CN111309557A - Monitoring method, device, equipment and medium for multiple operating systems - Google Patents

Abstract

The invention discloses a monitoring method of a multi-operation system, which comprises the following steps: enabling a monitored operating system to remotely mount a first file system shared by a monitoring platform system; enabling the operating system to redirect the collected collection information to a first redirection file and storing the first redirection file to a first file system; storing a second redirected file redirected by the log file of the operating system to the first file system; and configuring a system monitoring table by the monitoring platform system according to the acquired information, and regularly monitoring the second redirection file of each operating system in the first file system according to the system monitoring table. The invention also discloses a device, equipment and a medium. The monitoring method, the monitoring device, the monitoring equipment and the monitoring medium of the multi-operating system can uniformly and integrally monitor and manage all systems and resources of an enterprise.

Description

A monitoring method, device, device and medium for multiple operating systems

technical field

The present invention relates to the field of computers, and more particularly, to a monitoring method, apparatus, device and medium for multiple operating systems.

Background technique

We know that with the continuous development of enterprise informatization construction, enterprises have established a large number of IT systems. These IT systems generate a large amount of event information every day during the operation process. Enterprises need to use these event information to judge the operation of the IT system. However, since the event information is distributed in different systems, such as operating systems, databases, middleware, servers, network devices, etc., have their own event management consoles to store their respective event information. Moreover, a large and medium-sized data center has tens of millions of event information every day. "How to collect, analyze, and process these scattered and massive event information" has become very complex.

In many enterprises, although some monitoring tools may already be deployed. However, since these monitoring tools are designed for a certain system or resource, they cannot be well integrated with each other, and the control platforms provided to system administrators are even more varied; more seriously, due to the mutual It cannot be integrated, and the management information it monitors cannot be shared. This leads to the occurrence of false alarms and repeated alarms; at the same time, these tools are only monitoring and management software for IT resources. Even if a problem is found, it cannot be linked to the real business and the impact of the problem on the business cannot be judged. Unable to determine the priority order for solving problems, problems affecting key business are delayed and cause huge losses.

In order to fundamentally solve the above problems, IT system management must be able to link enterprise IT management and business operations; unify and integrate the control platforms of all different management tools to achieve information sharing. Therefore, in order to unify and integrate the various management and control platforms of the enterprise, to realize the correlation between IT management and business operation. It is imperative to design and implement a comprehensive monitoring platform with unified, integrated management and good openness.

Through this comprehensive monitoring platform, unified and integrated monitoring and management of all systems and resources of the enterprise can be carried out. Support, collect and process all information of the enterprise. In addition, the platform also needs to have good openness, which can integrate the original monitoring system of the enterprise, so that the original monitoring system of the enterprise can send the monitoring information that meets certain conditions to the comprehensive monitoring platform for unified processing. In order to achieve information sharing, manage the enterprise's scattered and increasing IT systems. It can flexibly provide the required information to the relevant management personnel of the enterprise in various ways. In this way, relevant enterprise managers can know whether the task is progressing as planned, whether the current resource status has changed, or whether the performance exceeds the set threshold.

SUMMARY OF THE INVENTION

In view of this, the purpose of the embodiments of the present invention is to provide a multi-operating system monitoring method, apparatus, device and medium, which can implement unified and integrated monitoring and management of all systems and resources of an enterprise.

Based on the above purpose, one aspect of the present invention provides a monitoring method for multiple operating systems. The method includes: enabling the monitored operating system to remotely mount the first file system shared by the monitoring platform system; The information is redirected to the first redirection file, and the first redirection file is stored in the first file system; the second redirection file redirected by the log file of the operating system is stored in the first file system; Collect information to configure a system monitoring table, and regularly monitor the second redirection file of each operating system in the first file system according to the system monitoring table.

In some embodiments of the monitoring method for multiple operating systems of the present invention, the collected information includes: the second file system, memory, and CPU usage of the monitored operating system, as well as host name, IP, and time.

In some embodiments of the monitoring method for multiple operating systems of the present invention, the monitoring platform system is configured to configure a system monitoring table according to the collected information, and regularly monitor the second redirection of each operating system in the first file system according to the system monitoring table The file also includes: backing up the second redirection file in the first file system to the backup file system; and performing incremental comparative monitoring on the log file of the second redirection file and the backup file system in response to each execution of monitoring.

In some embodiments of the multi-operating system monitoring method of the present invention, the method further includes: in response to no increment, judging that an abnormality occurs; in response to an increment, performing an alarm key field on the increment of all log files match, in response to the successful keyword matching, an alarm message is issued.

In some embodiments of the monitoring method for multiple operating systems of the present invention, the method further includes: in response to completion of the incremental comparison monitoring of the log files, copying the log files in the first file system to the backup file system.

Another aspect of the embodiments of the present invention further provides an FPGA-based graph computing data preprocessing device, the device includes: a connection module, where the connection module is configured to enable the monitored operating system to remotely mount the first data shared by the monitoring platform system a file system; an information collection module, the collection information module is configured to make the operating system redirect the collected collection information to a first redirection file, and store the first redirection file in the first file system; a log module, a log module The second redirection file configured to redirect the log file of the operating system is stored in the first file system; the monitoring module, the monitoring module is configured to enable the monitoring platform system to configure the system monitoring table according to the collected information, and regularly monitor the first file system according to the system monitoring table. A second redirect file for each operating system in the file system.

In some embodiments of the monitoring device for multiple operating systems of the present invention, the monitoring module is further configured to: back up the second redirected file in the first file system to the backup file system; The redirection file and the log file of the backup file system are monitored incrementally.

In some embodiments of the multi-operating system monitoring device of the present invention, the monitoring module is further configured to: in response to no increment, determine that an abnormality has occurred; in response to an increment, perform an alarm key on the increment of all log files The field matches, and in response to the successful keyword matching, an alarm message is issued.

In another aspect of the embodiments of the present invention, there is also provided a computer device, the computer device includes: at least one processor; and a memory, where the memory stores a computer program that can be executed on the processor, and the processor executes the aforementioned program when executing the program monitoring method for multiple operating systems.

In yet another aspect of the embodiments of the present invention, a computer-readable storage medium is also provided, where a computer program is stored in the computer-readable storage medium, wherein the computer program is executed by a processor to execute the foregoing monitoring method for multiple operating systems .

The invention has at least the following beneficial technical effects: through the comprehensive monitoring platform, unified and integrated monitoring and management of all systems and resources of the enterprise can be performed. Support, collect and process all information of the enterprise. In addition, the platform also needs to have good openness, which can integrate the original monitoring system of the enterprise, so that the original monitoring system of the enterprise can send the monitoring information that meets certain conditions to the comprehensive monitoring platform for unified processing. In order to achieve information sharing, manage the enterprise's scattered and increasing IT systems. It can flexibly provide the required information to the relevant management personnel of the enterprise in various ways. In this way, relevant enterprise managers can know whether the task is progressing as planned, whether the current resource status has changed, or whether the performance exceeds the set threshold.

Description of drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. For those of ordinary skill in the art, other embodiments can also be obtained according to these drawings without creative efforts.

FIG. 1 shows a schematic block diagram of an embodiment of a monitoring method for multiple operating systems according to the present invention.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present invention more clearly understood, the embodiments of the present invention will be further described in detail below with reference to the specific embodiments and the accompanying drawings.

It should be noted that all expressions using "first" and "second" in the embodiments of the present invention are for the purpose of distinguishing two entities with the same name but not the same or non-identical parameters. It can be seen that "first" and "second" " is only for the convenience of expression, and should not be construed as a limitation on the embodiments of the present invention, and subsequent embodiments will not describe them one by one.

Based on the above objective, in the first aspect of the embodiments of the present invention, an embodiment of a monitoring method for multiple operating systems is proposed. FIG. 1 shows a schematic diagram of an embodiment of a monitoring method for multiple operating systems according to the present invention. In the embodiment shown in Figure 1, the method at least includes the following steps:

S100, enabling the monitored operating system to remotely mount the first file system shared by the monitoring platform system;

S200, make the operating system redirect the collected collection information to the first redirection file, and store the first redirection file in the first file system;

S300, the second redirection file redirected by the log file of the operating system is stored in the first file system;

S400. The monitoring platform system configures a system monitoring table according to the collected information, and regularly monitors the second redirection file of each operating system in the first file system according to the system monitoring table.

In some embodiments of the present invention, the monitoring platform system (linux) installs and configures the sabma service, and shares the file system to other monitored operating systems, such as windows, linux, aix, hpux, and the like. The operating system of the monitored end does not need to install the agent software, and mounts the first file system shared by the monitoring platform system; the deployment program collects the second file system, memory, and CPU usage of the operating system and redirects it to the first system file, and redirects the file to the first system file. It is stored in the first file system that has just been mounted, and the monitoring platform system performs monitoring according to the files on the shared first file system. When the monitoring of key fields reaches the alarm threshold, the email sends out alarm corresponding information. Among them, the operating system deployment program of the monitored terminal collects the collection information of the operating system regularly (every minute), stores the first redirection file in the mounted file system, and stores the second redirection file corresponding to the operating system log of the monitored terminal in the The first file system is shared, the monitoring terminal is configured with a system monitoring table, and the system monitoring table is executed according to time and cycle to complete the monitoring of all systems. Among them, adding multiple monitored operating systems can realize multi-system monitoring.

According to some embodiments of the monitoring method for multiple operating systems of the present invention, the collected information includes: the second file system, memory, and CPU usage of the monitored operating system, as well as host name, IP, and time.

In some embodiments of the present invention, the operating system deployment program of the monitored terminal periodically (every minute) collects the file system, memory, and CPU usage of the operating system, and redirects the collected information to the first redirection files hostname_filesysteminfo, hostname_memoryinfo, hostname_cpuinfo, the files are named according to the hostname + monitoring information; the information also includes the hostname, IP, time, etc.

According to some embodiments of the monitoring method for multiple operating systems of the present invention, the monitoring platform system configures the system monitoring table according to the collected information, and regularly monitors the second redirection file of each operating system in the first file system according to the system monitoring table The method also includes: backing up the second redirection file in the first file system to the backup file system; and performing incremental comparative monitoring on the log file of the second redirection file and the backup file system in response to each execution of monitoring.

In some embodiments of the present invention, the second redirection file of the operating system log file of the monitored terminal is to the hostname_systemlog under the shared file system, and the monitoring terminal records many logs in the shared file system according to the hostname in the configured system monitoring table. The files are monitored regularly (every two minutes). First, the log files in the shared file system are backed up to the bak file system according to the host information in the system monitoring table. After each monitoring is performed, the first shared file system The hostname_filesysteminfo in the file is incrementally compared with the files of the bak file (backup file) system.

According to some embodiments of the monitoring method for multiple operating systems of the present invention, the method further includes: in response to no increment, determining that an abnormality occurs; in response to having an increment, performing alarm key field matching on increments of all log files , in response to the successful keyword matching, an alarm message is issued.

In some embodiments of the present invention, if there is no increment, it means that the host is abnormal; if there is an increment, the alarm key field matching is performed on the increment of all log files, and if the keyword match is successful, an alarm email is sent to notify the relevant personnel ;

According to some embodiments of the monitoring method for multiple operating systems of the present invention, the method further includes: in response to completion of the incremental comparison monitoring of the log files, copying the log files in the first file system to the backup file system.

In some embodiments of the present invention, after the incremental log file monitoring is completed, the log files in the shared file system are copied to the bak file system.

Another aspect of the embodiments of the present invention provides an embodiment of a monitoring device with multiple operating systems. The device includes:

a connection module, the connection module is configured to enable the monitored operating system to remotely mount the first file system shared by the monitoring platform system;

an information collection module, which is configured to enable the operating system to redirect the collected collection information to the first redirection file, and store the first redirection file in the first file system;

a log module, where the log module is configured to store the second redirected file redirected by the log file of the operating system in the first file system;

The monitoring module is configured so that the monitoring platform system configures the system monitoring table according to the collected information, and regularly monitors the second redirection file of each operating system in the first file system according to the system monitoring table.

According to some embodiments of the monitoring device for multiple operating systems of the present invention, the monitoring module is further configured to: back up the second redirected file in the first file system to the backup file system; The redirection file and the log file of the backup file system are monitored incrementally.

According to some embodiments of the multi-operating system monitoring device of the present invention, the monitoring module is further configured to: in response to no increment, determine that an abnormality occurs; in response to an increment, perform an alarm keyword on the increment of all log files If the segment matches, in response to the successful keyword match, an alarm message is issued.

Based on the above object, another aspect of the embodiments of the present invention further provides a computer device, the computer device includes: at least one processor; and a memory, where the memory stores a computer program that can be executed on the processor, and the processor executes the computer program. The aforementioned monitoring method for multiple operating systems is executed during the program.

In yet another aspect of the embodiments of the present invention, a computer-readable storage medium is also provided, where a computer program is stored in the computer-readable storage medium, wherein the computer program is executed by a processor to execute the foregoing monitoring method for multiple operating systems .

Likewise, those skilled in the art should understand that all the embodiments, features and advantages set forth above for the monitoring method for multiple operating systems according to the present invention are equally applicable to the apparatus, computer equipment and medium according to the present invention. For the sake of brevity of the present disclosure, the description is not repeated here.

It should be specially pointed out that the steps in the various embodiments of the monitoring method, device, device and medium for multiple operating systems can be intersected, replaced, added, and deleted. Therefore, these reasonable permutations and combinations are more than The monitoring method, device, device and medium of the operating system should also belong to the protection scope of the present invention, and the protection scope of the present invention should not be limited to the embodiments.

Finally, it should be noted that those of ordinary skill in the art can understand that all or part of the process in the method of the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the program of the monitoring method for multiple operating systems can be stored in a computer In reading the storage medium, when the program is executed, it may include the flow of the embodiments of the above-mentioned methods. Wherein, the storage medium of the program may be a magnetic disk, an optical disk, a read only memory (ROM) or a random access memory (RAM) or the like. The above computer program embodiments can achieve the same or similar effects as any of the foregoing method embodiments corresponding thereto.

In addition, the methods disclosed according to the embodiments of the present invention may also be implemented as a computer program executed by a processor, and the computer program may be stored in a computer-readable storage medium. When the computer program is executed by the processor, the above-mentioned functions defined in the methods disclosed in the embodiments of the present invention are executed.

In addition, the above-mentioned method steps and system units can also be implemented by using a controller and a computer-readable storage medium for storing a computer program that enables the controller to implement the functions of the above-mentioned steps or units.

In addition, it should be understood that computer-readable storage media (eg, memory) herein can be volatile memory or non-volatile memory, or can include both volatile and non-volatile memory. By way of example and not limitation, nonvolatile memory may include read only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory memory. Volatile memory may include random access memory (RAM), which may act as external cache memory. By way of example and not limitation, RAM is available in various forms such as synchronous RAM (DRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous Link DRAM (SLDRAM), and Direct Rambus RAM (DRRAM). The storage devices of the disclosed aspects are intended to include, but not be limited to, these and other suitable types of memory.

Those skilled in the art will also appreciate that the various exemplary logical blocks, modules, circuits, and algorithm steps described in connection with the disclosure herein may be implemented as electronic hardware, computer software, or combinations of both. To clearly illustrate this interchangeability of hardware and software, various illustrative components, blocks, modules, circuits, and steps have been described generally in terms of their functionality. Whether such functionality is implemented as software or hardware depends on the specific application and design constraints imposed on the overall system. Those skilled in the art may implement the functions in various ways for each specific application, but such implementation decisions should not be interpreted as causing a departure from the scope of the disclosed embodiments of the present invention.

The various exemplary logical blocks, modules, and circuits described in connection with the disclosure herein can be implemented or executed using the following components designed to perform the functions herein: general purpose processors, digital signal processors (DSPs), application specific integrated circuits (ASIC), Field Programmable Gate Array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination of these components. A general-purpose processor may be a microprocessor, but in the alternative, the processor may be any conventional processor, controller, microcontroller, or state machine. A processor may also be implemented as a combination of computing devices, eg, a combination of a DSP and a microprocessor, multiple microprocessors, one or more microprocessors in combination with a DSP, and/or any other such configuration.

The steps of a method or algorithm described in connection with the disclosures herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of the two. A software module may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium known in the art. An exemplary storage medium is coupled to the processor, such that the processor can read information from, and write information to, the storage medium. In an alternative, the storage medium may be integrated with the processor. The processor and storage medium may reside in an ASIC. The ASIC may reside in the user terminal. In an alternative, the processor and storage medium may reside in the user terminal as discrete components.

In one or more exemplary designs, functions may be implemented in hardware, software, firmware, or any combination thereof. If implemented in software, the functions may be stored on or transmitted over as one or more instructions or code on a computer-readable medium. Computer-readable media includes both computer storage media and communication media including any medium that facilitates transfer of a computer program from one place to another. A storage medium can be any available medium that can be accessed by a general purpose or special purpose computer. By way of example and not limitation, the computer-readable medium may include RAM, ROM, EEPROM, CD-ROM or other optical disk storage devices, magnetic disk storage devices or other magnetic storage devices, or may be used to carry or store instructions in the form of or data structures and any other medium that can be accessed by a general purpose or special purpose computer or a general purpose or special purpose processor. Also, any connection is properly termed a computer-readable medium. For example, if coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwave are used to send software from a website, server, or other remote source, the above coaxial cable Cable, fiber optic cable, twisted pair, DSL or wireless technologies such as infrared, radio and microwave are all included in the definition of medium. As used herein, magnetic disks and optical disks include compact disks (CDs), laser disks, optical disks, digital versatile disks (DVDs), floppy disks, blu-ray disks, where disks usually reproduce data magnetically, while optical disks reproduce data optically with lasers . Combinations of the above should also be included within the scope of computer-readable media.

The above are exemplary embodiments of the present disclosure, but it should be noted that various changes and modifications may be made without departing from the scope of the disclosure of the embodiments of the present invention as defined in the claims. The functions, steps and/or actions of the method claims in accordance with the disclosed embodiments described herein need not be performed in any particular order. Furthermore, although elements disclosed in the embodiments of the present invention may be described or claimed in the singular, unless explicitly limited to the singular, the plural may also be construed.

It should be understood that, as used herein, the singular form "a" is intended to include the plural form as well, unless the context clearly supports an exception. It will also be understood that "and/or" as used herein is meant to include any and all possible combinations of one or more of the associated listed items.

The above-mentioned embodiments of the present invention disclose the serial numbers of the embodiments only for description, and do not represent the advantages and disadvantages of the embodiments.

Those of ordinary skill in the art can understand that all or part of the steps of implementing the above embodiments can be completed by hardware, or can be completed by instructing relevant hardware through a program, and the program can be stored in a computer-readable storage medium. The storage medium can be a read-only memory, a magnetic disk or an optical disk, and the like.

Those of ordinary skill in the art should understand that the discussion of any of the above embodiments is only exemplary, and is not intended to imply that the scope (including the claims) disclosed by the embodiments of the present invention is limited to these examples; under the idea of the embodiments of the present invention , the technical features in the above embodiments or different embodiments can also be combined, and there are many other changes in different aspects of the above embodiments of the present invention, which are not provided in detail for the sake of brevity. Therefore, any omission, modification, equivalent replacement, improvement, etc. made within the spirit and principle of the embodiments of the present invention should be included within the protection scope of the embodiments of the present invention.

Claims (10)

1. a monitoring method of multiple operating systems, is characterized in that, described method comprises: Make the monitored operating system remotely mount the first file system shared by the monitoring platform system; causing the operating system to redirect the collected collection information to a first redirection file, and store the first redirection file in the first file system; storing the second redirection file redirected by the log file of the operating system in the first file system; The monitoring platform system is configured to configure a system monitoring table according to the collected information, and regularly monitor the second redirection file of each of the operating systems in the first file system according to the system monitoring table. 2. The method for monitoring multiple operating systems according to claim 1, wherein the collected information comprises: the second file system, memory, and CPU usage of the monitored operating system, as well as hostname, IP ,time. 3. The monitoring method for multiple operating systems according to claim 1, wherein the monitoring platform system is configured to configure a system monitoring table according to the collected information, and regularly monitor the first file according to the system monitoring table The second redirection file of each of the operating systems in the system further includes: backing up the second redirection file in the first file system to a backup file system; In response to each execution of monitoring, incremental comparative monitoring is performed on the second redirection file and the log file of the backup file system. 4. The monitoring method for multiple operating systems according to claim 3, wherein the method further comprises: In response to the absence of the increment, it is determined that an exception occurs; In response to the increment, the alarm key field matching is performed on the increment of all the log files, and in response to the successful matching of the keyword, an alarm message is issued. 5. The monitoring method for multiple operating systems according to claim 3, wherein the method further comprises: In response to the completion of the incremental comparison monitoring of the log file, the log file in the first file system is copied to the backup file system. 6. A monitoring device for multiple operating systems, wherein the device comprises: a connection module, the connection module is configured to enable the monitored operating system to remotely mount the first file system shared by the monitoring platform system; an information collection module, which is configured to enable the operating system to redirect the collected collection information to a first redirection file, and store the first redirection file in the first file system; a log module, the log module is configured to store the second redirected file redirected by the log file of the operating system in the first file system; A monitoring module, the monitoring module is configured to enable the monitoring platform system to configure a system monitoring table according to the collected information, and to regularly monitor all of the operating systems in the first file system according to the system monitoring table. the second redirection file. 7. The monitoring device for multiple operating systems according to claim 6, wherein the monitoring module is further configured as: backing up the second redirection file in the first file system to a backup file system; In response to each execution of monitoring, incremental comparative monitoring is performed on the second redirection file and the log file of the backup file system. 8. The monitoring device for multiple operating systems according to claim 7, wherein the monitoring module is further configured as: In response to the absence of the increment, it is determined that an exception occurs; In response to the increment, the alarm key field matching is performed on the increment of all the log files, and in response to the successful matching of the keyword, an alarm message is issued. 9. A computer equipment, characterized in that, comprising: at least one processor; and A memory, wherein the memory stores a computer program that can be executed on the processor, wherein the processor executes the method according to any one of claims 1-5 when the processor executes the program. 10. A computer-readable storage medium storing a computer program, wherein the computer program executes the method of any one of claims 1-5 when the computer program is executed by a processor.

Images