An alarm processing method and device

Abstract

The application relates to the field of cloud computing technology, and particularly to an alert processing method and device, which are used for carrying out processing of invalid-alert elimination on to-be-processed alert information, which is sent by an alert source, after the to-be-processed alert information is received, and can thus effectively decrease the number of alerts sent to an alertreceiver, reduce redundant data, and reduce pressure caused on the alert receiver. The method includes: receiving the to-be-processed alert information sent by the alert source, wherein the to-be-processed alert information includes a tag set, and the tag set contains at least one tag; according to a source matching tag set corresponding to historical alert information, determining whether the tagset carried in the to-be-processed alert information includes a target matching tag set corresponding to the source matching tag set; and carrying out suppression processing on the to-be-processed alert information when it is determined that the tag set carried in the to-be-processed alert information includes the target matching tag set corresponding to the source matching tag set.

Description

technical field [0001] The present application relates to the technical field of cloud computing, and in particular to an alarm processing method and device. Background technique [0002] Cloud Computing (Cloud Computing) is a computing method based on the Internet. In this way, the software and hardware resources and information shared on the Internet can be provided to various terminals and other devices on demand. Compared with traditional operation and maintenance, cloud operation and maintenance is very different in terms of operation and maintenance form, management resource type, management resource quantity, monitoring granularity, degree of automation and intelligence, etc. The form of operation and maintenance has gradually changed from traditional manual troubleshooting and problem solving to automatic operation and maintenance, and fault self-healing. The types of management resources range from traditional operation and maintenance physical devices to physical ...

AI Technical Summary

Problems solved by technology

[0003] In the cloud operation and maintenance scenario, the diversity of resource types and the complexity of management methods in the cloud operation and maintenance center determine that the number of resources managed by the operation and maintenance management platform will be several times larger than that in the traditional operation and maintenance scenario. Correspondingly, the number and frequency of alarms generated in the operation and maintenance management platform will be much higher than those in traditional operation and maintenance, which will put greater pressure on the system performance of the operation and maintenance management platform

In addition, not all alarms generated in the operation and maintenance management platform are effective alarms. For example, if the entire cluster network of a virtual machine cluster monitored by the platform is unreachable, the cluster unreachable alarm will be triggered first, but the The virtual machine and the application on each virtual machine will also trigger an unreachable alarm. At this time, a large number of alarms will be generated in the operation and maintenance management platform system at the same time, but for the operation and maintenance personnel in this scenario, they only need to receive one Cluster unreachable alarms are fine, and other alarms are triggered by cluster unreachable alarms, which are of no value in actual operation and maintenance and monitoring, and are invalid alarms; however, whether they are valid alarms or invalid alarms, they will be directly issued by The alarm source is sent to the alarm receiver, causing a large number of alarms to be generated concurrently, resulting in a lot of redundant data, which puts pressure on the system server

Images