An alarm routing method, device and medium of a cloud platform monitoring system

By introducing server-layer and alarm rule-layer tags into the monitoring system, and dynamically selecting alarm routing methods and silent periods, the problem of fixed alarm routing methods in existing technologies is solved, enabling flexible alarm routing configuration and user-friendly operation globally.

CN116319256BActive Publication Date: 2026-04-10RINGSLINK XIAMEN NETWORK COMM TECH
View PDF 2 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
RINGSLINK XIAMEN NETWORK COMM TECH
Filing Date
2023-02-08
Publication Date
2026-04-10

AI Technical Summary

Technical Problem

Existing monitoring systems use fixed alarm routing methods, making it difficult to dynamically select based on information such as servers, alarm rules, and time zones. This fails to meet the alarm routing needs of different time zones worldwide and is also difficult to modify.

Method used

A tag-based approach is adopted to divide alarm routing into a server layer and an alarm rule layer. Server layer tags and alarm rule layer tags are configured to dynamically select alarm routing methods and make flexible configurations based on time zone and alarm quiet period.

Benefits of technology

It enables dynamic selection of alarm routes in the monitoring system, adapts to complex scenario requirements, improves the flexibility and user-friendliness of alarm routing, and simplifies operation and maintenance.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116319256B_ABST
    Figure CN116319256B_ABST
Patent Text Reader

Abstract

The application discloses an alarm routing method of a cloud platform monitoring system, and comprises the following steps: 1, configuring alarm triggering rules of a server; 2, configuring tag information according to the alarm triggering rules, wherein the tag information comprises a server layer tag and an alarm rule layer tag; 3, collecting monitoring data from each server according to the alarm triggering rules by a client; 4, obtaining the monitoring data from the client, processing the monitoring data according to the alarm triggering rules to obtain alarm information, and carrying the tag information into the alarm information; 5, dynamically selecting corresponding alarm routing modes, time zones and alarm silence time periods according to the tag information carried in the alarm information; and 6, sending the alarm information according to the selected alarm routing modes, time zones and alarm silence time periods. The application further discloses an electronic device and a computer readable storage medium, and realizes dynamic selection of alarm routing and flexible configuration of alarm silence time functions.
Need to check novelty before this filing date? Find Prior Art

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of Internet of Things, and in particular to an alarm routing method of a cloud platform monitoring system, a device and a medium. BACKGROUND

[0002] The alarm routing mode of most current monitoring systems is relatively fixed, and since the label is not taken as a separate module, the label function is weak, and only the enablement or disablement of a certain alarm routing mode can be achieved. For the same type of alarm, once the alarm routing is determined, manual modification is required to change it, and the server layer and the alarm rule layer cannot be distinguished, and the alarm routing mode cannot be flexibly configured in the server layer and the alarm rule layer. Therefore, the alarm routing mode cannot be dynamically selected according to the server, the alarm rule, the time zone and other information. Therefore, the existing scheme has the problems of fixed alarm routing mode and great modification difficulty.

[0003] In addition, most of the alarm routing modes of current monitoring systems do not consider the situation that people in different time zones have different living and working hours. Since different time zones have different alarm routing and people have different working hours, different alarm silence time needs to be set. However, the alarm routing mode of most current monitoring systems is relatively fixed, and therefore the existing scheme can only meet the specific alarm routing requirements of a small number of people in a specific time period, and is suitable for a time zone application scenario. However, it cannot meet the alarm routing requirements of all people in different time zones worldwide, and is not suitable for a global multi-time zone application scenario. SUMMARY

[0004] Therefore, the purpose of the present application is to provide an alarm routing method of a cloud platform monitoring system, which divides the label information into two levels of server layer label and alarm rule layer label. The alarm routing can be configured on the server layer label and the alarm rule layer label, and the alarm routing can be dynamically selected and adapted to the alarm routing requirements of complex scenarios by using the label-based method. The present application realizes flexible configuration of alarm routing and alarm silence time according to different time zones based on the label-based method, and the alarm routing configuration is very user-friendly.

[0005] In order to achieve the above technical purposes, the technical scheme adopted by the present application is as follows:

[0006] The present application provides an alarm routing method of a cloud platform monitoring system, comprising the following steps:

[0007] Step 1, configuring alarm trigger rules of a plurality of servers;

[0008] Step 2, configuring a plurality of label information according to the alarm trigger rule, the label information including server layer label and alarm rule layer label;

[0009] Step 3, collecting monitoring data from each server according to the alarm trigger rule by the client;

[0010] Step 4, obtaining the monitoring data from the client, processing the monitoring data according to the alarm trigger rule to obtain alarm information, and carrying the label information into the alarm information;

[0011] Step 5, dynamically selecting corresponding alarm routing mode, time zone and alarm silence time period according to the label information carried in the alarm information;

[0012] Step 6, sending the alarm information to the user for notification according to the selected alarm routing mode, time zone and alarm silence time period.

[0013] Further, the step 1 specifically includes:

[0014] Step 11, configuring a plurality of server alarm trigger rules on each server, the plurality of server alarm trigger rules including at least: server memory abnormal condition, server CPU abnormal condition, server hard disk abnormal condition, server startup abnormal condition and server network connection abnormal condition;

[0015] Step 12, determining an alarm rule table of the ID of the server corresponding to the ID of the alarm trigger rule according to the type of the alarm trigger rule of each server and the number of servers.

[0016] Further, the step 2 specifically includes:

[0017] Step 21, configuring a plurality of server layer labels on each server according to the use of all alarm trigger rules for the alarm trigger rule convenient for unified management, the plurality of server layer labels including at least: first alarm silence function switch information, first server time zone information, first alarm silence start time information and first alarm silence duration information and / or first alarm routing mode information;

[0018] Step 22, determining a server label table of the ID of the server corresponding to the server layer label according to the number of servers and the number of server layer labels;

[0019] Step 23, according to the use of the alarm trigger rule, configuring specific multiple alarm rule layer tags on the trigger for the alarm trigger rule which is not convenient to manage uniformly, the multiple alarm rule layer tags at least include: second alarm silence function switch information, time zone information of the second server, second alarm silence start time information, second alarm silence duration information and second alarm routing mode information;

[0020] Step 24, according to the type of the alarm trigger rule of each server and the number of alarm rule layer tags, determining an alarm rule tag table of the corresponding relationship between the ID of the alarm trigger rule and the alarm rule layer tag;

[0021] Step 25, setting the priority of the second alarm routing mode information higher than the first alarm routing mode information, the priority of the time zone information of the second server higher than the time zone information of the first server, the priority of the second alarm silence start time information higher than the first alarm silence start time information, the priority of the second alarm silence duration information higher than the first alarm silence duration information, and the priority of the first alarm silence function switch information higher than the second alarm silence function switch information.

[0022] Further, the step 3 specifically includes:

[0023] The client collects monitoring data from each server according to the alarm trigger rule, the alarm trigger rule and the monitoring data one-to-one, when the alarm trigger rule is the memory exception condition of the server, the collected monitoring data is the memory related data of the server; when the alarm trigger rule is the CPU exception condition of the server, the collected monitoring data is the CPU related data of the server; when the alarm trigger rule is the hard disk exception condition of the server, the collected monitoring data is the hard disk related data of the server; when the alarm trigger rule is the startup exception condition of the server, the collected monitoring data is the startup related data of the server; when the alarm trigger rule is the network connection exception condition of the server, the collected monitoring data is the network related data of the server.

[0024] Further, the step 4 specifically includes:

[0025] Step 41, obtaining the monitoring data of the required target server from the client according to the preset frequency;

[0026] Step 42, filtering and extracting the monitoring data to obtain new monitoring data;

[0027] Step 43, reading the target alarm trigger rule corresponding to the new monitoring data, judging whether the new monitoring data conforms to the target alarm trigger rule by comparing the new monitoring data with the target alarm trigger rule, if yes, obtaining the alarm information and entering step 44; if no, ending the flow;

[0028] Step 44, finding out the ID of the target server according to the ID of the target alarm trigger rule and the alarm rule table, and then reading out a plurality of server layer tags corresponding to the target server according to the ID of the target server and the server tag table and carrying them in the alarm information; or finding out the ID of the target server according to the ID of the target alarm trigger rule and the alarm rule table, and then reading out a plurality of server layer tags corresponding to the target server according to the ID of the target server and the server tag table, and simultaneously reading out the alarm rule layer tag according to the ID of the target alarm trigger rule and the alarm rule tag table, and carrying the server layer tag and the alarm rule layer tag in the alarm information.

[0029] Further, after the step 42, the method further comprises:

[0030] storing the new monitoring data into the database.

[0031] Further, the step 5 specifically comprises:

[0032] Step 51, judging the tag information carried in the alarm information, if the tag information carried in the alarm information is the server layer tag, entering step 52; if the tag information carried in the alarm information is the server layer tag and the alarm rule layer tag, entering step 54;

[0033] Step 52, using a plurality of server layer tags commonly used on the target server, if the first alarm routing mode information is not included in the plurality of server layer tags, it is indicated that all alarm information in any time period cannot be sent; if the first alarm routing mode information is included in the plurality of server layer tags, entering step 53;

[0034] Step 53, judging whether the silence function is started according to the first alarm silence function switch information, if yes, calculating the alarm silence time period according to the time zone information of the first server, the first alarm silence start time information and the first alarm silence duration information, all alarm information in the alarm silence time period cannot be sent, and all alarm information outside the alarm silence time period can be sent through the alarm routing mode specified in the first alarm routing mode information; if no, all alarm information in any time period can be sent;

[0035] Step 54, judging whether to start the silence function according to the first alarm silence function switch information, if yes, entering step 55; if no, all alarm information in any time period can be sent through the alarm routing mode specified in the second alarm routing mode information;

[0036] Step 55, judging whether to start the silence function according to the second alarm silence function switch information, if yes, calculating the alarm silence time period according to the time zone information of the second server, the second alarm silence start time information and the second alarm silence duration information, all alarm information in the alarm silence time period cannot be sent, all alarm information outside the alarm silence time period can be sent through the alarm routing mode specified in the second alarm routing mode information; if no, all alarm information in any time period can be sent.

[0037] Further, the step 6 specifically comprises:

[0038] When the label information carried in the alarm information is the server layer label, if a plurality of server layer labels include the first alarm routing mode information and the first alarm silence function switch information judges to start the silence function, the alarm information is sent to the user for notification according to the alarm routing mode, the time zone and the alarm silence time period corresponding to the first alarm routing mode information, the time zone information of the first server, the first alarm silence start time information and the first alarm silence duration information;

[0039] When the label information carried in the alarm information is the server layer label and the alarm rule layer label, if the first alarm silence function switch information and the second alarm silence function switch information both judge to start the silence function, the alarm information is sent to the user for notification according to the alarm routing mode, the time zone and the alarm silence time period corresponding to the second alarm routing mode information, the time zone information of the second server, the second alarm silence start time information and the second alarm silence duration information.

[0040] The application further provides an electronic device, comprising a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the alarm routing method of the cloud platform monitoring system as above when executing the program.

[0041] The application further provides a computer readable storage medium, wherein a computer program is stored on the medium, and the program is executable on the processor to implement the alarm routing method of the cloud platform monitoring system as above.

[0042] Compared with the prior art, the application has the beneficial effects that:

[0043] The alarm routing method of the application can realize dynamic selection of alarm routing of an Internet of Things cloud platform monitoring system (hereinafter referred to as a monitoring system). The monitoring system collects monitoring data from a server through a client and stores the data in a database, then reads corresponding alarm triggering rules to determine whether an alarm is generated, reads corresponding label information if an alarm is generated, and carries the label information into alarm information, selects a corresponding alarm routing mode, time zone and alarm silence time period according to the label information to send the alarm information. In addition, the application not only realizes dynamic selection of alarm routing, but also realizes flexible configuration of alarm silence time according to different time zones based on a label method according to the characteristics of the Internet of Things cloud platform in different time zones worldwide, taking into account the different living and working hours of people in each time zone, greatly improves the flexibility of alarm routing, and makes the alarm routing more humanized and simple to operate, which is convenient for maintenance personnel. BRIEF DESCRIPTION OF DRAWINGS

[0044] In order to more clearly illustrate the technical solutions in the embodiments of the application or the prior art, the following will briefly introduce the drawings needed to be used in the embodiments or prior art description. Obviously, the drawings in the following description only constitute some embodiments of the application, and for those skilled in the art, other drawings can also be obtained from these drawings without creative labor.

[0045] Figure 1 is an execution flow chart of an alarm routing method of a cloud platform monitoring system provided by the embodiment of the application.

[0046] Figure 2 is a structural block diagram of an alarm routing system provided by the embodiment of the application.

[0047] Figure 3 is a structural block diagram of an alarm rule management module in an alarm routing system provided by the embodiment of the application.

[0048] Figure 4 is a structural block diagram of a label management module in an alarm routing system provided by the embodiment of the application. Figure 5 is a structural block diagram of a monitoring alarm core module in an alarm routing system provided by the embodiment of the application.

[0049] Figure 6 is a structural block diagram of an alarm routing management module in an alarm routing system provided by the embodiment of the application.

[0050] Figure 7 is a schematic diagram of an electronic device provided by the embodiment of the application.

[0051] Figure 8Fig. 1 is a schematic diagram of a computer readable storage medium according to an embodiment of the present application. DETAILED DESCRIPTION

[0052] The application will be further described below in conjunction with the drawings and embodiments. It is particularly pointed out that the following embodiments are only used to illustrate the application, but do not limit the scope of the application. Similarly, the following embodiments are only part of the embodiments of the application, but not all embodiments. All other embodiments obtained by those of ordinary skill in the art without creative labor are within the scope of the application.

[0053] Referring to Figure 1 The alarm routing method of the cloud platform monitoring system comprises the following steps:

[0054] Step 1, configuring alarm triggering rules of multiple servers;

[0055] In this embodiment, step 1 specifically comprises:

[0056] Step 11, configuring alarm triggering rules of multiple servers on each server, wherein the alarm triggering rules of multiple servers at least comprise: memory abnormal condition of the server, CPU abnormal condition of the server, hard disk abnormal condition of the server, startup abnormal condition of the server and network connection abnormal condition of the server; each server can be configured with hundreds of alarm triggering rules, which can monitor and trigger different abnormal conditions in the server, and can comprehensively remind and manage abnormal conditions of the server;

[0057] Step 12, determining an alarm rule table of the corresponding relationship between the ID of the server and the ID of the alarm triggering rule according to the type of the alarm triggering rule of each server and the number of servers; by establishing the alarm rule table, the corresponding relationship between the ID of the server and the ID of the alarm triggering rule can be queried, so that the server layer tag and the alarm rule layer tag can be queried by the ID of the server in the later stage.

[0058] For example, there are 4 servers, and each server corresponds to an ID of the server, so the server table is determined according to the ID of the server and the name of the server as follows:

[0059] ID of the server Server name 1 Server 1 2 Server 2 3 Server 3 4 Server 4

[0060] There are many kinds of alarm rules on each server, only three kinds of alarm rules are listed, and the alarm rule table is as follows:

[0061]

[0062]

[0063] Step 2, configuring a plurality of label information according to the alarm trigger rule, the label information including server layer label and alarm rule layer label; wherein the server layer label is set on the server and is suitable for the alarm information corresponding to most common alarm trigger rules, and the alarm rule layer label is set on the trigger and is suitable for the alarm information corresponding to a small part of special alarm trigger rules;

[0064] In the embodiment, the step 2 specifically includes:

[0065] Step 21, configuring a plurality of common server layer labels on each server for the alarm trigger rules which are convenient for unified management according to the use of all alarm trigger rules, since there are a large number of alarm trigger rules on a server, but there is commonality among most of the alarm trigger rules, which can be managed uniformly, so the same type of server layer label is used to mark most of the alarm trigger rules; assuming that there are 100 alarm trigger rules on a server, wherein the first 90 alarm trigger rules can realize alarm triggering by server layer label setting, and the remaining 10 alarm trigger rules are set separately, when the first 90 alarm trigger rules (most of the alarm trigger rules which can be managed uniformly) are met, only the server layer label on the target server needs to be used, and when the remaining 10 alarm trigger rules (a small part of the alarm trigger rules which cannot be managed uniformly) are met, the server layer label and the alarm rule layer label on the target server need to be used in combination. The purpose is to greatly reduce the workload of setting and improve work efficiency;

[0066] The plurality of server layer labels at least include first alarm silence function switch information, time zone information of the first server, first alarm silence start time information, first alarm silence duration information and / or first alarm routing mode information; the first alarm routing mode information can be added or not added according to specific circumstances, if the first alarm routing mode information is added, the alarm information can be sent through the corresponding alarm routing mode when the alarm occurs, if the first alarm routing mode information is not added, the alarm information cannot be sent out whether the alarm occurs or not;

[0067] Step 22, determining the server label table of the ID of the server and the corresponding relationship of the server layer label according to the number of servers and the number of server layer labels;

[0068] For example, in the case of adding the first alarm routing mode information, the ID of each server has 5 labels, and the server label table is as follows:

[0069] ID of the server Tag name Tag value 1 First alarm silencing function switch information 001 1 Time zone information of the first server 002 1 First alarm silencing start time information 003 1 First alarm silencing duration information 004 1 First alarm routing mode information 005 2 First alarm silencing function switch information 006 2 Time zone information of the first server 007 2 First alarm silencing start time information 008 2 First alarm silencing duration information 009 2 First alarm routing mode information 010 3 First alarm silencing function switch information 011 3 Time zone information of the first server 012 3 First alarm silencing start time information 013 3 First alarm silencing duration information 014 3 First alarm routing mode information 015 4 First alarm silencing function switch information 016 4 Time zone information of the first server 017 4 First alarm silencing start time information 018 4 First alarm silencing duration information 019 4 First alarm routing mode information 020

[0070] The specific values can be set, such as: ① the first alarm mute function switch information indicates whether to start the alarm mute function; ② the time zone information of the first server indicates the specified time zone, such as: setting the time zone to Shanghai, then calculating according to the Beijing time, setting the time zone to London, then calculating according to the London time; ③ the first alarm mute start time information indicates the time of starting the mute, the value is an integer, indicating the hour of the whole point, such as: 0, 3, 7, 15, 23; ④ the first alarm mute duration information indicates the duration of the mute, the value is an integer, the unit is hour, such as: 1, 5, 8; ⑤ the first alarm routing mode information indicates the path of sending alarm information to the user, such as: email, instant message (WeChat, QQ, microblog), telephone. Assuming that the first alarm mute function switch information in the server 1 is set according to the specific situation of the alarm trigger rule whether to start the alarm mute function (if the first alarm mute function switch information is not started by default, only the server layer tag, all alarm messages will be sent at a specific time, and if there is a server layer tag and an alarm rule layer tag, whether the second alarm mute function switch information is started or not, the second alarm mute function switch information is not started by default; if the first alarm mute function switch information is started by default, only the server layer tag, the alarm message will be muted at a specific time, and if there is a server layer tag and an alarm rule layer tag, if the second alarm mute function switch information is started by default, the alarm message will be muted at a specific time, if the second alarm mute function switch information is not started by default, the alarm message will be sent at a specific time), the time zone information of the first server is set to Shanghai by default, the first alarm mute start time information is set to 23 o'clock by default, the first alarm mute duration information is set to 8 hours by default, and the first alarm routing mode information is set to instant message by default; the parameters of the server 2, the server 3 and the server 4 are set according to the situation.

[0071] Step 23, according to the use of the alarm trigger rule, a specific plurality of alarm rule layer tags are configured on the trigger for the alarm trigger rules which are not convenient to manage uniformly, because there are a large number of alarm trigger rules on a server, although most of the alarm trigger rules have commonality, they can be managed uniformly by using the same type of server layer tag, but there are still a small part of special alarm trigger rules which need to be managed specifically, therefore, the alarm rule layer tag is used to mark a small part of the alarm trigger rules;

[0072] The plurality of alarm rule layer tags at least include: second alarm mute function switch information, second server time zone information, second alarm mute start time information, second alarm mute duration information and second alarm routing mode information;

[0073] Step 24, determining the alarm rule label table of the alarm trigger rule ID and alarm rule layer label correspondence according to the type of alarm trigger rule of each server and the number of alarm rule layer labels;

[0074] For example, the alarm rule label table is as follows:

[0075]

[0076]

[0077]

[0078] The specific values can be set, such as: ① the second alarm silence function switch information indicates whether to start the alarm silence function; ② the time zone information of the second server indicates the specified time zone, such as: setting the time zone to Shanghai, then calculating according to the Beijing time, setting the time zone to London, then calculating according to the London time; ③ the second alarm silence start time information indicates the start time of silence, the value is an integer, indicating the hour of the whole hour, such as: 0, 3, 7, 15, 23; ④ the second alarm silence duration information indicates the duration of silence, the value is an integer, the unit is hour, such as: 1, 5, 8; ⑤ the second alarm routing mode information indicates the path of sending alarm information to the user, such as: email, instant message (WeChat, QQ, microblog), telephone. Assuming that, the second alarm silence function switch information of the alarm rule ID 1 in the server 1 is set to start the silence function by default, the time zone information of the second server is set to the Beijing time zone by default, the second alarm silence start time information is set to 0 o'clock by default, the second alarm silence duration information is set to 8 hours by default, and the second alarm routing mode information is set to instant message by default; the second alarm silence function switch information of the alarm rule ID 2 in the server 1 is set to start the silence function by default, the time zone information of the second server is set to the London time zone by default, the second alarm silence start time information is set to 16 o'clock by default, the second alarm silence duration information is set to 8 hours by default, and the second alarm routing mode information is set to email by default; the second alarm silence function switch information of the alarm rule ID 3 in the server 1 is set to start the silence function by default, the time zone information of the second server is set to the Tokyo time zone by default, the second alarm silence start time information is set to 23 o'clock by default, the second alarm silence duration information is set to 8 hours by default, and the second alarm routing mode information is set to telephone by default; the parameters of the server 2, the server 3 and the server 4 are set according to the situation.

[0079] Step 25, set the priority of the second alarm routing mode information higher than the first alarm routing mode information, the priority of the time zone information of the second server higher than the time zone information of the first server, the priority of the second alarm silence start time information higher than the first alarm silence start time information, the priority of the second alarm silence duration information higher than the first alarm silence duration information, because the corresponding alarm trigger rule in the alarm rule layer tag is special and cannot be applied to the server layer tag, therefore, the routing mode, time zone and alarm silence time period information should be based on the parameters in the alarm rule layer tag, so as to ensure that the alarm information corresponding to the special alarm trigger rule can be accurately sent at the appropriate time; and the priority of the first alarm silence function switch information higher than the second alarm silence function switch information.

[0080] Step 3, the client collects monitoring data from each server according to the alarm trigger rule;

[0081] In this embodiment, the step 3 specifically comprises:

[0082] The client collects monitoring data from each server according to the alarm trigger rule, the alarm trigger rule corresponds to the monitoring data one by one, when the alarm trigger rule is the memory abnormal condition of the server, the collected monitoring data is the memory related data of the server; when the alarm trigger rule is the CPU abnormal condition of the server, the collected monitoring data is the CPU related data of the server; when the alarm trigger rule is the hard disk abnormal condition of the server, the collected monitoring data is the hard disk related data of the server; when the alarm trigger rule is the startup abnormal condition of the server, the collected monitoring data is the startup related data of the server; when the alarm trigger rule is the network connection abnormal condition of the server, the collected monitoring data is the network related data of the server;

[0083] According to the ID of the monitoring data and the ID of the server, the monitoring data table is determined, and the monitoring content is taken as an example of CPU, memory and hard disk, and the monitoring data table is specifically as follows:

[0084] ID of the monitoring data ID of the server Monitoring item name Monitoring item value Time 1 1 CPU 75% xxx 2 1 Memory 60% xxx 3 1 Hard disk 50% xxx 4 2 CPU 60% xxx 5 2 Memory 85% xxx 6 2 Hard disk 90% xxx 7 3 CPU 70% xxx 8 3 Memory 80% xxx 9 3 Hard disk 65% xxx 10 4 CPU 75% xxx 11 4 Memory 80% xxx 12 4 Hard disk 85% xxx

[0085] Step 4, obtain the monitoring data from the client, process the monitoring data according to the alarm trigger rule to obtain the alarm information, and carry the tag information into the alarm information;

[0086] In this embodiment, the step 4 specifically comprises:

[0087] Step 41, obtain the monitoring data of the required target server from the client according to the preset frequency;

[0088] Step 42, filter and extract the monitoring data to obtain new monitoring data;

[0089] Step 43, reading the target alarm trigger rule corresponding to the new monitoring data, judging whether the new monitoring data conforms to the target alarm trigger rule by comparing the new monitoring data with the target alarm trigger rule, if yes, obtaining alarm information and entering step 44; if no, ending the flow;

[0090] Step 44, finding out the ID of the target server according to the ID of the target alarm trigger rule and the alarm rule table, and then reading out a plurality of server layer tags corresponding to the target server according to the ID of the target server and the server tag table and carrying them in the alarm information; or finding out the ID of the target server according to the ID of the target alarm trigger rule and the alarm rule table, and then reading out a plurality of server layer tags corresponding to the target server according to the ID of the target server and the server tag table, and simultaneously reading out the alarm rule layer tag according to the ID of the target alarm trigger rule and the alarm rule tag table, and carrying the server layer tag and the alarm rule layer tag in the alarm information.

[0091] In the embodiment, after the step 42, the method further comprises:

[0092] storing the new monitoring data into a database for later management.

[0093] Step 5, dynamically selecting the corresponding alarm routing mode, time zone and alarm silence time period according to the tag information carried in the alarm information.

[0094] In the embodiment, the step 5 specifically comprises:

[0095] Step 51, judging the tag information carried in the alarm information, if the tag information carried in the alarm information is the server layer tag, entering step 52; if the tag information carried in the alarm information is the server layer tag and the alarm rule layer tag, entering step 54.

[0096] Step 52, using a plurality of server layer tags commonly used on the target server, if the first alarm routing mode information is not included in the plurality of server layer tags, it means that all alarm information cannot be sent in any time period; if the first alarm routing mode information is included in the plurality of server layer tags, entering step 53.

[0097] Step 53, judging whether to start the silence function according to the first alarm silence function switch information, if yes, calculating the alarm silence time period according to the time zone information of the first server, the first alarm silence start time information and the first alarm silence duration information, all the alarm information in the alarm silence time period cannot be sent, all the alarm information outside the alarm silence time period can be sent through the alarm routing mode specified in the first alarm routing mode information; if no, all the alarm information in any time period can be sent;

[0098] Step 54, judging whether to start the silence function according to the first alarm silence function switch information, if yes, entering step 55; if no, all the alarm information in any time period can be sent through the alarm routing mode specified in the second alarm routing mode information;

[0099] Step 55, judging whether to start the silence function according to the second alarm silence function switch information, if yes, calculating the alarm silence time period according to the time zone information of the second server, the second alarm silence start time information and the second alarm silence duration information, all the alarm information in the alarm silence time period cannot be sent, all the alarm information outside the alarm silence time period can be sent through the alarm routing mode specified in the second alarm routing mode information; if no, all the alarm information in any time period can be sent.

[0100] Step 6, sending the alarm information to the user for notification according to the selected alarm routing mode, time zone and alarm silence time period.

[0101] In the embodiment, the step 6 specifically includes:

[0102] When the tag information carried in the alarm information is the server layer tag, if the first alarm routing mode information is included in the plurality of server layer tags and the first alarm silence function switch information judges to start the silence function, the alarm information is sent to the user for notification according to the alarm routing mode, time zone and alarm silence time period corresponding to the first alarm routing mode information, the time zone information of the first server, the first alarm silence start time information and the first alarm silence duration information;

[0103] When the tag information carried in the alarm information is the server layer tag and the alarm rule layer tag, if the first alarm silence function switch information and the second alarm silence function switch information both judge to start the silence function, the alarm information is sent to the user for notification according to the alarm routing mode, time zone and alarm silence time period corresponding to the second alarm routing mode information, the time zone information of the second server, the second alarm silence start time information and the second alarm silence duration information.

[0104] As Figure 2As shown, the alarm routing system of the present application comprises an alarm rule management module, a label management module, a monitoring data collection module, a monitoring alarm core module, an alarm routing management module and an alarm notification module.

[0105] The alarm rule management module is configured to configure alarm triggering rules of a plurality of servers for use by the monitoring alarm core module, provide a management interface of the alarm rules so that a user can configure various alarm triggering rules through the management interface of the alarm rules, and provide a reading interface of the alarm rules for reading by the monitoring alarm core module.

[0106] The label management module is configured to configure a plurality of pieces of label information according to the alarm triggering rules, the label information including server layer labels and alarm rule layer labels; the monitoring alarm core module reads these label information and carries it into alarm information; a management interface of the labels is provided so that a user can edit various labels such as time zone control labels and alarm routing silence labels through the management interface of the labels, and a reading interface of the labels is provided for reading by the monitoring alarm core module.

[0107] The monitoring data collection module is configured to collect monitoring data from each server according to the alarm triggering rules by the client; wait for the monitoring alarm core module to pull the monitoring data, and in addition, it can also receive instructions issued from the monitoring alarm core module to control how to collect the monitoring data, such as the frequency of collection, which monitoring data to collect, etc.

[0108] The monitoring alarm core module is configured to obtain monitoring data from the client and process the monitoring data according to the alarm triggering rules to obtain alarm information; and carry the label information into the alarm information; in addition, it can also issue instructions to the monitoring data collection module to manage the monitoring data collection module; when processing alarm data, read the corresponding alarm rules from the alarm rule management module to determine whether an alarm is generated; when an alarm is generated, read the corresponding label information (including the two layers of label information of the server layer and the alarm rule layer) from the label management module, carry these label information in the alarm information, and send them to the alarm routing management module together.

[0109] The alarm routing management module is configured to receive alarm information sent from the monitoring alarm core module, dynamically select the corresponding alarm routing mode, time zone and alarm silence time period according to the label information carried in the alarm information; dynamically select the appropriate alarm routing, and determine whether the corresponding alarm routing remains silent according to the time zone and alarm silence time information in the label information.

[0110] The alarm notification module is configured to send alarm information to users for notification according to selected alarm routing modes, time zones and alarm silence time periods; common alarm routing modes include email, instant message, telephone and the like.

[0111] The alarm routing system is deployed under a Linux system, and the monitoring data collection module is deployed on a server that needs to collect monitoring data, and then the monitoring alarm core module is configured to collect which monitoring data, the alarm rule management module is configured to configure alarm rules, the tag management module is configured to configure tags, and the alarm routing management module is configured to access alarm routing modes to be used; when an alarm is triggered, the monitoring system automatically selects which alarm routing mode according to tag information, and determines whether to perform alarm silence according to time zone tag information. First, the monitoring data collection module collects monitoring data from the server, and after processing by the monitoring alarm core module, the monitoring data is stored in the database; then the monitoring alarm core module reads alarm rules from the alarm rule management module to determine whether an alarm is generated; if an alarm is generated, the monitoring alarm core module reads tag information (including server layer tags and alarm rule layer tags) from the tag management module, and carries the server layer tags and the alarm rule layer tags to the alarm information and sends them to the alarm routing management module. Finally, the alarm routing management module dynamically selects a suitable alarm routing mode according to the tag information in the alarm information, and determines whether to keep the corresponding alarm routing mode silent according to the time zone and alarm silence information in the tag. The two levels of tags can be used to control the selection of alarm routing modes, time zone selection and alarm silence time period configuration.

[0112] The alarm rule management module specifically includes a rule configuration unit and a rule table establishing unit. Figure 3

[0113] The rule configuration unit is configured to provide an alarm rule management interface on the server, and users configure a plurality of server alarm triggering rules on each server through the alarm rule management interface, and the server is provided with an alarm rule reading interface for the monitoring alarm core module to read; the plurality of server alarm triggering rules at least include a server memory abnormal condition, a server CPU abnormal condition, a server hard disk abnormal condition, a server startup abnormal condition and a server network connection abnormal condition.

[0114] The rule table establishing unit is configured to determine an alarm rule table of the ID of the server corresponding to the ID of the alarm triggering rule according to the type of the alarm triggering rule of each server and the number of servers.

[0115] The tag management module specifically includes a tag configuration unit and a tag table establishing unit. Figure 4 ​As shown, the label management module specifically comprises: a service label configuration unit, a service label table establishing unit, a rule label configuration unit, a rule label table establishing unit and a priority configuration unit.

[0116] The service label configuration unit is configured to configure a plurality of server layer labels on each server for alarm triggering rules that are convenient to manage uniformly according to the use of all alarm triggering rules, wherein the plurality of server layer labels at least include: first alarm silence function switch information, time zone information of the first server, first alarm silence start time information, first alarm silence duration information and / or first alarm routing mode information.

[0117] The service label table establishing unit is configured to determine a server label table of the ID of the server and the corresponding relationship of the server layer label according to the number of servers and the number of server layer labels.

[0118] The rule label configuration unit is configured to configure a plurality of alarm rule layer labels on the trigger for alarm triggering rules that are not convenient to manage uniformly according to the use of the alarm triggering rules, wherein the plurality of alarm rule layer labels at least include: second alarm silence function switch information, time zone information of the second server, second alarm silence start time information, second alarm silence duration information and second alarm routing mode information.

[0119] The rule label table establishing unit is configured to determine an alarm rule label table of the ID of the alarm triggering rule and the corresponding relationship of the alarm rule layer label according to the type of the alarm triggering rule of each server and the number of alarm rule layer labels.

[0120] The priority configuration unit is configured to set the priority of the second alarm routing mode information higher than that of the first alarm routing mode information, the priority of the time zone information of the second server higher than that of the time zone information of the first server, the priority of the second alarm silence start time information higher than that of the first alarm silence start time information, the priority of the second alarm silence duration information higher than that of the first alarm silence duration information, and the priority of the first alarm silence function switch information higher than that of the second alarm silence function switch information.

[0121] The monitoring data collection module specifically comprises:

[0122] The client collects monitoring data from each server according to an alarm triggering rule corresponding to the monitoring data, and the monitoring data collected is memory related data of the server when the alarm triggering rule is an abnormal condition of memory of the server, is CPU related data of the server when the alarm triggering rule is an abnormal condition of CPU of the server, is hard disk related data of the server when the alarm triggering rule is an abnormal condition of hard disk of the server, is start related data of the server when the alarm triggering rule is an abnormal condition of start of the server, and is network related data of the server when the alarm triggering rule is an abnormal condition of network connection of the server.

[0123] As shown in the figure, the monitoring alarm core module specifically comprises a data acquisition unit, a data extraction unit, a data judgment unit and a label carrying unit. Figure 5 As shown in the figure, the monitoring alarm core module specifically comprises a data acquisition unit, a data extraction unit, a data judgment unit and a label carrying unit.

[0124] The data acquisition unit is configured to acquire monitoring data of a target server from the client according to a preset frequency.

[0125] The data extraction unit is configured to filter and extract the monitoring data to obtain new monitoring data, and store the new monitoring data into a database.

[0126] The data judgment unit is configured to read a target alarm triggering rule corresponding to the new monitoring data, compare the new monitoring data with the target alarm triggering rule to determine whether the new monitoring data meets the target alarm triggering rule, obtain alarm information if yes, and enter the label carrying unit; and end the process if no.

[0127] The label carrying unit is configured to find an ID of a corresponding target server according to an ID of the target alarm triggering rule and an alarm rule table, read a plurality of server layer labels corresponding to the target server according to the ID of the target server and a server label table, and carry the server layer labels in the alarm information; or find an ID of a corresponding target server according to an ID of the target alarm triggering rule and an alarm rule table, read a plurality of server layer labels corresponding to the target server according to the ID of the target server and a server label table, read an alarm rule layer label according to the ID of the target alarm triggering rule and an alarm rule label table, and carry the server layer labels and the alarm rule layer label in the alarm information.

[0128] As shown in the figure, the alarm routing management module specifically comprises a label judgment unit, a routing information judgment unit, a single switch judgment unit, a double switch first judgment unit and a double switch second judgment unit. Figure 6 As shown in the figure, the alarm routing management module specifically comprises a label judgment unit, a routing information judgment unit, a single switch judgment unit, a double switch first judgment unit and a double switch second judgment unit.

[0129] The label judging unit is configured to judge the label information carried in the alarm information, and if the label information carried in the alarm information is a server layer label, the alarm information enters the routing information judging unit; if the label information carried in the alarm information is a server layer label and an alarm rule layer label, the alarm information enters the double-switch first judging unit;

[0130] The routing information judging unit is configured to use a plurality of server layer labels commonly used on the target server, and if the first alarm routing mode information is not included in the plurality of server layer labels, it is indicated that all alarm information in any time period cannot be sent; if the first alarm routing mode information is included in the plurality of server layer labels, the alarm information enters the single-switch judging unit;

[0131] The single-switch judging unit is configured to judge whether the silence function is started according to the first alarm silence function switch information, and if yes, the alarm silence time period is calculated according to the time zone information of the first server, the first alarm silence start time information and the first alarm silence duration information, all alarm information in the alarm silence time period cannot be sent, and all alarm information outside the alarm silence time period can be sent through the alarm routing mode specified in the first alarm routing mode information; if no, all alarm information in any time period can be sent;

[0132] The double-switch first judging unit is configured to judge whether the silence function is started according to the first alarm silence function switch information, and if yes, the alarm information enters the double-switch second judging unit; if no, all alarm information in any time period can be sent through the alarm routing mode specified in the second alarm routing mode information;

[0133] The double-switch second judging unit is configured to judge whether the silence function is started according to the second alarm silence function switch information, and if yes, the alarm silence time period is calculated according to the time zone information of the second server, the second alarm silence start time information and the second alarm silence duration information, all alarm information in the alarm silence time period cannot be sent, and all alarm information outside the alarm silence time period can be sent through the alarm routing mode specified in the second alarm routing mode information; if no, all alarm information in any time period can be sent.

[0134] The alarm notification module specifically includes:

[0135] When the label information carried in the alarm information is the server layer label, if the first alarm routing mode information is included in the plurality of server layer labels and the first alarm silence function switch information judges to open the silence function, the alarm information is sent to the user for notification according to the alarm routing mode, the time zone and the alarm silence time period corresponding to the first alarm routing mode information, the time zone information of the first server, the first alarm silence start time information and the first alarm silence duration information.

[0136] When the label information carried in the alarm information is the server layer label and the alarm rule layer label, if the first alarm silence function switch information and the second alarm silence function switch information both judge to open the silence function, the alarm information is sent to the user for notification according to the alarm routing mode, the time zone and the alarm silence time period corresponding to the second alarm routing mode information, the time zone information of the second server, the second alarm silence start time information and the second alarm silence duration information.

[0137] In summary, the present application has the following advantages:

[0138] ①The label management is taken as a separate function module, and is divided into two layers of labels of the server layer and the alarm rule layer, the two layers of labels are flexibly configured, and then the alarm routing management module is used to comprehensively judge which alarm routing is used, so that the alarm routing is dynamically selected.

[0139] ②In the label management module, the two layers of labels of the server layer and the alarm rule layer are both added with the time zone control label and the alarm silence label, so that different alarm routings are selected in different time zones, and the function that whether the alarm routing is silent in a certain time period is realized.

[0140] As shown in Figure 7 the embodiment of the present application further provides an electronic device, which comprises a memory, a processor and a computer program stored in the memory and executable on the processor, and the processor realizes the alarm routing method of the cloud platform monitoring system when executing the program.

[0141] As shown in Figure 8 the embodiment of the present application further provides a computer readable storage medium, which stores a computer program, and the program is executed by the processor to realize the alarm routing method of the cloud platform monitoring system.

[0142] In addition, each function unit in each embodiment of the present application can be integrated in one processing unit, or each unit can be physically present alone, or two or more units can be integrated in one unit. The integrated unit can be realized in the form of hardware or in the form of a software function unit.

[0143] If the integrated unit is implemented in the form of a software function unit and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application or the entire or part of the technical solutions that essentially contribute to the prior art can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to execute all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and various media that can store program codes.

[0144] The above only describes some embodiments of the present application, and does not limit the protection scope of the present application. Any equivalent device or equivalent process transformation, or direct or indirect application in other related technical fields based on the content of the present application specification and drawings are also included in the patent protection scope of the present application.

Claims

1. An alarm routing method for a cloud platform monitoring system, characterized in that, Includes the following steps: Step 1: Configure alarm triggering rules for multiple types of servers; Step 2: Configure multiple tag information entries according to the alarm triggering rules. The tag information includes server-level tags and alarm rule-level tags. The server layer label includes at least: first alarm silence function switch information, time zone information of the first server, first alarm silence start time information, first alarm silence duration information and / or first alarm routing method information; the alarm rule layer label includes at least: second alarm silence function switch information, time zone information of the second server, second alarm silence start time information, second alarm silence duration information and second alarm routing method information; Step 3: The client collects monitoring data from each server according to the alarm triggering rules; Step 4: Obtain monitoring data from the client, process the monitoring data according to the alarm triggering rules to obtain alarm information, and include the tag information in the alarm information; Step 5: Dynamically select the corresponding alarm routing method, time zone, and alarm silence period based on the tag information carried in the alarm information; Step 6: Send alarm information to the user to notify them according to the selected alarm routing method, time zone, and alarm silence period.

2. The alarm routing method for a cloud platform monitoring system as described in claim 1, characterized in that, Step 1 specifically includes: Step 11: Configure alarm triggering rules for multiple types of servers on each server. The alarm triggering rules for multiple types of servers include at least the following: abnormal memory conditions, abnormal CPU conditions, abnormal hard disk conditions, abnormal startup conditions, and abnormal network connection conditions. Step 12: Determine the alarm rule table that maps server IDs to alarm trigger rule IDs based on the type of alarm trigger rule for each server and the number of servers.

3. The alarm routing method for a cloud platform monitoring system as described in claim 2, characterized in that, Step 2 specifically includes: Step 21: Based on the usage of all alarm triggering rules, configure multiple common server-level tags on each server for alarm triggering rules that are easy to manage in a unified manner; Step 22: Determine the server tag table that maps server IDs to server layer tags based on the number of servers and the number of server layer tags; Step 23: Based on the usage of the alarm triggering rules, configure a specific plurality of alarm rule layer tags on the trigger for alarm triggering rules that are inconvenient to manage uniformly; Step 24: Determine the alarm rule tag table that corresponds the ID of the alarm triggering rule to the alarm rule layer tag based on the type of alarm triggering rule and the number of alarm rule layer tags for each server. Step 25: Set the priority of the second alarm routing method information to be higher than the first alarm routing method information, the priority of the time zone information of the second server to be higher than the time zone information of the first server, the priority of the second alarm silence start time information to be higher than the first alarm silence start time information, the priority of the second alarm silence duration information to be higher than the first alarm silence duration information, and the priority of the first alarm silence function switch information to be higher than the second alarm silence function switch information.

4. The alarm routing method for a cloud platform monitoring system as described in claim 3, characterized in that, Step 3 specifically includes: The client collects monitoring data from each server according to alarm triggering rules. Each alarm triggering rule corresponds one-to-one with the monitoring data. When the alarm triggering rule is a server memory anomaly, the collected monitoring data is related to the server's memory; when the alarm triggering rule is a server CPU anomaly, the collected monitoring data is related to the server's CPU; when the alarm triggering rule is a server hard disk anomaly, the collected monitoring data is related to the server's hard disk; when the alarm triggering rule is a server startup anomaly, the collected monitoring data is related to the server's startup; and when the alarm triggering rule is a server network connection anomaly, the collected monitoring data is related to the server's network.

5. The alarm routing method for a cloud platform monitoring system as described in claim 4, characterized in that, Step 4 specifically includes: Step 41: Obtain the required monitoring data of the target server from the client at a preset frequency; Step 42: Filter and extract the monitoring data to obtain new monitoring data; Step 43: Read the target alarm triggering rule corresponding to the new monitoring data. By comparing the new monitoring data with the target alarm triggering rule, determine whether the new monitoring data meets the target alarm triggering rule. If yes, obtain the alarm information and proceed to step 44; otherwise, end the process. Step 44: Find the corresponding target server ID based on the target alarm triggering rule ID and the alarm rule table, and then read the corresponding multiple server layer tags based on the target server ID and the server tag table and include them in the alarm information; or find the corresponding target server ID based on the target alarm triggering rule ID and the alarm rule table, and then read the corresponding multiple server layer tags based on the target server ID and the server tag table. At the same time, read the alarm rule layer tags based on the target alarm triggering rule ID and the alarm rule tag table, and include the server layer tags and alarm rule layer tags in the alarm information.

6. The alarm routing method for a cloud platform monitoring system as described in claim 5, characterized in that, After step 42, the following is also included: The new monitoring data is stored in the database.

7. The alarm routing method for a cloud platform monitoring system as described in claim 6, characterized in that, Step 5 specifically includes: Step 51: Determine the tag information carried in the alarm information. If the tag information carried in the alarm information is a server-level tag, proceed to step 52; if the tag information carried in the alarm information is both a server-level tag and an alarm rule-level tag, proceed to step 54. Step 52: Use multiple server-layer tags that are common on the target server. If the multiple server-layer tags do not include the first alarm routing method information, it means that no alarm information can be sent within any time period. If the multiple server-layer tags include the first alarm routing method information, proceed to step 53. Step 53: Determine whether the silence function is enabled based on the first alarm silence function switch information. If yes, calculate the alarm silence period based on the time zone information of the first server, the first alarm silence start time information, and the first alarm silence duration information. During the alarm silence period, all alarm information cannot be sent. Outside the alarm silence period, all alarm information can be sent through the alarm routing method specified in the first alarm routing method information. If no, all alarm information can be sent within any time period. Step 54: Determine whether to enable the silence function based on the first alarm silence function switch information. If yes, proceed to step 55; otherwise, all alarm information within any time period can be sent through the alarm routing method specified in the second alarm routing method information. Step 55: Determine whether the silence function is enabled based on the second alarm silence function switch information. If yes, calculate the alarm silence period based on the time zone information of the second server, the second alarm silence start time information, and the second alarm silence duration information. During the alarm silence period, all alarm information cannot be sent. Outside the alarm silence period, all alarm information can be sent through the alarm routing method specified in the second alarm routing method information. If no, all alarm information can be sent within any time period.

8. The alarm routing method for a cloud platform monitoring system as described in claim 7, characterized in that, Step 6 specifically includes: When the tag information carried in the alarm information is a server layer tag, if the multiple server layer tags include the first alarm routing method information and the first alarm silence function switch information is determined to be enabled, then the alarm information is sent to the user for notification based on the alarm routing method, time zone information of the first server, first alarm silence start time information and first alarm silence duration information corresponding to the first alarm routing method information, time zone and alarm silence time period. When the tag information carried in the alarm information is a server layer tag and an alarm rule layer tag, if both the first alarm silence function switch information and the second alarm silence function switch information are determined to be that the silence function is enabled, then the alarm information is sent to the user for notification according to the alarm routing method information, the time zone information where the second server is located, the second alarm silence start time information, and the alarm silence duration information corresponding to the second alarm silence duration information.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements an alarm routing method for a cloud platform monitoring system as described in any one of claims 1 to 8.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements an alarm routing method for a cloud platform monitoring system as described in any one of claims 1 to 8.

Citation Information

Patent Citations

  • Monitoring alarm processing method, device, equipment and medium

    CN114036022A

  • Prometheus-based index alarm management system and method

    CN115473783A