Abnormity alarm method and device and electronic equipment

Abstract

The embodiment of the invention provides an abnormity alarm method and device and electronic equipment. The abnormity alarm method includes the steps: obtaining a plurality of pieces of abnormal information which are generated and do not give an alarm, wherein the plurality of pieces of abnormal information are generated by monitoring the monitored equipment; for the plurality of pieces of abnormal information, determining at least two pieces of strongly associated abnormal information in the plurality of pieces of abnormal information according to a strong association rule established in advance according to a data association mining algorithm, the strong association rule comprising: all abnormal information combinations having a strong association relationship in all possible abnormal information; combining the at least two pieces of strongly associated abnormal information into one piece of alarm information; and giving an alarm according to the alarm information. By applying the embodiment of the invention, a plurality of pieces of strongly associated abnormal information are combined into one piece of alarm information, so that redundant alarm information is reduced, and the efficiency of operation and maintenance personnel is improved, and quick loss stopping is facilitated.

Description

technical field [0001] The invention relates to the technical field of equipment monitoring, in particular to an abnormal alarm method, device and electronic equipment. Background technique [0002] Currently relying on open source monitoring systems, such as open-falcon, can collect various information about the running status of each cache server (cache machine), including CPU load, disk read and write status, network parameters, kernel parameters, process resource consumption, etc. And based on the rules set for these information, each item of information is monitored, and when a certain item of information meets the alarm rules, an alarm is triggered. [0003] The inventor found in the process of realizing the present invention that there are at least the following problems in the prior art: [0004] The monitoring system in the prior art monitors each item of information, and when multiple pieces of information are abnormal, an alarm will be triggered for multiple piec...

AI Technical Summary

Problems solved by technology

However, the same fault may trigger multiple upstream and downstream information anomalies, that is to say, the same fault will cause the monitoring system to trigger multiple alarms, which will lead to redundant alarm information and insufficient alarm effectiveness

Furthermore, at present, more and more online servers are deployed, and more and more projects are monitored by the monitoring system. The redundant alarm information brought by the existing alarm method will further affect the effectiveness of the alarm and affect the operation and maintenance. Efficiency of personnel troubleshooting

Images