CN113590437A - Alarm information processing method, device, equipment and medium - Google Patents
Alarm information processing method, device, equipment and medium Download PDFInfo
- Publication number
- CN113590437A CN113590437A CN202110885466.4A CN202110885466A CN113590437A CN 113590437 A CN113590437 A CN 113590437A CN 202110885466 A CN202110885466 A CN 202110885466A CN 113590437 A CN113590437 A CN 113590437A
- Authority
- CN
- China
- Prior art keywords
- alarm
- event
- alarm event
- suppression
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 230000010365 information processing Effects 0.000 title claims description 47
- 238000003672 processing method Methods 0.000 title claims description 25
- 230000001629 suppression Effects 0.000 claims abstract description 144
- 238000012545 processing Methods 0.000 claims abstract description 66
- 238000012544 monitoring process Methods 0.000 claims abstract description 57
- 238000000034 method Methods 0.000 claims abstract description 55
- 238000003860 storage Methods 0.000 claims description 18
- 230000008569 process Effects 0.000 claims description 17
- 238000003825 pressing Methods 0.000 claims description 8
- 238000004458 analytical method Methods 0.000 claims description 6
- 238000004590 computer program Methods 0.000 claims description 6
- 230000015556 catabolic process Effects 0.000 claims description 5
- 238000006731 degradation reaction Methods 0.000 claims description 5
- 239000003795 chemical substances by application Substances 0.000 description 25
- 238000007726 management method Methods 0.000 description 11
- 238000010586 diagram Methods 0.000 description 10
- 238000012423 maintenance Methods 0.000 description 10
- 230000006870 function Effects 0.000 description 9
- 230000003287 optical effect Effects 0.000 description 9
- 230000000694 effects Effects 0.000 description 5
- 230000002093 peripheral effect Effects 0.000 description 4
- 230000009286 beneficial effect Effects 0.000 description 3
- 230000008859 change Effects 0.000 description 3
- 238000011161 development Methods 0.000 description 3
- 230000002776 aggregation Effects 0.000 description 2
- 238000004220 aggregation Methods 0.000 description 2
- 238000003491 array Methods 0.000 description 2
- 238000004140 cleaning Methods 0.000 description 2
- 238000004891 communication Methods 0.000 description 2
- 230000006835 compression Effects 0.000 description 2
- 238000007906 compression Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000003993 interaction Effects 0.000 description 2
- 230000002688 persistence Effects 0.000 description 2
- 230000000644 propagated effect Effects 0.000 description 2
- 238000013519 translation Methods 0.000 description 2
- 239000000835 fiber Substances 0.000 description 1
- 238000010801 machine learning Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 239000013307 optical fiber Substances 0.000 description 1
- 230000008707 rearrangement Effects 0.000 description 1
- 230000004044 response Effects 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 238000012384 transportation and delivery Methods 0.000 description 1
- 238000013024 troubleshooting Methods 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
- G06F11/324—Display of status information
- G06F11/327—Alarm or error message display
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/34—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
- G06F11/3438—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment monitoring of user actions
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/54—Interprogram communication
- G06F9/546—Message passing systems or structures, e.g. queues
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2209/00—Indexing scheme relating to G06F9/00
- G06F2209/54—Indexing scheme relating to G06F9/54
- G06F2209/547—Messaging middleware
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2209/00—Indexing scheme relating to G06F9/00
- G06F2209/54—Indexing scheme relating to G06F9/54
- G06F2209/548—Queue
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Quality & Reliability (AREA)
- Software Systems (AREA)
- Computing Systems (AREA)
- Mathematical Physics (AREA)
- Computer Hardware Design (AREA)
- Debugging And Monitoring (AREA)
- Computer And Data Communications (AREA)
Abstract
The embodiment of the invention discloses a method, a device, equipment and a medium for processing alarm information, wherein the method comprises the following steps: acquiring warning events and/or service operation event forecast information of each monitored client; for each alarm event, matching a corresponding preset alarm event suppression rule for the alarm event based on the service operation event forecast information of the corresponding monitored client; and performing alarm suppression according to the preset alarm event suppression rule, and performing alarm event processing. The technical scheme of the embodiment solves the problems that the alarm information suppression rule of the operation monitoring server is complex, the suppression rule conflicts may exist, and the operation pressure of the server is high in the prior art, realizes the mode that the client actively reports the alarm event and the service operation state to the server, reduces the operation pressure of the server, simplifies the rule of the alarm information suppression to a certain extent, and improves the efficiency of the alarm event suppression.
Description
Technical Field
The embodiment of the invention relates to the technical field of computers, in particular to a method, a device, equipment and a medium for processing alarm information.
Background
With the cloud of IT (information technology) infrastructure, the containerization of application operating environment and the micro-service of system architecture, more and more financial enterprises invest more monitoring tools and more complex workflows to improve the system management fineness, but in a more complex architecture environment, an alarm event monitoring system may monitor a large amount of alarm information at a certain time. Then, it is necessary to suppress the alarm information with a low alarm level from a large amount of alarm information and extract the alarm information with a high alarm level from the suppressed alarm information.
In the prior art, the alarm information suppression work is usually performed by the server of the alarm event monitoring system, the alarm information suppression rule of the server is complex, and the suppression rule conflict may exist, which results in large operation pressure of the server.
Disclosure of Invention
The embodiment of the invention provides an alarm information processing method, an alarm information processing device, alarm information processing equipment and an alarm information processing medium, so that the operation pressure of a server is reduced in a mode of actively reporting an alarm event and a service operation state to the server through a client, the rule of alarm information suppression is simplified to a certain extent, and the efficiency of alarm event suppression is improved.
In a first aspect, an embodiment of the present invention provides an alarm information processing method, which is applied to a server, and the method includes:
acquiring warning events and/or service operation event forecast information of each monitored client;
for each alarm event, matching a corresponding preset alarm event suppression rule for the alarm event based on the service operation event forecast information of the corresponding monitored client;
and performing alarm suppression according to the preset alarm event suppression rule, and performing alarm event processing.
Optionally, when a preset alarm event suppression rule corresponding to the alarm event is not matched, the method further includes:
and determining an alarm event suppression rule of the alarm event according to the node attribute of the monitored client corresponding to the alarm event in a preset monitored client node topological structure, and processing the alarm event.
Optionally, the matching of the corresponding preset alarm event suppression rule for the alarm event based on the corresponding service operation event forecast information of the monitored client includes:
and when the time of acquiring the alarm event is within the service operation event execution time period in the service operation event forecast information, matching an alarm event suppression rule associated with the service operation event for the alarm event.
Optionally, the determining, according to the node attribute of the monitored client corresponding to the alarm event in the preset monitored client node topology structure, an alarm event suppression rule of the alarm event, and performing alarm event processing includes:
querying brother nodes of the monitored client node corresponding to the alarm event in the preset monitored client node topological structure;
and when the monitored client corresponding to at least one node in the brother nodes does not send out the alarm event, carrying out degradation suppression on the alarm event, and carrying out alarm event processing.
Optionally, the method further includes:
counting and analyzing the alarm events of each monitored client, and determining the operation characteristics of each monitored client according to the analysis result;
and updating preset alarm event suppression rules in an alarm event suppression rule database according to the operation characteristics.
Optionally, the obtaining of the warning event and/or the service operation event forecast information of each monitored client includes:
receiving service operation event forecast information of the monitored client, which is uploaded by a monitoring agent of each monitored client through a preset application program interface;
and monitoring the alarm events of the monitored client, which are uploaded by the monitoring agents of the monitored clients, in a preset alarm event message queue.
Optionally, the method further includes:
and constructing a preset monitored client node topological structure based on the configuration information of each monitored client in the configuration management database.
In a second aspect, an embodiment of the present invention provides an alarm information processing method, which is applied to a client, and the method includes:
based on the monitoring agent, the alarm event and/or the service operation event forecast information is uploaded to the server side, so that the server side processes the alarm event according to the service operation event forecast information.
In a third aspect, an embodiment of the present invention further provides an alarm information processing apparatus, configured at a server, where the apparatus includes:
the information acquisition module is used for acquiring warning events and/or service operation event forecast information of the monitored client, which is uploaded by each monitoring agent;
the system comprises a pressing rule matching module, a monitoring agent and a monitoring agent, wherein the pressing rule matching module is used for matching a corresponding preset alarm event pressing rule for each alarm event based on business operation event forecast information uploaded by the corresponding monitoring agent;
and the alarm event processing module is used for carrying out alarm suppression according to the preset alarm event suppression rule and carrying out alarm event processing.
Optionally, the apparatus for processing alarm information further includes a client node reference module, configured to determine an alarm event suppression rule of the alarm event according to a node attribute of a monitored client corresponding to the alarm event in a preset monitored client node topology structure when a preset alarm event suppression rule corresponding to the alarm event is not matched, and perform alarm event processing.
Optionally, the suppression rule matching module is specifically configured to:
and when the time of acquiring the alarm event is within the service operation event execution time period in the service operation event forecast information, matching an alarm event suppression rule associated with the service operation event for the alarm event.
Optionally, the client node reference module is specifically configured to:
querying brother nodes of the monitored client node corresponding to the alarm event in the preset monitored client node topological structure;
and when the monitored client corresponding to at least one node in the brother nodes does not send out the alarm event, carrying out degradation suppression on the alarm event, and carrying out alarm event processing.
Optionally, the alarm information processing apparatus further includes a suppression rule updating module, configured to:
counting and analyzing the alarm events of each monitored client, and determining the operation characteristics of each monitored client according to the analysis result;
and updating preset alarm event suppression rules in an alarm event suppression rule database according to the operation characteristics.
Optionally, the information obtaining module is specifically configured to:
receiving service operation event forecast information of the monitored client, which is uploaded by a monitoring agent of each monitored client through a preset application program interface;
and monitoring the alarm events of the monitored client, which are uploaded by the monitoring agents of the monitored clients, in a preset alarm event message queue.
Optionally, the alarm information processing apparatus further includes a node structure building module, configured to:
and constructing a preset monitored client node topological structure based on the configuration information of each monitored client in the configuration management database.
In a fourth aspect, an embodiment of the present invention further provides an alarm information processing apparatus, configured at a client, where the apparatus includes:
and the service information uploading module is used for uploading alarm events and/or service operation event forecast information to the service end based on the monitoring agent so that the service end processes the alarm events according to the service operation event forecast information.
In a fifth aspect, an embodiment of the present invention further provides a server, where the server includes:
one or more processors;
a memory for storing one or more programs;
when the one or more programs are executed by the one or more processors, the one or more processors implement the method for processing the alarm information applied to the server side according to any embodiment of the present invention.
In a sixth aspect, an embodiment of the present invention further provides a computer device, where the computer device includes:
one or more processors;
a memory for storing one or more programs;
when the one or more programs are executed by the one or more processors, the one or more processors implement the method for processing the alarm information applied to the client according to any embodiment of the present invention.
In a seventh aspect, an embodiment of the present invention further provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the method for processing alarm information applied to a server or a client according to any embodiment of the present invention is implemented.
The embodiment of the invention has the following advantages or beneficial effects:
in the embodiment of the invention, the warning event and/or the service operation event forecast information actively reported by each monitored client is obtained; aiming at each alarm event, taking the service operation event forecast information of the corresponding monitored client as the basis for matching the alarm event suppression rules, and matching the corresponding preset alarm event suppression rules for the alarm events; and finally, performing alarm suppression according to the preset alarm event suppression rule, and processing the alarm event. The method and the system solve the problems that the alarm information suppression rule of the operation monitoring server is complex, the suppression rule conflicts possibly exist and the operation pressure of the server is high in the prior art, realize the mode of actively reporting the alarm event and the service operation state to the server through the client, reduce the operation pressure of the server, simplify the rule of the alarm information suppression to a certain extent and improve the efficiency of the alarm event suppression.
Drawings
Fig. 1 is a flowchart of an alarm information processing method applied to a server according to an embodiment of the present invention;
fig. 2 is a flowchart of an alarm information processing method applied to a server according to a second embodiment of the present invention;
fig. 3 is a flowchart of an alarm information processing method applied to a client according to a third embodiment of the present invention;
fig. 4 is a schematic structural diagram of an alarm information processing apparatus configured at a server according to a fourth embodiment of the present invention;
fig. 5 is a schematic structural diagram of an alarm information processing apparatus configured at a client according to a fifth embodiment of the present invention;
fig. 6 is a schematic structural diagram of a server according to a sixth embodiment of the present invention;
fig. 7 is a schematic structural diagram of a computer device according to a seventh embodiment of the present invention.
Detailed Description
The present invention will be described in further detail with reference to the accompanying drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the invention and are not limiting of the invention. It should be further noted that, for the convenience of description, only some of the structures related to the present invention are shown in the drawings, not all of the structures.
Example one
Fig. 1 is a flowchart of an alarm information processing method applied to a server according to an embodiment of the present invention, which is applicable to a case of performing suppression processing on a large amount of alarm information. The method can be executed by an alarm information processing device configured at a server side, and the device can be realized by software and/or hardware and is integrated in computer equipment with an application development function.
As shown in fig. 1, the alarm information processing method applied to the server includes the following steps:
s110, obtaining warning event and/or service operation event forecast information of each monitored client.
In the Information Technology (IT) field, a monitoring server is usually configured to monitor the operation condition of each service client, so as to perform operation and maintenance in time. For example, when the monitoring server monitors that the operation monitoring parameter of any client device reaches a threshold value, the troubleshooting process is performed. However, with the cloud of IT infrastructure, the containerization of application operating environment, and the micro-service of system architecture, more and more financial enterprises invest more monitoring tools and more complex workflows to improve the system management fineness, but in a more complex architecture environment, a change of one index may cause a great amount of warning information, resulting in that a monitoring server is not available, which affects the normal operation of business.
In this embodiment, instead of monitoring the alarm event by the monitoring server, the monitored client actively synchronizes the service running state of the monitoring server, and actively keeps information synchronization with the server, so as to improve the processing efficiency of the monitoring server on the alarm event.
Specifically, the alarm event includes an alarm event related to a hardware device and an alarm event related to a business process. For example, the alarm event related to the hardware device may be an alarm event with insufficient content space, too high CPU occupancy rate, or too high hardware module temperature; alarm events related to the business process, such as transaction amount, business success rate, average business response time, average processing time and the like reach respective alarm thresholds. The alarm events reported by the monitored client to the server specifically include alarm reasons, alarm time, alarm levels, the number of times the alarm has been suppressed, and other alarm related information.
The service operation event forecast information is an event having an influence on the number and frequency of occurrence of alarm events, the probability of occurrence of alarm events during various service activities increases, and the number of alarm events also increases. Under the premise of not influencing the normal service of the system, if the event influencing the occurrence of the alarm event is known to be executed, the event can be used as a basis for suppressing the alarm event, so that the alarm event can be suppressed. In the financial field, the business operation events of the business system include annual account settlement batch jobs, system maintenance changes, automatic database HA switching, various rights and interests activities, and the like, and then the forecast information of the business operation events includes a specific business operation event, the execution time of the business operation event, and other information related to the business operation event.
Furthermore, the server receives the alarm event reported by the monitored client and the forecast information of the business operation event, and performs information interaction in different modes. Specifically, the server is provided with an Interface management module (Api micro-service) and is responsible for receiving service operation event forecast information uploaded by a monitoring agent (agent) of the monitored client through a preset Application Program Interface (Api). The interface management module can carry out information source validity check on the received service operation event notice information, and the check comprises using a white list mechanism or a message header agreement token (token) and other modes, so that the service validity check of the service operation event notice information can be carried out, wherein the check comprises rule window validity, whether a monitoring object (client) is brought into monitoring and the like, and finally, Spress data manager can carry out service operation event notice information data persistence, cache maintenance and the like after the check is passed. The functions realized by the interface management module can be completed through corresponding functional components. The server is further provided with an Alarm Access micro-service module (Alarm Access micro-service) for receiving Alarm events sent by monitoring agents of the monitored clients in a message queue (such as MQ, Kafka) manner.
And S120, aiming at each alarm event, matching a corresponding preset alarm event suppression rule for the alarm event based on the corresponding business operation event forecast information of the monitored client.
Different monitored clients execute different business events, that is, different clients have different suppression rules of alarm events. The monitored clients perform different business operations in different time periods, and the suppression rules of the alarm time in different time periods are also different, that is, in this embodiment, the suppression rules corresponding to the alarm event of each monitored client are dynamically changed instead of being unified.
Different business operation events involve different amounts of data, and different operating pressures need to be borne by the client device. Moreover, the urgency of different alarm events may vary for different business operations. In this embodiment, the corresponding alarm event suppression rule is determined by comprehensively referring to the data size, memory usage, other characteristic parameters, and other characteristics of the corresponding service operation event in the service operation event forecast information, and the information of the urgency level, the suppressed number of times, and the like of each category of alarm event. Specifically, the alarm event suppression rule includes performing alarm level degradation processing according to the alarm level of the alarm event, such as reducing the alarm level by one level, reducing the alarm level by two levels, and reducing the alarm level by three levels, so as to gradually reduce the alarm level to the lowest level (if the alarm event is not notified); or further comprises a suppression rule such as alarm event delay notice and the like.
When the alarm event is acquired, whether the time of the alarm event is within the predicted time period of the occurrence of the business operation event is determined. When the time of acquiring the alarm event is within the service operation event execution time period in the service operation event forecast information of the same monitored client, matching an alarm event suppression rule associated with the service operation event for the alarm event.
And S130, performing alarm suppression according to the preset alarm event suppression rule, and performing alarm event processing.
Specifically, after the server determines the suppression rule of the alarm event, the service Processing module (Core Processing micro-service) of the alarm event performs alarm suppression according to the determined suppression rule, and further performs operations such as alarm translation, alarm notification, alarm compression and aggregation, thereby completing the Processing of the alarm event. In addition, the rules for processing the alarm event and the process Data are managed by a Rule Data Read micro-service (Rule Data Read micro-service), and operations such as Rule Data query, update, regular cleaning, cache maintenance and the like can be performed.
According to the technical scheme of the embodiment, alarm events and/or service operation event forecast information actively reported by each monitored client side are acquired; aiming at each alarm event, taking the service operation event forecast information of the corresponding monitored client as the basis for matching the alarm event suppression rules, and matching the corresponding preset alarm event suppression rules for the alarm events; and finally, performing alarm suppression according to the preset alarm event suppression rule, and processing the alarm event. The method and the system solve the problems that the alarm information suppression rule of the operation monitoring server is complex, the suppression rule conflicts possibly exist and the operation pressure of the server is high in the prior art, realize the mode of actively reporting the alarm event and the service operation state to the server through the client, reduce the operation pressure of the server, simplify the rule of the alarm information suppression to a certain extent and improve the efficiency of the alarm event suppression.
Example two
Fig. 2 is a flowchart of an alarm information processing method applied to a server according to a second embodiment of the present invention, which belongs to the same inventive concept as the alarm information processing method applied to the server in the second embodiment of the present invention, and further describes a process of further determining an alarm event suppression rule when a corresponding preset alarm event suppression rule cannot be matched for an alarm event according to the service operation event prediction information. The method can be executed by an alarm information processing device configured at a server side, and the device can be realized by software and/or hardware and is integrated in computer equipment with an application development function.
As shown in fig. 2, the alarm information processing method applied to the server includes the following steps:
s210, constructing a preset monitored client node topological structure based on the configuration information of each monitored client in the configuration management database.
In a Configuration Management Database (CMDB), various Configuration information of devices in an enterprise IT architecture is stored and managed, which is closely linked with all service support and service delivery processes, supports the operation of these processes, exerts the value of the Configuration information, and ensures the accuracy of data depending on the related processes.
The node topology structure of each monitored client, that is, the monitoring agent node topology structure of each monitored client, can be established according to the device information in the CMDB. A monitored client node may include parent, child, and sibling nodes. One child node transmits data information upwards through the parent node of the child node, and the brother node of one node is the node which performs the same business processing with the child node.
S220, obtaining warning event and/or service operation event forecast information of each monitored client.
The detailed description of this step can refer to the related description of step S110 in the first embodiment.
And S230, aiming at each alarm event, matching a corresponding preset alarm event suppression rule for the alarm event based on the corresponding business operation event forecast information of the monitored client.
The detailed description of this step can refer to the related description of step S120 in the first embodiment.
S240, when the preset alarm event suppression rule corresponding to the alarm event is not matched, determining the alarm event suppression rule of the alarm event according to the node attribute of the monitored client corresponding to the alarm event in the preset monitored client node topological structure.
That is, when the server obtains the alarm event, and the monitored client that has the alarm event is not in the event of executing the business operation that affects the alarm event, the corresponding throttling rule cannot be matched. In this case, the solution of this embodiment is to consider the node attribute in the preset monitored client node topology structure where the monitored client is located. The node attribute comprises whether the node has a child node, a sibling node and a father node, and information such as device parameters and running states of the node.
Specifically, whether brother nodes exist in a preset monitored client node topological structure of a monitored client node corresponding to the alarm event can be firstly inquired; if brother nodes exist, whether the brother nodes are in a normal operation state is further judged, and when a monitored client corresponding to at least one node in one or more brother nodes does not send out an alarm event (namely, the monitored client operates normally), a suppression rule of the alarm event can be determined.
And S250, performing alarm suppression according to the determined alarm event suppression rule, and performing alarm event processing.
Specifically, after the server determines the suppression rule of the alarm event, the service Processing module (Core Processing micro-service) of the alarm event performs alarm suppression according to the determined suppression rule, and further performs operations such as alarm translation, alarm notification, alarm compression and aggregation, thereby completing the Processing of the alarm event. In addition, the rules for processing the alarm event and the process Data are managed by a Rule Data Read micro-service (Rule Data Read micro-service), and operations such as Rule Data query, update, regular cleaning, cache maintenance and the like can be performed.
According to the technical scheme of the embodiment, alarm events and/or service operation event forecast information actively reported by each monitored client side are acquired; aiming at each alarm event, taking the service operation event forecast information of the corresponding monitored client as the basis for matching the alarm event suppression rules, and matching the corresponding preset alarm event suppression rules for the alarm events; when the suppression rule can not be confirmed according to the business operation event prediction information, the node attribute of the brother node of the monitored client in the preset monitored client topological structure is further referred to determine the corresponding alarm event suppression rule, and finally alarm suppression is carried out according to the preset alarm event suppression rule and alarm event processing is carried out. The method and the system solve the problems that the alarm information suppression rule of the operation monitoring server is complex, the suppression rule conflicts possibly exist and the operation pressure of the server is high in the prior art, realize the mode of actively reporting the alarm event and the service operation state to the server through the client, reduce the operation pressure of the server, simplify the rule of the alarm information suppression to a certain extent and improve the efficiency of the alarm event suppression.
In a preferred real-time manner, the server may also perform statistics and analysis on received alarm events of each monitored client, for example, classify the alarm events by using a preset machine learning model, and then determine the operation characteristics of each monitored client according to the analysis result, such as determining the category, time period and other characteristic information of the monitored client at which the alarm event is likely to occur; therefore, the preset alarm event suppression rules in the alarm event suppression rule database can be updated in a personalized manner according to the operation characteristics of each client.
The alarm information processing method based on the embodiment of the invention can simplify the configuration of the pressing rule, reduce the maintenance cost of an administrator by 30 percent and put more power into paying attention to important alarm events. Moreover, multi-scene compatibility can be achieved. The monitoring agent nodes of the monitored client end actively report the alarm event, and attribute state judgment of the nodes is added in the alarm processing, so that the alarm suppression efficiency is greatly improved. The suppression efficiency can be improved under the scenes of annual final settlement batch operation, system maintenance change, automatic database HA switching and various rights and interests activities. In addition, by using the technical scheme of the embodiment, other situations except network exception can be handled, including various possible situations such as insufficient system hardware resources, database maintenance, application processing logic exception, and the like.
EXAMPLE III
Fig. 3 is a flowchart of an alarm information processing method applied to a client according to a third embodiment of the present invention, which is applicable to a case of suppressing a large amount of alarm information. The method can be executed by an alarm information processing device configured at the client, and the device can be realized by software and/or hardware and is integrated in a computer device with an application development function.
As shown in fig. 3, the method for processing the alarm information applied to the client includes the following steps:
s310, based on the monitoring agent, uploading alarm events and/or service operation event forecast information to the server side, so that the server side processes the alarm events according to the service operation event forecast information.
The client, as a node for executing the service, generally sets a monitoring agent (agent) to monitor the running data of the client, so as to actively synchronize the running state of the service with the monitoring server, and actively maintain the information synchronization with the server.
The monitored client end reports the warning event and the service operation event forecast information to the server end through different modes for information interaction. Specifically, the client uploads the service operation event forecast information to the server through a preset Application Program Interface (API). And the interface management module of the server side performs information source validity check on the uploaded service operation event notice information, service validity check on the service operation event notice information, and data persistence, cache maintenance and the like of the service operation event notice information after the check is passed. Further, the client server sends out the alarm event to the server in a message queue (such as MQ, Kafka). The service operation event forecast information is an event having an influence on the number and frequency of alarm events, the probability of alarm events occurring during various service activities is increased, and the number of alarm events is also increased. Under the premise of not influencing the normal service of the system, if the event influencing the occurrence of the alarm event is known to be executed, the event can be used as a basis for suppressing the alarm event, so that the alarm event can be suppressed. In the financial field, the business operation events of the business system include annual final settlement batch operation, system maintenance change, automatic database HA switching, various rights and interests activities and the like. According to the technical scheme of the embodiment, the alarm event and/or the business operation event forecast information actively reported by the client side is used for enabling the server side to match the corresponding preset alarm event suppression rule for the alarm event by taking the corresponding business operation event forecast information of the monitored client side as the basis for matching the alarm event suppression rule for each alarm event according to the reported information content; and finally, performing alarm suppression according to the preset alarm event suppression rule, and processing the alarm event. The method and the system solve the problems that the alarm information suppression rule of the operation monitoring server is complex, the suppression rule conflicts possibly exist and the operation pressure of the server is high in the prior art, realize the mode of actively reporting the alarm event and the service operation state to the server through the client, reduce the operation pressure of the server, simplify the rule of the alarm information suppression to a certain extent and improve the efficiency of the alarm event suppression.
Example four
Fig. 4 is a schematic structural diagram of an alarm information processing apparatus configured at a server according to a fourth embodiment of the present invention, which is applicable to a case of performing suppression processing on a large amount of alarm information.
As shown in fig. 4, the warning information processing apparatus disposed at the server side includes: an information acquisition module 410, a pressing rule matching module 420 and an alarm event processing module 430.
An information obtaining module 410, configured to obtain warning events and/or service operation event forecast information of the monitored client uploaded by each monitoring agent; a suppression rule matching module 420, configured to match, for each alarm event, a corresponding preset alarm event suppression rule for the alarm event based on the service operation event forecast information uploaded by the corresponding monitoring agent; and the alarm event processing module 430 is configured to perform alarm suppression according to the preset alarm event suppression rule, and perform alarm event processing.
According to the technical scheme of the embodiment, alarm events and/or service operation event forecast information actively reported by each monitored client side are acquired; aiming at each alarm event, taking the service operation event forecast information of the corresponding monitored client as the basis for matching the alarm event suppression rules, and matching the corresponding preset alarm event suppression rules for the alarm events; and finally, performing alarm suppression according to the preset alarm event suppression rule, and processing the alarm event. The method and the system solve the problems that the alarm information suppression rule of the operation monitoring server is complex, the suppression rule conflicts possibly exist and the operation pressure of the server is high in the prior art, realize the mode of actively reporting the alarm event and the service operation state to the server through the client, reduce the operation pressure of the server, simplify the rule of the alarm information suppression to a certain extent and improve the efficiency of the alarm event suppression.
Optionally, the apparatus for processing alarm information further includes a client node reference module, configured to determine an alarm event suppression rule of the alarm event according to a node attribute of a monitored client corresponding to the alarm event in a preset monitored client node topology structure when a preset alarm event suppression rule corresponding to the alarm event is not matched, and perform alarm event processing.
Optionally, the suppression rule matching module 420 is specifically configured to:
and when the time of acquiring the alarm event is within the service operation event execution time period in the service operation event forecast information, matching an alarm event suppression rule associated with the service operation event for the alarm event.
Optionally, the client node reference module is specifically configured to:
querying brother nodes of the monitored client node corresponding to the alarm event in the preset monitored client node topological structure;
and when the monitored client corresponding to at least one node in the brother nodes does not send out the alarm event, carrying out degradation suppression on the alarm event, and carrying out alarm event processing.
Optionally, the alarm information processing apparatus further includes a suppression rule updating module, configured to:
counting and analyzing the alarm events of each monitored client, and determining the operation characteristics of each monitored client according to the analysis result;
and updating preset alarm event suppression rules in an alarm event suppression rule database according to the operation characteristics.
Optionally, the information obtaining module 410 is specifically configured to:
receiving service operation event forecast information of the monitored client, which is uploaded by a monitoring agent of each monitored client through a preset application program interface;
and monitoring the alarm events of the monitored client, which are uploaded by the monitoring agents of the monitored clients, in a preset alarm event message queue.
Optionally, the alarm information processing apparatus further includes a node structure building module, configured to:
and constructing a preset monitored client node topological structure based on the configuration information of each monitored client in the configuration management database.
The alarm information processing device configured at the server side provided by the embodiment of the invention can execute the alarm information processing method applied to the server side provided by any embodiment of the invention, and has the corresponding functional modules and beneficial effects of the execution method.
EXAMPLE five
Fig. 5 is a schematic structural diagram of an alarm information processing apparatus configured at a client according to a fifth embodiment of the present invention, which is applicable to a case of performing suppression processing on a large amount of alarm information.
As shown in fig. 5, the warning information processing apparatus disposed at the client includes: and a service information uploading module 510.
A service information uploading module 510, configured to upload, based on the monitoring agent, an alarm event and/or service operation event forecast information to the server, so that the server processes the alarm event according to the service operation event forecast information.
The alarm information processing device configured to the client provided by the embodiment of the invention can execute the alarm information processing method applied to the client provided by any embodiment of the invention, and has corresponding functional modules and beneficial effects of the execution method.
According to the technical scheme of the embodiment, the alarm event and/or the business operation event forecast information actively reported by the client side is used for enabling the server side to match the corresponding preset alarm event suppression rule for the alarm event by taking the corresponding business operation event forecast information of the monitored client side as the basis for matching the alarm event suppression rule for each alarm event according to the reported information content; and finally, performing alarm suppression according to the preset alarm event suppression rule, and processing the alarm event. The method and the system solve the problems that the alarm information suppression rule of the operation monitoring server is complex, the suppression rule conflicts possibly exist and the operation pressure of the server is high in the prior art, realize the mode of actively reporting the alarm event and the service operation state to the server through the client, reduce the operation pressure of the server, simplify the rule of the alarm information suppression to a certain extent and improve the efficiency of the alarm event suppression.
EXAMPLE six
Fig. 6 is a schematic structural diagram of a server device according to a sixth embodiment of the present invention. FIG. 6 illustrates a block diagram of an exemplary server 12 suitable for use in implementing embodiments of the present invention. The server 12 shown in fig. 6 is only an example, and should not bring any limitation to the function and the scope of use of the embodiment of the present invention. The server 12 may be any terminal device with computing capability, such as a smart controller and a terminal device such as a server and a mobile phone.
As shown in FIG. 6, the server 12 is in the form of a general purpose computing device. The components of the server 12 may include, but are not limited to: one or more processors or processing units 16, a system memory 28, and a bus 18 that couples various system components including the system memory 28 and the processing unit 16.
The server 12 typically includes a variety of computer system readable media. Such media may be any available media that is accessible by server 12 and includes both volatile and nonvolatile media, removable and non-removable media.
The system memory 28 may include computer system readable media in the form of volatile memory, such as Random Access Memory (RAM)30 and/or cache memory 32. The server 12 may further include other removable/non-removable, volatile/nonvolatile computer system storage media. By way of example only, storage system 34 may be used to read from and write to non-removable, nonvolatile magnetic media (not shown in FIG. 6, and commonly referred to as a "hard drive"). Although not shown in FIG. 6, a magnetic disk drive for reading from and writing to a removable, nonvolatile magnetic disk (e.g., a "floppy disk") and an optical disk drive for reading from or writing to a removable, nonvolatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to bus 18 by one or more data media interfaces. System memory 28 may include at least one program product having a set (e.g., at least one) of program modules that are configured to carry out the functions of embodiments of the invention.
A program/utility 40 having a set (at least one) of program modules 42 may be stored, for example, in system memory 28, such program modules 42 including, but not limited to, an operating system, one or more application programs, other program modules, and program data, each of which examples or some combination thereof may comprise an implementation of a network environment. Program modules 42 generally carry out the functions and/or methodologies of the described embodiments of the invention.
The server 12 may also communicate with one or more external devices 14 (e.g., keyboard, pointing device, display 24, etc.), with one or more devices that enable a user to interact with the server 12, and/or with any devices (e.g., network card, modem, etc.) that enable the server 12 to communicate with one or more other computing devices. Such communication may be through an input/output (I/O) interface 22. Also, the server 12 may communicate with one or more networks (e.g., a Local Area Network (LAN), a Wide Area Network (WAN), and/or a public network, such as the Internet) via the network adapter 20. As shown, the network adapter 20 communicates with the other modules of the server 12 via the bus 18. It should be appreciated that although not shown in FIG. 6, other hardware and/or software modules may be used in conjunction with the server 12, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, among others.
The processing unit 16 executes various functional applications and data processing by running a program stored in the system memory 28, for example, implementing an alarm information processing method applied to a server side provided by the embodiment of the present invention, the method includes:
acquiring warning events and/or service operation event forecast information of each monitored client;
for each alarm event, matching a corresponding preset alarm event suppression rule for the alarm event based on the service operation event forecast information of the corresponding monitored client;
and performing alarm suppression according to the preset alarm event suppression rule, and performing alarm event processing.
EXAMPLE seven
Fig. 7 is a schematic structural diagram of a computer device according to a seventh embodiment of the present invention. FIG. 7 illustrates a block diagram of an exemplary computer device 12 suitable for use in implementing embodiments of the present invention. The computer device 12 shown in fig. 7 is only an example and should not bring any limitations to the functionality or scope of use of the embodiments of the present invention. The computer device 12 may be any terminal device with computing capability, such as a terminal device of an intelligent controller, a server, a mobile phone, and the like.
As shown in FIG. 7, computer device 12 is in the form of a general purpose computing device. The components of computer device 12 may include, but are not limited to: one or more processors or processing units 16, a system memory 28, and a bus 18 that couples various system components including the system memory 28 and the processing unit 16.
The system memory 28 may include computer system readable media in the form of volatile memory, such as Random Access Memory (RAM)30 and/or cache memory 32. Computer device 12 may further include other removable/non-removable, volatile/nonvolatile computer system storage media. By way of example only, storage system 34 may be used to read from and write to non-removable, nonvolatile magnetic media (not shown in FIG. 7, and commonly referred to as a "hard drive"). Although not shown in FIG. 7, a magnetic disk drive for reading from and writing to a removable, nonvolatile magnetic disk (e.g., a "floppy disk") and an optical disk drive for reading from or writing to a removable, nonvolatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to bus 18 by one or more data media interfaces. System memory 28 may include at least one program product having a set (e.g., at least one) of program modules that are configured to carry out the functions of embodiments of the invention.
A program/utility 40 having a set (at least one) of program modules 42 may be stored, for example, in system memory 28, such program modules 42 including, but not limited to, an operating system, one or more application programs, other program modules, and program data, each of which examples or some combination thereof may comprise an implementation of a network environment. Program modules 42 generally carry out the functions and/or methodologies of the described embodiments of the invention.
The processing unit 16 executes various functional applications and data processing by running programs stored in the system memory 28, for example, implementing the method for processing the alarm information applied to the client provided by the embodiment of the present invention, the method includes:
based on the monitoring agent, the alarm event and/or the service operation event forecast information is uploaded to the server side, so that the server side processes the alarm event according to the service operation event forecast information.
Example eight
The eighth embodiment provides a computer-readable storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements an alarm information processing method applied to a server according to any embodiment of the present invention, where the method includes:
acquiring warning events and/or service operation event forecast information of each monitored client;
for each alarm event, matching a corresponding preset alarm event suppression rule for the alarm event based on the service operation event forecast information of the corresponding monitored client;
and performing alarm suppression according to the preset alarm event suppression rule, and performing alarm event processing.
Or, when executed by a processor, the program implements an alarm information processing method applied to a client according to any embodiment of the present invention, including:
based on the monitoring agent, the alarm event and/or the service operation event forecast information is uploaded to the server side, so that the server side processes the alarm event according to the service operation event forecast information.
Computer storage media for embodiments of the invention may employ any combination of one or more computer-readable media. The computer readable medium may be a computer readable signal medium or a computer readable storage medium. The computer-readable storage medium may be, for example but not limited to: an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.
A computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.
Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, fiber optic cable, RF, etc., or any suitable combination of the foregoing.
Computer program code for carrying out operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider).
It will be understood by those skilled in the art that the modules or steps of the invention described above may be implemented by a general purpose computing device, they may be centralized on a single computing device or distributed across a network of computing devices, and optionally they may be implemented by program code executable by a computing device, such that it may be stored in a memory device and executed by a computing device, or it may be separately fabricated into various integrated circuit modules, or it may be fabricated by fabricating a plurality of modules or steps thereof into a single integrated circuit module. Thus, the present invention is not limited to any specific combination of hardware and software.
It is to be noted that the foregoing is only illustrative of the preferred embodiments of the present invention and the technical principles employed. It will be understood by those skilled in the art that the present invention is not limited to the particular embodiments described herein, but is capable of various obvious changes, rearrangements and substitutions as will now become apparent to those skilled in the art without departing from the scope of the invention. Therefore, although the present invention has been described in greater detail by the above embodiments, the present invention is not limited to the above embodiments, and may include other equivalent embodiments without departing from the spirit of the present invention, and the scope of the present invention is determined by the scope of the appended claims.
Claims (13)
1. An alarm information processing method is applied to a server side, and the method comprises the following steps:
acquiring warning events and/or service operation event forecast information of each monitored client;
for each alarm event, matching a corresponding preset alarm event suppression rule for the alarm event based on the service operation event forecast information of the corresponding monitored client;
and performing alarm suppression according to the preset alarm event suppression rule, and performing alarm event processing.
2. The method of claim 1, wherein when a preset alarm event throttling rule corresponding to the alarm event is not matched, the method further comprises:
and determining an alarm event suppression rule of the alarm event according to the node attribute of the monitored client corresponding to the alarm event in a preset monitored client node topological structure, and processing the alarm event.
3. The method according to claim 1, wherein the matching of the corresponding preset alarm event suppression rule for the alarm event based on the service operation event forecast information of the corresponding monitored client includes:
and when the time of acquiring the alarm event is within the service operation event execution time period in the service operation event forecast information, matching an alarm event suppression rule associated with the service operation event for the alarm event.
4. The method according to claim 2, wherein the determining an alarm event suppression rule of the alarm event according to the node attribute of the monitored client corresponding to the alarm event in a preset monitored client node topology, and performing alarm event processing comprises:
querying brother nodes of the monitored client node corresponding to the alarm event in the preset monitored client node topological structure;
and when the monitored client corresponding to at least one node in the brother nodes does not send out the alarm event, carrying out degradation suppression on the alarm event, and carrying out alarm event processing.
5. The method of claim 1, further comprising:
counting and analyzing the alarm events of each monitored client, and determining the operation characteristics of each monitored client according to the analysis result;
and updating preset alarm event suppression rules in an alarm event suppression rule database according to the operation characteristics.
6. The method according to claim 1, wherein the obtaining alarm event and/or service operation event forecast information of each monitored client includes:
receiving service operation event forecast information of the monitored client, which is uploaded by a monitoring agent of each monitored client through a preset application program interface;
and monitoring the alarm events of the monitored client, which are uploaded by the monitoring agents of the monitored clients, in a preset alarm event message queue.
7. The method according to any one of claims 1-6, further comprising:
and constructing a preset monitored client node topological structure based on the configuration information of each monitored client in the configuration management database.
8. An alarm information processing method is applied to a client, and the method comprises the following steps:
based on the monitoring agent, the alarm event and/or the service operation event forecast information is uploaded to the server side, so that the server side processes the alarm event according to the service operation event forecast information.
9. An alarm information processing apparatus, configured to a server, the apparatus comprising:
the information acquisition module is used for acquiring warning events and/or service operation event forecast information of the monitored client, which is uploaded by each monitoring agent;
the system comprises a pressing rule matching module, a monitoring agent and a monitoring agent, wherein the pressing rule matching module is used for matching a corresponding preset alarm event pressing rule for each alarm event based on business operation event forecast information uploaded by the corresponding monitoring agent;
and the alarm event processing module is used for carrying out alarm suppression according to the preset alarm event suppression rule and carrying out alarm event processing.
10. An alert information processing apparatus, provided at a client, the apparatus comprising:
and the service information uploading module is used for uploading alarm events and/or service operation event forecast information to the service end based on the monitoring agent so that the service end processes the alarm events according to the service operation event forecast information.
11. A server, characterized in that the server comprises:
one or more processors;
a memory for storing one or more programs;
when executed by the one or more processors, cause the one or more processors to implement the alert information processing method of any of claims 1-7.
12. A computer device, characterized in that the computer device comprises:
one or more processors;
a memory for storing one or more programs;
when executed by the one or more processors, cause the one or more processors to implement the alert information processing method of claim 8.
13. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the alarm information processing method according to any one of claims 1 to 8.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110885466.4A CN113590437B (en) | 2021-08-03 | 2021-08-03 | Alarm information processing method, device, equipment and medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110885466.4A CN113590437B (en) | 2021-08-03 | 2021-08-03 | Alarm information processing method, device, equipment and medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113590437A true CN113590437A (en) | 2021-11-02 |
| CN113590437B CN113590437B (en) | 2024-04-30 |
Family
ID=78254245
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110885466.4A Active CN113590437B (en) | 2021-08-03 | 2021-08-03 | Alarm information processing method, device, equipment and medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113590437B (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114091704A (en) * | 2021-11-26 | 2022-02-25 | 奇点浩翰数据技术(北京)有限公司 | Alarm suppression method and device |
| CN114710532A (en) * | 2022-04-02 | 2022-07-05 | 中国科学院水生生物研究所 | Museum safety electricity utilization alarm suppression method and device |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20170141949A1 (en) * | 2015-11-13 | 2017-05-18 | Le Holdings (Beijing) Co., Ltd. | Method and apparatus for processing alarm information in cloud computing |
| CN106936620A (en) * | 2015-12-31 | 2017-07-07 | 北京神州泰岳软件股份有限公司 | The processing method and processing unit of a kind of alarm event |
| CN109257200A (en) * | 2017-07-14 | 2019-01-22 | 北京京东尚科信息技术有限公司 | The method and apparatus of big data platform monitoring |
| CN110188099A (en) * | 2019-05-17 | 2019-08-30 | 深圳前海微众银行股份有限公司 | A kind of data managing method and device |
| CN111176879A (en) * | 2019-12-31 | 2020-05-19 | 中国建设银行股份有限公司 | Fault repairing method and device for equipment |
| CN111385148A (en) * | 2020-03-06 | 2020-07-07 | 深圳鼎盛电脑科技有限公司 | Service alarm method, device, computer equipment and storage medium |
| CN112200603A (en) * | 2020-09-25 | 2021-01-08 | 微梦创科网络科技（中国）有限公司 | Alarm method and system for social advertisement putting |
| CN112416724A (en) * | 2020-12-04 | 2021-02-26 | 中国建设银行股份有限公司 | Alarm processing method, system, computer equipment and storage medium |
| CN112636979A (en) * | 2020-12-24 | 2021-04-09 | 北京浪潮数据技术有限公司 | Cluster alarm method and related device |
| CN113282461A (en) * | 2021-05-28 | 2021-08-20 | 中国联合网络通信集团有限公司 | Alarm identification method and device for transmission network |
-
2021
- 2021-08-03 CN CN202110885466.4A patent/CN113590437B/en active Active
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20170141949A1 (en) * | 2015-11-13 | 2017-05-18 | Le Holdings (Beijing) Co., Ltd. | Method and apparatus for processing alarm information in cloud computing |
| CN106936620A (en) * | 2015-12-31 | 2017-07-07 | 北京神州泰岳软件股份有限公司 | The processing method and processing unit of a kind of alarm event |
| CN109257200A (en) * | 2017-07-14 | 2019-01-22 | 北京京东尚科信息技术有限公司 | The method and apparatus of big data platform monitoring |
| CN110188099A (en) * | 2019-05-17 | 2019-08-30 | 深圳前海微众银行股份有限公司 | A kind of data managing method and device |
| CN111176879A (en) * | 2019-12-31 | 2020-05-19 | 中国建设银行股份有限公司 | Fault repairing method and device for equipment |
| CN111385148A (en) * | 2020-03-06 | 2020-07-07 | 深圳鼎盛电脑科技有限公司 | Service alarm method, device, computer equipment and storage medium |
| CN112200603A (en) * | 2020-09-25 | 2021-01-08 | 微梦创科网络科技（中国）有限公司 | Alarm method and system for social advertisement putting |
| CN112416724A (en) * | 2020-12-04 | 2021-02-26 | 中国建设银行股份有限公司 | Alarm processing method, system, computer equipment and storage medium |
| CN112636979A (en) * | 2020-12-24 | 2021-04-09 | 北京浪潮数据技术有限公司 | Cluster alarm method and related device |
| CN113282461A (en) * | 2021-05-28 | 2021-08-20 | 中国联合网络通信集团有限公司 | Alarm identification method and device for transmission network |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114091704A (en) * | 2021-11-26 | 2022-02-25 | 奇点浩翰数据技术(北京)有限公司 | Alarm suppression method and device |
| CN114710532A (en) * | 2022-04-02 | 2022-07-05 | 中国科学院水生生物研究所 | Museum safety electricity utilization alarm suppression method and device |
| CN114710532B (en) * | 2022-04-02 | 2023-10-03 | 中国科学院水生生物研究所 | Method and device for suppressing security electricity utilization alarm of museum |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113590437B (en) | 2024-04-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11836533B2 (en) | Automated reconfiguration of real time data stream processing | |
| CN113590437B (en) | Alarm information processing method, device, equipment and medium | |
| CN111782672B (en) | Multi-field data management method and related device | |
| CN110717132A (en) | Data collection method and pushing method for full-link monitoring system and related equipment | |
| CN111294218B (en) | Information processing method, device, system and storage medium | |
| WO2021190659A1 (en) | System data acquisition method and apparatus, and medium and electronic device | |
| CN114090366A (en) | Method, device and system for monitoring data | |
| CN114091704A (en) | Alarm suppression method and device | |
| CN111339466A (en) | Interface management method and device, electronic equipment and readable storage medium | |
| CN112910733A (en) | Full link monitoring system and method based on big data | |
| CN111581059A (en) | Spark application monitoring method, system, equipment and storage medium | |
| CN111597026B (en) | Method and device for acquiring information | |
| CN113656239A (en) | Monitoring method and device for middleware and computer program product | |
| CN114756301A (en) | Log processing method, device and system | |
| CN115080271A (en) | Event data processing method and device, electronic equipment and storage medium | |
| CN113626869A (en) | Data processing method, system, electronic device and storage medium | |
| CN114885014A (en) | Method, device, equipment and medium for monitoring external field equipment state | |
| US10866876B2 (en) | Dynamically configurable operation information collection | |
| CN113242148A (en) | Method, device, medium and electronic equipment for generating monitoring alarm related information | |
| CN113220342A (en) | Centralized configuration method and device, electronic equipment and storage medium | |
| CN113157475A (en) | Log processing method and device, storage medium and electronic equipment | |
| US20240168798A1 (en) | Automatic synchronous or asynchronous execution of requests | |
| CN113934581A (en) | Method and device for acquiring disk fault information of storage system, electronic equipment and medium | |
| CN116112342A (en) | Alarm information processing method, device, electronic equipment and storage medium | |
| CN116506316A (en) | Method and device for monitoring session data of application server |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |