Cloud resource pool-oriented alarm analysis method, storage medium and electronic device

Abstract

The present invention discloses a cloud resource pool alarm analysis method, comprising the following steps: s001, alarm collection, collecting historical alarms as the basis for alarm analysis; s002, alarm classification, classifying alarms into periodic alarm sets, short-term alarm sets, and sporadic alarm sets according to alarm frequencies; s003, alarm analysis, based on the set classification results of s002, performing secondary calculation analysis, and sorting the calculation results according to the calculated values. The present invention automatically classifies and comprehensively analyzes alarms based on three analysis dimensions: resource weight, alarm level, and alarm number. When used, with the continuous accumulation of alarm data, the accuracy of identifying important alarms will increase significantly, reducing the number of notifications of invalid alarms; important alarms can be quickly screened to assist operation and maintenance personnel in judging and analyzing the health status of cloud resource pools; invalid periodic alarms can be quickly filtered; alarms can be quickly converged to achieve alarm storm suppression.

Description

Technical Field

[0001] The present invention relates to an alarm analysis method, and in particular to an alarm analysis method for a cloud resource pool, a storage medium and an electronic device. Background Art

[0002] With the continuous development of my country's cloud computing industry, more and more applications are choosing to go to the cloud, and users have put forward higher requirements for the stability and reliability of cloud resource pools. At present, the operation and maintenance process of cloud resource pools mainly relies on alarms to complete judgments. The existing alarm processing technology mainly relies on pre-set alarm levels to screen and judge the severity of alarms, so as to filter, analyze, and dispatch alarms. However, the judgment standard of this solution is single, and often due to inaccurate alarm levels defined by equipment manufacturers and users, a large number of invalid alarms exist, which leads to problems such as difficulty in alarm location analysis, invalid dispatch, and omission of important dispatches, which brings great trouble to operation and maintenance personnel in the process of handling alarms.

[0003] Generally, alarm frequency refers to the frequency of alarms on a device. Alarms triggered every day or at a specific time are defined as periodic alarms. This type of alarm has little relevance to sudden abnormal events, and users generally set a lower threshold to perform some periodic inspections and abnormality judgments. Occasional non-periodic alarms often represent abnormal conditions of the device.

[0004] Resource weight represents the importance of resources, which is generally related to resource type, device configuration, business importance, etc. Resource type can be used as a reference, for example, network equipment is more important than computing equipment.

[0005] The alarm level represents the severity of the alarm, which is usually pre-made by the equipment manufacturer and customized by the user. The higher the alarm level, the more important the alarm. The alarm level is generally divided into five levels according to the importance: notification, general, important, severe, and emergency.

[0006] At present, there is a lack of a method, storage medium and electronic equipment that can comprehensively analyze alarms based on the three dimensions of alarm number, resource weight and alarm level, so as to achieve the effects of automatic identification of important alarms, automatic filtering of invalid alarms, automatic convergence of alarm storms and automatic suppression of notification storms, thereby improving operation and maintenance efficiency. Summary of the invention

[0007] In view of the deficiencies in the prior art, the present invention provides a cloud resource pool alarm analysis method, storage medium and electronic device to solve the problem of the lack of a method, storage medium and electronic device that can comprehensively analyze alarms based on three dimensions: number of alarms, resource weight and alarm level.

[0008] To achieve the above object, the present invention adopts the following technical solutions:

[0009] A cloud resource pool alarm analysis method includes the following steps:

[0010] s001, collect historical alarms as the basis for alarm analysis; after an abnormal event occurs, receive the abnormal event and standardize the abnormal information of the abnormal event, parse it into different types of alarms, and associate it with the device where the alarm event occurred;

[0011] s002, classify alarms into periodic alarm set, short-term alarm set, and sporadic alarm set according to alarm frequency; then, generate an alarm ID based on the alarm entity with the help of a hash algorithm as the unique identifier of the same type of alarm; then determine one by one whether the new alarm can correspond to the historical alarm in the periodic alarm set, short-term alarm set, or sporadic alarm set, and classify them accordingly;

[0012] s003, based on the set classification results of s002, filter the periodic alarm set, and based on the data reference of the three dimensions of alarm number, resource weight and alarm level, perform secondary calculation and analysis on the alarms in the short-term alarm set and the occasional alarm set; and sort the calculation results according to the calculated values.

[0013] To optimize the above technical solutions, the specific measures taken also include:

[0014] Furthermore, the alarm entity includes an alarm title, an alarm description, an alarm time, an alarm object, and an alarm level.

[0015] Further, step s002 includes the following steps:

[0016] s021, initialize the alarm pool and divide it into C1, C2, and C3, where C1 represents the periodic alarm set, C2 represents the short-term alarm set, and C3 represents the occasional alarm set;

[0017] s022, receiving a new alarm, first determine whether the alarm matches the C1 periodic alarm set according to the alarm entity; if it matches, add the alarm to the C1 periodic alarm set, increase the alarm count by 1, update the alarm record, and end the process;

[0018] S023, if the alarm does not match the C1 periodic alarm set, then compare and judge with the C2 short-term alarm set in turn;

[0019] S024, if the alarm matches the C2 short-term alarm set, the alarm count is increased by 1, and the alarm record is updated; at the same time, it is determined again whether the alarm matches the C1 periodic alarm set after the update. If it matches, the alarm is moved from the C2 short-term alarm set to the C1 periodic alarm set, and the process ends; if the alarm does not match the C1 periodic alarm set after the update, it is added to the C2 short-term alarm set, and the process ends;

[0020] S025, if the alarm does not match the C2 short-term alarm set, then compare and judge with the C3 occasional alarm set in turn;

[0021] S026, if the alarm matches the C3 sporadic alarm set, the alarm count is increased by 1, and the alarm record is updated; at the same time, it is determined again whether the alarm matches the C2 short-term alarm set after the update. If it matches, the alarm is moved from the C3 sporadic alarm set to the C2 short-term alarm set, and the process ends; if the alarm does not match the C2 short-term alarm set after the update, it is added to the C3 sporadic alarm set, and the process ends;

[0022] S027, if the alarm does not match the C3 sporadic alarm set, the alarm is marked as an sporadic alarm, added to the C3 sporadic alarm set, the alarm count is increased by 1, the alarm record is updated, and the process ends.

[0023] Further, step s024 includes the following steps:

[0024] S241, if the alarm matches the C2 short-term alarm set, the alarm count is increased by 1 and the alarm record is updated;

[0025] S242, at the same time, subtract the alarm time of the alarm from the alarm time of the latest historical record to obtain the interval time between the two, and update the alarm period of the alarm based on this, and at the same time determine whether the obtained alarm period matches the C2 short-term alarm set; if the alarm period does not match the C2 short-term alarm set, then compare the alarm with the C3 sporadic alarm set in turn;

[0026] S243, if the alarm period matches the C2 short-term alarm set, then subtract the alarm time of the alarm from the earliest alarm time to obtain the occurrence time of the alarm, and further determine whether the obtained occurrence time matches the C1 periodic alarm set;

[0027] S244, if it matches, the alarm is moved from the C2 short-term alarm set to the C1 periodic alarm set, the alarm count is increased by 1, the alarm record is updated, and the process ends; if it does not match, the alarm is added to the C2 short-term alarm set, the alarm count is increased by 1, the alarm record is updated, and the process ends.

[0028] Further, step s244 includes the following steps:

[0029] S2441, if matched, the alarm is moved from the C2 short-term alarm set to the C1 periodic alarm set, the alarm count is increased by 1, and the alarm record is updated;

[0030] S2442, simultaneously start the scheduled task compensation mechanism, traverse the C2 short-term alarm set, and determine whether there is an alarm that can match the C1 periodic alarm set; if there is an alarm match, move the alarm from the C2 short-term alarm set to the C1 periodic alarm set, and end the process.

[0031] Further, step s026 includes the following steps:

[0032] S261, if the alarm matches the C3 sporadic alarm set, the alarm count is increased by 1 and the alarm record is updated;

[0033] S262, at the same time, subtract the alarm time of the alarm from the alarm time of the latest historical record to obtain the interval time between the two, and use this to update the alarm period of the alarm, and at the same time determine whether the obtained alarm period matches the C2 short-term alarm set; if the alarm period does not match the C2 short-term alarm set, it is added to the C3 sporadic alarm set, and the process ends;

[0034] S263, if the alarm period matches the C2 short-term alarm set, then determining again whether the alarm count of the alarm matches the C2 short-term alarm set;

[0035] S264, if there is a match, the alarm is moved from the C3 sporadic alarm set to the C2 short-term alarm set, and the process ends; if there is no match, the alarm is added to the C3 sporadic alarm set, and the process ends.

[0036] Further, step s003 includes the following steps:

[0037] s031, first filter the C1 periodic alarm set, then traverse the C2 short-term alarm set and the C3 occasional alarm set, and process them;

[0038] S032, determine the alarm objects in the C1 periodic alarm set, the C2 short-term alarm set, and the C3 occasional alarm set, and obtain the dimensional data of the resource weight O, the alarm level S, and the alarm quantity N of the relevant alarms;

[0039] S033, calculate according to the formula R=O*S*1 / N, and output the calculation result R, where R is the alarm importance;

[0040] S034, sorting in descending order according to the calculation result R;

[0041] S035, associated monitoring indicators, automatically associated with the key monitoring indicators of the alarm object according to the alarm object;

[0042] S036, output the alarms according to the sorting result R, fold the C1 periodic alarm set; merge and fold the C2 short-term alarm set according to the alarm objects; and present the C3 sporadic alarm set in a list.

[0043] Furthermore, the key monitoring indicators include ping connectivity, CPU utilization, memory utilization, disk IO, and network IO.

[0044] Furthermore, a computer-readable storage medium stores a computer program, wherein the computer program enables a computer to execute the above-mentioned cloud resource pool-oriented alarm analysis method.

[0045] Furthermore, an electronic device includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the above-mentioned cloud resource pool-oriented alarm analysis method is implemented.

[0046] The beneficial effects of the present invention are:

[0047] The present invention automatically classifies and comprehensively analyzes alarms based on three analysis dimensions: resource weight, alarm level, and alarm number. When in use, with the continuous accumulation of alarm data, the accuracy of identifying important alarms will increase significantly, reducing the number of notifications of invalid alarms; in the cloud resource pool operation and maintenance monitoring scenario, important alarms can be quickly screened to assist operation and maintenance personnel in judging and analyzing the health status of the cloud resource pool; in the alarm dispatching scenario, invalid periodic alarms can be quickly filtered to solve the problem of repeated alarm dispatching; when dealing with alarm storm scenarios, alarms can be quickly converged while avoiding underreporting and misreporting of important alarms, thereby achieving alarm storm suppression. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Figure 1 This is an overall flow chart of a cloud resource pool alarm analysis method proposed by the present invention;

[0049] Figure 2 An alarm entity classification diagram for a cloud resource pool alarm analysis method proposed by the present invention;

[0050] Figure 3 This is a flow chart of alarm classification for a cloud resource pool alarm analysis method proposed by the present invention;

[0051] Figure 4 This is a flowchart of an alarm analysis method for cloud resource pools proposed by the present invention. DETAILED DESCRIPTION

[0052] The present invention will now be described in further detail with reference to the accompanying drawings.

[0053] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0054] In one embodiment, if Figure 1 As shown, a cloud resource pool alarm analysis method of the present invention includes the following steps:

[0055] s001, alarm collection, collects historical alarms or original alarms as the basis for alarm analysis; after an abnormal event occurs, the alarm collection device receives it, standardizes the abnormal information of the abnormal event, parses it into different types of alarms, and associates it with the device where the alarm event occurred.

[0056] s002, alarm classification, refer to the data of historical alarms or original alarms, and classify alarms into periodic alarm sets, short-term alarm sets, and sporadic alarm sets according to the alarm frequency; among them, periodic alarms are collected in the periodic alarm set, and periodic alarms represent repeated alarms generated by the device in a certain period for a long time, and have no reference value; short-term alarms are collected in the short-term alarm set, and short-term alarms represent alarms generated by the device in a certain period in a short period of time, have less reference value, and are likely to be converted into periodic alarms; sporadic alarms are collected in the sporadic alarm set, and sporadic alarms represent alarms that suddenly occur in the device, and have greater reference significance; then, based on the alarm entity, an alarm identification id is generated with the help of a hash algorithm as the unique identifier of the same type of alarm; then, the new alarms are judged one by one whether they can correspond to the historical alarms in the periodic alarm set, short-term alarm set or sporadic alarm set, and classified accordingly. This step is the basis of alarm analysis.

[0057] s003, alarm analysis, is based on the classification results of s002 by alarm frequency. The periodic alarm set has low attention, and attention should be paid to the sporadic alarm set and the short-term alarm set. The periodic alarm set is filtered, and based on the data reference of the three dimensions of alarm number, resource weight, and alarm level, the alarms in the short-term alarm set and the sporadic alarm set are calculated and analyzed twice in turn. The resource weight represents the importance of the equipment, which is related to the type, configuration, and carried business. For example, the core physical switch is more important than the server and has a higher weight. The equipment carrying key core business has a higher weight than general business. The calculation results are sorted according to the calculated values, so that the alarms are accurately arranged according to their importance.

[0058] Among them, Figure 2 As shown, the alarm entity generally includes key fields such as alarm title, alarm description, alarm time, alarm object, and alarm level.

[0059] like Figure 3 As shown, in this embodiment, step s002 includes the following steps:

[0060] s021, initialize the alarm pool and divide it into C1, C2, and C3, where C1 represents the periodic alarm set, C2 represents the short-term alarm set, and C3 represents the occasional alarm set;

[0061] s022, receiving a new alarm, first judging whether the alarm can match the historical alarm in the C1 periodic alarm set according to the alarm entity, so as to match the C1 periodic alarm set, the judging basis includes but is not limited to the alarm title, alarm description, alarm time, alarm object, alarm level, etc.; if it matches, the alarm is added to the C1 periodic alarm set, the alarm count is increased by 1, the alarm record is updated, and the process ends;

[0062] S023, if the alarm does not match the C1 periodic alarm set, then the alarm is compared with the C2 short-term alarm set in turn;

[0063] S024, if the alarm matches the C2 short-term alarm set, the alarm count is increased by 1, and the alarm record is updated; at the same time, it is determined again whether the alarm matches the C1 periodic alarm set after the update. If it matches, the alarm is moved from the C2 short-term alarm set to the C1 periodic alarm set, and the process ends; if the alarm does not match the C1 periodic alarm set after the update, it is added to the C2 short-term alarm set, and the process ends;

[0064] S025, if the alarm does not match the C2 short-term alarm set, then it is compared with the C3 occasional alarm set in turn;

[0065] S026, if the alarm matches the C3 sporadic alarm set, the alarm count is increased by 1, and the alarm record is updated; at the same time, it is determined again whether the alarm matches the C2 short-term alarm set after the update. If it matches, the alarm is moved from the C3 sporadic alarm set to the C2 short-term alarm set, and the process ends; if the alarm does not match the C2 short-term alarm set after the update, it is added to the C3 sporadic alarm set, and the process ends;

[0066] S027, if the alarm matches neither the C2 short-term alarm set nor the C3 sporadic alarm set, the alarm is marked as a sporadic alarm, added to the C3 sporadic alarm set, the alarm count is increased by 1, the alarm record is updated, and the process ends.

[0067] Wherein, the step s024 comprises the following steps:

[0068] S241, if the alarm matches the C2 short-term alarm set, the alarm count is increased by 1 and the alarm record is updated;

[0069] S242, at the same time, subtract the alarm time of the alarm from the alarm time of the latest historical record to obtain the interval time between the two, and use this to update the alarm period of the alarm, and at the same time determine whether the obtained alarm period matches the C2 short-term alarm set; if the alarm period does not match the C2 short-term alarm set, then the alarm is similarly compared with the C3 sporadic alarm set in sequence;

[0070] S243, if the alarm period matches the C2 short-term alarm set, then subtract the alarm time of the alarm from the earliest alarm time to obtain the occurrence time of the alarm, and further determine whether the obtained occurrence time matches the C1 periodic alarm set;

[0071] S244, if it matches, the alarm is moved from the C2 short-term alarm set to the C1 periodic alarm set, the alarm count is increased by 1, the alarm record is updated, and the process ends; if it does not match, the alarm is added to the C2 short-term alarm set, the alarm count is increased by 1, the alarm record is updated, and the process ends.

[0072] Wherein, the step s244 comprises the following steps:

[0073] S2441, if matched, the alarm is moved from the C2 short-term alarm set to the C1 periodic alarm set, the alarm count is increased by 1, and the alarm record is updated;

[0074] S2442, simultaneously start the scheduled task compensation mechanism, traverse the C2 short-term alarm set, and determine whether there is an alarm that can match the C1 periodic alarm set; if there is an alarm match, move the alarm from the C2 short-term alarm set to the C1 periodic alarm set, and end the process.

[0075] Among them, S2442 is to start a task to calculate separately, and its purpose is to determine whether there is an alarm whose alarm state has changed to an alarm that meets the C1 periodic alarm set from the C2 short-term alarm set, so as to increase the accuracy of classification.

[0076] Wherein, the step s026 includes the following steps:

[0077] S261, if the alarm matches the C3 sporadic alarm set, the alarm count is increased by 1 and the alarm record is updated;

[0078] S262, at the same time, subtract the alarm time of the alarm from the alarm time of the latest historical record to obtain the interval time between the two, and use this to update the alarm period of the alarm, and at the same time determine whether the obtained alarm period matches the C2 short-term alarm set; if the alarm period does not match the C2 short-term alarm set, it is added to the C3 sporadic alarm set, and the process ends;

[0079] S263, if the alarm period matches the C2 short-term alarm set, then determining again whether the alarm count of the alarm matches the C2 short-term alarm set;

[0080] S264, if it matches, the alarm is moved from the C3 sporadic alarm set to the C2 short-term alarm set, and the process ends; if it does not match, it is added to the C3 sporadic alarm set, and the process ends. Generally, the number of alarms in the C2 short-term alarm set should be greater than or equal to 3 times.

[0081] like Figure 4 As shown, in this embodiment, step s003 includes the following steps:

[0082] s031, first filter the C1 periodic alarm set, then traverse the C2 short-term alarm set and the C3 occasional alarm set, and process them;

[0083] S032, determine the alarm objects in the C1 periodic alarm set, the C2 short-term alarm set, and the C3 occasional alarm set, and obtain the dimensional data of the resource weight O, the alarm level S, and the alarm quantity N of the relevant alarms;

[0084] S033, unified calculation, calculation is performed according to the formula R=O*S*1 / N, and the calculation result R is output, where R is the alarm importance;

[0085] S034, sorting in descending order according to the calculation result R, the earlier the alarm is, the more serious the alarm is;

[0086] S035, associate monitoring indicators, automatically associate and query the key monitoring indicators of the alarm resource object according to the alarm object;

[0087] S036, unified presentation, output the alarms according to the sorting result R, fold the C1 periodic alarm set; merge and fold the C2 short-term alarm set according to the alarm objects; and present the C3 sporadic alarm set in a list.

[0088] Among them, the key monitoring indicators include but are not limited to ping connectivity, CPU utilization, memory utilization, disk IO, network IO, etc., to assist operation and maintenance decision-making.

[0089] In another embodiment, the present invention proposes a computer-readable storage medium storing a computer program, wherein the computer program enables a computer to execute a cloud resource pool-oriented alarm analysis method as described in any one of claims 1 to 8.

[0090] In another embodiment, the present invention proposes an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, it implements a cloud resource pool alarm analysis method as described in any one of claims 1 to 8.

[0091] In the embodiments disclosed in the present application, the computer storage medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or apparatus. The computer storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or equipment, or any suitable combination of the foregoing. More specific examples of computer storage media may include electrical connections based on one or more lines, portable computer disks, hard disks, random access memories (RAM), read-only memories (ROM), erasable programmable read-only memories (EPROM or flash memory), optical fibers, portable compact disk read-only memories (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0092] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed in this application can be implemented in electronic hardware or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0093] The above are only preferred embodiments of the present invention, and the protection scope of the present invention is not limited to the above embodiments. All technical solutions under the concept of the present invention belong to the protection scope of the present invention. It should be pointed out that for ordinary technicians in this technical field, some improvements and modifications without departing from the principle of the present invention should be regarded as the protection scope of the present invention.

Claims

1. A cloud resource pool alarm analysis method, characterized in that: The steps include: s001, collect historical alarms as the basis for alarm analysis; after an abnormal event occurs, receive the abnormal event and standardize the abnormal information of the abnormal event, parse it into different types of alarms, and associate it with the device where the alarm event occurred; s002, classify alarms into periodic alarm set, short-term alarm set, and sporadic alarm set according to alarm frequency; then, generate an alarm ID based on the alarm entity with the help of a hash algorithm as the unique identifier of the same type of alarm; then determine one by one whether the new alarm can correspond to the historical alarm in the periodic alarm set, short-term alarm set, or sporadic alarm set, and classify them accordingly; s003, based on the set classification result of s002, filter the periodic alarm set, and perform secondary calculation and analysis on the alarms in the short-term alarm set and the sporadic alarm set based on the data reference of the three dimensions of alarm number, resource weight and alarm level; and sort the calculation results according to the calculated values; Step s002 includes the following steps: s021, initialize the alarm pool and divide it into C1, C2, and C3, where C1 represents the periodic alarm set, C2 represents the short-term alarm set, and C3 represents the occasional alarm set; s022, receiving a new alarm, first determine whether the alarm matches the C1 periodic alarm set according to the alarm entity; If a match is found, the alarm is added to the C1 periodic alarm set, the alarm count is incremented by 1, the alarm record is updated, and the process ends; S023, if the alarm does not match the C1 periodic alarm set, then compare and judge with the C2 short-term alarm set in turn; S024, if the alarm matches the C2 short-term alarm set, the alarm count is increased by 1, and the alarm record is updated; at the same time, it is determined again whether the alarm matches the C1 periodic alarm set after the update. If it matches, the alarm is moved from the C2 short-term alarm set to the C1 periodic alarm set, and the process ends; if the alarm does not match the C1 periodic alarm set after the update, it is added to the C2 short-term alarm set, and the process ends; S025, if the alarm does not match the C2 short-term alarm set, then compare and judge with the C3 occasional alarm set in turn; S026, if the alarm matches the C3 sporadic alarm set, the alarm count is increased by 1, and the alarm record is updated; at the same time, it is determined again whether the alarm matches the C2 short-term alarm set after the update. If it matches, the alarm is moved from the C3 sporadic alarm set to the C2 short-term alarm set, and the process ends; if the alarm does not match the C2 short-term alarm set after the update, it is added to the C3 sporadic alarm set, and the process ends; S027, if the alarm does not match the C3 sporadic alarm set, the alarm is marked as an sporadic alarm, added to the C3 sporadic alarm set, the alarm count is increased by 1, the alarm record is updated, and the process ends; Step s024 includes the following steps: S241, if the alarm matches the C2 short-term alarm set, the alarm count is increased by 1 and the alarm record is updated; S242, at the same time, subtract the alarm time of the alarm from the alarm time of the latest historical record to obtain the interval time between the two, and update the alarm period of the alarm based on this, and at the same time determine whether the obtained alarm period matches the C2 short-term alarm set; if the alarm period does not match the C2 short-term alarm set, then compare the alarm with the C3 sporadic alarm set in turn; S243, if the alarm period matches the C2 short-term alarm set, then subtract the alarm time of the alarm from the earliest alarm time to obtain the occurrence time of the alarm, and further determine whether the obtained occurrence time matches the C1 periodic alarm set; S244, if it matches, the alarm is moved from the C2 short-term alarm set to the C1 periodic alarm set, the alarm count is increased by 1, the alarm record is updated, and the process ends; if it does not match, the alarm is added to the C2 short-term alarm set, the alarm count is increased by 1, the alarm record is updated, and the process ends.

2. The cloud resource pool-oriented alarm analysis method according to claim 1, characterized in that: The alarm entity includes alarm title, alarm description, alarm time, alarm object, and alarm level.

3. The cloud resource pool alarm analysis method according to claim 1, characterized in that: Step s244 comprises the following steps: S2441, if matched, the alarm is moved from the C2 short-term alarm set to the C1 periodic alarm set, the alarm count is increased by 1, and the alarm record is updated; S2442, simultaneously start the scheduled task compensation mechanism, traverse the C2 short-term alarm set, and determine whether there is an alarm that can match the C1 periodic alarm set; If there is an alarm match, the alarm is moved from the C2 short-term alarm set to the C1 periodic alarm set, and the process ends.

4. The cloud resource pool-oriented alarm analysis method according to claim 1, characterized in that: Step s026 includes the following steps: S261, if the alarm matches the C3 sporadic alarm set, the alarm count is increased by 1 and the alarm record is updated; S262, at the same time, subtract the alarm time of the alarm from the alarm time of the latest historical record to obtain the interval time between the two, and use this to update the alarm period of the alarm, and at the same time determine whether the obtained alarm period matches the C2 short-term alarm set; if the alarm period does not match the C2 short-term alarm set, it is added to the C3 sporadic alarm set, and the process ends; S263, if the alarm period matches the C2 short-term alarm set, then determining again whether the alarm count of the alarm matches the C2 short-term alarm set; S264, if there is a match, the alarm is moved from the C3 sporadic alarm set to the C2 short-term alarm set, and the process ends; if there is no match, the alarm is added to the C3 sporadic alarm set, and the process ends.

5. The cloud resource pool-oriented alarm analysis method according to claim 1, characterized in that: Step s003 includes the following steps: s031, first filter the C1 periodic alarm set, then traverse the C2 short-term alarm set and the C3 occasional alarm set, and process them; S032, determine the alarm objects in the C1 periodic alarm set, the C2 short-term alarm set, and the C3 occasional alarm set, and obtain the dimensional data of the resource weight O, the alarm level S, and the alarm quantity N of the relevant alarms; S033, calculate according to the formula R=O*S*1 / N, and output the calculation result R, where R is the alarm importance; S034, sorting in descending order according to the calculation result R; S035, associated monitoring indicators, automatically associated and queried the key monitoring indicators of the alarm object according to the alarm object; S036, output the alarms according to the sorting result R, fold the C1 periodic alarm set; merge and fold the C2 short-term alarm set according to the alarm objects; C3 sporadic alarm collection is presented in a list.

6. The cloud resource pool-oriented alarm analysis method according to claim 5, characterized in that: The key monitoring indicators include ping connectivity, CPU utilization, memory utilization, disk IO, and network IO.

7. A computer-readable storage medium storing a computer program, characterized in that: The computer program enables a computer to execute a cloud resource pool-oriented alarm analysis method as described in any one of claims 1 to 6.

8. An electronic device, characterized in that: include: A memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, a cloud resource pool alarm analysis method as described in any one of claims 1 to 6 is implemented.

Images