Abnormal service alarm method and device, electronic equipment and storage medium

Abstract

The present disclosure provides an alarm method and device for abnormal business, electronic equipment, storage medium and program product, which can be applied to the field of information security technology. The method comprises: in response to the received alarm request for processing abnormal business, generating an alarm event corresponding to the alarm request, the alarm event being used to generate and trigger an alarm operation; analyzing the alarm event to generate N alarm records, the alarm record including a delay alarm time length and alarm receiver information, N being greater than or equal to 1; according to the delay alarm time length, storing the N alarm records in P nodes of a ring queue, the P nodes being connected in turn, the P nodes performing tasks in turn along a predetermined direction, P being greater than or equal to 2; in response to a request to start the ring queue, sending M alarm records stored in the P nodes to a target terminal device, the target terminal device being determined according to the alarm receiver information, M being greater than or equal to 1 and less than or equal to N.

Description

Technical Field

[0001] This disclosure relates to the field of information security technology, and more specifically to an alarm method, apparatus, electronic device, storage medium, and program product for abnormal business operations. Background Technology

[0002] The scheduling system executes various scheduling tasks to achieve multiple business functions. During the implementation of these functions, the scheduling system interfaces with upper-layer tasks and lower-layer components. Failures in basic component services, task configuration, and data read / write operations can all cause task scheduling failures, leading to abnormal business processes.

[0003] In related technologies, when an abnormal service triggers an alarm, the alarm information is sent to all alarm recipients to trigger the alarm and thus handle the abnormal service. However, since daily operations generate a large number of abnormal service alarms, sending alarm information to all alarm recipients results in sending a large number of duplicate alarm messages, affecting the efficiency of alarm message transmission and abnormal service processing. Furthermore, after one alarm recipient has processed the abnormal service, the alarm information received by other recipients becomes useless, impacting their user experience. Summary of the Invention

[0004] In view of the above problems, this disclosure provides an alarm method, apparatus, device, medium and program product for abnormal services.

[0005] According to the first aspect of this disclosure, an alarm method for abnormal services is provided, comprising:

[0006] In response to a received alarm request for handling abnormal business, an alarm event corresponding to the alarm request is generated. The alarm event is used to generate and trigger alarm operations.

[0007] The alarm event is parsed to generate N alarm records to be alarmed. Each alarm record includes the alarm delay duration and alarm recipient information, where N is greater than or equal to 1.

[0008] Based on the delayed alarm duration, N alarm records are stored in P nodes of a circular queue. The P nodes are connected sequentially, and the P nodes execute tasks sequentially in a predetermined direction, where P is greater than or equal to 2.

[0009] In response to the request to start the circular queue, M alarm records stored in P nodes are sent to the target terminal device. The target terminal device is determined based on the alarm recipient information, where M is greater than or equal to 1 and less than or equal to N.

[0010] According to embodiments of this disclosure, storing N pending alarm records to P nodes of a circular queue based on the delayed alarm duration includes:

[0011] Get the time parameters of the circular queue; and

[0012] Based on the comparison results of delayed alarm duration and time parameters, N alarm records to be alarmed are stored in a circular queue.

[0013] According to embodiments of this disclosure, the time parameters include the cycle duration required for P nodes to execute one round of tasks and the unit duration corresponding to each node;

[0014] Based on the comparison results of delayed alarm duration and time parameters, N pending alarm records are stored in a circular queue, including:

[0015] Call the preset function to process the delayed alarm duration and period duration of the nth alarm record, and obtain the first parameter and the second parameter corresponding to the nth alarm record. The first parameter is used to represent the execution round, and the second parameter is used to determine the node storing the alarm record. Here, n is greater than or equal to 1 and n is less than or equal to N.

[0016] Based on the comparison result of the second parameter and the unit duration, the nth alarm record to be alarmed is stored in the pth node. The second parameter is greater than or equal to the sum of the unit durations of the (p-1) nodes from the 1st node to the pth node, and less than the sum of the unit durations of the p nodes. The 1st node is the node corresponding to the start of the circular queue, where p is greater than or equal to 1 and p is less than or equal to P.

[0017] According to embodiments of this disclosure, the alarm record to be alarmed further includes a first parameter for indicating the execution round; in response to a request to start a circular queue, sending M alarm records to be alarmed stored in P nodes to the target terminal device includes:

[0018] Get the start time and current time of the circular queue;

[0019] Retrieve m pending alarm records whose first parameter is zero, and store the m pending alarm records into the execution queue in the execution order;

[0020] When the circular queue is in the execution state, the i-th node in the circular queue is triggered based on the difference between the start time and the current time, where i is greater than or equal to 1 and i is less than or equal to P.

[0021] The m corresponding to the i-th node in the execution queue will be executed. i One pending alarm record is sent to the target terminal device, of which m i It is greater than or equal to 1, and mi is less than or equal to m.

[0022] According to embodiments of this disclosure, the alarm record to be alarmed further includes an alarm channel;

[0023] The m corresponding to the i-th node in the execution queue will be executed. i One pending alarm record is sent to the target terminal device, including:

[0024] According to m i Each alarm recipient identifier to be logged must be identified, and at least m must be identified. i One target terminal device; and

[0025] Based on m i One alarm channel awaiting alarm recording, m i Send at least m pending alarm records to i The target terminal device has one alarm channel, which includes email, telephone, and one communication client.

[0026] According to embodiments of this disclosure, the method further includes:

[0027] In response to receiving a processing operation from the target terminal device, the execution status of the circular queue is updated to stop execution. The processing operation is used to process abnormal information in abnormal services.

[0028] According to embodiments of this disclosure, the alarm event includes Q alarm rules; the alarm event is parsed to generate N alarm records to be alarmed, including:

[0029] By detecting the preset fields in Q alarm rules, the Q alarm rules are parsed sequentially to obtain alarm context information, which includes alarm channel, total number of alarms and alarm interval, and Q is greater than or equal to 2;

[0030] Based on the alarm channel and the total number of alarms, the alarm context information is divided into N temporary alarm records;

[0031] Calculate the delayed alarm duration for N temporary alarm records based on the alarm interval; and

[0032] Add the delayed alarm duration to N temporary alarm records, and arrange the N temporary alarm records in ascending order of delayed alarm duration to obtain N alarm records to be alarmed.

[0033] According to embodiments of this disclosure, the alarm request includes a reason for abnormal service.

[0034] In response to a received alarm request for handling abnormal business operations, an alarm event corresponding to the alarm request is generated, including:

[0035] Based on the cause of the abnormal business operation, retrieve at least one alarm rule corresponding to the cause from the database; and

[0036] An alarm event is generated by calling a preset script based on abnormal business conditions.

[0037] The second aspect of this disclosure provides an alarm device for abnormal services, including: a generation module, configured to generate an alarm event corresponding to the alarm request in response to a received alarm request for handling abnormal services, wherein the alarm event is used to generate and trigger an alarm operation.

[0038] The parsing module is used to parse alarm events and generate N alarm records to be alarmed. The alarm records to be alarmed include the alarm delay duration and alarm recipient information, where N is greater than or equal to 1.

[0039] The storage module is used to store N alarm records to be alarmed into P nodes of a circular queue according to the delayed alarm duration. The P nodes are connected sequentially and the P nodes execute tasks sequentially in a predetermined direction, where P is greater than or equal to 2.

[0040] The execution module is used to respond to the request to start the circular queue by sending the M alarm records stored in P nodes to the target terminal device. The target terminal device is determined based on the alarm recipient information, where M is greater than or equal to 1 and less than or equal to N.

[0041] A third aspect of this disclosure provides an electronic device, comprising: one or more processors; and a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors perform the alarm method for the aforementioned abnormal service.

[0042] A fourth aspect of this disclosure also provides a computer-readable storage medium having executable instructions stored thereon, which, when executed by a processor, cause the processor to perform the aforementioned abnormal service alarm method.

[0043] The fifth aspect of this disclosure also provides a computer program product, including a computer program that, when executed by a processor, implements an alarm method for the aforementioned abnormal business.

[0044] According to embodiments of this disclosure, in response to a received alarm request for handling abnormal services, an alarm event corresponding to the alarm request is generated; the alarm event is parsed to generate N pending alarm records, thus realizing the triggering and generation of pending alarm records; based on the delayed alarm duration in the pending alarm records, the N pending alarm records are stored in P nodes of a circular queue; in response to a request to start the circular queue, the M pending alarm records stored in the P nodes are sent to the target terminal device, thus realizing delayed alarm for abnormal services. This disclosure utilizes delayed alarm duration and a circular queue to achieve delayed storage and delayed triggering of pending alarm records, eliminating the need to send pending alarm records to multiple alarm receivers simultaneously, thereby achieving time-segmented alarms, enabling alarm receivers to handle abnormal services promptly based on the pending alarm records, and improving the efficiency of abnormal service handling.

[0045] Furthermore, since the pending alarm records are stored and triggered with a delay, other alarm recipients will not receive the pending alarm records once the abnormal service has been processed, thus avoiding disturbance to other alarm recipients and improving the user experience. Attached Figure Description

[0046] The foregoing contents, as well as other objects, features, and advantages of this disclosure, will become clearer from the following description of embodiments with reference to the accompanying drawings, in which:

[0047] Figure 1 The illustration depicts an application scenario of an alarm method for abnormal services according to an embodiment of this disclosure;

[0048] Figure 2 A flowchart illustrating an alarm method for abnormal services according to an embodiment of this disclosure is shown schematically;

[0049] Figure 3 A flowchart illustrating a method for storing alarm records according to an embodiment of the present disclosure is shown schematically.

[0050] Figure 4 A flowchart illustrating a method for storing alarm records based on a delayed alarm duration according to an embodiment of the present disclosure is shown schematically.

[0051] Figure 5 A schematic diagram of a circular queue according to an embodiment of the present disclosure is shown;

[0052] Figure 6 A flowchart illustrating a method for sending alarm records according to an embodiment of the present disclosure is shown schematically.

[0053] Figure 7 The diagram illustrates an alarm for abnormal services according to a specific embodiment of the present disclosure.

[0054] Figure 8 A schematic block diagram of an alarm device for abnormal services according to an embodiment of the present disclosure is shown; and

[0055] Figure 9 A block diagram of an electronic device suitable for an alarm method for abnormal services according to an embodiment of the present disclosure is shown schematically. Detailed Implementation

[0056] The embodiments of the present disclosure will now be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the disclosure. In the following detailed description, numerous specific details are set forth to provide a thorough understanding of the embodiments of the present disclosure for ease of explanation. However, it will be apparent that one or more embodiments may be practiced without these specific details. Furthermore, descriptions of well-known structures and techniques are omitted in the following description to avoid unnecessarily obscuring the concepts of the present disclosure.

[0057] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit this disclosure. The terms “comprising,” “including,” etc., as used herein indicate the presence of the stated features, steps, operations, and / or components, but do not exclude the presence or addition of one or more other features, steps, operations, or components.

[0058] All terms used herein (including technical and scientific terms) have the meanings commonly understood by those skilled in the art, unless otherwise defined. It should be noted that the terms used herein are to be interpreted in a manner consistent with the context of this specification, and not in an idealized or overly rigid way.

[0059] When using expressions such as "at least one of A, B, and C", they should generally be interpreted in accordance with the meaning that is commonly understood by a person skilled in the art (e.g., "a system having at least one of A, B, and C" should include, but is not limited to, a system having A alone, a system having B alone, a system having C alone, a system having A and B, a system having A and C, a system having B and C, and / or a system having A, B, and C, etc.).

[0060] In the technical solutions disclosed herein, the collection, storage, use, processing, transmission, provision, disclosure, and application of data (including but not limited to user personal information) comply with the provisions of relevant laws and regulations, necessary confidentiality measures have been taken, and they do not violate public order and good morals.

[0061] In related technologies, when an abnormal service triggers an alarm, the alarm information is sent to all alarm receivers to ensure its processing. In practical applications, multiple alarm receivers correspond to multiple alarm priorities. When a higher-priority alarm receiver processes the abnormal service, lower-priority alarm receivers, who do not need to process it, may be disturbed by the sent alarm information, negatively impacting their user experience of the alarm system.

[0062] Furthermore, because alarm information is sent to all alarm recipients, if a higher-priority alarm recipient fails to handle the abnormal service in a timely manner, other alarm recipients will be in a waiting phase until a considerable amount of time has passed before processing the abnormal service. This results in low processing efficiency for abnormal services after they trigger alarms.

[0063] The embodiments of this disclosure provide an alarm method for abnormal services, including: in response to a received alarm request for handling abnormal services, generating an alarm event corresponding to the alarm request, the alarm event being used to generate and trigger an alarm operation; parsing the alarm event to generate N alarm records to be alarmed, each alarm record including a delayed alarm duration and alarm recipient information, wherein N is greater than or equal to 1; storing the N alarm records to be alarmed in P nodes of a circular queue according to the delayed alarm duration, wherein the P nodes are connected sequentially and execute tasks sequentially along a predetermined direction, P is greater than or equal to 2; in response to a request to start the circular queue, sending M alarm records to be alarmed stored in the P nodes to a target terminal device, the target terminal device being determined according to the alarm recipient information, wherein M is greater than or equal to 1 and M is less than or equal to N.

[0064] Figure 1 The illustration depicts an application scenario of an alarm method for abnormal services according to an embodiment of this disclosure.

[0065] like Figure 1 As shown, application scenario 100 according to this embodiment may include a first terminal device 101, a second terminal device 102, a third terminal device 103, a network 104, and a server 105. The network 104 serves as a medium for providing a communication link between the first terminal device 101, the second terminal device 102, the third terminal device 103, and the server 105. The network 104 may include various connection types, such as wired or wireless communication links, or fiber optic cables, etc.

[0066] Users can interact with server 105 via network 104 using at least one of the first terminal device 101, second terminal device 102, and third terminal device 103 to receive or send messages, etc. Various communication client applications, such as instant messaging tools, email clients, and social media platform software, can be installed on the first terminal device 101, second terminal device 102, and third terminal device 103 (for example only).

[0067] The first terminal device 101, the second terminal device 102, and the third terminal device 103 can be various electronic devices with displays and support web browsing, including but not limited to smartphones, tablets, laptops, and desktop computers.

[0068] Server 105 can be a server that provides various services. For example, after server 105 generates a record to be alarmed, it can send the record to the first terminal device 101, the second terminal device 102, and the third terminal device 103 used by the user via network 104.

[0069] It should be noted that the alarm method for abnormal services provided in this embodiment can generally be executed by server 105. Correspondingly, the alarm device for abnormal services provided in this embodiment can generally be located in server 105. The alarm method for abnormal services provided in this embodiment can also be executed by a server or server cluster that is different from server 105 and capable of communicating with the first terminal device 101, the second terminal device 102, the third terminal device 103, and / or server 105. Correspondingly, the alarm device for abnormal services provided in this embodiment can also be located in a server or server cluster that is different from server 105 and capable of communicating with the first terminal device 101, the second terminal device 102, the third terminal device 103, and / or server 105.

[0070] It should be understood that Figure 1 The number of terminal devices, networks, and servers shown is merely illustrative. Depending on implementation needs, any number of terminal devices, networks, and servers can be included.

[0071] The following will be based on Figure 1 The described scene, through Figures 2-7 The alarm method for abnormal services in the disclosed embodiments is described in detail.

[0072] Figure 2 A flowchart illustrating an alarm method for abnormal services according to an embodiment of this disclosure is shown schematically.

[0073] like Figure 2 As shown, the method includes operations S210 to S250.

[0074] In operation S210, in response to the received alarm request for handling abnormal services, an alarm event corresponding to the alarm request is generated.

[0075] According to embodiments of this disclosure, abnormal services include services that fail during execution, such as data anomalies, component malfunctions, task configuration anomalies, and data read / write anomalies; it also includes services that have timed out or have not been started for a long time after startup.

[0076] For example, in the "Query" service, if the query component fails to run, the service is considered an abnormal service; if the query results are not displayed after completion, the service is considered an abnormal service. In the "Transfer" service, if reading or writing the transfer amount fails, the service is considered an abnormal service.

[0077] According to embodiments of this disclosure, when an abnormal service occurs, the service system immediately triggers an alarm task by sending an alarm request to the alarm system. In response to the received alarm request for handling the abnormal service, the alarm system generates a corresponding alarm event. This alarm event is used to generate and trigger an alarm operation for the abnormal service.

[0078] According to embodiments of this disclosure, alarm events include: alarm ID, alarm event name, alarm rules, and alarm reasons, etc.

[0079] In operation S220, the alarm event is parsed to generate N alarm records to be alarmed. The alarm records to be alarmed include the alarm delay duration and alarm recipient information.

[0080] According to embodiments of this disclosure, after generating an alarm event and before parsing the alarm event, the alarm system stores the alarm event in a database to store alarm information for this abnormal service.

[0081] According to embodiments of this disclosure, the alarm system can parse alarm events based on alarm rules and convert the alarm events into alarm context information. Then, the alarm context information and alarm parameters from the alarm events are merged into a record to be alarmed; the alarm parameters can be the duration of a delayed alarm.

[0082] Specifically, alarm rules include textual or code descriptions of handling abnormal business processes. The process of converting alarm events into alarm context information includes: extracting target information from the alarm event, and then converting the target information into alarm context information in the form of a data table.

[0083] According to embodiments of this disclosure, the alarm record to be triggered includes a delayed alarm duration and alarm recipient information. The delayed alarm duration is used to trigger the alarm record at a preset time, so that the alarm system can send the alarm record to the target terminal device according to the alarm recipient information.

[0084] According to embodiments of this disclosure, an alarm event can generate at least one pending alarm record. For example, for an abnormal "transfer" transaction, the alarm operation generated in the abnormal event includes three pending alarm records sent to the same alarm recipient at different time periods, such as three telephone notifications.

[0085] In operation S230, based on the delayed alarm duration, N alarm records to be alarmed are stored in P nodes of a circular queue.

[0086] According to embodiments of this disclosure, the circular queue includes P nodes, which are connected sequentially and execute tasks sequentially along a predetermined direction, where P is greater than or equal to 2. Each node in the circular queue can store multiple scheduled tasks. Based on the delayed alarm duration of N pending alarm records, the N pending alarm records can be stored in one or more of the P nodes.

[0087] For example, for three pending alarm records with delay times of 100s, 200s, and 400s respectively, based on the time parameters of the circular queue, the three pending alarm records can be stored in one node of the circular queue; or they can be stored in two nodes of the circular queue; or they can be stored in three nodes of the circular queue.

[0088] In operation S240, in response to the request to start the circular queue, M pending alarm records stored in P nodes are sent to the target terminal device, which is determined based on the alarm recipient information.

[0089] According to embodiments of this disclosure, after storing N pending alarm records into a circular queue, the alarm system can automatically activate the circular queue to send the pending alarm records. Specifically, after storing N pending alarm records, the alarm system generates a new request to activate the circular queue. In response to the request to activate the circular queue, the alarm system sequentially sends M pending alarm records stored in P nodes to the target terminal device according to the delayed alarm duration, where M is greater than or equal to 1 and less than or equal to N.

[0090] Specifically, since the N pending alarm records are stored in P nodes based on the delayed alarm duration, when executing the circular queue, the alarm system still triggers the N pending alarm records in the P nodes sequentially based on the delayed alarm duration.

[0091] During the process of sequentially sending alarm records, since the alarm recipient may have already processed the alarm records, the alarm system stops executing the circular queue in response to receiving the processing operation from the target terminal device, without having to send all N alarm records to the target terminal device.

[0092] For example, after sending M pending alarm records, the alarm receiver processes the abnormal service based on the Mth pending alarm record. In response to receiving the processing operation from the alarm receiver, the alarm system stops executing the circular queue and proceeds to the processing flow of the next abnormal service. At this point, the alarm system has only completed sending M pending alarm records, without needing to send other alarm records to other alarm receivers, thus avoiding unnecessary information from disturbing the alarm receivers.

[0093] According to embodiments of this disclosure, in response to a received alarm request for handling abnormal services, an alarm event corresponding to the alarm request is generated; the alarm event is parsed to generate N pending alarm records, thus realizing the triggering and generation of pending alarm records; based on the delayed alarm duration in the pending alarm records, the N pending alarm records are stored in P nodes of a circular queue; in response to a request to start the circular queue, the M pending alarm records stored in the P nodes are sent to the target terminal device, thus realizing delayed alarm for abnormal services. This disclosure utilizes delayed alarm duration and a circular queue to achieve delayed storage and delayed triggering of pending alarm records, eliminating the need to send pending alarm records to multiple alarm receivers simultaneously, thereby achieving time-segmented alarms, enabling alarm receivers to handle abnormal services promptly based on the pending alarm records, and improving the efficiency of abnormal service handling.

[0094] Furthermore, since the pending alarm records are stored and triggered with a delay, other alarm recipients will not receive the pending alarm records once the abnormal service has been processed, thus avoiding disturbance to other alarm recipients and improving the user experience.

[0095] Figure 3 A flowchart illustrating a method for storing alarm records according to an embodiment of the present disclosure is shown.

[0096] like Figure 3 As shown, the storage method of this embodiment includes operations S331 to S332, which can be used as a specific embodiment of operation S230.

[0097] In operation S331, the time parameters of the circular queue are obtained.

[0098] According to embodiments of this disclosure, the time parameters of the circular queue include the number of nodes, the duration of each node's time unit, and the cycle duration required for all nodes to complete one round of tasks.

[0099] For example, a circular queue consists of 8 nodes, each node has a unit duration of 300 seconds, and the cycle duration for executing all 8 nodes is 2400 seconds.

[0100] According to embodiments of this disclosure, the time parameters of the circular queue can be preset and stored in a database. Before storing N alarm records to be alarmed into the circular queue, the time parameters of the circular queue are obtained from the database so that the N alarm records to be alarmed are stored in P nodes according to the time parameters of the circular queue.

[0101] According to embodiments of this disclosure, the time parameters can also be initialized based on the urgency of the abnormal service. Specifically, before storing N pending alarm records into the circular queue, the alarm event is determined to be an emergency handling event based on the emergency task identifier in the alarm event. According to the emergency event handling rules, the unit duration and cycle duration of the circular queue are shortened to accelerate the alarm speed of the alarm event.

[0102] For example, a circular queue consists of 8 nodes, each with a unit duration of 300 seconds and a cycle duration of 2400 seconds. When an alarm event is determined to be an emergency event, the unit duration is initialized to 100 seconds and the cycle duration to 800 seconds.

[0103] In operation S332, based on the comparison results of delayed alarm duration and time parameters, N alarm records to be alarmed are stored in a circular queue.

[0104] According to embodiments of this disclosure, after obtaining the time parameters of the circular queue, the delayed alarm duration of the record to be alarmed is compared with the unit duration and period duration of the circular queue, so as to store N records to be alarmed into P nodes of the circular queue.

[0105] Figure 4 A flowchart illustrating a method for storing alarm records based on a delayed alarm duration according to an embodiment of the present disclosure is shown.

[0106] like Figure 4 As shown, the method of this embodiment includes operations S4321 to S4322, which can be used as a specific embodiment of operation S332.

[0107] In operation S4321, a preset function is called to process the delayed alarm duration and period duration of the nth alarm record, and the first parameter and the second parameter corresponding to the nth alarm record are obtained.

[0108] According to embodiments of this disclosure, the preset function can be a combination of commonly used data calculation functions, or it can be program code written by developers.

[0109] According to embodiments of this disclosure, the first parameter represents the execution round, and the second parameter determines the node storing the alarm record to be triggered, where n is greater than or equal to 1 and less than or equal to N. Specifically, the first parameter is the integer part of the delayed alarm duration divided by the period duration, and the second parameter is the remainder of the delayed alarm duration divided by the period duration.

[0110] In operation S4322, based on the comparison result of the second parameter and the unit duration, the nth alarm record to be alarmed is stored in the pth node.

[0111] According to an embodiment of this disclosure, the second parameter is greater than or equal to the sum of the unit durations of the (p-1) nodes before the first node to the p-th node, and less than the sum of the unit durations of the p nodes. The first node is the node corresponding to the start of the circular queue, where p is greater than or equal to 1 and p is less than or equal to P.

[0112] For example, the period of the circular queue is 2400s, and the delayed alarm durations corresponding to the first, second, and third pending alarm records are 600s, 600s, and 2700s, respectively. After calling the preset function to process the above three pending alarm records, the first parameter corresponding to the first pending alarm record is 0 and the second parameter is 600s; the first parameter corresponding to the second pending alarm record is 0 and the second parameter is 600s; and the first parameter corresponding to the third pending alarm record is 1 and the second parameter is 300s.

[0113] After calling the preset function to calculate N alarm records, the second parameter and the unit duration are compared to determine the node where the nth alarm record should be stored.

[0114] Taking the first, second, and third pending alarm records as examples, their second parameters are 600s, 600s, and 300s, respectively. The unit duration of each node is 300s. By comparing the second parameters of the three pending alarm records with the unit duration of each node, it is determined that the first and second pending alarm records are stored on the third node, and the third pending alarm record is stored on the second node.

[0115] It should be noted that, as can be seen from the first parameter, the first and second pending alarm records are in the same execution round, while the third pending alarm record is in the execution round after the first and second pending alarm records.

[0116] Table 1

[0117]

[0118] According to embodiments of this disclosure, the alarm record includes alarm event ID, alarm channel, current alarm count, total alarm count, alarm recipient, alarm delay duration, and alarm sequence number.

[0119] For example, taking 9 pending alarm records as an example, Table 1 includes 9 pending alarm records obtained from the parsing of alarm event A. Among them, the delayed alarm durations of pending alarm records 1 to 9 are 600s, 600s, 1200s, 1800s, 2400s, 2700s, 2400s, 2700s and 3000s respectively.

[0120] Figure 5A schematic diagram of a circular queue according to an embodiment of the present disclosure is shown.

[0121] According to an embodiment of this disclosure, taking a circular queue comprising 8 nodes, each node having a unit duration of 300s, and a cycle duration of 2400s as an example.

[0122] The preset function is called to process the delayed alarm duration of alarm records 1 to 9 and the period duration of the circular queue, obtaining the first and second parameters. The first parameters of alarm records 1 to 9 are 0, 0, 0, 0, 1, 1, 1, 1, 1, respectively; the second parameters are 600s, 600s, 1200s, 1800s, 0, 300s, 0, 300s, and 600s, respectively.

[0123] like Figure 5 As shown, alarm records 1 to 9 are stored in the 3rd, 3rd, 5th, 7th, 1st, 1st, 2nd, 2nd and 3rd nodes of the circular queue, respectively. "round" corresponds to the first parameter.

[0124] This disclosure compares the delayed alarm duration with the period duration and unit duration of the circular queue, enabling the sequential and efficient placement of N pending alarm records into the circular queue. This reduces the complexity of traversing the N pending alarm records and helps improve the efficiency of abnormal business processing by utilizing the circular queue.

[0125] Figure 6 A flowchart illustrating a method for sending alarm records according to an embodiment of the present disclosure is shown.

[0126] like Figure 6 As shown, the sending method of this embodiment includes operations S641 to S644, which can be used as a specific embodiment of operation S240.

[0127] In operation S641, obtain the start time and current time of the circular queue.

[0128] According to embodiments of this disclosure, after storing N pending alarm records into a circular queue, the alarm system responds to a request to start the circular queue by sequentially triggering each node in the circular queue to send the pending alarm records stored in the node.

[0129] According to embodiments of this disclosure, when a circular queue is started, the start time and current time of the circular queue are recorded so as to trigger multiple nodes in the circular queue according to the delayed alarm duration.

[0130] In operation S642, m pending alarm records with the first parameter being zero are obtained, and the m pending alarm records are stored in the execution queue in the execution order.

[0131] According to embodiments of this disclosure, the alarm record to be triggered further includes a first parameter indicating the execution round. Before triggering a node in the circular queue, all alarm records to be triggered in the current execution round are stored in the execution queue according to the first parameter.

[0132] Specifically, a first parameter of zero indicates that the circular queue is triggering the current execution round. Before triggering all nodes in the current execution round, all pending alarm records for the current execution round are stored in the execution queue. After sending all pending alarm records for the current execution round to the target terminal device, the first parameter of all pending alarm records in the circular queue is decremented by 1, updating the first parameter of all pending alarm records in the circular queue. Then, based on the updated first parameter, the corresponding pending alarm records for the current execution round are stored in the execution queue.

[0133] like Figure 5 As shown, a pending alarm record with "round" set to 0 indicates the current execution round. After storing the 9 pending alarm records into the circular queue, the sending operation for the 9 pending alarm records begins. Pending alarm records 1-4 are the pending alarm records to be sent in the current execution round; pending alarm records 5-9 are the pending alarm records to be sent in the next round. Before triggering the pending alarm records in the 3rd, 5th, and 7th nodes, pending alarm records 1-4 are stored into the execution queue.

[0134] After the execution queue completes the sending of alarm records 1 to 4, the first parameter of alarm records 5 to 9 in the circular queue is decremented by 1, i.e., round is decremented by 1. After updating the first parameter, the first parameter of alarm records 5 to 9 is 0, i.e., round is 0. Then, alarm records 5 to 9 are stored in the execution queue.

[0135] In operation S643, when the circular queue is in the execution state, the i-th node in the circular queue is triggered based on the difference between the start time and the current time.

[0136] According to an embodiment of this disclosure, after storing the m pending alarm records of the current execution round into the execution queue, the nodes in the circular queue are triggered sequentially based on the difference between the start time and the current time.

[0137] According to an embodiment of this disclosure, when the i-th node in the circular queue is triggered, the alarm record corresponding to the i-th node in the execution queue is sent to the target terminal accordingly.

[0138] In operation S644, the m corresponding to the i-th node in the execution queue will be executed. i One pending alarm record is sent to the target terminal device.

[0139] For example, taking alarm records 1-9 as an example, the unit duration of the circular queue is 300s. The start time is 12:00:00, and the current time is 12:10:00. The difference between the start time and the current time is 600s, which triggers the third node, sending the alarm records 1 and 2 corresponding to the third node in the execution queue to the target device.

[0140] At the current time of 12:40:00, the difference between the start time and the current time is 2400 seconds, triggering the first node. Since the first node is the second trigger, the first parameter of the pending alarm records 5 and 7 is the updated parameter, i.e., round is 0. After triggering the first node of the current round, the pending alarm records 5 and 7 corresponding to the first node in the execution queue are sent to the target device.

[0141] According to embodiments of this disclosure, in the execution queue, m corresponding to the i-th node... i Before sending a pending alarm record to the target terminal device, it can be based on m i The alarm recipient information in the pending alarm log is used to determine the target terminal to be sent to, where m i Greater than or equal to 1, and m i Less than or equal to m.

[0142] This disclosure improves processing efficiency by storing the alarm records to be alerted in each execution round of the circular queue to the execution queue, thus achieving pre-storage during task execution.

[0143] According to embodiments of this disclosure, the m corresponding to the i-th node in the execution queue is executed. i One pending alarm record is sent to the target terminal device, including:

[0144] According to m i Each alarm recipient identifier to be logged must be identified, and at least m must be identified. i One target terminal device; and

[0145] Based on m i One alarm channel awaiting alarm recording, m i Send at least m pending alarm records to i The target terminal device has one alarm channel, which includes email, telephone, and one communication client.

[0146] According to embodiments of this disclosure, the alarm log to be alarmed includes alarm channels. The alarm system sends the alarm log to the target terminal device through multiple alarm channels.

[0147] As shown in Table 1, for alarm recipients "Zhang San" and "Li Si", the alarm channel for pending alarm record 1 is email, and the alarm channels for pending alarm records 2-4 are telephone. When the third node in the circular queue is triggered, pending alarm records 1 and 2 in the execution queue are sent to the target terminal devices. Specifically, the alarm system sends the pending alarm records to the target terminal devices of "Zhang San" and "Li Si" via telephone and email.

[0148] This disclosure sends alarm records to alarm recipients through multiple alarm channels, avoiding low efficiency in abnormal business processing due to the inability to contact the recipient.

[0149] According to an embodiment of this disclosure, during the process of sequentially sending M alarm records to target terminal devices, in response to receiving a processing operation from any target terminal device corresponding to the M alarm records, the execution status of the circular queue is updated to stop execution, and the processing operation is used to process abnormal information in abnormal services.

[0150] According to embodiments of this disclosure, an alarm event includes Q alarm rules; the alarm event is parsed to generate N alarm records to be alarmed, including:

[0151] By detecting the preset fields in Q alarm rules, the Q alarm rules are parsed sequentially to obtain alarm context information, which includes alarm channel, total number of alarms and alarm interval, where Q is greater than or equal to 2.

[0152] According to embodiments of this disclosure, the alarm context information also includes the alarm event ID, the current alarm count, and a list of alarm recipients.

[0153] Table 2

[0154]

[0155] Table 2 illustrates the generated alarm event A. Alarm event A includes two alarm rules.

[0156] As shown in Table 2, the parsing of alarm rules includes: parsing the alarm context information by identifying the "periodTime", "receivers", and "alarmChannelCount" fields. The "periodTime", "receivers", and "alarmChannelCount" fields correspond to the alarm interval, the list of alarm recipients, and the alarm channel, respectively.

[0157] Specifically, the alarm context information includes information parsed from two alarm rules. For the first alarm rule, the parsed alarm context information includes: an alarm interval of 600 seconds, alarm channels are email and telephone, a total of 3 telephone alarms, a total of 3 email alarms, and alarm recipients including Zhang San and Li Si. For the second alarm rule, the parsed alarm context information includes: an alarm interval of 600 seconds, alarm channels are communication software and telephone, a total of 3 telephone alarms, a total of 2 communication software alarms, and alarm recipients including Wang Wu and Liu Liu.

[0158] According to embodiments of this disclosure, an alarm event may include at least two alarm rules. Each alarm rule may include at least one alarm receiver. There are priority differences among the multiple alarm rules. As shown in Table 1, Zhang San and Li Si under the first alarm rule are both first alarm receivers, and Wang Wu and Liu Liu under the second alarm rule are both second alarm receivers. After parsing the alarm event and generating a pending alarm record, the delayed alarm duration for the first alarm receiver is shorter than the delayed alarm duration for the second alarm receiver, so that the pending alarm record is sent to the first alarm receiver first.

[0159] According to embodiments of this disclosure, alarm intervals also exist between multiple alarm rules, ensuring that the alarm receiver still has time to process abnormal business after receiving the last pending alarm record.

[0160] like Figure 5 As shown, alarm record 4 is the last alarm record generated according to the first alarm rule, and alarm record 5 is the first alarm record generated according to the second alarm rule. The time interval between alarm record 4 and alarm record 5 is the alarm interval of the first alarm rule.

[0161] According to embodiments of this disclosure, the field type of the alarm interval is integer, and the unit is seconds; the field type of the alarm recipient is string.

[0162] According to embodiments of this disclosure, after parsing the alarm context information, the alarm context information is divided into N temporary alarm records based on the alarm channel and the total number of alarms. The delayed alarm duration of the N temporary alarm records is calculated according to the alarm interval. The delayed alarm duration is added to the N temporary alarm records, and the N temporary alarm records are arranged in ascending order of delayed alarm duration to obtain N records to be alarmed.

[0163] Specifically, the alarm context information of the alarm channel being telephone in the first alarm rule is split into temporary pending alarm records 2 to 4. The delayed alarm duration of temporary pending alarm records 2 to 4 is calculated based on the alarm interval. The delayed alarm duration is added to the temporary pending alarm records 2 to 4, generating pending alarm records 2 to 4 as shown in Table 1.

[0164] According to embodiments of this disclosure, alarm records are sorted in ascending order of delayed alarm duration. For multiple alarm channels, alarm records can be sorted according to the priority of the alarm channel, and within each alarm channel, alarm records are sorted in ascending order of delayed alarm duration.

[0165] According to embodiments of this disclosure, as shown in Table 1, alarm records 1 to 9 include delayed alarm durations, and alarm records 1 to 9 are sorted in ascending order of alarm channel and delayed alarm duration.

[0166] It should be noted that since the alarm records are stored in a circular queue based on the delayed alarm duration, the order in which the alarm records are arranged does not affect the order in which they are sent after storage. Figure 5 As shown, alarm records 5 and 7 are both located at the first node of the circular queue, but their sequence numbers are different.

[0167] This disclosure obtains the alarm interval by parsing the alarm rules, and automatically generates N alarm records to be alarmed based on the alarm interval. This realizes the automatic and orderly generation of alarm records to be alarmed, including the alarm order, which helps to improve the storage efficiency of N alarm records to be alarmed.

[0168] According to embodiments of this disclosure, the alarm request includes a reason for abnormal service; in response to the received alarm request for handling abnormal service, an alarm event corresponding to the alarm request is generated, including:

[0169] Based on the cause of the abnormal business, retrieve at least one alarm rule corresponding to the cause of the abnormal business from the database; and based on the cause of the abnormal business, call a preset script to generate an alarm event.

[0170] Specifically, the preset scripts can be stored at a preset address in the database.

[0171] Figure 7 The diagram illustrates an alarm for an abnormal service according to a specific embodiment of the present disclosure.

[0172] like Figure 7 As shown, after an abnormal business operation occurs during the business operation process, the business system automatically triggers the alarm system to generate alarm event 710. After parsing alarm event 710, the alarm system generates N pending alarm records, and then stores the N pending alarm records in a circular queue 720 according to the delayed alarm duration in the pending alarm records, so as to trigger multiple nodes in the circular queue in sequence.

[0173] After storing N pending alarm records into circular queue 720, the circular queue is started, and the m pending alarm records with zero execution rounds are stored into execution queue 730. The i-th node in the circular queue is triggered based on the start time and the current time, and then the m records corresponding to the i-th node in execution queue 730 are stored. i One pending alarm record is sent to the alarm management system 740.

[0174] The alarm management system 740 determines the target terminal device 760 to be alarmed based on the alarm channel and alarm recipient information in the alarm record to be alarmed, and then sends the alarm record to the target terminal device 760 based on the alarm channel 750.

[0175] According to embodiments of this disclosure, alarm channel 750 includes: email, telephone, communication software A, and communication software B, etc. Alarm channel 750 also includes interactive communication software such as office software.

[0176] like Figure 7 As shown, the alarm management system 740 determines the target terminal device A to be alarmed based on the alarm recipient information and sends the alarm record to the target terminal device A via email; the alarm management system 740 determines the target terminal device B to be alarmed based on the alarm recipient information and sends two alarm records to the target terminal device B via email and communication software A; the alarm management system 740 determines the target terminal device C to be alarmed based on the alarm recipient information and sends the alarm record to the target terminal device C via communication software B; the alarm management system 740 determines the target terminal device D to be alarmed based on the alarm recipient information and sends the alarm record to the target terminal device D via telephone.

[0177] This disclosure utilizes a circular queue to control the alarm triggering time, sending pending alarm records sequentially according to the priority order of alarm receivers in the alarm rules. Through embodiments of this disclosure, only when a higher-priority receiver fails to handle the abnormal service in a timely manner within the alarm interval will the second alarm receiver be triggered. Once the abnormal service is handled by the alarm receiver, the pending alarm record for that abnormal service will not be sent to other alarm receivers, eliminating the sending of invalid alarms and thus ensuring the validity of the alarm information.

[0178] Furthermore, since the alarm records are sent to the alarm recipients sequentially, there is no situation where other alarm recipients are waiting to handle the current abnormal business, thus ensuring the timeliness of alarm information.

[0179] According to embodiments of this disclosure, when the task is urgent, the original alarm system can be kept compatible by shortening the interval between two alarms or by setting the first alarm person to be handled by multiple people at the same time, thereby upgrading the alarm system and further ensuring the timeliness of alarm information.

[0180] Figure 8 A schematic block diagram of an alarm device for abnormal services according to an embodiment of the present disclosure is shown.

[0181] like Figure 8 As shown, the alarm device 800 for abnormal services in this embodiment includes a generation module 810, a parsing module 820, a storage module 830, and an execution module 840.

[0182] The generation module 810 is used to generate an alarm event corresponding to the alarm request in response to a received alarm request for handling abnormal services. The alarm event is used to generate and trigger an alarm operation. In one embodiment, the generation module 810 can be used to perform the operation S210 described above, which will not be repeated here.

[0183] The parsing module 820 is used to parse the alarm event and generate N alarm records to be alarmed. Each alarm record includes the alarm delay duration and alarm recipient information, where N is greater than or equal to 1. In one embodiment, the parsing module 820 can be used to perform the operation S220 described above, which will not be repeated here.

[0184] The storage module 830 is used to store N alarm records to be alarmed into P nodes of a circular queue according to the delayed alarm duration. The P nodes are connected sequentially, and the P nodes execute tasks sequentially along a predetermined direction, where P is greater than or equal to 2. In one embodiment, the storage module 830 can be used to execute the operation S230 described above, which will not be repeated here.

[0185] Execution module 840 is used to send M pending alarm records stored in P nodes to a target terminal device in response to a request to start a circular queue. The target terminal device is determined based on alarm recipient information, where M is greater than or equal to 1 and less than or equal to N. In one embodiment, execution module 840 can be used to perform the operation S240 described above, which will not be repeated here.

[0186] According to embodiments of this disclosure, the storage module 830 includes a first storage unit and a second storage unit.

[0187] The first storage unit is used to obtain the time parameters of the circular queue. In one embodiment, the first determining unit can be used to perform the operation S331 described above, which will not be repeated here.

[0188] The second storage unit is used to store N alarm records to a circular queue based on the comparison results of the delayed alarm duration and time parameters. In one embodiment, the second determining unit can be used to perform the operation S332 described above, which will not be repeated here.

[0189] According to embodiments of this disclosure, the second storage unit includes a first storage subunit and a second storage subunit.

[0190] The first storage subunit is used to call a preset function to process the delayed alarm duration and period duration of the nth alarm record, and obtain the first parameter and the second parameter corresponding to the nth alarm record. The first parameter is used to indicate the execution round, and the second parameter is used to determine the node where the alarm record is stored, where n is greater than or equal to 1 and less than or equal to N. In one embodiment, the first storage subunit can be used to execute the operation S4331 described above, which will not be repeated here.

[0191] The second storage subunit is used to store the nth alarm record to the pth node based on the comparison result of the second parameter and the unit duration. The second parameter is greater than or equal to the sum of the unit durations of the (p-1) nodes from the 1st node to the pth node, and less than the sum of the unit durations of the p nodes. The 1st node is the node corresponding to the start of the circular queue, where p is greater than or equal to 1 and p is less than or equal to P. In one embodiment, the second storage subunit can be used to execute the operation S4332 described above, which will not be repeated here.

[0192] According to embodiments of this disclosure, the execution module 840 includes a first execution unit, a second execution unit, a third execution unit, and a fourth execution unit.

[0193] The first execution unit is used to obtain the start time and current time of the circular queue. In one embodiment, the first execution unit can be used to execute the operation S641 described above, which will not be repeated here.

[0194] The second execution unit is used to acquire m pending alarm records where the first parameter is zero, and store the m pending alarm records into the execution queue in execution order. In one embodiment, the second execution unit can be used to execute the operation S642 described above, which will not be repeated here.

[0195] The third execution unit is used to trigger the i-th node in the circular queue based on the difference between the start time and the current time when the circular queue is in the "running" state, where i is greater than or equal to 1 and i is less than or equal to P. In one embodiment, the third execution unit can be used to execute the operation S643 described above, which will not be repeated here.

[0196] The fourth execution unit is used to execute the m corresponding to the i-th node in the execution queue. i One pending alarm record is sent to the target terminal device, of which m i Greater than or equal to 1, and m i Less than or equal to m. In one embodiment, the fourth execution unit may be used to execute the operation S644 described above, which will not be repeated here.

[0197] According to embodiments of this disclosure, the fourth execution unit includes a first execution subunit and a second execution subunit.

[0198] The first execution subunit is used to determine m i Each alarm recipient identifier to be logged must be identified, and at least m must be identified. i One target terminal device.

[0199] The second execution subunit is used based on m i One alarm channel awaiting alarm recording, m i Send at least m pending alarm records to i The target terminal device has one alarm channel, which includes email, telephone, and one communication client.

[0200] According to an embodiment of this disclosure, the alarm device 800 further includes a stop module, which updates the execution status of the circular queue to stop execution in response to receiving a processing operation from the target terminal device. The processing operation is used to process abnormal information in abnormal services.

[0201] According to embodiments of this disclosure, the parsing module 820 includes: a first parsing unit, a second parsing unit, a third parsing unit, and a fourth parsing unit.

[0202] The first parsing unit is used to parse the Q alarm rules sequentially by detecting preset fields in the Q alarm rules to obtain alarm context information. The alarm context information includes alarm channel, total number of alarms and alarm interval, and Q is greater than or equal to 2.

[0203] The second parsing unit is used to split the alarm context information into N temporary alarm records based on the alarm channel and the total number of alarms.

[0204] The third parsing unit is used to calculate the delayed alarm duration of N temporary alarm records based on the alarm interval.

[0205] The fourth parsing unit is used to add the delayed alarm duration to N temporary alarm records and arrange the N temporary alarm records in ascending order of delayed alarm duration to obtain N alarm records to be alarmed.

[0206] According to embodiments of this disclosure, the generation module 810 includes: a first generation unit and a second generation unit.

[0207] The first generation unit is used to retrieve at least one alarm rule from the database corresponding to the cause of the abnormal business.

[0208] The second generation unit is used to generate alarm events by calling a preset script based on abnormal business reasons.

[0209] According to embodiments of this disclosure, any plurality of modules among the generation module 810, parsing module 820, storage module 830, and execution module 840 can be combined into one module, or any one of these modules can be split into multiple modules. Alternatively, at least part of the functionality of one or more of these modules can be combined with at least part of the functionality of other modules and implemented in one module. According to embodiments of this disclosure, at least one of the generation module 810, parsing module 820, storage module 830, and execution module 840 can be at least partially implemented as hardware circuitry, such as a field-programmable gate array (FPGA), a programmable logic array (PLA), a system-on-a-chip, a system-on-a-substrate, a system-on-package, an application-specific integrated circuit (ASIC), or implemented in hardware or firmware by any other reasonable means of integrating or packaging circuitry, or implemented in any one of software, hardware, and firmware methods, or in a suitable combination of any of these. Alternatively, at least one of the generation module 810, parsing module 820, storage module 830, and execution module 840 can be at least partially implemented as a computer program module, which, when run, can perform corresponding functions.

[0210] Figure 9 A block diagram of an electronic device suitable for an alarm method for abnormal services according to an embodiment of the present disclosure is shown schematically.

[0211] like Figure 9 As shown, an electronic device 900 according to an embodiment of the present disclosure includes a processor 901, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 902 or a program loaded from a storage portion 908 into a random access memory (RAM) 903. The processor 901 may include, for example, a general-purpose microprocessor (e.g., a CPU), an instruction set processor and / or an associated chipset and / or a special-purpose microprocessor (e.g., an application-specific integrated circuit (ASIC)), etc. The processor 901 may also include onboard memory for caching purposes. The processor 901 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

[0212] RAM 903 stores various programs and data required for the operation of electronic device 900. Processor 901, ROM 902, and RAM 903 are interconnected via bus 904. Processor 901 performs various operations of the method flow according to embodiments of the present disclosure by executing programs in ROM 902 and / or RAM 903. It should be noted that the programs may also be stored in one or more memories other than ROM 902 and RAM 903. Processor 901 may also perform various operations of the method flow according to embodiments of the present disclosure by executing programs stored in said one or more memories.

[0213] According to embodiments of this disclosure, the electronic device 900 may further include an input / output (I / O) interface 905, which is also connected to a bus 904. The electronic device 900 may also include one or more of the following components connected to the I / O interface 905: an input section 906 including a keyboard, mouse, etc.; an output section 907 including a cathode ray tube (CRT), liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 908 including a hard disk, etc.; and a communication section 909 including a network interface card such as a LAN card, modem, etc. The communication section 909 performs communication processing via a network such as the Internet. A drive 910 is also connected to the I / O interface 905 as needed. A removable medium 911, such as a disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed on the drive 910 as needed so that computer programs read from it can be installed into the storage section 908 as needed.

[0214] This disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or it may exist independently and not assembled into the device / apparatus / system. The computer-readable storage medium carries one or more programs that, when executed, implement the method according to the embodiments of this disclosure.

[0215] According to embodiments of this disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium, such as including, but not limited to: portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof. In this disclosure, the computer-readable storage medium may be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. For example, according to embodiments of this disclosure, the computer-readable storage medium may include ROM 902 and / or RAM 903 and / or one or more memories other than ROM 902 and RAM 903 described above.

[0216] Embodiments of this disclosure also include a computer program product comprising a computer program containing program code for performing the methods shown in the flowchart. When the computer program product is run on a computer system, the program code is used to enable the computer system to implement the alarm method for abnormal services provided in the embodiments of this disclosure.

[0217] When the computer program is executed by the processor 901, it performs the functions defined in the system / apparatus of this disclosure embodiments. According to embodiments of this disclosure, the systems, apparatuses, modules, units, etc., described above can be implemented by computer program modules.

[0218] In one embodiment, the computer program may rely on a tangible storage medium such as an optical storage device or a magnetic storage device. In another embodiment, the computer program may also be transmitted and distributed in the form of signals over a network medium, and downloaded and installed via the communication section 909, and / or installed from a removable medium 911. The program code contained in the computer program can be transmitted using any suitable network medium, including but not limited to: wireless, wired, etc., or any suitable combination thereof.

[0219] In such an embodiment, the computer program can be downloaded and installed from a network via the communication section 909, and / or installed from the removable medium 911. When the computer program is executed by the processor 901, it performs the functions defined in the system of this disclosure embodiment. According to embodiments of this disclosure, the systems, devices, apparatuses, modules, units, etc., described above can be implemented by computer program modules.

[0220] According to embodiments of this disclosure, program code for executing the computer programs provided in embodiments of this disclosure can be written in any combination of one or more programming languages. Specifically, these computational programs can be implemented using high-level procedural and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, languages ​​such as Java, C++, Python, "C", or similar programming languages. The program code can execute entirely on the user's computing device, partially on the user's device, partially on a remote computing device, or entirely on a remote computing device or server. In cases involving remote computing devices, the remote computing device can be connected to the user's computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0221] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this disclosure. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram or flowchart, and combinations of blocks in a block diagram or flowchart, may be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0222] Those skilled in the art will understand that the features described in the various embodiments and / or claims of this disclosure can be combined or combined in various ways, even if such combinations or combinations are not explicitly described in this disclosure. In particular, the features described in the various embodiments and / or claims of this disclosure can be combined or combined in various ways without departing from the spirit and teachings of this disclosure. All such combinations and / or combinations fall within the scope of this disclosure.

[0223] The specific embodiments described above further illustrate the purpose, technical solutions, and beneficial effects of this disclosure. It should be understood that the above descriptions are merely specific embodiments of this disclosure and are not intended to limit this disclosure. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this disclosure should be included within the protection scope of this disclosure.

Claims

1. A method for alerting abnormal business operations, comprising: In response to a received alarm request for handling abnormal business, an alarm event corresponding to the alarm request is generated, and the alarm event is used to generate and trigger an alarm operation; The alarm event is parsed to generate N alarm records to be alarmed. The alarm records to be alarmed include the alarm delay duration and alarm recipient information, where N is greater than or equal to 1. Based on the delayed alarm duration, N alarm records are stored in P nodes of a circular queue, wherein the P nodes are connected sequentially and the P nodes execute tasks sequentially along a predetermined direction, and P is greater than or equal to 2. In response to the request to start the circular queue, M pending alarm records stored in P nodes are sent to the target terminal device. The target terminal device is determined based on the alarm recipient information, where M is greater than or equal to 1 and less than or equal to N. The M pending alarm records are sent to the target terminal device sequentially according to their respective delayed alarm durations. When M alarm records are sequentially sent to the target terminal device, in response to receiving a processing operation from the target terminal device, the execution status of the circular queue is updated to stop execution to avoid sending alarm records other than M alarm records out of N alarm records to the target terminal device. The processing operation is used to process abnormal information in the abnormal service.

2. The method according to claim 1, wherein, Based on the stated delayed alarm duration, the N alarm records to be alarmed are stored in P nodes of a circular queue, including: Obtain the time parameters of the circular queue; and Based on the comparison result of the delayed alarm duration and the time parameter, N alarm records to be alarmed are stored in the circular queue.

3. The method according to claim 2, wherein, The time parameters include the cycle time required for the P nodes to execute one round of tasks and the unit time corresponding to each node; The step of storing N alarm records to the circular queue based on the comparison result of the delayed alarm duration and the time parameter includes: Call a preset function to process the delayed alarm duration and the period duration of the nth alarm record to be alarmed, and obtain the first parameter and the second parameter corresponding to the nth alarm record to be alarmed. The first parameter is used to represent the execution round, and the second parameter is used to determine the node storing the alarm record to be alarmed. Here, n is greater than or equal to 1 and n is less than or equal to N. Based on the comparison result of the second parameter and the unit duration, the nth alarm record to be alarmed is stored in the pth node, wherein the second parameter is greater than or equal to the sum of the unit durations of the (p-1) nodes from the 1st node to the pth node, and less than the sum of the unit durations of the p nodes, wherein the 1st node is the node corresponding to the start of the circular queue, wherein p is greater than or equal to 1 and p is less than or equal to P.

4. The method according to claim 1, wherein, The alarm record also includes a first parameter indicating the execution round; The step of responding to the request to start the circular queue by sending the M pending alarm records stored in the P nodes to the target terminal device includes: Obtain the start time and current time of the circular queue; Obtain m alarm records where the first parameter is zero, and store the m alarm records in the execution queue according to the execution order; When the circular queue is in the execution state, the i-th node in the circular queue is triggered according to the difference between the start time and the current time, where i is greater than or equal to 1 and i is less than or equal to P. The m corresponding to the i-th node in the execution queue i The m alarm records to be alarmed are sent to the target terminal device, wherein m i Greater than or equal to 1, and m i Less than or equal to m.

5. The method according to claim 4, wherein, The alarm log also includes alarm channels; The m corresponding to the i-th node in the execution queue. i Sending the alarm record to the target terminal device includes: According to the m i The alarm recipient identifiers of the aforementioned alarm records are used to determine at least m. i The target terminal device; and Based on the m i The alarm channels to be alarmed will record the m i The alarm record to be sent to at least m i The target terminal device, wherein the alarm channel includes one of: email, telephone, and communication client.

6. The method according to claim 1, wherein, The alarm event includes Q alarm rules; the process of parsing the alarm event to generate N alarm records includes: By detecting the preset fields in the Q alarm rules, the Q alarm rules are parsed sequentially to obtain alarm context information, which includes alarm channel, total number of alarms and alarm interval, where Q is greater than or equal to 2; Based on the alarm channel and the total number of alarms, the alarm context information is divided into N temporary alarm records; Based on the alarm interval, calculate the delayed alarm duration for N temporary alarm records; and The delayed alarm duration is added to N temporary alarm records, and the N temporary alarm records are arranged in ascending order of delayed alarm duration to obtain N alarm records to be alarmed.

7. The method according to claim 1, wherein, The alarm request includes the reason for the abnormal service; In response to a received alarm request for handling abnormal services, an alarm event corresponding to the alarm request is generated, including: Based on the cause of the abnormal service, retrieve at least one alarm rule corresponding to the cause of the abnormal service from the database; as well as Based on the aforementioned abnormal business reason, a preset script is invoked to generate the alarm event.

8. An alarm device for abnormal business operations, comprising: The generation module is used to generate an alarm event corresponding to the alarm request in response to a received alarm request for handling abnormal business. The alarm event is used to generate and trigger alarm operations. The parsing module is used to parse the alarm event and generate N alarm records to be alarmed. The alarm records to be alarmed include the alarm delay duration and alarm recipient information, wherein N is greater than or equal to 1. The storage module is used to store N alarm records to be alarmed into P nodes of a circular queue according to the delayed alarm duration, wherein the P nodes are connected in sequence, and the P nodes execute tasks in sequence along a predetermined direction, and P is greater than or equal to 2. The execution module is used to respond to the request to start the circular queue by sending M pending alarm records stored in P nodes to the target terminal device. The target terminal device is determined according to the alarm recipient information, where M is greater than or equal to 1 and M is less than or equal to N. The M pending alarm records are sent to the target terminal device sequentially according to their respective delayed alarm durations. The device is also used for: When M alarm records are sequentially sent to the target terminal device, in response to receiving a processing operation from the target terminal device, the execution status of the circular queue is updated to stop execution to avoid sending alarm records other than M alarm records out of N alarm records to the target terminal device. The processing operation is used to process abnormal information in the abnormal service.

9. An electronic device, comprising: One or more processors; Storage device for storing one or more programs. Wherein, when the one or more programs are executed by the one or more processors, the one or more processors perform the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having executable instructions stored thereon, which, when executed by a processor, cause the processor to perform the method according to any one of claims 1 to 7.

11. A computer program product comprising a computer program that, when executed by a processor, implements the method according to any one of claims 1 to 7.

Images