CN111782462B - Alarm method and device and electronic equipment - Google Patents
Alarm method and device and electronic equipment Download PDFInfo
- Publication number
- CN111782462B CN111782462B CN202010538782.XA CN202010538782A CN111782462B CN 111782462 B CN111782462 B CN 111782462B CN 202010538782 A CN202010538782 A CN 202010538782A CN 111782462 B CN111782462 B CN 111782462B
- Authority
- CN
- China
- Prior art keywords
- state
- abnormal
- alarm
- current moment
- monitored
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 56
- 230000002159 abnormal effect Effects 0.000 claims abstract description 166
- 238000004590 computer program Methods 0.000 claims description 6
- 230000001960 triggered effect Effects 0.000 abstract description 11
- 238000012544 monitoring process Methods 0.000 abstract description 6
- 238000012423 maintenance Methods 0.000 description 6
- 238000004891 communication Methods 0.000 description 5
- 238000012545 processing Methods 0.000 description 5
- 238000010586 diagram Methods 0.000 description 4
- 238000005516 engineering process Methods 0.000 description 3
- 230000008569 process Effects 0.000 description 2
- 230000005856 abnormality Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000000802 evaporation-induced self-assembly Methods 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000011084 recovery Methods 0.000 description 1
- 230000009467 reduction Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3065—Monitoring arrangements determined by the means or processing involved in reporting the monitored data
- G06F11/3072—Monitoring arrangements determined by the means or processing involved in reporting the monitored data where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Computer Vision & Pattern Recognition (AREA)
- Quality & Reliability (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Alarm Systems (AREA)
Abstract
The invention provides an alarming method, an alarming device and electronic equipment, which relate to the technical field of monitoring and comprise the steps of acquiring an alarming state of a system to be monitored at the current moment; judging whether an abnormal event exists in a first preset time period after the current moment under the condition that the alarm state of the system to be monitored is an abnormal state; if so, determining that the alarm state of the system to be monitored is abnormal within a first preset time period after the current moment, and not carrying out repeated alarm. According to the alarm method provided by the invention, after the system to be monitored is in an abnormal state, the first preset time period is taken as a time unit to judge whether the system to be monitored is in a normal state or not, and even if the abnormal event is discontinuous in the first preset time period, new alarm information is not triggered, so that the alarm times are reduced, and the technical problem of high alarm information redundancy in the alarm method in the prior art is effectively solved.
Description
Technical Field
The present invention relates to the field of monitoring technologies, and in particular, to an alarm method, an alarm device, and an electronic device.
Background
With the development of computer and internet technology, IT service systems are increasing, the data volume is increasing, and the probability of IT service failure is also greatly improved. The IT department needs to introduce a monitoring technology to timely generate an alarm to remind IT operation and maintenance personnel when a service system fails, so that the IT operation and maintenance personnel can know the occurrence of the failure at the first time, the failure can be quickly solved, and the continuity of the service system and the satisfaction of a user on using the service system are improved. In the prior art, in order to reduce repeated alarms, a mode of reducing a plurality of continuous anomalies to 1 alarm is generally adopted, but if the anomalies in faults are discontinuous, a large amount of alarm information can still be generated, so that the purpose of reducing the alarms cannot be achieved.
In summary, the alarm method in the prior art has the technical problem of high redundancy of alarm information.
Disclosure of Invention
The invention aims to provide an alarm method, an alarm device and electronic equipment, so as to solve the technical problem of high alarm information redundancy in the alarm method in the prior art.
In a first aspect, an embodiment of the present invention provides an alarm method, including: acquiring an alarm state of a system to be monitored at the current moment; judging whether an abnormal event exists in a first preset time period after the current moment under the condition that the alarm state of the system to be monitored is an abnormal state; if yes, determining that the alarm state of the system to be monitored is an abnormal state within a first preset time period after the current moment, and not carrying out repeated alarm, wherein the abnormal state comprises at least one of the following: abnormal state, abnormal continuous state.
In an alternative embodiment, the method further comprises: if the alarm state does not exist, the alarm state of the system to be monitored is determined to be recovered to a normal state at the current moment.
In an alternative embodiment, acquiring the alarm state of the system to be monitored at the current moment includes: judging whether an abnormal event exists in the system to be monitored within a second preset time period before the current moment; if yes, determining that the alarm state of the system to be monitored at the current moment is an abnormal state; if not, judging whether an abnormal event exists in a first preset time period before the current moment; if yes, determining that the alarm state of the system to be monitored at the current moment is an abnormal continuous state; if the alarm state does not exist, determining that the alarm state of the system to be monitored at the current moment is a normal state.
In an alternative embodiment, the first preset time period may be equally divided into a preset number of second preset time periods; judging whether an abnormal event exists in a first preset time period after the current moment comprises the following steps: judging whether an abnormal event exists in a target time period after the current moment, wherein the target time period is any one of the second preset time periods; if so, determining that an abnormal event exists in a first preset time period after the current moment; if the abnormal event does not exist, determining that the abnormal event does not exist within a first preset time period after the current moment.
In a second aspect, an embodiment of the present invention provides an alarm device, including: the acquisition module is used for acquiring the alarm state of the system to be monitored at the current moment; the judging module is used for judging whether an abnormal event exists in a first preset time period after the current moment or not under the condition that the alarm state of the system to be monitored is an abnormal state; the first determining module determines that the alarm state of the system to be monitored is an abnormal state within a first preset time period after the current moment and does not carry out repeated alarm if the alarm state exists, wherein the abnormal state comprises at least one of the following: abnormal state, abnormal continuous state.
In an alternative embodiment, the apparatus further comprises: and the second determining module is used for determining that the alarm state of the system to be monitored is recovered to be a normal state at the current moment if the alarm state does not exist.
In an alternative embodiment, the obtaining module includes: the first judging unit is used for judging whether the system to be monitored has an abnormal event within a second preset time period before the current moment; the first determining unit is used for determining that the alarm state of the system to be monitored at the current moment is an abnormal state if the alarm state exists; the second judging unit judges whether an abnormal event exists in a first preset time period before the current moment if the abnormal event does not exist; the second determining unit is used for determining that the alarm state of the system to be monitored at the current moment is an abnormal continuous state if the alarm state exists; and the third determining unit is used for determining that the alarm state of the system to be monitored at the current moment is a normal state if the alarm state does not exist.
In an alternative embodiment, the first preset time period may be equally divided into a preset number of second preset time periods; the judging module comprises: a third judging unit, configured to judge whether an abnormal event exists in a target time period after the current time, where the target time period is any one of the preset number of second preset time periods; a fourth determining unit, if so, determining that an abnormal event exists in a first preset time period after the current moment; and a fifth determining unit for determining that no abnormal event exists within a first preset time period after the current moment if the abnormal event does not exist.
In a third aspect, an embodiment of the present invention provides an electronic device, including a memory, and a processor, where the memory stores a computer program executable on the processor, and where the processor implements the steps of the method in any of the foregoing embodiments when the processor executes the computer program.
In a fourth aspect, embodiments of the present invention provide a computer readable medium having non-volatile program code executable by a processor, the program code causing the processor to perform the method of any of the preceding embodiments.
The warning method provided by the invention comprises the following steps: acquiring an alarm state of a system to be monitored at the current moment; judging whether an abnormal event exists in a first preset time period after the current moment under the condition that the alarm state of the system to be monitored is an abnormal state; if so, determining that the alarm state of the system to be monitored is an abnormal state within a first preset time period after the current moment, and not carrying out repeated alarm, wherein the abnormal state comprises at least one of the following: abnormal state, abnormal continuous state.
In the prior art, the alarming method still generates a large amount of alarming information under the condition of discontinuous abnormal phenomenon, and the purpose of reducing alarming is not achieved. Compared with the prior art, after the system to be monitored is in an abnormal state, the alarm method provided by the invention judges whether the system to be monitored is in a normal state or not by taking the first preset time period as a time unit, and even if the abnormal event is discontinuous in the first preset time period, new alarm information can not be triggered, and the alarm times are reduced, so that the technical problem of high alarm information redundancy in the alarm method in the prior art is effectively solved.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings that are needed in the description of the embodiments or the prior art will be briefly described, and it is obvious that the drawings in the description below are some embodiments of the present invention, and other drawings can be obtained according to the drawings without inventive effort for a person skilled in the art.
FIG. 1 is a flow chart of an alarm method according to an embodiment of the present invention;
FIG. 2 is a flowchart for obtaining an alarm state of a system to be monitored at a current moment according to an embodiment of the present invention;
FIG. 3 is a schematic diagram of an alarm state change of a system to be monitored according to an embodiment of the present invention;
FIG. 4 is a functional block diagram of an alarm device according to an embodiment of the present invention;
Fig. 5 is a schematic diagram of an electronic device according to an embodiment of the present invention.
Detailed Description
For the purpose of making the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention, and it is apparent that the described embodiments are some embodiments of the present invention, but not all embodiments of the present invention. The components of the embodiments of the present invention generally described and illustrated in the figures herein may be arranged and designed in a wide variety of different configurations.
Thus, the following detailed description of the embodiments of the invention, as presented in the figures, is not intended to limit the scope of the invention, as claimed, but is merely representative of selected embodiments of the invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
Some embodiments of the present invention are described in detail below with reference to the accompanying drawings. The following embodiments and features of the embodiments may be combined with each other without conflict.
In the current IT environment, the problems of more business systems, more hardware devices and massive data, and even in the big data environment, the repeated alarm reduction is the problem faced by and needed to be solved by all IT operation and maintenance personnel.
In an actual IT environment, in order to ensure the timeliness of the alarm, an operation and maintenance person often sets the alarm judgment granularity to be very short, and when a service system fails and lasts for too long, a large number of repeated alarms can be generated, so that trouble is caused to the operation and maintenance person in searching and solving the fault. Therefore, in order to reduce repeated alarms, a method of reducing a plurality of continuous anomalies to 1 alarm is often adopted, and although the method can reduce the alarms to a certain extent, if the anomalies in the faults are discontinuous, a large amount of alarm information is still generated, so that the purpose of reducing the alarms cannot be achieved, and in the scene of the discontinuity of the anomalies, it is difficult for operation and maintenance personnel to judge whether the alarms are finished or not and when the alarms are finished. In view of the above, the present invention provides an alarm method for alleviating the above-mentioned problems.
Example 1
Fig. 1 is a flowchart of an alarm method provided in an embodiment of the present invention, as shown in fig. 1, the method specifically includes the following steps:
and step S12, acquiring the alarm state of the system to be monitored at the current moment.
In order to provide appropriate alarm information for the system to be monitored, when the system to be monitored starts to perform alarm monitoring, firstly, an alarm state of the system to be monitored at the current moment needs to be acquired, and in the embodiment of the invention, the alarm state comprises any one of the following components: and after the monitoring is started, only when the alarm state of the system to be monitored is the initial abnormal state or the alarm state is switched from the normal state to the abnormal state, the alarm information is triggered, the corresponding alarm starting time is recorded, and the alarm information is not generated in other conditions.
Step S14, judging whether an abnormal event exists in a first preset time period after the current moment under the condition that the alarm state of the system to be monitored is an abnormal state.
If so, step S16 is performed.
Step S16, determining that the alarm state of the system to be monitored is abnormal within a first preset time period after the current moment, and not carrying out repeated alarm.
Specifically, for the problem that the alarm information is repeated due to discontinuity of the abnormal phenomenon, the technical scheme provided by the embodiment of the invention is equivalent to a light alarm method based on a time period, after the alarm state of the system to be monitored at the current moment is determined to be the abnormal state (the alarm information is generated), the system to be monitored is closely monitored in a first preset time period after the current moment, if the abnormal event occurs again in the first preset time period, whether the abnormal event is continuous or not, the system to be monitored is determined to be in an abnormal state in the first preset time period after the current moment, and repeated alarms are not performed, wherein the abnormal state comprises at least one of the following: abnormal state, abnormal continuous state. That is, even if the abnormal state occurs again within the first preset time period after the current time, the abnormal state which occurs again is judged to belong to the last alarm, and the alarm information is not triggered any more, so that the technical problem of alarm information redundancy caused by the discontinuity of the abnormal phenomenon is solved.
The warning method provided by the invention comprises the following steps: acquiring an alarm state of a system to be monitored at the current moment; judging whether an abnormal event exists in a first preset time period after the current moment under the condition that the alarm state of the system to be monitored is an abnormal state; if so, determining that the alarm state of the system to be monitored is an abnormal state within a first preset time period after the current moment, and not carrying out repeated alarm, wherein the abnormal state comprises at least one of the following: abnormal state, abnormal continuous state.
In the prior art, the alarming method still generates a large amount of alarming information under the condition of discontinuous abnormal phenomenon, and the purpose of reducing alarming is not achieved. Compared with the prior art, after the system to be monitored is in an abnormal state, the alarm method provided by the invention judges whether the system to be monitored is in a normal state or not by taking the first preset time period as a time unit, and even if the abnormal event is discontinuous in the first preset time period, new alarm information can not be triggered, and the alarm times are reduced, so that the technical problem of high alarm information redundancy in the alarm method in the prior art is effectively solved.
In an alternative embodiment, the method of the present invention further comprises the following:
If the alarm state does not exist, the alarm state of the system to be monitored is determined to be recovered to a normal state at the current moment.
Specifically, if no abnormal event exists in the system to be monitored within a first preset time period after the current time, it may be determined that the alarm state of the system to be monitored is recovered to a normal state at the current time, and the current time is recorded as the alarm ending time. As can be seen from the above description, the first preset time period corresponds to the alarm recovery judgment time, and the duration of the first preset time period can be set by the user according to the actual requirement, generally, can be set to 1-30 minutes, which is not particularly limited by the embodiment of the present invention.
The warning method provided by the embodiment of the invention is briefly introduced, and detailed description is given below on how to acquire the warning state of the system to be monitored at the current moment.
In an alternative embodiment, as shown in fig. 2, step S12, includes the following steps:
step S121, determining whether an abnormal event exists in the system to be monitored within a second preset time period before the current time.
If yes, go to step S122; if not, step S123 is performed.
Step S122, determining that the alarm state of the system to be monitored at the current moment is an abnormal state.
Step S123, judging whether an abnormal event exists within a first preset time period before the current moment.
If there is an abnormal event within a first preset time period before the current time, executing step S124; if no abnormal event exists within the first preset time period before the current time, step S125 is executed.
Step S124, determining the alarm state of the system to be monitored at the current moment as an abnormal continuous state.
Step S125, determining that the alarm state of the system to be monitored at the current moment is a normal state.
Specifically, when determining the alarm state of the system to be monitored at the current moment, firstly judging whether an abnormal event exists in the system to be monitored within a second preset time period before the current moment, wherein the duration of the second preset time period is not longer than that of the first preset time period, and if the abnormal event exists, determining that the alarm state of the system to be monitored at the current moment is the abnormal state; if the system to be monitored does not have an abnormal event within a second preset time period before the current moment, the system to be monitored needs to be continuously judged whether the system to be monitored has the abnormal event within the first preset time period before the current moment, if so, the alarm state of the system to be monitored at the current moment is determined to be an abnormal continuous state, and if not, the alarm state of the system to be monitored at the current moment is determined to be a normal state.
For ease of understanding, referring to fig. 3, and assuming that the first preset time period is set to 5 minutes, and the second preset time period is set to 1 minute, in fig. 3, if no abnormal event occurs between 08:00 and 08:01 minutes, and the alarm state of the 08:00 system to be monitored is a normal state, then the 08:01 system to be monitored is a normal state, then, an abnormal event occurs in the 08:01-08:02 system to be monitored, then, it is determined that the alarm state of the 08:02 system is an abnormal state, and the alarm start time is 08:02 minutes, within 5 minutes after the start of monitoring, that is, 08:03-08:07, the abnormal event continuously occurs in the system to be monitored, but since the abnormal state of the 08:03-08:07 is a normal state, the 08:02 is a normal state, then, no further information is generated, the alarm state of the 08:08:01-08:02 occurs in the 08:01-08:02 system, and the abnormal state is still within 5 minutes, and the abnormal state is continuously triggered by the 08:08:08:08:08:08:08:08:08:08:08, and the abnormal state is continuously occurring within 5 minutes (the time is within 10:9:9, and the abnormal state is continuously triggered by the 08:08:08:08:08:08:08:08:08:08:08, and the 10 is continuously occurring within the time is continuously triggered by the time of the abnormal state of the 08:08:08:08:08:08:08:08:08:02), the abnormal state is continuously within 5:10:10, and the time is continuously within the time is within the time of the abnormal state of the time of the abnormal state of the 08:08:08:08:08:08:08:08:08:08:08:08:08:1, and the 10:1). Then it may be determined that the alarm state of the system to be monitored is restored to the normal state at 08:14, and the alarm ending time is recorded as 08:14.
In the same situation, if the alarm method provided by the embodiment of the present invention is not adopted, only the continuous abnormality is reduced to 1 alarm, then the alarm information is triggered again at 08:14, that is, taking the case of fig. 3 as an example, the embodiment of the present invention can reduce 2 alarm information to 1 alarm information, if the abnormal discontinuity condition within the first preset time period is aggravated, for example, an abnormal event occurs every 1 minute, then the effect of the embodiment of the present invention is more obvious.
The process of determining whether the abnormal event exists in the first preset time period after the current time is specifically described.
In an alternative embodiment, the first preset time period may be equally divided into a preset number of second preset time periods. In the step S14, it is determined whether an abnormal event exists within a first preset time period after the current time, and the method specifically includes the following steps:
Step S141, judging whether an abnormal event exists in the target time period after the current moment.
If yes, go to step S142; if not, step S143 is performed.
In step S142, it is determined that an abnormal event exists within a first preset time period after the current time.
In step S143, it is determined that no abnormal event exists within a first preset time period after the current time.
The embodiment of the invention uses a time sliding window to carry out alarm judgment on the system to be monitored, specifically, the first preset time period in the embodiment of the invention can be equally divided into a preset number of second preset time periods, when carrying out abnormal event judgment, the second preset time period is taken as a time unit to judge whether the system to be monitored has an abnormal event, if the abnormal event exists in a target time period after the current moment, the abnormal event exists in the first preset time period after the current moment, otherwise, the abnormal event does not exist in the first preset time period after the current moment, wherein the target time period is any one of the preset number of second preset time periods. In other words, the purpose of the above-mentioned judging method is to maintain the timeliness of the alarm, and to judge the alarm state of the system to be monitored once every second preset time period.
For example, when the monitored system is in an abnormal state at 08:09, the first preset time period is 5 minutes, and the second preset time period is 1 minute, then, when the abnormal event is determined, each minute after 08:09 is used as a unit (08:10, 08:11, 08:12, 08:13, 08:14) for determining the abnormal event, that is, the time sliding window is 1 minute, if the abnormal event exists in 08:11-08:12, it can be determined that the abnormal event exists in 5 after 08:09.
In summary, according to the alarm method provided by the embodiment of the invention, after the system to be monitored is in an abnormal state, whether the system to be monitored is in a normal state is judged by taking the first preset time period as a unit, and even if an abnormal event is discontinuous in the first preset time period, new alarm information is not triggered, so that the number of alarm times is effectively reduced, the technical problem of high redundancy of the alarm information is solved, and further, in the process of judging whether the system to be monitored is in a normal state by taking the first preset time period as a unit, the second preset time period is taken as granularity to monitor the fine granularity of the alarm state of the system to be monitored, thereby effectively ensuring the timeliness of the alarm.
Example two
The embodiment of the invention also provides an alarm device which is mainly used for executing the alarm method provided by the first embodiment, and the alarm device provided by the embodiment of the invention is specifically described below.
Fig. 4 is a functional block diagram of an alarm device according to an embodiment of the present invention, as shown in fig. 4, where the device mainly includes: the device comprises an acquisition module 10, a judgment module 20 and a first determination module 30, wherein:
The acquisition module 10 is configured to acquire an alarm state of the system to be monitored at the current moment.
The judging module 20 is configured to judge whether an abnormal event exists within a first preset time period after the current time when the alarm state of the system to be monitored is an abnormal state.
The first determining module 30 determines that the alarm state of the system to be monitored is an abnormal state within a first preset time period after the current time, and does not perform repeated alarm, if the alarm state exists, wherein the abnormal state includes at least one of the following: abnormal state, abnormal continuous state.
In the prior art, the alarming method still generates a large amount of alarming information under the condition of discontinuous abnormal phenomenon, and the purpose of reducing alarming is not achieved. Compared with the prior art, after the system to be monitored is in an abnormal state, the alarm device provided by the invention judges whether the system to be monitored is in a normal state or not by taking the first preset time period as a time unit, and even if the abnormal event is discontinuous in the first preset time period, new alarm information can not be triggered, and the number of alarm times is reduced, so that the technical problem of high alarm information redundancy in the alarm method in the prior art is effectively solved.
Optionally, the apparatus further comprises:
and the second determining module is used for determining that the alarm state of the system to be monitored is recovered to be a normal state at the current moment if the alarm state does not exist.
Optionally, the acquiring module 10 includes:
The first judging unit is used for judging whether the system to be monitored has an abnormal event within a second preset time period before the current moment.
And the first determining unit is used for determining that the alarm state of the system to be monitored at the current moment is an abnormal state if the alarm state exists.
And the second judging unit judges whether an abnormal event exists in a first preset time period before the current moment if the abnormal event does not exist.
And the second determining unit is used for determining that the alarm state of the system to be monitored at the current moment is an abnormal continuous state if the alarm state exists.
And the third determining unit is used for determining that the alarm state of the system to be monitored at the current moment is a normal state if the alarm state does not exist.
Optionally, the first preset time period may be equally divided into a preset number of second preset time periods; the judgment module 20 includes:
and a third judging unit for judging whether an abnormal event exists in a target time period after the current moment, wherein the target time period is any one of a preset number of second preset time periods.
And a fourth determining unit, if so, determining that an abnormal event exists within a first preset time period after the current moment.
And a fifth determining unit for determining that no abnormal event exists within a first preset time period after the current moment if the abnormal event does not exist.
Example III
Referring to fig. 5, an embodiment of the present invention provides an electronic device, including: a processor 60, a memory 61, a bus 62 and a communication interface 63, the processor 60, the communication interface 63 and the memory 61 being connected by the bus 62; the processor 60 is arranged to execute executable modules, such as computer programs, stored in the memory 61.
The memory 61 may include a high-speed random access memory (RAM, random Access Memory), and may further include a non-volatile memory (non-volatile memory), such as at least one disk memory. The communication connection between the system network element and at least one other network element is achieved via at least one communication interface 63 (which may be wired or wireless), and may use the internet, a wide area network, a local network, a metropolitan area network, etc.
Bus 62 may be an ISA bus, a PCI bus, an EISA bus, or the like. The buses may be classified as address buses, data buses, control buses, etc. For ease of illustration, only one bi-directional arrow is shown in FIG. 5, but not only one bus or type of bus.
The memory 61 is configured to store a program, and the processor 60 executes the program after receiving an execution instruction, and the method executed by the apparatus for flow defining disclosed in any of the foregoing embodiments of the present invention may be applied to the processor 60 or implemented by the processor 60.
The processor 60 may be an integrated circuit chip having signal processing capabilities. In implementation, the steps of the above method may be performed by integrated logic circuitry in hardware or instructions in software in the processor 60. The processor 60 may be a general-purpose processor, including a central processing unit (Central Processing Unit, CPU), a network processor (Network Processor, NP), etc.; but may also be a digital signal processor (DIGITAL SIGNAL Processing, DSP), application SPECIFIC INTEGRATED Circuit (ASIC), off-the-shelf Programmable gate array (Field-Programmable GATE ARRAY, FPGA) or other Programmable logic device, discrete gate or transistor logic device, discrete hardware components. The disclosed methods, steps, and logic blocks in the embodiments of the present invention may be implemented or performed. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of the method disclosed in connection with the embodiments of the present invention may be embodied directly in the execution of a hardware decoding processor, or in the execution of a combination of hardware and software modules in a decoding processor. The software modules may be located in a random access memory, flash memory, read only memory, programmable read only memory, or electrically erasable programmable memory, registers, etc. as well known in the art. The storage medium is located in a memory 61 and the processor 60 reads the information in the memory 61 and in combination with its hardware performs the steps of the method described above.
The computer program product of the alarm method, the alarm device and the electronic device provided by the embodiments of the present invention include a computer readable storage medium storing a non-volatile program code executable by a processor, where the program code includes instructions for executing the method described in the foregoing method embodiment, and specific implementation may refer to the method embodiment and will not be described herein.
In addition, each functional unit in the embodiments of the present invention may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit.
The functions, if implemented in the form of software functional units and sold or used as a stand-alone product, may be stored in a non-volatile computer readable storage medium executable by a processor. Based on this understanding, the technical solution of the present invention may be embodied essentially or in a part contributing to the prior art or in a part of the technical solution, in the form of a software product stored in a storage medium, comprising several instructions for causing a computer device (which may be a personal computer, a server, a network device, etc.) to perform all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a usb disk, a removable hard disk, a Read-Only Memory (ROM), a random access Memory (RAM, random Access Memory), a magnetic disk, or an optical disk, or other various media capable of storing program codes.
It should be noted that: like reference numerals and letters denote like items in the following figures, and thus once an item is defined in one figure, no further definition or explanation thereof is necessary in the following figures.
In the description of the present invention, it should be noted that, directions or positional relationships indicated by terms such as "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc., are directions or positional relationships based on those shown in the drawings, or are directions or positional relationships conventionally put in use of the inventive product, are merely for convenience of describing the present invention and simplifying the description, and are not indicative or implying that the apparatus or element to be referred to must have a specific direction, be constructed and operated in a specific direction, and thus should not be construed as limiting the present invention. Furthermore, the terms "first," "second," "third," and the like are used merely to distinguish between descriptions and should not be construed as indicating or implying relative importance.
Furthermore, the terms "horizontal," "vertical," "overhang," and the like do not denote a requirement that the component be absolutely horizontal or overhang, but rather may be slightly inclined. As "horizontal" merely means that its direction is more horizontal than "vertical", and does not mean that the structure must be perfectly horizontal, but may be slightly inclined.
In the description of the present invention, it should also be noted that, unless explicitly specified and limited otherwise, the terms "disposed," "mounted," "connected," and "connected" are to be construed broadly, and may be, for example, fixedly connected, detachably connected, or integrally connected; can be mechanically or electrically connected; can be directly connected or indirectly connected through an intermediate medium, and can be communication between two elements. The specific meaning of the above terms in the present invention will be understood in specific cases by those of ordinary skill in the art.
Finally, it should be noted that: the above embodiments are only for illustrating the technical solution of the present invention, and not for limiting the same; although the invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical scheme described in the foregoing embodiments can be modified or some or all of the technical features thereof can be replaced by equivalents; such modifications and substitutions do not depart from the spirit of the invention.
Claims (8)
1. An alert method, comprising:
Acquiring an alarm state of a system to be monitored at the current moment; wherein the alert status includes any one of: normal state, abnormal continuous state, abnormal state;
Judging whether an abnormal event exists in a first preset time period after the current moment under the condition that the alarm state of the system to be monitored is an abnormal state;
If yes, determining that the alarm state of the system to be monitored is an abnormal state within a first preset time period after the current moment, and not carrying out repeated alarm, wherein the abnormal state comprises at least one of the following: abnormal state, abnormal continuous state;
The method for acquiring the alarm state of the system to be monitored at the current moment comprises the following steps:
judging whether an abnormal event exists in the system to be monitored within a second preset time period before the current moment;
If yes, determining that the alarm state of the system to be monitored at the current moment is an abnormal state;
if not, judging whether an abnormal event exists in a first preset time period before the current moment;
if yes, determining that the alarm state of the system to be monitored at the current moment is an abnormal continuous state;
if the alarm state does not exist, determining that the alarm state of the system to be monitored at the current moment is a normal state.
2. The method according to claim 1, wherein the method further comprises:
If the alarm state does not exist, the alarm state of the system to be monitored is determined to be recovered to a normal state at the current moment.
3. The method of claim 1, wherein the first predetermined time period is equally divisible into a predetermined number of second predetermined time periods;
Judging whether an abnormal event exists in a first preset time period after the current moment comprises the following steps:
judging whether an abnormal event exists in a target time period after the current moment, wherein the target time period is any one of the second preset time periods;
If so, determining that an abnormal event exists in a first preset time period after the current moment;
if the abnormal event does not exist, determining that the abnormal event does not exist within a first preset time period after the current moment.
4. An alert device, comprising:
The acquisition module is used for acquiring the alarm state of the system to be monitored at the current moment; wherein the alert status includes any one of: normal state, abnormal continuous state, abnormal state;
The judging module is used for judging whether an abnormal event exists in a first preset time period after the current moment or not under the condition that the alarm state of the system to be monitored is an abnormal state;
the first determining module determines that the alarm state of the system to be monitored is an abnormal state within a first preset time period after the current moment and does not carry out repeated alarm if the alarm state exists, wherein the abnormal state comprises at least one of the following: abnormal state, abnormal continuous state;
Wherein, the acquisition module includes:
The first judging unit is used for judging whether the system to be monitored has an abnormal event within a second preset time period before the current moment;
the first determining unit is used for determining that the alarm state of the system to be monitored at the current moment is an abnormal state if the alarm state exists;
the second judging unit judges whether an abnormal event exists in a first preset time period before the current moment if the abnormal event does not exist;
the second determining unit is used for determining that the alarm state of the system to be monitored at the current moment is an abnormal continuous state if the alarm state exists;
And the third determining unit is used for determining that the alarm state of the system to be monitored at the current moment is a normal state if the alarm state does not exist.
5. The apparatus of claim 4, wherein the apparatus further comprises:
And the second determining module is used for determining that the alarm state of the system to be monitored is recovered to be a normal state at the current moment if the alarm state does not exist.
6. The apparatus of claim 4, wherein the first predetermined time period is equally divisible into a predetermined number of second predetermined time periods;
the judging module comprises:
A third judging unit, configured to judge whether an abnormal event exists in a target time period after the current time, where the target time period is any one of the preset number of second preset time periods;
A fourth determining unit, if so, determining that an abnormal event exists in a first preset time period after the current moment;
and a fifth determining unit for determining that no abnormal event exists within a first preset time period after the current moment if the abnormal event does not exist.
7. An electronic device comprising a memory, a processor, the memory having stored thereon a computer program executable on the processor, characterized in that the processor, when executing the computer program, implements the steps of the method of any of the preceding claims 1 to 3.
8. A computer readable medium having non-volatile program code executable by a processor, the program code causing the processor to perform the method of any one of claims 1 to 3.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010538782.XA CN111782462B (en) | 2020-06-13 | 2020-06-13 | Alarm method and device and electronic equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010538782.XA CN111782462B (en) | 2020-06-13 | 2020-06-13 | Alarm method and device and electronic equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN111782462A CN111782462A (en) | 2020-10-16 |
| CN111782462B true CN111782462B (en) | 2024-05-24 |
Family
ID=72756243
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202010538782.XA Active CN111782462B (en) | 2020-06-13 | 2020-06-13 | Alarm method and device and electronic equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111782462B (en) |
Families Citing this family (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113347045A (en) * | 2021-06-30 | 2021-09-03 | 北京九章云极科技有限公司 | Alarm message processing method and device |
| CN114443429B (en) * | 2022-01-21 | 2024-05-28 | 苏州浪潮智能科技有限公司 | Alarm event processing method and device and computer readable storage medium |
| CN115037596A (en) * | 2022-05-17 | 2022-09-09 | 阿里云计算有限公司 | Abnormal state warning method and device, electronic equipment and storage medium |
| CN115348150B (en) * | 2022-08-11 | 2023-10-24 | 睿云奇智(重庆)科技有限公司 | Abnormality alarming method and device |
| CN116088381B (en) * | 2023-01-31 | 2024-02-06 | 惠州市海葵信息技术有限公司 | Equipment alarm data processing method, controller and storage medium |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20040079061A (en) * | 2003-03-06 | 2004-09-14 | (주) 엘지텔레콤 | The Method for optimization of knowledge data on a knowledge-based network management system |
| CN1585344A (en) * | 2004-06-12 | 2005-02-23 | 中兴通讯股份有限公司 | Process method for oscillating alarm |
| CN107147213A (en) * | 2017-04-28 | 2017-09-08 | 国家电网公司 | Power network takes place frequently monitoring information intelligent alarm and comprehensive analysis administering method |
| CN108959025A (en) * | 2018-06-27 | 2018-12-07 | 郑州云海信息技术有限公司 | A kind of server alarm method, device and server |
| CN109412870A (en) * | 2018-12-10 | 2019-03-01 | 网宿科技股份有限公司 | Alarm monitoring method and platform, server, storage medium |
| CN109684179A (en) * | 2018-09-03 | 2019-04-26 | 平安科技（深圳）有限公司 | Method for early warning, device, equipment and the storage medium of the system failure |
| CN110727533A (en) * | 2019-09-26 | 2020-01-24 | 华青融天(北京)软件股份有限公司 | Alarm method, device, equipment and medium |
-
2020
- 2020-06-13 CN CN202010538782.XA patent/CN111782462B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20040079061A (en) * | 2003-03-06 | 2004-09-14 | (주) 엘지텔레콤 | The Method for optimization of knowledge data on a knowledge-based network management system |
| CN1585344A (en) * | 2004-06-12 | 2005-02-23 | 中兴通讯股份有限公司 | Process method for oscillating alarm |
| CN107147213A (en) * | 2017-04-28 | 2017-09-08 | 国家电网公司 | Power network takes place frequently monitoring information intelligent alarm and comprehensive analysis administering method |
| CN108959025A (en) * | 2018-06-27 | 2018-12-07 | 郑州云海信息技术有限公司 | A kind of server alarm method, device and server |
| CN109684179A (en) * | 2018-09-03 | 2019-04-26 | 平安科技（深圳）有限公司 | Method for early warning, device, equipment and the storage medium of the system failure |
| CN109412870A (en) * | 2018-12-10 | 2019-03-01 | 网宿科技股份有限公司 | Alarm monitoring method and platform, server, storage medium |
| CN110727533A (en) * | 2019-09-26 | 2020-01-24 | 华青融天(北京)软件股份有限公司 | Alarm method, device, equipment and medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN111782462A (en) | 2020-10-16 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN111782462B (en) | Alarm method and device and electronic equipment | |
| US9524223B2 (en) | Performance metrics of a computer system | |
| CN107426013B (en) | Equipment information monitoring method, device and system | |
| CN109639501B (en) | Abnormal record information storage method and device | |
| CN110727533A (en) | Alarm method, device, equipment and medium | |
| CN111402106A (en) | Device management method, device, system and storage medium | |
| CN112579400A (en) | Equipment fault positioning method, device, equipment and storage medium | |
| CN114676019B (en) | Method, device, equipment and storage medium for monitoring state of central processing unit | |
| CN114758714A (en) | Hard disk fault prediction method and device, electronic equipment and storage medium | |
| CN108899059B (en) | Detection method and equipment for solid state disk | |
| JP2010015246A (en) | Failure information analysis management system | |
| CN109597728B (en) | Control method and device of test equipment and computer readable storage medium | |
| CN113879357B (en) | Train axle temperature detection method and device | |
| JP2007028118A (en) | Failure judging method of node device | |
| CN113778763B (en) | Intelligent switching method and system for three-way interface service faults | |
| CN114610560B (en) | System abnormality monitoring method, device and storage medium | |
| CN114356722A (en) | Monitoring alarm method, system, equipment and storage medium for server cluster | |
| CN112181780A (en) | Detection and alarm method, device and equipment for containerized platform core component | |
| CN113835961A (en) | Alarm information monitoring method, device, server and storage medium | |
| CN112346939A (en) | Alarm method, device, equipment and storage medium | |
| CN115442263B (en) | Data monitoring method, device, equipment and medium of monitored system | |
| CN111176876B (en) | Fault recovery determining method, device, equipment and readable storage medium | |
| CN113067713B (en) | Method and device for adding engineering identification to alarm network element | |
| CN115391144A (en) | Method and device for determining alarm threshold, computer equipment and readable storage medium | |
| JP2006172175A (en) | Memory error correction system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |