Alarm information processing method, device, equipment and computer readable storage medium

Abstract

The present invention discloses an alarm information processing method, which includes: obtaining the alarm information of each subsystem of a distributed system, parsing the alarm information, and obtaining an alarm interface corresponding to the alarm information; merging the alarm information from the same alarm interface under the same subsystem into a convergence alarm information, and obtaining the convergence alarm information corresponding to each subsystem; analyzing the alarm cause of the convergence alarm information; associating the alarm cause with the convergence alarm information and sending it to a preset operation and maintenance personnel terminal. The present invention also discloses an alarm information processing device, equipment and a computer-readable storage medium. The present invention can reduce the manpower cost and time cost generated by manual analysis of alarm information.

Description

Technical Field

[0001] The present invention relates to the technical field of financial technology (Fintech), and in particular to an alarm information processing method, device, equipment and computer-readable storage medium. Background Art

[0002] With the development of computer technology, more and more technologies (big data, distributed, blockchain, artificial intelligence, etc.) are being applied in the financial field. The traditional financial industry is gradually transforming to financial technology (Fintech). However, due to the security and real-time requirements of the financial industry, higher requirements are also placed on technology.

[0003] At present, various financial institutions (such as commercial banks, securities companies, etc.) generally process and store business data through distributed systems, and an alarm management platform collects the alarm information generated by the distributed system, and then reports the alarm information to the corresponding responsible person terminal or group. The defect of this method is that there is a lack of further convergence and analysis of alarm information, resulting in system operation and maintenance personnel receiving a large number of alarms, and it takes a lot of manpower and time to find important alarms and analyze the causes of alarms from a large amount of alarm information. Summary of the invention

[0004] The main purpose of the present invention is to propose an alarm information processing method, device, equipment and computer-readable storage medium, aiming to realize automatic convergence and analysis of alarm information generated by a distributed system, thereby reducing the manpower cost and time cost generated by manual analysis of the alarm information.

[0005] To achieve the above object, the present invention provides an alarm information processing method, the method comprising the following steps:

[0006] Acquire alarm information of each subsystem of the distributed system, parse the alarm information, and obtain an alarm interface corresponding to the alarm information;

[0007] Merge the alarm information from the same alarm interface under the same subsystem into one convergence alarm information, and obtain the convergence alarm information corresponding to each subsystem;

[0008] Analyze the alarm cause of the convergence alarm information;

[0009] The alarm cause is associated with the convergence alarm information and then sent to a preset operation and maintenance personnel terminal.

[0010] Preferably, the step of obtaining the alarm information of each subsystem of the distributed system includes:

[0011] The alarm information of each subsystem of the distributed system is read from a preset alarm management platform, wherein the alarm management platform is used to collect the alarm information of each subsystem.

[0012] Preferably, the step of analyzing the alarm cause of the convergence alarm information includes:

[0013] Obtaining a system name of a subsystem corresponding to the convergence alarm information;

[0014] Accessing a publishing platform corresponding to the system name, and obtaining a publishing record on the publishing platform, wherein the publishing record includes system version publishing information;

[0015] The release record is used as the alarm reason of the convergence alarm information.

[0016] Preferably, the step of associating the alarm cause with the convergence alarm information and then sending the associated information to a preset operation and maintenance personnel terminal comprises:

[0017] Querying the alarm information table of the downstream basic platform corresponding to the system name, and obtaining the alarm information in the alarm information table, wherein the downstream basic platform is the operating platform of the subsystem corresponding to the system name;

[0018] The alarm reason, the alarm information in the alarm information table and the convergence alarm information are associated and sent to a preset operation and maintenance personnel terminal.

[0019] Preferably, the step of associating the alarm cause with the convergence alarm information and then sending the associated information to a preset operation and maintenance personnel terminal comprises:

[0020] Acquire an inter-system relationship tree from a preset system association information library, wherein the inter-system relationship tree is used to represent the dependency relationship between the subsystems of the distributed system;

[0021] Determine the root cause system corresponding to the convergence alarm information according to the inter-system relationship tree;

[0022] The convergence alarm information and alarm reason corresponding to the root cause system are obtained, the convergence alarm information and alarm reason corresponding to the root cause system are associated, and the corresponding root cause identifier is added and then sent to a preset operation and maintenance personnel terminal.

[0023] In addition, to achieve the above-mentioned purpose, the present invention further provides an alarm information processing device, the alarm information processing device comprising:

[0024] An acquisition module, used to acquire alarm information of each subsystem of the distributed system, parse the alarm information, and obtain an alarm interface corresponding to the alarm information;

[0025] A merging module, used to merge the alarm information from the same alarm interface under the same subsystem into a convergent alarm information, and obtain the convergent alarm information corresponding to each subsystem;

[0026] An analysis module, used for analyzing the alarm cause of the convergence alarm information;

[0027] The sending module is used to associate the alarm cause with the convergence alarm information and then send it to a preset operation and maintenance personnel terminal.

[0028] Preferably, the acquisition module is also used for:

[0029] The alarm information of each subsystem of the distributed system is read from a preset alarm management platform, wherein the alarm management platform is used to collect the alarm information of each subsystem.

[0030] Preferably, the analysis module is also used for:

[0031] Obtaining a system name of a subsystem corresponding to the convergence alarm information;

[0032] Accessing a publishing platform corresponding to the system name, and obtaining a publishing record on the publishing platform, wherein the publishing record includes system version publishing information;

[0033] The release record is used as the alarm reason of the convergence alarm information.

[0034] Preferably, the sending module is also used for:

[0035] Querying the alarm information table of the downstream basic platform corresponding to the system name, and obtaining the alarm information in the alarm information table, wherein the downstream basic platform is the operating platform of the subsystem corresponding to the system name;

[0036] The alarm reason, the alarm information in the alarm information table and the convergence alarm information are associated and sent to a preset operation and maintenance personnel terminal.

[0037] Preferably, the sending module is also used for:

[0038] Acquire an inter-system relationship tree from a preset system association information library, wherein the inter-system relationship tree is used to represent the dependency relationship between the subsystems of the distributed system;

[0039] Determine the root cause system corresponding to the convergence alarm information according to the inter-system relationship tree;

[0040] The convergence alarm information and alarm reason corresponding to the root cause system are obtained, the convergence alarm information and alarm reason corresponding to the root cause system are associated, and the corresponding root cause identifier is added and then sent to a preset operation and maintenance personnel terminal.

[0041] In addition, to achieve the above-mentioned purpose, the present invention also provides an alarm information processing device, which includes: a memory, a processor, and an alarm information processing program stored in the memory and executable on the processor, and when the alarm information processing program is executed by the processor, the steps of the alarm information processing method as described above are implemented.

[0042] In addition, to achieve the above-mentioned purpose, the present invention also provides a computer-readable storage medium, on which an alarm information processing program is stored, and when the alarm information processing program is executed by a processor, the steps of the alarm information processing method described above are implemented.

[0043] The present invention obtains the alarm information of each subsystem of the distributed system, parses the alarm information, and obtains the alarm interface corresponding to the alarm information; merges the alarm information from the same alarm interface under the same subsystem into a convergence alarm information, and obtains the convergence alarm information corresponding to each subsystem; analyzes the alarm cause of the convergence alarm information; associates the alarm cause with the convergence alarm information and sends it to a preset operation and maintenance personnel terminal. The present invention realizes automatic convergence and analysis of the alarm information generated by the distributed system by merging the alarm information of the distributed system according to the system and the alarm interface, and analyzes the alarm cause of the merged convergence alarm information, and finally associates the alarm cause with the convergence alarm information and sends it to a preset operation and maintenance personnel terminal, thereby reducing the manpower cost and time cost generated by manual analysis of the alarm information. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 It is a schematic diagram of the device structure of the hardware operating environment involved in the embodiment of the present invention;

[0045] Figure 2 It is a flowchart of the first embodiment of the alarm information processing method of the present invention.

[0046] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0047] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0048] like Figure 1 As shown, Figure 1 It is a schematic diagram of the device structure of the hardware operating environment involved in the embodiment of the present invention.

[0049] The alarm information processing device in the embodiment of the present invention may be a PC, a server or other device.

[0050] like Figure 1 As shown, the alarm information processing device may include: a processor 1001, such as a CPU, a network interface 1004, a user interface 1003, a memory 1005, and a communication bus 1002. Among them, the communication bus 1002 is used to realize the connection and communication between these components. The user interface 1003 may include a display screen (Display), an input unit such as a keyboard (Keyboard), and the user interface 1003 may also include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface). The memory 1005 may be a high-speed RAM memory, or a stable memory (non-volatile memory), such as a disk memory. The memory 1005 may also be a storage device independent of the aforementioned processor 1001.

[0051] Those skilled in the art will understand that Figure 1 The device structure shown in the figure does not constitute a limitation of the device, and may include more or less components than shown in the figure, or combine certain components, or arrange the components differently.

[0052] like Figure 1 As shown, the memory 1005 as a computer storage medium may include an operating system, a network communication module, a user interface module, and an alarm information processing program.

[0053] exist Figure 1 In the device shown, the network interface 1004 is mainly used to connect to the background server and communicate data with the background server; the user interface 1003 is mainly used to connect to the client (user end) and communicate data with the client; and the processor 1001 can be used to call the alarm information processing program stored in the memory 1005 and perform the operations in the following method embodiments.

[0054] Based on the above hardware structure, various embodiments of the alarm information processing method of the present invention are proposed.

[0055] Reference Figure 2 , Figure 2 This is a flow chart of a first embodiment of a method for processing alarm information according to the present invention, wherein the method comprises:

[0056] Step S10, obtaining alarm information of each subsystem of the distributed system, parsing the alarm information, and obtaining an alarm interface corresponding to the alarm information;

[0057] In this embodiment, the distributed system is a software system built on the network. In a distributed system, a group of independent computers present a unified whole to the user, just like a system. The system has a variety of common physical and logical resources, can dynamically allocate tasks, and the dispersed physical and logical resources realize information exchange through the computer network. At present, various financial institutions (such as commercial banks, securities companies, etc.) generally process and store business data through distributed systems, and an alarm management platform collects the alarm information generated by the distributed system, and then reports the alarm information to the corresponding responsible person terminal or group.

[0058] The alarm information processing method of this embodiment is applied to an alarm information processing device. The alarm information processing device can be a physical host shared with the alarm management platform. Of course, in order to reduce the pressure on the alarm management platform, the alarm information processing device can also be an independent server device that communicates with the alarm management platform, which can be flexibly set during specific implementation.

[0059] First, the alarm information processing device obtains the alarm information of each subsystem of the distributed system. In one embodiment, the above step S10 may further include: reading the alarm information of each subsystem of the distributed system from a preset alarm management platform, wherein the alarm management platform is used to collect the alarm information of each subsystem.

[0060] Specifically, an alarm management platform can be pre-set, and the alarm management platform collects the alarm information of each subsystem of the distributed system through the client program or WEB interface deployed in the distributed subsystem. Then, the alarm information processing device reads the alarm information from the alarm management platform, which can specifically read the alarm information generated by each subsystem of the distributed system within a preset time period (such as the past 5 minutes). Among them, the alarm information may include alarm sequence number, alarm content, alarm source, alarm level, alarm interface, alarm title, system name, alarm time and other information; the alarm conditions for the distributed system to generate alarm information may include business indicators (such as transfer success rate, deduction success rate, etc.) not reaching the preset value, host unavailable, network abnormality, database abnormality, etc., and the corresponding alarm events may include host alarm, network alarm, database alarm, system change alarm, etc.

[0061] In addition to reading alarm information from the alarm management platform, the alarm information processing device can also directly collect alarm information from each subsystem of the distributed system, which can be flexibly set during specific implementation.

[0062] After obtaining the alarm information of each subsystem of the distributed system, the alarm information is parsed to obtain the alarm interface corresponding to the alarm information, where different alarm interfaces correspond to different alarm indicators. For example, the transfer interface corresponds to the output transfer success rate alarm, and the deduction interface corresponds to the output deduction success rate alarm.

[0063] Step S20, merging the alarm information from the same alarm interface under the same subsystem into one convergence alarm information, and obtaining the convergence alarm information corresponding to each subsystem;

[0064] In this step, since the alarm content, alarm level, alarm interface, alarm title, and system name of the alarm information from the same alarm interface of the same subsystem are generally the same, the alarm information from the same alarm interface under the same subsystem can be merged into one convergent alarm information. For example, for subsystem A, if there are 5 alarm information generated from alarm interface 1, then these 5 alarm information are merged into one convergent alarm information, and if there are 2 alarm information generated from alarm interface 2, then these 2 alarm information are merged into one convergent alarm information.

[0065] The alarm information of each subsystem of the distributed system is merged and processed separately to obtain the converged alarm information corresponding to each subsystem, thereby reducing the total number of alarm information and facilitating subsequent operation and maintenance personnel to view.

[0066] Step S30, analyzing the alarm cause of the convergence alarm information;

[0067] In this step, the alarm cause corresponding to each convergence alarm message is further analyzed. In one embodiment, step S30 may include: obtaining the system name of the subsystem corresponding to the convergence alarm message; accessing the publishing platform corresponding to the system name, obtaining the publishing record on the publishing platform, the publishing record including the system version publishing information; using the publishing record as the alarm cause of the convergence alarm message.

[0068] Considering that the release of a new system version is generally accompanied by changes in applications, networks or databases, and such changes are likely to cause alarms in the system during operation, they can be used as the cause of the alarm. Specifically, for a convergence alarm message, the convergence alarm message is first parsed to obtain the system name of the subsystem from which it comes, and then the corresponding publishing platform is accessed based on the system name and the publishing record on the publishing platform is obtained. The publishing record contains the system version release information of the subsystem, which can be expressed in the form of: "beebekong released the version of this system at 2019-04-09 17:47:06". After that, the alarm information processing device uses the obtained publishing record as the alarm cause of the convergence alarm message.

[0069] In another embodiment, the mapping relationship between the alarm content and the alarm reason can also be pre-set. For example, the alarm reason corresponding to "the deduction failure rate exceeds the preset value" can be set to "insufficient account balance", and the alarm reason corresponding to "the transfer failure rate exceeds the preset value" can be set to "network unavailable", etc. Afterwards, the alarm information processing device searches for the preset mapping relationship according to the alarm content in the convergent alarm information to obtain the corresponding alarm reason.

[0070] Both of the above methods can predict the possible causes of the alarm, thereby reducing the manpower and time costs of subsequent operation and maintenance personnel incurring manual analysis of the alarm causes.

[0071] Step S40: Associating the alarm cause with the convergence alarm information and sending the information to a preset operation and maintenance personnel terminal.

[0072] In this step, the alarm cause is associated with the corresponding convergence alarm information. For example, the alarm cause can be added to the convergence alarm information to associate the two, and then the associated information is sent to the preset operation and maintenance personnel terminal, where the operation and maintenance personnel terminal can be a single terminal or a group, which can be flexibly set during specific implementation.

[0073] Furthermore, the above step S40 may include: querying the alarm information table of the downstream basic platform corresponding to the system name, obtaining the alarm information in the alarm information table, wherein the downstream basic platform is the operating platform of the subsystem corresponding to the system name; associating the alarm cause, the alarm information in the alarm information table and the convergence alarm information, and sending them to the preset operation and maintenance personnel terminal.

[0074] Specifically, after obtaining the system name of the subsystem corresponding to the convergence alarm information, the alarm information processing device can query the alarm information table of the downstream basic platform corresponding to the system name and obtain the alarm information in the alarm information table, where the downstream basic platform is the operating platform of the subsystem; then, the alarm cause, the alarm information in the alarm information table and the convergence alarm information are associated and sent to the preset operation and maintenance personnel terminal. In this way, the automatic association of the basic platform alarm is realized, and the comprehensiveness of the alarm information sent is improved.

[0075] The alarm information processing method proposed in this embodiment merges the alarm information of the distributed system according to the system and alarm interface, analyzes the alarm cause of the merged convergence alarm information, and finally associates the alarm cause with the convergence alarm information and sends it to the preset operation and maintenance personnel terminal, thereby realizing automatic convergence and analysis of the alarm information generated by the distributed system, thereby reducing the manpower cost and time cost generated by manual analysis of the alarm information.

[0076] Furthermore, based on the first embodiment of the alarm information processing method of the present invention, a second embodiment of the alarm information processing method of the present invention is proposed.

[0077] In this embodiment, the above-mentioned step S40 may include: obtaining an inter-system relationship tree from a preset system association information library, wherein the inter-system relationship tree is used to represent the dependency relationship between the subsystems of the distributed system; determining the root cause system corresponding to the convergence alarm information according to the inter-system relationship tree; obtaining the convergence alarm information and the alarm cause corresponding to the root cause system, associating the convergence alarm information and the alarm cause corresponding to the root cause system, and sending it to the preset operation and maintenance personnel terminal after adding the corresponding root cause identifier.

[0078] In this embodiment, considering that a single system abnormality causes the upstream and downstream systems to alarm at the same time, a large number of alarms will interfere with the operation and maintenance personnel in locating the root cause. To this end, a system association information library can be pre-set, and the system association information library stores an inter-system relationship tree, which is used to represent the dependency relationship between the subsystems of the distributed system, and the dependency relationship is a task dependency relationship.

[0079] Before the convergence alarm information corresponding to each subsystem of the distributed system is sent to the operation and maintenance personnel terminal, a system relationship tree can be obtained from a preset system association information library, and then the root cause system corresponding to the convergence alarm information is determined based on the system relationship tree. For example, when subsystem B depends on subsystem A, it can be determined that subsystem A is the root cause system for the alarm generated by subsystem B; then, the convergence alarm information and the alarm cause corresponding to the root cause system are obtained, the convergence alarm information and the alarm cause corresponding to the root cause system are associated, and the corresponding root cause identifier is added and sent to the preset operation and maintenance personnel terminal, where the root cause identifier can be a text identifier, an icon identifier, etc., which can be flexibly set during specific implementation.

[0080] Through the above method, automatic analysis of the root cause of the alarm is achieved, and the root cause identifier is added to the alarm information of the root cause system, which is convenient for operation and maintenance personnel to quickly locate the root cause of the alarm.

[0081] The present invention also provides an alarm information processing device. The alarm information processing device comprises:

[0082] An acquisition module, used to acquire alarm information of each subsystem of the distributed system, parse the alarm information, and obtain an alarm interface corresponding to the alarm information;

[0083] A merging module, used to merge the alarm information from the same alarm interface under the same subsystem into a convergent alarm information, and obtain the convergent alarm information corresponding to each subsystem;

[0084] An analysis module, used for analyzing the alarm cause of the convergence alarm information;

[0085] The sending module is used to associate the alarm cause with the convergence alarm information and then send it to a preset operation and maintenance personnel terminal.

[0086] Furthermore, the acquisition module is also used for:

[0087] The alarm information of each subsystem of the distributed system is read from a preset alarm management platform, wherein the alarm management platform is used to collect the alarm information of each subsystem.

[0088] Furthermore, the analysis module is also used for:

[0089] Obtaining a system name of a subsystem corresponding to the convergence alarm information;

[0090] Accessing a publishing platform corresponding to the system name, and obtaining a publishing record on the publishing platform, wherein the publishing record includes system version publishing information;

[0091] The release record is used as the alarm reason of the convergence alarm information.

[0092] Furthermore, the sending module is also used for:

[0093] Querying the alarm information table of the downstream basic platform corresponding to the system name, and obtaining the alarm information in the alarm information table, wherein the downstream basic platform is the operating platform of the subsystem corresponding to the system name;

[0094] The alarm reason, the alarm information in the alarm information table and the convergence alarm information are associated and sent to a preset operation and maintenance personnel terminal.

[0095] Furthermore, the sending module is also used for:

[0096] Acquire an inter-system relationship tree from a preset system association information library, wherein the inter-system relationship tree is used to represent the dependency relationship between the subsystems of the distributed system;

[0097] Determine the root cause system corresponding to the convergence alarm information according to the inter-system relationship tree;

[0098] The convergence alarm information and alarm reason corresponding to the root cause system are obtained, the convergence alarm information and alarm reason corresponding to the root cause system are associated, and the corresponding root cause identifier is added and then sent to a preset operation and maintenance personnel terminal.

[0099] The methods executed by the above-mentioned program modules can refer to the various embodiments of the alarm information processing method of the present invention, and will not be described in detail here.

[0100] The present invention also provides a computer-readable storage medium.

[0101] The computer-readable storage medium of the present invention stores an alarm information processing program, and when the alarm information processing program is executed by a processor, the steps of the alarm information processing method described above are implemented.

[0102] Among them, the method implemented when the alarm information processing program running on the processor is executed can refer to the various embodiments of the alarm information processing method of the present invention, and will not be repeated here.

[0103] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or system. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or system including the element.

[0104] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0105] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) as described above, and includes a number of instructions for a terminal device (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of the present invention.

[0106] The above are only preferred embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A method for processing alarm information, characterized in that: The alarm information processing method comprises the following steps: Acquire alarm information of each subsystem of the distributed system, parse the alarm information, and obtain an alarm interface corresponding to the alarm information; Merge the alarm information from the same alarm interface under the same subsystem into one convergence alarm information, and obtain the convergence alarm information corresponding to each subsystem; Obtaining a system name of a subsystem corresponding to the convergence alarm information; Accessing a publishing platform corresponding to the system name, and obtaining a publishing record on the publishing platform, wherein the publishing record includes system version publishing information; Using the release record as the alarm reason of the convergence alarm information; Acquire an inter-system relationship tree from a preset system association information library, wherein the inter-system relationship tree is used to represent the dependency relationship between the subsystems of the distributed system; Determine the root cause system corresponding to the convergence alarm information according to the inter-system relationship tree; The convergence alarm information and alarm reason corresponding to the root cause system are obtained, the convergence alarm information and alarm reason corresponding to the root cause system are associated, and the corresponding root cause identifier is added and then sent to a preset operation and maintenance personnel terminal.

2. The alarm information processing method according to claim 1, characterized in that: The step of obtaining the alarm information of each subsystem of the distributed system comprises: The alarm information of each subsystem of the distributed system is read from a preset alarm management platform, wherein the alarm management platform is used to collect the alarm information of each subsystem.

3. The alarm information processing method according to claim 1, characterized in that: The step of associating the alarm cause with the convergence alarm information and sending the information to a preset operation and maintenance personnel terminal comprises: Querying the alarm information table of the downstream basic platform corresponding to the system name, and obtaining the alarm information in the alarm information table, wherein the downstream basic platform is the operating platform of the subsystem corresponding to the system name; The alarm reason, the alarm information in the alarm information table and the convergence alarm information are associated and sent to a preset operation and maintenance personnel terminal.

4. An alarm information processing device, characterized in that: The alarm information processing device comprises: An acquisition module, used to acquire alarm information of each subsystem of the distributed system, parse the alarm information, and obtain an alarm interface corresponding to the alarm information; A merging module, used to merge the alarm information from the same alarm interface under the same subsystem into a convergent alarm information, and obtain the convergent alarm information corresponding to each subsystem; An analysis module, used for obtaining a system name of a subsystem corresponding to the convergence alarm information; Accessing a publishing platform corresponding to the system name, and obtaining a publishing record on the publishing platform, wherein the publishing record includes system version publishing information; Using the release record as the alarm reason of the convergence alarm information; A sending module, used for acquiring an inter-system relationship tree from a preset system association information library, wherein the inter-system relationship tree is used for representing the dependency relationship between the subsystems of the distributed system; Determine the root cause system corresponding to the convergence alarm information according to the inter-system relationship tree; The convergence alarm information and alarm reason corresponding to the root cause system are obtained, the convergence alarm information and alarm reason corresponding to the root cause system are associated, and the corresponding root cause identifier is added and then sent to a preset operation and maintenance personnel terminal.

5. The alarm information processing device according to claim 4, characterized in that: The acquisition module is also used for: The alarm information of each subsystem of the distributed system is read from a preset alarm management platform, wherein the alarm management platform is used to collect the alarm information of each subsystem.

6. The alarm information processing device according to claim 4, characterized in that: The sending module is also used for: Querying the alarm information table of the downstream basic platform corresponding to the system name, and obtaining the alarm information in the alarm information table, wherein the downstream basic platform is the operating platform of the subsystem corresponding to the system name; The alarm reason, the alarm information in the alarm information table and the convergence alarm information are associated and sent to a preset operation and maintenance personnel terminal.

7. The alarm information processing device according to claim 4, characterized in that: The sending module is also used for: Acquire an inter-system relationship tree from a preset system association information library, wherein the inter-system relationship tree is used to represent the dependency relationship between the subsystems of the distributed system; Determine the root cause system corresponding to the convergence alarm information according to the inter-system relationship tree; The convergence alarm information and alarm reason corresponding to the root cause system are obtained, the convergence alarm information and alarm reason corresponding to the root cause system are associated, and the corresponding root cause identifier is added and then sent to a preset operation and maintenance personnel terminal.

8. An alarm information processing device, characterized in that: The alarm information processing device comprises: a memory, a processor and an alarm information processing program stored in the memory and executable on the processor, wherein the alarm information processing program implements the steps of the alarm information processing method according to any one of claims 1 to 3 when executed by the processor.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores an alarm information processing program, and when the alarm information processing program is executed by the processor, the steps of the alarm information processing method according to any one of claims 1 to 3 are implemented.

Images