Monitoring System Based on Complex Event Processing Engine

Abstract

The invention discloses a complicated event processing engine based monitoring system. The system comprises one or more agents, a complicated event processing engine, a memory and a main control unit, wherein the agents are deployed in application servers; one agent is deployed in one application server; the agents are used for monitoring the application servers, collecting event information of applications and sending the event information to the complicated event processing engine; the complicated event processing engine is used for filtering and analyzing the event information based on a preconfigured rule to obtain final alarm data and sending the event information to the memory for storage; the memory is used for storing the alarm data obtained by the complicated event processing engine and storing rules required by the complicated event processing engine; and the main control unit is used for controlling the configuration of the rules required by the complicated event processing engine, controlling the display of a front-end interface based on the alarm data and controlling the agents; and the front-end interface is used for a user to configure the rules and is used for showing the alarm data to the user.

Description

technical field [0001] The invention relates to the technical field of monitoring, in particular to a monitoring system based on a complex event processing engine. Background technique [0002] In the current monitoring field, various monitoring technologies and monitoring software emerge in endlessly. Through the research on these monitoring technologies, it is found that basically all the alarm methods adopted by the monitoring technologies are based on the mode of "satisfying a single rule-triggering an alarm", such as "a server whose CPU IDLE is lower than 10%, then alarm", or "If the disk space usage of a server exceeds 80%, call the police", this type of rule can play a basic role in capturing and alerting abnormal situations. [0003] However, with the rapid development of the software industry and the rise of various software architectures such as distributed, virtualized, and cloud services, the above-mentioned traditional monitoring and alarm technology can no lon...

AI Technical Summary

Problems solved by technology

[0003] However, with the rapid development of the software industry and the rise of various software architectures such as distributed, virtualized, and cloud services, the above-mentioned traditional monitoring and alarm technology can no longer meet the current operation and maintenance needs, because through the traditional "threshold + comparison "Monitoring technology, when the service scale is large to a certain extent, a large number of alarm events will be generated in a very short time interval or even within the same period

Therefore, the defect in the current operation and maintenance is how to remove the false and save the true when a large number of servers and a large number of alarm events occur concurrently, and extract the key alarm information most needed by the administrator from the massive monitoring events. If this can be done, it will be extremely Save the administrator's energy to a great extent and greatly improve the alarm efficiency

Images