Dynamic threshold processing method and device for monitoring indicators, medium and electronic equipment

Abstract

The present disclosure relates to the field of information monitoring technology, and provides a method and device for processing dynamic thresholds of monitoring indicators, a computer-readable storage medium, and an electronic device. The method includes: when it is determined that the original dynamic threshold of the upper threshold type of the monitoring indicator is greater than or equal to a first preset value, the original dynamic threshold is mapped to a first target dynamic threshold according to a first mapping function, so as to perform over-upper limit early warning monitoring on the monitoring indicator based on the first target dynamic threshold; when it is determined that the original dynamic threshold of the lower threshold type of the monitoring indicator is less than or equal to a second preset value, the original dynamic threshold is mapped to a second target dynamic threshold according to a second mapping function, so as to perform over-lower limit early warning monitoring on the monitoring indicator based on the second target dynamic threshold; wherein the first mapping function and the second mapping function are determined according to a logistic regression model. The present disclosure can improve the accuracy of monitoring and early warning by dynamically adjusting the dynamic threshold.

Description

Background Art

[0002] Monitoring and warning the indicator data in the system can prevent the occurrence of dangerous situations or devastating damage to a certain extent, and the monitoring method based on dynamic thresholds is one of the commonly used monitoring and early warning methods.

[0003] However, the dynamic thresholds generated by many dynamic threshold algorithms in related technologies may be higher than the upper limit of the value range of the monitoring indicator, or lower than the lower limit of the value range of the monitoring indicator, such as Figure 1 As shown, such a dynamic threshold cannot correctly detect anomalies of the monitoring indicator, which will make the monitoring and early warning of the monitoring indicator meaningless.

[0004] Therefore, a new algorithm is urgently needed to correct these unreasonable dynamic thresholds, so as to set the alarm dynamic thresholds more accurately and improve the accuracy of early warning monitoring of monitoring indicators.

[0005] It should be noted that the information disclosed in the above background technology section is only used to enhance the understanding of the background of the present disclosure, and therefore may include information that does not constitute the prior art known to ordinary technicians in the field. Summary of the invention

[0006] The purpose of the present disclosure is to provide a dynamic threshold processing method and device for monitoring indicators, a computer-readable storage medium and an electronic device, so that unreasonable dynamic thresholds can be detected and corrected at least to a certain extent to ensure the rationality of the dynamic thresholds and improve the accuracy of monitoring and early warning.

[0007] Other features and advantages of the present disclosure will become apparent from the following detailed description, or may be learned in part by the practice of the present disclosure.

[0008] According to a first aspect of the present disclosure, a dynamic threshold processing method for a monitoring indicator is provided, comprising:

[0009] When it is determined that the original dynamic threshold of the upper limit threshold type of the monitoring indicator is greater than or equal to the first preset value, the original dynamic threshold is mapped to a first target dynamic threshold according to a first mapping function, so as to perform over-upper limit early warning monitoring on the monitoring indicator based on the first target dynamic threshold;

[0010] When it is determined that the original dynamic threshold of the monitoring indicator lower limit threshold type is less than or equal to the second preset value, the original dynamic threshold is mapped to the second target dynamic threshold according to the second mapping function, so as to perform over-lower limit early warning monitoring on the monitoring indicator based on the second target dynamic threshold;

[0011] The first mapping function and the second mapping function are determined by fitting a standard logistic regression function.

[0012] In an exemplary embodiment of the present disclosure, based on the aforementioned scheme, the first preset value is less than the upper limit of the value range of the monitoring indicator; the mapping of the original dynamic threshold to the first target dynamic threshold according to the first mapping function includes: when the original dynamic threshold is greater than or equal to the first preset value and less than or equal to the upper limit of the value range of the monitoring indicator and the difference with the upper limit of the value range of the monitoring indicator is less than a third preset value, according to the first mapping function, mapping the original dynamic threshold to the first target dynamic threshold, the first target dynamic threshold is greater than the median of the value range of the monitored indicator and less than the original dynamic threshold; when the original dynamic threshold is greater than the upper limit of the value range of the monitoring indicator, according to the first mapping function, mapping the original dynamic threshold to the first target dynamic threshold that is less than the upper limit of the value range of the monitoring indicator and satisfies the first limiting condition; wherein the first limiting condition includes that the first difference is inversely proportional to the second difference, the first difference is the difference between the upper limit of the value range of the monitoring indicator and the first target dynamic threshold, and the second difference is the difference between the original dynamic threshold and the upper limit of the value range of the monitoring indicator.

[0013] In an exemplary embodiment of the present disclosure, based on the aforementioned scheme, the method further includes: when the monitoring indicator includes a dynamic threshold of an upper threshold type, the first mapping function is determined in advance based on a standard logistic regression function according to a first fitting condition; when the monitoring indicator includes a dynamic threshold of a lower threshold type, the second mapping function is determined in advance based on a standard logistic regression function according to a second fitting condition; wherein the first fitting condition includes: the first mapping function converges upward to the upper limit of the value range of the monitoring indicator, the first mapping function passes through the origin, and the first mapping function is symmetric about the origin; the second fitting condition includes: the second mapping function converges downward to the lower limit of the value range of the monitoring indicator, the second mapping function passes through the point (N, N), the second mapping function is symmetric about the point (N, N), and N is the upper limit of the value range of the monitoring indicator.

[0014] In an exemplary embodiment of the present disclosure, based on the above scheme, the first preset value is less than the upper limit of the value range of the monitoring indicator, and the monitoring indicator includes a percentage indicator; and mapping the original dynamic threshold to the first target dynamic threshold according to the first mapping function includes:

[0015] The original dynamic threshold is mapped to the first target dynamic threshold by the following formula:

[0016]

[0017] Wherein, x is the original dynamic threshold, P1 is the first preset value, y is the first target dynamic threshold,

[0018] In an exemplary embodiment of the present disclosure, based on the above solution, the first preset value is predetermined in the following manner:

[0019] Obtain historical indicator data of the monitoring indicator for the same period and static alarm results of the historical indicator data for the same period under a preset upper static threshold value;

[0020] Based on the historical data of the monitoring indicator during the same period, an original dynamic threshold curve of the upper threshold type of the monitoring indicator is generated;

[0021] When there is an original dynamic threshold value greater than the upper limit of the value range of the monitoring indicator in the original dynamic threshold curve, taking a plurality of first initial preset values ​​within the range from the median of the value range of the monitoring indicator to the upper limit of the value range of the monitoring indicator according to a preset step size;

[0022] For each first initial preset value, a first mapping function corresponding to the first initial preset value is determined based on the following formula, and based on the first mapping function, the original dynamic threshold is mapped to a first target dynamic threshold to generate a first target dynamic threshold curve corresponding to the first initial preset value:

[0023]

[0024] Wherein, x is the original dynamic threshold, P1' is the first initial preset value, y is the first target dynamic threshold mapped from the original dynamic threshold,

[0025] According to each of the first target dynamic threshold curves, respectively, an over-upper limit monitoring and early warning test is performed on the historical data of the monitoring indicator for the same period, so as to obtain a test alarm result corresponding to each of the first target dynamic threshold curves;

[0026] According to the relationship between each of the test alarm results and the static alarm result, the first preset value is determined from a plurality of the first preset initial values.

[0027] In an exemplary embodiment of the present disclosure, based on the above solution, the method further includes:

[0028] When it is determined that the original dynamic threshold of the upper limit threshold type of the monitoring indicator is less than the first preset value, the monitoring indicator is subjected to over-upper limit warning monitoring based on the original dynamic threshold.

[0029] In an exemplary embodiment of the present disclosure, based on the above solution, mapping the original dynamic threshold to a second target dynamic threshold according to a second mapping function includes:

[0030] When the original dynamic threshold is less than or equal to the second preset value and greater than or equal to the lower limit of the value range of the monitoring indicator and the difference between the lower limits of the value range of the monitoring indicator is less than a fourth preset value, the original dynamic threshold is mapped to a second target dynamic threshold according to a second mapping function, and the second target dynamic threshold is less than the median value of the value range of the monitoring indicator and greater than the original dynamic threshold;

[0031] When the original dynamic threshold is less than the lower limit of the value range of the monitoring indicator, according to the second mapping function, the original dynamic threshold is mapped to a second target dynamic threshold that is greater than the lower limit of the value range of the monitoring indicator and satisfies the second limiting condition, and the second limiting condition includes that the third difference is inversely proportional to the fourth difference, the third difference is the difference between the second target dynamic threshold and the lower limit of the value range of the monitoring indicator, and the fourth difference is the difference between the lower limit of the value range of the monitoring indicator and the original dynamic threshold.

[0032] In an exemplary embodiment of the present disclosure, based on the above-mentioned solution, the monitoring indicator includes a percentage indicator; and mapping the original dynamic threshold to a second target dynamic threshold according to a second mapping function includes:

[0033] The original dynamic threshold is mapped to the second target dynamic threshold by the following formula:

[0034]

[0035] Wherein, x is the original dynamic threshold, P2 is the second preset value, y is the second target dynamic threshold,

[0036] In an exemplary embodiment of the present disclosure, based on the above solution, the second preset value is predetermined in the following manner:

[0037] Obtain historical indicator data of the monitoring indicator for the same period and static alarm results of the historical indicator data for the same period under a preset lower limit static threshold;

[0038] Based on the historical data of the monitoring indicator during the same period, generating an original dynamic threshold curve of the lower threshold type of the monitoring indicator;

[0039] When there is an original dynamic threshold value less than the lower limit of the value range of the monitoring indicator in the original dynamic threshold curve, taking a plurality of second initial preset values ​​within the range from the lower limit of the value range of the monitoring indicator to the median value of the value range of the monitoring indicator according to a preset step size;

[0040] For each second initial preset value, a second mapping function corresponding to the second initial preset value is determined based on the following formula, and based on the second mapping function, the original dynamic threshold is mapped to a second target dynamic threshold to generate a second target dynamic threshold curve corresponding to the second initial preset value:

[0041]

[0042] Wherein, x is the original dynamic threshold, P2' is the second initial preset value, y is the second target dynamic threshold mapped from the original dynamic threshold,

[0043] According to each of the second target dynamic threshold curves, respectively, a lower limit monitoring and early warning test is performed on the historical data of the monitoring indicator for the same period to obtain a test alarm result corresponding to each of the second target dynamic threshold curves;

[0044] According to the relationship between each of the test alarm results and the static alarm result, the second preset value is determined from a plurality of the second preset initial values.

[0045] In an exemplary embodiment of the present disclosure, based on the above solution, the method further includes:

[0046] When it is determined that the original dynamic threshold of the monitoring indicator lower limit threshold type is greater than the second preset value, the monitoring indicator is subjected to over-lower limit early warning monitoring based on the original dynamic threshold.

[0047] According to a second aspect of the present disclosure, a dynamic threshold processing device for monitoring indicators is provided, comprising:

[0048] A first dynamic threshold processing module is configured to, when it is determined that the original dynamic threshold of the upper limit threshold type of the monitoring indicator is greater than or equal to a first preset value, map the original dynamic threshold to a first target dynamic threshold according to a first mapping function, so as to perform over-upper limit early warning monitoring on the monitoring indicator based on the first target dynamic threshold;

[0049] A second dynamic threshold processing module is configured to map the original dynamic threshold to a second target dynamic threshold according to a second mapping function when it is determined that the original dynamic threshold of the monitoring indicator lower limit threshold type is less than or equal to a second preset value, so as to perform over-lower limit early warning monitoring on the monitoring indicator based on the second target dynamic threshold;

[0050] The first mapping function and the second mapping function are determined by fitting a standard logistic regression function.

[0051] According to a third aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored. When the program is executed by a processor, the dynamic threshold processing method of the monitoring indicator as described in the first aspect of the above embodiment is implemented.

[0052] According to a fourth aspect of an embodiment of the present disclosure, an electronic device is provided, comprising: a processor; and a storage device for storing one or more programs, which, when executed by the one or more processors, enables the one or more processors to implement the dynamic threshold processing method for monitoring indicators as described in the first aspect of the above embodiment.

[0053] It can be seen from the above technical solutions that the dynamic threshold processing method of the monitoring indicator, the dynamic threshold processing device of the monitoring indicator, and the computer-readable storage medium and electronic device for implementing the dynamic threshold processing method of the monitoring indicator in the exemplary embodiment of the present disclosure have at least the following advantages and positive effects:

[0054] In the technical solutions provided by some embodiments of the present disclosure, the present disclosure can detect whether the original dynamic threshold value of the upper limit type is reasonable through the first preset value, and can detect whether the original dynamic threshold value of the lower limit type is reasonable through the second preset value, and then when the original dynamic threshold value is detected to be unreasonable, the corresponding mapping function can be used to map the original dynamic threshold value to the target dynamic threshold value, so as to perform early warning monitoring of the monitoring indicator based on the target dynamic threshold value. Compared with the related art, on the one hand, the present disclosure can map different unreasonable original dynamic threshold values ​​to different reasonable target dynamic threshold values ​​through the mapping function fitted by the logistic regression function, so as to improve the accuracy of monitoring and early warning of the monitoring indicator; on the other hand, since the generated target dynamic threshold value is only related to the original dynamic threshold value itself, that is, the generation of the newly generated target dynamic threshold value does not depend on the currently selected sample data set, but is only related to the original dynamic threshold value, so as to ensure the consistency and rationality of the dynamic threshold value adjustment.

[0055] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] The accompanying drawings herein are incorporated into the specification and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the specification are used to explain the principles of the present disclosure. Obviously, the accompanying drawings described below are only some embodiments of the present disclosure, and for ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without creative work.

[0057] Figure 1A schematic diagram showing a dynamic threshold value exceeding a value range of a monitoring indicator in an exemplary embodiment of the present disclosure;

[0058] Figure 2 A schematic diagram showing a flow chart of a dynamic threshold processing method for monitoring indicators in an exemplary embodiment of the present disclosure;

[0059] Figure 3 A mapping relationship curve showing an original dynamic threshold value of an upper threshold type and a first target dynamic threshold value in an exemplary embodiment of the present disclosure;

[0060] Figure 4 A graph showing a mapping relationship between input and output corresponding to a logistic regression function in an exemplary embodiment of the present disclosure;

[0061] Figure 5 A dynamic threshold convergence curve diagram in an exemplary embodiment of the present disclosure is shown;

[0062] Figure 6 Another dynamic threshold convergence curve diagram in an exemplary embodiment of the present disclosure is shown;

[0063] Figure 7 A graph showing a mapping relationship between an original dynamic threshold and a first target dynamic threshold in an exemplary embodiment of the present disclosure;

[0064] Figure 8 A schematic flow chart showing a method for determining a first preset value in an exemplary embodiment of the present disclosure;

[0065] Fig. 9 A comparison curve diagram showing an original dynamic threshold and a new threshold of a monitoring indicator under different first preset values ​​in an exemplary embodiment of the present disclosure;

[0066] Fig.10 A schematic flow chart showing a method for determining a second preset value in an exemplary embodiment of the present disclosure;

[0067] Fig.11 A schematic flow chart showing another method for processing a dynamic threshold of a monitoring indicator in an exemplary embodiment of the present disclosure;

[0068] Fig.12 A schematic diagram showing the structure of a dynamic threshold processing device for monitoring indicators in an exemplary embodiment of the present disclosure;

[0069] Fig.13 A schematic diagram showing the structure of a computer storage medium in an exemplary embodiment of the present disclosure;

[0070] Fig.14 A schematic structural diagram of an electronic device in an exemplary embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0071] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as being limited to the examples set forth herein; on the contrary, these embodiments are provided so that the present disclosure will be more comprehensive and complete, and the concepts of the example embodiments are fully conveyed to those skilled in the art. The described features, structures, or characteristics may be combined in one or more embodiments in any suitable manner. In the following description, many specific details are provided to provide a full understanding of the embodiments of the present disclosure. However, those skilled in the art will appreciate that the technical solutions of the present disclosure may be practiced while omitting one or more of the specific details, or other methods, components, devices, steps, etc. may be adopted. In other cases, known technical solutions are not shown or described in detail to avoid obscuring various aspects of the present disclosure.

[0072] The terms "a", "an", "the" and "said" are used in this specification to indicate the presence of one or more elements / components / etc.; the terms "including" and "having" are used to express an open-ended inclusion and mean that additional elements / components / etc. may exist in addition to the listed elements / components / etc.; the terms "first" and "second" etc. are used only as labels and are not intended to limit the quantity of their objects.

[0073] In addition, the accompanying drawings are only schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the drawings represent the same or similar parts, and their repeated descriptions will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities.

[0074] Monitoring and warning the indicator data in the system can prevent the occurrence of dangerous situations or devastating damage to a certain extent, and the monitoring method based on dynamic thresholds is one of the commonly used monitoring and early warning methods.

[0075] However, the dynamic thresholds generated by many dynamic threshold algorithms may be higher than the upper limit of the value range of the monitoring indicator, or lower than the lower limit of the value range of the monitoring indicator, such as Figure 1 As shown, in Figure 1 In the example, the source data is the real data of the monitoring indicator, the upper limit of the source data is 100, and the lower limit is 0. The upper limit of the dynamic threshold is also 100, and the lower limit is 0. However, in the upper and lower limit dynamic threshold curves generated by the dynamic threshold algorithm, the upper limit type dynamic threshold curve has a situation where the upper limit of the source data exceeds 100, and the lower limit type dynamic threshold curve has a situation where the lower limit of the source data exceeds 0. Obviously, such a dynamic threshold cannot correctly detect anomalies of the monitoring indicator, which will make the monitoring and early warning of the monitoring indicator meaningless.

[0076] In the related art, the method of combining dynamic threshold and static threshold is mainly used to correct the unreasonable dynamic threshold. Specifically, taking the percentage monitoring index as an example, the part of the dynamic threshold line that is higher than 100% is directly reduced to a fixed value below 100%, or the part that is lower than 0% is directly increased to a fixed value above 0%.

[0077] This method of directly correcting a dynamic threshold that exceeds the value range to a fixed static threshold within the value range cannot ensure that the adjusted static threshold can accurately monitor the monitoring indicators, and does not fully utilize the function of the dynamic threshold to act according to the situation. Therefore, the accuracy of monitoring and early warning of monitoring indicators is still low.

[0078] In the embodiments of the present disclosure, a dynamic threshold processing method for monitoring indicators is first provided to overcome the defects existing in the above-mentioned related technologies to a certain extent.

[0079] Figure 2 A schematic diagram showing a flow chart of a dynamic threshold processing method for monitoring indicators in an exemplary embodiment of the present disclosure. Figure 2 , the method comprising:

[0080] In step S210, when it is determined that the original dynamic threshold of the upper limit threshold type of the monitoring indicator is greater than or equal to the first preset value, the original dynamic threshold is mapped to a first target dynamic threshold according to a first mapping function, so as to perform over-upper limit early warning monitoring on the monitoring indicator based on the first target dynamic threshold;

[0081] In step S220, when it is determined that the original dynamic threshold of the monitoring indicator lower limit threshold type is less than or equal to the second preset value, the original dynamic threshold is mapped to the second target dynamic threshold according to the second mapping function, so as to perform over-lower limit early warning monitoring on the monitoring indicator based on the second target dynamic threshold;

[0082] The first mapping function and the second mapping function are determined by fitting a standard logistic regression function.

[0083] exist Figure 2In the technical solution provided by the illustrated embodiment, the first preset value can be used to detect whether the original dynamic threshold value of the upper limit type is reasonable, and the second preset value can be used to detect whether the original dynamic threshold value of the lower limit type is reasonable. Then, when the original dynamic threshold value is detected to be unreasonable, the corresponding mapping function can be used to map the original dynamic threshold value to the target dynamic threshold value, so as to perform early warning monitoring of the monitoring indicator based on the target dynamic threshold value. Compared with the related art, on the one hand, through the mapping function fitted by the logistic regression function, different unreasonable original dynamic threshold values ​​can be mapped to different reasonable target dynamic threshold values ​​to improve the accuracy of monitoring and early warning of the monitoring indicator; on the other hand, since the generated target dynamic threshold value is only related to the original dynamic threshold value itself, that is, the generation of the newly generated target dynamic threshold value does not depend on the currently selected sample data set, but is only related to the original dynamic threshold value, so that the consistency and rationality of the dynamic threshold value adjustment can be guaranteed.

[0084] In an exemplary embodiment of the present disclosure, the monitoring indicator may have only a dynamic threshold of the upper limit threshold type, or only a dynamic threshold of the lower limit threshold type, or may have both a dynamic threshold of the upper limit type and a dynamic threshold of the lower limit type. When the monitoring indicator has only a dynamic threshold of the upper limit threshold type, the server may execute step S210 to process the original dynamic threshold of the upper limit threshold type; when the monitoring indicator includes only a dynamic threshold of the lower limit threshold type, the server may execute step S220 to process the original dynamic threshold of the lower limit threshold type; when the monitoring indicator includes both a dynamic threshold of the upper limit threshold type and a dynamic threshold of the lower limit threshold type, the server may execute steps S210 and S220 to process the dynamic threshold of the upper limit threshold type and the dynamic threshold of the lower limit threshold type, respectively.

[0085] Among them, specific monitoring indicators can be customized according to user needs. For example, monitoring indicators can include indicator data such as CPU (Central Processing Unit) utilization, memory utilization, table space utilization, etc. in IT information systems. Of course, it can also be indicator data that any user in any other system wants to monitor or needs to monitor and warn. This exemplary embodiment does not make any special limitations on this.

[0086] In an exemplary embodiment, the original dynamic threshold of the upper limit threshold type and the original dynamic threshold of the lower limit threshold type of the monitoring indicator can be generated according to the existing dynamic threshold generation algorithm. For example, the existing "contemporaneous mean and standard deviation" dynamic threshold algorithm can be used to generate the original dynamic threshold of the upper limit threshold type and / or the original dynamic threshold of the lower limit threshold type of the monitoring indicator.

[0087] Among them, the dynamic threshold of the upper threshold type can be understood as a dynamic threshold used for monitoring the monitoring indicator for over-upper limit warning monitoring, such as, when the real data of the monitoring indicator at a certain moment is greater than the dynamic threshold of the upper threshold type, an alarm is issued for the monitoring indicator at that moment. The dynamic threshold of the lower threshold type can be understood as a dynamic threshold used for monitoring the monitoring indicator for over-lower limit warning monitoring, such as, when the real data of the monitoring indicator at a certain moment is less than the dynamic threshold of the lower threshold type, an alarm is issued for the monitoring indicator at that moment.

[0088] The following Figure 2 The specific implementation methods of each step in the embodiment shown are described in detail:

[0089] In step S210, when it is determined that the original dynamic threshold of the upper limit threshold type of the monitoring indicator is greater than or equal to the first preset value, the original dynamic threshold is mapped to the first target dynamic threshold according to the first mapping function, so as to perform over-upper limit warning monitoring on the monitoring indicator based on the first target dynamic threshold.

[0090] In an exemplary embodiment, the first preset value is smaller than the upper limit of the value range of the monitoring indicator.

[0091] In an exemplary embodiment, mapping the original dynamic threshold to the first target dynamic threshold according to the first mapping function includes: when the original dynamic threshold is greater than or equal to the first preset value and less than or equal to the upper limit of the value range of the monitoring indicator and the difference between the original dynamic threshold and the upper limit of the value range of the monitoring indicator is less than a third preset value, mapping the original dynamic threshold to the first target dynamic threshold according to the first mapping function, the first target dynamic threshold being greater than the median of the value range of the monitored indicator and less than the original dynamic threshold;

[0092] When the original dynamic threshold is greater than the upper limit of the value range of the monitoring indicator, according to the first mapping function, the original dynamic threshold is mapped to a first target dynamic threshold that is less than the upper limit of the value range of the monitoring indicator and satisfies the first limiting condition; wherein, the first limiting condition includes a first difference being inversely proportional to a second difference, the first difference being the difference between the upper limit of the value range of the monitoring indicator and the first target dynamic threshold, and the second difference being the difference between the original dynamic threshold and the upper limit of the value range of the monitoring indicator.

[0093] Among them, when the first preset value is greater than or equal to the median value of the value range of the monitoring indicator and less than the upper limit of the value range of the monitoring indicator, the third preset value is less than or equal to the difference between the upper limit of the value range of the monitoring indicator and the first preset value, and when the first preset value is less than the median value of the value range of the monitoring indicator, the third preset value is less than or equal to the difference between the upper limit of the value range of the monitoring indicator and the median value of the value range of the monitoring indicator. The third preset value can be customized according to the user if this requirement is met, and this exemplary embodiment does not specifically limit this.

[0094] In other words, the third preset value is used to indicate whether the original dynamic threshold value that is within the value range of the monitoring indicator and greater than the first preset value is close to the upper limit of the value range of the monitoring indicator.

[0095] In an exemplary embodiment, the value range of the monitoring indicator can be determined based on the minimum and maximum values ​​that the monitoring indicator data can take. The median of the value range of the monitoring indicator can be understood as a value that is within the value range of the monitoring indicator and is equal to the difference between the upper and lower limits of the value range of the monitoring indicator. When the value range of the monitoring indicator is a continuous value, the median of the value range of the monitoring indicator can be determined based on the average value of the upper and lower limits of the value range of the monitoring indicator. When the value range of the monitoring indicator is a discrete value, the median of the value range of the monitoring indicator can be the median value in the value range. The upper limit of the value range of the monitoring indicator can be understood as the maximum value corresponding to the value range of the monitoring indicator, and the lower limit of the value range of the monitoring indicator can be understood as the minimum value corresponding to the value range of the monitoring indicator.

[0096] Taking the monitoring indicator CPU usage as an example, the maximum value of CPU usage data can be 100% and the minimum value can be 0. In order to facilitate data monitoring, [0, 100%] can be mapped to [0, 100]. Therefore, the value range of CPU usage can be [0, 100]. The median value of the CPU usage range is 50, the upper limit of the CPU usage range is 100, and the lower limit of the CPU usage range is 0.

[0097] For example, if the original dynamic threshold is greater than or equal to the first preset value and less than or equal to the upper limit of the value range of the monitoring indicator and the difference with the upper limit of the value range of the monitoring indicator is less than the third preset value, it can be understood that the original dynamic threshold is greater than the first preset value and close to the upper limit of the value range of the monitoring indicator. At this time, based on the first mapping function, the original dynamic threshold can be mapped to the first target dynamic threshold close to the median of the value range of the monitoring indicator, so that the first target dynamic threshold is closer to the center of the value range of the monitoring indicator than the original dynamic threshold. In this way, it can be avoided that the threshold is too close to or even equal to the value range boundary, which makes the monitoring and early warning of the monitoring indicator meaningless.

[0098] When the original dynamic threshold is greater than the upper limit of the value range of the monitoring indicator, in other words, when the original dynamic threshold exceeds the upper limit of the value range of the monitoring indicator, the original dynamic threshold can be mapped to the value range of the monitoring indicator, and the more the original dynamic threshold exceeds the upper limit of the value range of the monitoring indicator, the closer the first target dynamic threshold mapped by the original dynamic threshold is to the upper limit of the value range of the monitoring indicator. That is, the above-mentioned first difference is inversely proportional to the second difference, which can be understood as the more the original dynamic threshold exceeds the upper limit of the value range of the monitoring indicator, the closer the first target dynamic threshold mapped by the original dynamic threshold is to the upper limit of the value range of the monitoring indicator. In this way, after the threshold is adjusted, the relative size relationship between the thresholds can still be maintained, and the vibration shape of the threshold curve corresponding to the new dynamic threshold is kept consistent with the threshold curve corresponding to the original dynamic threshold.

[0099] It should be noted that, in the present disclosure, all differences can be understood as non-negative values ​​of the difference between two numbers.

[0100] In another exemplary embodiment of the present disclosure, when the original dynamic threshold value of the upper limit threshold type of the monitoring indicator is less than the first preset value, the monitoring indicator can be subjected to over-upper limit early warning monitoring based on the original dynamic threshold value. In other words, when the original dynamic threshold value of the upper limit threshold type of the monitoring indicator is within the value range of the monitoring indicator and is less than the first preset threshold value, the original dynamic threshold value may not be mapped and adjusted, and early warning monitoring of the monitoring indicator may be directly performed based on the original dynamic threshold value.

[0101] In the present disclosure, when the original dynamic threshold is mapped and adjusted, the mapping relationship between the original dynamic threshold and the target dynamic threshold can satisfy the following five conditions: (1) when the original dynamic threshold is within the value range of the monitoring indicator, the original dynamic threshold is kept unchanged as much as possible; (2) when the original dynamic threshold exceeds the value range of the monitoring indicator, the original dynamic threshold is mapped and adjusted back to the value range of the monitoring indicator; (3) the more the original dynamic threshold exceeds the value range of the monitoring indicator, the closer it is to the value range boundary of the monitoring indicator after it is mapped to the value range of the monitoring indicator, so that the relative size relationship between the thresholds can be maintained and the vibration form of the dynamic threshold can be maintained unchanged; (4) when the original dynamic threshold is within the value range of the monitoring indicator but close to the value range boundary of the monitoring indicator, a certain pressure is applied to make the target dynamic threshold mapped by the original dynamic threshold move slightly toward the center of the value range to avoid the dynamic threshold being too close to or equal to the value range boundary; (5) the new threshold to which the original dynamic threshold is adjusted is only related to the original dynamic threshold itself and the value range boundary, and has nothing to do with other adjacent dynamic thresholds.

[0102] The above conditions (4) and (5) can improve the accuracy of monitoring and early warning of monitoring indicators. Specifically, if the threshold is very close to the boundary of the value range, or is equal to the boundary of the value range (for example, the new threshold is equal to 100%), then it is meaningless for monitoring. Therefore, when the threshold is close to the boundary of the value range, the above condition (4) can be used to slightly adjust the threshold toward the center of the value range so that the new threshold can accurately monitor the early warning of the monitoring indicator. And through the above condition (5), for the same dynamic threshold, no matter when it is mapped and adjusted, the same new threshold is obtained, thereby ensuring the consistency of the original dynamic threshold adjustment result, avoiding the size of the calculated new threshold depending on the currently selected sample data set. When the sample data set used changes, the adjustment result of the same threshold also changes accordingly, resulting in inconsistent monitoring and alarm results for the same data of the same monitoring indicator at different times.

[0103] In other words, in the present disclosure, whether it is the original dynamic threshold of the upper threshold type or the original dynamic threshold of the lower threshold type of the monitoring indicator, a set of mapping relationships can be established according to the above conditions (1) to (5) to map the unreasonable original dynamic threshold, thereby improving the accuracy of the monitoring indicator early warning monitoring.

[0104] For example, Figure 3 A mapping relationship curve between an original dynamic threshold value of an upper threshold type and a first target dynamic threshold value in an exemplary embodiment of the present disclosure is shown. Figure 3 In the example, the value range of the monitoring indicator is [0, 100], x represents the original dynamic threshold, y represents the first target dynamic threshold, and P1 represents the first preset value.

[0105] Specifically, for the dynamic threshold of the upper threshold type of the monitoring indicator, combined with the above conditions (1) and (4), the original dynamic threshold within the value range of the monitoring indicator is kept unchanged as much as possible, but when the original dynamic threshold is close to the upper limit of the value range, it is necessary to give a certain pressure to reduce the original dynamic threshold, so that the mapped new dynamic threshold maintains a certain distance from the upper limit of the value range of the monitoring indicator. Therefore, a first preset value P1 can be set. When the original dynamic threshold is less than P1, the original dynamic threshold can be left unprocessed. It can also be understood that when the original dynamic threshold is less than P1, the mapped first target dynamic threshold is equal to the original dynamic threshold, such as Figure 3 The mapping relationship is determined by the straight line segment corresponding to the x<P1 part in , and when the original dynamic threshold is greater than or equal to P1, the pressure begins to gradually appear, such as Figure 3The mapping relationship determined by the curve corresponding to the part where P1 ≤ x ≤ 100 in Figure 3 . Combining the above conditions (2) and (3), when the original dynamic threshold exceeds the upper limit 100 of the value range of the monitoring index, it is mapped within 100, and the relative magnitude relationship between the dynamic thresholds needs to be maintained, that is, the more the original dynamic threshold exceeds the upper limit of the value range, the closer the mapped first target dynamic threshold is to the upper limit 100 of the value range of the monitoring index, such as

[0106] Next, a mapping equation system can be constructed to accurately express the mapping relationship that can satisfy the above 5 conditions. Referring to Figure 3 , it can be known that for the part where q1 < x < P1, where q1 represents the lower limit of the value range of the monitoring index and P1 represents the first preset value mentioned above, the mapping relationship corresponding to this part can be represented by the linear equation y = x; for the part where x ≥ P1, from Figure 3 it can be seen that it is monotonically increasing and gradually converges to a fixed value (i.e., the upper limit of the value range of the monitoring index). Therefore, for this part, the standard logistic function can be used to determine the mapping relationship corresponding to this part based on the preset fitting conditions, that is, the first mapping function is fitted.

[0107] Exemplarily, when the monitoring index includes a dynamic threshold of the upper limit threshold type, the first mapping function can be determined in advance based on the standard logistic function according to the first fitting conditions; wherein, the first fitting conditions include: the first mapping function converges upward to the upper limit of the value range of the monitoring index, the first mapping function passes through the origin, and the first mapping function is symmetric about the origin. In addition, the first mapping function and the mapping function relationship y = x corresponding to the part where q1 < x < P1 intersect at point P1, that is to say, the first fitting conditions can also include that the first mapping function passes through the point (P1, P1).

[0108] As mentioned above, the first mapping function should conform to the Figure 3 shown curve relationship, so the first fitting conditions can be determined according to the Figure 3 shown curve relationship. From Figure 3 it can be seen that the first mapping function converges upward to the upper limit of the value range of the monitoring index, and the curve corresponding to the first mapping function passes through the origin (0, 0) of the rectangular coordinate system, and the curve corresponding to the first mapping function is symmetric about the origin (0, 0) in the rectangular coordinate system, and the curve corresponding to the first mapping function and the straight line y = x intersect at point P1. After determining the first fitting conditions, the standard logistic function can be transformed so that the obtained function relationship satisfies the above first fitting conditions, and then the first mapping function is obtained.

[0109] In an exemplary embodiment, the monitoring index in the present disclosure may include a percentage index, that is, a monitoring index with a value range of [0, 100%]. Below, taking the monitoring index as a percentage index as an example, the above-mentioned determination of the first mapping function based on the first fitting condition based on the standard logistic regression function is specifically described. In order to facilitate derivation and calculation, the value range of the percentage index can be mapped from [0, 100%] to [0, 100]. Obviously, the process of performing value range mapping processing on the percentage index here does not have any impact on the determination of the first mapping function, that is, the determined first mapping function still satisfies Figure 3 The curve of the relevant part shown represents the mapping relationship.

[0110] For example, the mapping relationship between the input and output of the standard logistic regression function can be expressed by the following formula (1):

[0111]

[0112] In formula (1), x represents input, y represents output, and a represents the growth rate of the curve corresponding to the logistic regression function. For example, let M = 1, a = 5, b = 0, and we can get Figure 4 The mapping relationship curve between the input and output corresponding to the logistic regression function shown.

[0113] Some linear transformations can be made to the standard logistic regression function so that the first mapping relationship meets the first fitting condition mentioned above. For the percentage index, it needs to meet the first fitting condition of converging upward to 100, so M=100 can be obtained in formula (1). Then, combined with the first preset condition that the curve corresponding to the first mapping function passes through the origin and is symmetrical about the origin, it can be seen that b=0 in formula (1), and the entire curve needs to be translated along the negative direction of the y axis At this point, the standard logistic regression function expressed in formula (1) is transformed into the following formula (2):

[0114]

[0115] For formula (2), it has satisfied the first two pre-conditions that the curve passes through the origin and is symmetrical about the origin. Figure 5 As shown, the mapping relationship determined by formula (2) converges to 50 and -50 upward and downward respectively, that is, when a is infinite, it converges upward to 50. For the percentage index, it needs to converge upward to 100, so the whole equation is multiplied by 2, and the following formula (3) can be obtained:

[0116]

[0117] For formula (3), if Figure 6 As shown, it converges to 100 upward and downward respectively, that is, when a is infinite, it converges to 100 upward. Figure 6 In , we only need to consider the part where x>0. Obviously, Figure 6 The curve shape of the x≥P1 part is Figure 3 There is still a big gap in the shape of the curve in the x≥P1 part. Therefore, it is necessary to further determine the parameter a in formula (3). a is the growth rate in the logistic regression function. Changing its size will significantly change the slope of the curve near the origin. Next, determine the value of a so that formula (3) can accurately fit Figure 3 The curve shape in .

[0118] observe Figure 3 It can be seen that Figure 3 The curve of the part x≥P1 intersects the straight line y=x at point P1, so we only need to solve the equation You can get

[0119] So far, it can be obtained that when the monitoring indicator is a percentage indicator, for x≥P1, the determined first mapping function can be the above formula (3), in which x is the original dynamic threshold, P1 is the first preset value, y is the first target dynamic threshold, And the first mapping function combined with the above-mentioned y=x can meet the above-mentioned five conditions. In practical applications, it is only necessary to determine the P1 value, and then the above-mentioned first mapping function can be used to adjust the original dynamic threshold of the x≥P1 part so that it meets the above-mentioned five conditions to improve the monitoring accuracy of the monitoring indicators.

[0120] If P1=70, then a≈0.02478, and the curve image is as follows: Figure 7 , its x≥P1 part is the same as Figure 3 The basic consistency.

[0121] For the dynamic threshold of the upper threshold type of the monitoring indicator, the original dynamic threshold x can be mapped through the following equation group (4) to perform over-upper limit warning monitoring of the monitoring indicator based on the first target dynamic threshold y after mapping.

[0122]

[0123] Exemplarily, when the monitoring indicator includes a percentage indicator, mapping the original dynamic threshold to the first target dynamic threshold according to the first mapping function includes: mapping the original dynamic threshold to the first target dynamic threshold through the above formula (3).

[0124] As mentioned above, in practical applications, it is only necessary to determine the P1 value, that is, the first preset value, and then perform upper limit threshold type over-upper limit warning monitoring of the monitoring indicator according to the equation group shown in formula (4).

[0125] Next, combine Figure 8 The method for determining the first preset value in an embodiment of the present disclosure is described. Figure 8 , the method may include steps S810 to S860, wherein:

[0126] In step S810, historical indicator data of the monitoring indicator for the same period and a static alarm result of the historical indicator data for the same period under a preset upper static threshold are obtained.

[0127] In an exemplary embodiment, the historical data of the monitoring indicator may include the historical data corresponding to each monitoring sampling moment. The historical duration may be customized according to user needs, such as the historical data of the past 7 days. The preset upper limit static threshold may also be customized according to one's own needs, and this exemplary embodiment does not specifically limit this.

[0128] Taking the monitoring of CPU usage performance indicators, the monitoring sampling frequency is once per minute, and the historical data of the past 7 days are collected as an example, 60*24*7=10080 CPU usage performance indicator sample data can be obtained. Among these 10080 sample data, 99% of the sample data values ​​are less than the preset upper static threshold of 90%, so the static alarm rate is 1%. In other words, these 10080 sample data can be compared with the preset upper static threshold of 90% to determine the sample data exceeding 90%, which is used as the static alarm result of the historical data under the preset upper static threshold of 90%.

[0129] In step S820, based on the historical data of the monitoring indicator during the same period, an original dynamic threshold curve of the upper threshold type of the monitoring indicator is generated.

[0130] Exemplarily, as described above, an original dynamic threshold curve of the upper threshold type of the monitoring indicator may be generated based on the historical data of the monitoring indicator over the same period according to the existing dynamic threshold generation method.

[0131] For example, the dynamic threshold algorithm "mean and standard deviation of the same period" can be used to calculate the mean and standard deviation of each group of sample data at the same historical monitoring sampling time. For example, for the sampling time of 20:00 every day, the mean and standard deviation of the seven sample data of the CPU usage performance indicator corresponding to 20:00 every day in the past seven days can be calculated. Then, for each group of historical data at the same period, starting from the mean of the group of historical data at the same period, the standard deviation is shifted upward by a certain multiple (such as 3 times), thereby forming the original dynamic threshold curve of the upper limit type of the CPU usage performance indicator of the day.

[0132] Next, in step S830, when there is an original dynamic threshold value greater than the upper limit of the value range of the monitoring indicator in the original dynamic threshold curve, multiple first initial preset values ​​are taken within the range from the median of the value range of the monitoring indicator to the upper limit of the value range of the monitoring indicator according to a preset step size.

[0133] Exemplarily, after the original dynamic threshold curve is generated, an upper limit detection can be performed on the generated original dynamic threshold curve to determine whether the generated original dynamic threshold exceeds the upper limit of the value range of the monitoring indicator. When it is determined that there is a situation where the upper limit of the value range of the monitoring indicator is exceeded, it is necessary to use the above-mentioned first mapping function to process the original dynamic threshold curve.

[0134] Specifically, multiple first initial preset values ​​can be taken in the range corresponding to the median value of the monitoring indicator to the upper limit of the monitoring indicator according to the preset step size. The original dynamic threshold curve is corrected by determining the corresponding first mapping function based on different first initial preset values. Taking the monitoring indicator value range of [0, 100] as an example, the first initial preset values ​​can be taken as 75, 80, 85, 90, 95, etc.

[0135] It should be noted that the preset step size can be understood as a preset spacing. The value can be customized according to needs, or multiple first initial preset values ​​can be randomly selected within the range corresponding to the median value of the monitoring indicator to the upper limit of the value range of the monitoring indicator. It is not necessary to select the value according to the preset step size. This exemplary embodiment does not make any special limitations on this.

[0136] Continue to refer Figure 8 In step S840, for each first initial preset value, a first mapping function corresponding to the first initial preset value is determined based on the following formula, and based on the first mapping function, the original dynamic threshold is mapped to a first target dynamic threshold to generate a first target dynamic threshold curve corresponding to the first initial preset value:

[0137]

[0138] Wherein, x is the original dynamic threshold, P1' is the first initial preset value, y is the first target dynamic threshold mapped from the original dynamic threshold,

[0139] For example, after configuring a plurality of first initial preset values, for each first initial preset value, an a' value can be determined according to the first initial preset value P1', and then the determined a' value is substituted into the above formula (3) to determine the first mapping function corresponding to the first preset initial value. Then, based on the first mapping function corresponding to each first initial preset value, the original dynamic threshold in the original dynamic threshold curve is mapped to obtain the first target dynamic threshold curve corresponding to each first initial preset value.

[0140] Next, in step S850, an over-upper limit monitoring warning test is performed on the historical data of the monitoring indicator for the same period according to each of the first target dynamic threshold curves, so as to obtain a test alarm result corresponding to each of the first target dynamic threshold curves.

[0141] For example, the historical data of the same period in step S850 can be used to perform an over-upper limit warning test on each first target dynamic threshold curve. For example, each first target dynamic threshold is used to perform an over-upper limit warning test on the above 10080 sample data to obtain a test alarm result corresponding to each first target dynamic threshold curve.

[0142] For example, if P1'=75 and a'=0.026 are set to generate the first target dynamic threshold curve, the curve does not exceed the upper limit of 100%, and the above 10080 sample data are imported for verification, and the sample alarm rate is 5.1%; if P1'=80 and a'=0.027 are set to generate the first target dynamic threshold curve, the curve does not exceed the upper limit of 100%, and the above 10080 sample data are imported for verification, and the sample alarm rate is 2.8%; if P1'=85 and a'=0.003 are set to generate the first target dynamic threshold curve , import the above 10080 sample data for verification, the sample alarm rate is 1.2%; set P1'=90, a'=0.033 to generate the first target dynamic threshold curve, the curve does not exceed the upper limit of 100%, import the above 10080 sample data for verification, the sample alarm rate is 0.82%; set P1'=95, a'=0.039 to generate the first target dynamic threshold curve, the curve does not exceed the upper limit of 100%, import the above 10080 sample data for verification, the sample alarm rate is 0.46%.

[0143] In step S860, the first preset value is determined from a plurality of first preset initial values ​​according to the relationship between each of the test alarm results and the static alarm result.

[0144] Fig. 9A comparison curve diagram of the original dynamic threshold and the new threshold of a monitoring indicator under different first preset values ​​in an exemplary embodiment of the present disclosure is shown. Fig. 9 It can be seen that for this monitoring indicator, the vibration shape of the new threshold curve generated when P1'=80 is smoother than that of P1'=70, P1'=90, and P1'=60, so the P1 value can be 80. Specifically, for Fig. 9 For the monitoring indicators in, the test alarm results are in the following order from good to bad: the test alarm result when P1'=80, the test alarm result when P1'=70, the test alarm result when P1'=90, and the test alarm result when P1'=60. This is a qualitative and intuitive method of determining the first preset value from multiple first initial preset values ​​according to the vibration form of the new threshold curve.

[0145] In addition, based on the static alarm result in step S810 and the test alarm result in step S850, the first preset value can be objectively determined through a quantitative comparison method.

[0146] In an exemplary embodiment, the alarm time in the test alarm result corresponding to each first target dynamic threshold curve and the alarm time corresponding to the static alarm result can be compared respectively to determine their overlap rate, and then the first target dynamic threshold curve corresponding to the test alarm result with the highest overlap rate and the fewest interference samples is determined, and the first preset initial value in the first target dynamic threshold curve is determined as the first preset value.

[0147] Continuing with the above example, where P1' takes values ​​of 75, 80, 85, 90, and 95 respectively, when P1'=85, all the alarm points marked in the sample data fall within the detection range of the first target dynamic threshold curve, and the number of other interference sample points hit is the least, and the sample value of the interference sample is also close to 90%. It can be concluded that the optimal value of P1 is 85, thereby completing the training and setting of the first preset value P1.

[0148] Through the above steps S810 to S860, the pre-training and setting of the first preset value can be realized, thereby further improving the accuracy of the monitoring and early warning of the monitoring indicator in the present disclosure. After determining the first preset value, the first mapping function corresponding to the monitoring indicator can be determined based on the above formula (3), and then the dynamic threshold value can be intelligently adjusted in actual monitoring based on the determined first mapping function to improve the accuracy of monitoring the monitoring indicator.

[0149] Continue to refer Figure 2In step S220, when it is determined that the original dynamic threshold of the lower limit threshold type of the monitoring indicator is less than or equal to the second preset value, the original dynamic threshold is mapped to the second target dynamic threshold according to the second mapping function, so as to perform lower limit warning monitoring on the monitoring indicator based on the second target dynamic threshold.

[0150] In an exemplary embodiment, the second preset value is greater than the lower limit of the value range of the monitoring indicator. The lower limit of the value range of the monitoring indicator can be understood as the minimum value in the value range of the monitoring indicator. For example, for a monitoring indicator with a value range of [0, 100], the lower limit of the value range is 0.

[0151] Exemplarily, mapping the original dynamic threshold to the second target dynamic threshold according to the second mapping function includes: when the original dynamic threshold is less than or equal to the second preset value and greater than or equal to the lower limit of the value range of the monitoring indicator and the difference between the original dynamic threshold and the lower limit of the value range of the monitoring indicator is less than a fourth preset value, mapping the original dynamic threshold to the second target dynamic threshold according to the second mapping function, the second target dynamic threshold is less than the median of the value range of the monitoring indicator and greater than the original dynamic threshold; when the original dynamic threshold is less than the lower limit of the value range of the monitoring indicator, mapping the original dynamic threshold to the second target dynamic threshold that is greater than the lower limit of the value range of the monitoring indicator and satisfies the second limiting condition according to the second mapping function, the second limiting condition including that the third difference is inversely proportional to the fourth difference, the third difference is the difference between the second target dynamic threshold and the lower limit of the value range of the monitoring indicator, and the fourth difference is the difference between the lower limit of the value range of the monitoring indicator and the original dynamic threshold.

[0152] Among them, when the first preset value is greater than the lower limit of the value range of the monitoring indicator and less than the median value of the value range of the monitoring indicator, the fourth preset value is less than or equal to the difference between the first preset value and the lower limit of the value range of the monitoring indicator, and when the first preset value is greater than the median value of the value range of the monitoring indicator, the fourth preset value is less than or equal to the difference between the median value of the value range of the monitoring indicator and the lower limit of the value range of the monitoring indicator. The third preset value can be customized according to the user if this requirement is met, and this exemplary embodiment does not specifically limit this.

[0153] In other words, the fourth preset value is used to characterize whether the original dynamic threshold value that is within the value range of the monitoring indicator and is less than the first preset value is close to the lower limit of the value range of the monitoring indicator. For example, the original dynamic threshold value is less than or equal to the second preset value and greater than or equal to the lower limit of the value range of the monitoring indicator, and the difference between the original dynamic threshold value and the lower limit of the value range of the monitoring indicator is less than the fourth preset value. It can be understood that the original dynamic preset threshold value is less than or equal to the second preset value and close to the lower limit of the value range of the monitoring indicator. At this time, although the original dynamic threshold value is within the value range of the monitoring indicator, the original dynamic threshold value is very close to the lower limit of the value range, so the original dynamic threshold value can be mapped to the second target dynamic threshold value close to the median of the value range of the monitoring indicator based on the second mapping function, so that the second target dynamic threshold value is closer to the center of the value range of the monitoring indicator than the original dynamic threshold value. In this way, it can be avoided that the threshold value is too close to or even equal to the lower limit of the value range, which makes the monitoring and early warning of the monitoring indicator meaningless.

[0154] When the original dynamic threshold is less than the lower limit of the value range of the monitoring indicator, in other words, when the original dynamic threshold exceeds the lower limit of the value range of the monitoring indicator, the original dynamic threshold can be mapped to the value range of the monitoring indicator, and the more the original dynamic threshold exceeds the lower limit of the value range of the monitoring indicator, the closer the second target dynamic threshold mapped by the original dynamic threshold is to the lower limit of the value range of the monitoring indicator. That is, the third difference and the fourth difference mentioned above are inversely proportional, which can be understood as the more the original dynamic threshold exceeds the lower limit of the value range of the monitoring indicator, the closer the second target dynamic threshold mapped by the original dynamic threshold is to the lower limit of the value range of the monitoring indicator. In this way, after the threshold is adjusted, the relative size relationship between the thresholds can still be maintained, and the vibration shape of the threshold curve corresponding to the new dynamic threshold is kept consistent with the threshold curve corresponding to the original dynamic threshold.

[0155] In another exemplary embodiment, the method further includes: when it is determined that the original dynamic threshold value of the monitoring indicator lower limit threshold type is greater than the second preset value, the monitoring indicator is subjected to over-lower limit early warning monitoring based on the original dynamic threshold value. In other words, when the original dynamic threshold value of the monitoring indicator lower limit threshold type is within the value range of the monitoring indicator and is greater than the second preset value, the original dynamic threshold value may not be mapped and adjusted, and early warning monitoring of the monitoring indicator may be performed directly based on the original dynamic threshold value.

[0156] As mentioned above, in the present disclosure, a set of mapping relationships can also be established for the original dynamic threshold of the lower threshold type according to the above conditions (1) to (5).

[0157] For example, continue to refer to Figure 3 For the dynamic threshold of the monitoring indicator lower limit threshold type with a value range of [0, 100], the mapping relationship curve between the original dynamic threshold and the new dynamic threshold can be equivalent to first Figure 3The curve in is symmetrical about the origin, and then translated 100 units to the right and then 100 units upward. Based on this, for the monitoring indicator with an upper limit of N, the mapping relationship curve between the original dynamic threshold and the new dynamic threshold can be equivalent to first Figure 3 The curve in is symmetric about the origin, then translated N units to the right and then translated N units upward to obtain the curve.

[0158] This is similar to the above analysis of the mapping relationship of the dynamic threshold of the upper threshold type, except that the starting point of the pressure is now P2, that is, when the original dynamic threshold is less than P2, it needs to be adjusted. Based on this, for the dynamic threshold of the lower threshold type, when P2<x≤N, where N represents the upper limit of the value range of the monitoring indicator, and P2 represents the above second preset value, the linear equation y=x can be used to fit the mapping relationship corresponding to this part. For the part of x≤P2, it can be known that it is also monotonically increasing and converges downward to the lower limit of the value range of the monitoring indicator, so the standard logistic regression function can still be used to determine the mapping relationship corresponding to this part based on the preset fitting conditions to fit the second mapping function.

[0159] Exemplarily, when the monitoring indicator includes a dynamic threshold of a lower limit threshold type, the second mapping function is determined in advance based on a standard logistic regression function and according to a second fitting condition; the second fitting condition includes: the second mapping function converges downward to the lower limit of the value range of the monitoring indicator, the second mapping function passes through the point (N, N), the second mapping function is symmetric about the point (N, N), and N is the upper limit of the value range of the monitoring indicator.

[0160] Similarly, some linear transformations can be performed on the standard logistic regression function so that the obtained second mapping function satisfies the above second fitting condition. The specific determination process of the second mapping function is similar to the specific determination process of the above first mapping function, which will not be repeated here.

[0161] For the percentage index, its second mapping function can be obtained by first symmetric the corresponding first mapping function about the origin, then translating 100 units to the right, and then translating 100 units upward to obtain the following formula (5):

[0162]

[0163] In formula (5), x is the original dynamic threshold, P2 is the second preset value, and y is the second target dynamic threshold.

[0164] In addition, since the curve corresponding to the second mapping function and the straight line y=x intersect at point P2, that is, the second fitting condition may also include the second mapping function passing through point (P2, P2), through which the growth rate parameter a in the second mapping function can be solved based on P2, that is, in formula (5),

[0165] After the second mapping function of the percentage indicator is obtained, a mapping adjustment process may be performed on the original dynamic threshold of the lower threshold type of the percentage monitoring indicator based on the second mapping function.

[0166] Exemplarily, when the monitoring indicator includes a percentage indicator, the original dynamic threshold is mapped to the second target dynamic threshold according to the second mapping function, including: mapping the original dynamic threshold to the second target dynamic threshold through the above formula (5).

[0167] For the dynamic threshold of the lower limit threshold type of the monitoring indicator, the original dynamic threshold x can be mapped through the following equation group (6) to perform over-lower limit early warning monitoring of the monitoring indicator based on the second target dynamic threshold y after mapping.

[0168]

[0169] In practical applications, it is only necessary to determine the P2 value, that is, the second preset value, and then the lower limit threshold type of the monitoring indicator can be used for over-lower limit warning monitoring according to the equation group shown in formula (6).

[0170] Next, combine Fig.10 A method for determining the second preset value in an exemplary embodiment of the present disclosure is described. Fig.10 , the method may include steps S1010 to S1060.

[0171] In step S1010, historical indicator data of the monitoring indicator for the same period and a static alarm result of the historical indicator data for the same period under a preset lower static threshold are obtained;

[0172] In step S1020, based on the historical data of the monitoring indicator during the same period, an original dynamic threshold curve of the lower threshold type of the monitoring indicator is generated;

[0173] In step S1030, when there is an original dynamic threshold value less than the lower limit of the value range of the monitoring indicator in the original dynamic threshold curve, multiple second initial preset values ​​are taken within the range from the lower limit of the value range of the monitoring indicator to the median value of the value range of the monitoring indicator according to a preset step size;

[0174] In step S1040, for each second initial preset value, a second mapping function corresponding to the second initial preset value is determined based on the following formula, and based on the second mapping function, the original dynamic threshold is mapped to a second target dynamic threshold to generate a second target dynamic threshold curve corresponding to the second initial preset value:

[0175]

[0176] Wherein, x is the original dynamic threshold, P2' is the second initial preset value, y is the second target dynamic threshold mapped from the original dynamic threshold,

[0177] In step S1050, according to each of the second target dynamic threshold curves, an over-lower limit monitoring warning test is performed on the historical data of the monitoring indicator for the same period, so as to obtain a test alarm result corresponding to each of the second target dynamic threshold curves;

[0178] In step S1060, the second preset value is determined from a plurality of second preset initial values ​​according to the relationship between each of the test alarm results and the static alarm result.

[0179] The specific implementations of steps S1010 to S1060 can refer to the specific implementations of steps S810 to S860 mentioned above respectively, and the technical terms "upper limit" in steps S810 to S860 can be replaced by "lower limit" and "first" can be replaced by "second", and they will not be repeated here.

[0180] exist Fig.11 In the figure, the adjustment of the dynamic threshold of the upper threshold type of the monitoring indicator is taken as an example to illustrate another flow chart of a method for processing the dynamic threshold of the monitoring indicator in an exemplary embodiment of the present disclosure. Fig.11 , the method may include steps S1110 to S1109.

[0181] In step S1101, sample data of monitoring indicators are obtained;

[0182] In step S1102, an original dynamic threshold curve is generated based on sample data of the monitoring indicator;

[0183] In step S1103, it is determined whether the original threshold curve exceeds the upper limit of the value range. If so, the process goes to step S1104; otherwise, the process goes to step S1108;

[0184] In step S1104, a first initial preset value is set to determine a first mapping function;

[0185] In step S1105, based on the first mapping function, the original dynamic threshold curve is mapped and adjusted to obtain a target dynamic threshold curve;

[0186] In step S1106, based on the sample data, the target dynamic threshold curve is verified for alarm rate and alarm result;

[0187] In step S1107, it is determined whether the verification is passed. If so, the process goes to step S1108; otherwise, the process goes to step S1104;

[0188] In step S1108, a first preset value is determined;

[0189] In step S1109, a target first mapping function is determined based on a first preset value to perform intelligent early warning monitoring of the monitoring indicator.

[0190] Among them, for step S1108, if in step S1103, it is judged that the original threshold curve does not exceed the upper limit of the value range, then in step S1108, the first preset value can be directly given between the median value and the upper limit of the value range of the monitoring indicator according to experience or needs to determine the first preset value; if in step S1107, it is judged that the sample alarm rate verification is passed, then the current first preset initial value can be determined as the first preset to determine the first preset value.

[0191] In an exemplary embodiment of the present disclosure, the "threshold mode" parameter can be used to determine whether mapping adjustment processing is performed on the dynamic threshold of the upper threshold type of the monitoring indicator, or mapping adjustment processing is performed on the dynamic threshold of the lower threshold type of the monitoring indicator, or mapping adjustment processing is performed on the dynamic threshold of both the upper threshold type and the lower threshold type of the monitoring indicator.

[0192] It should be noted that, under normal circumstances, the upper limit of the value range of the monitoring indicator can also be understood as the upper limit of the value range of the dynamic threshold, that is, the two are the same; under normal circumstances, the lower limit of the value range of the monitoring indicator can also be understood as the lower limit of the value range of the dynamic threshold, that is, the two are the same. However, when the upper limit of the value range of the dynamic threshold is less than the upper limit of the value range of the monitoring indicator, the technical term "upper limit of the value range of the monitoring indicator" in the above embodiment can be replaced with "upper limit of the value range of the dynamic threshold" to process the dynamic threshold of the upper limit threshold type of the monitoring indicator; when the lower limit of the value range of the dynamic threshold is greater than the lower limit of the value range of the monitoring indicator, the technical term "lower limit of the value range of the monitoring indicator" in the above embodiment can be replaced with "lower limit of the value range of the dynamic threshold" to process the dynamic threshold of the lower limit threshold type of the monitoring indicator.

[0193] In the present disclosure, through the logistic regression model, when the dynamic threshold of the upper threshold type and / or the dynamic threshold of the lower threshold type generated by the existing dynamic threshold algorithm exceeds the value range of the source data of the monitoring indicator, the dynamic threshold can be adjusted and corrected to obtain a reasonable dynamic threshold, so that the dynamic threshold can be corrected quickly, concisely and effectively.

[0194] Compared with directly adjusting the dynamic threshold that exceeds the upper or lower limit of the value range to a fixed threshold within the value range, the present invention can adjust the unreasonable dynamic threshold while keeping the change form of the new threshold curve corresponding to the generated new dynamic threshold consistent with the change form of the original dynamic threshold curve, and also makes reasonable adjustments to the dynamic threshold that is within the value range but very close to the value range boundary, thereby avoiding the situation where the dynamic threshold of the monitoring indicator exceeds the value range boundary or is very close to the value range boundary, thereby improving the accuracy and effectiveness of monitoring the monitoring indicator.

[0195] Those skilled in the art will appreciate that all or part of the steps for implementing the above embodiments are implemented as a computer program executed by a CPU. When the computer program is executed by the CPU, the above functions defined by the above method provided by the present invention are performed. The program may be stored in a computer-readable storage medium, which may be a read-only memory, a disk, or an optical disk.

[0196] In addition, it should be noted that the above-mentioned figures are only schematic illustrations of the processes included in the method according to an exemplary embodiment of the present invention, and are not intended to be limiting. It is easy to understand that the processes shown in the above-mentioned figures do not indicate or limit the time sequence of these processes. In addition, it is also easy to understand that these processes can be performed synchronously or asynchronously, for example, in multiple modules.

[0197] Fig.12 The structure diagram of the dynamic threshold processing device for monitoring indicators in the exemplary embodiment of the present disclosure is shown. Fig.12 , the device 1200 may include a first dynamic threshold processing module 1210 and a second dynamic threshold processing module 1220. Wherein:

[0198] A first dynamic threshold processing module is configured to, when it is determined that the original dynamic threshold of the upper limit threshold type of the monitoring indicator is greater than or equal to a first preset value, map the original dynamic threshold to a first target dynamic threshold according to a first mapping function, so as to perform over-upper limit early warning monitoring on the monitoring indicator based on the first target dynamic threshold;

[0199] A second dynamic threshold processing module is configured to map the original dynamic threshold to a second target dynamic threshold according to a second mapping function when it is determined that the original dynamic threshold of the monitoring indicator lower limit threshold type is less than or equal to a second preset value, so as to perform over-lower limit early warning monitoring on the monitoring indicator based on the second target dynamic threshold;

[0200] The first mapping function and the second mapping function are determined by fitting a standard logistic regression function.

[0201] In some exemplary embodiments of the present disclosure, based on the foregoing embodiments, the first preset value is less than the upper limit of the value range of the monitoring indicator; the first dynamic threshold processing module 1210 is further specifically configured to: when the original dynamic threshold is greater than or equal to the first preset value and less than or equal to the upper limit of the value range of the monitoring indicator and the difference between the original dynamic threshold and the upper limit of the value range of the monitoring indicator is less than a third preset value, according to a first mapping function, map the original dynamic threshold to a first target dynamic threshold, the first target dynamic threshold being greater than the median of the value range of the monitored indicator and less than the original dynamic threshold;

[0202] When the original dynamic threshold is greater than the upper limit of the value range of the monitoring indicator, according to the first mapping function, the original dynamic threshold is mapped to a first target dynamic threshold that is less than the upper limit of the value range of the monitoring indicator and satisfies the first limiting condition; wherein, the first limiting condition includes a first difference being inversely proportional to a second difference, the first difference being the difference between the upper limit of the value range of the monitoring indicator and the first target dynamic threshold, and the second difference being the difference between the original dynamic threshold and the upper limit of the value range of the monitoring indicator.

[0203] In some exemplary embodiments of the present disclosure, based on the foregoing embodiments, the apparatus 1200 further includes a first mapping function determination module and a second mapping function determination module; wherein:

[0204] A first mapping function determination module is configured to determine the first mapping function in advance according to a first fitting condition based on a standard logistic regression function when the monitoring indicator includes a dynamic threshold of an upper threshold type;

[0205] A second mapping function determination module is configured to determine the second mapping function in advance according to a second fitting condition based on a standard logistic regression function when the monitoring indicator includes a dynamic threshold of a lower threshold type;

[0206] The first fitting condition includes: the first mapping function converges upward to the upper limit of the value range of the monitoring indicator, the first mapping function passes through the origin, and the first mapping function is symmetric about the origin;

[0207] The second fitting condition includes: the second mapping function converges downward to the lower limit of the value range of the monitoring indicator, the second mapping function passes through the point (N, N), the second mapping function is symmetric about the point (N, N), and N is the upper limit of the value range of the monitoring indicator.

[0208] In some exemplary embodiments of the present disclosure, based on the foregoing embodiments, the monitoring indicator includes a percentage indicator; the first dynamic threshold processing module 1210 is further specifically configured as follows:

[0209] The original dynamic threshold is mapped to the first target dynamic threshold by the following formula:

[0210]

[0211] Wherein, x is the original dynamic threshold, P1 is the first preset value, y is the first target dynamic threshold,

[0212] In some exemplary embodiments of the present disclosure, based on the foregoing embodiments, the first preset value is predetermined in the following manner:

[0213] Obtain historical indicator data of the monitoring indicator for the same period and static alarm results of the historical indicator data for the same period under a preset upper static threshold value;

[0214] Based on the historical data of the monitoring indicator during the same period, an original dynamic threshold curve of the upper threshold type of the monitoring indicator is generated;

[0215] When there is an original dynamic threshold value greater than the upper limit of the value range of the monitoring indicator in the original dynamic threshold curve, taking a plurality of first initial preset values ​​within the range from the median of the value range of the monitoring indicator to the upper limit of the value range of the monitoring indicator according to a preset step size;

[0216] For each first initial preset value, a first mapping function corresponding to the first initial preset value is determined based on the following formula, and based on the first mapping function, the original dynamic threshold is mapped to a first target dynamic threshold to generate a first target dynamic threshold curve corresponding to the first initial preset value:

[0217]

[0218] Wherein, x is the original dynamic threshold, P1' is the first initial preset value, y is the first target dynamic threshold mapped from the original dynamic threshold,

[0219] According to each of the first target dynamic threshold curves, respectively, an over-upper limit monitoring and early warning test is performed on the historical data of the monitoring indicator for the same period, so as to obtain a test alarm result corresponding to each of the first target dynamic threshold curves;

[0220] According to the relationship between each of the test alarm results and the static alarm result, the first preset value is determined from a plurality of the first preset initial values.

[0221] In some exemplary embodiments of the present disclosure, based on the foregoing embodiments, the first dynamic threshold processing module further includes a first mapping unit, and the first mapping unit is configured to:

[0222] When it is determined that the original dynamic threshold of the upper limit threshold type of the monitoring indicator is less than the first preset value, the monitoring indicator is subjected to over-upper limit warning monitoring based on the original dynamic threshold.

[0223] In some exemplary embodiments of the present disclosure, based on the aforementioned embodiments, the second preset value is greater than the lower limit of the value range of the monitoring indicator; the second dynamic threshold processing module 1220 is also specifically configured as follows: when the original dynamic threshold is less than or equal to the second preset value and greater than or equal to the lower limit of the value range of the monitoring indicator and the difference between the original dynamic threshold and the lower limit of the value range of the monitoring indicator is less than a fourth preset value, according to a second mapping function, the original dynamic threshold is mapped to a second target dynamic threshold, and the second target dynamic threshold is less than the median of the value range of the monitoring indicator and greater than the original dynamic threshold; when the original dynamic threshold is less than the lower limit of the value range of the monitoring indicator, according to the second mapping function, the original dynamic threshold is mapped to a second target dynamic threshold that is greater than the lower limit of the value range of the monitoring indicator and satisfies a second limiting condition, and the second limiting condition includes that a third difference is inversely proportional to the fourth difference, the third difference is the difference between the second target dynamic threshold and the lower limit of the value range of the monitoring indicator, and the fourth difference is the difference between the lower limit of the value range of the monitoring indicator and the original dynamic threshold.

[0224] In some exemplary embodiments of the present disclosure, based on the foregoing embodiments, the monitoring indicator includes a percentage indicator; and mapping the original dynamic threshold to a second target dynamic threshold according to a second mapping function includes:

[0225] The original dynamic threshold is mapped to the second target dynamic threshold by the following formula:

[0226]

[0227] Wherein, x is the original dynamic threshold, P2 is the second preset value, y is the second target dynamic threshold,

[0228] In some exemplary embodiments of the present disclosure, based on the foregoing embodiments, the second preset value is predetermined in the following manner:

[0229] Obtain historical indicator data of the monitoring indicator for the same period and static alarm results of the historical indicator data for the same period under a preset lower limit static threshold;

[0230] Based on the historical data of the monitoring indicator during the same period, generating an original dynamic threshold curve of the lower threshold type of the monitoring indicator;

[0231] When there is an original dynamic threshold value less than the lower limit of the value range of the monitoring indicator in the original dynamic threshold curve, taking a plurality of second initial preset values ​​within the range from the lower limit of the value range of the monitoring indicator to the median value of the value range of the monitoring indicator according to a preset step size;

[0232] For each second initial preset value, a second mapping function corresponding to the second initial preset value is determined based on the following formula, and based on the second mapping function, the original dynamic threshold is mapped to a second target dynamic threshold to generate a second target dynamic threshold curve corresponding to the second initial preset value:

[0233]

[0234] Wherein, x is the original dynamic threshold, P2' is the second initial preset value, y is the second target dynamic threshold mapped from the original dynamic threshold,

[0235] According to each of the second target dynamic threshold curves, respectively, the historical data of the monitoring indicator for the same period is subjected to an over-lower limit monitoring and early warning test to obtain a test alarm result corresponding to each of the second target dynamic threshold curves;

[0236] According to the relationship between each of the test alarm results and the static alarm result, the second preset value is determined from a plurality of the second preset initial values.

[0237] In some exemplary embodiments of the present disclosure, based on the aforementioned embodiments, the second dynamic threshold processing module 1220 also includes a second mapping unit, and the second mapping unit is configured to: when it is determined that the original dynamic threshold of the lower limit threshold type of the monitoring indicator is greater than a second preset value, perform an over-lower limit warning monitoring on the monitoring indicator based on the original dynamic threshold.

[0238] The specific details of each module in the above-mentioned dynamic threshold processing device for monitoring indicators have been described in detail in the corresponding monitoring indicator processing method, so they will not be repeated here.

[0239] It should be noted that, although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into multiple modules or units to be embodied.

[0240] In addition, although the steps of the method in the present disclosure are described in a specific order in the drawings, this does not require or imply that the steps must be performed in this specific order, or that all the steps shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and / or one step may be decomposed into multiple steps, etc.

[0241] Through the description of the above implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the implementation of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a mobile terminal, or a network device, etc.) to execute the method according to the implementation of the present disclosure.

[0242] In the exemplary embodiments of the present disclosure, a computer storage medium capable of implementing the above method is also provided. A program product capable of implementing the above method of this specification is stored thereon. In some possible embodiments, various aspects of the present disclosure may also be implemented in the form of a program product, which includes a program code, and when the program product is run on a terminal device, the program code is used to enable the terminal device to perform the steps according to various exemplary embodiments of the present disclosure described in the above "Exemplary Method" section of this specification.

[0243] refer to Fig.13 As shown, a program product 1300 for implementing the above method according to an embodiment of the present disclosure is described, which can adopt a portable compact disk read-only memory (CD-ROM) and include program code, and can be run on a terminal device, such as a personal computer. However, the program product of the present disclosure is not limited thereto, and in this document, a readable storage medium can be any tangible medium containing or storing a program, which can be used by or in combination with an instruction execution system, an apparatus or a device.

[0244] The program product may use any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0245] Computer readable signal media may include data signals propagated in baseband or as part of a carrier wave, in which readable program code is carried. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Readable signal media may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0246] The program code embodied on the readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the foregoing.

[0247] Program code for performing the operations of the present disclosure may be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In cases involving a remote computing device, the remote computing device may be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., through the Internet using an Internet service provider).

[0248] In addition, in an exemplary embodiment of the present disclosure, an electronic device capable of implementing the above method is also provided.

[0249] Those skilled in the art will appreciate that various aspects of the present disclosure may be implemented as systems, methods or program products. Therefore, various aspects of the present disclosure may be specifically implemented in the following forms, namely: complete hardware implementation, complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software, which may be collectively referred to herein as "circuits", "modules" or "systems".

[0250] Refer to the following Fig.14 The electronic device 800 according to this embodiment of the present disclosure is described. Fig.14 The electronic device 1400 shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0251] like Fig.14 As shown, the electronic device 1400 is in the form of a general computing device. The components of the electronic device 1400 may include, but are not limited to: the at least one processing unit 1410, the at least one storage unit 1420, a bus 1430 connecting different system components (including the storage unit 1420 and the processing unit 1410), and a display unit 1440.

[0252] The storage unit stores program codes, which can be executed by the processing unit 1410, so that the processing unit 1410 performs the steps according to various exemplary embodiments of the present disclosure described in the above “Exemplary Method” section of this specification. For example, the processing unit 1410 can perform the following steps: Figure 2 The steps shown in .

[0253] The storage unit 1420 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 14201 and / or a cache storage unit 14202 , and may further include a read-only storage unit (ROM) 14203 .

[0254] The storage unit 1420 may also include a program / utility 14204 having a set (at least one) of program modules 14205, such program modules 14205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.

[0255] Bus 1430 may represent one or more of several types of bus structures, including a memory unit bus or memory unit controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.

[0256] The electronic device 1400 may also communicate with one or more external devices 1500 (e.g., keyboards, pointing devices, Bluetooth devices, etc.), may also communicate with one or more devices that enable a user to interact with the electronic device 1400, and / or communicate with any device that enables the electronic device 1400 to communicate with one or more other computing devices (e.g., routers, modems, etc.). Such communication may be performed via an input / output (I / O) interface 1450. Furthermore, the electronic device 1400 may also communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network, such as the Internet) via a network adapter 1460. As shown, the network adapter 1460 communicates with other modules of the electronic device 1400 via a bus 1430. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device 1400, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0257] Through the description of the above implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the implementation of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a terminal device, or a network device, etc.) to execute the method according to the implementation of the present disclosure.

[0258] In addition, the above-mentioned figures are only schematic illustrations of the processes included in the method according to the exemplary embodiments of the present disclosure, and are not intended to be limiting. It is easy to understand that the processes shown in the above-mentioned figures do not indicate or limit the time sequence of these processes. In addition, it is also easy to understand that these processes can be performed synchronously or asynchronously, for example, in multiple modules.

[0259] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary technical means in the art that are not disclosed in the present disclosure. The specification and examples are to be considered as exemplary only, and the true scope and spirit of the present disclosure are indicated by the claims.

Claims

1. A dynamic threshold processing method for monitoring indicators, characterized in that: include: When it is determined that the original dynamic threshold of the upper limit threshold type of the monitoring indicator is greater than or equal to the first preset value, the original dynamic threshold is mapped to a first target dynamic threshold according to a first mapping function, so as to perform over-upper limit early warning monitoring on the monitoring indicator based on the first target dynamic threshold; When it is determined that the original dynamic threshold of the monitoring indicator lower limit threshold type is less than or equal to the second preset value, the original dynamic threshold is mapped to the second target dynamic threshold according to the second mapping function, so as to perform over-lower limit early warning monitoring on the monitoring indicator based on the second target dynamic threshold; Wherein, the first mapping function and the second mapping function are determined by fitting a standard logistic regression function; The first preset value is less than the upper limit of the value range of the monitoring indicator; the mapping of the original dynamic threshold to the first target dynamic threshold according to the first mapping function includes: when the original dynamic threshold is greater than or equal to the first preset value and less than or equal to the upper limit of the value range of the monitoring indicator and the difference with the upper limit of the value range of the monitoring indicator is less than the third preset value, the original dynamic threshold is mapped to the first target dynamic threshold according to the first mapping function, and the first target dynamic threshold is greater than the median of the value range of the monitoring indicator and less than the original dynamic threshold; when the original dynamic threshold is greater than the upper limit of the value range of the monitoring indicator, the original dynamic threshold is mapped to the first target dynamic threshold that is less than the upper limit of the value range of the monitoring indicator and satisfies the first limiting condition according to the first mapping function; wherein the first limiting condition includes that the first difference is inversely proportional to the second difference, the first difference is the difference between the upper limit of the value range of the monitoring indicator and the first target dynamic threshold, and the second difference is the difference between the original dynamic threshold and the upper limit of the value range of the monitoring indicator; The second preset value is greater than the lower limit of the value range of the monitoring indicator; the mapping of the original dynamic threshold to the second target dynamic threshold according to the second mapping function includes: when the original dynamic threshold is less than or equal to the second preset value and greater than or equal to the lower limit of the value range of the monitoring indicator and the difference between the lower limits of the value range of the monitoring indicator is less than a fourth preset value, the original dynamic threshold is mapped to the second target dynamic threshold according to the second mapping function, and the second target dynamic threshold is less than the median of the value range of the monitoring indicator and greater than the original dynamic threshold; when the original dynamic threshold is less than the lower limit of the value range of the monitoring indicator, the original dynamic threshold is mapped to the second target dynamic threshold that is greater than the lower limit of the value range of the monitoring indicator and satisfies the second limiting condition according to the second mapping function; wherein the second limiting condition includes that the third difference is inversely proportional to the fourth difference, the third difference is the difference between the second target dynamic threshold and the lower limit of the value range of the monitoring indicator, and the fourth difference is the difference between the lower limit of the value range of the monitoring indicator and the original dynamic threshold; the monitoring indicators include performance indicators in IT information systems.

2. The dynamic threshold processing method for monitoring indicators according to claim 1 is characterized in that: The method further comprises: When the monitoring indicator includes a dynamic threshold of an upper threshold type, the first mapping function is determined in advance based on a standard logistic regression function and according to a first fitting condition; When the monitoring indicator includes a dynamic threshold of a lower threshold type, the second mapping function is determined in advance based on a standard logistic regression function and according to a second fitting condition; The first fitting condition includes: the first mapping function converges upward to the upper limit of the value range of the monitoring indicator, the first mapping function passes through the origin, and the first mapping function is symmetric about the origin; The second fitting condition includes: the second mapping function converges downward to the lower limit of the value range of the monitoring indicator, the second mapping function passes through the point (N, N), the second mapping function is symmetric about the point (N, N), and N is the upper limit of the value range of the monitoring indicator.

3. The dynamic threshold processing method for monitoring indicators according to claim 1 is characterized in that: The first preset value is less than the upper limit of the value range of the monitoring indicator, and the monitoring indicator includes a percentage indicator; Mapping the original dynamic threshold to a first target dynamic threshold according to the first mapping function includes: The original dynamic threshold is mapped to the first target dynamic threshold by the following formula: Wherein, x is the original dynamic threshold, P1 is the first preset value, y is the first target dynamic threshold, 4. The dynamic threshold processing method for monitoring indicators according to claim 3 is characterized in that: The first preset value is predetermined by: Obtain historical indicator data of the monitoring indicator for the same period and static alarm results of the historical indicator data for the same period under a preset upper static threshold value; Based on the historical data of the monitoring indicator during the same period, generating an original dynamic threshold curve of the upper threshold type of the monitoring indicator; When there is an original dynamic threshold value greater than the upper limit of the value range of the monitoring indicator in the original dynamic threshold curve, taking a plurality of first initial preset values ​​within the range from the median of the value range of the monitoring indicator to the upper limit of the value range of the monitoring indicator according to a preset step size; For each first initial preset value, a first mapping function corresponding to the first initial preset value is determined based on the following formula, and based on the first mapping function, the original dynamic threshold is mapped to a first target dynamic threshold to generate a first target dynamic threshold curve corresponding to the first initial preset value: Wherein, x is the original dynamic threshold, P1' is the first initial preset value, y is the first target dynamic threshold mapped from the original dynamic threshold, According to each of the first target dynamic threshold curves, respectively, an over-upper limit monitoring and early warning test is performed on the historical data of the monitoring indicator for the same period, so as to obtain a test alarm result corresponding to each of the first target dynamic threshold curves; According to the relationship between each of the test alarm results and the static alarm result, the first preset value is determined from a plurality of the first preset initial values.

5. The dynamic threshold processing method for monitoring indicators according to any one of claims 1 to 3, characterized in that: The method further comprises: When it is determined that the original dynamic threshold of the upper limit threshold type of the monitoring indicator is less than the first preset value, the monitoring indicator is subjected to over-upper limit warning monitoring based on the original dynamic threshold.

6. The dynamic threshold processing method for monitoring indicators according to claim 1 is characterized in that: The second preset value is greater than the lower limit of the value range of the monitoring indicator, and the monitoring indicator includes a percentage indicator; Mapping the original dynamic threshold to a second target dynamic threshold according to a second mapping function includes: The original dynamic threshold is mapped to the second target dynamic threshold by the following formula: Wherein, x is the original dynamic threshold, P2 is the second preset value, y is the second target dynamic threshold, 7. The dynamic threshold processing method for monitoring indicators according to claim 6 is characterized in that: The second preset value is predetermined by: Obtain historical indicator data of the monitoring indicator for the same period and static alarm results of the historical indicator data for the same period under a preset lower limit static threshold; Based on the historical data of the monitoring indicator during the same period, generating an original dynamic threshold curve of the lower threshold type of the monitoring indicator; When there is an original dynamic threshold value less than the lower limit of the value range of the monitoring indicator in the original dynamic threshold curve, taking a plurality of second initial preset values ​​within the range from the lower limit of the value range of the monitoring indicator to the median value of the value range of the monitoring indicator according to a preset step size; For each second initial preset value, a second mapping function corresponding to the second initial preset value is determined based on the following formula, and based on the second mapping function, the original dynamic threshold is mapped to a second target dynamic threshold to generate a second target dynamic threshold curve corresponding to the second initial preset value: Wherein, x is the original dynamic threshold, P2' is the second initial preset value, y is the second target dynamic threshold mapped from the original dynamic threshold, According to each of the second target dynamic threshold curves, respectively, the historical data of the monitoring indicator for the same period is subjected to an over-lower limit monitoring and early warning test to obtain a test alarm result corresponding to each of the second target dynamic threshold curves; According to the relationship between each of the test alarm results and the static alarm result, the second preset value is determined from a plurality of the second preset initial values.

8. The dynamic threshold processing method for monitoring indicators according to claim 1 is characterized in that: The method further comprises: When it is determined that the original dynamic threshold of the monitoring indicator lower limit threshold type is greater than the second preset value, the monitoring indicator is subjected to over-lower limit early warning monitoring based on the original dynamic threshold.

9. A dynamic threshold processing device for monitoring indicators, characterized in that: include: A first dynamic threshold processing module is configured to, when it is determined that the original dynamic threshold of the upper limit threshold type of the monitoring indicator is greater than or equal to a first preset value, map the original dynamic threshold to a first target dynamic threshold according to a first mapping function, so as to perform over-upper limit early warning monitoring on the monitoring indicator based on the first target dynamic threshold; A second dynamic threshold processing module is configured to map the original dynamic threshold to a second target dynamic threshold according to a second mapping function when it is determined that the original dynamic threshold of the monitoring indicator lower limit threshold type is less than or equal to a second preset value, so as to perform over-lower limit early warning monitoring on the monitoring indicator based on the second target dynamic threshold; Wherein, the first mapping function and the second mapping function are determined by fitting a standard logistic regression function; The first preset value is less than the upper limit of the value range of the monitoring indicator; the mapping of the original dynamic threshold to the first target dynamic threshold according to the first mapping function includes: when the original dynamic threshold is greater than or equal to the first preset value and less than or equal to the upper limit of the value range of the monitoring indicator and the difference with the upper limit of the value range of the monitoring indicator is less than the third preset value, the original dynamic threshold is mapped to the first target dynamic threshold according to the first mapping function, and the first target dynamic threshold is greater than the median of the value range of the monitoring indicator and less than the original dynamic threshold; when the original dynamic threshold is greater than the upper limit of the value range of the monitoring indicator, the original dynamic threshold is mapped to the first target dynamic threshold that is less than the upper limit of the value range of the monitoring indicator and satisfies the first limiting condition according to the first mapping function; wherein the first limiting condition includes that the first difference is inversely proportional to the second difference, the first difference is the difference between the upper limit of the value range of the monitoring indicator and the first target dynamic threshold, and the second difference is the difference between the original dynamic threshold and the upper limit of the value range of the monitoring indicator; The second preset value is greater than the lower limit of the value range of the monitoring indicator; the mapping of the original dynamic threshold to the second target dynamic threshold according to the second mapping function includes: when the original dynamic threshold is less than or equal to the second preset value and greater than or equal to the lower limit of the value range of the monitoring indicator and the difference between the lower limits of the value range of the monitoring indicator is less than a fourth preset value, the original dynamic threshold is mapped to the second target dynamic threshold according to the second mapping function, and the second target dynamic threshold is less than the median of the value range of the monitoring indicator and greater than the original dynamic threshold; when the original dynamic threshold is less than the lower limit of the value range of the monitoring indicator, the original dynamic threshold is mapped to the second target dynamic threshold that is greater than the lower limit of the value range of the monitoring indicator and satisfies the second limiting condition according to the second mapping function; wherein the second limiting condition includes that the third difference is inversely proportional to the fourth difference, the third difference is the difference between the second target dynamic threshold and the lower limit of the value range of the monitoring indicator, and the fourth difference is the difference between the lower limit of the value range of the monitoring indicator and the original dynamic threshold; the monitoring indicators include performance indicators in IT information systems.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, a dynamic threshold processing method for monitoring indicators according to any one of claims 1 to 9 is implemented.

11. An electronic device, characterized in that: include: one or more processors; A storage device for storing one or more programs, which, when executed by the one or more processors, enables the one or more processors to implement the dynamic threshold processing method for the monitoring indicator as described in any one of claims 1 to 9.

Images