System abnormality alarm method and device, storage medium and electronic equipment

Abstract

The present application provides a system abnormality alarm method and device, storage medium and electronic device, including: when the statistics of each business indicator meet the preset corresponding alarm rules, if the statistics of the transaction volume indicator included in the business indicator data is greater than the first threshold, or the statistics of the transaction volume indicator is not greater than the first threshold, but greater than the second threshold, and after the suppression times are added by one, the current suppression times are greater than the preset threshold or the preset suppression times threshold, or the statistics of the transaction volume indicator is not greater than the second threshold, but greater than the third threshold, and after the suppression times are added by one, the current suppression times are greater than the difference between the preset suppression times threshold and 1, then an alarm notification is issued. It can be seen that the larger the statistics of the transaction volume indicator, the less the suppression of the alarm, thereby improving the notification time of the alarm notification, so that the operation and maintenance personnel can conduct timely investigation and maintenance, thereby reducing losses.

Description

Technical Field

[0001] The present application relates to the field of fault monitoring technology, and in particular to a system abnormality alarm method and device, a storage medium and an electronic device. Background Art

[0002] As the business continues to expand, the transaction volume of the business system has exploded. Some business systems require uninterrupted execution of business transactions throughout the day, so it is necessary to monitor the business system and issue abnormal alarms when the business system is judged to be abnormal.

[0003] At present, the system abnormality alarm is issued when the number of abnormal statistics of business indicators exceeds the preset threshold. The existing system abnormality alarm ignores the impact of the transaction volume of the business system on the system abnormality, resulting in a delay in the notification time of the alarm notification, which causes huge losses to users. Summary of the invention

[0004] During the research process, the inventor found that the transaction volume is proportional to the probability of system abnormality. The larger the transaction volume, the greater the probability of system abnormality. Based on this, the present application provides a system abnormality alarm method and device, storage medium and electronic equipment, the purpose of which is to improve the notification time of the alarm notification so that operation and maintenance personnel can conduct timely inspection and repair, thereby reducing losses.

[0005] In order to achieve the above objectives, this application provides the following technical solutions:

[0006] A system abnormality alarm method, comprising:

[0007] Obtaining business indicator data of the business system from a preset message middleware; the business indicator data includes statistics of multiple business indicators, and the statistics of each business indicator are obtained based on the statistics of each transaction detail data within a preset time period;

[0008] Based on the statistics of each business indicator included in the business indicator data, determine whether each business indicator satisfies the preset corresponding alarm rules;

[0009] If each business indicator satisfies the corresponding alarm rule, it is determined whether the statistic of the transaction volume indicator included in the business indicator data is greater than a first threshold value, and if the statistic of the transaction volume indicator is greater than the first threshold value, an alarm notification is issued;

[0010] If the statistic of the trading volume indicator is not greater than the first threshold, then determine whether the statistic of the trading volume indicator is greater than the second threshold; if the statistic of the trading volume indicator is greater than the second threshold, then add one to the preset suppression times, determine whether the current suppression times is greater than the preset threshold or greater than the preset suppression times threshold; if the current suppression times is greater than the preset threshold or greater than the preset suppression times threshold, then issue an alarm notification; wherein the second threshold is less than the first threshold;

[0011] If the statistic of the trading volume indicator is not greater than the second threshold, then determine whether the statistic of the trading volume indicator is greater than the third threshold; if the statistic of the trading volume indicator is greater than the third threshold, then add one to the number of suppression times to determine whether the current number of suppression times is greater than the difference between the preset number of suppression times threshold and 1; if the current number of suppression times is greater than the difference between the preset number of suppression times threshold and 1, then issue an alarm notification; wherein, the third threshold is less than the second threshold.

[0012] The above method may optionally further include:

[0013] If the statistic of the trading volume indicator is not greater than the third threshold, the number of suppressions is increased by one;

[0014] Determine whether the current number of suppressions is greater than a preset suppression threshold. If the current number of suppressions is greater than the preset suppression threshold, an alarm notification is issued.

[0015] The above method may optionally further include:

[0016] If the current number of suppressions is not greater than the preset threshold and is not greater than the preset suppression threshold, or the current number of suppressions is not greater than the difference between the preset number of suppressions and the preset threshold, or the current number of suppressions is not greater than the third threshold, then return to execute the step of obtaining business indicator data from the preset message middleware.

[0017] The above method may optionally include, before obtaining the business indicator data from the preset message middleware, the following steps:

[0018] Obtain detailed transaction data of each business system within the current statistical time period;

[0019] Based on each transaction detail data, calculate the statistics of each preset business indicator to obtain the business indicator data corresponding to the current preset time period;

[0020] Write the business indicator data corresponding to the current statistical time period into the message middleware.

[0021] Optionally, the above method, based on the statistics of each business indicator included in the business indicator data, determines whether each business indicator satisfies a preset corresponding alarm rule, including:

[0022] Based on the statistical time period corresponding to the business indicator data, searching the rule base for an alarm rule corresponding to a preset time period corresponding to the statistical time period;

[0023] For each business indicator, an alarm rule corresponding to the business indicator is determined from the found alarm rules, and it is determined whether the statistic of the business indicator is within a baseline range in the determined alarm rule.

[0024] A system abnormality alarm device, comprising:

[0025] A first acquisition unit is used to acquire business indicator data of the business system from a preset message middleware; the business indicator data includes statistics of multiple business indicators, and the statistics of each business indicator are obtained based on the statistics of each transaction detail data within a preset time period;

[0026] A judgment unit, configured to judge whether each business indicator satisfies a preset corresponding alarm rule based on the statistics of each business indicator included in the business indicator data;

[0027] an alarm unit, for determining, if each business indicator satisfies the corresponding alarm rule, whether the statistic of the transaction volume indicator included in the business indicator data is greater than a first threshold value, and issuing an alarm notification if the statistic of the transaction volume indicator is greater than the first threshold value; if the statistic of the transaction volume indicator is not greater than the first threshold value, determining whether the statistic of the transaction volume indicator is greater than a second threshold value, and if the statistic of the transaction volume indicator is greater than the second threshold value, adding one to a preset suppression number, determining whether the current suppression number is greater than the preset threshold value or greater than a preset suppression number threshold value, and issuing an alarm notification if the current suppression number is greater than the preset threshold value or greater than the preset suppression number threshold value; wherein the second threshold value is less than the first threshold value; if the statistic of the transaction volume indicator is not greater than the second threshold value, determining whether the statistic of the transaction volume indicator is greater than a third threshold value, and if the statistic of the transaction volume indicator is greater than the third threshold value, adding one to the suppression number, determining whether the current suppression number is greater than the difference between the preset suppression number threshold value and 1, and issuing an alarm notification if the current suppression number is greater than the difference between the preset suppression number threshold value and 1; wherein the third threshold value is less than the second threshold value.

[0028] In the above device, optionally, the alarm unit is further used for:

[0029] If the statistic of the trading volume indicator is not greater than the third threshold, the number of suppressions is increased by one;

[0030] Determine whether the current number of suppressions is greater than a preset suppression threshold. If the current number of suppressions is greater than the preset suppression threshold, an alarm notification is issued.

[0031] In the above device, optionally, the alarm unit is further used for:

[0032] If the current number of suppressions is not greater than the preset threshold and is not greater than the preset suppression threshold, or the current number of suppressions is not greater than the difference between the preset number of suppressions and the preset threshold, or the current number of suppressions is not greater than the third threshold, then return to execute the step of obtaining business indicator data from the preset message middleware.

[0033] A storage medium stores an instruction set, wherein the instruction set, when executed by a processor, implements the above-mentioned system abnormality alarm method.

[0034] An electronic device, comprising:

[0035] A memory for storing at least one set of instructions;

[0036] The processor is used to execute the instruction set stored in the memory, and implement the system abnormality alarm method as mentioned above by executing the instruction set.

[0037] Compared with the prior art, this application has the following advantages:

[0038] The present application provides a system abnormality alarm method and device, storage medium and electronic device, including: when the statistics of each business indicator meet the preset corresponding alarm rules, if the statistics of the transaction volume indicator included in the business indicator data is greater than the first threshold, an alarm notification is issued; if the statistics of the transaction volume indicator is not greater than the first threshold, but greater than the second threshold, and after the suppression times are added by one, the current suppression times are greater than the preset threshold or the preset suppression times threshold, then an alarm notification is issued; if the statistics of the transaction volume indicator is not greater than the second threshold, but greater than the third threshold, and after the suppression times are added by one, the current suppression times are greater than the difference between the preset suppression times threshold and 1, then an alarm notification is issued, wherein the first threshold is greater than the second threshold, and the second threshold is greater than the third threshold. It can be seen that the present application scheme realizes the suppression of alarms through the size of the statistics of the transaction volume indicator. The larger the statistics of the transaction volume indicator, that is, the larger the transaction volume, the less the alarm suppression, thereby realizing the improvement of the notification time of the alarm notification, so that the operation and maintenance personnel can conduct timely investigation and maintenance, thereby reducing losses. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0040] Figure 1 A method flow chart of a system abnormality alarm method provided by this application;

[0041] Figure 2 Another method flow chart of a system abnormality alarm method provided by the present application;

[0042] Figure 3 Another method flow chart of a system abnormality alarm method provided by the present application;

[0043] Figure 4 A schematic diagram of the structure of a system abnormality alarm device provided in this application;

[0044] Figure 5 A schematic diagram of the structure of an electronic device provided in this application. DETAILED DESCRIPTION

[0045] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0046] The term "including" and its variations used herein are open inclusions, i.e., "including but not limited to". The term "based on" means "based at least in part on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". The relevant definitions of other terms will be given in the following description.

[0047] It should be noted that the concepts such as "first" and "second" mentioned in the present application are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0048] It should be noted that the modifications of "one" and "plurality" mentioned in the disclosure of this application are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0049] The present application can be used in many general or special computing device environments or configurations, such as personal computers, server computers, handheld or portable devices, tablet devices, multi-processor devices, distributed computing environments including any of the above devices or equipment, etc.

[0050] The present application embodiment provides a system abnormality alarm method, and the flowchart of the system abnormality alarm method is as follows: Figure 1 As shown, specifically including:

[0051] S101. Obtain business indicator data of a business system from a preset message middleware.

[0052] In this embodiment, a message middleware is preset, and the message middleware is used to store business indicator data calculated based on the transaction details data of the business system, wherein the business indicator data includes statistics of multiple business indicators, and the business indicator data includes but is not limited to statistics of transaction volume indicators, statistics of business success rate indicators, statistics of system success rate indicators, statistics of average processing time indicators, statistics of long transaction volume indicators, statistics of long transaction rate indicators and statistics of Apdex (application performance indicators).

[0053] The statistics of each business indicator are obtained based on the statistics of each transaction detail data within a preset time period.

[0054] It should be noted that the business indicator data is obtained from the message middleware according to the writing time of the business indicator data into the message middleware, that is, the business indicator data written into the message middleware first is obtained first.

[0055] S102: Based on the statistics of each business indicator included in the business indicator data, determine whether each business indicator satisfies the corresponding preset alarm rules. If so, execute S103; if not, return to execute S101.

[0056] In this embodiment, multiple alarm rules corresponding to each preset time period are preset, and the alarm rule corresponding to each business indicator is determined from the multiple preset alarm rules, and then it is determined whether each business indicator meets the corresponding alarm rule.

[0057] See also Figure 2 The process of judging whether each business indicator satisfies the preset corresponding alarm rules based on the statistics of each business indicator included in the business indicator data specifically includes the following steps:

[0058] S201. Based on the statistical time period corresponding to the business indicator data, search for an alarm rule corresponding to a preset time period corresponding to the statistical time period in a rule base.

[0059] In this embodiment, multiple alarm rules corresponding to each preset time period are preset, and the multiple alarm rules corresponding to each preset time period are stored in the rule base. It should be noted that the number of alarm rules corresponding to the preset time period is the same as the number of business indicators included in the business indicator data, that is, there is a one-to-one correspondence between the alarm rules corresponding to the preset time period and the business indicators included in the business indicator data.

[0060] Each preset time period may be a different time period in 24 hours. For example, 24 hours may be set to four time periods: 0:00-6:00, 6:00-12:00, 12:00-18:00, and 18:00-24:00.

[0061] The alarm rule corresponding to each preset time period includes a baseline range, and the baseline range is determined based on the baseline corresponding to the preset time period. For example, if the baseline is 100, the baseline range can be set to [80, 100].

[0062] The alarm rules may also include alarm levels.

[0063] Among them, the baseline corresponding to each preset time period is calculated based on the transaction details data corresponding to the preset time period in the historical time period. For example, the preset time period is 6:00-12:00, and the transaction details data from 6:00-12:00 in the previous 15 days are obtained. Based on the obtained transaction details data, the baseline within the preset time period is calculated.

[0064] It should be noted that the alarm rules in the rule base are updated according to a preset update cycle.

[0065] In this embodiment, the statistical time period corresponding to the business indicator data is obtained, wherein when the business indicator data is written into the message middleware, the statistical time period of the business indicator data is written into the message middleware.

[0066] In this embodiment, based on the statistical time period corresponding to the business indicator data, the alarm rule corresponding to the preset time period corresponding to the statistical time period in the rule base is searched.

[0067] S202: For each business indicator, determine the alarm rule corresponding to the business indicator from the found alarm rules, and judge whether the statistic of the business indicator is within the baseline range of the determined alarm rule.

[0068] In this embodiment, for each business indicator, the alarm rule corresponding to the business indicator is determined from the alarm rules found, and it is judged whether the statistic of the business indicator is within the baseline range of the determined alarm rule. If it is within the baseline range, it is determined that the business indicator satisfies the alarm rule corresponding to itself; if it is not within the baseline range, it is determined that the business indicator does not satisfy the alarm rule corresponding to itself.

[0069] In this embodiment, if each business indicator satisfies the preset corresponding alarm rule, step S103 is executed. If any business indicator does not satisfy the preset corresponding alarm rule, the process returns to step S101.

[0070] S103, determining whether the statistic of the transaction volume indicator included in the business indicator data is greater than a first threshold, if so, executing S104, if not, executing S105.

[0071] In this embodiment, the business indicator data includes statistics of transaction volume indicators, and it is determined whether the statistics of transaction volume indicators included in the business indicator data are greater than a first threshold, wherein the first threshold is a manually set value and can be modified according to demand.

[0072] S104: Issue an alarm notification.

[0073] During the research process, the inventor found that the trading volume is proportional to the probability of system abnormality. The larger the trading volume, the greater the probability of system abnormality.

[0074] In this embodiment, if the statistic of the transaction volume indicator is greater than the first threshold, it means that there may be an abnormality in the business system, and an alarm notification is issued.

[0075] In this embodiment, if the statistic of the trading volume indicator is not greater than the first threshold but greater than the second threshold, and after adding one to the number of suppressions, the current number of suppressions is greater than the preset threshold or greater than the preset number of suppressions threshold, it means that there may be an abnormality in the business system and an alarm notification is issued. That is to say, when the statistic of the trading volume indicator is not greater than the first threshold but greater than the second threshold, the number of suppressions is suppressed at most by the preset threshold, and preferably, it is suppressed at most once.

[0076] In this embodiment, if the statistic of the transaction volume indicator is not greater than the second threshold, but greater than the third threshold, and after the number of suppressions is increased by one, the current number of suppressions is greater than the difference between the preset number of suppressions threshold and 1, then it means that there may be an abnormality in the business system and an alarm notification is issued.

[0077] In this embodiment, if the statistic of the transaction volume indicator is not greater than the third threshold, if after adding one to the suppression times, the current suppression times are greater than the preset suppression times threshold, it indicates that there may be an abnormality in the business system and an alarm notification is issued.

[0078] In this embodiment, the process of issuing an alarm notification specifically includes: issuing an alarm notification in a preset manner. Exemplarily, the preset manner includes but is not limited to sending the alarm notification by email or by text message.

[0079] S105. Determine whether the statistic of the trading volume indicator is greater than a second threshold. If so, execute S106; if not, execute S107.

[0080] In this embodiment, if the statistic of the trading volume indicator is not greater than the first threshold, it is further determined whether the statistic of the trading volume indicator is greater than the second threshold, wherein the second threshold is smaller than the first threshold.

[0081] S106, adding one to the preset pressing times, and determining whether the current pressing times is greater than the preset threshold or greater than the preset pressing times threshold, if so, executing S104, if not, returning to executing S101.

[0082] In this embodiment, the initial value of the preset suppression times is 0, and the suppression times are initialized to 0 after each alarm is issued.

[0083] In this embodiment, if the statistic of the transaction volume indicator is greater than the second threshold, the current number of suppressions is increased by one to achieve accumulation of the number of suppressions.

[0084] In this embodiment, after the number of pressing times is incremented by one, it is determined whether the current number of pressing times is greater than a preset threshold or greater than a preset number of pressing times threshold. Preferably, the preset threshold is 1.

[0085] In this embodiment, if the current suppression times are not greater than the preset threshold value and are not greater than the preset suppression times threshold value, the process returns to step S101 to read the next business indicator data in the message middleware.

[0086] S107, determining whether the statistic of the trading volume indicator is greater than a third threshold, if so, executing S108, if not, executing S109.

[0087] In this embodiment, if the statistic of the trading volume indicator is not greater than the second threshold, it is further determined whether the statistic of the trading volume indicator is greater than a third threshold, wherein the third threshold is less than the second threshold.

[0088] S108, add one to the number of pressing times, and determine whether the current number of pressing times is greater than the difference between the preset number of pressing times threshold and 1. If so, execute S104; if not, return to execute S101.

[0089] In this embodiment, if the statistic of the transaction volume indicator is greater than the third threshold, the number of suppression times is increased by one.

[0090] In this embodiment, after the number of pressing times is increased by one, it is determined whether the current number of pressing times is greater than the difference between the preset number of pressing times threshold and 1, that is, it is determined whether the current number of pressing times is greater than the difference between the preset number of pressing times threshold and one.

[0091] In this embodiment, if the current number of suppressions is greater than the difference between the preset number of suppressions threshold and 1, step S104 is executed; if the current number of suppressions is not greater than the difference between the preset number of suppressions threshold and 1, the process returns to step S101 to read the next business indicator data in the message middleware.

[0092] S109, add one to the pressing times, and determine whether the current pressing times is greater than the preset pressing times threshold, if so, execute S104, if not, return to execute S101.

[0093] In this embodiment, if the statistic of the transaction volume indicator is not greater than the third threshold, the number of suppression times is increased by one.

[0094] In this embodiment, after the number of suppressions is increased by one, it is determined whether the current number of suppressions is greater than the preset number of suppressions threshold. If the current number of suppressions is greater than the preset number of suppressions threshold, step S104 is executed. If the current number of suppressions is not greater than the preset number of suppressions threshold, the process returns to step S101 to read the next business indicator data in the message middleware.

[0095] It should be noted that the alarm suppression mechanism is to solve the large number of false alarms triggered by occasional jitters in the business system.

[0096] In the system abnormality alarm method provided by the embodiment of the present application, when the statistics of each business indicator meet the preset corresponding alarm rules, if the statistics of the transaction volume indicator included in the business indicator data is greater than the first threshold, an alarm notification is issued; if the statistics of the transaction volume indicator is not greater than the first threshold, but greater than the second threshold, and after the suppression times are added by one, the current suppression times are greater than the preset threshold or the preset suppression times threshold, an alarm notification is issued; if the statistics of the transaction volume indicator is not greater than the second threshold, but greater than the third threshold, and after the suppression times are added by one, the current suppression times are greater than the difference between the preset suppression times threshold and 1, an alarm notification is issued, wherein the first threshold is greater than the second threshold, and the second threshold is greater than the third threshold. It can be seen that the scheme of the present application realizes the suppression of alarms through the size of the statistics of the transaction volume indicator. The larger the statistics of the transaction volume indicator, that is, the larger the transaction volume, the less the alarm suppression, thereby realizing the improvement of the notification time of the alarm notification, so that the operation and maintenance personnel can conduct timely investigation and maintenance, thereby reducing losses.

[0097] See also Figure 3 In this embodiment, the system abnormality alarm method provided in the embodiment of the present application may further include the following steps before step S101:

[0098] S301. Obtain detailed transaction data of each business system within the current statistical time period.

[0099] In this embodiment, the detailed transaction data of each business system in the current statistical time period is obtained according to the preset statistical time period. Specifically, the detailed transaction data of each business system in the current statistical time period is read from the message queue.

[0100] S302: Based on each transaction detail data, calculate the statistics of each preset business indicator to obtain the business indicator data corresponding to the current preset time period.

[0101] In this embodiment, based on the transaction detail data within the statistical time period, the statistics of each preset business indicator are calculated. Specifically, data preprocessing is performed on each transaction detail data. The data preprocessing process includes but is not limited to eliminating abnormal data and supplementing related data.

[0102] Among them, the transaction details data only includes the host information (AP information). Through the host and system correspondence configuration table, we know that the machine belongs to a specific system, and supplement the system ID, system Chinese name, system code, and deployment unit information.

[0103] Exemplary business indicators include, but are not limited to, transaction volume indicators, business success rate indicators, system success rate indicators, average response time indicators, average processing time indicators, long transaction volume indicators, long transaction rate indicators, and Apdex indicators. Among them, the statistics of transaction volume indicators are used to characterize the proportion of business system response time to total transaction time within the statistical time period; the statistics of business success rate indicators are used to characterize the proportion of the number of successful business transactions to the total transaction volume within the statistical time period; the statistics of system success rate indicators are used to characterize the proportion of the number of successful system transactions to the total transaction volume within the statistical time period; the statistics of average response time indicators are used to characterize the proportion of system response time to total transaction time within the statistical time period; the statistics of average processing time indicators are used to characterize the proportion of business processing time within the statistical time period. The statistics of the long transaction volume indicator are used to characterize the proportion of the processing time of a transaction greater than a threshold; the statistics of the long transaction rate indicator are used to characterize the proportion of long transaction volume in the total transaction volume; the statistics of the Apdex indicator are used to characterize the transaction quality. If the processing time is greater than the Apdex threshold, the quality value is equal to 0; if the processing time is between 75% and 100% of the Apdex threshold, the quality value is 50; if the processing time is between 25% and 75% of the Apdex threshold, the quality value is 75; if the processing time is between 0% and 25% of the Apdex threshold, the quality value is 100.

[0104] In this embodiment, the statistics of various business indicators in the current statistical time period are combined into business indicator data.

[0105] S303: Write the business indicator data corresponding to the current statistical time period into the message middleware.

[0106] In this embodiment, after the acquisition of the business indicator data in the current statistical time period is completed, the business indicator data corresponding to the current statistical time period is written into the message middleware for subsequent processing flow.

[0107] The system abnormality alarm method provided in the embodiment of the present application obtains the transaction detail data of the business system within the current statistical time period, calculates the statistics of each preset business indicator based on the transaction detail data, obtains the business indicator data corresponding to the current preset time period, and writes the business indicator data corresponding to the current statistical time period into the message middleware for subsequent processing flow.

[0108] It should be noted that although the operations are depicted in a particular order, this should not be understood as requiring that the operations be performed in the particular order shown or in a sequential order. In certain circumstances, multitasking and parallel processing may be advantageous.

[0109] It should be understood that the various steps described in the method embodiments disclosed in the present application can be performed in different orders and / or in parallel. In addition, the method embodiments may include additional steps and / or omit the steps shown. The scope of the present application is not limited in this respect.

[0110] and Figure 1 Corresponding to the method described above, the embodiment of the present application also provides a system abnormality alarm device for Figure 1 The specific implementation of the method is shown in the following diagram: Figure 4 As shown, specifically including:

[0111] The first acquisition unit 401 is used to acquire business indicator data of the business system from the preset message middleware; the business indicator data includes statistics of multiple business indicators, and the statistics of each business indicator are obtained based on the statistics of each transaction detail data within a preset time period;

[0112] A judging unit 402, configured to judge whether each business indicator satisfies a preset corresponding alarm rule based on the statistics of each business indicator included in the business indicator data;

[0113] The alarm unit 403 is used to determine whether the statistic of the transaction volume indicator included in the business indicator data is greater than a first threshold value if each business indicator satisfies the corresponding alarm rule, and to issue an alarm notification if the statistic of the transaction volume indicator is greater than the first threshold value; if the statistic of the transaction volume indicator is not greater than the first threshold value, determine whether the statistic of the transaction volume indicator is greater than a second threshold value, and if the statistic of the transaction volume indicator is greater than the second threshold value, add one to the preset suppression times, determine whether the current suppression times are greater than the preset threshold value or greater than the preset suppression times threshold value, and issue an alarm notification if the current suppression times are greater than the preset threshold value or greater than the preset suppression times threshold value; wherein the second threshold value is less than the first threshold value; if the statistic of the transaction volume indicator is not greater than the second threshold value, determine whether the statistic of the transaction volume indicator is greater than a third threshold value, and if the statistic of the transaction volume indicator is greater than the third threshold value, add one to the suppression times, determine whether the current suppression times are greater than the difference between the preset suppression times threshold value and 1, and issue an alarm notification if the current suppression times are greater than the difference between the preset suppression times threshold value and 1; wherein the third threshold value is less than the second threshold value.

[0114] In the system abnormality alarm device provided in the embodiment of the present application, the suppression of the alarm is achieved through the size of the statistical amount of the trading volume indicator. The larger the statistical amount of the trading volume indicator, that is, the larger the trading volume, the less the alarm is suppressed, thereby improving the notification time of the alarm notification, so that the operation and maintenance personnel can conduct timely inspections and repairs, thereby reducing losses.

[0115] In one embodiment of the present application, based on the above solution, the alarm unit 403 is further used to:

[0116] If the statistic of the trading volume indicator is not greater than the third threshold, the number of suppressions is increased by one;

[0117] Determine whether the current number of suppressions is greater than a preset suppression threshold. If the current number of suppressions is greater than the preset suppression threshold, an alarm notification is issued.

[0118] In one embodiment of the present application, based on the above solution, the alarm unit 403 is further used to:

[0119] If the current number of suppressions is not greater than the preset threshold and is not greater than the preset suppression threshold, or the current number of suppressions is not greater than the difference between the preset number of suppressions and the preset threshold, or the current number of suppressions is not greater than the third threshold, then return to execute the step of obtaining business indicator data from the preset message middleware.

[0120] In one embodiment of the present application, based on the above solution, it can also be configured as follows:

[0121] The second acquisition unit is used to acquire the transaction details of the business system within the current statistical time period;

[0122] A calculation unit, used to calculate the statistics of each preset business indicator based on each transaction detail data, and obtain the business indicator data corresponding to the current preset time period;

[0123] The writing unit is used to write the business indicator data corresponding to the current statistical time period into the message middleware.

[0124] In one embodiment of the present application, based on the above solution, the judgment unit 402 is specifically used to:

[0125] Based on the statistical time period corresponding to the business indicator data, searching the rule base for an alarm rule corresponding to a preset time period corresponding to the statistical time period;

[0126] For each business indicator, an alarm rule corresponding to the business indicator is determined from the found alarm rules, and it is determined whether the statistic of the business indicator is within a baseline range in the determined alarm rule.

[0127] An embodiment of the present application further provides a storage medium, wherein the storage medium stores an instruction set, wherein when the instruction set is executed, the system abnormality alarm method disclosed in any of the above embodiments is executed.

[0128] The present application also provides an electronic device, whose structural diagram is as follows: Figure 5As shown, it specifically includes a memory 501 for storing at least one set of instruction sets; a processor 502 for executing the instruction set stored in the memory, and implementing the system abnormality alarm method disclosed in any of the above embodiments by executing the instruction set.

[0129] Although the subject matter has been described in language specific to structural features and / or methodological logical actions, it should be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or actions described above. On the contrary, the specific features and actions described above are merely example forms of implementing the claims.

[0130] Although several specific implementation details are included in the above discussion, these should not be interpreted as limiting the scope disclosed in the present application. Certain features described in the context of a separate embodiment can also be implemented in a single embodiment in combination. On the contrary, the various features described in the context of a single embodiment can also be implemented in multiple embodiments individually or in any suitable sub-combination.

[0131] The above description is only a preferred embodiment disclosed in this application and an explanation of the technical principles used. Those skilled in the art should understand that the scope of disclosure involved in the disclosure of this application is not limited to the technical solution formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the above disclosed concept. For example, the above features are replaced with the technical features with similar functions disclosed in the disclosure of this application (but not limited to) to form a technical solution.

Claims

1. A system abnormality alarm method, characterized in that: include: Obtaining business indicator data of the business system from a preset message middleware; the business indicator data includes statistics of multiple business indicators, and the statistics of each business indicator are obtained based on the statistics of each transaction detail data within a preset time period; Based on the statistics of each business indicator included in the business indicator data, determine whether each business indicator satisfies the preset corresponding alarm rules; If each business indicator satisfies the corresponding alarm rule, it is determined whether the statistic of the transaction volume indicator included in the business indicator data is greater than a first threshold value, and if the statistic of the transaction volume indicator is greater than the first threshold value, an alarm notification is issued; If the statistic of the trading volume indicator is not greater than the first threshold, then determine whether the statistic of the trading volume indicator is greater than the second threshold; if the statistic of the trading volume indicator is greater than the second threshold, then add one to the preset suppression times, determine whether the current suppression times is greater than the preset threshold or greater than the preset suppression times threshold; if the current suppression times is greater than the preset threshold or greater than the preset suppression times threshold, then issue an alarm notification; wherein the second threshold is less than the first threshold; If the statistic of the trading volume indicator is not greater than the second threshold, then determine whether the statistic of the trading volume indicator is greater than the third threshold; if the statistic of the trading volume indicator is greater than the third threshold, then add one to the suppression times, determine whether the current suppression times is greater than the difference between the preset suppression times threshold and 1; if the current suppression times is greater than the difference between the preset suppression times threshold and 1, then issue an alarm notification; wherein the third threshold is less than the second threshold; If the statistic of the transaction volume indicator is not greater than a third threshold, the number of suppression times is increased by one; Determine whether the current number of suppressions is greater than a preset suppression threshold, and if the current number of suppressions is greater than the preset suppression threshold, issue an alarm notification; If the current number of suppressions is not greater than the preset threshold and is not greater than the preset suppression threshold, or the current number of suppressions is not greater than the difference between the preset number of suppressions and the preset threshold, or the current number of suppressions is not greater than the third threshold, then return to execute the step of obtaining business indicator data from the preset message middleware.

2. The method according to claim 1, characterized in that Before obtaining the business indicator data from the preset message middleware, the method further includes: Obtain detailed transaction data of each business system within the current statistical time period; Based on each transaction detail data, calculate the statistics of each preset business indicator to obtain the business indicator data corresponding to the current preset time period; Write the business indicator data corresponding to the current statistical time period into the message middleware.

3. The method according to claim 2, characterized in that The determining, based on the statistics of each business indicator included in the business indicator data, whether each business indicator satisfies a preset corresponding alarm rule includes: Based on the statistical time period corresponding to the business indicator data, searching the rule base for an alarm rule corresponding to a preset time period corresponding to the statistical time period; For each business indicator, an alarm rule corresponding to the business indicator is determined from the found alarm rules, and it is determined whether the statistic of the business indicator is within a baseline range in the determined alarm rule.

4. A system abnormality alarm device, characterized in that: include: A first acquisition unit is used to acquire business indicator data of the business system from a preset message middleware; the business indicator data includes statistics of multiple business indicators, and the statistics of each business indicator are obtained based on the statistics of each transaction detail data within a preset time period; A judgment unit, configured to judge whether each business indicator satisfies a preset corresponding alarm rule based on the statistics of each business indicator included in the business indicator data; an alarm unit, for determining, if each business indicator satisfies the corresponding alarm rule, whether the statistic of the transaction volume indicator included in the business indicator data is greater than a first threshold value, and issuing an alarm notification if the statistic of the transaction volume indicator is greater than the first threshold value; if the statistic of the transaction volume indicator is not greater than the first threshold value, determining whether the statistic of the transaction volume indicator is greater than a second threshold value, and if the statistic of the transaction volume indicator is greater than the second threshold value, adding one to a preset suppression number, determining whether the current suppression number is greater than a preset threshold value or greater than a preset suppression number threshold value, and issuing an alarm notification if the current suppression number is greater than the preset threshold value or greater than the preset suppression number threshold value; wherein the second threshold value is less than the first threshold value; if the statistic of the transaction volume indicator is not greater than the second threshold value, determining whether the statistic of the transaction volume indicator is greater than a third threshold value, and if the statistic of the transaction volume indicator is greater than the third threshold value, adding one to the suppression number, determining whether the current suppression number is greater than the difference between the preset suppression number threshold value and 1, and issuing an alarm notification if the current suppression number is greater than the difference between the preset suppression number threshold value and 1; wherein the third threshold value is less than the second threshold value; The alarm unit is also used for: If the statistic of the trading volume indicator is not greater than the third threshold, the number of suppressions is increased by one; Determine whether the current number of suppressions is greater than a preset suppression threshold, and if the current number of suppressions is greater than the preset suppression threshold, issue an alarm notification; The alarm unit is also used for: If the current number of suppressions is not greater than the preset threshold and is not greater than the preset suppression threshold, or the current number of suppressions is not greater than the difference between the preset number of suppressions and the preset threshold, or the current number of suppressions is not greater than the third threshold, then return to execute the step of obtaining business indicator data from the preset message middleware.

5. A storage medium, characterized in that: The storage medium stores an instruction set, wherein the instruction set, when executed by a processor, implements the system abnormality alarm method according to any one of claims 1 to 3.

6. An electronic device, characterized in that: include: A memory for storing at least one set of instructions; A processor is used to execute an instruction set stored in the memory, and implement the system abnormality alarm method as described in any one of claims 1 to 3 by executing the instruction set.

Images