A method, device and medium for detecting disorder of timing indicators
By performing out-of-order time detection of received timing indicators, the problem of inaccurate detection caused by out-of-order timing indicators is solved, the detection efficiency and accuracy are improved, and a more intelligent detection system is realized.
Patent Information
- Application Number
- CN202111119161.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-09-24
- Publication Date
- 2025-05-02
- Estimated Expiration
- 2041-09-24
AI Technical Summary
The timing indicators that arrive at the abnormal detection system may be out of order, resulting in inaccurate detection results and uncertain delay waiting time manually, resulting in problem discovery time lag and ineffective detection.
It provides a method for detecting timing indicators out of order. By receiving timing indicators delivered by the application process, it performs out of order time detection on each indicator, outputs out of order time, and judges whether the indicators are out of order based on the detection configuration and timestamp.
It improves the accuracy and efficiency of timing indicator detection, avoids the uncertainty of manually setting delay time, and enhances the intelligence and user experience of the detection system.
Smart Images

Figure CN113934458B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of computer technology, and in particular to a method, device and medium for detecting disorder of timing indicators. Background Art
[0002] Time series indicators are usually output by terminal services at certain intervals, or reported after being collected regularly by proxy services. The original time series indicators contain high dimensions. In many scenarios, it is necessary to aggregate such original time series indicators to aggregate higher-dimensional time series indicators and perform detection and alarm on high-dimensional time series indicators. For example, an application consists of multiple instances, and each instance reports the total number of requests per second (qps) within one minute at an interval of one minute. If an alarm is issued for a single host, it may not be completely accurate due to load balancing scheduling issues. We need to sum the qps of all host instances of the application, calculate the application-level qps, and then send it to the anomaly detection system for detection and alarm.
[0003] The specific process is as follows:
[0004] After the application process is started, the time series indicators are regularly output to the local file. The server starts an agent process (SmartAgent) to report the time series indicators output by the application to Kafka. The Flink aggregation task consumes the time series indicator data on Kafka, waits for 1 minute and 30 seconds locally, and then aggregates and outputs the time series indicators of the previous minute. The waiting time of 1 minute and 30 seconds here is because the time of the time series indicators of the previous minute output by the application may be any second in 1 minute, plus the possible delay of the agent, so we add a 30-second waiting time to calibrate the aggregation result. The aggregation task outputs the aggregated time series indicators to the anomaly detection Kafka. After the anomaly detection system receives the time series indicators, it applies the detection algorithm and outputs the detection results.
[0005] The problems are as follows:
[0006] Some of the time series indicators output by the application use the minute-level alignment method. The time series indicators start to be output at 1 minute and 0 seconds, which will cause peak problems. In addition, the delay in reporting on the agent side and the delay in the flink task, as well as the backtracking of the time series indicators output by some tasks, will re-correct the time series indicators of the previous few minutes of output. The time series indicators that finally reach the anomaly detection system may be out of order, and the same minute time series indicators may arrive multiple times. The old practice is to only receive the time series indicators that arrive for the first time and discard the expired time series indicators. However, the time series indicators that arrive for the first time are inaccurate due to the above reasons, resulting in inaccurate final detection results, false alarms, and reduced alarm accuracy. Summary of the invention
[0007] In order to overcome the above-mentioned technical defects, the purpose of the present invention is to provide a method, device and medium for detecting disorder of timing indicators, so as to solve the problem that when the timing indicators arriving at the abnormal detection system are disordered, the uncertainty of the delayed waiting time of the timing indicators is caused by manual setting. On the one hand, it leads to a time lag in problem discovery, and on the other hand, the specific delay time cannot be manually determined for a large number of timing indicators one by one. In addition to unsatisfactory detection effect, the need to manually set them one by one is also slow.
[0008] The specific technical solutions provided by the embodiments of the present invention are as follows:
[0009] In a first aspect, a method for detecting disorder of timing indicators is provided, the method comprising:
[0010] Receive one or more timing indicators passed by the application process;
[0011] Perform out-of-sequence duration detection on each timing indicator;
[0012] Output the out-of-sequence duration of the timing indicator.
[0013] Furthermore, before performing out-of-sequence duration detection on each timing indicator, the method includes:
[0014] The detection configuration of the timing indicator is read from the database, including the initial disorder period and the disorder detection observation period, and the timing indicator detector is initialized after the reading is completed.
[0015] Furthermore, the out-of-sequence duration detection for each timing indicator includes:
[0016] Compare the one or more timing indicators transmitted by the receiving application process with the current timing indicator timestamp, determine whether the timing indicator is greater than or equal to the current timing indicator timestamp, and obtain a first determination result;
[0017] A corresponding detection result is obtained according to the first judgment result.
[0018] Further, obtaining the corresponding detection result according to the first judgment result specifically includes:
[0019] If the first judgment result is yes, the detection result is: disorder occurs;
[0020] If the first judgment result is no, the detection result is: occurrence order.
[0021] Furthermore, when disorder occurs, the disorder duration detection for each timing indicator further includes:
[0022] Determine whether the disorder occurs for the first time, and if so, record the start time of the disorder;
[0023] If not, the maximum out-of-order period is updated.
[0024] Further, after recording the out-of-order start time, the method further comprises:
[0025] If no timing indicator arrives after a long period of time, the initial out-of-order start time is adjusted to the current time.
[0026] Furthermore, the out-of-sequence duration detection for each timing indicator further includes:
[0027] Detection disorder duration;
[0028] Determine whether the out-of-order duration exceeds the out-of-order detection observation period;
[0029] If so, mark the timing indicator as out of order, update the most recent out of order watermark, and return the detected out of order duration;
[0030] If not, continue testing.
[0031] Further, after returning the detected out-of-sequence duration, the method further includes:
[0032] According to the detected out-of-order duration, the out-of-order timing indicator is placed in a waiting window that is greater than or equal to the out-of-order duration, and then the out-of-order duration detection is performed.
[0033] In a second aspect, a timing indicator disorder detection device is provided, the device comprising:
[0034] A memory, a processor, and a computer program stored in the memory, wherein the processor executes the computer program to implement the steps of the timing indicator disorder detection method as described in any one of the first aspects.
[0035] In a third aspect, a computer storage medium is provided, the medium comprising:
[0036] A computer program is stored thereon, and when the computer program is executed by a processor, the steps of the timing indicator disorder detection method described in any one of the first aspects are implemented.
[0037] Compared with the prior art, the technical solution provided by the embodiment of the present invention detects the disorder duration of each timing indicator by receiving one or more timing indicators transmitted by the application process, and outputs the disorder duration of the timing indicator. The embodiment of the present invention can solve the problem that when the timing indicators arriving at the abnormal detection system are disordered, the uncertainty of the delayed waiting time of the timing indicators is caused by manual setting. On the one hand, it leads to a time lag in problem discovery, and on the other hand, the specific delay time cannot be manually determined for a large number of timing indicators one by one. In addition to the unsatisfactory detection effect, the problem of slow efficiency of manual setting one by one is also solved, which makes the detection effect more intelligent and improves the user experience. BRIEF DESCRIPTION OF THE DRAWINGS
[0038] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.
[0039] Figure 1 A framework diagram of a method for detecting out-of-order timing indicators provided in Embodiment 1 of the present invention;
[0040] Figure 2 A specific flow chart of the timing indicator disorder detection method provided in the second embodiment of the present invention;
[0041] Figure 3 A flowchart of a method for detecting a timing indicator disorder provided in Embodiment 2 of the present invention;
[0042] Figure 4 A curve chart of sequential timing index numbers provided in the second embodiment of the present invention;
[0043] Figure 5 A curve chart of the out-of-sequence timing index number provided in the second embodiment of the present invention;
[0044] Figure 6 A curve chart of the timing index number in the detection provided by the second embodiment of the present invention;
[0045] Figure 7 A curve chart of the detector disorder size statistics provided in the second embodiment of the present invention;
[0046] Figure 8 A schematic diagram of a method for detecting out-of-order timing indicators provided in Embodiment 2 of the present invention;
[0047] Fig. 9 The exemplary system provided for the fourth embodiment of the present invention can be used to implement the various embodiments described in this application. DETAILED DESCRIPTION
[0048] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution in the embodiment of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiment of the present invention. Obviously, the described embodiment is only a part of the embodiment of the present invention, not all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.
[0049] It should be noted that, unless the context clearly requires otherwise, words such as “include”, “including” and similar words throughout the specification and claims should be interpreted as including rather than exclusive or exhaustive; that is, the meaning is “including but not limited to”.
[0050] Furthermore, in the description of the present invention, unless otherwise specified, “plurality” means two or more.
[0051] Embodiment 1
[0052] The embodiment of the present invention provides a method for detecting disorder of timing indicators, such as Figure 1 As shown, the method may include:
[0053] Step S1, receiving one or more timing indicators transmitted by the application process;
[0054] Specifically, the implementation process of step S1 may include:
[0055] Add a time series indicator disorder detection engine to the anomaly detection system.
[0056] Among them, the time series indicator disorder detection engine is a module of the anomaly detection system.
[0057] Step S3, performing out-of-sequence duration detection on each timing indicator;
[0058] Step S4, outputting the out-of-sequence duration of the timing indicator.
[0059] Embodiment 2
[0060] The embodiment of the present invention provides a method for detecting disorder of timing indicators, such as Figure 2 As shown, the method may include:
[0061] Step S1, receiving one or more timing indicators transmitted by the application process;
[0062] Specifically, the implementation process of step S1 may include:
[0063] Add a time series indicator disorder detection engine to the anomaly detection system.
[0064] Among them, the time series indicator disorder detection engine is a module of the anomaly detection system.
[0065] Step S2, reading the detection configuration of the timing indicator from the database, including the initial disorder period and disorder detection observation period, and initializing the timing indicator detector after the reading is completed.
[0066] Specifically, the implementation process of step S2 may include:
[0067] The anomaly detection system receives the timing indicators passed by the application process, reads the detection configuration of the timing indicators from the database, including the initial disorder mark, the initial disorder period, and the disorder detection observation period M, and initializes the timing indicator detector after the reading is completed.
[0068] Step S3, performing out-of-sequence duration detection on each timing indicator;
[0069] Figure 3 A flowchart of a method for detecting a timing indicator disorder provided in Embodiment 2 of the present invention;
[0070] Step S31, performing out-of-sequence duration detection on each timing indicator, includes:
[0071] Compare the one or more timing indicators transmitted by the receiving application process with the current timing indicator timestamp, determine whether the timing indicator is greater than or equal to the current timing indicator timestamp, and obtain a first determination result;
[0072] A corresponding detection result is obtained according to the first judgment result.
[0073] Further, obtaining the corresponding detection result according to the first judgment result specifically includes:
[0074] If the first judgment result is yes, the detection result is: disorder occurs;
[0075] If the first judgment result is no, the detection result is: occurrence order.
[0076] Here, the timing indicator disorder detection engine determines the timestamp of the received timing indicator. If it is greater than or equal to the current timing indicator timestamp, it indicates disorder occurs; if it is less than the current timing indicator timestamp, it indicates order occurs.
[0077] In addition, the detection result is not necessarily obtained based on the first judgment result. Although the detection through the first judgment result is out of order, the result returned by the local detection may still be in order, because there is also an observation period during the detection period, and it is necessary to wait during the observation period. Only when the time exceeds the out of order waterline will it be determined that the detection result is out of order. When the time has not exceeded the out of order waterline, the result returned by the local detection is in order.
[0078] Or when the detection results are in order according to the first judgment result, but because the waterline period has not been reached, the results returned by the local detection are still out of order.
[0079] Among them, the water level line W is a set constant, for example, 10 minutes. When it is in a disordered state, if the continuous W time length detection results are all sequential, it is considered that the water level line W is exceeded and the state should be changed to sequential; when it is in a sequential state, if the continuous W time length detection results are all disordered, it is considered that the water level line is exceeded and the state should be changed to disordered.
[0080] A timestamp is a complete and verifiable piece of data that can indicate that a piece of data existed at a specific point in time. It is proposed mainly to provide users with an electronic evidence to prove the time when certain data of the user was generated.
[0081] It can be understood that the current state is out of order. If the detection occurs in order, the detection results include:
[0082] Calculate the difference between the sequence start time and the current time to determine whether the difference between the sequence start time and the current time is less than the water level line, and obtain a second determination result;
[0083] If the second judgment result is yes, the detection result is the current disorder state of the return timing indicator;
[0084] If the second judgment result is no, the detection result is to mark the timing indicator as a sequential detection state, reset the sequential start time to 0, reset the disordered start time to 0, and return to the detection result.
[0085] Specifically, when in a disordered state and a sequence is detected, if the difference between the sequence start time and the current time is less than the waterline, the current disordered state of the timing indicator is returned; if the difference between the sequence start time and the current time is greater than the waterline, the timing indicator state is marked as a sequential state, the disordered start time is reset to 0, the sequence start time is reset to 0, and the detection result is returned.
[0086] Here, the sequential start time and the out-of-sequence start time are the start times of the waterline.
[0087] For example, if the current state is sequential, when a disordered timing indicator is received, the water level W will change from 0 upwards. After N minutes, it will reach the water level and trigger the detection result. The detection result includes disordered and sequential states. If the disordered timing indicator is found for the first time, the disordered start time is marked. When it exceeds the water level, it is marked as a disordered state.
[0088] If the current state is out of order, if the sequential timing indicator is found for the first time, mark the start time of the sequence. When it exceeds the watermark and is still sequential, it is marked as a sequential state.
[0089] If the disorder is first discovered and the disorder start time has been marked, and at the same time it is determined that the current timing indicator is disordered, it means that disorder detection is in progress, that is, when it is in the disorder detection state, a sequential timing indicator is received after a long time, and this sequential timing indicator is temporarily ignored; when the next timing indicator received is disordered, it can be determined to be in a disordered state, and if the next timing indicator received is sequential, it is restored to a sequential state.
[0090] When in the disordered state, if the timing indicator has not been updated for a long time, when a new timing indicator arrives, the disorder start time is set to the current disorder watermark, or if disorder has not occurred for a long time, it is set to order.
[0091] like Figure 4 Shown is a graph of sequential time series indicator numbers;
[0092] Step S32, when disorder occurs, the disorder duration detection is performed on each timing indicator, and further includes:
[0093] Determine whether the disorder occurs for the first time, and if so, record the start time of the disorder;
[0094] If not, the maximum out-of-order period is updated.
[0095] Here, if the disorder is found for the first time, the start time of the disorder is recorded; if the disorder is not found for the first time, the maximum disorder period is updated.
[0096] Step S33, after recording the out-of-order start time, includes:
[0097] If no timing indicator arrives after a long period of time, the initial out-of-order start time is adjusted to the current time.
[0098] Specifically, after the timing indicator detects disorder, if no timing indicator arrives after a long period of time, the initial disorder start time is adjusted to the current time.
[0099] The out-of-order time here is the out-of-order start time recorded when the out-of-order first occurs.
[0100] The disorder start time is used to observe the duration of disorder. When the timing indicator is in a sequential state, the disorder start time is recorded when the disorder is first detected. Thereafter, each time a disorder occurs, the latest disorder time is recorded. If the difference between the latest disorder time and the first disorder start time exceeds 10 minutes, the timing indicator is marked as a disorder state, and the maximum disorder duration is recorded.
[0101] like Figure 5 Shown is a graph of out-of-sequence timing indicator numbers.
[0102] Step S34, performing out-of-sequence duration detection on each timing indicator, further includes:
[0103] Detection disorder duration;
[0104] Determine whether the out-of-order duration exceeds the out-of-order detection observation period;
[0105] If so, mark the timing indicator as out of order, update the most recent out of order watermark, and return the detected out of order duration;
[0106] If not, continue testing.
[0107] like Figure 6 Shown is a graph of the number of timing indicators in the test;
[0108] Specifically, the implementation process of step S34 may include:
[0109] When disorder is detected, the disorder duration is detected, and it is determined whether the detected disorder duration exceeds the disorder detection observation period. If it exceeds, the timing indicator is marked as disorder, the latest disorder watermark W is updated, and the detected disorder duration is returned.
[0110] Among them, the water level line W is a set constant, for example, 10 minutes. When it is in a disordered state, if the continuous W time length detection results are all sequential, it is considered that the water level line W is exceeded and the state should be changed to sequential; when it is in a sequential state, if the continuous W time length detection results are all disordered, it is considered that the water level line is exceeded and the state should be changed to disordered.
[0111] It can be understood that when the anomaly detection system receives a time series indicator, it will record the timestamp of this time series indicator. If it receives a time series indicator with a smaller timestamp than this time series indicator, there will be a difference between the two timestamps. The maximum difference is the disorder duration L.
[0112] like Figure 7 Shown is a graph of detector out-of-order size statistics;
[0113] According to the curve chart of the detector disorder size statistics, the Y-axis shows the number of sequences in each type of detection that are in a disordered state, and the dimension aggregation shows the disorder duration. The statistics of the disorder detection results are more intuitively displayed through the curve chart.
[0114] Figure 8 A schematic diagram of a method for detecting out-of-order timing indicators provided in Embodiment 2 of the present invention;
[0115] It is understandable that when the detection system receives the timing indicators reported by the application process in sequence, for example, it receives the timing indicators of 2 minutes after the 3rd minute, it finds disorder and marks the start time of the disorder.
[0116] At the 13th minute, it was found that the timing indicators of 12 minutes were received. Since the time from the out-of-order marking exceeded the out-of-order waterline W, out-of-order was still found. At this time, the timing indicators were officially marked as out-of-order, the out-of-order duration was 1 minute, and the out-of-order detection time was reset.
[0117] At the 23rd minute, it is found that the out-of-order watermark W has been exceeded since the last marking time, and out-of-order is still found, and the out-of-order duration is inconsistent with the currently recorded out-of-order duration, so the out-of-order time is updated.
[0118] After marking the out-of-sequence time, if the timing indicator is found to be in sequence, the sequence time is recorded. If the timing indicator is still in sequence after W consecutive out-of-sequence waterline cycles, the timing indicator is marked as sequential, the out-of-sequence time is returned to 0, and the timing indicator enters the sequential state.
[0119] Step S35, after returning the detected out-of-order duration, further includes:
[0120] According to the detected out-of-order duration, the out-of-order timing indicator is placed in a waiting window that is greater than or equal to the out-of-order duration, and then the out-of-order duration detection is performed.
[0121] Specifically, the implementation process of step S35 may include:
[0122] According to the out-of-order duration detected by the return, the timing indicator is placed in a waiting window that is greater than or equal to the out-of-order duration. After the waiting window, anomaly detection is performed.
[0123] The waiting window time is greater than or equal to the out-of-order time L, and can be 1 minute, 2 minutes, 3 minutes, 5 minutes, etc.
[0124] Among them, the anomaly detection system performs cyclic detection and issues alarm prompts.
[0125] Step S4, outputting the out-of-sequence duration of the timing indicator.
[0126] The technical solution provided by the embodiment of the present invention receives one or more timing indicators transmitted by the application process, performs out-of-order duration detection on each timing indicator, and outputs the out-of-order duration of the timing indicator. The embodiment of the present invention can solve the problem that when the timing indicators arriving at the abnormal detection system are out of order and are manually set, the uncertainty of the delayed waiting time of the timing indicators leads to a time lag in problem discovery on the one hand, and on the other hand, the specific delay time cannot be manually determined for a large number of timing indicators one by one. In addition to the unsatisfactory detection effect, the problem of slow efficiency of manual setting one by one is also solved, which makes the detection effect more intelligent and improves the user experience.
[0127] Embodiment 3
[0128] The present invention provides a timing indicator disorder detection device, comprising a memory, a processor and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, a timing indicator disorder detection method can be implemented. The processor comprises a timing indicator receiving module, a timing indicator processing module, a timing indicator detection module and a timing indicator output module.
[0129] In this embodiment, the timing indicator receiving module receives one or more timing indicators transmitted by the application process; the timing indicator detection module performs out-of-sequence duration detection on each timing indicator; and the timing indicator output module outputs the out-of-sequence duration of the timing indicator.
[0130] Furthermore, the timing indicator processing module is used to read the detection configuration of the timing indicator from the database before performing out-of-sequence duration detection on each timing indicator, including the initial out-of-sequence period and the out-of-sequence detection observation period, and initialize the timing indicator detector after the reading is completed.
[0131] Furthermore, the timing indicator detection module can also be used to perform out-of-sequence duration detection on each timing indicator, compare one or more timing indicators passed by the receiving application process with the current timing indicator timestamp, determine whether the timing indicator is greater than or equal to the current timing indicator timestamp, and obtain a first judgment result; and obtain a corresponding detection result based on the first judgment result.
[0132] Furthermore, the timing indicator detection module can also be used to obtain the corresponding detection result based on the first judgment result. If the first judgment result is yes, the detection result is: disorder occurs; if the first judgment result is no, the detection result is: order occurs.
[0133] Furthermore, the timing indicator detection module can also be used to detect the disorder duration of each timing indicator when disorder occurs, to determine whether it is the first time disorder occurs, if so, to record the disorder start time; if not, to update the maximum disorder period.
[0134] Furthermore, the timing indicator detection module may also be used to adjust the initial out-of-sequence time to the current time if no timing indicator arrives after a long period of time after the out-of-sequence start time is recorded.
[0135] Furthermore, the timing indicator detection module can also be used to perform out-of-order duration detection on each timing indicator, detect the out-of-order duration; determine whether the out-of-order duration exceeds the out-of-order detection observation period; if so, mark the timing indicator as out-of-order, update the most recent out-of-order waterline, and return the detected out-of-order duration; if not, continue detecting.
[0136] Furthermore, the timing indicator detection module can also be used to, after returning the detected out-of-order duration, place the out-of-order timing indicator into a waiting window greater than or equal to the out-of-order duration according to the returned detected out-of-order duration, and then perform out-of-order duration detection.
[0137] The technical solution provided by the embodiment of the present invention has the following beneficial effects:
[0138] By receiving one or more timing indicators transmitted by the application process, performing disorder duration detection on each timing indicator, and outputting the disorder duration of the timing indicator. The embodiment of the present invention can solve the problem that when the timing indicators arriving at the abnormal detection system are disordered, the uncertainty of the delayed waiting time of the timing indicators is caused by manual setting. On the one hand, it leads to a time lag in problem discovery, and on the other hand, the specific delay time cannot be manually determined for a large number of timing indicators one by one. In addition to the unsatisfactory detection effect, the problem of slow efficiency of manual setting one by one is also solved, which makes the detection effect more intelligent and improves the user experience.
[0139] Embodiment 4
[0140] The present invention provides a computer storage medium, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the following steps are implemented:
[0141] Receive one or more timing indicators passed by the application process;
[0142] Perform out-of-sequence duration detection on each timing indicator;
[0143] Output the out-of-sequence duration of the timing indicator.
[0144] Furthermore, before performing out-of-sequence duration detection on each timing indicator, the method includes:
[0145] The detection configuration of the timing indicator is read from the database, including the initial disorder period and the disorder detection observation period, and the timing indicator detector is initialized after the reading is completed.
[0146] Furthermore, the out-of-sequence duration detection for each timing indicator includes:
[0147] Compare the one or more timing indicators transmitted by the receiving application process with the current timing indicator timestamp, determine whether the timing indicator is greater than or equal to the current timing indicator timestamp, and obtain a first determination result;
[0148] A corresponding detection result is obtained according to the first judgment result.
[0149] Further, obtaining the corresponding detection result according to the first judgment result specifically includes:
[0150] If the first judgment result is yes, the detection result is: disorder occurs;
[0151] If the first judgment result is no, the detection result is: occurrence order.
[0152] Furthermore, when disorder occurs, the disorder duration detection for each timing indicator further includes:
[0153] Determine whether the disorder occurs for the first time, and if so, record the start time of the disorder;
[0154] If not, the maximum out-of-order period is updated.
[0155] Further, after recording the out-of-order start time, the method further comprises:
[0156] If no timing indicator arrives after a long period of time, the initial out-of-sequence time is adjusted to the current time.
[0157] Furthermore, the out-of-sequence duration detection for each timing indicator further includes:
[0158] Detection disorder duration;
[0159] Determine whether the out-of-order duration exceeds the out-of-order detection observation period;
[0160] If so, mark the timing indicator as out of order, update the most recent out of order watermark, and return the detected out of order duration;
[0161] If not, continue testing.
[0162] Further, after returning the detected out-of-sequence duration, the method further includes:
[0163] According to the detected out-of-order duration, the out-of-order timing indicator is placed in a waiting window that is greater than or equal to the out-of-order duration, and then the out-of-order duration detection is performed.
[0164] Fig. 9 An exemplary system provided for Embodiment 4 of the present invention that can be used to implement various embodiments described in this application;
[0165] like Fig. 9 As shown, in some embodiments, the system can be used as any of the above-mentioned devices for timing indicator disorder detection in each of the embodiments. In some embodiments, the system may include one or more computer-readable media (e.g., system memory or NVM / storage device) having results and one or more processors (e.g., (one or more) processors) coupled to the one or more computer-readable media and configured to execute the results to implement the module to perform the actions described in the present application.
[0166] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by computer programs and related hardware. The above-mentioned computer programs can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided by the present invention can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).
[0167] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.
[0168] The above-mentioned embodiments only express several implementation methods of the present invention, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, and these all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.
Claims
1. A method for detecting disorder of timing indicators, characterized in that: The method comprises: Receive one or more timing indicators passed by the application process; Perform out-of-sequence duration detection on each timing indicator; Outputting the out-of-sequence duration of the timing indicator; When disorder occurs, the disorder duration detection for each timing indicator further includes: Determine whether this is the first time that the disorder occurs. If so, record the start time of the disorder; If not, update the maximum out-of-order period; After recording the out-of-order start time, the method includes: If no timing indicator arrives after a long period of time, the out-of-order start time is adjusted to the current time; The out-of-sequence duration detection for each time series indicator further includes: Detection disorder duration; Determine whether the out-of-order duration exceeds the out-of-order detection observation period; If so, mark the timing indicator as out of order, update the most recent out of order watermark, and return the detected out of order duration; If not, continue testing; After returning the detected out-of-order duration, the method further includes: According to the detected out-of-order duration, the out-of-order timing indicator is placed in a waiting window. After the waiting window, the out-of-order duration detection is performed again, wherein the waiting window time is greater than or equal to the out-of-order duration.
2. A method for detecting disorder of timing indicators according to claim 1, characterized in that: Before performing out-of-sequence duration detection on each timing indicator, the method includes: The detection configuration of the timing indicator is read from the database, including the initial disorder cycle and the disorder detection observation cycle, and the timing indicator detector is initialized after the reading is completed.
3. The method according to claim 2, characterized in that The out-of-sequence duration detection for each time series indicator includes: Compare the one or more timing indicators transmitted by the receiving application process with the current timing indicator timestamp, determine whether the timing indicator is greater than or equal to the current timing indicator timestamp, and obtain a first determination result; A corresponding detection result is obtained according to the first judgment result.
4. The method according to claim 3, characterized in that The obtaining the corresponding detection result according to the first judgment result specifically includes: If the first judgment result is yes, the detection result is: disorder occurs; If the first judgment result is no, the detection result is: occurrence order.
5. A timing indicator disorder detection device, comprising a memory, a processor and a computer program stored in the memory, characterized in that: The processor executes the computer program to implement the steps of the method according to any one of claims 1 to 4.
6. A computer storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 4 are implemented.
Citation Information
Patent Citations
Complex time sequence event detection method and device
CN110928717A