Alarm collection method, alarm collection system, storage medium and electronic device

Abstract

The present disclosure provides an alarm collection method, an alarm collection system, a computer-readable storage medium and an electronic device, and relates to the field of communication and computer technology. The alarm collection method is applied to the alarm collection system, and the alarm collection system includes a control node and a forwarding node; the method includes: the control node sends a subscription request to the collected device, so that the collected device sends the alarm information to the alarm collection service address in the subscription request; the forwarding node receives the alarm information and forwards the alarm information to the alarm processing service. The present disclosure can improve the problem of mutual influence between different service functions in the alarm collection service and improve the stability of alarm collection.

Description

Background Art

[0002] In network management, in order to monitor the status of devices, it is necessary to collect the alarm information of devices. In related technologies, an alarm collection service instance is usually deployed in the system to provide collection services. However, when an exception occurs in the instance, such as an error in sending a command, no response from the collected device, information congestion, etc., the entire alarm collection service will not be able to operate normally, thereby affecting the stability of network management.

[0003] It should be noted that the information disclosed in the above background technology section is only used to enhance the understanding of the background of the present disclosure, and therefore may include information that does not constitute the prior art known to those skilled in the art. Summary of the invention

[0004] The present disclosure provides an alarm collection method, an alarm collection system, a computer-readable storage medium and an electronic device, thereby at least to a certain extent improving the problem in the related art that an alarm collection service instance exception causes the entire service to fail to operate normally.

[0005] According to a first aspect of the present disclosure, there is provided an alarm collection method, which is applied to an alarm collection system, wherein the alarm collection system comprises a control node and a forwarding node; the method comprises: the control node sends a subscription request to a collected device, so that the collected device sends alarm information to an alarm collection service address in the subscription request; the forwarding node receives the alarm information and forwards the alarm information to an alarm processing service.

[0006] In one implementation, the control node sends a subscription request to the collected device, including: the control node sends a subscription request to the collected device based on a simple network management protocol SNMP set command to set the SNMP trap address of the collected device as the alarm collection service address.

[0007] In one implementation, the forwarding node receives the alarm information and forwards the alarm information to the alarm processing service, including: the forwarding node receives the alarm information sent by the collected device based on the SNMP trap command, and forwards the alarm information to the alarm processing service.

[0008] In one embodiment, the method also includes: the control node obtains the device information of the collected device and stores the device information in an intermediate database; the forwarding node reads the device information from the intermediate database; the forwarding node receives the alarm information and forwards the alarm information to the alarm processing service, including: the forwarding node receives the alarm information, pre-processes the alarm information according to the device information, and forwards the pre-processed alarm information to the alarm processing service.

[0009] In one implementation, the method further includes: the forwarding node storing the alarm information in an intermediate database; and the control node reading the alarm information from the intermediate database.

[0010] According to a second aspect of the present disclosure, there is provided an alarm collection system, the system comprising a control node and a forwarding node; wherein the control node is used to send a subscription request to a collected device, so that the collected device sends alarm information to the alarm collection service address in the subscription request; the forwarding node is used to receive the alarm information and forward the alarm information to the alarm processing service.

[0011] In one embodiment, the system also includes an intermediate database, which is used to: store the device information obtained by the control node from the collected device, so that the forwarding node reads the device information from the intermediate database, and the device information is used by the forwarding node to pre-process the alarm information and forward the pre-processed alarm information to the alarm processing service; and / or store the alarm information sent by the forwarding node, so that the control node reads the alarm information from the intermediate database.

[0012] In one embodiment, the control node includes multiple control service instances, which are used to switch to another control service instance when an abnormality occurs in the currently used control service instance; the forwarding node includes multiple forwarding service instances, which are used to receive the alarm information through load balancing and forward the alarm information to the alarm processing service.

[0013] According to a third aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the alarm collection method of the first aspect and possible implementation methods thereof are implemented.

[0014] According to a fourth aspect of the present disclosure, an electronic device is provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute the alarm collection method of the first aspect and its possible implementation method by executing the executable instructions.

[0015] The technical solution disclosed in this disclosure has the following beneficial effects:

[0016] The control service and forwarding service in the alarm collection service are deployed in different nodes respectively, wherein the control node sends a subscription request to the collected device to control the target address of the alarm information sent by the collected device, and the forwarding node receives the alarm information and forwards it to the alarm processing service. Therefore, when an abnormality occurs in one of the nodes, it does not affect the normal operation of other nodes. In particular, the abnormality of sending information does not affect the reception of information. For example, when an abnormality occurs in the control node, the forwarding node can still maintain normal service and receive alarm information. This improves the problem in the related technology that the abnormality of the alarm collection service instance causes the entire service to fail to operate normally, and improves the stability of alarm collection.

[0017] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The accompanying drawings herein are incorporated into the specification and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the specification are used to explain the principles of the present disclosure. Obviously, the accompanying drawings described below are only some embodiments of the present disclosure, and for ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without creative work.

[0019] Figure 1 A schematic diagram showing a system architecture in the related art;

[0020] Figure 2 A schematic diagram of an alarm collection system in this exemplary embodiment is shown;

[0021] Figure 3 A schematic diagram showing the structure of an electronic device in this exemplary embodiment is shown;

[0022] Figure 4 A flow chart of an alarm collection method in this exemplary embodiment is shown;

[0023] Figure 5 A sub-flow chart of an alarm collection method in this exemplary embodiment is shown;

[0024] Figure 6 A sub-flow chart showing another alarm collection method in this exemplary embodiment;

[0025] Figure 7 A schematic diagram showing another alarm collection system in this exemplary embodiment. DETAILED DESCRIPTION

[0026] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as being limited to the examples set forth herein; on the contrary, these embodiments are provided so that the present disclosure will be more comprehensive and complete, and the concepts of the example embodiments are fully conveyed to those skilled in the art. The described features, structures, or characteristics may be combined in one or more embodiments in any suitable manner. In the following description, many specific details are provided to provide a full understanding of the embodiments of the present disclosure. However, those skilled in the art will appreciate that the technical solutions of the present disclosure may be practiced while omitting one or more of the specific details, or other methods, components, devices, steps, etc. may be adopted. In other cases, known technical solutions are not shown or described in detail to avoid obscuring various aspects of the present disclosure.

[0027] In addition, the accompanying drawings are only schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the figures represent the same or similar parts, and their repeated description will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor devices and / or microcontroller devices.

[0028] Figure 1 The architecture of the alarm collection service in the related art is shown, which uses a distributed cluster to deploy multiple alarm collection service instances, each instance is responsible for a certain number of collected devices, and provides all alarm collection services for these devices. The inventors found that when an exception occurs in a certain instance, the alarm collection service of the corresponding collected device is interrupted, and it is usually necessary to restart the instance or restore it through other methods such as subsequent scheduling. During the service interruption time, the alarm collection service of these collected devices will be affected, and even the alarm information cannot be obtained.

[0029] In view of the above problems, the exemplary embodiments of the present disclosure provide an alarm collection method and an alarm collection system. Figure 1 The alarm collection system according to this exemplary embodiment is described.

[0030] refer to Figure 2As shown, the alarm collection system 210 may include a control node 2110 and a forwarding node 2120. The alarm collection system 210 is used to provide an alarm collection service for the collected device 220. In this exemplary embodiment, the alarm collection service can be divided into two aspects: a control service and a forwarding service. The control node 2110 is used to provide a control service, which means controlling the service process or content of the collection, such as sending a subscription request to the collected device 220 to inform the collected device 220 of the alarm collection service address. In one embodiment, the control node 2110 can obtain task information from the task management service 240 and send a subscription request to the collected device 220 according to the task information. The task management service 240 is used to manage alarm tasks, and can be a service located outside the alarm collection system 210 or a service within the alarm collection system 210. The forwarding node 2120 is used to provide a forwarding service, which means forwarding the alarm information of the collected device 220 to other services, such as the alarm processing service 230. The alarm processing service 230 is used to take processing measures for the alarm information, and may be a service located outside the alarm collection system 210 or a service within the alarm collection system 210 .

[0031] The control node 2110 and the forwarding node 2120 can be regarded as two subsystems within the alarm collection system 210, which can be a server or a cluster of multiple servers, or a virtual machine deployed on a physical device. In one embodiment, the alarm collection system 210 can be a container cluster, such as Kubernetes (k8s for short, a container cluster management system), and the control node 2110 and the forwarding node 2120 can be one or a group of containers in the container cluster, such as a Pod in Kubernetes. In the control node 2110, one or more control service instances can be deployed to actually perform the control service function. In the forwarding node 2120, one or more forwarding service instances can be deployed to actually perform the forwarding service function.

[0032] The alarm collection system 210 can expose only one address to the outside, such as the alarm collection service address, so that it can be represented as a whole service to the outside. For the external collected device 220, the alarm collection service process can be realized by communicating with the address, without the need to specifically communicate with the internal nodes of the alarm collection system 210. Inside the alarm collection system 210, the information sent by the collected device 220 is forwarded to the corresponding node for processing. Figure 3 The external port 2140 of the alarm collection system 210 is an externally exposed address, and all interactive information between the alarm collection system 210 and the collected device 220 can be sent and received through the external port 2140. Such an interactive mode has high flexibility.

[0033] The present disclosure does not limit the communication protocol between the alarm collection system 210 and the collected device 220. In one embodiment, information exchange can be performed between the alarm collection system 210 and the collected device 220 based on SNMP (Simple Network Management Protocol), such as SNMP v1, SNMP v2c, SNMP v3 and any other versions. Among them, the alarm collection system 210 is equivalent to the manager in SNMP, such as NMS (Network Management Station) equipment; the collected device 220 is equivalent to the managed device in SNMP, such as Agent. The information exchange between the two is realized without relying on connection, thereby improving the flexibility of the alarm collection service.

[0034] In one implementation, the managed device 220 may be a network element device, and the alarm collection system 210 may be a backend management system of an operator.

[0035] In one embodiment, the alarm collection system 210 may further include an intermediate database 2130 for storing information that needs to be stored in the control node 2110 and / or the forwarding node 2120. There is no need for direct information exchange between the control node 2110 and the forwarding node 2120, and information exchange can be achieved through the intermediate database 2130. For example, the forwarding node 2120 may store the received alarm information in the intermediate database 2130, and the control node 2110 may read the alarm information from the intermediate database 2130.

[0036] In one embodiment, the intermediate database 2130 does not need to store a large amount of information, but needs to be frequently read and written periodically, and has high requirements for stability. For example, a Redis (Remote Dictionary Server) database with a fast read and write speed can be used as the intermediate database 2130.

[0037] The exemplary embodiment of the present disclosure also provides an electronic device for implementing the alarm collection method. The electronic device may be the above-mentioned alarm collection system 210, the control node 2110 or the forwarding node 2120. Generally, the electronic device may include a processor and a memory, the memory is used to store executable instructions of the processor, and the processor is configured to implement the above-mentioned alarm collection method by executing the executable instructions.

[0038] Reference below Figure 3 The electronic device is described in detail. It should be understood that Figure 3The illustrated electronic device 300 is merely an example and should not bring any limitation to the functions and scope of use of the exemplary embodiment.

[0039] like Figure 3 As shown, the electronic device 300 is in the form of a general computing device. The components of the electronic device 300 may include but are not limited to: at least one processing unit 310, at least one storage unit 320, and a bus 330 connecting different system components (including the processing unit 310 and the storage unit 320).

[0040] The storage unit stores program codes, and the program codes can be executed by the processing unit 310 , so that the processing unit 310 executes the alarm collection method in this exemplary embodiment.

[0041] The storage unit 320 may include a volatile storage unit, such as a random access storage unit (RAM) 321 and / or a cache storage unit 322 , and may further include a read-only storage unit (ROM) 323 .

[0042] The storage unit 320 may also include a program / utility 324 having a set (at least one) of program modules 325, such program modules 325 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.

[0043] The bus 330 may include a data bus, an address bus, and a control bus.

[0044] The electronic device 300 may also communicate with one or more external devices 400 (e.g., a keyboard, a pointing device, a Bluetooth device, etc.), and such communication may be performed through an input / output (I / O) interface 340. The electronic device 300 may also communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network, such as the Internet) through a network adapter 350. Figure 3 As shown, the network adapter 350 communicates with other modules of the electronic device 300 via the bus 330. It should be understood that although Figure 3 Not shown, other hardware and / or software modules may be provided in the electronic device 300, including but not limited to: a display, a microcode, a device driver, a redundant processing unit, an external disk drive array, a RAID system, a tape drive, and a data backup storage system.

[0045] Combine the following Figure 4 The alarm collection method in this exemplary embodiment is described. Figure 4 An exemplary process of the alarm collection method is shown, which may include:

[0046] Step S410, the control node sends a subscription request to the collected device, so that the collected device sends alarm information to the alarm collection service address in the subscription request;

[0047] Step S420: The forwarding node receives the alarm information and forwards the alarm information to the alarm processing service.

[0048] Based on the above method, the control service and forwarding service in the alarm collection service are deployed in different nodes respectively, wherein the control node sends a subscription request to the collected device to control the target address of the collected device to send the alarm information, and the forwarding node receives the alarm information and forwards it to the alarm processing service. Therefore, when an abnormality occurs in one of the nodes, it does not affect the normal operation of other nodes. In particular, the abnormality of sending information does not affect the reception of information. For example, when an abnormality occurs in the control node, the forwarding node can still maintain normal service and receive alarm information. This improves the problem in the related technology that the abnormality of the alarm collection service instance causes the entire service to fail to operate normally, and improves the stability of alarm collection.

[0049] The following are Figure 4 Each step in the procedure is described in detail.

[0050] refer to Figure 4 In step S410, the control node sends a subscription request to the collected device, so that the collected device sends alarm information to the alarm collection service address in the subscription request.

[0051] The subscription request is used to subscribe to the alarm information of the collected device 220, which contains the alarm collection service address. After receiving the subscription request, the collected device 220 obtains the alarm collection service address, and can use this address as the target address when sending alarm information later. It can be seen that the subscription request is equivalent to a setting command, which is used to set the alarm sending address of the collected device 220.

[0052] When the control node 2110 sends a subscription request (or other information) to the collected device 220, it is generally sent through the alarm collection service address. More specifically, when the control node 2110 generates a subscription request, its source address is the actual address of the control node 2110. Before sending it externally, the source address can be converted to the alarm collection service address through the address conversion function. Then, the collected device 220 can obtain the alarm collection service address by parsing the source address of the subscription request.

[0053] In one implementation, the control node 2110 may obtain task information from the task management service 240 , which may be task information related to alarm collection, and send a subscription request to the collected device 220 according to the task information.

[0054] Continue to refer Figure 4 In step S420, the forwarding node receives the alarm information and forwards the alarm information to the alarm processing service.

[0055] After the collected device 220 sends the alarm information to the alarm collection service address, the alarm information is received by the forwarding node 2220 in the alarm collection system 210, rather than by the control node 2110. After receiving the alarm information, the forwarding node 2220 can directly forward it to the alarm processing service 230, or pre-process the alarm information and then forward the pre-processed alarm information to the alarm processing service 230. Pre-processing includes but is not limited to: normalizing the alarm information, such as converting and normalizing the characters in the alarm information; screening the alarm information to filter out noise information and invalid alarm information; authenticating and decrypting the alarm information; performing attribute analysis on the alarm information; assembling the alarm information, etc.

[0056] As can be seen from the above, by independently configuring the control node 2110 and the forwarding node 2220, the control service and the forwarding service in the alarm collection service are separated and executed by different nodes, thereby avoiding mutual influence between the control service and the forwarding service.

[0057] The alarm collection system 210 and the collected device 220 can interact based on SNMP. SNMP provides a variety of interactive commands. The following shows the functions of several major interactive commands in this exemplary embodiment:

[0058] SNMP set: The alarm collection system 210 uses this command to set the value of one or more objects configured on the collection device 220, such as the alarm sending address;

[0059] SNMP get: The alarm collection system 210 uses this command to query the device information of the collected device 220, including the value of one or more objects configured on the collected device 220;

[0060] SNMP trap: The device 220 actively sends alarm information to the alarm collection system 210 through this command.

[0061] In one implementation, the control node sends a subscription request to the collected device, so that the collected device sends the alarm information to the alarm collection service address in the subscription request, which may include the following steps:

[0062] The control node sends a subscription request to the collected device based on the SNMP set command to set the SNMPtrap address of the collected device as the alarm collection service address.

[0063] The SNMP trap address refers to the target address to which the collected information is sent by the collected information device 220 using the SNMP trap command, and is the value of an object configured on the collected information device 220. The control node 2110 sets the value based on the SNMP set command.

[0064] In one implementation, the forwarding node receiving the alarm information and forwarding the alarm information to the alarm processing service may include:

[0065] The forwarding node receives the alarm information sent by the collected equipment based on the SNMP trap command, and forwards the alarm information to the alarm processing service.

[0066] The collected device 220 actively sends alarm information to the alarm collection system 210 based on the SNMP trap command. The alarm collection system 210 receives and forwards the alarm information through the forwarding node 2120.

[0067] As can be seen from the above, within the alarm collection system 210, SNMP set and SNMP trap commands can be separately deployed in different nodes to achieve service separation.

[0068] In one embodiment, reference Figure 5 As shown, the alarm collection method may further include the following steps S510 and S520:

[0069] Step S510, the control node obtains the device information of the collected device and stores the device information in the intermediate database;

[0070] Step S520: The forwarding node reads device information from the intermediate database.

[0071] Among them, the control node 2110 can receive other information besides the alarm information sent by the collected device 220, such as device information. For example, the control node 2110 can obtain the device information based on the SNMP get command. That is, the SNMP set and SNMP get commands can be deployed in the control node 2110, and the control node 2110 can implement various control operations on the collected device 220 based on these two commands. The SNMP trap command is deployed in the forwarding node 2120, and the forwarding node 2120 is only used to receive and forward the alarm information.

[0072] The device information may be any aspect of the collected device 220, such as performance parameters, working parameters, heartbeats used to reflect the device status, etc. The present disclosure does not limit this. The control node 2110 may store the device information in the intermediate database 2130, so that the forwarding node 2120 reads the device information from the intermediate database 2130, thereby realizing the intercommunication of device information without direct interaction between the control node 2110 and the forwarding node 2120.

[0073] In one implementation, the forwarding node receiving the alarm information and forwarding the alarm information to the alarm processing service may include the following steps:

[0074] The forwarding node receives the alarm information, pre-processes the alarm information according to the device information, and forwards the pre-processed alarm information to the alarm processing service.

[0075] The present disclosure does not limit the specific method of preprocessing. Exemplarily, the forwarding node 2120 may normalize the relevant parameters in the alarm information according to the performance parameters in the device information.

[0076] In addition, the forwarding node 2120 may also forward the device information to other nodes such as the alarm processing service 230 .

[0077] In one embodiment, reference Figure 6 As shown, the alarm collection method may further include the following steps S610 and S620:

[0078] Step S610, the forwarding node stores the alarm information in an intermediate database;

[0079] Step S620: The control node reads alarm information from the intermediate database.

[0080] The forwarding node 2120 may store the received alarm information immediately in the intermediate database 2130, or may periodically store the unstored alarm information in batches in the intermediate database 2130. The control node 2110 reads the alarm information from the intermediate database 2130, thereby realizing the intercommunication of alarm information without direct interaction between the control node 2110 and the forwarding node 2120.

[0081] The control node 2110 may determine the control operation on the collected device 220 based on the alarm information, or may send the alarm information to other nodes such as the task management service 240 .

[0082] Based on the above description, it can be known that in the alarm collection system 210, the control node 2110 is used to send a subscription request to the collected device 220, so that the collected device 220 sends the alarm information to the alarm collection service address in the subscription request; the forwarding node 2120 is used to receive the alarm information and forward the alarm information 230 to the alarm processing service. When the alarm collection system 210 also includes an intermediate database 2130, it can be used to: store the device information obtained by the control node 2110 from the collected device 220, so that the forwarding node 2120 reads the device information from the intermediate database 2130, and the device information is used for the forwarding node 2120 to pre-process the alarm information and forward the pre-processed alarm information to the alarm processing service 230; and / or store the alarm information sent by the forwarding node 2120, so that the control node 2110 reads the alarm information from the intermediate database 2130.

[0083] In one embodiment, the control node 2110 may include multiple control service instances. Since the frequency of the control task is relatively low and the operations for all the collected devices 220 can be aggregated, there is no need to set too many control service instances. Figure 7 As shown, the control node 2110 may include a control service instance 1 and a control service instance 2, and each control service instance may provide a control service independently. When one or more control service instances are abnormal, the tasks of the abnormal control service instances may be dispatched to other control service instances. For example, when the control service instance 1 is abnormal, its tasks are dispatched to the control service instance 2. Alternatively, only one control service instance is used at the same time, and when the currently used control service instance is abnormal, another control service instance is switched to be used. This ensures the availability of the control service and improves the disaster recovery capability of the control service.

[0084] In one embodiment, reference Figure 7 As shown, the forwarding node 2120 may include multiple forwarding service instances, such as forwarding service instance 1, forwarding service instance 2, and forwarding service instance 3 shown in the figure, and these forwarding service instances may be in working state at the same time. Thus, when the alarm collection system 210 receives alarm information, the alarm information may be distributed to a certain forwarding service instance in the forwarding node 2120 through the load balancing mechanism, and the forwarding service instance receives the alarm information and forwards it to the alarm processing service 230, thereby improving the flexibility of the forwarding service. In addition, when one or more forwarding service instances are abnormal, they may be disabled and only the normal forwarding service instances may be used, thereby improving the disaster recovery capability of the forwarding service.

[0085] The exemplary embodiments of the present disclosure also provide a computer-readable storage medium, which can be implemented in the form of a program product, which includes a program code, and when the program product is run on an electronic device, the program code is used to cause the electronic device to perform the steps described in the above "Exemplary Method" section of this specification according to various exemplary embodiments of the present disclosure. In an optional embodiment, the program product can be implemented as a portable compact disk read-only memory (CD-ROM) and includes program code, and can be run on an electronic device, such as a personal computer. However, the program product of the present disclosure is not limited to this, and in this document, the readable storage medium can be any tangible medium containing or storing a program, which can be used by or in combination with an instruction execution system, device or device.

[0086] The program product may use any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of readable storage media (a non-exhaustive list) include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0087] Computer readable signal media may include data signals propagated in baseband or as part of a carrier wave, in which readable program code is carried. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Readable signal media may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0088] The program code embodied on the readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the foregoing.

[0089] Program code for performing the operations of the present disclosure may be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In cases involving a remote computing device, the remote computing device may be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., through the Internet using an Internet service provider).

[0090] It should be noted that, although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the exemplary embodiments of the present disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided into multiple modules or units to be embodied.

[0091] It will be appreciated by those skilled in the art that various aspects of the present disclosure may be implemented as systems, methods or program products. Therefore, various aspects of the present disclosure may be specifically implemented in the following forms, namely: complete hardware implementation, complete software implementation (including firmware, microcode, etc.), or implementations combining hardware and software aspects, which may be collectively referred to herein as "circuit", "module" or "system". Those skilled in the art will readily think of other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any variations, uses or adaptive changes of the present disclosure, which follow the general principles of the present disclosure and include common knowledge or customary technical means in the art that are not disclosed in the present disclosure. The specification and implementation are intended to be exemplary only, and the true scope and spirit of the present disclosure are indicated by the claims.

[0092] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. An alarm collection method, characterized in that: Applied to an alarm collection system, the alarm collection system includes a control node and a forwarding node, the control node and the forwarding node are independently set; the method includes: The control node sends a subscription request to the collected device, so that the collected device sends alarm information to the alarm collection service address in the subscription request; the method also includes: when the control node generates a subscription request, the source address is the actual address of the control node; before sending it externally, the source address is converted into the alarm collection service address through an address conversion function; the collected device obtains the alarm collection service address by parsing the source address of the subscription request; The forwarding node receives the alarm information and forwards the alarm information to an alarm processing service; The forwarding node receiving the alarm information and forwarding the alarm information to the alarm processing service includes: The forwarding node pre-processes the received alarm information and forwards the pre-processed alarm information to the alarm server; The preprocessing includes any of the following: Screen the alarm information to filter out noise information or invalid alarm information; Authenticate and decrypt the alarm information; Analyze the attributes of the alarm information; Assemble the warning information; The method further comprises: The control node obtains the device information of the collected device and stores the device information in an intermediate database; The forwarding node reads the device information from the intermediate database; The forwarding node receives the alarm information and forwards the alarm information to the alarm processing service, including: The forwarding node receives the alarm information, pre-processes the alarm information according to the device information, and forwards the pre-processed alarm information to the alarm processing service; The method further comprises: The forwarding node stores the alarm information in an intermediate database; The control node reads the alarm information from the intermediate database.

2. The method according to claim 1, characterized in that The control node sends a subscription request to the collected device, including: The control node sends a subscription request to the collected device based on a simple network management protocol (SNMP) set command, so as to set the SNMP trap address of the collected device as the alarm collection service address.

3. The method according to claim 2, characterized in that The forwarding node receives the alarm information and forwards the alarm information to the alarm processing service, including: The forwarding node receives the alarm information sent by the collected equipment based on the SNMP trap command, and forwards the alarm information to the alarm processing service.

4. An alarm collection system, characterized in that: The system includes a control node and a forwarding node, and the control node and the forwarding node are independently arranged; wherein, The control node is used to send a subscription request to the collected device, so that the collected device sends the alarm information to the alarm collection service address in the subscription request; the system is also configured as follows: when the control node generates a subscription request, the source address is the actual address of the control node; before sending it externally, the source address is converted into the alarm collection service address through the address conversion function; the collected device obtains the alarm collection service address by parsing the source address of the subscription request; The forwarding node is used to receive the alarm information and forward the alarm information to the alarm processing service; The forwarding node is configured as: Used to pre-process the received alarm information and forward the pre-processed alarm information to the alarm server; The preprocessing includes any of the following: Screen the alarm information to filter out noise information or invalid alarm information; Authenticate and decrypt the alarm information; Analyze the attributes of the alarm information; Assemble the warning information; The system is also configured to: The control node obtains the device information of the collected device and stores the device information in an intermediate database; The forwarding node reads the device information from the intermediate database; The forwarding node receives the alarm information and forwards the alarm information to the alarm processing service, including: The forwarding node receives the alarm information, pre-processes the alarm information according to the device information, and forwards the pre-processed alarm information to the alarm processing service; The system is also configured to: The forwarding node stores the alarm information in an intermediate database; The control node reads the alarm information from the intermediate database.

5. The system according to claim 4, characterized in that The system further comprises an intermediate database for: storing the device information obtained by the control node from the collected device, so that the forwarding node reads the device information from the intermediate database, and the device information is used by the forwarding node to pre-process the alarm information and forward the pre-processed alarm information to the alarm processing service; and / or The alarm information sent by the forwarding node is stored, and the control node reads the alarm information from the intermediate database.

6. The system according to claim 4, characterized in that The control node includes a plurality of control service instances, and is used to dispatch tasks of the abnormal control service instances to other control service instances when an abnormality occurs in one or more of the control service instances; The forwarding node includes a plurality of forwarding service instances, which are used to receive the alarm information through load balancing and forward the alarm information to the alarm processing service.

7. A computer-readable storage medium, characterized in that: The invention comprises a computer program, which implements the method according to any one of claims 1 to 3 when being executed by a processor.

8. An electronic device, characterized in that: include: processor; A memory, configured to store executable instructions of the processor; The processor is configured to implement the method according to any one of claims 1 to 3 by executing the executable instructions.

Images