CN115913888A - Server alarm system control method, device and medium - Google Patents
Server alarm system control method, device and medium Download PDFInfo
- Publication number
- CN115913888A CN115913888A CN202211446990.2A CN202211446990A CN115913888A CN 115913888 A CN115913888 A CN 115913888A CN 202211446990 A CN202211446990 A CN 202211446990A CN 115913888 A CN115913888 A CN 115913888A
- Authority
- CN
- China
- Prior art keywords
- alarm
- alarm information
- information
- monitoring system
- strategy
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 98
- 238000012544 monitoring process Methods 0.000 claims abstract description 60
- 230000008569 process Effects 0.000 claims abstract description 47
- 238000004590 computer program Methods 0.000 claims description 13
- 238000012545 processing Methods 0.000 claims description 11
- 238000012423 maintenance Methods 0.000 description 11
- 238000012216 screening Methods 0.000 description 8
- 238000010586 diagram Methods 0.000 description 6
- 230000009471 action Effects 0.000 description 4
- 238000004364 calculation method Methods 0.000 description 4
- 230000002159 abnormal effect Effects 0.000 description 2
- 238000004422 calculation algorithm Methods 0.000 description 2
- 238000004891 communication Methods 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000009825 accumulation Methods 0.000 description 1
- 238000004458 analytical method Methods 0.000 description 1
- 238000013473 artificial intelligence Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000004140 cleaning Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 238000010801 machine learning Methods 0.000 description 1
- 230000005055 memory storage Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000005457 optimization Methods 0.000 description 1
- 238000007781 pre-processing Methods 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
- 238000009877 rendering Methods 0.000 description 1
- 230000001052 transient effect Effects 0.000 description 1
Images
Classifications
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02P—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
- Y02P90/00—Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
- Y02P90/02—Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]
Landscapes
- Alarm Systems (AREA)
Abstract
The application relates to the field of servers, and discloses a server monitoring system control method, device and medium, which comprise: when the alarm information sent by each service process is detected, acquiring identity information corresponding to the alarm information; determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by a user and an alarm object; judging whether the alarm information meets preset conditions corresponding to each alarm object in the allocation strategy or not; and if the preset conditions are met, sending the alarm information to an alarm object. Therefore, according to the technical scheme provided by the application, the alarm information is sent to the alarm objects according to the alarm information allocation strategy preset by the user, so that the alarm information is screened, the situation that the alarm information received by each alarm object is too much and cannot be processed in time is prevented, and the stability and the reliability of the server are improved.
Description
Technical Field
The present application relates to the field of servers, and in particular, to a method, an apparatus, and a medium for controlling a server alarm system.
Background
With the development of cloud computing technology, cloud computing platforms are widely used, and in order to ensure that the cloud computing platforms can work normally, the working state of the cloud computing platforms needs to be monitored through a server monitoring system and various sensors, and an alarm is sent to maintenance personnel when the cloud computing platforms break down, so that the maintenance personnel can manage and maintain the cloud computing platforms in time.
In the working process of the server, the server sends all monitoring information to maintenance personnel, however, the monitoring information generated by the server is too much, the monitoring information is not all important information needing to be processed immediately, and a large amount of monitoring information can cause the important information to be submerged, so that the normal work of the maintenance personnel is influenced. Most of current cloud computing platforms only support automatic division of priority of sent information according to importance degrees (information, warning and serious warning) of the information, the division mode is too wide, a large amount of unnecessary warning screening work is brought to maintenance personnel, the maintenance personnel cannot find important fault information in time, and safety and reliability of a server are affected.
Therefore, it is an urgent need to solve the problem of the art to provide a method for controlling a server monitoring system so that the alarm information of the server monitoring system can be found by the maintainer.
Disclosure of Invention
The application aims to provide a control method, a control device and a control medium of a server monitoring system, so that the situation that maintenance personnel receive too many alarm messages due to an excessively wide classification mode is prevented, and the safety and the reliability of a server are improved.
In order to solve the above technical problem, the present application provides a server monitoring system control method, including:
when alarm information sent by each service process is detected, acquiring identity information corresponding to the alarm information;
determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by a user and an alarm object;
judging whether the alarm information meets preset conditions corresponding to the alarm objects in the allocation strategy or not;
and if the preset condition is met, sending the alarm information to the alarm object.
Preferably, the identity information at least includes: device information and process information.
Preferably, before the step of obtaining the identity information corresponding to the warning information, the method further includes:
calculating the similarity between the alarm information and the historical alarm information within a first threshold time;
and if the similarity is smaller than a similarity threshold value, executing the step of acquiring the identity information corresponding to the alarm information.
Preferably, the method further comprises the following steps:
when an updating instruction of a user is received, analyzing the updating instruction to acquire the dispatching strategy and target alarm information;
and updating a policy base according to the allocation policy and the target alarm information, wherein the policy base is a database for storing the allocation policy.
Preferably, the determining whether the alarm information satisfies a preset condition corresponding to each of the alarm objects in the assignment policy includes:
and judging whether the alarm level of the alarm information is not less than the alarm level of the alarm object.
Preferably, after the step of sending the warning information to the warning object, the method further includes:
and if the reply information sent by the alarm object is not received within the threshold time, sending the alarm information to a high-level manager.
Preferably, the sending the alarm information to the alarm object includes:
and sending the alarm information to a trap receiving end which is specified by a user and corresponds to the alarm object.
In order to solve the above technical problem, the present application provides a server monitoring system control device, including:
the system comprises an acquisition unit, a processing unit and a processing unit, wherein the acquisition unit is used for acquiring identity information corresponding to alarm information when the alarm information sent by each service process is detected;
the determining unit is used for determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by a user and an alarm object;
the judging unit is used for judging whether the alarm information meets the preset conditions corresponding to each alarm object in the assignment strategy;
and the sending unit is used for sending the alarm information to the alarm object if the preset condition is met.
In order to solve the above technical problem, the present application further provides a server monitoring system control device, which includes a memory for storing a computer program;
and the processor is used for realizing the steps of the control method of the server monitoring system when executing the computer program.
In order to solve the above technical problem, the present application provides a computer-readable storage medium having a computer program stored thereon, where the computer program is executed by a processor to implement the steps of the server monitoring system control method.
The application provides a server monitoring system control method, which comprises the following steps: when the alarm information sent by each service process is detected, acquiring identity information corresponding to the alarm information; determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by a user and an alarm object; judging whether the alarm information meets preset conditions corresponding to each alarm object in the allocation strategy or not; and if the preset condition is met, sending the alarm information to an alarm object. Therefore, according to the technical scheme provided by the application, the alarm information is sent to the alarm objects according to the alarm information allocation strategy preset by the user, so that the alarm information is screened, the situation that the alarm information received by each alarm object is too much and cannot be processed in time is prevented, and the stability and the reliability of the server are improved.
In addition, the application also provides a server monitoring system control device and a medium, which correspond to the method and have the same effects.
Drawings
In order to more clearly illustrate the embodiments of the present application, the drawings needed for the embodiments will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present application, and that other drawings can be obtained by those skilled in the art without inventive effort.
Fig. 1 is a schematic diagram of a server monitoring system according to an embodiment of the present disclosure;
fig. 2 is a flowchart of a control method for a server monitoring system according to an embodiment of the present disclosure;
fig. 3 is a structural diagram of a control device of a server monitoring system according to an embodiment of the present application;
fig. 4 is a structural diagram of another server monitoring system control device according to an embodiment of the present application;
the reference numbers are as follows: 1 is a server side, and 2 is a client side.
Detailed Description
The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments in the present application without any creative effort belong to the protection scope of the present application.
The core of the application is to provide a control method, a device and a medium for a server monitoring system, so that the problem that maintenance personnel receive too many alarm messages due to too wide classification modes is solved, and the safety and the reliability of the server are improved.
For the convenience of understanding, a hardware architecture to which the technical solution of the present invention is applicable will be described below, and the solution provided in the present application is applied to various server platforms. Fig. 1 is a schematic diagram of a server monitoring system according to an embodiment of the present application, as shown in fig. 1, in a specific implementation, after a server 1 is started, a large number of service processes are run therein, and the server monitoring system obtains alarm information generated in a running process of each service process and sends the alarm information to a client (i.e., a Trap receiving end 2). Specifically, the scheme is applied to a WEB client of the server and sends alarm information to a Trap receiving end 2 of a client through an SNMP system, wherein the alarm information comprises a host name for sending the alarm information, a network IP for sending the alarm information and alarm content. After acquiring the alarm information, the Trap receiving end 2 analyzes the alarm information and maintains the abnormal server according to the analyzed information. It should be noted that the scheme provided by the present application can be applied to detect the service process running locally by the server, and can also be used to detect the working states of network devices (e.g., routers) and the like under the server.
In a server application scenario, a large number of services are simultaneously running in a server, for example: at present, various sensors are arranged in a server of a domestic common sea light platform, and once any sensor is in a state, alarm information can be sent out and sent to a receiving end of an administrator. However, the alarm information generated by the server monitoring tool is not necessarily important, and if the server sends an alarm very often, the administrator is forced to receive a large amount of alarm information in a short time, wherein the alarm information that is really important may be overwhelmed. The sea light platform server provides priority classification for warning, which is divided into three types of information, warning and serious warning, but the warning configuration of the server can only select the warning level received by the receiving end according to the warning and the serious/all priorities, and can not customize the personalized warning types according to the requirements of users, so that unnecessary warning screening work is brought to operation and maintenance personnel, even important warning information can be omitted, the judgment difficulty of the operation and maintenance personnel on the warning information is increased, the root cause cannot be rapidly positioned, and the problem cannot be rapidly solved.
In order to solve this problem, an embodiment of the present application provides a server monitoring system control method, including: when the alarm information sent by each service process is detected, acquiring identity information corresponding to the alarm information; determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by a user and an alarm object; judging whether the alarm information meets preset conditions corresponding to each alarm object in the assignment strategy or not; and if the preset conditions are met, sending the alarm information to an alarm object. Therefore, according to the technical scheme provided by the application, the alarm information is sent to the alarm objects according to the alarm information allocation strategy preset by the user, so that the alarm information is screened, the situation that the alarm information received by each alarm object is too much and cannot be processed in time is prevented, and the stability and the reliability of the server are improved.
In order that those skilled in the art will better understand the disclosure, the following detailed description will be given with reference to the accompanying drawings.
Fig. 2 is a flowchart of a control method for a server monitoring system according to an embodiment of the present disclosure, and as shown in fig. 2, the method includes:
s10: and when the alarm information sent by each service process is detected, acquiring the identity information corresponding to the alarm information.
The technical scheme provided by the application is applied to a server monitoring system of a server WEB side, and is used for controlling the alarm information generated in the operation process of each service process operated in the server so as to send the alarm information to a corresponding alarm object. In particular implementations, the alarm information may be obtained and assigned in the form of a queue.
In specific implementation, a single server monitoring system may include multiple servers, each server runs multiple different processes, in order to clearly distinguish different processes for mechanical maintenance of management personnel, when alarm information sent by each business process is detected, identity information corresponding to the alarm information is obtained, where the identity information corresponding to the alarm information includes device information and process information. The device information may be device IP information or device MAC address information, and the process information may be a process ID or a process name.
S11: and determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by the user and the alarm object.
In specific implementation, an assignment policy corresponding to the alarm information is determined according to the identity information, wherein the assignment policy is a policy preset by a user. For example: the user can select different assignment strategies for each alarm information by judging whether each alarm information meets the corresponding screening condition or not by taking the grade of the alarm information, the alarm content, the equipment information of the host sending the alarm information, the process information of the sending alarm information, the object of the alarm information and the like as the screening condition. The level of the alarm information can be determined according to the content of the alarm information and the sending frequency of the alarm information of the abnormal process. The specific screening condition of each assignment policy may be one of the above screening conditions, or may be a combination of a plurality of screening conditions, and is not limited herein.
Furthermore, the user sets the allocation strategy in advance, and after the server monitoring system collects the alarm information sent by each server and each business process, the server monitoring system judges which user preset allocation strategy each alarm information is matched with.
For example: the alarm information of the device A is in a first level, the alarm information of the device B is in a second level, the alarm information of the device C is in a third level, the user A only receives the alarm information in the first level, the user B receives the alarm information above the second level, the alarm information of the device A hits the allocation strategy of the user A, and the alarm information of the device A is sent to the user A; and the alarm information of the B equipment hits the dispatching strategy of the user A and the dispatching strategy of the user B, and the alarm information of the B equipment is sent to the user A and the user B.
It can be understood that, considering that the processes running in the server are various and are changing, the server monitoring system needs to update the policy base according to the update instruction of the user, so that the assignment policy of each alarm information can meet the personalized requirement of the user.
S12: judging whether the alarm information meets preset conditions corresponding to each alarm object in the allocation strategy or not;
s13: and if the preset conditions are met, sending the alarm information to an alarm object.
In the specific implementation, after determining each assignment policy corresponding to the alarm information, it can only be stated that the identity information of the alarm information satisfies the assignment policy, and does not represent that each alarm message can hit each assignment policy. Therefore, it is further required to determine whether the alarm information satisfies preset conditions corresponding to each alarm object in the assignment policy, where the preset conditions may be: the alarm level of the alarm information is greater than the alarm level of the alarm object, and the number of the alarm information sent by the process corresponding to the alarm information in the preset time is greater than the threshold number.
The embodiment of the application provides a control method for a server monitoring system, which comprises the following steps: when the alarm information sent by each service process is detected, acquiring identity information corresponding to the alarm information; determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by a user and an alarm object; judging whether the alarm information meets preset conditions corresponding to each alarm object in the allocation strategy or not; and if the preset conditions are met, sending the alarm information to an alarm object. Therefore, according to the technical scheme provided by the application, the alarm information is sent to the alarm objects according to the alarm information allocation strategy preset by the user, so that the alarm information is screened, the situation that the alarm information received by each alarm object is too much and cannot be processed in time is prevented, and the stability and the reliability of the server are improved.
On the basis of the above embodiment, the identity information for determining the assignment policy corresponding to the alarm information at least includes: device information and process information. The device information may be device IP information or device MAC address information, and the process information may be a process ID or a process name, which is not limited herein.
In particular implementations, to ensure that a manager can quickly find an effective security threat, the threat levels of alarms may be ranked, and the manager may prioritize high-level alarm threats and then prioritize low-level alarm threats, so as to find an effective security threat more quickly within a limited time. The method comprises the steps of carrying out manual examination on massive alarms, classifying the alarms according to alarm types, and obtaining high-level threats, middle-level threats and low-level threats after scoring different alarms. However, this process is wasteful of manpower and material resources.
In order to solve the problem, on the basis of the above embodiment, before the step of acquiring the identity information corresponding to the alarm information, the method further includes:
calculating the similarity between the alarm information and the historical alarm information within the first threshold time;
and if the similarity is smaller than the similarity threshold, executing the step of acquiring the identity information corresponding to the alarm information.
Further, before the step of acquiring the identity information corresponding to the alarm information, the acquired alarm information may be preprocessed (for example, data cleaning and data screening) to remove repeated or low-value alarm information, which is beneficial to the development of subsequent processes. After the warning information preprocessing is completed, the similarity of the warning information needs to be calculated. In the process, the historical alarm information and the preprocessed alarm information are required to be used for similarity calculation, so that the known alarm information with high threat can be quickly matched in the historical alarm information, other alarm information with low similarity can be divided into an unknown alarm information set, the unknown alarm information is used for analyzing the threat degree of the unknown alarm information in a follow-up manner, and the known alarm information is optimized in the process without being continuously analyzed manually. After the alarm information similarity calculation, safety researchers can quickly analyze similar known alarm information and can eliminate potential 0day and other high-threat attacks, the alarm optimization capacity is stronger and stronger along with the continuous accumulation of massive historical alarm information in the process, and the known threats can be better analyzed while a large amount of alarm information is filtered.
Furthermore, clustering algorithms such as KMeans and DBSCAN can be used for clustering the alarm information of unknown alarm information, so that a large amount of similar and related alarm information can be effectively gathered together, analysis by safety researchers is facilitated, and the number of alarm information which is analyzed manually and repeatedly is reduced. For example, the alarm information related to the wordpress can be quickly gathered together through a clustering algorithm, so that a security analyst can quickly judge that the alarm information is WEB related alarm information, and can optimize the whole clustering category through a large amount of similar alarm information without manually checking the similar alarm information.
As a preferred embodiment, in order to enable the server monitoring system to better meet the personalized requirements of the user, the server monitoring system control method provided in the foregoing embodiment further includes: when an updating instruction of a user is received, analyzing the updating instruction to acquire an assignment strategy and target alarm information; and updating a strategy base according to the allocation strategy and the target alarm information, wherein the strategy base is a database for storing the allocation strategy.
In particular implementations, a user may set a dispatch policy in a policy repository through a user operating system provided by a server monitoring system.
As a preferred embodiment, after the step of sending the alarm information to the alarm object, the method further includes:
and if the reply information sent by the alarm object is not received within the threshold time, sending the alarm information to a high-level manager.
In a specific implementation, in order to prevent the omission of important alarm information, if the reply information sent by the alarm object is not received within a threshold time, the alarm information is sent to a high-level manager. For example: and when the alarm is not claimed or closed within the time specified by the user, sending alarm information to the second responsible person, and similarly, if the second responsible person takes relevant measures, sending the alarm information to a third responsible person, a fourth responsible person and the like preset by the user. And the user defines the alarm information with high priority into a type of affairs according to the requirement of the user. The affairs are set to have the information of the return of the user, once the affairs occur, the web side of the server must receive the processing return of the user or close the action and then stop sending the information again, or the web side of the server can inform the related personnel set in advance until the return is received. The user can define some generally important alarm information into two types of affairs, when the affairs occur, the alarm information is sent to related personnel, and the affairs do not need to be returned.
It is understood that sending alarm information to an alarm object includes: and sending the alarm information to a trap receiving end which is specified by a user and corresponds to the alarm object. Specifically, when the alarm information hits the corresponding dispatch strategy, the alarm information is sent to the trap receiving end corresponding to the alarm object.
In the above embodiments, detailed descriptions are given to a server monitoring system control method, and the present application also provides embodiments corresponding to a server monitoring system control device. It should be noted that the present application describes the embodiments of the apparatus portion from two perspectives, one from the perspective of the function module and the other from the perspective of the hardware.
Since the embodiments of the apparatus portion and the method portion correspond to each other, please refer to the description of the embodiments of the method portion for the embodiments of the apparatus portion, which is not repeated here.
Fig. 3 is a structural diagram of a control device of a server monitoring system according to an embodiment of the present application, and as shown in fig. 3, the device includes:
the acquiring unit 10 is configured to acquire identity information corresponding to alarm information when the alarm information sent by each service process is detected;
the determining unit 11 is configured to determine an assignment policy corresponding to the alarm information according to the identity information, where the assignment policy includes a correspondence between the alarm information preset by the user and the alarm object;
a judging unit 12, configured to judge whether the alarm information satisfies a preset condition corresponding to each alarm object in the assignment policy;
and the sending unit 13 is configured to send the alarm information to the alarm object if the preset condition is met.
Further, the server monitoring system control device further includes: the system comprises a similarity calculation unit and a strategy base updating unit, wherein the similarity calculation unit is used for calculating the similarity between the alarm information and the historical alarm information within a first threshold time; and if the similarity is smaller than the similarity threshold, executing the step of acquiring the identity information corresponding to the alarm information. The strategy base updating unit is used for analyzing the updating instruction to acquire an assignment strategy and target alarm information when receiving the updating instruction of a user; and updating a strategy base according to the allocation strategy and the target alarm information, wherein the strategy base is a database for storing the allocation strategy.
The embodiment of the application provides a server monitoring system control device, which comprises: when the alarm information sent by each service process is detected, acquiring identity information corresponding to the alarm information; determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by a user and an alarm object; judging whether the alarm information meets preset conditions corresponding to each alarm object in the allocation strategy or not; and if the preset conditions are met, sending the alarm information to an alarm object. Therefore, according to the technical scheme provided by the application, the alarm information is sent to the alarm objects according to the alarm information allocation strategy preset by the user, so that the alarm information is screened, the situation that the alarm information received by each alarm object is too much and cannot be processed in time is prevented, and the stability and the reliability of the server are improved.
Fig. 4 is a structural diagram of another server monitoring system control device according to an embodiment of the present application, and as shown in fig. 4, the server monitoring system control device includes: a memory 20 for storing a computer program;
the processor 21 is configured to implement the steps of the server monitoring system control method according to the above embodiment when executing the computer program.
The terminal device for receiving the alarm information provided by the embodiment may include, but is not limited to, a smart phone, a tablet computer, a notebook computer, or a desktop computer.
The processor 21 may include one or more processing cores, such as a 4-core processor, an 8-core processor, and the like. The Processor 21 may be implemented in hardware using at least one of a Digital Signal Processor (DSP), a Field-Programmable Gate Array (FPGA), and a Programmable Logic Array (PLA). The processor 21 may also include a main processor and a coprocessor, where the main processor is a processor for Processing data in an awake state, and is also called a Central Processing Unit (CPU); a coprocessor is a low power processor for processing data in a standby state. In some embodiments, the processor 21 may be integrated with a Graphics Processing Unit (GPU) which is responsible for rendering and drawing the content required to be displayed by the display screen. In some embodiments, the processor 21 may further include an Artificial Intelligence (AI) processor for processing computational operations related to machine learning.
The memory 20 may include one or more computer-readable storage media, which may be non-transitory. Memory 20 may also include high speed random access memory, as well as non-volatile memory, such as one or more magnetic disk storage devices, flash memory storage devices. In this embodiment, the memory 20 is at least used for storing the following computer program 201, wherein after being loaded and executed by the processor 21, the computer program can implement the relevant steps of the server monitoring system control method disclosed in any one of the foregoing embodiments. In addition, the resources stored in the memory 20 may also include an operating system 202, data 203, and the like, and the storage manner may be a transient storage manner or a permanent storage manner. Operating system 202 may include, among other things, windows, unix, linux, etc. Data 203 may include, but is not limited to, alarm information, dispatch policies, and the like.
In some embodiments, the server monitoring system control device may further include a display 22, an input/output interface 23, a communication interface 24, a power supply 25, and a communication bus 26.
Those skilled in the art will appreciate that the configuration shown in fig. 4 does not constitute a limitation of the server monitoring system control device and may include more or fewer components than those shown.
The server monitoring system control device provided by the embodiment of the application comprises a memory and a processor, and when the processor executes a program stored in the memory, the following method can be realized:
when the alarm information sent by each service process is detected, acquiring identity information corresponding to the alarm information;
determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by a user and an alarm object;
judging whether the alarm information meets preset conditions corresponding to each alarm object in the assignment strategy or not;
and the alarm information is sent to the alarm object if the preset condition is met.
The embodiment of the application provides a server monitoring system control device, including: when the alarm information sent by each service process is detected, acquiring identity information corresponding to the alarm information; determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by a user and an alarm object; judging whether the alarm information meets preset conditions corresponding to each alarm object in the allocation strategy or not; and if the preset conditions are met, sending the alarm information to an alarm object. Therefore, according to the technical scheme provided by the application, the alarm information is sent to the alarm objects according to the alarm information allocation strategy preset by the user, so that the alarm information is screened, the situation that the alarm information received by each alarm object is too much and cannot be processed in time is prevented, and the stability and the reliability of the server are improved.
Finally, the application also provides a corresponding embodiment of the computer readable storage medium. The computer-readable storage medium has stored thereon a computer program which, when being executed by a processor, carries out the steps as set forth in the above-mentioned method embodiments.
The embodiment of the application provides a storage medium for a control method of a storage server monitoring system, which comprises the following steps: when the alarm information sent by each service process is detected, acquiring identity information corresponding to the alarm information; determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by a user and an alarm object; judging whether the alarm information meets preset conditions corresponding to each alarm object in the allocation strategy or not; and if the preset conditions are met, sending the alarm information to an alarm object. Therefore, according to the technical scheme provided by the application, the alarm information is sent to the alarm objects according to the alarm information allocation strategy preset by the user, so that the alarm information is screened, the situation that the alarm information received by each alarm object is too much and cannot be processed in time is prevented, and the stability and the reliability of the server are improved.
It is understood that, if the method in the above embodiments is implemented in the form of software functional units and sold or used as a stand-alone product, it can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application may be embodied in the form of a software product, which is stored in a storage medium and executes all or part of the steps of the methods described in the embodiments of the present application, or all or part of the technical solutions. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
The server monitoring system control method, device and medium provided by the present application are described in detail above. The embodiments are described in a progressive manner in the specification, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other. The device disclosed by the embodiment corresponds to the method disclosed by the embodiment, so that the description is simple, and the relevant points can be referred to the method part for description. It should be noted that, for those skilled in the art, it is possible to make several improvements and modifications to the present application without departing from the principle of the present application, and such improvements and modifications also fall within the scope of the claims of the present application.
It is further noted that, in the present specification, relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrases "comprising one of 8230; \8230;" 8230; "does not exclude the presence of additional like elements in a process, method, article, or apparatus that comprises the element.
Claims (10)
1. A server monitoring system control method is characterized by comprising the following steps:
when alarm information sent by each service process is detected, acquiring identity information corresponding to the alarm information;
determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by a user and an alarm object;
judging whether the alarm information meets a preset condition corresponding to each alarm object in the allocation strategy or not;
and if the preset condition is met, sending the alarm information to the alarm object.
2. The server monitoring system control method according to claim 1, wherein the identity information includes at least: device information and process information.
3. The server monitoring system control method according to claim 2, wherein before the step of obtaining the identity information corresponding to the alarm information, the method further comprises:
calculating the similarity between the alarm information and the historical alarm information within a first threshold time;
and if the similarity is smaller than a similarity threshold value, executing the step of acquiring the identity information corresponding to the alarm information.
4. The server monitoring system control method according to claim 3, further comprising:
when an updating instruction of a user is received, analyzing the updating instruction to acquire the dispatching strategy and target alarm information;
and updating a strategy base according to the allocation strategy and the target alarm information, wherein the strategy base is a database for storing the allocation strategy.
5. The method as claimed in any one of claims 1 to 4, wherein said determining whether the alarm information satisfies a preset condition corresponding to each of the alarm objects in the allocation policy comprises:
and judging whether the alarm level of the alarm information is not less than the alarm level of the alarm object.
6. The method for controlling a server monitoring system according to claim 1, wherein after the step of sending the alarm information to the alarm object, the method further comprises:
and if the reply information sent by the alarm object is not received within the threshold time, sending the alarm information to a high-level manager.
7. The server monitoring system control method of claim 6, wherein the sending the alarm information to the alarm object comprises:
and sending the alarm information to a trap receiving end which is specified by a user and corresponds to the alarm object.
8. A server monitoring system control apparatus, comprising:
the system comprises an acquisition unit, a processing unit and a processing unit, wherein the acquisition unit is used for acquiring identity information corresponding to alarm information when the alarm information sent by each service process is detected;
the determining unit is used for determining an assignment strategy corresponding to the alarm information according to the identity information, wherein the assignment strategy comprises a corresponding relation between the alarm information preset by a user and an alarm object;
the judging unit is used for judging whether the alarm information meets the preset conditions corresponding to each alarm object in the assignment strategy;
and the sending unit is used for sending the alarm information to the alarm object if the preset condition is met.
9. A server monitoring system control apparatus comprising a memory for storing a computer program;
a processor for implementing the steps of the server monitoring system control method according to any one of claims 1 to 7 when executing said computer program.
10. A computer-readable storage medium, characterized in that a computer program is stored thereon, which computer program, when being executed by a processor, carries out the steps of the server monitoring system control method according to any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211446990.2A CN115913888A (en) | 2022-11-18 | 2022-11-18 | Server alarm system control method, device and medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211446990.2A CN115913888A (en) | 2022-11-18 | 2022-11-18 | Server alarm system control method, device and medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN115913888A true CN115913888A (en) | 2023-04-04 |
Family
ID=86479041
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211446990.2A Pending CN115913888A (en) | 2022-11-18 | 2022-11-18 | Server alarm system control method, device and medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115913888A (en) |
Citations (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2017181805A1 (en) * | 2016-04-20 | 2017-10-26 | 中兴通讯股份有限公司 | Method and device for displaying warning information, and computer storage medium |
| CN110096410A (en) * | 2019-03-15 | 2019-08-06 | 中国平安人寿保险股份有限公司 | Alarm information processing method, system, computer installation and readable storage medium storing program for executing |
| CN110232010A (en) * | 2019-06-18 | 2019-09-13 | 深圳前海微众银行股份有限公司 | A kind of alarm method, alarm server and monitoring server |
| CN111354174A (en) * | 2018-12-24 | 2020-06-30 | 中移（杭州）信息技术有限公司 | Alarm method, device, server and readable storage medium |
| CN112115027A (en) * | 2020-09-18 | 2020-12-22 | 平安科技（深圳）有限公司 | Information prompting method and device, storage medium and computer equipment |
| DE102020208287A1 (en) * | 2020-07-02 | 2022-01-05 | Robert Bosch Gesellschaft mit beschränkter Haftung | Method and device for warning a driver of a motor vehicle |
| WO2022062185A1 (en) * | 2020-09-25 | 2022-03-31 | 同程网络科技股份有限公司 | Warning information pushing method and system, intelligent terminal, and storage medium |
| CN114338350A (en) * | 2021-12-30 | 2022-04-12 | 北京汇通天下物联科技有限公司 | Alarm method, alarm device, electronic equipment and computer storage medium |
| CN114978867A (en) * | 2022-06-15 | 2022-08-30 | 中国电信股份有限公司 | Alarm notification method, device, equipment and storage medium |
| CN115022360A (en) * | 2022-05-24 | 2022-09-06 | 新奥数能科技有限公司 | Method, system, device and storage medium for alarm management by attendance |
| CN115051906A (en) * | 2022-05-31 | 2022-09-13 | 上海东普信息科技有限公司 | Alarm control method, device, equipment and storage medium of monitoring platform |
-
2022
- 2022-11-18 CN CN202211446990.2A patent/CN115913888A/en active Pending
Patent Citations (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2017181805A1 (en) * | 2016-04-20 | 2017-10-26 | 中兴通讯股份有限公司 | Method and device for displaying warning information, and computer storage medium |
| CN111354174A (en) * | 2018-12-24 | 2020-06-30 | 中移（杭州）信息技术有限公司 | Alarm method, device, server and readable storage medium |
| CN110096410A (en) * | 2019-03-15 | 2019-08-06 | 中国平安人寿保险股份有限公司 | Alarm information processing method, system, computer installation and readable storage medium storing program for executing |
| CN110232010A (en) * | 2019-06-18 | 2019-09-13 | 深圳前海微众银行股份有限公司 | A kind of alarm method, alarm server and monitoring server |
| DE102020208287A1 (en) * | 2020-07-02 | 2022-01-05 | Robert Bosch Gesellschaft mit beschränkter Haftung | Method and device for warning a driver of a motor vehicle |
| CN112115027A (en) * | 2020-09-18 | 2020-12-22 | 平安科技（深圳）有限公司 | Information prompting method and device, storage medium and computer equipment |
| WO2022062185A1 (en) * | 2020-09-25 | 2022-03-31 | 同程网络科技股份有限公司 | Warning information pushing method and system, intelligent terminal, and storage medium |
| CN114338350A (en) * | 2021-12-30 | 2022-04-12 | 北京汇通天下物联科技有限公司 | Alarm method, alarm device, electronic equipment and computer storage medium |
| CN115022360A (en) * | 2022-05-24 | 2022-09-06 | 新奥数能科技有限公司 | Method, system, device and storage medium for alarm management by attendance |
| CN115051906A (en) * | 2022-05-31 | 2022-09-13 | 上海东普信息科技有限公司 | Alarm control method, device, equipment and storage medium of monitoring platform |
| CN114978867A (en) * | 2022-06-15 | 2022-08-30 | 中国电信股份有限公司 | Alarm notification method, device, equipment and storage medium |
Non-Patent Citations (1)
| Title |
|---|
| 黄鑫;莫勇;: "营销管理***进程监控及告警工具的设计与实现", 广西电力, no. 04, 28 August 2016 (2016-08-28) * |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112351035B (en) | Industrial control security situation sensing method, device and medium | |
| CN111342988B (en) | Situation awareness-based network security early warning method and device | |
| CN114443429B (en) | Alarm event processing method and device and computer readable storage medium | |
| CN110955586A (en) | System fault prediction method, device and equipment based on log | |
| AU2021218159B2 (en) | Utilizing machine learning models to determine customer care actions for telecommunications network providers | |
| US10705940B2 (en) | System operational analytics using normalized likelihood scores | |
| CN112532435B (en) | Operation and maintenance method, operation and maintenance management platform, equipment and medium | |
| CN108880845A (en) | A kind of method and relevant apparatus of information alert | |
| CN112989332A (en) | Abnormal user behavior detection method and device | |
| CN113935696B (en) | Consignment behavior abnormity analysis method and system, electronic equipment and storage medium | |
| CN110149303B (en) | Party-school network security early warning method and early warning system | |
| CN114860525A (en) | Hard disk fault detection method, device, equipment and storage medium | |
| US10110440B2 (en) | Detecting network conditions based on derivatives of event trending | |
| CN115913888A (en) | Server alarm system control method, device and medium | |
| CN113760634A (en) | Data processing method and device | |
| CN115686756A (en) | Virtual machine migration method and device, storage medium and electronic equipment | |
| CN115913652A (en) | Abnormal access behavior detection method and device, electronic equipment and readable storage medium | |
| CN114650218B (en) | Data acquisition method, device, system and storage medium | |
| CN115277472A (en) | Network security risk early warning system and method for multidimensional industrial control system | |
| CN115396142A (en) | Information access method and device based on zero trust, computer equipment and medium | |
| CN115981950A (en) | Monitoring alarm method, device, equipment and computer readable storage medium | |
| CN115603944A (en) | Vehicle data safety management method based on Internet of vehicles | |
| CN115130112A (en) | Quick start-stop method, device, equipment and storage medium | |
| CN111211938B (en) | Biological information software monitoring system and method | |
| CN113852984A (en) | Wireless terminal access monitoring system and method, electronic equipment and readable storage device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |