect host operation and configuration information, the automation IT operation management system that can be found that host is abnormal in time, alert in time
System.The acquisition of host monitor data is broadly divided into two classes of remote collection and local acquisition: remote collection refers to that monitoring system is remotely stepped on
It records host and carries out information collection；Local acquisition refers to monitoring system in monitored host deployments acquisition component, and taken at regular intervals is concurrent
It send to monitoring system, two class technologies are widely used.
Summary of the invention
Inventor is the study found that existing host monitor method is capable of the hardware of overall monitor host platform, software, centre
The information such as part, service, port, process, file, but there are following some outstanding problems: one, frequency acquisition lack flexibility, prison
Control system usually grabs host platform information according to the Fixed Time Interval of pre-configuration, does not account for host platform present load feelings
Condition, this may interfere with host platform normal work, is especially still frequently acquired when host platform is abnormal, can be right
Business generation seriously affects；Two, network transmission expense is big, and each full dose acquires all information, cause largely with monitoring, alarm nothing
The data of pass are repeatedly transmitted, and occupy network bandwidth, and actually many data are in front and back acquires several times that there is no become
Change, is transmitted without repeating.These problems directly affect the scalability of monitoring system, can not be suitable for extensive host platform
Environment.
The technical problem that the present invention solves is how to be more efficiently monitored to host platform.
According to an aspect of an embodiment of the present invention, a kind of monitoring method is provided, wherein include: collection terminal acquisition prison
Control data；Collection terminal is by the data structure of data dictionary set form to control end transmitting monitor data, data dictionary set
Including multiple data dictionaries, each data dictionary includes dictionary item and dictionary item data；Collection terminal calculates this prison to be transmitted
Control the dictionary item data difference of data and last time transmitting monitor data；Collection terminal transmits this monitoring number to be transmitted to control end
It is more than or equal to the data dictionary of transmission discrepancy threshold according to middle dictionary item data difference.
In some embodiments, monitoring method further include: collection terminal transmits instruction according to the request at control end, to control end
Dictionary item data difference is less than the data dictionary of transmission discrepancy threshold in transmission history monitoring data.
In some embodiments, monitoring method further include: collection terminal receives default frequency acquisition, the minimum that control end is sent
Frequency acquisition, maximum frequency acquisition, admission threshold；Current frequency acquisition is set default frequency by collection terminal；Collection terminal calculates
The average value of the resource utilization monitoring data of nearest 10 acquisitions；In the case where average value is less than or equal to admission threshold, adopt
Collect 1.072 times before end sets current frequency acquisition to, and selects in the frequency acquisition after doubling and maximum authorized frequency
Smaller value be monitored the acquisitions of data；In the case where average value is greater than admission threshold, collection terminal is by current frequency acquisition
Halve, and the larger value in frequency acquisition and minimum authorized frequency after halving is selected to be monitored the acquisitions of data.
In some embodiments, monitoring method further include: control end utilizes serve port, the IP extracted from monitoring data
Address and protocol data dictionary enquiring business registration form, using corresponding business as the root node of resource tree；Control end will mention
Level-one child node of serve port, IP address and the protocol data dictionary taken as resource tree；End is managed to utilize from monitoring number
According to the session dictionary in the serve port of middle extraction, IP address and protocol data retrieval monitoring data, by corresponding session mark
Know the second level child node as resource tree；End is managed using in serve port, IP address and protocol data retrieval monitoring data
Session dictionary, using corresponding session identification as the second level child node of resource tree；End is managed using session identification retrieval monitoring
Process dictionary in data, using corresponding process identification (PID) as the three-level child node of resource tree；End is managed to examine using process identification (PID)
Process dictionary in rope monitoring data, level Four by corresponding executable file complete trails and network interface mark as resource tree
Node；End is managed using network interface mark inquiry network interface and communication link registration form, using corresponding communication link as resource tree
Pyatyi child node.
In some embodiments, monitoring method further include: control end utilizes resource tree, determines guilty culprit position and industry
The service condition being engaged in Infrastructure platform.
Other side according to an embodiment of the present invention provides a kind of collection terminal, wherein and it include: data acquisition module,
For acquiring monitoring data；Data transmission module is transmitted for the data structure by data dictionary set form to control end
Monitoring data, data dictionary set include multiple data dictionaries, and each data dictionary includes dictionary item and dictionary item data；Difference
Different computing module, for calculating the dictionary item data difference of this monitoring data to be transmitted and last time transmitting monitor data；Number
It is poor more than or equal to transmitting to be also used to transmit dictionary item data difference in this monitoring data to be transmitted to control end according to transmission module
The data dictionary of different threshold value.
In some embodiments, data transmission module is also used to: being transmitted instruction according to the request at control end, is passed to control end
Dictionary item data difference is less than the data dictionary of transmission discrepancy threshold in defeated history monitoring data.
In some embodiments, collection terminal further include: information receiving module, the default acquisition sent for receiving control end
Frequency, minimum frequency acquisition, maximum frequency acquisition, admission threshold；Frequency setting module, for setting current frequency acquisition to
Default frequency；Mean value calculation module, the average value of the resource utilization monitoring data for calculating nearest 10 acquisitions；Data
Acquisition module is also used to: in the case where average value is less than or equal to admission threshold, current frequency acquisition is arranged for it collection terminal
Preceding 1.072 times, and the smaller value in frequency acquisition and maximum authorized frequency after doubling is selected to be monitored the acquisitions of data；
In the case where average value is greater than admission threshold, collection terminal halves current frequency acquisition, and selects the frequency acquisition after halving
The acquisition of data is monitored with the larger value in minimum authorized frequency.
Other side according to an embodiment of the present invention provides a kind of control end, wherein control end includes resource tree structure
Block is modeled, is used for: being registered using serve port, IP address and the protocol data dictionary enquiring business extracted from monitoring data
Table, using corresponding business as the root node of resource tree；Using the serve port of extraction, IP address and protocol data dictionary as
The level-one child node of resource tree；Utilize serve port, IP address and the protocol data retrieval monitoring extracted from monitoring data
Session dictionary in data, using corresponding session identification as the second level child node of resource tree；Using serve port, IP address with
And the session dictionary in protocol data retrieval monitoring data, using corresponding session identification as the second level child node of resource tree；Benefit
The process dictionary in monitoring data is retrieved with session identification, using corresponding process identification (PID) as the three-level child node of resource tree；Benefit
With the process dictionary in process identification (PID) retrieval monitoring data, it regard corresponding executable file complete trails and network interface mark as money
The level Four child node of source tree；Inquiry network interface and communication link registration form are identified using network interface, using corresponding communication link as money
The Pyatyi child node of source tree.
In some embodiments, end is managed further include: O&M module determines guilty culprit position for utilizing resource tree
And business is to the service condition of Infrastructure platform.
Another aspect according to an embodiment of the present invention provides a kind of monitoring system, including collection terminal above-mentioned, and
Control end above-mentioned.
Another aspect according to an embodiment of the present invention provides a kind of monitoring device, comprising: memory；And coupling
To the processor of memory, processor is configured as executing monitoring method above-mentioned based on instruction stored in memory.
Another aspect according to an embodiment of the present invention provides a kind of computer readable storage medium, computer-readable
Storage medium is stored with computer instruction, and instruction realizes monitoring method above-mentioned when being executed by processor.
The present invention can more efficiently be monitored host platform.
By referring to the drawings to the detailed description of exemplary embodiment of the present invention, other feature of the invention and its
Advantage will become apparent.
Detailed description of the invention
In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below
There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is only this
Some embodiments of invention without any creative labor, may be used also for those of ordinary skill in the art
To obtain other drawings based on these drawings.
Fig. 1 shows the flow diagram of one embodiment of monitoring method of the present invention.
Fig. 2 shows the flow diagrams of another embodiment of monitoring method of the present invention.
Fig. 3 shows the flow diagram of another embodiment of monitoring method of the present invention.
Fig. 4 shows the product process of the vertical resource tree of the present invention.
Fig. 5 shows the structural schematic diagram of one embodiment of collection terminal of the present invention.
Fig. 6 shows the structural schematic diagram of the one embodiment at present invention control end.
Fig. 7 shows the structural schematic diagram of one embodiment of monitoring system of the present invention.
Fig. 8 shows the structural schematic diagram of one embodiment of monitoring device of the present invention.
Specific embodiment
Following will be combined with the drawings in the embodiments of the present invention, and technical solution in the embodiment of the present invention carries out clear, complete
Site preparation description, it is clear that described embodiments are only a part of the embodiments of the present invention, instead of all the embodiments.Below
Description only actually at least one exemplary embodiment be it is illustrative, never as to the present invention and its application or make
Any restrictions.Based on the embodiments of the present invention, those of ordinary skill in the art are not making creative work premise
Under all other embodiment obtained, shall fall within the protection scope of the present invention.
Fig. 1 is combined to introduce one embodiment of monitoring method of the present invention first.
Fig. 1 shows the flow diagram of one embodiment of monitoring method of the present invention.As shown in Figure 1, in the present embodiment
Monitoring method include:
Step S102, collection terminal acquire monitoring data.
Step S104, collection terminal, to control end transmitting monitor data, are counted by the data structure of data dictionary set form
It include multiple data dictionaries according to dictionary set, each data dictionary includes dictionary item and dictionary item data.
The data transmission format of customization is, it is specified that transmission data is data dictionary set form, each dictionary
Represent a single datum of acquisition, such as session, process.
Step S106, collection terminal calculate the dictionary item data of this monitoring data to be transmitted and last time transmitting monitor data
Difference.
Data difference calculation method is if fruit single datum is numeric type, directly to calculate the difference of two values, and take absolutely
Value；If single datum is list, the quantity (ignoring list items sequence when statistics) of two list different items is counted.
Step S108, collection terminal transmit dictionary item data difference in this monitoring data to be transmitted to control end and are more than or equal to
Transmit the data dictionary of discrepancy threshold.
Transmitting discrepancy threshold is one group of preset transmission conditions numerical value, a dictionary in each numerical value corresponding data dictionary
, data difference had been transmitted with last time when this data to be transmitted and has been less than the value, then did not transmitted or transmit on demand the dictionary item number
According to.
Optionally, monitoring method further include:
Step S110, collection terminal transmit instruction according to the request at control end, the word into control end transmission history monitoring data
Allusion quotation item data difference is less than the data dictionary of transmission discrepancy threshold.
So-called on-demand transmission, i.e., only when managing end to when collection terminal transmission request transmission instruction, collection terminal will not sent out before
The data sent are sent to control end.
A kind of low overhead host platform monitoring method is proposed in above-described embodiment, and host expense and net can be effectively reduced
Network expense, more efficient monitoring host computer platform, while improving the scalability of monitoring.
One specific application examples is described below.In the application example, it is assumed that acquisition network delay and shake data, and set
The propagation threshold for determining network delay is 0 millisecond, and the propagation threshold of network jitter is 5 milliseconds.The data dictionary format of transmission are as follows:
It is assumed that the data acquired for the first time are as follows: network delay 40, network jitter 7；When the data of second of acquisition are network
Prolong 48, network jitter 8；The data of third time acquisition are network delay 48, and network jitter 0 calculates first according to S201-S204
It is secondary and second between data difference are as follows: network delay difference 8 is greater than its threshold value, and network jitter difference 1 is less than its threshold value；
Calculate the data difference between second and third time are as follows: network delay difference 0 is less than its threshold value, network jitter difference 8, greatly
In its threshold value.Therefore the data transmitted three times are respectively (in the form of data dictionary)
It should be strongly noted that the data that do not transmit do not abandon immediately, it can be temporary in collection terminal, once it manages in the future
End is distinctly claimed transmission, and collection terminal can just transmit these data.
Another embodiment of monitoring method of the present invention is introduced below with reference to Fig. 2.
Fig. 2 shows the flow diagrams of another embodiment of monitoring method of the present invention.As shown in Fig. 2, the present embodiment
In monitoring method include:
Step S2021, collection terminal receive default frequency acquisition, minimum frequency acquisition, the maximum acquisition frequency that control end is sent
Rate, admission threshold；
Current frequency acquisition is set default frequency by step S2023, collection terminal；
Step S2025, collection terminal calculate it is nearest 10 times acquisition resource utilization monitoring data average value, and with license
Threshold value comparison；
In the case where average value is less than or equal to admission threshold, step S2027 is executed, collection terminal sets current frequency acquisition
1.072 times before being set to, and the smaller value in the frequency acquisition after doubling and maximum authorized frequency is selected to be monitored data
Acquisition；
In the case where average value is greater than admission threshold, step S2029 is executed, collection terminal halves current frequency acquisition,
And the larger value in frequency acquisition and minimum authorized frequency after halving is selected to be monitored the acquisitions of data.
A kind of low overhead host platform monitoring method is proposed in above-described embodiment, core concept is stood when cpu busy
Frequency acquisition is halved；When CPU is not busy, frequency acquisition is gradually increased, every time than 1.072 times, 10 times of preceding primary raising
Frequency afterwards is exactly 2 times of frequency for the first time.By adaptive frequency acquisition, it can make and comment for system current load situation
Estimate, the autobalance of efficiency and performance is realized by changing frequency acquisition, host expense and network can further be effectively reduced
Expense, more efficient monitoring host computer platform, while improving the scalability of monitoring.
One specific application examples is described below.In the application example, host platform monitoring is divided into collection terminal and control end,
It is 60 seconds/time that control end, which presets default frequency acquisition, 55 seconds/time of minimum authorized frequency, 100 seconds/time of maximum authorized frequency,
Admission threshold 50% (CPU usage).
Default frequency, minimum authorized frequency, maximum authorized frequency, admission threshold are sent to collection terminal first by control end,
It is assumed that current time is 8:00:00 in morning, collection terminal sets present operating frequency as 60 seconds/time.Collection terminal is in 8:01:00
It carries out data for the first time to acquire, it is assumed that collecting host CPU utilization rate at this time is 40%, calculates nearest 10 average value (less than 10
It is secondary to calculate average value by actual frequency), judgement is lower than admission threshold (illustrating that host CPU is not busy), and collection terminal will be acquired currently
Frequency is set as 60/1.072=55.97 seconds/time, the value and no less than minimum authorized frequency；Collection terminal in 8:01:55.97 into
Second of data acquisition of row, it is assumed that collecting host CPU utilization rate at this time is 50%, and calculating nearest 10 average value is 45%,
Lower than admission threshold 50%, current frequency acquisition is set as 55.97/1.072=52.21 seconds/time by collection terminal, because the value is less than
Current frequency acquisition is set as 55 seconds/time of minimum authorized frequency by minimum authorized frequency, collection terminal；Collection terminal is in 8:02:50.97
Carry out the acquisition of third time data, it is assumed that collecting host CPU utilization rate at this time is 90%, calculates nearest 10 average value and is
60%, it is higher than admission threshold 50%, current frequency acquisition is set as 55*2=110 seconds/time by collection terminal, because the value is greater than maximum
Current frequency acquisition is set as 100 seconds/time of maximum authorized frequency by authorized frequency, collection terminal；Collection terminal in 8:04:30.97 into
The 4th data acquisition of row, it is assumed that collecting host CPU utilization rate at this time is 4%, and calculating nearest 10 average value is 46%, low
In admission threshold 50%, current frequency acquisition is set as 100/1.072=93.28 seconds/time by collection terminal；Collection terminal is in 8:06:
04.25 carries out the 5th acquisition, and implementation procedure is acquired referring to preceding four data, similar thereafter.
Another embodiment of monitoring method of the present invention is introduced below with reference to Fig. 3.
Fig. 3 shows the flow diagram of another embodiment of monitoring method of the present invention.As shown in figure 3, the present embodiment
In monitoring method include:
Step S301, control end utilize serve port, IP address and the protocol data dictionary extracted from monitoring data
Inquiry business registration form, using corresponding business as the root node of resource tree；
Step S303 manages end using the serve port of extraction, IP address and protocol data dictionary as the one of resource tree
Grade child node；
Step S305, control end utilize the serve port extracted from monitoring data, IP address and protocol data to retrieve
Session dictionary in monitoring data, using corresponding session identification as the second level child node of resource tree；
Step S307, control end utilize the session word in serve port, IP address and protocol data retrieval monitoring data
Allusion quotation, using corresponding session identification as the second level child node of resource tree；
Step S309, control end is using the process dictionary in session identification retrieval monitoring data, by corresponding process identification (PID)
Three-level child node as resource tree；
Step S311, control end is using the process dictionary in process identification (PID) retrieval monitoring data, by corresponding executable text
Part complete trails and network interface identify the level Four child node as resource tree；
Step S313, control end is using network interface mark inquiry network interface and communication link registration form, by corresponding communication link
Pyatyi child node as resource tree.
Step S315, control end utilize resource tree, determine that guilty culprit position and business make Infrastructure platform
Use situation.
It should be noted that business registration form, network interface and communication link registration form both can be raw according to relevant information dynamic
At can also be saved by manual entry system in advance.
In above-described embodiment, closed by business, serve port, session, process, executable file, network interface, communication link
Connection constructs a top-down vertical IT resource tree, keeps the relationship of business, service and platform more intuitive, fault location is more quasi-
Really, service operation maintenance efficiency is improved.Meanwhile above example implements business respectively to service the running environment of involved platform
Overall monitor, the problem of can accelerating service exception positioning improve troubleshooting efficiency；And realize business, serve port, session,
Process, executable file, network interface, communication link association more intuitively grasp business to the service condition of Infrastructure platform.
One specific application examples is described below.For example, the data dictionary that certain transmission obtains includes:
Fig. 4 shows the product process of the vertical resource tree of the present invention.Session dictionary is retrieved first, according to " TCP:
10.128.19.22:443 ", " TCP:10.128.20.8:443 " searches business registration form (table 1), and the business bid of finding is 17,
Corresponding Business Name is recharging service, then the root node of resource tree is bid:17, and level-one child node is TCP:
10.128.19.22:443 with TCP:10.128.20.8:443 totally two；Level-one child node is traversed, will " TCP:
10.128.19.22:443 ", " TCP:10.128.20.8:443 " is matched as keyword in all session dictionary lookups respectively
To session sid:912, sid:949, using them as second level child node；Traverse second level child node, by " sid:912 ", " sid:
949 " as keyword in all process dictionary lookups are respectively matched to process pid:1301, pid:1221, using they as
Three-level child node；Three-level child node is traversed, " pid:1301 ", " pid:1221 " are searched as keyword, find executable text
Part/usr/local/jtest.sh and/usr/local/jbc.sh and network interface nid:eth0, using them as level Four sub- section
Point；Be that keyword searches network interface and communication link registration form (table 2) with " IP ", " network interface nid ", be matched to link lid:1 with
Lid:3, using them as Pyatyi child node；So far, one from upper-layer service to the vertical resource of bottom communication link and file
Tree building finishes.
Table 1
| Business bid | Serve port | IP | Agreement | Business Name |
| 17 | 443 | 10.128.19.22 | TCP | Recharging service |
| 17 | 443 | 10.128.20.8 | TCP | Recharging service |
Table 2
| IP | Network interface | Link lid | Explanation |
| 10.128.19.22 | eth0 | 1 | Towards 1 mouthful of access switch |
| 10.128.20.8 | eth0 | 3 | Towards 2 mouthfuls of convergence switch |
One embodiment of collection terminal of the present invention is introduced below with reference to Fig. 5.
Fig. 5 shows the structural schematic diagram of one embodiment of collection terminal of the present invention.As shown in figure 5, in the present embodiment
Collection terminal 50 includes:
Data acquisition module 502, for acquiring monitoring data；
Data transmission module 504, for by the data structure of data dictionary set form to control end transmitting, monitoring number
According to data dictionary set includes multiple data dictionaries, and each data dictionary includes dictionary item and dictionary item data；
Difference computation module 506, for calculating the dictionary of this monitoring data to be transmitted and last time transmitting monitor data
Item data difference；
Data transmission module 506 is also used to transmit dictionary item data difference in this monitoring data to be transmitted to control end big
In the data dictionary for being equal to transmission discrepancy threshold.
In some embodiments, data transmission module 506 is also used to: instruction is transmitted according to the request at control end, to control
Dictionary item data difference in transmission history monitoring data is held to be less than the data dictionary for transmitting discrepancy threshold.
Above-described embodiment can be effectively reduced host expense and network overhead, more efficient monitoring host computer platform, simultaneously
Improve the scalability of monitoring.
In some embodiments, collection terminal 50 further include:
Information receiving module 508, default frequency acquisition, minimum frequency acquisition, maximum for receiving the transmission of control end are adopted
Collect frequency, admission threshold；
Frequency setting module 510, for setting default frequency for current frequency acquisition；
Mean value calculation module 512, the average value of the resource utilization monitoring data for calculating nearest 10 acquisitions；
Data acquisition module 502 is also used to: in the case where average value is less than or equal to admission threshold, collection terminal will be adopted currently
Collect 1.072 times before set of frequency is, and the smaller value in the frequency acquisition after doubling and maximum authorized frequency is selected to carry out
The acquisition of monitoring data；In the case where average value is greater than admission threshold, collection terminal halves current frequency acquisition, and selects to subtract
The larger value in frequency acquisition and minimum authorized frequency after half is monitored the acquisition of data.
Core concept in above-described embodiment is halved immediately to frequency acquisition when cpu busy；When CPU is not busy,
Frequency acquisition is gradually increased, every time than it is preceding it is primary improve 1.072 times, 10 times after frequency be exactly 2 times of frequency for the first time.Pass through
Adaptive frequency acquisition, can make assessment for system current load situation, realize efficiency and property by changing frequency acquisition
Can autobalance, can further be effectively reduced host expense and network overhead, more efficient monitoring host computer platform, simultaneously
Improve the scalability of monitoring.
The one embodiment at present invention control end is introduced below with reference to Fig. 6.
Fig. 6 shows the structural schematic diagram of the one embodiment at present invention control end.As shown in fig. 6, in the present embodiment
Control end 60 includes:
Resource tree constructs module 602, is used for: utilizing serve port, IP address and the agreement extracted from monitoring data
Data dictionary inquiry business registration form, using corresponding business as the root node of resource tree；By the serve port of extraction, IP address
And level-one child node of the protocol data dictionary as resource tree；Using extracted from monitoring data serve port, IP address
And the session dictionary in protocol data retrieval monitoring data, using corresponding session identification as the second level child node of resource tree；
Using serve port, IP address and protocol data retrieval monitoring data in session dictionary, using corresponding session identification as
The second level child node of resource tree；Using session identification retrieval monitoring data in process dictionary, using corresponding process identification (PID) as
The three-level child node of resource tree；It is using the process dictionary in process identification (PID) retrieval monitoring data, corresponding executable file is complete
Path and network interface identify the level Four child node as resource tree；Inquiry network interface and communication link registration form are identified using network interface,
Using corresponding communication link as the Pyatyi child node of resource tree.
In some embodiments, end 60 is managed further include: O&M module 604 determines guilty culprit for utilizing resource tree
The service condition of position and business to Infrastructure platform.
In above-described embodiment, closed by business, serve port, session, process, executable file, network interface, communication link
Connection constructs a top-down vertical IT resource tree, keeps the relationship of business, service and platform more intuitive, fault location is more quasi-
Really, service operation maintenance efficiency is improved.Meanwhile above example implements business respectively to service the running environment of involved platform
Overall monitor, the problem of can accelerating service exception positioning improve troubleshooting efficiency；And realize business, serve port, session,
Process, executable file, network interface, communication link association more intuitively grasp business to the service condition of Infrastructure platform.
One embodiment of monitoring system of the present invention is introduced below with reference to Fig. 7.
Fig. 7 shows the structural schematic diagram of the one embodiment at present invention control end.As shown in fig. 7, in the present embodiment
Monitoring system 70 includes collection terminal 50 and control end 60.
Fig. 8 shows the structural schematic diagram of one embodiment of monitoring device of the present invention.As shown in figure 8, the embodiment
Monitoring device 80 includes: memory 810 and the processor 820 for being coupled to the memory 810, and processor 820 is configured as base
In the instruction being stored in memory 810, the monitoring method in any one aforementioned embodiment is executed.
Wherein, memory 810 is such as may include system storage, fixed non-volatile memory medium.System storage
Device is for example stored with operating system, application program, Boot loader (Boot Loader) and other programs etc..
Monitoring device 80 can also include input/output interface 830, network interface 840, memory interface 850 etc..These connect
It can for example be connected by bus 850 between mouth 830,840,850 and memory 810 and processor 820.Wherein, it inputs defeated
The input-output equipment such as outgoing interface 830 is display, mouse, keyboard, touch screen provide connecting interface.Network interface 840 is each
Kind networked devices provide connecting interface.The external storages such as memory interface 850 is SD card, USB flash disk provide connecting interface.
It will be understood by those skilled in the art that realizing by the technology that the present invention announces, do not need to make the code of former IT system
Change, it is only necessary to dispose Collection agent module in associated host, therefore the present invention also has easily implementation, improvement cost low
Feature.
It should be understood by those skilled in the art that, the embodiment of the present invention can provide as method, system or computer program
Product.Therefore, complete hardware embodiment, complete software embodiment or reality combining software and hardware aspects can be used in the present invention
Apply the form of example.Moreover, it wherein includes the computer of computer usable program code that the present invention, which can be used in one or more,
The calculating implemented in non-transient storage medium (including but not limited to magnetic disk storage, CD-ROM, optical memory etc.) can be used
The form of machine program product.
The present invention be referring to according to the method for the embodiment of the present invention, the process of equipment (system) and computer program product
Figure and/or block diagram describe.It should be understood that every one stream in flowchart and/or the block diagram can be realized by computer program instructions
The combination of process and/or box in journey and/or box and flowchart and/or the block diagram.It can provide these computer programs
Instruct the processor of general purpose computer, special purpose computer, Embedded Processor or other programmable data processing devices to produce
A raw machine, so that being generated by the instruction that computer or the processor of other programmable data processing devices execute for real
The device for the function of being specified in present one or more flows of the flowchart and/or one or more blocks of the block diagram.
These computer program instructions, which may also be stored in, is able to guide computer or other programmable data processing devices with spy
Determine in the computer-readable memory that mode works, so that it includes referring to that instruction stored in the computer readable memory, which generates,
Enable the manufacture of device, the command device realize in one box of one or more flows of the flowchart and/or block diagram or
The function of being specified in multiple boxes.
These computer program instructions also can be loaded onto a computer or other programmable data processing device, so that counting
Series of operation steps are executed on calculation machine or other programmable devices to generate computer implemented processing, thus in computer or
The instruction executed on other programmable devices is provided for realizing in one or more flows of the flowchart and/or block diagram one
The step of function of being specified in a box or multiple boxes.
The foregoing is merely a prefered embodiment of the invention, is not intended to limit the invention, all in the spirit and principles in the present invention
Within, any modification, equivalent replacement, improvement and so on should all be included in the protection scope of the present invention.
Claims (13)
1. a kind of monitoring method, wherein include:
Collection terminal acquires monitoring data；
Collection terminal is by the data structure of data dictionary set form to control end transmitting monitor data, the data dictionary set
Including multiple data dictionaries, each data dictionary includes dictionary item and dictionary item data；
Collection terminal calculates the dictionary item data difference of this monitoring data to be transmitted and last time transmitting monitor data；
Collection terminal transmits dictionary item data difference described in this monitoring data to be transmitted to control end and is more than or equal to transmission difference
The data dictionary of threshold value.
2. monitoring method as described in claim 1, wherein the monitoring method further include:
Collection terminal transmits instruction according to the request at control end, and into control end transmission history monitoring data, dictionary item data difference is small
In the data dictionary of transmission discrepancy threshold.
3. monitoring method as described in claim 1, wherein the monitoring method further include:
Collection terminal receives default frequency acquisition, minimum frequency acquisition, the maximum frequency acquisition, admission threshold that control end is sent；
Current frequency acquisition is set default frequency by collection terminal；
Collection terminal calculates the average value of the resource utilization monitoring data of nearest 10 acquisitions；
In the case where the average value is less than or equal to the admission threshold, before collection terminal sets current frequency acquisition to
1.072 times, and the smaller value in the frequency acquisition after doubling and the maximum authorized frequency is selected to be monitored the acquisitions of data；
In the case where the average value is greater than the admission threshold, collection terminal halves current frequency acquisition, and selects to halve
The larger value in frequency acquisition and the minimum authorized frequency afterwards is monitored the acquisition of data.
4. monitoring method as described in claim 1, wherein the monitoring method further include:
Control end utilizes the serve port extracted from monitoring data, IP address and protocol data dictionary enquiring business to register
Table, using corresponding business as the root node of resource tree；
End is managed using the serve port of extraction, IP address and protocol data dictionary as the level-one child node of the resource tree；
Control end utilizes the meeting from serve port, IP address and the protocol data retrieval monitoring data extracted in monitoring data
Dictionary is talked about, using corresponding session identification as the second level child node of the resource tree；
End is managed using the session dictionary in the serve port, IP address and protocol data retrieval monitoring data, will be corresponded to
Second level child node of the session identification as the resource tree；
End is managed using the process dictionary in session identification retrieval monitoring data, using corresponding process identification (PID) as the money
The three-level child node of source tree；
Manage end using the process identification (PID) retrieval monitoring data in process dictionary, by corresponding executable file complete trails with
And network interface identifies the level Four child node as the resource tree；
End is managed using network interface mark inquiry network interface and communication link registration form, using corresponding communication link as the money
The Pyatyi child node of source tree.
5. monitoring method as claimed in claim 4, wherein the monitoring method further include:
It manages end and utilizes the resource tree, determine guilty culprit position and business to the service condition of Infrastructure platform.
6. a kind of collection terminal, wherein include:
Data acquisition module, for acquiring monitoring data；
Data transmission module, it is described for the data structure by data dictionary set form to control end transmitting monitor data
Data dictionary set includes multiple data dictionaries, and each data dictionary includes dictionary item and dictionary item data；
Difference computation module, the dictionary item data for calculating this monitoring data to be transmitted and last time transmitting monitor data are poor
It is different；
The data transmission module is also used to transmit dictionary item data difference described in this monitoring data to be transmitted to control end
More than or equal to the data dictionary of transmission discrepancy threshold.
7. collection terminal as claimed in claim 6, wherein the data transmission module is also used to: being passed according to the request at control end
Defeated instruction, into control end transmission history monitoring data, dictionary item data difference is less than the data dictionary of transmission discrepancy threshold.
8. collection terminal as claimed in claim 6, wherein the collection terminal further include:
Information receiving module, for receive default frequency acquisition, minimum frequency acquisition, maximum frequency acquisition that control end sends,
Admission threshold；
Frequency setting module, for setting default frequency for current frequency acquisition；
Mean value calculation module, the average value of the resource utilization monitoring data for calculating nearest 10 acquisitions；
The data acquisition module is also used to: in the case where the average value is less than or equal to the admission threshold, collection terminal will
1.072 times before currently frequency acquisition is set as, and select in the frequency acquisition after doubling and the maximum authorized frequency
Smaller value is monitored the acquisition of data；In the case where the average value is greater than the admission threshold, collection terminal will be adopted currently
Collect frequency halving, and the frequency acquisition after halving is selected to be monitored adopting for data with the larger value in the minimum authorized frequency
Collection.
9. a kind of control end, wherein the control end includes resource tree building module, is used for:
It, will be right using serve port, IP address and the protocol data dictionary enquiring business registration form extracted from monitoring data
Root node of the business answered as resource tree；
Using the serve port of extraction, IP address and protocol data dictionary as the level-one child node of the resource tree；
Utilize the session word retrieved in monitoring data from serve port, IP address and the protocol data extracted in monitoring data
Allusion quotation, using corresponding session identification as the second level child node of the resource tree；
Using the session dictionary in the serve port, IP address and protocol data retrieval monitoring data, by corresponding session
Identify the second level child node as the resource tree；
Using the process dictionary in session identification retrieval monitoring data, using corresponding process identification (PID) as the resource tree
Three-level child node；
Using the process dictionary in process identification (PID) retrieval monitoring data, by corresponding executable file complete trails and network interface
Identify the level Four child node as the resource tree；
Inquiry network interface and communication link registration form are identified using the network interface, using corresponding communication link as the resource tree
Pyatyi child node.
10. control end as claimed in claim 9, wherein the control end further include: O&M module, for utilizing the money
Source tree determines guilty culprit position and business to the service condition of Infrastructure platform.
11. a kind of monitoring system, including the collection terminal as described in any one of claim 6 to 8, and such as claim 9 or
Control end described in 10.
12. a kind of monitoring device, comprising:
Memory；And
It is coupled to the processor of the memory, the processor is configured to the instruction based on storage in the memory,
Execute the monitoring method as described in any one of claims 1 to 5.
13. a kind of computer readable storage medium, the computer-readable recording medium storage has computer instruction, described instruction
Monitoring method described in any one of claims 1 to 5 is realized when being executed by processor.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711068434.5A CN109753401A (en) | 2017-11-03 | 2017-11-03 | Monitoring method, collection terminal, control end, monitoring system and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711068434.5A CN109753401A (en) | 2017-11-03 | 2017-11-03 | Monitoring method, collection terminal, control end, monitoring system and device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN109753401A true CN109753401A (en) | 2019-05-14 |
Family
ID=66398072
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711068434.5A Pending CN109753401A (en) | 2017-11-03 | 2017-11-03 | Monitoring method, collection terminal, control end, monitoring system and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109753401A (en) |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110245019A (en) * | 2019-06-17 | 2019-09-17 | 广东金赋科技股份有限公司 | A kind of the thread concurrent method and device of Adaptable System resource |
| CN110336889A (en) * | 2019-07-15 | 2019-10-15 | 山东省气象科学研究所 | A kind of numerical weather prediction model operation intelligent monitoring platform and monitoring method |
| CN111146868A (en) * | 2020-01-20 | 2020-05-12 | 国网辽宁省电力有限公司信息通信分公司 | Power communication machine room dynamic loop monitoring standardized access method and system |
| CN111563019A (en) * | 2020-04-29 | 2020-08-21 | 厦门市美亚柏科信息股份有限公司 | Service assembly monitoring method, system and computer storage medium |
| WO2022012442A1 (en) * | 2020-07-12 | 2022-01-20 | 华为技术有限公司 | Data acquisition method and device |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101815003A (en) * | 2010-02-23 | 2010-08-25 | 浪潮通信信息***有限公司 | Uniform resource model of full service converged network |
| US20130019008A1 (en) * | 2011-07-15 | 2013-01-17 | Loki Jorgenson | Method and system for monitoring performance of an application system |
| CN103986515A (en) * | 2014-05-09 | 2014-08-13 | 浙江中烟工业有限责任公司 | Performance index monitoring method for fiber channel switch |
| CN104133829A (en) * | 2013-12-18 | 2014-11-05 | 腾讯科技（深圳）有限公司 | Method for monitoring service operation data loading as well as relevant equipment and system |
| CN105472009A (en) * | 2015-12-18 | 2016-04-06 | 国云科技股份有限公司 | Self-adapting frequency monitoring method of cloud platform resource |
| CN105635279A (en) * | 2015-12-29 | 2016-06-01 | 长城信息产业股份有限公司 | Distributed monitor system and data acquisition method thereof |
| CN106487601A (en) * | 2015-08-24 | 2017-03-08 | 中兴通讯股份有限公司 | Resource monitoring method, apparatus and system |
| CN107306196A (en) * | 2016-04-20 | 2017-10-31 | 中兴通讯股份有限公司 | Virtualization services monitoring method and device |
-
2017
- 2017-11-03 CN CN201711068434.5A patent/CN109753401A/en active Pending
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101815003A (en) * | 2010-02-23 | 2010-08-25 | 浪潮通信信息***有限公司 | Uniform resource model of full service converged network |
| US20130019008A1 (en) * | 2011-07-15 | 2013-01-17 | Loki Jorgenson | Method and system for monitoring performance of an application system |
| CN104133829A (en) * | 2013-12-18 | 2014-11-05 | 腾讯科技（深圳）有限公司 | Method for monitoring service operation data loading as well as relevant equipment and system |
| CN103986515A (en) * | 2014-05-09 | 2014-08-13 | 浙江中烟工业有限责任公司 | Performance index monitoring method for fiber channel switch |
| CN106487601A (en) * | 2015-08-24 | 2017-03-08 | 中兴通讯股份有限公司 | Resource monitoring method, apparatus and system |
| CN105472009A (en) * | 2015-12-18 | 2016-04-06 | 国云科技股份有限公司 | Self-adapting frequency monitoring method of cloud platform resource |
| CN105635279A (en) * | 2015-12-29 | 2016-06-01 | 长城信息产业股份有限公司 | Distributed monitor system and data acquisition method thereof |
| CN107306196A (en) * | 2016-04-20 | 2017-10-31 | 中兴通讯股份有限公司 | Virtualization services monitoring method and device |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110245019A (en) * | 2019-06-17 | 2019-09-17 | 广东金赋科技股份有限公司 | A kind of the thread concurrent method and device of Adaptable System resource |
| CN110245019B (en) * | 2019-06-17 | 2021-07-06 | 广东金赋科技股份有限公司 | Thread concurrency method and device for self-adaptive system resources |
| CN110336889A (en) * | 2019-07-15 | 2019-10-15 | 山东省气象科学研究所 | A kind of numerical weather prediction model operation intelligent monitoring platform and monitoring method |
| CN110336889B (en) * | 2019-07-15 | 2021-05-25 | 山东省气象科学研究所 | Intelligent monitoring platform and monitoring method for operation in numerical weather forecast mode |
| CN111146868A (en) * | 2020-01-20 | 2020-05-12 | 国网辽宁省电力有限公司信息通信分公司 | Power communication machine room dynamic loop monitoring standardized access method and system |
| CN111563019A (en) * | 2020-04-29 | 2020-08-21 | 厦门市美亚柏科信息股份有限公司 | Service assembly monitoring method, system and computer storage medium |
| WO2022012442A1 (en) * | 2020-07-12 | 2022-01-20 | 华为技术有限公司 | Data acquisition method and device |
| CN113992523A (en) * | 2020-07-12 | 2022-01-28 | 华为技术有限公司 | Data acquisition method and equipment |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109753401A (en) | Monitoring method, collection terminal, control end, monitoring system and device | |
| CN107943668A (en) | Computer server cluster daily record monitoring method and monitor supervision platform | |
| CN108494575B (en) | Graph database-based power communication network operation mode modeling method and system | |
| CN108092813A (en) | Data center's total management system server hardware Governance framework and implementation method | |
| CN105940377A (en) | Methods, systems, and computer readable media for a cloud-based virtualization orchestrator | |
| CN105765906A (en) | Methods, systems, and computer readable media for a network function virtualization information concentrator | |
| US20120099478A1 (en) | Method and Device for Auto-Generating Goose Signal Connection Topology from Substation Level | |
| CN108989136A (en) | Business end to end performance monitoring method and device | |
| CN102739802A (en) | Service application-oriented IT contralized operation and maintenance analyzing system | |
| CN107704387B (en) | Method, device, electronic equipment and computer readable medium for system early warning | |
| CN105471656A (en) | Abstraction method specific to operation and maintenance information model of intelligent substation automation system | |
| CN103716173A (en) | Storage monitoring system and monitoring alarm issuing method | |
| CN104468191A (en) | Electric power telecommunication fault early warning method and system based on time window and network model | |
| CN105306267A (en) | Optical cable network management system | |
| CN107070744A (en) | Server monitoring method | |
| CN104579797A (en) | Automatic configuration method of switch information flow of intelligent substation | |
| CN109995558A (en) | Failure information processing method, device, equipment and storage medium | |
| CN110442766A (en) | Webpage data acquiring method, device, equipment and storage medium | |
| CN109709839A (en) | A kind of biomass electric power plant multistage method for real-time monitoring | |
| CN101552786A (en) | Communication apparatus, communication method, and recording medium storing program | |
| CN201387555Y (en) | Comprehensive remote control monitoring system | |
| CN101197714A (en) | Method for centrally capturing mobile data service condition | |
| Martinez-Mosquera et al. | Development and evaluation of a big data framework for performance management in mobile networks | |
| CN110798660B (en) | Integrated operation and maintenance system based on cloud federal audio and video fusion platform | |
| CN210075259U (en) | SDN network-based data monitoring controller |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20190514 |
|
| RJ01 | Rejection of invention patent application after publication |