Monitoring method and device, equipment and storage medium

Abstract

The invention provides a monitoring method and device, equipment and a storage medium. The monitoring method comprises the steps that a monitoring analysis system view display request of a monitoring object is received; the display request comprises a to-be-displayed time span; according to the time span, obtaining monitoring data and alarm data of the monitoring object in the time span and snapshot data of other resources associated with the monitoring object from a database; according to the monitoring data and the alarm data of the monitoring object in the time span and snapshot data of other resources associated with the monitoring object, a monitoring analysis visual view of the monitoring object is drawn; generating a play control view according to the alarm data of the monitored object in the time span and the time span; and displaying the monitoring analysis visualization view and the playing control view. According to the method provided by the invention, the intuition and flexibility of cloud resource monitoring and alarm analysis for the cloud host are improved, and then the timely and accurate positioning of the cloud resource alarm reason can be realized.

Description

Technical Field

[0001] The present application relates to the field of monitoring, and in particular to a monitoring method, device, equipment and storage medium. Background Art

[0002] With the development of cloud computing technology, cloud resource usage scenarios such as enterprise cloud migration are becoming more and more diverse, and the demand for monitoring the usage of cloud resources is also increasing. Timely monitoring of cloud resource usage and timely and accurate analysis of the causes of cloud resource alarms when alarms occur are crucial to ensure the safe and stable operation of businesses deployed on cloud resources and the precise control of cloud resources.

[0003] Currently, the monitoring and alarm analysis of cloud resource usage suffer from poor flexibility, poor operability, and lack of intuitiveness, which results in users being unable to accurately locate the causes of cloud resource alarms in a timely manner. Summary of the invention

[0004] The present application provides a monitoring method, apparatus, device and storage medium to solve the problems of poor flexibility, poor operability and lack of intuitiveness in monitoring and alarm analysis of cloud resource usage.

[0005] In a first aspect, the present application provides a monitoring method, the method comprising:

[0006] Receive a monitoring and analysis system view display request for a monitoring object; the display request includes: a time span to be displayed;

[0007] According to the time span, the monitoring data and alarm data of the monitored object within the time span, as well as the snapshot data of other resources associated with the monitored object, are acquired from the database; the snapshot data includes: the monitoring data and alarm data of the other resources;

[0008] Draw a monitoring analysis visualization view of the monitored object according to the monitoring data and alarm data of the monitored object within the time span, and snapshot data of other resources associated with the monitored object;

[0009] Generate a playback control view according to the alarm data of the monitored object within the time span and the time span; the playback control view is used to control the playback of data in the monitoring analysis visualization view;

[0010] The monitoring analysis visualization view and the playback control view are displayed.

[0011] Optionally, the playback control view includes: a timeline; the timeline includes: a current time indicator, a time scale line, and at least one alarm indicator;

[0012] The generating of the playback control view according to the alarm data of the monitoring object within the time span and the time span includes:

[0013] Generating a time scale line of the time axis according to the time span;

[0014] At least one alarm indicator is generated according to the alarm data of the monitored object within the time span, wherein one alarm indicator is used to indicate the identification of the corresponding alarm and the time span of the alarm duration; alarm indicators corresponding to alarms of different levels have different colors.

[0015] Optionally, the playback control view further includes at least one of the following controls: a playback control control, a playback speed selection control, and a time span selection control;

[0016] The method further comprises:

[0017] In response to an operation on a target control, the operation corresponding to the target control is performed on the monitoring analysis visualization view.

[0018] Optionally, the method further includes:

[0019] In any monitoring cycle, the monitoring data of the monitored object is obtained; the monitoring data includes static data and dynamic data;

[0020] Determining whether an alarm occurs in the monitoring object during the monitoring period according to the monitoring data of the monitoring object;

[0021] If an alarm occurs in the monitored object, snapshot data of other resources associated with the monitored object is captured;

[0022] The monitoring data, alarm data, and snapshot data of the monitored object in the monitoring period are stored.

[0023] Optionally, determining whether an alarm occurs for the monitored object in the monitoring period according to the monitoring data of the monitored object includes:

[0024] If the monitoring data of the monitored object exceeds the preset monitoring data threshold in the monitoring period, and the N-1 monitoring periods before the monitoring period all exceed the preset monitoring data threshold, it is determined that an alarm occurs, and N is greater than 1;

[0025] or,

[0026] Determining a data threshold of the monitoring data according to a monitoring time of the monitoring data;

[0027] If the monitoring data exceeds the preset data threshold during the monitoring time, it is determined that an alarm occurs.

[0028] Optionally, determining a data threshold of the monitoring data according to a monitoring time of the monitoring data includes:

[0029] According to the monitoring time, a data threshold prediction model is used to determine the data threshold of the monitoring data.

[0030] Optionally, the method further includes:

[0031] Create a monitoring resource group;

[0032] Adding the resources of the monitored object to the corresponding monitoring resource group;

[0033] The determining, according to the monitoring data of the monitored object, whether the monitored object generates an alarm during the monitoring period includes:

[0034] It is determined whether an alarm occurs in the monitoring object during the monitoring period according to the monitoring data of the monitoring object and the mapping relationship between the monitoring resource group and the alarm judgment strategy.

[0035] In a second aspect, the present application provides a monitoring device, comprising:

[0036] A receiving module is used to receive a monitoring and analysis system view display request of a monitoring object; the display request includes: a time span to be displayed;

[0037] An acquisition module, used to acquire, from a database, monitoring data and alarm data of the monitored object within the time span, as well as snapshot data of other resources associated with the monitored object, according to the time span; the snapshot data includes: monitoring data and alarm data of other resources;

[0038] A drawing module, used to draw a monitoring analysis visualization view of the monitored object according to the monitoring data and alarm data of the monitored object within the time span, and snapshot data of other resources associated with the monitored object;

[0039] A generation module, used to generate a playback control view according to the alarm data of the monitored object within the time span and the time span; the playback control view is used to control the playback of data in the monitoring analysis visualization view;

[0040] A display module is used to display the monitoring analysis visualization view and the playback control view.

[0041] In a third aspect, the present application provides an electronic device, comprising: a processor, and a memory communicatively connected to the processor;

[0042] The memory stores computer-executable instructions;

[0043] The processor executes the computer-executable instructions stored in the memory to implement the method as described in any one of the first aspects.

[0044] In a fourth aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are executed by a processor, they are used to implement the method as described in any one of the first aspects.

[0045] In a fifth aspect, the present application provides a computer program product, including a computer program, which implements the method described in the first aspect when executed by a processor.

[0046] The monitoring method, device, banking system and storage medium provided by the present application, the monitoring and analysis system receives a monitoring and analysis system view display request of a monitored object, and the display request includes a time span to be displayed; then, according to the time span, the monitoring data, alarm data and snapshot data of other resources associated with the monitored object of the monitored object within the time span are obtained from the database; then, according to the monitoring data, alarm data and snapshot data of other resources associated with the monitored object of the monitored object within the time span, the monitoring and analysis visualization view of the monitored object is drawn; according to the alarm data of the monitored object within the time span and the time span, a playback control view is generated; finally, the monitoring and analysis visualization view and the playback control view are displayed.

[0047] Since the monitoring and analysis system can play the monitoring and analysis visualization view within the time span by playing, and then realize the viewing and analysis of the cloud resource usage of the monitored object within the time span, therefore, this method can realize the comprehensive analysis of the cloud resource usage of the monitored object more intuitively and flexibly. Compared with the existing technology that can only view the alarm list, this method of playing and displaying to realize the cloud resource usage of the monitored object, and the viewing and analysis of the alarm situation is more intuitive, flexible and convenient. The user can trace back the state of the monitored object at any historical time, which improves the efficiency of problem tracing, and can be used to diagnose, repair, and solve problems such as abnormal faults of the monitored object, and reduce the losses caused by the fault alarm of the monitored object to production. In addition, the user can intuitively and quickly view the alarms that occur, without switching between different pages to find monitoring data, which is easy to operate and can effectively improve the efficiency of problem location and troubleshooting. In addition, the user can also combine the alarm snapshot to view the operation of the relevant resources when the alarm occurs, and then more accurately realize the analysis of the cause of the alarm. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0049] Figure 1 A schematic diagram of the first monitoring method provided in this application;

[0050] Figure 2 A schematic diagram of the second monitoring method provided in this application;

[0051] Figure 3 A schematic diagram of a monitoring analysis visualization view and a playback control view provided for this application;

[0052] Figure 4 A schematic diagram of a third monitoring method provided in an embodiment of the present application;

[0053] Figure 5 A schematic diagram of the first monitoring method provided for this application;

[0054] Figure 6 A schematic diagram of a second monitoring method provided for this application;

[0055] Figure 7 A schematic diagram of the structure of a monitoring device provided in this application;

[0056] Figure 8 A schematic diagram of the structure of an electronic device 110 provided in this application.

[0057] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0058] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0059] The following is an explanation of some of the terms involved in this application:

[0060] Snapshot: A fully usable copy of a specified data set, which includes an image of the corresponding data at a certain point in time (the time when the copy starts). A snapshot can be a copy of the data it represents or a replica of the data.

[0061] Cloud hosting: Cloud hosting is an important component of cloud computing in infrastructure applications, and is located at the bottom of the cloud computing industry chain pyramid. Cloud hosting is a network infrastructure capacity rental service that integrates computing, storage and network resources, and can provide server rental services based on the cloud computing model.

[0062] Virtual machine: refers to a complete computer system that is simulated by software and has complete hardware system functions and runs in a completely isolated environment. Any work that can be done in a physical computer can also be done in a virtual machine.

[0063] Today, cloud computing technology plays an important role in the digital transformation of enterprises. More and more enterprises are migrating their businesses to the cloud. It has become an inevitable trend for enterprises to move to the cloud, achieving advantages such as resource sharing, elastic expansion and contraction, and rapid deployment. However, the complexity of cloud computing architecture also brings great challenges to operation and maintenance monitoring. Cloud computing technology involves the use of a variety of cloud resources, such as storage resources, computing resources, and network resources. Users can obtain corresponding cloud resources by renting cloud hosts. In order to facilitate users to operate and manage various cloud resources, it is often necessary to monitor various cloud resources related to the host, such as the central processing unit (CPU) occupancy rate of the cloud host, the response time of the database, and the network outbound bandwidth of the network address translation (NAT) gateway. When the indicators in the monitored cloud resources reach the preset trigger conditions, an alarm will be generated and the user will be notified.

[0064] In the prior art, a monitoring and analysis system is usually deployed in the cloud to monitor various cloud resources in the cloud. When an alarm occurs, the monitoring and analysis system outputs the alarm information in the form of an alarm information list to a terminal (such as a computer, mobile phone, tablet, etc.) for the user to view. After seeing the alarm information, the user can choose to view the type of cloud resource where the alarm occurs in the corresponding alarm list, and switch to the monitoring page to find the monitoring data of the resource where the alarm occurs, and then view the monitoring data of each indicator of the resource one by one, so as to locate the problem and troubleshoot the fault. It takes a lot of time to locate the problem and troubleshoot, and the operation is cumbersome and inefficient.

[0065] In this case, when a cloud resource frequently generates a series of fault alarms, it is difficult for users to perceive the correlation between these alarms by viewing reports, logs and other data, and it is impossible to quickly and accurately locate the cause of the fault, which affects the user's use of cloud resources.

[0066] The inventors considered that if cloud resource alarms can be dynamically displayed to users in chronological order, users will be able to more intuitively understand the cloud resource usage and alarm status, be familiar with the temporal relationship of the cloud resource alarms, and can more quickly and accurately analyze the cloud resource alarms, thereby quickly and accurately locating the cause of the alarm.

[0067] In view of this, the present application provides a monitoring method, which can dynamically display the resource usage of monitoring objects such as cloud hosts and the occurrence of alarms in a time series based on the user's display request, so that users can more intuitively understand the resource usage of the cloud host. When the cloud host alarms, users can also more conveniently and quickly analyze the causes of the cloud host alarm, thereby improving the convenience and efficiency of cloud host monitoring and analysis.

[0068] The execution subject of this application may be a monitoring and analysis system, and this application does not limit the composition of the monitoring and analysis system. The monitoring and analysis system may be deployed on an electronic device or on a cluster of electronic devices. The electronic device mentioned here may be, for example, a server, a computer, etc. The monitoring and analysis system may be deployed in the cloud or locally, and this application does not limit it.

[0069] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0070] Figure 1 A schematic diagram of the first monitoring method provided in this application, such as Figure 1 As shown, the method comprises the following steps:

[0071] S101: Receive a monitoring and analysis system view display request from a monitored object.

[0072] The monitoring object may be any object deployed in the cloud, such as a cloud host or a virtual machine.

[0073] The display request includes: the time span to be displayed. The time span here can be represented by a start time and an end time, or it can be a time period, such as the last day, the last week, etc. In addition to including the time span, this application does not limit whether the display request includes other content. For example, the display request can also include a display instruction for requesting the monitoring and analysis system to display the monitoring and analysis system view within the time span.

[0074] The way in which the monitoring and analysis system receives the monitoring and analysis view display request of the monitored object is related to the location where the monitoring and analysis system is deployed. Exemplarily, if the monitoring and analysis system is deployed in the cloud, the monitored object can, for example, accept the monitoring and analysis system view display request of the monitored object sent by a terminal (such as a mobile phone, tablet, or computer). If the monitoring and analysis system is deployed locally, the monitoring and analysis system can, for example, be deployed with an interactive interface, which is used to obtain the monitoring and analysis system view display request of the monitored object input by the user through the interactive interface.

[0075] S102. Acquire monitoring data and alarm data of the monitored object within the time span from a database according to the time span, as well as snapshot data of other resources associated with the monitored object.

[0076] The above-mentioned monitoring data is data that characterizes the usage of cloud resources of the monitored object, and may include, for example, only dynamic data, or may include static data and dynamic data. The static data mentioned here is data that does not change dynamically over time, and may include, for example, the cloud resource type included in the monitored object, the cloud resource identifier, the identifier of the service deployed on the cloud resource, the relationship between cloud resources, and the identifier of the monitored object. When the monitored object is a cloud host, the static data may include, for example, the identifier of the cloud host, the identifier of the service deployed by the cloud host, the network card bound to the cloud host, the identifier of the host where the cloud host is located, the cloud disk bound to the cloud host, and other information.

[0077] Dynamic data refers to data that changes dynamically over time. Exemplarily, dynamic data may include any one or more of the CPU usage, memory usage, disk usage, memory usage, storage usage, storage usage, disk read / write rate, disk read / write bandwidth, disk read / write waiting time, network inflow / outflow rate, network inflow / outflow data packets, packet loss rate, number of packet losses, number of Transmission Control Protocol (TCP) connections, etc. of the monitored object.

[0078] Specifically, the monitoring data, alarm data, and snapshot data of other resources associated with the monitoring object include specific contents related to the monitoring and analysis system view.

[0079] The above-mentioned alarm data is data that characterizes whether an alarm occurs in the monitoring and analysis system within a time span and the alarm situation. For example, it may include data such as the time when the alarm occurs and the alarm level. The above-mentioned snapshot data includes: monitoring data and alarm data of other resources. Exemplarily, if the monitored object is a cloud host or a virtual machine, the other resource may be, for example, the host machine where the monitored object is deployed. The monitoring data of other resources may be, for example, the CPU usage, ping reachability status, memory usage, etc. of the host machine.

[0080] In this step, the monitoring and analysis system obtains the monitoring data, alarm data, and snapshot data of other resources associated with the monitored object from the database according to the time span, and then displays the monitoring and analysis system view of the monitored object based on this.

[0081] The monitoring and analysis system, for example, stores in a database in chronological order the monitoring data, alarm data, and snapshot data of other resources associated with the monitoring object collected according to a preset data time collection granularity. The present application defines the specific value of the above-mentioned time collection granularity, which can be set by those skilled in the art according to requirements, for example, it can be collected once every minute. The monitoring and analysis system, for example, selects the monitoring data, alarm data, and snapshot data of other resources associated with the monitoring object corresponding to the time span in the database according to the time span.

[0082] S103: Draw a monitoring analysis visualization view of the monitored object based on the monitoring data and alarm data of the monitored object within a time span, as well as snapshot data of other resources associated with the monitored object.

[0083] The above monitoring and analysis visualization view is used to display the cloud resource usage of the monitored object. On this basis, this application does not limit the specific display form of the monitoring and analysis visualization view of the monitored object.

[0084] The way in which the monitoring and analysis system draws the monitoring and analysis visualization view of the monitoring object is related to the content included in the monitoring and analysis visualization view. Exemplarily, the monitoring and analysis visualization view can be a flattening of monitoring data, alarm data, and snapshot data of other resources associated with the monitoring object, that is, all the above data is directly output to the monitoring and analysis visualization view for display. This application does not limit the way of data flattening.

[0085] Or, continue to refer to Figure 3 The monitoring and analysis visualization view can be a display of the cloud resources of the monitored object after logical classification. According to the layout of the monitoring and analysis visualization view, the monitoring and analysis system adds the monitoring data, alarm data, and snapshot data of other resources associated with the monitored object to the corresponding position of the view to realize the drawing of the monitoring and analysis visualization view of the monitored object.

[0086] Alternatively, the content displayed in the monitoring analysis visualization view is obtained after secondary processing of the monitoring data, alarm data, and snapshot data of other resources associated with the monitoring object. Figure 3 In addition to displaying monitoring data, alarm data, and snapshot data of other resources associated with the monitored object, the monitoring analysis visualization view can also display the health of the monitored object. The health level can be calculated based on the monitoring data, alarm data, and the above snapshot data to characterize the overall operating status of the monitored object, and can include multiple levels such as healthy, good, and unhealthy.

[0087] Alternatively, the monitoring and analysis visualization view may be a two-dimensional / three-dimensional model diagram of the monitoring object, with the monitoring data, alarm data, and snapshot data of other resources associated with the monitoring object labeled next to the model diagram. In this case, the monitoring and analysis system may, for example, add the above-mentioned monitoring data, alarm data, and snapshot data of other resources associated with the monitoring object to the labels of the model diagram according to the corresponding relationship, so as to realize the drawing of the monitoring and analysis visualization view of the monitoring object.

[0088] It should be understood that within the time span, as time changes, the data in the monitoring and analysis visualization view also changes accordingly.

[0089] S104. Generate a playback control view according to the alarm data of the monitored object within the time span and the time span; the playback control view is used to control the playback of data in the monitoring analysis visualization view.

[0090] The monitoring and analysis system generates a playback control view in a manner related to the content included in the playback control view according to the alarm data of the monitoring object within the time span and the time span.

[0091] Exemplarily, the playback control view may include, for example, a timeline and a playback control button. The playback control button is used to control the playback and stop of data in the monitoring and analysis visualization view. The monitoring and analysis system may, for example, obtain the playback control instruction input by the user by clicking the playback control button, thereby realizing the control of the playback of data in the monitoring and analysis visualization view. The monitoring and analysis system may, for example, generate a timeline of the playback control view based on the alarm data of the monitored object within the time span and the time span. For example, the length of the timeline may correspond to the time span, and the timeline may include an alarm label corresponding to the time of the timeline generated based on the alarm data within the time span, and the user may view the alarm status of the monitored object at that moment by clicking the alarm label.

[0092] Alternatively, the playback control view may also include a variety of controls, such as a playback speed selection control, so as to control the playback speed of the data in the monitoring and analysis visualization view through the control.

[0093] It should be noted that the above steps S103 and S104 can be executed sequentially or simultaneously, and this application does not limit them. When S103 and S104 are executed sequentially, this application does not limit which step is executed first.

[0094] S105: Display the monitoring analysis visualization view and the playback control view.

[0095] In this step, the monitoring and analysis system displays the monitoring and analysis visualization view and the playback control view, so that users can use the monitoring and analysis visualization view and the playback view to more efficiently and intuitively understand the usage of the cloud resources of the monitored object, and can intuitively, timely and accurately locate the cause of the alarm when the cloud resources of the monitored object alarm.

[0096] In one implementation, the monitoring and analysis system is deployed with a display interface, through which the monitoring and analysis visualization view and the playback control view are displayed. In another implementation, the monitoring and analysis system sends the monitoring and analysis visualization view and the playback control view to the terminal, and uses the terminal to display the monitoring and analysis visualization view and the playback control view.

[0097] In this embodiment, the monitoring and analysis system receives a monitoring and analysis system view display request of a monitored object, and the display request includes a time span to be displayed; then, according to the time span, the monitoring data, alarm data, and snapshot data of other resources associated with the monitored object of the monitored object within the time span are obtained from the database; then, according to the monitoring data, alarm data, and snapshot data of other resources associated with the monitored object of the monitored object within the time span, a monitoring and analysis visualization view of the monitored object is drawn; according to the alarm data of the monitored object within the time span, and the time span, a playback control view is generated; finally, the monitoring and analysis visualization view and the playback control view are displayed.

[0098] Since the monitoring and analysis system can play the monitoring and analysis visualization view within the time span by playing, and then realize the viewing and analysis of the cloud resource usage of the monitored object within the time span, therefore, this method can realize the comprehensive analysis of the cloud resource usage of the monitored object more intuitively and flexibly. Compared with the existing technology that can only view the alarm list, this method of playing and displaying to realize the cloud resource usage of the monitored object, and the viewing and analysis of the alarm situation is more intuitive, flexible and convenient. The user can trace back the state of the monitored object at any historical time, which improves the efficiency of problem tracing, and can be used to diagnose, repair, and solve problems such as abnormal faults of the monitored object, and reduce the losses caused by the fault alarm of the monitored object to production. In addition, the user can intuitively and quickly view the alarms that occur, without switching between different pages to find monitoring data, which is easy to operate and can effectively improve the efficiency of problem location and troubleshooting. In addition, the user can also combine the alarm snapshot to view the operation of the relevant resources when the alarm occurs, and then more accurately realize the analysis of the cause of the alarm.

[0099] The following takes the example that the playback control view includes a time axis; the time axis includes a current time indicator, a time scale line, and at least one alarm indicator to explain how to generate the playback control view according to the alarm data of the monitored object within the time span and the time span. Figure 2 A flow chart of the second monitoring method provided in this application is as follows: Figure 2 As shown, step S104 may include the following steps:

[0100] S201. Generate time scale lines on the time axis according to the time span.

[0101] In this step, the monitoring and analysis system generates time scale lines of the time axis according to the time span, so as to display the time scale lines in the playback control view, so that the user can know the time span of the monitoring and analysis visualization view currently being played.

[0102] This application does not limit the specific form of the time scale lines on the time axis. Figure 3 A schematic diagram of a monitoring analysis visualization view and a playback control view provided by the present application, the time scale line can be, for example, Figure 3 This schematic diagram is a schematic diagram based on the start time of 2011 / 1 / 25 00:00:00 and the end time of 2011 / 1 / 26 00:00:00. It should be understood that Figure 3 The data shown are examples only.

[0103] Exemplarily, the monitoring and analysis system generates a corresponding time scale line at a position on the time axis corresponding to the start time in the time span; at the same time, the monitoring and analysis system generates a corresponding time scale line at a position on the time axis corresponding to the end time in the time span.

[0104] S202: Generate at least one alarm indicator according to the alarm data of the monitored object within a time span.

[0105] Among them, an alarm indicator is used to indicate the identifier of the corresponding alarm and the time span of the alarm.

[0106] The present application does not limit the representation method of the alarm identifier, for example, it can be the number of the cloud resource corresponding to the alarm, for example, Figure 3 As shown. The alarm indicator may be, for example, a time span that characterizes the duration of the alarm through its length. For example, the position covered by the alarm indicator on the time axis may be consistent with the time span.

[0107] Different alarm levels can be set for alarms of cloud resources of monitored objects, such as high, medium, and low levels. This application does not limit the way of dividing alarm levels, and the way of determining alarms of different levels. The colors of the alarm indicators corresponding to alarms of different levels can be different. This application does not limit the actual corresponding colors of alarms of different levels, for example, high level may correspond to red, medium level may correspond to orange, and low level may correspond to yellow. On this basis, this application does not limit the presentation form of the alarm indicator, for example, it may be as follows: Figure 3 It should be understood that Figure 3 This is for illustration only. In actual use, the alarm indicator may display different colors according to the alarm level.

[0108] Exemplarily, the alarm data may include, for example, an alarm identifier, a time span of the alarm duration, and an alarm level. The monitoring and analysis system may, for example, mark an alarm indicator corresponding to the time span on the time axis according to the time span of the alarm duration, determine the color of the alarm indicator according to the alarm level and a pre-stored mapping relationship between the alarm level and the color, and add a corresponding identifier to the alarm indicator to generate at least one alarm indicator.

[0109] In this embodiment, the monitoring and analysis system generates a time scale line of the time axis according to the time span; in this way, the time span can be marked, so that the user can clearly know the time span covered by the currently played monitoring and analysis visualization view. Subsequently, the monitoring and analysis system generates at least one alarm indicator according to the alarm data of the monitored object within the time span, wherein an alarm indicator is used to indicate the identification of the corresponding alarm and the time span of the alarm duration; the alarm indicators corresponding to different levels of alarms have different colors. In this way, the monitoring and analysis system can simply and clearly realize the characterization of which specific cloud resources of the monitored object have alarmed and the level of the alarm. In addition, since the monitoring and analysis system can display all the resources of the monitored object that have alarmed by means of the alarm indicator, the user can intuitively and conveniently know which specific cloud resources of the current monitored object have alarmed, without having to view the resources that have alarmed one by one by viewing the list, so that the user can more efficiently and intuitively analyze the cause of the alarm.

[0110] Optional, continue to refer to Figure 3 The timeline of the playback control view may also include a current time indicator to indicate the time corresponding to the currently played monitoring analysis visualization view data. Optionally, the user may also control the monitoring data played by the monitoring analysis visualization view by dragging the current time indicator. When the user drags the current time indicator to a certain time, the monitoring analysis visualization view will correspondingly play the monitoring data, alarm data, and snapshot data of related resources at that time.

[0111] Optional, continue to refer to Figure 3 , the playback control view may also include at least one of the following controls: a playback control control, a playback speed selection control, and a time span selection control. In this case, the monitoring and analysis system may also respond to the operation on the target control and perform the operation corresponding to the target control on the monitoring and analysis visualization view. The target control mentioned here may be any one or more of the above-mentioned playback control control, playback speed selection control, and time span selection control.

[0112] If the monitoring and analysis system has its own interactive interface, it can obtain the user's input operation for the target control through the interactive interface; or, if the monitoring and analysis system can also obtain the user's input operation for the target control through the terminal. For example, the user can realize the operation of the target space by clicking the corresponding control.

[0113] The playback control is used to control the playback time of the data in the monitoring and analysis visualization view. For example, the playback control can have two states: the first state: used to control the start of playback of the data in the monitoring and analysis visualization view; the second state: used to control the stop of playback of the data in the monitoring and analysis visualization view. Exemplarily, during playback, the playback control can be in the second state; when the data in the monitoring and analysis visualization view is not in the playback process, the playback control can be in the first state. Exemplarily, if the monitoring and analysis system obtains an operation on the playback control, such as a user clicking on the control, if the control is currently in the second state, the monitoring and analysis visualization view stays at the moment of stopping playback; if the space is currently in the first state, the monitoring data of the entire monitoring and analysis visualization view changes synchronously with the playback of the progress bar.

[0114] This control can be used to flexibly control the playback status of the monitoring and analysis visualization view, and thus more conveniently view the monitoring data, alarm data, and snapshot data of related resources of the monitored object.

[0115] The playback speed selection control is used to control the playback speed of the data in the monitoring and analysis visualization view, for example, it can be played at 0.5 times, 2 times or 3 times the speed. The monitoring and analysis system can, for example, obtain the playback speed entered by the user by clicking the control to control the playback speed of the data in the monitoring and analysis visualization view. Through this control, the data playback speed of the monitoring and analysis visualization view can be flexibly controlled, and the resource usage of the monitored object can be viewed more conveniently and efficiently according to the needs of the user, and the cause of the alarm can be analyzed efficiently and accurately when the monitored object alarms.

[0116] The time span selection control is used to control the time span of the data playback of the monitoring and analysis visualization view. For example, the monitoring and analysis system can obtain the time span entered by the user by clicking the control to set the time span of the data playback of the monitoring and analysis visualization view. Through this control, the data of the monitoring and analysis visualization view within the time span that the user wants to view can be accurately viewed according to user needs, which is convenient and quick.

[0117] The following takes any monitoring cycle as an example to explain how the monitoring and analysis system specifically obtains monitoring data, alarm data, and snapshot data of the monitored object in the monitoring cycle. This application does not limit the specific duration of the above monitoring cycle, and those skilled in the art can set it according to actual conditions.

[0118] Figure 4 A flow chart of a third monitoring method provided in an embodiment of the present application is shown as follows: Figure 4 As shown, the method may include the following steps:

[0119] S301, obtaining monitoring data of a monitoring object.

[0120] The monitoring and analysis system can obtain monitoring data sent by the monitored object, and can also obtain monitoring data of the monitored object from other systems. The other systems mentioned here can be, for example, other systems that can obtain monitoring data of the monitored object.

[0121] As described above, monitoring data may include static data and dynamic data. If the monitoring and analysis system obtains the monitoring data sent by the monitored object, the monitoring and analysis system may obtain the static data of the monitored object by, for example, calling the database interface of the monitored object. For example, the monitored object may be deployed with a configuration management database (CMDB), and the monitoring and analysis system may obtain the static data of the monitored object by calling the CMDB interface. For dynamic data, the monitoring and analysis system may collect monitoring data through, for example, open source monitoring and collection tools such as Telegraf, Zabbix, Prometheus, and self-developed monitoring plug-ins.

[0122] S302: Determine whether an alarm occurs in the monitoring object during the monitoring period based on the monitoring data of the monitored object.

[0123] In this step, the monitoring and analysis system determines whether an alarm occurs in the monitoring object during the monitoring period based on the monitoring data of the monitoring object, thereby realizing timely monitoring of the resource usage of the monitoring object.

[0124] The monitoring and analysis system can determine whether the monitored object has an alarm in the monitoring cycle based on the monitoring data of the monitored object, or it can use other systems to determine whether the monitored object has an alarm in the monitoring cycle. For example, the monitoring and analysis system can send the monitoring data of the monitored object to other systems, and the other systems will determine whether the monitored object has an alarm in the monitoring cycle based on the monitoring data, and then send the judgment result to the monitoring and analysis system.

[0125] When the monitoring and analysis system determines whether an alarm occurs in the monitoring object during the monitoring period, this application does not limit its specific determination method. Figure 5 A schematic diagram of the first monitoring method provided for this application, such as Figure 5 As shown, if the monitoring data of the monitored object exceeds the preset monitoring data threshold in the monitoring period, and the N-1 monitoring periods before the monitoring period all exceed the preset monitoring data threshold, then it is determined that an alarm has occurred. This application does not limit the specific value of the preset monitoring data threshold. The preset monitoring data thresholds corresponding to different resources of the monitored object can be the same or different, and this application does not limit them. It should be understood that Figure 5 This is a schematic diagram taking N equal to 3 and the preset monitoring data threshold as 89% as an example.

[0126] Optional, continue to refer to Figure 5 If the monitoring data of the monitored object does not exceed the preset monitoring data threshold for M consecutive monitoring cycles, the alarm is cleared, and M is greater than 1. The present application does not limit the specific value of M, which may be equal to N or not. Figure 5 This is a schematic diagram taking M equal to 3 as an example.

[0127] In another implementation, if the monitoring data of the monitored object exceeds the preset monitoring data threshold for Q consecutive monitoring cycles and the proportion of data exceeds the preset percentage threshold, an alarm is determined to occur, and Q is greater than 1. This application does not limit the specific value of the preset percentage threshold.

[0128] For example, Figure 6 A schematic diagram of the second monitoring method provided in this application, such as Figure 6 As shown, the monitoring and analysis system can collect monitoring data of the monitored object once every 1 minute in a monitoring cycle. If the number of monitoring data of the monitored object collected in two consecutive monitoring cycles that exceeds the preset data threshold accounts for more than 70% of the total number of monitoring data in each monitoring cycle, it is determined that an alarm has occurred. Optionally, if the number of monitoring data of the monitored object collected in two consecutive monitoring cycles that exceeds the preset data threshold accounts for no more than 70% of the total number of monitoring data in each monitoring cycle, the alarm is cleared. It should be noted that Figure 6 This is a schematic diagram taking the preset data threshold of 89% as an example.

[0129] Alternatively, the monitoring and analysis system may first determine a preset data threshold of the monitoring data according to the monitoring time of the monitoring data, and then determine that an alarm occurs if the monitoring data exceeds the preset data threshold during the monitoring time.

[0130] In one implementation, the monitoring and analysis system may, for example, store a mapping relationship between the monitoring time of the monitoring data and the preset data threshold of the monitoring data. Based on this, the monitoring and analysis system determines the preset data threshold of the monitoring data at the monitoring time. By setting different preset data thresholds at different times, it is possible to determine whether to issue an alarm for the monitored object based on the time characteristics of the usage of the monitored object, thereby making the judgment on the alarm of the monitored object more accurate.

[0131] In another implementation, the monitoring and analysis system inputs the monitoring time of the monitoring data into the data threshold prediction model, and uses the model to predict the preset data threshold at that time. The model can be obtained by training based on any machine learning model. For example, it can be trained using the historical monitoring time as an input feature and the monitoring data of the monitoring object in a normal state corresponding to the monitoring time as a label. In this way, the preset data thresholds at different times can be flexibly predicted based on the historical monitoring data, thereby improving the flexibility of alarm judgment, and accurately judging whether an alarm occurs based on actual usage.

[0132] Optionally, the monitoring and analysis system can also create a monitoring resource group, and then add the resources of the monitored object to the corresponding monitoring resource group; subsequently, the monitoring and analysis system can determine whether an alarm occurs in the monitoring object during the monitoring period based on the monitoring data of the monitored object and the mapping relationship between the monitoring resource group and the alarm judgment strategy.

[0133] Exemplarily, the monitoring and analysis system may store a mapping relationship between monitoring resource groups and alarm judgment strategies. The monitoring and analysis system may adopt the alarm judgment strategy corresponding to the monitoring resource group for the monitoring data added to different monitoring resource groups, so as to realize flexible monitoring of different cloud resources of the monitored objects.

[0134] If the monitored object generates an alarm, step S303 is executed.

[0135] S303: Capture snapshot data of other resources associated with the monitored object.

[0136] In this step, when an alarm occurs in the monitored object, the monitoring and analysis system captures snapshot data of other resources associated with the monitored object, so that the user can quickly and accurately analyze the cause of the monitored object alarm based on the snapshot data by displaying the snapshot data later.

[0137] The present application does not limit the specific method by which the monitoring and analysis system captures snapshot data of other resources associated with the monitored object. For example, it can be any snapshot capturing method in the prior art.

[0138] S304: Store monitoring data, alarm data, and snapshot data of the monitored object during the monitoring period.

[0139] In this step, the monitoring and analysis system stores the monitoring data, alarm data, and snapshot data of the monitored object during the monitoring period, so that the relevant data corresponding to the display request can be obtained from the stored data based on the subsequent display request of the monitoring and analysis system view of the monitored object.

[0140] The monitoring and analysis system may store all of the above data in the same database, or may store the above data in different databases. Exemplarily, the monitoring and analysis system may store static data in the monitoring data in a relational database; store dynamic data in a time series database; store alarm data in a non-relational database; and store snapshot data in a non-relational database. Optionally, the data stored in different databases may be associated with each other through the identifier of the monitored object (e.g., a Universally Unique Identifier (UUID)) to provide reliable data for subsequent visualization.

[0141] In this embodiment, in any monitoring cycle, the monitoring and analysis system can obtain the monitoring data of the monitored object, and then determine whether the monitored object has an alarm in the monitoring cycle based on the monitoring data of the monitored object; if the monitored object has an alarm, the snapshot data of other resources associated with the monitored object is captured; subsequently, the monitoring data, alarm data, and snapshot data of the monitored object in the monitoring cycle are stored. In this way, the relevant monitoring data can be accurately obtained based on whether the monitored object has an alarm, and sufficient data support can be provided for the display of the subsequent monitoring analysis visualization view.

[0142] Figure 7 A schematic diagram of the structure of a monitoring device provided in this application, such as Figure 7 As shown, the device includes: a receiving module 11, an acquiring module 12, a drawing module 13, a generating module 14, and a display module 15. Optionally, the device may further include at least one of the following modules: an executing module 16, and a creating module 17.

[0143] The receiving module 11 is used to receive a monitoring analysis system view display request of a monitoring object; the display request includes: a time span to be displayed;

[0144] The acquisition module 12 is used to acquire, from a database, the monitoring data and alarm data of the monitored object within the time span, and the snapshot data of other resources associated with the monitored object according to the time span; the snapshot data includes: the monitoring data and alarm data of the other resources;

[0145] A drawing module 13, configured to draw a monitoring analysis visualization view of the monitored object according to the monitoring data and alarm data of the monitored object within the time span, and snapshot data of other resources associated with the monitored object;

[0146] A generating module 14, configured to generate a playback control view according to the alarm data of the monitored object within the time span and the time span; the playback control view is used to control the playback of data in the monitoring analysis visualization view;

[0147] The display module 15 is used to display the monitoring analysis visualization view and the playback control view.

[0148] Optionally, the playback control view includes: a timeline; the timeline includes: a current time indicator, a time scale line, and at least one alarm indicator; a generation module 14, specifically used to generate a time scale line of the timeline according to the time span; based on the alarm data of the monitored object within the time span, at least one alarm indicator is generated, wherein an alarm indicator is used to indicate the identifier of the corresponding alarm and the time span of the alarm; the alarm indicators corresponding to different levels of alarms have different colors.

[0149] Optionally, the playback control view further includes at least one of the following controls: a playback control control, a playback speed selection control, and a time span selection control; an execution module 16, which is used to respond to an operation on a target control and execute the operation corresponding to the target control on the monitoring and analysis visualization view.

[0150] Optionally, the acquisition module 12 is also used to acquire the monitoring data of the monitored object in any monitoring cycle; the monitoring data includes static data and dynamic data; based on the monitoring data of the monitored object, determine whether the monitored object has an alarm in the monitoring cycle; if the monitored object has an alarm, capture snapshot data of other resources associated with the monitored object; store the monitoring data, alarm data, and snapshot data of the monitored object in the monitoring cycle.

[0151] For example, the acquisition module 12 is specifically used to determine that an alarm occurs if the monitoring data of the monitored object exceeds a preset monitoring data threshold in the monitoring period, and the N-1 monitoring periods before the monitoring period all exceed the preset monitoring data threshold, where N is greater than 1; or, based on the monitoring time of the monitoring data, determine the data threshold of the monitoring data; if the monitoring data exceeds the preset data threshold during the monitoring time, determine that an alarm occurs.

[0152] For example, the acquisition module 12 is specifically configured to determine the data threshold of the monitoring data according to the monitoring time by using a data threshold prediction model.

[0153] Optionally, a creation module 17 is used to create a monitoring resource group; the resources of the monitored object are added to the corresponding monitoring resource group; and an acquisition module 12 is specifically used to determine whether an alarm occurs in the monitoring object during the monitoring period based on the monitoring data of the monitored object and the mapping relationship between the monitoring resource group and the alarm judgment strategy.

[0154] The monitoring device provided in the embodiment of the present application can execute the monitoring method in the above method embodiment, and its implementation principle and technical effect are similar, which will not be repeated here. Figure 7 The division of each module shown is only a schematic, and the present application does not limit the division of each module and the naming of each module. The device of the present application can also be implemented in other ways. For example, the division of units / modules in the above embodiment is only a logical function division, and there may be other division methods in actual implementation. For example, multiple units, modules or components can be combined, or can be integrated into another system, or some features can be ignored or not executed.

[0155] In addition, unless otherwise specified, each functional unit / module in each embodiment of the present application may be integrated into one unit / module, each unit / module may exist physically separately, or two or more units / modules may be integrated together. The above-mentioned integrated unit / module may be implemented in the form of hardware or in the form of a software program module.

[0156] If the integrated unit / module is implemented in the form of hardware, the hardware may be a digital circuit, an analog circuit, etc. The physical implementation of the hardware structure includes but is not limited to transistors, memristors, etc. If not specifically stated, the processor may be any appropriate hardware processor, such as a CPU, a GPU, an FPGA, a DSP, an ASIC, etc. If not specifically stated, the storage unit may be any appropriate magnetic storage medium or magneto-optical storage medium, such as a resistive random access memory RRAM (Resistive Random Access Memory), a dynamic random access memory DRAM (Dynamic Random Access Memory), a static random access memory SRAM (Static Random-Access Memory), an enhanced dynamic random access memory EDRAM (Enhanced Dynamic Random Access Memory), a high-bandwidth memory HBM (High-Bandwidth Memory), a hybrid memory cube HMC (Hybrid Memory Cube), etc.

[0157] If the integrated unit / module is implemented in the form of a software program module and sold or used as an independent product, it can be stored in a computer-readable memory. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or all or part of the technical solution, can be embodied in the form of a software product, which is stored in a memory and includes several instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the various embodiments of the present application. The aforementioned memory includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk and other media that can store program codes.

[0158] Figure 8 1 is a schematic diagram of the structure of an electronic device 110 provided in this application. Figure 8 As shown, the electronic device 110 may include: at least one processor 111 and a memory 112. The electronic device may be any electronic device in the monitoring and analysis system, such as a server.

[0159] The memory 112 is used to store programs. Specifically, the programs may include program codes, and the program codes include computer operation instructions.

[0160] The memory 112 may include a high-speed RAM memory, and may also include a non-volatile memory, such as at least one disk memory.

[0161] The processor 111 is used to execute the computer-executable instructions stored in the memory 112 to implement the monitoring method described in the above method embodiment. The processor 111 may be a central processing unit (CPU), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application.

[0162] The electronic device 110 may also include a communication interface 113, so that it can communicate and interact with external devices through the communication interface 113. In a specific implementation, if the communication interface 113, the memory 112 and the processor 111 are implemented independently, the communication interface 113, the memory 112 and the processor 111 can be connected to each other through a bus and complete the communication between each other. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc., but it does not mean that there is only one bus or one type of bus.

[0163] Optionally, in a specific implementation, if the communication interface 113, the memory 112 and the processor 111 are integrated on a chip, the communication interface 113, the memory 112 and the processor 111 can communicate through an internal interface.

[0164] The present application also provides a computer-readable storage medium, which may include: a U disk, a mobile hard disk, a read-only memory, a random access memory, a disk or an optical disk, and other media that can store program codes. Specifically, the computer-readable storage medium stores program instructions, and the program instructions are used for the monitoring method in the above-mentioned embodiment.

[0165] The present application also provides a program product, which includes an execution instruction, which is stored in a readable storage medium. At least one processor of the banking system can read the execution instruction from the readable storage medium, and at least one processor executes the execution instruction so that the banking system implements the monitoring method provided by the various embodiments described above.

[0166] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all optional embodiments, and the actions and modules involved are not necessarily required by the present application.

[0167] It should be further noted that, although the various steps in the flowchart are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless there is a clear description in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a portion of the steps in the flowchart may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these sub-steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.

[0168] In the above embodiments, the description of each embodiment has its own emphasis. For the part not described in detail in a certain embodiment, please refer to the relevant description of other embodiments. The technical features of the above embodiments can be combined arbitrarily. In order to make the description concise, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0169] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any modification, use or adaptation of the present application, which follows the general principles of the present application and includes common knowledge or customary techniques in the art that are not disclosed in the present application. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present application are indicated by the following claims.

[0170] It should be understood that the present application is not limited to the precise structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present application is limited only by the appended claims.

Claims

1. A monitoring method, characterized in that: The method comprises: Receive a monitoring and analysis system view display request for a monitoring object; the display request includes: a time span to be displayed; According to the time span, the monitoring data and alarm data of the monitored object within the time span, as well as the snapshot data of other resources associated with the monitored object, are acquired from the database; the snapshot data includes: the monitoring data and alarm data of the other resources; Draw a monitoring analysis visualization view of the monitored object according to the monitoring data and alarm data of the monitored object within the time span, and snapshot data of other resources associated with the monitored object; Generate a playback control view according to the alarm data of the monitored object within the time span and the time span; the playback control view is used to control the playback of data in the monitoring analysis visualization view; The monitoring analysis visualization view and the playback control view are displayed.

2. The method according to claim 1, characterized in that The playback control view includes: a time axis; the time axis includes: a current time indicator, a time scale line, and at least one alarm indicator; The generating of the playback control view according to the alarm data of the monitoring object within the time span and the time span includes: Generating a time scale line of the time axis according to the time span; At least one alarm indicator is generated according to the alarm data of the monitored object within the time span, wherein one alarm indicator is used to indicate the identification of the corresponding alarm and the time span of the alarm duration; the alarm indicators corresponding to alarms of different levels have different colors.

3. The method according to claim 2, characterized in that The playback control view further includes at least one of the following controls: a playback control control, a playback speed selection control, and a time span selection control; The method further comprises: In response to an operation on a target control, the operation corresponding to the target control is performed on the monitoring analysis visualization view.

4. The method according to any one of claims 1 to 3, characterized in that: The method further comprises: In any monitoring cycle, the monitoring data of the monitored object is obtained; the monitoring data includes static data and dynamic data; Determining whether an alarm occurs in the monitoring object during the monitoring period according to the monitoring data of the monitoring object; If an alarm occurs in the monitored object, snapshot data of other resources associated with the monitored object is captured; The monitoring data, alarm data, and snapshot data of the monitored object in the monitoring period are stored.

5. The method according to claim 4, characterized in that The determining, according to the monitoring data of the monitored object, whether the monitored object generates an alarm during the monitoring period includes: If the monitoring data of the monitored object exceeds the preset monitoring data threshold in the monitoring period, and the N-1 monitoring periods before the monitoring period all exceed the preset monitoring data threshold, it is determined that an alarm occurs, and N is greater than 1; or, Determining a data threshold of the monitoring data according to a monitoring time of the monitoring data; If the monitoring data exceeds the preset data threshold during the monitoring time, it is determined that an alarm occurs.

6. The method according to claim 4, characterized in that The determining, according to the monitoring time of the monitoring data, a data threshold of the monitoring data includes: According to the monitoring time, a data threshold prediction model is used to determine the data threshold of the monitoring data.

7. The method according to claim 4, characterized in that The method further comprises: Create a monitoring resource group; Adding the resources of the monitored object to the corresponding monitoring resource group; The determining, according to the monitoring data of the monitored object, whether the monitored object generates an alarm during the monitoring period includes: It is determined whether an alarm occurs in the monitoring object during the monitoring period according to the monitoring data of the monitoring object and the mapping relationship between the monitoring resource group and the alarm judgment strategy.

8. A monitoring device, characterized in that: include: A receiving module, used to receive a monitoring and analysis system view display request of a monitored object; The display request includes: a time span to be displayed; An acquisition module, used to acquire, from a database, monitoring data and alarm data of the monitored object within the time span, as well as snapshot data of other resources associated with the monitored object, according to the time span; the snapshot data includes: monitoring data and alarm data of other resources; A drawing module, used to draw a monitoring analysis visualization view of the monitored object according to the monitoring data and alarm data of the monitored object within the time span, and snapshot data of other resources associated with the monitored object; A generation module, used to generate a playback control view according to the alarm data of the monitored object within the time span and the time span; the playback control view is used to control the playback of data in the monitoring analysis visualization view; A display module is used to display the monitoring analysis visualization view and the playback control view.

9. An electronic device, characterized in that: include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 7 when executed by a processor.

Images