Root cause server positioning method and root cause server positioning device

Abstract

The invention provides a root cause server positioning method and a root cause server positioning device. The root cause server positioning method is used for positioning a root cause server causing abrupt change of outlet flow of a resource pool comprising a plurality of servers, and comprises the following steps: collecting sampling data of the outlet flow of the resource pool and sampling data of outflow flow of each server in the resource pool; calculating an abrupt change detection threshold value of the resource pool by using the sampling data of the outlet flow of the resource pool, and performing abrupt change detection on the outlet flow of the resource pool by using the abrupt change detection threshold value of the resource pool; when it is detected that the outlet flow of the resource pool changes suddenly, calculating an abrupt change detection threshold value of each server according to the sampling data of the outflow flow of each server in the resource pool, and performing abrupt change detection on the outflow flow of each server by using the abrupt change detection threshold value of each server to obtain a flow change amount of each server; and determining the root cause server which causes the abrupt change of the outlet flow of the resource pool according to the flow change amount of each server.

Description

technical field [0001] The present invention relates to resource pool network operation and maintenance monitoring technology, in particular to a method and device for locating the root cause server that causes sudden changes in resource pool outlet traffic. Background technique [0002] The resource pool monitoring system is an important guarantee for the smooth operation of the cloud platform, and network traffic monitoring is an important part of the resource pool monitoring system, and it is also an important means for operation and maintenance personnel to discover network anomalies and troubleshoot network failures in a timely manner. [0003] The distributed network monitoring system collects traffic data in two ways: active mode and passive mode. Active and passive are relative to clients collecting traffic data. Active mode means that the client periodically actively collects traffic data and returns it to the server without the intervention of the server; passive ...

AI Technical Summary

Problems solved by technology

[0005] 1) In the same time interval, the time stamps of the traffic sampling points of each port may be inconsistent, and the number of sampling points may also be different;

[0006] 2) Due to the influence of network and equipment performance, the sampling time interval of each port may be inconsistent with the set value, and there are fluctuation errors;

[0007] 3) Since the sampling time interval is at the minute level, the monitored flow rate is the average value within this interval, which cannot reflect the actual peak change of the flow rate;

[0008] 4) Because the sampling time is not synchronized, there is an error in the sampling interval, so that the flow data of each port cannot establish a one-to-one correspondence in time

[0012] 2) High risk of misjudgment of root-cause devices

When adopting the method of top-down and step-by-step troubleshooting of root devices, due to the existence of traffic sampling errors and traffic superposition factors, once the intermediate calculation deviates and the wrong device branch is selected, it is likely to lead to misjudgment of the root device.

Images