An alarm method, an alarm server and a monitoring server

By working together with the monitoring server and the alarm server, alarm information is generated and distinguished according to the trigger type, which solves the problem that the monitoring server cannot process abnormal indicators in a timely manner and ensures the normal operation of the financial system.

CN110232010BActive Publication Date: 2026-02-06WEBANK (CHINA)
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN201910524411.3
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2019-06-18
Publication Date
2026-02-06
Estimated Expiration
2039-06-18

AI Technical Summary

Technical Problem

In existing technologies, monitoring servers in financial systems are unable to promptly address issues of severely excessive performance indicators, leading to malfunctions in the financial system.

Method used

The monitoring server determines the target alarm channel based on the trigger type label, generates target alarm information, and sends it to the alarm server. The alarm server distinguishes the alarm type based on the alarm description information and sends it to the corresponding receiving end to achieve real-time alarm.

Benefits of technology

It enables real-time alarm triggering when monitoring data is abnormal, improving alarm efficiency and ensuring the normal operation of the financial system.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN110232010B_ABST
    Figure CN110232010B_ABST
Patent Text Reader

Abstract

The embodiment of the application provides an alarm method, an alarm server and a monitoring server, and relates to the technical field of science and technology finance, and the method comprises the following steps: when monitoring data meets a triggering condition of a trigger corresponding to a monitoring item, the monitoring server determines a target alarm channel according to a type mark of the trigger, generates target alarm information by using the target alarm channel, and then sends the target alarm information to the alarm server, so that the alarm can be triggered when the monitoring data is abnormal, and the alarm does not need to be given at fixed time, abnormal conditions can be processed in time, and the normal operation of a financial system is ensured. Furthermore, the monitoring server sets corresponding alarm channels for different types of monitoring items, different types of alarm information are generated by using different alarm channels when the alarm occurs, the alarm server can distinguish alarm types when receiving the alarm information, and the target alarm information is sent to corresponding alarm receiving ends according to the alarm types, so that the alarm efficiency is improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of financial technology, and in particular to an alarm method, an alarm server, and a monitoring server. Background Technology

[0002] With the development of computer technology, more and more technologies are being applied in the financial sector, and the traditional financial industry is gradually transforming into Fintech. However, due to the security and real-time requirements of the financial industry, higher demands are being placed on technology. Currently, when monitoring servers monitor the performance indicators of various machines and the health status of service software in a financial system, if abnormal monitoring data is detected, alarms are not immediately triggered. Instead, a defined script is executed daily at set intervals to obtain monitoring data exceeding thresholds, generate alarm information, and then send the alarm information to an alarm server. This results in some indicators being severely exceeded without timely processing, only triggering alarms at fixed times, thus affecting the normal operation of the financial system. Summary of the Invention

[0003] Because fixed-time alarms can cause certain indicators to exceed limits in a timely manner, thus affecting the normal operation of the financial system, this invention provides an alarm method, an alarm server, and a monitoring server.

[0004] On one hand, embodiments of the present invention provide an alarm method, including:

[0005] The alarm server receives target alarm information sent by the monitoring server. The target alarm information includes alarm description information. The target alarm information is generated by the monitoring server when it determines that the monitoring data of the received monitoring item meets the triggering condition of the trigger corresponding to the monitoring item. The target alarm channel is determined according to the type mark of the trigger, and the target alarm channel is used. One monitoring item corresponds to one trigger, and different alarm channels generate different alarm description information.

[0006] The alarm server determines the alarm type based on the alarm description information in the target alarm information, and sends the target alarm information to the corresponding alarm receiving end according to the alarm type.

[0007] Optionally, the alarm server determines the alarm type based on the alarm description information, including:

[0008] When the alarm description information does not include resource description information, the alarm server determines that the alarm type is a platform-side alarm;

[0009] When the alarm description information includes resource description information, the alarm server determines that the alarm type is a user-side alarm.

[0010] Optionally, the sending of the target alarm information to the corresponding alarm receiving end according to the alarm type comprises:

[0011] When the alarm type is a platform-side alarm, the alarm server sends the target alarm information to a platform administrator end;

[0012] When the alarm type is a user-side alarm, the alarm server sends the resource description information to a user management end, so that the user management end determines the identification information of a target user end according to the resource description information, and sends the identification information of the target user end to the alarm server;

[0013] The alarm server sends the alarm information to the target user end according to the identification information of the target user end.

[0014] Optionally, the determination of the identification information of the target user end according to the resource description information comprises:

[0015] When the user management end determines that the alarm resource belongs to a personal user according to the resource description information, the user management end determines personal user information as the identification information of the target user end;

[0016] When the user management end determines that the alarm resource belongs to a tenant according to the resource description information, the user management end determines tenant administrator information as the identification information of the target user end.

[0017] Optionally, the method further comprises:

[0018] The alarm server receives the identification information of the alarm tenant sent by the user management end, wherein the identification information of the alarm tenant is sent by the user management end when the user management end determines that the alarm resource belongs to a tenant according to the resource description information;

[0019] The alarm server inserts the identification information of the alarm tenant and the target alarm information into an alarm record table.

[0020] In one aspect, an alarm method is provided in the embodiments of the present application, which comprises:

[0021] A monitoring server receives monitoring data of a monitoring item sent by a monitored device;

[0022] When the monitoring data satisfies a trigger condition of a trigger corresponding to the monitoring item, the monitoring server determines a target alarm channel according to a type mark of the trigger, and one monitoring item corresponds to one trigger;

[0023] The monitoring server generates target alarm information by using the target alarm channel, wherein the target alarm information comprises alarm description information, and the alarm description information generated by different alarm channels is different.

[0024] The monitoring server sends the target alarm information to an alarm server, so that the alarm server determines an alarm type according to alarm description information in the target alarm information, and sends the target alarm information to a corresponding alarm receiving end according to the alarm type.

[0025] In one aspect, an embodiment of the present application provides an alarm server, comprising:

[0026] A first receiving module, configured to receive target alarm information sent by a monitoring server, wherein the target alarm information comprises alarm description information, and the target alarm information is generated by the monitoring server according to a target alarm channel determined according to a type of a trigger when it is determined that monitoring data of a monitoring item received by the monitoring server satisfies a trigger condition of the trigger corresponding to the monitoring item, one monitoring item corresponds to one trigger, and alarm description information generated by different alarm channels is different;

[0027] A first processing module, configured to determine an alarm type according to alarm description information in the target alarm information;

[0028] A first sending module, configured to send the target alarm information to a corresponding alarm receiving end according to the alarm type.

[0029] Optionally, the first processing module is specifically configured to:

[0030] When the alarm description information does not comprise resource description information, the alarm server determines that the alarm type is a platform-side alarm;

[0031] When the alarm description information comprises resource description information, the alarm server determines that the alarm type is a user-side alarm.

[0032] Optionally, the first sending module is specifically configured to:

[0033] When the alarm type is a platform-side alarm, the target alarm information is sent to a platform administrator end;

[0034] When the alarm type is a user-side alarm, the resource description information is sent to a user management end, so that the user management end determines identification information of a target user end according to the resource description information, and sends the identification information of the target user end to the alarm server;

[0035] The alarm information is sent to the target user end according to the identification information of the target user end.

[0036] Optionally, the user management terminal determines the personal user information as the identification information of the target user terminal when the user management terminal determines that the alarm resource belongs to a personal user according to the resource description information.

[0037] The user management terminal determines the tenant administrator information as the identification information of the target user terminal when the user management terminal determines that the alarm resource belongs to a tenant according to the resource description information.

[0038] Optionally, the first receiving module is further configured to:

[0039] receive the identification information of the alarm tenant sent by the user management terminal, wherein the identification information of the alarm tenant is sent by the user management terminal when the user management terminal determines that the alarm resource belongs to a tenant according to the resource description information.

[0040] The first processing module is further configured to:

[0041] insert the identification information of the alarm tenant and the target alarm information into an alarm record table.

[0042] In one aspect, an embodiment of the present application provides a monitoring server, comprising:

[0043] a second receiving module configured to receive monitoring data of a monitoring item sent by a monitored device;

[0044] a triggering module configured to determine a target alarm channel according to a type tag of a trigger when the monitoring data satisfies a trigger condition of the trigger corresponding to the monitoring item, wherein one monitoring item corresponds to one trigger;

[0045] a second processing module configured to generate target alarm information by using the target alarm channel, wherein the target alarm information comprises alarm description information, and the alarm description information generated by different alarm channels is different;

[0046] a second sending module configured to send the target alarm information to an alarm server, so that the alarm server determines an alarm type according to the alarm description information in the target alarm information, and sends the target alarm information to a corresponding alarm receiving terminal according to the alarm type.

[0047] In one aspect, an embodiment of the present application provides an alarm system, comprising:

[0048] a monitoring server and an alarm server;

[0049] The monitoring server is used for receiving monitoring data of a monitoring item sent by a monitored device; when the monitoring data satisfies a trigger condition of a trigger corresponding to the monitoring item, determining a target alarm channel according to a type mark of the trigger, one monitoring item corresponding to one trigger; generating target alarm information by using the target alarm channel, the target alarm information including alarm description information, and alarm description information generated by different alarm channels being different; and sending the target alarm information to an alarm server.

[0050] The alarm server is used for determining an alarm type according to the alarm description information in the target alarm information, and sending the target alarm information to a corresponding alarm receiving end according to the alarm type.

[0051] In one aspect, the embodiment of the present application provides a computer device, including a memory, a processor and a computer program stored in the memory and executable on the processor, and the processor implements steps of an alarm method when executing the program.

[0052] In one aspect, the embodiment of the present application provides a computer readable storage medium, which stores a computer program executable by a computer device, and when the program is executed on the computer device, the computer device executes steps of an alarm method.

[0053] In the embodiment of the present application, when the monitoring data satisfies the trigger condition of the trigger corresponding to the monitoring item, the monitoring server determines the target alarm channel according to the type mark of the trigger, generates the target alarm information by using the target alarm channel, and then sends the target alarm information to the alarm server, so that the alarm can be triggered when the monitoring data is abnormal, without needing to alarm at a fixed time, and abnormal conditions can be processed in time, thereby ensuring normal operation of a financial system. In addition, the monitoring server sets the corresponding alarm channel for different types of monitoring items, generates different types of alarm information by using different alarm channels when the alarm occurs, facilitates the alarm server to distinguish the alarm type when receiving the alarm information, and sends the target alarm information to the corresponding alarm receiving end according to the alarm type, thereby improving the alarm efficiency. BRIEF DESCRIPTION OF DRAWINGS

[0054] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the embodiment description. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without any creative effort on the basis of these drawings.

[0055] Figure 1 An application scenario schematic diagram provided by the embodiment of the present application is shown in the following figure.

[0056] Figure 2 A flowchart of an alarm method provided for an embodiment of the present application is shown in FIG. 1.

[0057] Figure 3 A flowchart of an alarm method provided for an embodiment of the present application is shown in FIG. 1.

[0058] Figure 4 A structural diagram of an alarm server provided for an embodiment of the present application is shown in FIG. 2.

[0059] Figure 5 A structural diagram of a monitoring server provided for an embodiment of the present application is shown in FIG. 3.

[0060] Figure 6 A structural diagram of an alarm system provided for an embodiment of the present application is shown in FIG. 4.

[0061] Figure 7 A structural diagram of a computer device provided for an embodiment of the present application is shown in FIG. 5. DETAILED DESCRIPTION

[0062] In order to make the objectives, technical solutions and beneficial effects of the present application clearer, the present application is further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and do not limit the present application.

[0063] In order to facilitate understanding, the terms involved in the embodiments of the present application are explained below.

[0064] Zabbix: Zabbix is an enterprise-level distributed open source monitoring solution. It is a software that can monitor various network parameters and server health and integrity. Zabbix uses a flexible notification mechanism, allowing users to configure mail-based alarms for almost any event. This can quickly feedback the problems of the server. Based on the stored data, Zabbix provides excellent reporting and data visualization functions. These functions make Zabbix an ideal solution for capacity planning. Zabbix supports active polling and passive capture. All reports, statistics and configuration parameters of Zabbix can be accessed through a web-based front-end page. The web-based front-end page can ensure the evaluation of network status and server health from any aspect. After proper configuration, Zabbix can play an important role in IT infrastructure monitoring.

[0065] Big data resource: the big data resource includes HIVE, YANR, HDFS; HIVE is a data warehouse tool based on Hadoop, which can map structured data files into a database table, and the data constructed by HIVE is stored in the HDFS distributed file system as a unit. YARN is a resource management system of Hadoop cluster, which can be divided into a global resource manager ResourceManager and an ApplicationMaster specific to each application. The scheduling of Yarn resources depends on the memory capacity and CPU core number. HDFS is the most reliable file storage system, which is suitable for storing on the cluster running, and is commonly used for storing large data files.

[0066] The alarm method in the embodiment of the application can be applied to Figure 1In the application scenario shown, the scenario includes a monitored device 101, a monitoring server 102, an alarm server 103, a user management terminal 104, a platform administrator terminal 105, and a target user terminal 106. The monitored device 101 can be a business server of a bank or other financial institution, and there can be one or more monitored devices 101. An agent component, which can be a Zabbix agent component, is installed in each monitored device 101, and a monitoring script is set in each monitored device 101. The execution parameters of the monitoring script are specified when each monitoring item is created. The monitoring server 102 can be a Zabbix monitoring server. When the monitoring server 102 invokes the agent component on the monitored device 101, the agent component triggers the monitoring script to execute and obtain the monitoring data of each monitoring item. The monitored device 101 sends the identification of each monitoring item and the monitoring data of each monitoring item to the monitoring server 102 in a one-to-one correspondence. The monitoring server 102 includes a capturing component that obtains the identification of each monitoring item in advance using an automatic discovery rule. The capturing component obtains the monitoring data of each monitoring item according to the one-to-one correspondence between the identification of each monitoring item and the monitoring data of each monitoring item. When the monitoring data satisfies the trigger condition of the trigger corresponding to the monitoring item, the monitoring server 102 determines the target alarm channel according to the type tag of the trigger. One monitoring item corresponds to one trigger. The monitoring server 102 generates target alarm information using the target alarm channel. The target alarm information includes alarm description information, and the alarm description information generated by different alarm channels is different. The monitoring server 102 sends the target alarm information to the alarm server 103. When the alarm server 103 determines that the alarm type is a platform-side alarm according to the alarm description information in the target alarm information, the alarm server 103 sends the target alarm information to the platform administrator terminal 105. When the alarm server 103 determines that the alarm type is a user-side alarm according to the alarm description information in the target alarm information, the alarm server 103 sends the resource description information to the user management terminal 104. When the user management terminal 104 determines that the alarm resource belongs to a personal user according to the resource description information, the user management terminal 104 determines the personal user information as the identification information of the target user terminal 106 and sends the identification information of the target user terminal 106 to the alarm server 103. When the user management terminal 104 determines that the alarm resource belongs to a tenant according to the resource description information, the user management terminal 104 determines the tenant administrator information as the identification information of the target user terminal 106 and sends the identification information of the target user terminal 106 to the alarm server 103. The alarm server 103 sends the alarm information to the target user terminal 106 according to the identification information of the target user terminal 106.

[0067] Based on Figure 1 In the application scenario shown, the application scenario diagram, the embodiment of the application provides a flow of an alarm method, and the flow of the method can be executed by an alarm server and a monitoring server, as shown in the following figure: Figure 2 As shown, the method includes the following steps:

[0068] Step S201, the monitoring server receives the monitoring data of the monitoring items sent by the monitored device.

[0069] Specifically, the monitoring data of the monitoring items can be running data of the big data platform components, survivability index data, big data resource data, etc. The agent component is installed on the monitored device, which triggers the monitoring script to execute and obtains the monitoring data of each monitoring item. The execution parameters of the monitoring script are specified when each monitoring item is created, and the monitoring script generates related commands and executes according to the execution parameters.

[0070] The monitored device sends the identification of each monitoring item and the monitoring data of each monitoring item to the monitoring server by using the sending script. When the monitoring script execution is correct, the monitored device adds a field for identifying successful collection in the monitoring data of each monitoring item. When the monitoring server receives the monitoring data of the monitoring items sent by the monitored device, it determines that the data collection is successful according to the field for identifying successful collection. When the monitoring script execution is incorrect, the monitored device does not add the field for identifying successful collection in the monitoring data of each monitoring item. When the monitoring server receives the monitoring data of the monitoring items sent by the monitored device, it determines that the data collection fails because there is no field for identifying successful collection in the monitoring data. The monitored device uses multi-thread to execute the monitoring script to obtain the monitoring data, and uses an asynchronous mode to send the monitoring data to the monitoring server.

[0071] Optionally, in order to reduce the pressure of the monitoring server, a proxy server can be arranged between the monitoring server and the monitored device, and the monitored device sends the identification of each monitoring item and the monitoring data of each monitoring item to the proxy server by using the sending script, and then the proxy server sends the identification of each monitoring item and the monitoring data of each monitoring item to the monitoring server.

[0072] In a specific implementation, a proxy server can be arranged in different regions, and the proxy server in each region is used to receive the monitoring data sent by the monitored device in the region, and then the proxy server uniformly sends the collected monitoring data to the monitoring server, thereby realizing distributed monitoring and reducing the pressure of the monitoring server.

[0073] Optionally, the capture component of the monitoring server pre-saves the identification of each monitoring item. When the monitoring items are few, the identification of each monitoring item can be manually set, but when the monitoring items are many, the manual setting method is not easy to implement. Therefore, the identification of each monitoring item in the capture component of the monitoring server can be obtained by using an automatic discovery rule.

[0074] Step S202, the monitoring server determines the target alarm channel according to the type mark of the trigger when the monitoring data meets the trigger condition of the corresponding trigger of the monitoring item.

[0075] Specifically, each monitoring item corresponds to one trigger. For a class of identical monitoring items, a set of trigger prototypes can be defined, and then the same trigger can be automatically generated for each monitoring item. Triggers can be configured with different alarm levels and alarm thresholds. Trigger type tags can be pre-set to distinguish different alarm channels. Different alarm channels have corresponding alarm message templates, which can generate different alarm messages.

[0076] Step S203: The monitoring server generates target alarm information using the target alarm channel.

[0077] Specifically, the target alarm information includes alarm description information, as well as hostname, IP address, alarm title, event ID, etc. Different alarm channels generate different alarm description information. For example, different big data resources correspond to different alarm channels, and thus generate different alarm description information.

[0078] In step S204, the monitoring server sends the target alarm information to the alarm server.

[0079] Step S205: The alarm server determines the alarm type based on the alarm description information in the target alarm information.

[0080] Step S206: The alarm server sends the target alarm information to the corresponding alarm receiver according to the alarm type.

[0081] In this embodiment of the invention, when the monitoring data meets the triggering conditions of the trigger corresponding to the monitoring item, the monitoring server determines the target alarm channel based on the trigger type marker, generates target alarm information using the target alarm channel, and then sends the target alarm information to the alarm server. Therefore, alarms can be triggered when the monitoring data is abnormal, instead of needing to be triggered at fixed times, allowing abnormal situations to be handled promptly and ensuring the normal operation of the financial system. Secondly, the monitoring server sets up corresponding alarm channels for different types of monitoring items, generating different types of alarm information using different alarm channels when an alarm occurs. This facilitates the alarm server in distinguishing alarm types upon receiving alarm information and sending the target alarm information to the corresponding alarm receiver based on the alarm type, thereby improving alarm efficiency.

[0082] Optionally, in step S205 above, when the alarm description information does not include resource description information, the alarm server determines the alarm type as a platform-side alarm; when the alarm description information includes resource description information, the alarm server determines the alarm type as a user-side alarm.

[0083] In a specific implementation, the resource description information is used to describe a specific alarm resource, and the resource description information includes a type of the resource, a cluster where the resource is located, and a resource name. Based on the resource description information, a specific alarm resource can be located. The resource description information is located in a resource field of the resource description information. When the alarm server receives target alarm information, it can determine whether the target alarm information includes the resource field. If the target alarm information does not include the resource field, it is determined that the alarm type is a platform-side alarm. If the target alarm information includes the resource field, it is determined that the alarm type is a user-side alarm. The resource description information in the alarm information is used to distinguish the user-side alarm and the platform-side alarm, and the alarm type is distinguished.

[0084] Further, when the alarm type is the platform-side alarm, the alarm server sends the target alarm information to a platform administrator end. When the alarm type is the user-side alarm, the alarm server sends the resource description information to a user management end. The user management end determines identification information of a target user end according to the resource description information, and sends the identification information of the target user end to the alarm server. The alarm server sends alarm information to the target user end according to the identification information of the target user end.

[0085] Specifically, the platform-side alarm refers to monitoring data that is monitoring information related to a big data platform, and the user-side alarm refers to monitoring data that is related to a user. The handlers of the above two kinds of alarms are different, and therefore it is necessary to distinguish the recipients of the alarm information. The platform-side alarm is handled by a platform administrator, and therefore when the alarm type is the platform-side alarm, the alarm server sends the target alarm information to the platform administrator end. The user-side alarm is handled by a user, but a big data user platform involves many users, and therefore the user management end needs to determine a target user according to the resource description information, and then the alarm server sends the target alarm information to the target user end. Since the alarm type is determined, the alarm message is sent to the corresponding alarm recipient for processing according to the alarm type, precise alarm is achieved, and timeliness of alarm processing is ensured.

[0086] Optionally, in a multi-tenant system, when the alarm type is the user-side alarm, the users involved include individual users and tenants. When the user management end determines, according to the resource description information, that the alarm resource belongs to an individual user, the individual user information is determined as the identification information of the target user end. When the user management end determines, according to the resource description information, that the alarm resource belongs to a tenant, the tenant administrator information is determined as the identification information of the target user end. The alarm server sends the alarm information to the target user end according to the identification information of the target user end. By combining the user-side alarm resource with the alarm handler of the multi-tenant system, the resource alarm is effectively sent to the corresponding tenant or individual, and the pertinence of the alarm is improved.

[0087] Optionally, the user management end sends the identification information of the alarm tenant to the alarm server according to the resource description information when determining that the alarm resource belongs to the tenant. The alarm server inserts the identification information of the alarm tenant and the target alarm information into the alarm record table.

[0088] Specifically, the identification information of the alarm tenant can be a tenant ID. After inserting the identification information of the alarm tenant and the target alarm information into the alarm record table, the user can query the alarm information of the tenant on the portal website. The specific process is as follows: the portal website calls the interface of the alarm server and passes the identification information of the alarm tenant, the alarm server queries the alarm record table to obtain the alarm information of the alarm tenant, and then returns the alarm information to the portal website, and the portal website displays the alarm information of the alarm tenant to the user. By setting the alarm record table to record the alarm information of each tenant, the user can subsequently query and learn the alarm situation of the tenant.

[0089] In order to better explain the embodiments of the present application, a kind of alarm method provided by the embodiments of the present application is described below in combination with specific implementation scene, which is executed by monitoring server, alarm server, user management end interaction, as shown in Figure 3 The method comprises the following steps:

[0090] Step S301, the monitoring server receives the monitoring data of the monitoring item sent by the monitored device.

[0091] The agent component is installed on the monitored device. The agent component of the monitored device triggers the monitoring script to execute, and obtains the monitoring data of each monitoring item.

[0092] Step S302, the monitoring server determines the target alarm channel according to the type mark of the trigger when the monitoring data meets the trigger condition of the trigger corresponding to the monitoring item.

[0093] Step S303, the monitoring server generates target alarm information using the target alarm channel.

[0094] Step S304, the monitoring server sends the target alarm information to the alarm server.

[0095] Step S305, the alarm server determines the alarm type according to the alarm description information in the target alarm information.

[0096] Step S306, when the alarm type is platform-side alarm, the alarm server sends the target alarm information to the platform administrator end.

[0097] Step S307, when the alarm type is user-side alarm, the alarm server sends the resource description information to the user management end.

[0098] Step S308, when the user management end determines that the alarm resource belongs to a personal user according to the resource description information, the personal user information is determined as the identification information of the target user end.

[0099] Step S309, when the user management end determines that the alarm resource belongs to a tenant according to the resource description information, the tenant administrator information is determined as the identification information of the target user end.

[0100] Step S310, the user management end sends the identification information of the target user end to the alarm server.

[0101] Step S311, the alarm server sends the alarm information to the target user end according to the identification information of the target user end.

[0102] In the embodiment of the application, when the monitoring data meets the trigger condition of the trigger corresponding to the monitoring item, the monitoring server determines the target alarm channel according to the type mark of the trigger, generates the target alarm information by using the target alarm channel, and then sends the target alarm information to the alarm server, so that the alarm can be triggered when the monitoring data is abnormal, without the need of fixed time alarm, so that the abnormal situation can be processed in time, thereby ensuring the normal operation of the financial system. Secondly, the monitoring server sets the corresponding alarm channel for different types of monitoring items, generates different types of alarm information by using different alarm channels when the alarm occurs, so that the alarm server can distinguish the alarm types when receiving the alarm information, and sends the target alarm information to the corresponding alarm receiving end according to the alarm type, thereby improving the alarm efficiency.

[0103] Based on the same technical concept, the embodiment of the application provides an alarm server, as shown in the figure, the alarm server 400 comprises: Figure 4

[0104] The first receiving module 401 is used for receiving the target alarm information sent by the monitoring server, the target alarm information comprises alarm description information, the target alarm information is generated by the monitoring server according to the type mark of the trigger when it is determined that the monitoring data of the received monitoring item meets the trigger condition of the trigger corresponding to the monitoring item, and the target alarm channel is determined and the target alarm channel is used to generate, one monitoring item corresponds to one trigger, and the alarm description information generated by different alarm channels is different;

[0105] The first processing module 402 is used for determining the alarm type according to the alarm description information in the target alarm information.

[0106] The first sending module 403 is used for sending the target alarm information to the corresponding alarm receiving end according to the alarm type.

[0107] Optionally, the first processing module 402 is specifically used for: ​

[0108] When the resource description information is not included in the alarm description information, the alarm server determines that the alarm type is a platform-side alarm;

[0109] When the resource description information is included in the alarm description information, the alarm server determines that the alarm type is a user-side alarm.

[0110] Optionally, the first sending module 403 is specifically configured to:

[0111] When the alarm type is a platform-side alarm, the target alarm information is sent to a platform administrator end;

[0112] When the alarm type is a user-side alarm, the resource description information is sent to a user management end, so that the user management end determines the identification information of a target user end according to the resource description information, and sends the identification information of the target user end to the alarm server;

[0113] The alarm information is sent to the target user end according to the identification information of the target user end.

[0114] Optionally, when the user management end determines that the alarm resource belongs to a personal user according to the resource description information, personal user information is determined as the identification information of the target user end;

[0115] When the user management end determines that the alarm resource belongs to a tenant according to the resource description information, tenant administrator information is determined as the identification information of the target user end.

[0116] Optionally, the first receiving module 401 is further configured to:

[0117] Receive the identification information of the alarm tenant sent by the user management end, the identification information of the alarm tenant being sent by the user management end when the user management end determines that the alarm resource belongs to a tenant according to the resource description information;

[0118] The first processing module 402 is further configured to:

[0119] Correspondingly insert the identification information of the alarm tenant and the target alarm information into an alarm record table.

[0120] Based on the same technical concept, the embodiment of the present application provides a monitoring server, as shown in the figure, the monitoring server 500 comprises: Figure 5

[0121] A second receiving module 501 is configured to receive the monitoring data of the monitoring item sent by the monitored device;

[0122] ​Trigger module 502 is used to determine the target alarm channel according to the type mark of the trigger when the monitoring data meets the trigger condition of the trigger corresponding to the monitoring item, with one trigger corresponding to one monitoring item;

[0123] The second processing module 503 is used to generate target alarm information using the target alarm channel. The target alarm information includes alarm description information, and different alarm channels generate different alarm description information.

[0124] The second sending module 504 is used to send the target alarm information to the alarm server, so that the alarm server determines the alarm type according to the alarm description information in the target alarm information, and sends the target alarm information to the corresponding alarm receiving end according to the alarm type.

[0125] Based on the same technical concept, embodiments of the present invention provide an alarm system, such as... Figure 6 As shown, the alarm system 600 includes:

[0126] Monitoring server 601, alarm server 602;

[0127] The monitoring server 601 is used to: receive monitoring data of monitoring items sent by the monitored device; when the monitoring data meets the triggering condition of the trigger corresponding to the monitoring item, determine the target alarm channel according to the type mark of the trigger, with one trigger corresponding to one monitoring item; generate target alarm information using the target alarm channel, the target alarm information including alarm description information, different alarm channels generate different alarm description information; and send the target alarm information to the alarm server.

[0128] The alarm server 602 is used to determine the alarm type based on the alarm description information in the target alarm information, and to send the target alarm information to the corresponding alarm receiving end according to the alarm type.

[0129] Based on the same technical concept, embodiments of the present invention provide a computer device, such as... Figure 7 As shown, it includes at least one processor 701 and a memory 702 connected to at least one processor. In this embodiment of the invention, the specific connection medium between the processor 701 and the memory 702 is not limited. Figure 7 Taking the connection between the processor 701 and the memory 702 via a bus as an example, the bus can be divided into address bus, data bus, control bus, etc.

[0130] In this embodiment of the invention, the memory 702 stores instructions that can be executed by at least one processor 701. By executing the instructions stored in the memory 702, at least one processor 701 can perform the steps included in the aforementioned alarm method.

[0131] The processor 701 is the control center of the computer device, and can connect various parts of the computer device by using various interfaces and lines. The processor 701 can be alerted by running or executing instructions stored in the memory 702 and calling data stored in the memory 702. Optionally, the processor 701 can include one or more processing units. The processor 701 can integrate an application processor and a modem processor. The application processor mainly processes an operating system, a user interface, and an application program. The modem processor mainly processes wireless communication. It can be understood that the above-mentioned modem processor can also not be integrated into the processor 701. In some embodiments, the processor 701 and the memory 702 can be implemented on the same chip, and in some embodiments, they can also be implemented on separate chips respectively.

[0132] The processor 701 can be a general-purpose processor, such as a central processing unit (CPU), a digital signal processor, an application specific integrated circuit (ASIC), a field programmable gate array or other programmable logic device, a discrete gate or transistor logic component, a discrete hardware component, and can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of the present application. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the method disclosed in combination with the embodiments of the present application can be directly embodied as hardware processor execution or executed by a combination of hardware and software modules in the processor.

[0133] The memory 702, as a non-volatile computer readable storage medium, can be used to store non-volatile software programs, non-volatile computer executable programs and modules. The memory 702 can include at least one type of storage medium, for example, can include flash memory, hard disk, multimedia card, card type memory, random access memory (RAM), static random access memory (SRAM), programmable read-only memory (PROM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), magnetic memory, magnetic disk, optical disk, etc. The memory 702 is any other medium capable of carrying or storing desired program codes in the form of instructions or data structures and capable of being accessed by a computer, but is not limited thereto. The memory 702 in the embodiments of the present application can also be a circuit or any other device capable of realizing a storage function, used for storing program instructions and / or data.

[0134] Based on the same technical concept, the embodiments of the present application provide a computer readable storage medium, which stores a computer program executable by a computer device, and when the program runs on the computer device, the computer device executes the steps of the alarm method.

[0135] Those skilled in the art should understand that the embodiments of the present application can be provided as a method, or a computer program product. Therefore, the present application can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROMs, optical storage devices, etc.) containing computer-usable program code.

[0136] The present application is described with reference to flowcharts and / or block diagrams of the method, device (system) and computer program product according to the embodiments of the present application. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, and the combination of the flows and / or blocks in the flowcharts and / or block diagrams can be realized by computer program instructions. These computer program instructions can be provided to a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing devices to produce a machine, so that the instructions executed by the computer or other programmable data processing devices produce a device for realizing the functions specified in the flowcharts and / or block diagrams. Figure 1 one flow or multiple flows and / or blocksFigure 1 means for performing the function specified by the block or blocks.

[0137] These computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture including instructions which implement the flow Figure 1 flow or flows and / or blocks Figure 1 means for performing the function specified by the block or blocks.

[0138] These computer program instructions can also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the flow Figure 1 flow or flows and / or blocks Figure 1 steps for performing the function specified by the block or blocks.

[0139] Although preferred embodiments of the application have been described herein, changes and modifications can be suggested to one skilled in the art, and it is intended that the scope of the application be limited only by the appended claims and equivalents thereof.

[0140] Obviously, numerous modifications and variations of the present application are possible in light of the above teachings. It is therefore to be understood that within the scope of the appended claims and their equivalents, the application can be practiced otherwise than as specifically described herein.

Claims

1. An alarm method characterized by, include: The alarm server receives target alarm information sent by the monitoring server. The target alarm information includes alarm description information. The target alarm information is generated by the monitoring server when it determines that the monitoring data of the received monitoring item meets the triggering conditions of the trigger corresponding to the monitoring item. The target alarm channel is determined according to the type tag of the trigger, and the target alarm channel is used. One monitoring item corresponds to one trigger. For a class of monitoring items, a type of trigger prototype is defined, and the same trigger is automatically generated for each monitoring item. Different alarm channels are set with corresponding alarm information templates to generate different alarm description information. The alarm server determines the alarm type based on the alarm description information in the target alarm information. When the alarm description information does not include resource description information, the alarm server determines that the alarm type is a platform-side alarm and then sends the target alarm information to the platform administrator. The resource description information includes: the type of resource, the cluster where the resource is located, and the resource name, which is used to locate the specific alarm resource. When the alarm description information includes resource description information, the alarm server determines that the alarm type is a user-side alarm, and then sends the target alarm information to the user management terminal. When the user management terminal determines that the alarm resource belongs to an individual user based on the resource description information, the individual user information is identified as the target user terminal's identification information; when the user management terminal determines that the alarm resource belongs to a tenant based on the resource description information, the tenant administrator information is identified as the target user terminal's identification information. The user management terminal sends the identification information of the target user terminal to the alarm server, and the alarm server sends the target alarm information to the target user terminal according to the identification information of the target user terminal; the alarm server inserts the identification information of the alarm tenant and the target alarm information into the alarm record table accordingly.

2. An alarm method characterized by, include: The monitoring server receives monitoring data for the monitored items sent by the monitored devices; When the monitoring data meets the triggering condition of the trigger corresponding to the monitoring item, the monitoring server determines the target alarm channel according to the type tag of the trigger. One monitoring item corresponds to one trigger. For a class of the same monitoring items, a class of trigger prototypes is defined, and the same trigger is automatically generated for each monitoring item. The monitoring server uses the target alarm channel to generate target alarm information, which includes alarm description information. Different alarm channels are set with corresponding alarm information templates to generate different alarm description information. The monitoring server sends the target alarm information to the alarm server. The alarm server determines the alarm type based on the alarm description information in the target alarm information. When the alarm description information does not include resource description information, the alarm server determines that the alarm type is a platform-side alarm and then sends the target alarm information to the platform administrator. The resource description information includes: the type of resource, the cluster where the resource is located, and the resource name, which is used to locate the specific alarm resource. When the alarm description information includes resource description information, the alarm server determines that the alarm type is a user-side alarm, and then sends the target alarm information to a user management end; When the user management end determines, according to the resource description information, that the alarm resource belongs to a personal user, personal user information is determined as identification information of a target user end; when the user management end determines, according to the resource description information, that the alarm resource belongs to a tenant, tenant administrator information is determined as the identification information of the target user end; The user management end sends the identification information of the target user end to the alarm server, and the alarm server sends the target alarm information to the target user end according to the identification information of the target user end; and the alarm server inserts the identification information of the alarm tenant and the target alarm information into an alarm record table.

3. An alert server, characterized by Comprise: The first receiving module is used for receiving target alarm information sent by a monitoring server, wherein the target alarm information includes alarm description information, and the target alarm information is generated by the monitoring server according to a target alarm channel determined by the monitoring server when monitoring data of a monitoring item received by the monitoring server meets a trigger condition of a trigger corresponding to the monitoring item, and one monitoring item corresponds to one trigger; one type of trigger prototype is defined for one type of same monitoring item, and the same trigger is automatically generated for each monitoring item; different alarm information templates are set for different alarm channels to generate different alarm description information; The first processing module is used for determining an alarm type according to alarm description information in the target alarm information; when the alarm description information does not include resource description information, the alarm server determines that the alarm type is a platform-side alarm; and when the alarm description information includes resource description information, the alarm server determines that the alarm type is a user-side alarm; The first sending module is used for sending the target alarm information to a corresponding alarm receiving end according to the alarm type; if the alarm type is a platform-side alarm, the target alarm information is sent to a platform administrator end; If the alarm type is a user-side alarm, the target alarm information is sent to a user management end; When the user management end determines, according to the resource description information, that the alarm resource belongs to a personal user, personal user information is determined as identification information of a target user end; when the user management end determines, according to the resource description information, that the alarm resource belongs to a tenant, tenant administrator information is determined as the identification information of the target user end; The user management end sends the identification information of the target user end to the alarm server, and the alarm server sends the target alarm information to the target user end according to the identification information of the target user end; The alarm server inserts the identification information of the alarm tenant and the target alarm information into an alarm record table.

4. A monitoring server, characterized by Comprise: The second receiving module is used for receiving monitoring data of a monitoring item sent by a monitored device; The trigger module is configured to determine a target alarm channel according to a type mark of a trigger when the monitoring data satisfies a trigger condition of the trigger corresponding to the monitoring item, and one monitoring item corresponds to one trigger; for a same type of monitoring items, a type of trigger prototype is defined, and the same trigger is automatically generated for each monitoring item; The second processing module is configured to generate target alarm information by using the target alarm channel, and the target alarm information includes alarm description information; different alarm channels are provided with corresponding alarm information templates to generate different alarm description information; The second sending module is configured to send the target alarm information to an alarm server, so that the alarm server determines an alarm type according to alarm description information in the target alarm information; when the alarm description information does not include resource description information, the alarm server determines that the alarm type is a platform-side alarm, and then sends the target alarm information to a platform administrator end; the resource description information includes a type of resource, a cluster where the resource is located, and a resource name, and is used to locate a specific alarm resource; When the alarm description information includes the resource description information, the alarm server determines that the alarm type is a user-side alarm, and then sends the target alarm information to a user management end; When the user management end determines that an alarm resource belongs to a personal user according to the resource description information, personal user information is determined as identification information of a target user end; when the user management end determines that the alarm resource belongs to a tenant according to the resource description information, tenant administrator information is determined as the identification information of the target user end; The user management end sends the identification information of the target user end to the alarm server, and the alarm server sends the target alarm information to the target user end according to the identification information of the target user end; and the alarm server inserts the identification information of the alarm tenant and the target alarm information into an alarm record table.

5. A computer device comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, characterized in that, The processor implements the steps of the method in claim 1 or the method in claim 2 when executing the program.

6. A computer-readable storage medium, characterized in that, The computer device stores a computer program executable by the computer device, and when the program runs on the computer device, the computer device executes the steps of the method in claim 1 or the method in claim 2.

Citation Information

Patent Citations

  • Application program monitoring management method and device, computer device and storage medium

    CN109558294A

  • Electronic device, server cluster monitoring method and storage medium

    CN109634806A