[go: up one dir, main page]

CN107832200A - Alert processing method, device, computer equipment and storage medium - Google Patents

Alert processing method, device, computer equipment and storage medium Download PDF

Info

Publication number
CN107832200A
CN107832200A CN201711001755.3A CN201711001755A CN107832200A CN 107832200 A CN107832200 A CN 107832200A CN 201711001755 A CN201711001755 A CN 201711001755A CN 107832200 A CN107832200 A CN 107832200A
Authority
CN
China
Prior art keywords
alarm
default
event
alarm event
data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201711001755.3A
Other languages
Chinese (zh)
Inventor
高泗俊
李渊
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Ping An Technology Shenzhen Co Ltd
Original Assignee
Ping An Technology Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ping An Technology Shenzhen Co Ltd filed Critical Ping An Technology Shenzhen Co Ltd
Priority to CN201711001755.3A priority Critical patent/CN107832200A/en
Priority to PCT/CN2017/113234 priority patent/WO2019080249A1/en
Publication of CN107832200A publication Critical patent/CN107832200A/en
Pending legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/32Monitoring with visual or acoustical indication of the functioning of the machine
    • G06F11/324Display of status information
    • G06F11/327Alarm or error message display
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06NCOMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS
    • G06N20/00Machine learning
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00Administration; Management
    • G06Q10/20Administration of product repair or maintenance

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Business, Economics & Management (AREA)
  • Software Systems (AREA)
  • Quality & Reliability (AREA)
  • General Engineering & Computer Science (AREA)
  • Human Resources & Organizations (AREA)
  • Computing Systems (AREA)
  • Economics (AREA)
  • Evolutionary Computation (AREA)
  • Data Mining & Analysis (AREA)
  • Mathematical Physics (AREA)
  • Computer Vision & Pattern Recognition (AREA)
  • Artificial Intelligence (AREA)
  • Medical Informatics (AREA)
  • Entrepreneurship & Innovation (AREA)
  • Marketing (AREA)
  • Operations Research (AREA)
  • Strategic Management (AREA)
  • Tourism & Hospitality (AREA)
  • General Business, Economics & Management (AREA)
  • Alarm Systems (AREA)

Abstract

The embodiment of the present application discloses a kind of alert processing method, device, computer equipment and storage medium.Wherein this method includes:Obtain the monitoring data of monitored object;Alarm data in the monitoring data is determined according to default alarm regulation, wherein monitoring data of the alarm data for the triggering default alarm regulation;Alarm event is generated according to the alarm data, and the alarm event is recorded in presetting message queue;According to the alarm event in presetting message queue described in default acquisition Rule;Default processing is carried out to the alarm event based on the regular and default knowledge base of machine learning;And it will be sent by the alarm event treated of presetting to user terminal.The alert processing method can not only eliminate alarm storm, while can also improve alarm accuracy rate, and then reduce invalid alarm.

Description

Alert processing method, device, computer equipment and storage medium
Technical field
The application is related to communication technical field, more particularly to a kind of alert processing method, device, computer equipment and storage Medium.
Background technology
At present, there is the monitoring system much increased income, such as Zabbix monitoring systems and Open-falcon monitoring in the market System.These monitoring systems include " alerting " center ", the alarm center is used to alarm event showing operation maintenance personnel to carry Show that operation maintenance personnel is correspondingly handled.But the displaying of alarm event is simply simply realized at existing alarm center mostly, This processing mode can cause to produce substantial amounts of invalid alarm, so as to extend failure recovery time, be unfavorable for operation maintenance personnel Timely processing, cause more losses.
The content of the invention
This application provides a kind of alert processing method, device, computer equipment and storage medium, it is possible to reduce invalid report Alert and reduction rate of false alarm.
In a first aspect, this application provides a kind of alert processing method, applied to monitoring system, it includes:
Obtain the monitoring data of monitored object;
Alarm data in the monitoring data is determined according to default alarm regulation, wherein the alarm data is triggering institute State the monitoring data of default alarm regulation;
Alarm event is generated according to the alarm data, and the alarm event is recorded in presetting message queue;
According to the alarm event in presetting message queue described in default acquisition Rule;
The alarm event obtained from the presetting message queue is carried out based on the regular and default knowledge base of machine learning Default processing;And
It will be sent by the alarm event treated of presetting to user terminal.
Second aspect, this application provides a kind of alarm treatment device, and it includes:
Data capture unit, for obtaining the monitoring data of monitored object;
Data determination unit, for determining the alarm data in the monitoring data, wherein institute according to default alarm regulation Alarm data is stated to trigger the monitoring data of the default alarm regulation;
Event generates recording unit, for generating alarm event according to the alarm data, and the alarm event is remembered Record is in presetting message queue;
Event acquiring unit, for according to the alarm event in presetting message queue described in default acquisition Rule;
Default processing unit, for carrying out default place to the alarm event based on the regular and default knowledge base of machine learning Reason;And
Event transmitting element, for will be sent by the alarm event treated of presetting to user terminal.
The third aspect, the application provide a kind of computer equipment again, including memory, processor and are stored in described deposit On reservoir and the computer program that can run on the processor, it is characterised in that during the computing device described program Realize the alert processing method described in any one that the application provides.
Fourth aspect, present invention also provides a kind of storage medium, wherein the storage medium is stored with computer program, The computer program includes programmed instruction, and described program instruction makes described computing device the application when being executed by a processor Alert processing method described in any one of offer.
The application provides a kind of alert processing method, device, computer equipment and storage medium.Wherein this method passes through root The alarm data in the monitoring data of monitored object is determined according to default alarm regulation;Alarm data is being generated into alarm event and protected After presetting message queue being present, according to the alarm event in presetting message queue described in default acquisition Rule, and it will obtain To alarm event default processing is carried out based on the regular and default knowledge base of machine learning, and will be treated alarm event hair User terminal is delivered to show operation management personnel.The alert processing method can not only eliminate alarm storm, while may be used also To improve accuracy rate of alarming, and then reduce invalid alarm.
Brief description of the drawings
It is required in being described below to embodiment to use in order to illustrate more clearly of the embodiment of the present application technical scheme Accompanying drawing is briefly described, it should be apparent that, drawings in the following description are some embodiments of the present application, general for this area For logical technical staff, on the premise of not paying creative work, other accompanying drawings can also be obtained according to these accompanying drawings.
Fig. 1 is a kind of schematic flow diagram for alert processing method that the embodiment of the application one provides;
Fig. 2 is a kind of schematic flow diagram for alert processing method that another embodiment of the application provides;
Fig. 3 is the sub-step schematic flow diagram of step S205 in Fig. 2;
Fig. 4 is a kind of schematic block diagram for alarm treatment device that the embodiment of the application one provides;
Fig. 5 is a kind of schematic block diagram for alarm treatment device that another embodiment of the application provides;
Fig. 6 is an a kind of schematic block diagram of computer equipment that the embodiment of the application one provides.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the present application, the technical scheme in the embodiment of the present application is carried out clear, complete Site preparation describes, it is clear that described embodiment is some embodiments of the present application, rather than whole embodiments.Based on this Shen Please in embodiment, the every other implementation that those of ordinary skill in the art are obtained under the premise of creative work is not made Example, belong to the scope of the application protection.
It should be appreciated that ought be in this specification and in the appended claims in use, term " comprising " and "comprising" instruction Described feature, entirety, step, operation, the presence of element and/or component, but it is not precluded from one or more of the other feature, whole Body, step, operation, element, component and/or its presence or addition for gathering.
It is also understood that the term used in this present specification is merely for the sake of the mesh for describing specific embodiment And be not intended to limit the application.As used in present specification and appended claims, unless on Other situations are hereafter clearly indicated, otherwise " one " of singulative, "one" and "the" are intended to include plural form.
It will be further appreciated that the term "and/or" used in present specification and appended claims is Refer to any combinations of one or more of the associated item listed and be possible to combine, and including these combinations.
Referring to Fig. 1, Fig. 1 is a kind of schematic flow diagram for alert processing method that the embodiment of the application one provides.The announcement Alert processing method is applied in monitoring system, and monitoring system may operate in server, and wherein the server can be independent Server or multiple server groups into server cluster.As shown in figure 1, the alert processing method includes step S101~S106.
S101, the monitoring data for obtaining monitored object.
In the present embodiment, monitored object includes main frame, container, the network equipment and middleware etc., and the middleware is such as For weblogic, tomcat, kafka or zookeeper components etc..The monitoring data of monitored object includes the use of monitored object The information such as state, such as monitored object are main frame, and accordingly monitoring data includes CPU usage, the memory usage of main frame, The information such as disk utilization rate and network traffics.
The default alarm regulation of S102, basis determines the alarm data in the monitoring data, wherein the alarm data is Trigger the monitoring data of the default alarm regulation.
In the present embodiment, default alarm regulation is the alarm regulation pre-set, at the beginning of the alarm center of monitoring system A set of general alarm regulation is automatically configured during beginningization as default alarm regulation, can be with if user has the demand of personalization It is self-defined or change the default alarm regulation.
Specifically, the default alarm regulation uses preset threshold range decision method, by judging in the monitoring data Numerical value whether in preset threshold range;If the numerical value in the monitoring data is sentenced in the preset threshold range It is set to and does not trigger the default alarm regulation;If the numerical value in the monitoring data not in the preset threshold range, It is judged to triggering the default alarm regulation.It is to alert number wherein to trigger monitoring data corresponding to the default alarm regulation According to.
Such as the CPU usage in monitoring data, if numerical value corresponding to the utilization rate has exceeded the default alarm rule The then preset threshold range of corresponding CPU usage, then it is alarm data to judge the CPU usage.
S103, alarm event generated according to the alarm data, and the alarm event is recorded in presetting message queue.
In the present embodiment, alarm event is generated according to the alarm data, including:According to predeterminable event form by described in Alarm data generates alarm event.The predeterminable event form can carry out specification to alarm event, facilitate follow-up dissection process.
Specifically, can be with the predefined predeterminable event form, subsequently to parse corresponding field in alarm event Value, therefrom obtains desired information, and alarm is have subscribed being pushed to each according to the alarm event of predeterminable event form generation After the custom system of event, the alarm event form that custom system needs to define for alarm center is parsed, and is accused with obtaining Relevant information in alert event.So design can reduce the complexity of alarm hub-interface design.
In one embodiment, the predeterminable event form, such as using default JSON forms, it is specific as follows:
{Detail:[P3#1/1]net_monitor_1cpu.used.percentall(#3)100>=30, Entity: net_monitor_1,Status:1,Url:abc.com,Group:App_type=APP, app_name=NET-MONITOR >}。
In above-mentioned JSON formulas, P3 represents alert priority in [P3#1/1], and #1/1 represents that current alarm number/maximum is accused Alert number;net_monitor_1cpu.used.percentall(#3)100>Net_monitor_1 represents monitoring pair in=30 As corresponding systematic name, specially CPU utilization rate;Entity:It is physical network that net_monitor_1, which is represented,;Status: 1 represents the state of alarm event;Url:Abc.com represents the URL addresses of monitored object;Group:App_type=APP is represented Monitored object classification;App_name=NET-MONITOR represents the small classification of monitored object.
Wherein, after the alarm data is generated into alarm event according to predeterminable event form, also need the alarm event Send and preserve into presetting message queue, the presetting message queue is stored in presetting database, the presetting message queue Using alarm windstorm can be eliminated.
S104, according to the alarm event described in default acquisition Rule in presetting message queue.
In the present embodiment, because presetting message queue includes multiple alarm events, therefore rule is obtained according to default The alarm event in the presetting message queue is obtained, for example alarm event may also include precedence information or the serious journey of alarm Degree information etc., accordingly, the default rule that obtains can be for according to the order acquisition institute of priority level or the alarm order of severity State the alarm event in presetting message queue, thus can in reasonable and orderly manner to the alarm event in presetting message queue at Reason, first solves the problems, such as important alarm, thus improves alarming processing efficiency indirectly.
In one embodiment, the alarm event according in presetting message queue described in default acquisition Rule, bag Include:The alarm event of predetermined number in the presetting message queue is obtained according to preset order.Specifically, the preset order can be with For alarm event priority level order, or the generation time of alarm event corresponds to time sequencing, according to this preset it is suitable Sequence obtains a number of alarm event every time.Therefore, the predetermined number can ensure by batch in presetting message queue Alarm event handled, and then avoid alarm storm generation.
S105, based on the regular and default knowledge base of machine learning to the alarm event that is obtained from the presetting message queue Carry out default processing.
In the present embodiment, the regular and default knowledge base of machine learning that is based on from the presetting message queue to obtaining The alarm event taken carries out default processing, specifically includes:Based on the regular and default knowledge base of machine learning to disappearing from described preset The alarm event obtained in breath queue is carried out at default alert analysis processing, default alarm convergence process or default Alert aggregation Reason.
Wherein, rule obtained from machine learning rule mainly carries out learning training using algorithm to substantial amounts of alarm event Then model, then the rule model is applied to the existing alarm event of analyzing and processing, the algorithm is specially machine learning algorithm, than As being the secondary smoothing algorithm based on exponential smoothing, three times smoothing algorithm, the Fourier decomposition algorithm based on decomposition, wavelet decomposition Algorithm etc., or the feedforward neural network based on deep learning, Recognition with Recurrent Neural Network RNN algorithms etc., these machine learning algorithms With regard to needing to be trained by historical data on substantial amounts of line (history alarm event), to draw relatively accurate alarm plan Slightly, the warning strategies are that rule model is used to analyze and process current alarm event.Further, it is also possible to polyalgorithm enters simultaneously Row training, for different scenes, the effect of each algorithm can be different, at this moment according to being contrasted with historical results, adjust The weight of each algorithm, finally draws a common warning strategies.
Default knowledge base is used to store alarm event, alarm event processing result information and analysis result information etc., with side Help the analyzing and processing alarm event.
Specifically, analysis method corresponding to presetting alert analysis processing includes:Method based on historical data statistics, it is assumed that The method of normal distribution, 3-sigma strategies etc., one can be calculated automatically reasonably by the statistical method of these standards Alarm threshold value, when performance indications exceed or during less than this alarm threshold value, alarm will be triggered.Simultaneously by these rational announcements Alert threshold values is arranged to the preset threshold range in the default alarm regulation, and a closed-loop control is formed with this, is accused so as to improve Alert accuracy rate.
Specifically, alarm convergence process is preset, is specifically included:Alarm event is merged according to preset time window, such as, will Caused alarm event is merged into one and sent within certain time;Or merge corresponding alarm according to identical monitoring strategies Event, such as, there is a plurality of alarm event of the cpu utilization rates more than 90% to be merged into an alarm event;Or according to identical Alarm object merges corresponding alarm event, such as the alarm that host A is sent in some time window, cpu, internal memory or Disk etc. alert, a host A can be merged into corresponding to alarm event send.
Specifically, presetting Alert aggregation processing includes:Association mining processing and abnormal dependence processing.Association mining processing Consolidation strategy referred to by excavating associating between alarm event and alarm event, the association between multiple timings, by multiple alarms Event is merged into an alarm event and sent.Abnormal dependence processing refers to some abnormal generation and another exception have according to The relation of relying, such as disk failure may result in main frame and delay machine, if receiving the alarm thing of disk failure and main frame lost contact simultaneously Part, then this two alarm events can be converged to by an alarm event by the abnormal dependence.
It should be noted that default knowledge base and presetting message queue are maintained in identical database, convenient alarm In case these alarm events are carried out with default processing in event loading of databases;Wherein history announcement is preserved in the default knowledge base Alert event and its relevant information.
S106, it will be sent by the alarm event treated of presetting to user terminal.
In the present embodiment, user terminal includes terminal etc. corresponding to terminal corresponding to system manager or custom system, The system manager is the administrative staff for being responsible for monitoring system.Wherein different transmissions can also be used for different user terminals Mode.Specifically, the keeper of system can be notified with modes such as mail, short message, phones for system manager;And for using Family system, alarm event can be pushed to user oneself system carry out next step processing, than if any user can develop The tool platform of oneself, it is further to alarm event to be handled, made a decision with reference to service logic, for user's need as satisfaction Ask, custom system can subscribe to the alarm of monitoring system., can basis when the alarm center of monitoring system has new alarm to produce The corresponding theme that custom system is subscribed to, orientation push is realized, therefore improve the experience of user.
Above-described embodiment alert processing method according to default alarm regulation by determining in the monitoring data of monitored object Alarm data;After alarm data is generated into alarm event and is stored in presetting message queue, according to default acquisition Rule Alarm event in the presetting message queue, and the alarm event got is based on the regular and default knowledge base of machine learning Default processing is carried out, and treated alarm event is sent to user terminal to show operation management personnel.The alarm Processing method can not only eliminate alarm storm, while can also improve alarm accuracy rate, and then reduce invalid alarm.
Referring to Fig. 2, Fig. 2 is a kind of schematic flow diagram for alert processing method that another embodiment of the application provides.Should Alert processing method is applied in monitoring system, and monitoring system may operate in server, and wherein the server can be independent Server or multiple server groups into server cluster.As shown in Fig. 2 the alert processing method includes step S201~S208.
S201, the monitoring data for obtaining monitored object.
Wherein, monitored object is except including main frame, container, the network equipment and middleware etc., in addition to monitored object sheet Body.
In the present embodiment, the monitoring data of monitored object is obtained, in addition to:Obtain the monitoring data of monitoring system.
The default alarm regulation of S202, basis determines the alarm data in the monitoring data, wherein the alarm data is Trigger the monitoring data of the default alarm regulation.
Wherein, default alarm regulation is the alarm regulation pre-set, specifically uses preset threshold range decision method, Other similar decision methods can be used, are not limited herein.
S203, alarm event generated according to the alarm data, and the alarm event is recorded in presetting message queue.
In the present embodiment, the alarm data is also generated into alarm event by the way of according to predeterminable event form, And generation alarm event is stored in presetting message queue.
Wherein, the presetting message queue is used to store multiple alarm events, can effectively prevent server from needing while produce Raw multiple alarm events, and then produce alarm windstorm.
S204, according to the alarm event described in default acquisition Rule in presetting message queue.
Specifically, the alarm event of predetermined number in the presetting message queue is obtained according to preset order.Specifically, should Preset order can be the priority level order of alarm event, or the generation time of alarm event corresponds to time sequencing, A number of alarm event is obtained every time according to the preset order.Therefore, the predetermined number can ensure by batch to pre- If the alarm event in message queue is handled, and then avoids the generation of alarm storm.
S205, based on the regular and default knowledge base of machine learning to the alarm event that is obtained from the presetting message queue Carry out default processing.
Wherein, the alarm event corresponding to monitoring system or presetting using above-described embodiment for monitored object it are not Processing method, it is not described in detail herein.
In the present embodiment, it is monitoring system corresponding alarm event in itself for monitored object, will uses as in Fig. 3 Method and step, it is specific such as step S205a and S205b.
S205a, monitoring alarm event is filtered out from the alarm event, wherein the monitoring alarm event is the prison The alarm event of control system.
Because the alarm event not only includes the alarm event of monitoring system, in addition to main frame, container or middleware Alarm event, it is therefore desirable to monitoring alarm event is filtered out from the alarm event, the monitoring alarm event is the monitoring The alarm event of system.
Specifically, can be by obtaining the identification information of monitored object;By the monitoring data of the monitored object and the mark Knowing information is associated.Therefore alarm data is also corresponding with identification information, can be sieved by the identification information from the alarm event Select monitoring alarm event.
S205b, the monitoring alarm event sent to self-healing system to cause the self-healing system to handle the monitoring Failure corresponding to alarm event.
Wherein, the self-healing system and monitoring system be may be mounted in different servers, and communication is established between server Connect to complete the interaction of data.The self-healing system is used for failure corresponding to monitoring alarm event described in automatic business processing, such as Extension capacity, the service of restarting or limitation flow etc..
S206, it will be sent by the alarm event treated of presetting to user terminal.
Wherein, will be sent by the alarm event treated of presetting to user terminal, so that user is to the alarm thing Part does corresponding processing, eliminates the alarm event in time.
S207, the feedback information that the user terminal is sent is received, wherein the feedback information is the user terminal pair The processing result information that preset mark processing generation is done by the default treated alarm event.
In the present embodiment, preset mark processing includes:Marked invalid alarm event, is not processed, and feeds back to clothes The alarm center of business device;Or the effective reporting events police of mark, carry out event handling.User terminal may have automation event handling System.User terminal receives start to process after event, and last result is notified well to the alarm center of server, tool Body can be sent by way of API readjustments.
S208, the processing result information preserved to the default knowledge base.
In the present embodiment, server will preserve the processing result information to the default knowledge base, will alert thing Part and corresponding processing result information are analyzed and processed to current alarm event, are consequently formed as history alarm event One closed loop mechanism, can allow whole processing procedure constantly improve, which thereby enhance the accuracy rate of alarm.
The alert processing method that above-described embodiment provides can not only eliminate alarm storm, while can also be to monitoring system The alarm of itself corresponds to failure and carried out self-healing treatment, and ensures the normal operation of monitoring system, can also receive user terminal transmission Feedback information, and the processing result information on alarm event in the feedback information is stored in the presetting database, with Just the alarm event of next time is analyzed and processed, thus form an analysis closed loop control mechanism, pass through the closed-loop control machine The alert analysis disposal ability of the constantly improve monitoring system processed, and then improve alarm accuracy rate.
The embodiment of the present application also provides a kind of alarm treatment device, and the device is used to perform foregoing alert processing method. Specifically, referring to Fig. 4, Fig. 4 is a kind of schematic block diagram for alarm treatment device that the embodiment of the present application provides.At the alarm Reason device 300 can be installed in server.
As shown in figure 4, the alarm treatment device 300 includes data capture unit 301, data determination unit 302, generation note Record unit 303, event acquiring unit 304, default processing unit 305 and event transmitting element 306.
Data capture unit 301, for obtaining the monitoring data of monitored object.
Wherein, monitored object includes main frame, container, the network equipment and middleware etc., and the middleware is such as Weblogic, tomcat, kafka or zookeeper component etc..The monitoring data of monitored object uses shape including monitored object The information such as state, such as monitored object are main frame, and accordingly monitoring data includes CPU usage, the memory usage of main frame, magnetic The information such as disk utilization rate and network traffics.
Data determination unit 302, for determining the alarm data in the monitoring data according to default alarm regulation, wherein The alarm data is the monitoring data for triggering the default alarm regulation.
Wherein, default alarm regulation is the alarm regulation pre-set, at the alarm center of monitoring system during initialization certainly The dynamic a set of general alarm regulation of configuration is as default alarm regulation, if user has the demand of personalization, can with self-defined or Change the default alarm regulation.
Specifically, the default alarm regulation uses preset threshold range decision method, by judging in the monitoring data Numerical value whether in preset threshold range;If the numerical value in the monitoring data is sentenced in the preset threshold range It is set to and does not trigger the default alarm regulation;If the numerical value in the monitoring data not in the preset threshold range, It is judged to triggering the default alarm regulation.It is to alert number wherein to trigger monitoring data corresponding to the default alarm regulation According to.
Recording unit 303 is generated, for generating alarm event according to the alarm data, and the alarm event is recorded In presetting message queue.
Wherein, alarm event is generated according to the alarm data, including:According to predeterminable event form by the alarm data Generate alarm event.The predeterminable event form can carry out specification to alarm event, facilitate follow-up dissection process.
Wherein, after the alarm data is generated into alarm event according to predeterminable event form, also need the alarm event Send and preserve into presetting message queue, the presetting message queue is stored in presetting database, the presetting message queue Using alarm windstorm can be eliminated.
Event acquiring unit 304, for according to the alarm event in presetting message queue described in default acquisition Rule.
Wherein, because presetting message queue includes multiple alarm events, therefore according to described in default acquisition Rule Alarm event in presetting message queue, such as alarm event may also include precedence information or alarm order of severity information Deng, accordingly, this is default obtain rule can be according to priority level or alert the order of severity order obtain it is described default Alarm event in message queue, therefore the alarm event in presetting message queue can be handled in reasonable and orderly manner, first Solve the problems, such as important alarm, thus improve alarming processing efficiency indirectly.
In one embodiment, event acquiring unit 304, is specifically used for:The presetting message team is obtained according to preset order The alarm event of predetermined number in row.Specifically, i.e., a number of alarm event is obtained every time.Therefore, the predetermined number can To ensure by batch to handle the alarm event in presetting message queue, and then avoid the generation of alarm storm.
Default processing unit 305, for based on the regular and default knowledge base of machine learning to from the presetting message queue The alarm event of middle acquisition carries out default processing.
Wherein, it is specifically used for:Based on the regular and default knowledge base of machine learning to being obtained from the presetting message queue Alarm event carry out default alert analysis processing, default alarm convergence process or the processing of default Alert aggregation.Based on this, this is pre- If processing unit 305 may include alert analysis subelement 3051, alarm convergence subelement 3052 and Alert aggregation subelement 3053.
Specifically, alert analysis subelement 3051, is used for:Method based on historical data statistics, it is assumed that normal distribution Method, 3-sigma strategies etc., a rational alarm threshold value can be calculated automatically by the statistical method of these standards, When performance indications exceed or during less than this alarm threshold value, triggering alarm.These rational alarm threshold values are arranged to simultaneously Preset threshold range in the default alarm regulation, a closed-loop control is formed with this, so as to improve the accuracy rate of alarm.
Specifically, alarm convergence subelement 3052, is specifically used for:Alarm event is merged according to preset time window;Or Merge corresponding alarm event according to identical monitoring strategies;Or corresponding alarm is merged according to identical alarm object Event.For example caused alarm event it will be merged into one within certain time and send;For example there are a plurality of cpu utilization rates to exceed 90% alarm event is merged into an alarm event;The alarm that host A is sent in some time window for another example, cpu, internal memory Or disk etc. alarm, a host A can be merged into corresponding to alarm event send.
Specifically, Alert aggregation subelement 3053, is specifically used for:Association mining processing and abnormal dependence processing.Association is dug The consolidation strategy of pick processing refers to that by excavating associating between alarm event and alarm event the association between multiple timings will Multiple alarm events are merged into an alarm event and sent.Abnormal dependence processing refers to some abnormal generation and another Exception has a dependence, for example disk failure may result in main frame and delay machine, if receiving disk failure and main frame lost contact simultaneously Alarm event, then this two alarm events can be converged to by an alarm event by the abnormal dependence.
Event transmitting element 306, for will be sent by the alarm event treated of presetting to user terminal.
Wherein, user terminal includes terminal etc. corresponding to system manager or custom system, for different user terminals Different sending methods can also be used.Specifically, can be notified for system manager with modes such as mail, short message, phones be The keeper of system;And be directed to custom system, alarm event can be pushed to custom system carry out next step processing, than if any User can develop the tool platform of oneself, it is further to alarm event to be handled, made a decision with reference to service logic, for meet Such user's request, custom system can subscribe to the alarm of monitoring system.When there is new alarm at the alarm center of monitoring system During generation, orientation push can be realized, therefore also improve the experience of user according to the corresponding theme of custom system subscription.
The embodiment of the present application also provides another alarm treatment device, and the device is used to perform foregoing alarming processing side Method.Specifically, referring to Fig. 5, Fig. 5 is a kind of schematic block diagram for alarm treatment device that the embodiment of the present application provides.The announcement Alert processing unit 400 can be installed in server.
As shown in figure 5, the alarm treatment device 400 includes data capture unit 401, data determination unit 402, generation note Record unit 403, event acquiring unit 404, default processing unit 405, event transmitting element 406, information receiving unit 407 and letter Cease storage unit 408.
Data capture unit 401, for obtaining the monitoring data of monitored object.
Wherein, monitored object is except including main frame, container, the network equipment and middleware etc., in addition to monitored object sheet Body.In the present embodiment, the monitoring data of monitored object is obtained, in addition to:Obtain the monitoring data of monitoring system.
Data determination unit 402, for determining the alarm data in the monitoring data according to default alarm regulation, wherein The alarm data is the monitoring data for triggering the default alarm regulation.
Wherein, default alarm regulation is the alarm regulation pre-set, specifically uses preset threshold range decision method, Other similar decision methods can be used, are not limited herein.
Recording unit 403 is generated, for generating alarm event according to the alarm data, and the alarm event is recorded In presetting message queue.
Wherein, the alarm data is also generated into alarm event by the way of according to predeterminable event form, and will be raw Presetting message queue is stored in into alarm event.The presetting message queue is used to store multiple alarm events, can effectively prevent Server needs to produce multiple alarm events simultaneously, and then produces alarm windstorm.
Event acquiring unit 404, for according to the alarm event in presetting message queue described in default acquisition Rule.
It is specifically used for:The alarm event of predetermined number in the presetting message queue is obtained according to preset order.Specifically, Every time a number of alarm event is obtained according to preset order.Therefore, the predetermined number can ensure by batch to default Alarm event in message queue is handled, and then avoids the generation of alarm storm.
Default processing unit 405, it is pre- for being carried out based on the regular and default knowledge base of machine learning to the alarm event If processing.
Wherein, for monitored object be not alarm event corresponding to monitoring system and monitored object be monitoring system in itself Corresponding alarm event, it is therefore desirable to different default processing modes, based on this, preset processing unit 405 and sieved including event Select subelement 4051 and send self-healing subelement 4052.
Event screens subelement 4051, for filtering out monitoring alarm event from the alarm event, wherein the prison Control the alarm event that alarm event is the monitoring system.
Because the alarm event not only includes the alarm event of monitoring system, in addition to main frame, container or middleware Alarm event, it is therefore desirable to monitoring alarm event is filtered out from the alarm event, the monitoring alarm event is the monitoring The alarm event of system.
Specifically, can be by obtaining the identification information of monitored object;By the monitoring data of the monitored object and the mark Knowing information is associated.Therefore alarm data is also corresponding with identification information, can be sieved by the identification information from the alarm event Select monitoring alarm event.
Self-healing subelement 4052 is sent, for the monitoring alarm event to be sent to self-healing system to cause the self-healing Failure corresponding to the system processing monitoring alarm event.
Wherein, the self-healing system and monitoring system be may be mounted in different servers, and communication is established between server Connect to complete the interaction of data.The self-healing system is used for failure corresponding to monitoring alarm event described in automatic business processing, such as Extension capacity, the service of restarting or limitation flow etc..
Event transmitting element 406, for will be sent by the alarm event treated of presetting to user terminal.
Wherein, will be sent by the alarm event treated of presetting to user terminal, so that user is to the alarm thing Part does corresponding processing, eliminates the alarm event in time.
Information receiving unit 407, the feedback information sent for receiving the user terminal, wherein the feedback information is The user terminal is to described by the result letter preset treated alarm event and do preset mark processing generation Breath.
Wherein, preset mark processing includes:Marked invalid alarm event, is not processed, and feeds back to the announcement of server Alert center;Or the effective reporting events police of mark, carry out event handling.User terminal may have automation event handling system.With Family terminal receives start to process after event, and last result is notified well to the alarm center of server, specifically can be with Sent by way of API readjustments.
Information holding unit 408, the processing result information preserved to the default knowledge base.
Wherein, server will preserve the processing result information to the default knowledge base, by alarm event and correspondingly Processing result information as history alarm event, current alarm event is analyzed and processed, is consequently formed a closed loop Mechanism, can allow whole processing procedure constantly improve, which thereby enhance the accuracy rate of alarm.
Said apparatus can be implemented as a kind of form of computer program, and the computer program can be as shown in Figure 6 Run on computer equipment.
Referring to Fig. 6, Fig. 6 is a kind of schematic block diagram for computer equipment that the embodiment of the present application provides.The computer The equipment of equipment 700 can be terminal.The terminal can be smart mobile phone, tablet personal computer, notebook computer, desktop computer, individual Digital assistants and Wearable etc. have the electronic equipment of communication function.
Reference picture 6, the computer equipment 700 include processor 720, the network interface 750 connected by system bus 710 And memory, wherein, memory can include non-volatile memory medium 730 and built-in storage 740.
The non-volatile memory medium 730 can storage program area 731 and computer program 732.The computer program 732 When being performed, it may be such that processor 720 performs a kind of alert processing method.
The processor 720 is used to provide calculating and control ability, supports the operation of whole computer equipment 700.
Computer program can be stored in the built-in storage 740, when the computer program is performed by processor 720, can be made Obtain processor 720 and perform a kind of alert processing method.
The network interface 750 is used to carry out network service, such as sends the task dispatching of distribution.Those skilled in the art can manage Solve, the block diagram of the structure, the only part-structure related to application scheme that are shown in Fig. 6, do not form to the application side The restriction for the computer equipment 700 that case is applied thereon, specific computer equipment 700 can include more more than shown in figure Or less part, either combine some parts or arranged with different parts.
Wherein, the processor 720 is used to run the program code of storage in memory, to implement function such as:
Obtain the monitoring data of monitored object;Alarm data in the monitoring data is determined according to default alarm regulation, Wherein described alarm data is the monitoring data for triggering the default alarm regulation;Alarm thing is generated according to the alarm data Part, and the alarm event is recorded in presetting message queue;According in presetting message queue described in default acquisition Rule Alarm event;The alarm event obtained from the presetting message queue is entered based on the regular and default knowledge base of machine learning The default processing of row;And it will be sent by the alarm event treated of presetting to user terminal.
In one embodiment, processor 720 perform it is described will by it is described preset treated alarm event send to After user terminal, following program is also performed:The feedback information that the user terminal is sent is received, wherein the feedback information is The user terminal is to described by the result letter preset treated alarm event and do preset mark processing generation Breath;And the processing result information is preserved to the default knowledge base.
In one embodiment, processor 720 upon execution, specifically performs following program:Screened from the alarm event Go out monitoring alarm event, wherein the monitoring alarm event is the alarm event of the monitoring system;By the monitoring alarm thing Part is sent to self-healing system to cause the self-healing system to handle failure corresponding to the monitoring alarm event.
In one embodiment, processor 720 upon execution, specifically performs following program:According to predeterminable event form by institute State alarm data generation alarm event.
In one embodiment, processor 720 upon execution, specifically performs following program:Based on machine learning rule and in advance If knowledge base carries out default alert analysis processing, default alarm convergence to the alarm event obtained from the presetting message queue Processing or the processing of default Alert aggregation.
In one embodiment, processor 720 upon execution, specifically performs following program:Described in obtaining according to preset order The alarm event of predetermined number in presetting message queue.
It should be appreciated that in the embodiment of the present application, processor 720 can be CPU (Central Processing Unit, CPU), the processor 720 can also be other general processors, digital signal processor (Digital Signal Processor, DSP), application specific integrated circuit (Application Specific Integrated Circuit, ASIC), ready-made programmable gate array (Field-Programmable Gate Array, FPGA) or other FPGAs Device, discrete gate or transistor logic, discrete hardware components etc..Wherein, general processor can be microprocessor or Person's processor can also be any conventional processor etc..
It will be understood by those skilled in the art that the structure of computer equipment 700 shown in Fig. 6 does not form and computer is set Standby 700 restriction, it can include than illustrating more or less parts, either combine some parts or different part cloth Put.
A kind of storage medium is provided in another embodiment of the application, the storage medium includes computer-readable storage medium Matter, the computer-readable recording medium storage have computer program, and wherein computer program includes programmed instruction.The programmed instruction Realized when being executed by processor:
Obtain the monitoring data of monitored object;Alarm data in the monitoring data is determined according to default alarm regulation, Wherein described alarm data is the monitoring data for triggering the default alarm regulation;Alarm thing is generated according to the alarm data Part, and the alarm event is recorded in presetting message queue;According in presetting message queue described in default acquisition Rule Alarm event;The alarm event obtained from the presetting message queue is entered based on the regular and default knowledge base of machine learning The default processing of row;And it will be sent by the alarm event treated of presetting to user terminal.
In one embodiment, the programmed instruction is executed by processor described will preset treated alarm event by described Send to user terminal, also realize:The feedback information that the user terminal is sent is received, wherein the feedback information is institute User terminal is stated to described by the processing result information preset treated alarm event and do preset mark processing generation; And the processing result information is preserved to the default knowledge base.
In one embodiment, the programmed instruction, which is executed by processor, described is based on the regular and default knowledge base pair of machine learning When the alarm event obtained from the presetting message queue carries out default processing, specific implementation:Sieved from the alarm event Monitoring alarm event is selected, wherein the monitoring alarm event is the alarm event of the monitoring system;By the monitoring alarm Event is sent to self-healing system to cause the self-healing system to handle failure corresponding to the monitoring alarm event.
In one embodiment, the programmed instruction is executed by processor described according to alarm data generation alarm event When, specific implementation:The alarm data is generated into alarm event according to predeterminable event form.
In one embodiment, the programmed instruction, which is executed by processor, described is based on the regular and default knowledge base pair of machine learning When the alarm event obtained from the presetting message queue carries out default processing, specific implementation:Based on machine learning rule and Default knowledge base carries out default alert analysis processing to the alarm event obtained from the presetting message queue, default alarm is received Hold back processing or the processing of default Alert aggregation.
In one embodiment, the programmed instruction, which is executed by processor, described disappears according to being preset described in default acquisition Rule When ceasing the alarm event in queue, specific implementation:The announcement of predetermined number in the presetting message queue is obtained according to preset order Alert event.
The computer-readable recording medium can be USB flash disk, mobile hard disk, read-only storage (ROM, Read-Only Memory), magnetic disc or CD etc. are various can be with the medium of store program codes.
Those of ordinary skill in the art are it is to be appreciated that the list of each example described with reference to the embodiments described herein Member and algorithm steps, it can be realized with electronic hardware, computer software or the combination of the two, in order to clearly demonstrate hardware With the interchangeability of software, the composition and step of each example are generally described according to function in the above description.This A little functions are performed with hardware or software mode actually, application-specific and design constraint depending on technical scheme.Specially Industry technical staff can realize described function using distinct methods to each specific application, but this realization is not It is considered as exceeding scope of the present application.
It is apparent to those skilled in the art that for convenience of description and succinctly, the dress of foregoing description The specific work process with unit is put, the corresponding process in preceding method embodiment is may be referred to, will not be repeated here.
In several embodiments provided herein, it should be understood that disclosed alarm treatment device and method, can To realize by another way.For example, alarm treatment device embodiment described above is only schematical.For example, The division of unit, only a kind of division of logic function, can there is other dividing mode when actually realizing.It is such as multiple Unit or component can combine or be desirably integrated into another system, or some features can be ignored, or not perform.
Step in the embodiment of the present application method can be sequentially adjusted, merged and deleted according to actual needs.This Shen Unit that please be in embodiment device can be combined, divided and deleted according to actual needs.
In addition, each functional unit in each embodiment of the application can be integrated in a processing unit, can also It is that unit is individually physically present or two or more units are integrated in a unit.It is above-mentioned integrated Unit can both be realized in the form of hardware, can also be realized in the form of SFU software functional unit.
If the integrated unit realized in the form of SFU software functional unit and as independent production marketing or in use, It can be stored in a computer read/write memory medium.Based on such understanding, the technical scheme of the application substantially or Person says the part to be contributed to prior art, or the technical scheme all or part can in the form of software product body Reveal and, the computer software product is stored in a storage medium, including some instructions are causing a computer to set Standby (can be personal computer, terminal, or network equipment etc.) perform each embodiment methods described of the application whole or Part steps.
Described above, the only embodiment of the application, but the protection domain of the application is not limited thereto is any Those familiar with the art can readily occur in various equivalent modifications or replace in the technical scope that the application discloses Change, these modifications or substitutions should all cover within the protection domain of the application.Therefore, the protection domain of the application should be with right It is required that protection domain be defined.

Claims (10)

  1. A kind of 1. alert processing method, applied to monitoring system, it is characterised in that including:
    Obtain the monitoring data of monitored object;
    Alarm data in the monitoring data is determined according to default alarm regulation, wherein the alarm data is described pre- to trigger If the monitoring data of alarm regulation;
    Alarm event is generated according to the alarm data, and the alarm event is recorded in presetting message queue;
    According to the alarm event in presetting message queue described in default acquisition Rule;
    The alarm event obtained from the presetting message queue is preset based on the regular and default knowledge base of machine learning Processing;And
    It will be sent by the alarm event treated of presetting to user terminal.
  2. 2. alert processing method according to claim 1, it is characterised in that described to preset treated announcement by described Alert event is sent to user terminal, in addition to:
    The feedback information that the user terminal is sent is received, wherein the feedback information passes through institute for the user terminal to described State and preset the processing result information that treated alarm event does preset mark processing generation;And
    The processing result information is preserved to the default knowledge base.
  3. 3. alert processing method according to claim 1, it is characterised in that described to be known based on machine learning rule with default Know storehouse and default processing is carried out to the alarm event obtained from the presetting message queue, including:
    Monitoring alarm event is filtered out from the alarm event, wherein the monitoring alarm event is the announcement of the monitoring system Alert event;
    The monitoring alarm event is sent to self-healing system to cause the self-healing system to handle the monitoring alarm event pair The failure answered.
  4. 4. alert processing method according to claim 1, it is characterised in that described generated according to the alarm data alerts Event, including:The alarm data is generated into alarm event according to predeterminable event form.
  5. 5. alert processing method according to claim 1, it is characterised in that described to be known based on machine learning rule with default Know storehouse and default processing is carried out to the alarm event obtained from the presetting message queue, including:
    The alarm event obtained from the presetting message queue is preset based on the regular and default knowledge base of machine learning Alert analysis processing, default alarm convergence process or the processing of default Alert aggregation.
  6. 6. alert processing method according to claim 1, it is characterised in that described according to described in default acquisition Rule Alarm event in presetting message queue, including:
    The alarm event of predetermined number in the presetting message queue is obtained according to preset order.
  7. A kind of 7. alarm treatment device, it is characterised in that including:
    Data capture unit, for obtaining the monitoring data of monitored object;
    Data determination unit, for determining the alarm data in the monitoring data according to default alarm regulation, wherein the announcement Alert data are to trigger the monitoring data of the default alarm regulation;
    Recording unit is generated, for generating alarm event according to the alarm data, and the alarm event is recorded in default Message queue;
    Event acquiring unit, for according to the alarm event in presetting message queue described in default acquisition Rule;
    Default processing unit, for based on the regular and default knowledge base of machine learning to being obtained from the presetting message queue Alarm event carries out default processing;And
    Event transmitting element, for will be sent by the alarm event treated of presetting to user terminal.
  8. 8. alarm treatment device according to claim 7, it is characterised in that
    Information receiving unit, the feedback information sent for receiving the user terminal, wherein the feedback information is the use By the processing result information preset treated alarm event and do preset mark processing generation described in the terminal-pair of family;And
    Information holding unit, for the processing result information to be preserved to the default knowledge base.
  9. 9. a kind of computer equipment, including memory, processor and it is stored on the memory and can be on the processor The computer program of operation, it is characterised in that realize such as claim 1 to 6 described in the computing device during computer program Any one of method.
  10. 10. a kind of storage medium, it is characterised in that the storage medium is stored with computer program, the computer program bag Programmed instruction is included, described program instruction makes any one of the computing device such as claim 1 to 6 institute when being executed by a processor The method stated.
CN201711001755.3A 2017-10-24 2017-10-24 Alert processing method, device, computer equipment and storage medium Pending CN107832200A (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN201711001755.3A CN107832200A (en) 2017-10-24 2017-10-24 Alert processing method, device, computer equipment and storage medium
PCT/CN2017/113234 WO2019080249A1 (en) 2017-10-24 2017-11-28 Alarm processing method and apparatus, computer device, and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201711001755.3A CN107832200A (en) 2017-10-24 2017-10-24 Alert processing method, device, computer equipment and storage medium

Publications (1)

Publication Number Publication Date
CN107832200A true CN107832200A (en) 2018-03-23

Family

ID=61649105

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201711001755.3A Pending CN107832200A (en) 2017-10-24 2017-10-24 Alert processing method, device, computer equipment and storage medium

Country Status (2)

Country Link
CN (1) CN107832200A (en)
WO (1) WO2019080249A1 (en)

Cited By (61)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108763038A (en) * 2018-08-08 2018-11-06 平安科技(深圳)有限公司 Management method, device, computer equipment and the storage medium of alarm data
CN108846484A (en) * 2018-04-11 2018-11-20 北京百度网讯科技有限公司 Fault self-recovery system, method, computer equipment and storage medium
CN108964987A (en) * 2018-06-15 2018-12-07 平安科技(深圳)有限公司 Data monitoring method, device, computer equipment and storage medium
CN108959034A (en) * 2018-07-05 2018-12-07 北京木瓜移动科技股份有限公司 A kind of monitoring alarm method, device, electronic equipment and storage medium
CN109039727A (en) * 2018-07-24 2018-12-18 中国银行股份有限公司 Message queue monitoring method and device based on deep learning
CN109086189A (en) * 2018-07-23 2018-12-25 郑州云海信息技术有限公司 A kind of physical infrastructure manager PIM alert processing method and equipment
CN109144825A (en) * 2018-07-27 2019-01-04 阿里巴巴集团控股有限公司 A kind of alert data monitoring method, device and equipment
CN109558298A (en) * 2018-10-12 2019-04-02 平安科技(深圳)有限公司 Alarm based on deep learning model executes frequency optimization method and relevant device
CN109636364A (en) * 2018-12-29 2019-04-16 江苏满运软件科技有限公司 The method, system, equipment and the medium that distribute are grouped for electronics red packet
CN109639456A (en) * 2018-11-09 2019-04-16 网宿科技股份有限公司 A kind of automation processing platform for the improved method and alarm data that automation alerts
CN109669836A (en) * 2018-09-25 2019-04-23 平安普惠企业管理有限公司 Intelligent IT O&M analysis method, device, equipment and readable storage medium storing program for executing
CN109672556A (en) * 2018-11-20 2019-04-23 珠海许继芝电网自动化有限公司 A kind of event alarm system
CN109992483A (en) * 2019-04-11 2019-07-09 苏州浪潮智能科技有限公司 A kind of temperature monitoring method, device, equipment and readable storage medium storing program for executing
CN110362455A (en) * 2019-07-15 2019-10-22 北京奇艺世纪科技有限公司 A data processing method and data processing device
CN110363381A (en) * 2019-05-31 2019-10-22 阿里巴巴集团控股有限公司 A kind of information processing method and device
CN110532152A (en) * 2019-08-05 2019-12-03 北明云智(武汉)网软有限公司 A kind of monitoring alarm processing method and system based on Kapacitor computing engines
WO2019237585A1 (en) * 2018-06-13 2019-12-19 平安科技(深圳)有限公司 Zookeeper monitoring method, device, computer equipment and storage medium
CN110661659A (en) * 2019-09-23 2020-01-07 上海艾融软件股份有限公司 Alarm method, device and system and electronic equipment
CN110708204A (en) * 2019-11-18 2020-01-17 上海维谛信息科技有限公司 Abnormity processing method, system, terminal and medium based on operation and maintenance knowledge base
CN110719207A (en) * 2019-10-23 2020-01-21 北京数制科技有限公司 Alarm message transmission method and device, industrial data acquisition platform and storage medium
CN110865921A (en) * 2019-11-08 2020-03-06 拉扎斯网络科技(上海)有限公司 Data monitoring method, apparatus, readable storage medium and electronic device
WO2020073994A1 (en) * 2018-10-11 2020-04-16 中兴通讯股份有限公司 Network alarm processing method and apparatus, and storage medium
CN111061616A (en) * 2019-11-25 2020-04-24 京信通信系统(中国)有限公司 Alarm management method, device, communication equipment and storage medium
CN111259629A (en) * 2020-01-10 2020-06-09 深圳前海环融联易信息科技服务有限公司 Alarm method, device, equipment and storage medium of task scheduling system
CN111294218A (en) * 2018-12-06 2020-06-16 云智慧(北京)科技有限公司 Information processing method, device, system and storage medium
CN111352808A (en) * 2020-03-03 2020-06-30 腾讯云计算(北京)有限责任公司 Alarm data processing method, device, equipment and storage medium
CN111538643A (en) * 2020-07-07 2020-08-14 宝信软件(成都)有限公司 Alarm information filtering method and system for monitoring system
CN111756778A (en) * 2019-03-26 2020-10-09 京东数字科技控股有限公司 Server disk cleaning script pushing method and device and storage medium
CN111769977A (en) * 2020-06-17 2020-10-13 广州嘉为科技有限公司 Processing method based on enterprise monitoring alarm event
CN111865691A (en) * 2020-07-22 2020-10-30 平安证券股份有限公司 Alarm file distribution method, device, equipment and medium based on artificial intelligence
CN112182367A (en) * 2020-09-18 2021-01-05 佳都新太科技股份有限公司 Management and control alarm method and device
CN112199207A (en) * 2020-09-03 2021-01-08 浙江大华技术股份有限公司 A method, device, system, equipment and medium for pushing alarm information
CN112650642A (en) * 2020-12-07 2021-04-13 深圳前海微众银行股份有限公司 Alarm processing method and device, equipment and storage medium
CN112685247A (en) * 2020-12-24 2021-04-20 京东方科技集团股份有限公司 Alarm suppression method based on Zabbix monitoring system and monitoring system
CN113065884A (en) * 2020-03-31 2021-07-02 中国移动通信集团贵州有限公司 A method, device and electronic device for processing a bill file
CN113282420A (en) * 2021-06-07 2021-08-20 新奥数能科技有限公司 Method and device for edge service alarm
CN113360292A (en) * 2021-06-01 2021-09-07 北京百度网讯科技有限公司 Message processing method, message processing device, electronic equipment, storage medium and program product
WO2021174835A1 (en) * 2020-03-04 2021-09-10 平安科技(深圳)有限公司 Alarm information processing method and apparatus, and computer apparatus and storage medium
CN113434366A (en) * 2021-06-28 2021-09-24 中国建设银行股份有限公司 Event processing method and system
CN113468025A (en) * 2021-07-28 2021-10-01 浙江大华技术股份有限公司 Data warning method, system, device and storage medium
CN113608839A (en) * 2021-08-10 2021-11-05 曙光信息产业(北京)有限公司 Cluster alarm method, device, computer equipment and storage medium
CN113704065A (en) * 2021-08-31 2021-11-26 平安普惠企业管理有限公司 Monitoring method, device, equipment and computer storage medium
CN113724100A (en) * 2021-08-27 2021-11-30 广东电网有限责任公司 Power grid monitoring alarm message processing method of distributed cluster
CN113794597A (en) * 2021-09-15 2021-12-14 中国联合网络通信集团有限公司 Alarm information processing method, system, electronic device and storage medium
CN113849383A (en) * 2021-09-27 2021-12-28 广州华多网络科技有限公司 Alarm notification control method and device, equipment, medium and product thereof
CN113886182A (en) * 2021-09-29 2022-01-04 深圳市金蝶天燕云计算股份有限公司 Alarm convergence method and device, electronic equipment and storage medium
CN113923327A (en) * 2021-09-08 2022-01-11 深圳市安软慧视科技有限公司 Method and system for displaying camera alarm in three-dimensional map and related equipment
WO2022029599A1 (en) * 2020-08-06 2022-02-10 International Business Machines Corporation Alert management in data processing systems
CN114066162A (en) * 2021-10-19 2022-02-18 中通服中睿科技有限公司 Intelligent management method and system for alarm event
CN114090412A (en) * 2022-01-20 2022-02-25 北京安帝科技有限公司 Distributed alarm processing method and system
CN114172785A (en) * 2021-10-21 2022-03-11 广州市百果园信息技术有限公司 Alarm information processing method, device, equipment and storage medium
CN114469021A (en) * 2020-10-27 2022-05-13 深圳迈瑞生物医疗电子股份有限公司 Method for reviewing alarm event, monitoring equipment and monitoring system
CN114697318A (en) * 2022-06-01 2022-07-01 深圳市华曦达科技股份有限公司 Method and device for pushing alarm snapshot picture of terminal equipment
CN114710390A (en) * 2022-02-18 2022-07-05 联通沃悦读科技文化有限公司 Monitoring and alarming method and system, equipment and medium for Internet system
CN115643164A (en) * 2022-09-19 2023-01-24 杭州浮云网络科技有限公司 Alarm method, alarm device, electronic device and storage medium
CN115664937A (en) * 2022-10-26 2023-01-31 海看网络科技(山东)股份有限公司 Middleware warning and intelligent recovery system
CN115712646A (en) * 2021-08-18 2023-02-24 腾讯科技(深圳)有限公司 Alarm strategy generation method, device and storage medium
CN115865619A (en) * 2022-11-24 2023-03-28 浙江中控技术股份有限公司 Alarm processing method, system, device and equipment
CN115865622A (en) * 2022-11-25 2023-03-28 南方电网数字平台科技(广东)有限公司 Multi-cloud monitoring and alarming method and device
WO2024174700A1 (en) * 2023-02-24 2024-08-29 天翼云科技有限公司 Method and apparatus for calculating component value of alarm information, and electronic device and storage medium
CN120296077A (en) * 2025-06-12 2025-07-11 中国电建集团西北勘测设计研究院有限公司 Control method and system for safety monitoring and early warning process of deep foundation pit

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113504969A (en) * 2021-07-07 2021-10-15 北京汇钧科技有限公司 Container event alarm method and device and electronic equipment

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103905533A (en) * 2014-03-13 2014-07-02 广州杰赛科技股份有限公司 Distributed type alarm monitoring method and system based on cloud storage
CN105743220A (en) * 2016-03-21 2016-07-06 国网天津静海供电有限公司 Dispatching automation monitoring information analyzing and processing system and method
CN106649055A (en) * 2017-01-10 2017-05-10 山东浪潮云服务信息科技有限公司 Domestic CPU (central processing unit) and operating system based software and hardware fault alarming system and method

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8112378B2 (en) * 2008-06-17 2012-02-07 Hitachi, Ltd. Methods and systems for performing root cause analysis
CN103414581A (en) * 2013-07-24 2013-11-27 佳都新太科技股份有限公司 Equipment fault alarm, prediction and processing mechanism based on data mining
CN106940677A (en) * 2017-02-13 2017-07-11 咪咕音乐有限公司 One kind application daily record data alarm method and device

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103905533A (en) * 2014-03-13 2014-07-02 广州杰赛科技股份有限公司 Distributed type alarm monitoring method and system based on cloud storage
CN105743220A (en) * 2016-03-21 2016-07-06 国网天津静海供电有限公司 Dispatching automation monitoring information analyzing and processing system and method
CN106649055A (en) * 2017-01-10 2017-05-10 山东浪潮云服务信息科技有限公司 Domestic CPU (central processing unit) and operating system based software and hardware fault alarming system and method

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
姚淑萍: "《网络安全预警防御技术》", 30 November 2015, 《国防工业出版社》 *

Cited By (83)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108846484A (en) * 2018-04-11 2018-11-20 北京百度网讯科技有限公司 Fault self-recovery system, method, computer equipment and storage medium
WO2019237585A1 (en) * 2018-06-13 2019-12-19 平安科技(深圳)有限公司 Zookeeper monitoring method, device, computer equipment and storage medium
CN108964987A (en) * 2018-06-15 2018-12-07 平安科技(深圳)有限公司 Data monitoring method, device, computer equipment and storage medium
CN108959034A (en) * 2018-07-05 2018-12-07 北京木瓜移动科技股份有限公司 A kind of monitoring alarm method, device, electronic equipment and storage medium
CN109086189A (en) * 2018-07-23 2018-12-25 郑州云海信息技术有限公司 A kind of physical infrastructure manager PIM alert processing method and equipment
CN109039727B (en) * 2018-07-24 2021-08-06 中国银行股份有限公司 Deep learning-based message queue monitoring method and device
CN109039727A (en) * 2018-07-24 2018-12-18 中国银行股份有限公司 Message queue monitoring method and device based on deep learning
CN109144825A (en) * 2018-07-27 2019-01-04 阿里巴巴集团控股有限公司 A kind of alert data monitoring method, device and equipment
CN108763038B (en) * 2018-08-08 2022-04-12 平安科技(深圳)有限公司 Alarm data management method and device, computer equipment and storage medium
CN108763038A (en) * 2018-08-08 2018-11-06 平安科技(深圳)有限公司 Management method, device, computer equipment and the storage medium of alarm data
CN109669836A (en) * 2018-09-25 2019-04-23 平安普惠企业管理有限公司 Intelligent IT O&M analysis method, device, equipment and readable storage medium storing program for executing
CN111049664A (en) * 2018-10-11 2020-04-21 中兴通讯股份有限公司 A network alarm processing method, device and storage medium
WO2020073994A1 (en) * 2018-10-11 2020-04-16 中兴通讯股份有限公司 Network alarm processing method and apparatus, and storage medium
CN109558298A (en) * 2018-10-12 2019-04-02 平安科技(深圳)有限公司 Alarm based on deep learning model executes frequency optimization method and relevant device
CN109558298B (en) * 2018-10-12 2022-07-19 平安科技(深圳)有限公司 Alarm execution frequency optimization method based on deep learning model and related equipment
CN109639456A (en) * 2018-11-09 2019-04-16 网宿科技股份有限公司 A kind of automation processing platform for the improved method and alarm data that automation alerts
CN109639456B (en) * 2018-11-09 2022-08-16 网宿科技股份有限公司 Improvement method for automatic alarm and automatic processing platform for alarm data
CN109672556A (en) * 2018-11-20 2019-04-23 珠海许继芝电网自动化有限公司 A kind of event alarm system
CN111294218B (en) * 2018-12-06 2022-07-26 云智慧(北京)科技有限公司 Information processing method, device, system and storage medium
CN111294218A (en) * 2018-12-06 2020-06-16 云智慧(北京)科技有限公司 Information processing method, device, system and storage medium
CN109636364A (en) * 2018-12-29 2019-04-16 江苏满运软件科技有限公司 The method, system, equipment and the medium that distribute are grouped for electronics red packet
CN111756778B (en) * 2019-03-26 2024-06-18 京东科技控股股份有限公司 Method, device and storage medium for pushing server disk cleaning script
CN111756778A (en) * 2019-03-26 2020-10-09 京东数字科技控股有限公司 Server disk cleaning script pushing method and device and storage medium
CN109992483A (en) * 2019-04-11 2019-07-09 苏州浪潮智能科技有限公司 A kind of temperature monitoring method, device, equipment and readable storage medium storing program for executing
CN110363381A (en) * 2019-05-31 2019-10-22 阿里巴巴集团控股有限公司 A kind of information processing method and device
CN110363381B (en) * 2019-05-31 2023-12-22 创新先进技术有限公司 An information processing method and device
CN110362455A (en) * 2019-07-15 2019-10-22 北京奇艺世纪科技有限公司 A data processing method and data processing device
CN110532152A (en) * 2019-08-05 2019-12-03 北明云智(武汉)网软有限公司 A kind of monitoring alarm processing method and system based on Kapacitor computing engines
CN110661659B (en) * 2019-09-23 2022-06-21 上海艾融软件股份有限公司 Alarm method, device and system and electronic equipment
CN110661659A (en) * 2019-09-23 2020-01-07 上海艾融软件股份有限公司 Alarm method, device and system and electronic equipment
CN110719207A (en) * 2019-10-23 2020-01-21 北京数制科技有限公司 Alarm message transmission method and device, industrial data acquisition platform and storage medium
CN110865921A (en) * 2019-11-08 2020-03-06 拉扎斯网络科技(上海)有限公司 Data monitoring method, apparatus, readable storage medium and electronic device
CN110708204A (en) * 2019-11-18 2020-01-17 上海维谛信息科技有限公司 Abnormity processing method, system, terminal and medium based on operation and maintenance knowledge base
CN111061616A (en) * 2019-11-25 2020-04-24 京信通信系统(中国)有限公司 Alarm management method, device, communication equipment and storage medium
CN111061616B (en) * 2019-11-25 2024-03-29 京信网络系统股份有限公司 Alarm management method, device, communication equipment and storage medium
CN111259629A (en) * 2020-01-10 2020-06-09 深圳前海环融联易信息科技服务有限公司 Alarm method, device, equipment and storage medium of task scheduling system
CN111352808A (en) * 2020-03-03 2020-06-30 腾讯云计算(北京)有限责任公司 Alarm data processing method, device, equipment and storage medium
WO2021174835A1 (en) * 2020-03-04 2021-09-10 平安科技(深圳)有限公司 Alarm information processing method and apparatus, and computer apparatus and storage medium
CN113065884A (en) * 2020-03-31 2021-07-02 中国移动通信集团贵州有限公司 A method, device and electronic device for processing a bill file
CN111769977A (en) * 2020-06-17 2020-10-13 广州嘉为科技有限公司 Processing method based on enterprise monitoring alarm event
CN111538643A (en) * 2020-07-07 2020-08-14 宝信软件(成都)有限公司 Alarm information filtering method and system for monitoring system
CN111538643B (en) * 2020-07-07 2020-10-16 宝信软件(成都)有限公司 Alarm information filtering method and system for monitoring system
CN111865691B (en) * 2020-07-22 2022-11-04 平安证券股份有限公司 Alarm file distribution method, device, equipment and medium based on artificial intelligence
CN111865691A (en) * 2020-07-22 2020-10-30 平安证券股份有限公司 Alarm file distribution method, device, equipment and medium based on artificial intelligence
WO2022029599A1 (en) * 2020-08-06 2022-02-10 International Business Machines Corporation Alert management in data processing systems
US12380342B2 (en) 2020-08-06 2025-08-05 International Business Machines Corporation Alert management in data processing systems
GB2612755A (en) * 2020-08-06 2023-05-10 Ibm Alert management in data processing systems
CN112199207A (en) * 2020-09-03 2021-01-08 浙江大华技术股份有限公司 A method, device, system, equipment and medium for pushing alarm information
CN112182367A (en) * 2020-09-18 2021-01-05 佳都新太科技股份有限公司 Management and control alarm method and device
CN114469021A (en) * 2020-10-27 2022-05-13 深圳迈瑞生物医疗电子股份有限公司 Method for reviewing alarm event, monitoring equipment and monitoring system
CN112650642B (en) * 2020-12-07 2024-08-20 深圳前海微众银行股份有限公司 Alarm processing method and device, equipment and storage medium
CN112650642A (en) * 2020-12-07 2021-04-13 深圳前海微众银行股份有限公司 Alarm processing method and device, equipment and storage medium
CN112685247B (en) * 2020-12-24 2024-01-12 京东方科技集团股份有限公司 Alarm suppression method and monitoring system based on Zabbix monitoring system
CN112685247A (en) * 2020-12-24 2021-04-20 京东方科技集团股份有限公司 Alarm suppression method based on Zabbix monitoring system and monitoring system
CN113360292B (en) * 2021-06-01 2024-03-15 北京百度网讯科技有限公司 Message processing methods, devices, electronic equipment, storage media and program products
CN113360292A (en) * 2021-06-01 2021-09-07 北京百度网讯科技有限公司 Message processing method, message processing device, electronic equipment, storage medium and program product
CN113282420A (en) * 2021-06-07 2021-08-20 新奥数能科技有限公司 Method and device for edge service alarm
CN113434366A (en) * 2021-06-28 2021-09-24 中国建设银行股份有限公司 Event processing method and system
CN113468025A (en) * 2021-07-28 2021-10-01 浙江大华技术股份有限公司 Data warning method, system, device and storage medium
CN113608839A (en) * 2021-08-10 2021-11-05 曙光信息产业(北京)有限公司 Cluster alarm method, device, computer equipment and storage medium
CN115712646A (en) * 2021-08-18 2023-02-24 腾讯科技(深圳)有限公司 Alarm strategy generation method, device and storage medium
CN113724100B (en) * 2021-08-27 2024-05-10 广东电网有限责任公司 Power grid monitoring alarm message processing method of distributed cluster
CN113724100A (en) * 2021-08-27 2021-11-30 广东电网有限责任公司 Power grid monitoring alarm message processing method of distributed cluster
CN113704065A (en) * 2021-08-31 2021-11-26 平安普惠企业管理有限公司 Monitoring method, device, equipment and computer storage medium
CN113923327A (en) * 2021-09-08 2022-01-11 深圳市安软慧视科技有限公司 Method and system for displaying camera alarm in three-dimensional map and related equipment
CN113794597B (en) * 2021-09-15 2023-05-30 中国联合网络通信集团有限公司 Alarm information processing method, system, electronic equipment and storage medium
CN113794597A (en) * 2021-09-15 2021-12-14 中国联合网络通信集团有限公司 Alarm information processing method, system, electronic device and storage medium
CN113849383A (en) * 2021-09-27 2021-12-28 广州华多网络科技有限公司 Alarm notification control method and device, equipment, medium and product thereof
CN113886182B (en) * 2021-09-29 2025-03-21 深圳市金蝶天燕云计算股份有限公司 Alarm convergence method, device, electronic device and storage medium
CN113886182A (en) * 2021-09-29 2022-01-04 深圳市金蝶天燕云计算股份有限公司 Alarm convergence method and device, electronic equipment and storage medium
CN114066162A (en) * 2021-10-19 2022-02-18 中通服中睿科技有限公司 Intelligent management method and system for alarm event
CN114172785A (en) * 2021-10-21 2022-03-11 广州市百果园信息技术有限公司 Alarm information processing method, device, equipment and storage medium
CN114172785B (en) * 2021-10-21 2023-10-03 广州市百果园信息技术有限公司 Alarm information processing method, device, equipment and storage medium
CN114090412B (en) * 2022-01-20 2022-06-28 北京安帝科技有限公司 Distributed alarm processing method and system
CN114090412A (en) * 2022-01-20 2022-02-25 北京安帝科技有限公司 Distributed alarm processing method and system
CN114710390A (en) * 2022-02-18 2022-07-05 联通沃悦读科技文化有限公司 Monitoring and alarming method and system, equipment and medium for Internet system
CN114697318A (en) * 2022-06-01 2022-07-01 深圳市华曦达科技股份有限公司 Method and device for pushing alarm snapshot picture of terminal equipment
CN115643164A (en) * 2022-09-19 2023-01-24 杭州浮云网络科技有限公司 Alarm method, alarm device, electronic device and storage medium
CN115664937A (en) * 2022-10-26 2023-01-31 海看网络科技(山东)股份有限公司 Middleware warning and intelligent recovery system
CN115865619A (en) * 2022-11-24 2023-03-28 浙江中控技术股份有限公司 Alarm processing method, system, device and equipment
CN115865622A (en) * 2022-11-25 2023-03-28 南方电网数字平台科技(广东)有限公司 Multi-cloud monitoring and alarming method and device
WO2024174700A1 (en) * 2023-02-24 2024-08-29 天翼云科技有限公司 Method and apparatus for calculating component value of alarm information, and electronic device and storage medium
CN120296077A (en) * 2025-06-12 2025-07-11 中国电建集团西北勘测设计研究院有限公司 Control method and system for safety monitoring and early warning process of deep foundation pit

Also Published As

Publication number Publication date
WO2019080249A1 (en) 2019-05-02

Similar Documents

Publication Publication Date Title
CN107832200A (en) Alert processing method, device, computer equipment and storage medium
CN114443429B (en) A method, device and computer-readable storage medium for processing an alarm event
CN108845910B (en) Monitoring method, device and storage medium of large-scale micro-service system
CN106878064A (en) Data monitoring method and device
CN110096410A (en) Alarm information processing method, system, computer installation and readable storage medium storing program for executing
CN103605722B (en) Database monitoring method and device, equipment
CN103220173B (en) A kind of alarm monitoring method and supervisory control system
CN110048888A (en) A kind of method based on zabbix monitoring alarm, server, equipment and storage medium
WO2019223062A1 (en) Method and system for processing system exceptions
CN108880845B (en) Information prompting method and related device
CN109218102A (en) A kind of alarm monitoring method and system
CN106961352A (en) Monitoring system and monitoring method
EP2454848A1 (en) Method and apparatus for telecommunications network performance anomaly events detection and notification
CN103856344B (en) A kind of alarm event information processing method and device
CN109639504A (en) A kind of alarm information processing method and device based on cloud platform
CN110677271B (en) Big data alarm method, device, equipment and storage medium based on ELK
CN104967537A (en) Alarm information pushing method and device
CN109669835A (en) MySQL database monitoring method, device, equipment and readable storage medium storing program for executing
CN107453906A (en) A kind of method to set up and device of storage management system monitoring alarm
CN106709057A (en) Distributed cluster visualized database
CN107733900B (en) A kind of communication network users abnormal call behavioral value method for early warning
CN115796844A (en) Dynamic updating method of alarm threshold, terminal equipment and system
CN108809720A (en) The management method and device of alarming assignment in cloud data system
JP2018093432A (en) Determination system, determination method, and program
CN110674149A (en) Service data processing method and device, computer equipment and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20180323

RJ01 Rejection of invention patent application after publication