Alarm event sheet processing method and device, storage medium and electronic equipment

Abstract

The application discloses a kind of processing methods, device, storage medium and electronic equipment of alarm event sheet.It relates to the technical field of financial technology, wherein the method comprises: obtaining M alarm event sheets, wherein the M alarm event sheets include X first alarm event sheets and Y second alarm event sheets, each first alarm event sheet is an alarm event sheet corresponding to an abnormal service, and the abnormal service is processed by P network devices, and each second alarm event sheet is an alarm event sheet corresponding to a faulty network device;According to the P first device name corresponding to each first alarm event sheet and the second device name corresponding to each second alarm event sheet, the M alarm event sheets are processed by merging the answer sheet, wherein the merging answer sheet processing is used to batch close processing of the alarm event sheets corresponding to the same network device.The present application solves the technical problem of low processing efficiency in the prior art by manually processing alarm event sheets.

Description

Technical Field

[0001] This application relates to the field of financial technology, and more specifically, to a method, apparatus, storage medium, and electronic device for processing alarm event tickets. Background Technology

[0002] Currently, due to the complexity of data center operations, when a network device malfunctions, multiple alarm messages and alarm event tickets will be generated. For example, when a switch malfunctions, the switch itself, other switches connected to it, and abnormal services carried on the aforementioned switches will all generate corresponding alarm messages and alarm event tickets.

[0003] In existing technologies, when processing multiple alarm event tickets, maintenance personnel typically need to log in to the event management platform and manually complete the response process. However, some alarms often require investigation and confirmation of network devices before normal operation can be restored, resulting in a large backlog of alarm event tickets on the event management platform. Maintenance personnel then have to manually confirm and process these numerous alarm event tickets one by one, leading to low processing efficiency.

[0004] There is currently no effective solution to the above problems. Summary of the Invention

[0005] This application provides a method, apparatus, storage medium, and electronic device for processing alarm event tickets, so as to at least solve the technical problem of low processing efficiency in the prior art when processing alarm event tickets manually.

[0006] According to one aspect of this application, a method for processing alarm event tickets is provided, comprising: acquiring M alarm event tickets, wherein the M alarm event tickets include X first alarm event tickets and Y second alarm event tickets, each first alarm event ticket being an alarm event ticket corresponding to an abnormal service, the abnormal service being processed by P network devices, each second alarm event ticket being an alarm event ticket corresponding to a faulty network device, X, Y, and P being positive integers, and M = X + Y; performing a merge response processing on the M alarm event tickets according to the P first device names corresponding to each first alarm event ticket and the second device names corresponding to each second alarm event ticket, wherein the P first device names are the device names corresponding to the P network devices, the second device names are the device names corresponding to the faulty network device, and the merge response processing is used to batch close alarm event tickets corresponding to the same network device.

[0007] Furthermore, after obtaining M alarm event tickets, the method further includes: obtaining the alarm time of each alarm event ticket in the M alarm event tickets; dividing the M alarm event tickets into N data sets according to the alarm time, wherein the alarm event tickets in each data set have the same alarm time, and N is a positive integer; and assigning the first alarm event ticket and the second alarm event ticket in each data set to the first subset and the second subset corresponding to that data set, respectively.

[0008] Further, the M alarm event tickets are merged and processed according to the P first device names corresponding to each first alarm event ticket and the second device names corresponding to each second alarm event ticket, including: Step 1, obtaining the first device name of each network device among the P network devices corresponding to the i-th first alarm event ticket, to obtain the P first device names corresponding to the i-th first alarm event ticket, where the i-th first alarm event ticket is any one of the X first alarm event tickets, and i is a positive integer; Step 2, determining the first subset containing the i-th first alarm event ticket as the first target subset, and determining the second subset corresponding to the first target subset. The first target subset is merged into a second target subset, wherein the second target subset corresponds to the same data set as the first target subset; Step 3, the second alarm event in the second target subset is determined as the second target alarm event; Step 4, the second device name corresponding to the second target alarm event is obtained; Step 5, the merged response processing is performed on the i-th first alarm event and the second target alarm event based on the P first device names corresponding to the i-th first alarm event and the second device name corresponding to the second target alarm event, and the processing result is obtained; Step 6, the process of steps one to five is repeated until the merged response processing of the M alarm event events is completed.

[0009] Further, obtaining the first device name of each of the P network devices corresponding to the i-th first alarm event includes: obtaining the service IP corresponding to the abnormal service in the i-th first alarm event; obtaining the first device name of each of the P network devices corresponding to the i-th first alarm event from the LAN connection query system based on the service IP, thus obtaining the P first device names corresponding to the i-th first alarm event, wherein the LAN connection query system is used to store device information of the P network devices that process the abnormal service, and the device information includes at least the first device name of each of the P network devices.

[0010] Further, the merging response processing is performed on the i-th first alarm event and the second target alarm event based on the P first device names corresponding to the i-th first alarm event and the second device name corresponding to the second target alarm event, to obtain the processing result. This includes: detecting whether the second device name corresponding to the second target alarm event is the same as any one of the first device names corresponding to the i-th first alarm event; if the second device name corresponding to the second target alarm event is the same as any one of the first device names corresponding to the i-th first alarm event, setting a target flag for the second target alarm event, wherein the target flag is used to mark that the network device corresponding to the second target alarm event is included among the P network devices corresponding to the i-th first alarm event; and performing the merging response processing on the i-th first alarm event and the second target alarm event based on the target flag to obtain the processing result.

[0011] Furthermore, after detecting whether the second device name corresponding to the second target alarm event is the same as any of the first device names corresponding to the i-th first alarm event, the method further includes: if the second device name corresponding to the second target alarm event is different from each of the first device names corresponding to the i-th first alarm event, then setting the target flag for the second alarm event is prohibited.

[0012] Further, the M alarm event tickets are merged and answered based on the P first device names corresponding to each first alarm event ticket and the second device name corresponding to each second alarm event ticket, including: obtaining alarm confirmation information for each network device, wherein the alarm confirmation information is used to indicate that the network device has recovered from a fault state to a normal state; and performing the merged and answered process on the M alarm event tickets based on each alarm confirmation information, the P first device names corresponding to each first alarm event ticket, and the second device name corresponding to each second alarm event ticket.

[0013] According to another aspect of this application, an alarm event ticket processing apparatus is also provided, comprising: an acquisition module, configured to acquire M alarm event tickets, wherein the M alarm event tickets include X first alarm event tickets and Y second alarm event tickets, each first alarm event ticket being an alarm event ticket corresponding to an abnormal service, the abnormal service being processed by P network devices, each second alarm event ticket being an alarm event ticket corresponding to a faulty network device, X, Y, and P being positive integers, and M = X + Y; and a processing module, configured to perform merge response processing on the M alarm event tickets according to the P first device names corresponding to each first alarm event ticket and the second device names corresponding to each second alarm event ticket, wherein the P first device names are the device names corresponding to the P network devices, the second device names are the device names corresponding to the faulty network device, and the merge response processing is used to perform batch closure processing on alarm event tickets corresponding to the same network device.

[0014] According to another aspect of this application, a computer-readable storage medium is also provided, in which a computer program is stored, wherein the computer program is configured to execute the above-described alarm event processing method at runtime.

[0015] According to another aspect of this application, an electronic device is also provided, the electronic device including one or more processors; a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement a method for running the programs, wherein the programs are configured to execute the above-described alarm event handling method during runtime.

[0016] In this application, M alarm event tickets are first obtained, including X first alarm event tickets and Y second alarm event tickets. Each first alarm event ticket corresponds to an abnormal service, which is handled by P network devices. Each second alarm event ticket corresponds to a faulty network device. X, Y, and P are positive integers, and M = X + Y. Then, the M alarm event tickets are merged and answered according to the P first device names corresponding to each first alarm event ticket and the second device names corresponding to each second alarm event ticket. The P first device names are the device names corresponding to the P network devices, and the second device names are the device names corresponding to the faulty network device. The merged and answered process is used to batch close alarm event tickets corresponding to the same network device.

[0017] In the above process, by merging and responding to the M alarm event tickets according to the P first device names corresponding to each first alarm event ticket and the second device name corresponding to each second alarm event ticket, it is possible to automatically close alarm event tickets corresponding to the same network device in batches, without having to manually respond to each alarm event ticket one by one. This achieves the technical effect of improving the processing efficiency of alarm event tickets, and solves the technical problem of low processing efficiency in the existing technology of manually processing alarm event tickets. Attached Figure Description

[0018] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0019] Figure 1 This is a flowchart of an optional alarm event form processing method according to an embodiment of this application;

[0020] Figure 2 This is a flowchart of another optional alarm event form processing method according to an embodiment of this application;

[0021] Figure 3 This is a schematic diagram of an optional alarm event processing device according to an embodiment of this application;

[0022] Figure 4 This is a schematic diagram of an optional electronic device according to an embodiment of this application. Detailed Implementation

[0023] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0024] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0025] It should be noted that the alarm event processing method, apparatus, storage medium and electronic device of this application can be used in the financial technology field, as well as in other fields other than the financial technology field. The application field of the alarm event processing method, apparatus, storage medium and electronic device of this application is not limited.

[0026] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, use and processing of the relevant data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and corresponding operation portals are provided for users to choose to authorize or refuse.

[0027] Example 1

[0028] According to an embodiment of this application, an embodiment of an optional alarm event form processing method is provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0029] Figure 1 This is a flowchart of an optional alarm event ticket processing method according to an embodiment of this application, such as... Figure 1 As shown, the method includes the following steps:

[0030] Step S101: Obtain M alarm event tickets, where the M alarm event tickets include X first alarm event tickets and Y second alarm event tickets. Each first alarm event ticket is an alarm event ticket corresponding to an abnormal service. The abnormal service is handled by P network devices. Each second alarm event ticket is an alarm event ticket corresponding to a faulty network device. X, Y, and P are positive integers, and M = X + Y.

[0031] In an optional embodiment, an alarm event ticket processing system can serve as the execution entity for the alarm event ticket processing method in this application embodiment. For ease of description, the alarm event ticket processing and verification system will be referred to as the system below. The alarm event ticket processing system includes a centralized monitoring platform, an event ticket management system, an automatic response platform, and a local area network (LAN) connection query system. The centralized monitoring platform monitors whether network devices are malfunctioning and generates alarm information when network devices malfunction. The event ticket management system generates alarm event tickets based on the alarm information generated by the centralized monitoring platform. The automatic response platform retrieves alarm event tickets from the event ticket management system. The LAN connection query system stores device information for multiple network devices processing services.

[0032] In step S101, the abnormal service is an alarm event record corresponding to the target service carried on the network device when the network device fails. The network device includes, but is not limited to, a switch.

[0033] Step S102: Perform merge response processing on M alarm event tickets according to the P first device names corresponding to each first alarm event ticket and the second device name corresponding to each second alarm event ticket. The merge response processing is used to batch close alarm event tickets corresponding to the same network device.

[0034] In step S102, the P first device names are the device names corresponding to the P network devices, and the second device names are the device names corresponding to the faulty network devices.

[0035] In this embodiment, the system can determine whether to set a target flag for a second alarm event by detecting whether the second device name is the same as any one of the P first device names based on the P first device names corresponding to each first alarm event and the second device name corresponding to each second alarm event. If the second device name is the same as any one of the P first device names, the system can set a target flag for the second alarm event and perform batch closure processing on M alarm event orders based on the target flag.

[0036] Based on the scheme defined in steps S101 to S102 above, it can be understood that in this embodiment, firstly, M alarm event tickets are obtained, wherein the M alarm event tickets include X first alarm event tickets and Y second alarm event tickets. Each first alarm event ticket is an alarm event ticket corresponding to an abnormal service, and the abnormal service is handled by P network devices. Each second alarm event ticket is an alarm event ticket corresponding to a faulty network device. X, Y, and P are positive integers, and M = X + Y. Then, according to the P first device names corresponding to each first alarm event ticket and the second device name corresponding to each second alarm event ticket, the M alarm event tickets are merged and answered. Here, the P first device names are the device names corresponding to the P network devices, and the second device names are the device names corresponding to the faulty network devices. The merged and answered process is used to batch close alarm event tickets corresponding to the same network device.

[0037] It should be noted that in the above process, by merging and responding to M alarm event tickets according to the P first device names corresponding to each first alarm event ticket and the second device name corresponding to each second alarm event ticket, it is possible to automatically close alarm event tickets corresponding to the same network device in batches. This eliminates the need for manual response to each alarm event ticket, thereby improving the processing efficiency of alarm event tickets and solving the technical problem of low processing efficiency in existing technologies that rely on manual processing of alarm event tickets.

[0038] Optionally, in the alarm event processing method provided in this application embodiment, after obtaining M alarm event tickets, the method includes: obtaining the alarm time of each alarm event ticket in the M alarm event tickets; dividing the M alarm event tickets into N data sets according to the alarm time, wherein the alarm event tickets in each data set have the same alarm time, and N is a positive integer; and assigning the first alarm event ticket and the second alarm event ticket in each data set to the first subset and the second subset corresponding to the data set, respectively.

[0039] In this embodiment, as Figure 2As shown, after obtaining M alarm event tickets, the system can obtain the alarm time of each alarm event ticket in the M alarm event tickets, and divide the M alarm event tickets into N data sets according to the alarm time. For example, if there are M alarm event tickets including Alarm Event Ticket 1, Alarm Event Ticket 2, Alarm Event Ticket 3, Alarm Event Ticket 1, Alarm Event Ticket 2, and Alarm Event Ticket 3, where the alarm time for Alarm Event Ticket 1, Alarm Event Ticket 3, Alarm Event Ticket 1, Alarm Event Ticket 4, and Alarm Event Ticket 5 is 17:30, and the alarm time for Alarm Event Ticket 2, Alarm Event Ticket 2, and Alarm Event Ticket 3 is 17:31, then the system can divide the M alarm event tickets into data set A and data set B, where data set A = {Alarm Event Ticket 1, Alarm Event Ticket 1, Alarm Event Ticket 3}, and data set B = {Alarm Event Ticket 2, Alarm Event Ticket 2, Alarm Event Ticket 3}. The system can then divide the first alarm event and the second alarm event in each data set into the first subset and the second subset corresponding to that data set, respectively. For example, the system can divide data set A into a first subset a and a second subset b, where the first subset a = {first alarm event 1, first alarm event 3} and the second subset b = {second alarm event 1, second alarm event 4, second alarm event 5}.

[0040] It should be noted that by dividing the M alarm event tickets into N data sets based on the alarm time, and further dividing the first and second alarm event tickets in each data set into the first and second subsets corresponding to that data set, data preparation is provided for the subsequent merging and response processing of the M alarm event tickets based on the P first device names corresponding to each first alarm event ticket and the second device name corresponding to each second alarm event ticket.

[0041] Optionally, in the alarm event processing method provided in the embodiments of this application, such as Figure 2 As shown, the process of merging and responding to M alarm event tickets based on the P first device names corresponding to each first alarm event ticket and the second device name corresponding to each second alarm event ticket includes the following steps:

[0042] Step 1: Obtain the first device name of each of the P network devices corresponding to the i-th first alarm event, thus obtaining the P first device names corresponding to the i-th first alarm event, where i is a positive integer.

[0043] In step one, the i-th first alarm event can be any one of the X first alarm event events. For example, the i-th first alarm event can be the first alarm event 1 in the first subset a corresponding to the data set A, or it can be the first alarm event 3 in the first subset a corresponding to the data set A.

[0044] Step 2: Determine the first subset containing the i-th first alarm event as the first target subset, and determine the second subset corresponding to the first target subset as the second target subset.

[0045] In step two, the second target subset corresponds to the same data set as the first target subset, meaning that the alarm events in the second target subset and the first target subset have the same alarm time. For example, when the i-th first alarm event is the aforementioned first alarm event 1, the system can use the first subset a as the first target subset and the first subset b as the second target subset.

[0046] Step 3: Determine the second alarm event in the second target subset as the second target alarm event.

[0047] In step three, the system can determine the second alarm event in the second target subset as the second target alarm event. For example, the system can take the second alarm event 1, the second alarm event 4 and the second alarm event 5 in the first subset b as the second target alarm event.

[0048] Step 4: Obtain the name of the second device corresponding to the second target alarm event.

[0049] For example, the system can obtain the second device name corresponding to the second alarm event 1, the second device name corresponding to the second alarm event 4 (i.e. the second target alarm event), and the second device name corresponding to the second alarm event 5 (i.e. the second target alarm event) in the first subset b mentioned above.

[0050] Step 5: Perform a merged response process on the i-th first alarm event and the second target alarm event based on the P first device names corresponding to the i-th first alarm event and the second device name corresponding to the second target alarm event.

[0051] In step five, the system can merge the first alarm event and the second target alarm event if the second device name corresponding to the second target alarm event is the same as any one of the P first device names corresponding to the i-th first alarm event. For example, if the second device name corresponding to the second alarm event 4 (i.e., the second target alarm event) and the second device name corresponding to the second alarm event 5 (i.e., the second target alarm event) are the same as the first device name 1 (i.e., the i-th first alarm event) among the P first device names of the first alarm event 1, the system can perform batch closing of the second alarm event 4, the second alarm event 5, and the first alarm event 1.

[0052] Step six: Repeat steps one through five until the merged response processing of M alarm event tickets is completed.

[0053] In this embodiment, by repeatedly executing steps one to five until the merged response processing of M alarm event tickets is completed, it is possible to automatically close alarm event tickets corresponding to the same network device in batches, without having to manually respond to each alarm event ticket one by one. This achieves the technical effect of improving the processing efficiency of alarm event tickets, and solves the technical problem of low processing efficiency in the prior art of manually processing alarm event tickets.

[0054] Optionally, in the alarm event processing method provided in this application embodiment, obtaining the first device name of each of the P network devices corresponding to the i-th first alarm event includes: the system can obtain the service IP corresponding to the abnormal service in the i-th first alarm event; then, based on the service IP, it obtains the first device name of each of the P network devices corresponding to the i-th first alarm event from the local area network connection query system, thus obtaining the P first device names corresponding to the i-th first alarm event. The local area network connection query system is used to store the device information of the P network devices that process the abnormal service, and the device information includes at least the first device name of each of the P network devices.

[0055] In this embodiment, as Figure 2 As shown, the system inputs the service IP corresponding to the abnormal service in the i-th first alarm event into the LAN connection query system. The LAN connection query system can output the first device name of the P network devices that handle the abnormal service in the i-th first alarm event.

[0056] It should be noted that by obtaining the first device name of each of the P network devices corresponding to the i-th first alarm event from the LAN connection query system based on the business IP, the P first device names corresponding to the i-th first alarm event can be accurately obtained, providing data preparation for subsequent merged response processing based on the first device name of each of the P network devices corresponding to the i-th first alarm event.

[0057] Optionally, in the alarm event processing method provided in this application embodiment, the i-th first alarm event and the second target alarm event are merged and processed based on the P first device names corresponding to the i-th first alarm event and the second device name corresponding to the second target alarm event to obtain a processing result. This includes: the system can detect whether the second device name corresponding to the second target alarm event is the same as any one of the first device names corresponding to the i-th first alarm event; if the second device name corresponding to the second target alarm event is the same as any one of the first device names corresponding to the i-th first alarm event, the system can set a target flag for the second target alarm event, wherein the target flag is used to mark that the network device corresponding to the second target alarm event is included among the P network devices corresponding to the i-th first alarm event; the system can merge and process the i-th first alarm event and the second target alarm event based on the target flag.

[0058] Optionally, in the alarm event processing method provided in the embodiments of this application, after detecting whether the second device name corresponding to the second target alarm event is the same as any of the first device names corresponding to the i-th first alarm event, the method includes: if the second device name corresponding to the second target alarm event is different from each of the first device names corresponding to the i-th first alarm event, the system may prohibit setting a target flag for the second alarm event.

[0059] In this embodiment, as Figure 2As shown, the system can determine whether to set a target flag for the second target alarm event by detecting whether the second device name corresponding to the second target alarm event is the same as any one of the first device names corresponding to the i-th first alarm event. The target flag is used to mark that the network device corresponding to the second target alarm event is included among the P network devices corresponding to the i-th first alarm event. If the second device name corresponding to the second target alarm event is the same as any one of the first device names corresponding to the i-th first alarm event, the system can set the target flag for the second target alarm event; if the second device name corresponding to the second target alarm event is different from each of the first device names corresponding to the i-th first alarm event, the system can prohibit setting the target flag for the second alarm event. For example, if the system detects that the second device name corresponding to the second alarm event 4 (i.e., the second target alarm event 4) is the same as the first device name 1 among the P first device names of the first alarm event 1, then the system sets a target mark for the second alarm event 4. Then, if the system detects that the second device name corresponding to the second alarm event 5 (i.e., the second target alarm event 4) is the same as the first device name 1 among the P first device names of the first alarm event 1 (i.e., the i-th first alarm event 4), then the system sets a target mark for the second alarm event 5. Then, the system can perform batch closing processing on the first alarm event 1, the second alarm event 4, and the second alarm event 5 according to the target mark.

[0060] It should be noted that by detecting whether the second device name corresponding to the second target alarm event is the same as any first device name corresponding to the i-th first alarm event, it is determined whether to set a target flag for the second target alarm event. Based on the target flag, the i-th first alarm event and the second target alarm event are merged and processed. This achieves automatic batch closure of alarm event events corresponding to the same network device, eliminating the need for manual processing of alarm event events one by one. This improves the processing efficiency of alarm event events and solves the problem of low processing efficiency in existing technologies that rely on manual processing of alarm event events.

[0061] Optionally, in the alarm event processing method provided in this application embodiment, M alarm event tickets are merged and answered based on P first device names corresponding to each first alarm event ticket and the second device name corresponding to each second alarm event ticket. This includes: obtaining alarm confirmation information for each network device, wherein the alarm confirmation information is used to characterize the network device's recovery from a fault state to a normal state; and merging and answering M alarm event tickets based on each alarm confirmation information, the P first device names corresponding to each first alarm event ticket, and the second device name corresponding to each second alarm event ticket.

[0062] To further improve the processing efficiency of alarm event tickets and avoid the problem of not being able to process alarm event tickets in a timely manner due to the inability to obtain information on the recovery of faulty devices to normal status, this application automatically obtains the alarm confirmation information of each network device from the faulty state to the normal state, and merges and processes M alarm event tickets based on each alarm confirmation information, the P first device names corresponding to each first alarm event ticket, and the second device name corresponding to each second alarm event ticket.

[0063] Therefore, the alarm event ticket processing method provided in this application, by merging and responding to M alarm event tickets according to the P first device names corresponding to each first alarm event ticket and the second device name corresponding to each second alarm event ticket, can automatically close alarm event tickets corresponding to the same network device in batches, eliminating the need for manual response to each alarm event ticket. This achieves the technical effect of improving the processing efficiency of alarm event tickets and solves the technical problem of low processing efficiency in the prior art of manually processing alarm event tickets.

[0064] Example 2

[0065] According to an embodiment of this application, an embodiment of an alarm event ticket processing device is provided, wherein... Figure 3 This is a schematic diagram of an optional alarm event ticket processing device according to an embodiment of this application, as shown below. Figure 3 As shown, the device includes:

[0066] The acquisition module 301 is used to acquire M alarm event tickets, wherein the M alarm event tickets include X first alarm event tickets and Y second alarm event tickets. Each first alarm event ticket is an alarm event ticket corresponding to an abnormal service. The abnormal service is handled by P network devices. Each second alarm event ticket is an alarm event ticket corresponding to a faulty network device. X, Y, and P are positive integers, and M = X + Y.

[0067] Processing module 302 is used to perform merge response processing on M alarm event tickets based on P first device names corresponding to each first alarm event ticket and the second device name corresponding to each second alarm event ticket. Here, the P first device names are the device names corresponding to P network devices, and the second device names are the device names corresponding to the faulty network device. The merge response processing is used to batch close alarm event tickets corresponding to the same network device.

[0068] It should be noted that the above-mentioned acquisition module 301 and processing module 302 correspond to steps S101 to S102 in the above embodiment 1. The two modules and the corresponding steps implement the same examples and application scenarios, but are not limited to the content disclosed in the above embodiment 1.

[0069] Optionally, the alarm event processing device further includes: a first acquisition module, used to acquire the alarm time of each alarm event in the M alarm event after acquiring M alarm event; a first partitioning module, used to partition the M alarm event into N data sets according to the alarm time, wherein the alarm event in each data set has the same alarm time, and N is a positive integer; and a second partitioning module, used to partition the first alarm event and the second alarm event in each data set into the first subset and the second subset corresponding to the data set, respectively.

[0070] Optionally, the processing module includes: an execution unit, configured to execute step one, obtaining the first device name of each of the P network devices corresponding to the i-th first alarm event, thus obtaining the P first device names corresponding to the i-th first alarm event, where the i-th first alarm event is any one of the X first alarm event events, and i is a positive integer; step two, determining the first subset containing the i-th first alarm event as the first target subset, and determining the second subset corresponding to the first target subset as the second target subset, where the second target subset... The first target subset corresponds to the same data set; Step 3, determine the second alarm event in the second target subset as the second target alarm event; Step 4, obtain the second device name corresponding to the second target alarm event; Step 5, perform merge response processing on the i-th first alarm event and the second target alarm event based on the P first device names corresponding to the i-th first alarm event and the second device name corresponding to the second target alarm event, and obtain the processing result; Step 6, repeat the process from Step 1 to Step 5 until the merge response processing of M alarm event events is completed.

[0071] Optionally, the execution unit further includes: a first acquisition unit, used to acquire the service IP corresponding to the abnormal service in the i-th first alarm event; and a second acquisition unit, used to acquire the first device name of each of the P network devices corresponding to the i-th first alarm event from the LAN connection query system based on the service IP, thereby obtaining the P first device names corresponding to the i-th first alarm event, wherein the LAN connection query system is used to store device information of the P network devices that handle abnormal services, and the device information includes at least the first device name of each of the P network devices.

[0072] Optionally, the execution unit further includes: a detection unit, configured to detect whether the second device name corresponding to the second target alarm event is the same as any first device name corresponding to the i-th first alarm event; a setting unit, configured to set a target flag for the second target alarm event if the second device name corresponding to the second target alarm event is the same as any first device name corresponding to the i-th first alarm event, wherein the target flag is used to mark that the network device corresponding to the second target alarm event is included among the P network devices corresponding to the i-th first alarm event; and a first processing unit, configured to perform merged response processing on the i-th first alarm event and the second target alarm event based on the target flag, and obtain a processing result.

[0073] Optionally, the alarm event processing device further includes: a prohibition module, used to prohibit setting a target flag for the second alarm event if, after detecting whether the second device name corresponding to the second target alarm event is the same as any of the first device names corresponding to the i-th first alarm event, the second device name corresponding to the second target alarm event is different from each of the first device names corresponding to the i-th first alarm event.

[0074] Optionally, the processing module further includes: a third acquisition unit, used to acquire alarm confirmation information for each network device, wherein the alarm confirmation information is used to indicate that the network device has recovered from a fault state to a normal state; and a second processing unit, used to perform merged response processing on M alarm event forms based on each alarm confirmation information, P first device names corresponding to each first alarm event form, and the second device name corresponding to each second alarm event form.

[0075] Example 3

[0076] According to another aspect of the embodiments of this application, a computer-readable storage medium is also provided, in which a computer program is stored, wherein the computer program is configured to execute the above-described alarm event form processing method when running.

[0077] Example 4

[0078] According to another aspect of the embodiments of this application, an electronic device is also provided, wherein, Figure 4 This is a schematic diagram of an optional electronic device according to an embodiment of this application, such as... Figure 4 As shown, the electronic device includes one or more processors; and a memory for storing one or more programs, which, when executed by one or more processors, cause the one or more processors to implement the program for running, wherein the program is configured to execute the above-mentioned alarm event handling method during runtime.

[0079] like Figure 4As shown, this application embodiment provides an electronic device, which includes a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, it performs the following steps:

[0080] Retrieve M alarm event tickets, including X first alarm event tickets and Y second alarm event tickets. Each first alarm event ticket corresponds to an abnormal service, which is handled by P network devices. Each second alarm event ticket corresponds to a faulty network device. X, Y, and P are positive integers, and M = X + Y. Perform a merge response process on the M alarm event tickets based on the P first device names corresponding to each first alarm event ticket and the second device name corresponding to each second alarm event ticket. The P first device names are the device names corresponding to the P network devices, and the second device names are the device names corresponding to the faulty network device. The merge response process is used to batch close alarm event tickets corresponding to the same network device.

[0081] Optionally, the processor may further implement the following steps when executing the program: after obtaining M alarm event tickets, obtain the alarm time of each alarm event ticket in the M alarm event tickets; divide the M alarm event tickets into N data sets according to the alarm time, wherein the alarm event tickets in each data set have the same alarm time, and N is a positive integer; and assign the first alarm event ticket and the second alarm event ticket in each data set to the first subset and the second subset corresponding to that data set, respectively.

[0082] Optionally, the processor, when executing the program, also implements the following steps: Step 1, obtain the first device name of each of the P network devices corresponding to the i-th first alarm event, thus obtaining the P first device names corresponding to the i-th first alarm event, where the i-th first alarm event is any one of the X first alarm event events, and i is a positive integer; Step 2, determine the first subset containing the i-th first alarm event as the first target subset, and determine the second subset corresponding to the first target subset as the second target subset, where the second target subset... The first target subset corresponds to the same data set; Step 3, determine the second alarm event in the second target subset as the second target alarm event; Step 4, obtain the second device name corresponding to the second target alarm event; Step 5, perform merge response processing on the i-th first alarm event and the second target alarm event based on the P first device names corresponding to the i-th first alarm event and the second device name corresponding to the second target alarm event, and obtain the processing result; Step 6, repeat the process from Step 1 to Step 5 until the merge response processing of M alarm event events is completed.

[0083] Optionally, when the processor executes the program, it also performs the following steps: obtaining the service IP corresponding to the abnormal service in the i-th first alarm event; obtaining the first device name of each of the P network devices corresponding to the i-th first alarm event from the LAN connection query system based on the service IP, thus obtaining the P first device names corresponding to the i-th first alarm event, wherein the LAN connection query system is used to store the device information of the P network devices that handle the abnormal service, and the device information includes at least the first device name of each of the P network devices.

[0084] Optionally, the processor, when executing the program, further implements the following steps: detecting whether the second device name corresponding to the second target alarm event is the same as any first device name corresponding to the i-th first alarm event; if the second device name corresponding to the second target alarm event is the same as any first device name corresponding to the i-th first alarm event, setting a target flag for the second target alarm event, wherein the target flag is used to mark that the network device corresponding to the second target alarm event is included among the P network devices corresponding to the i-th first alarm event; and performing merge response processing on the i-th first alarm event and the second target alarm event based on the target flag to obtain the processing result.

[0085] Optionally, the processor may further implement the following steps when executing the program: after detecting whether the second device name corresponding to the second target alarm event is the same as any of the first device names corresponding to the i-th first alarm event, if the second device name corresponding to the second target alarm event is different from each of the first device names corresponding to the i-th first alarm event, setting a target flag for the second alarm event is prohibited.

[0086] Optionally, the processor also performs the following steps when executing the program: obtaining alarm confirmation information for each network device, wherein the alarm confirmation information is used to characterize the network device's recovery from a fault state to a normal state; and performing merged response processing on M alarm event forms based on each alarm confirmation information, P first device names corresponding to each first alarm event form, and the second device name corresponding to each second alarm event form.

[0087] The sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0088] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0089] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units can be a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual couplings, direct couplings, or communication connections may be through some interfaces; indirect couplings or communication connections between units or modules may be electrical or other forms.

[0090] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0091] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0092] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk.

[0093] The above are merely preferred embodiments of this application. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A method of processing an alarm event sheet, characterized by, The method comprises the following steps: obtaining M alarm event sheets, wherein the M alarm event sheets comprise X first alarm event sheets and Y second alarm event sheets, each first alarm event sheet is an alarm event sheet corresponding to an abnormal service, the abnormal service is processed by P network devices, each second alarm event sheet is an alarm event sheet corresponding to a faulty network device, X, Y and P are positive integers, and M = X + Y; performing a combined sheet processing on the M alarm event sheets according to P first device names corresponding to each first alarm event sheet and a second device name corresponding to each second alarm event sheet, wherein the P first device names are device names corresponding to the P network devices, the second device name is a device name corresponding to the faulty network device, and the combined sheet processing is used for batch closing processing of alarm event sheets corresponding to the same network device; wherein, after obtaining the M alarm event sheets, the method further comprises: obtaining an alarm time of each alarm event sheet in the M alarm event sheets; dividing the M alarm event sheets into N data sets according to the alarm time, wherein alarm event sheets in each data set have the same alarm time, and N is a positive integer; dividing first alarm event sheets and second alarm event sheets in each data set into first sub-sets and second sub-sets corresponding to the data set respectively.

2. The method of claim 1, wherein, The combined sheet processing on the M alarm event sheets according to the P first device names corresponding to each first alarm event sheet and the second device name corresponding to each second alarm event sheet comprises: Step one, obtaining a first device name of each network device in the P network devices corresponding to the i-th first alarm event sheet, to obtain P first device names corresponding to the i-th first alarm event sheet, wherein the i-th first alarm event sheet is any one of the X first alarm event sheets, and i is a positive integer; Step two, determining a first sub-set in which the i-th first alarm event sheet is located as a first target sub-set, and determining a second sub-set corresponding to the first target sub-set as a second target sub-set, wherein the second target sub-set corresponds to the same data set as the first target sub-set; Step three, determining a second alarm event sheet in the second target sub-set as a second target alarm event sheet; Step four, obtaining a second device name corresponding to the second target alarm event sheet; Step five, performing the combined sheet processing on the i-th first alarm event sheet and the second target alarm event sheet according to the P first device names corresponding to the i-th first alarm event sheet and the second device name corresponding to the second target alarm event sheet, to obtain a processing result; Step six, repeating the processes of steps one to five until the combined sheet processing on the M alarm event sheets is completed.

3. The method of claim 2, wherein, Obtaining a first device name of each network device in the P network devices corresponding to the i-th first alarm event sheet comprises: obtaining a service IP corresponding to the abnormal service in the i-th first alarm event sheet; According to the service IP, a first device name of each network device in the P network devices corresponding to the i-th first alarm event sheet is obtained from a local area network connection query system, to obtain P first device names corresponding to the i-th first alarm event sheet, wherein the local area network connection query system is used to store device information of the P network devices processing the abnormal service, and the device information at least includes the first device name of each network device in the P network devices.

4. The method of claim 2, wherein, According to the P first device names corresponding to the i-th first alarm event sheet and the second device name corresponding to the second target alarm event sheet, the i-th first alarm event sheet and the second target alarm event sheet are processed, and a processing result is obtained, including: Detecting whether the second device name corresponding to the second target alarm event sheet is the same as any one of the first device names corresponding to the i-th first alarm event sheet; In the case that the second device name corresponding to the second target alarm event sheet is the same as any one of the first device names corresponding to the i-th first alarm event sheet, a target flag is set for the second target alarm event sheet, wherein the target flag is used to mark that the network device corresponding to the second target alarm event sheet is included in the P network devices corresponding to the i-th first alarm event sheet; According to the target flag, the i-th first alarm event sheet and the second target alarm event sheet are processed, and the processing result is obtained.

5. The method of claim 4, wherein, After detecting whether the second device name corresponding to the second target alarm event sheet is the same as any one of the first device names corresponding to the i-th first alarm event sheet, the method further comprises: In the case that the second device name corresponding to the second target alarm event sheet is not the same as each of the first device names corresponding to the i-th first alarm event sheet, the target flag is prohibited to be set for the second alarm event sheet.

6. The method of claim 1, wherein, According to the P first device names corresponding to each first alarm event sheet and the second device name corresponding to each second alarm event sheet, the M alarm event sheets are processed, including: Obtaining alarm confirmation information of each network device, wherein the alarm confirmation information is used to represent that the network device recovers from a fault state to a normal state; According to each alarm confirmation information, the P first device names corresponding to each first alarm event sheet and the second device name corresponding to each second alarm event sheet, the M alarm event sheets are processed.

7. An apparatus for processing an alarm event sheet, characterized by comprising: Including: An obtaining module is used to obtain M alarm event sheets, wherein the M alarm event sheets include X first alarm event sheets and Y second alarm event sheets, each first alarm event sheet is an alarm event sheet corresponding to an abnormal service, the abnormal service is processed by P network devices, each second alarm event sheet is an alarm event sheet corresponding to a fault network device, X, Y and P are positive integers, and M=X+Y; The processing module is configured to perform a consolidated processing on the M alarm event records according to P first device names corresponding to each first alarm event record and a second device name corresponding to each second alarm event record, wherein the P first device names are device names corresponding to the P network devices, the second device name is a device name corresponding to the faulty network device, and the consolidated processing is configured to perform batch closing processing on alarm event records corresponding to the same network device. The apparatus further includes a first obtaining module configured to obtain alarm times of each alarm event record in the M alarm event records after obtaining the M alarm event records; a first dividing module configured to divide the M alarm event records into N data sets according to the alarm times, wherein alarm event records in each data set have the same alarm time, and N is a positive integer; and a second dividing module configured to divide first alarm event records and second alarm event records in each data set into first sub-sets and second sub-sets corresponding to the data set, respectively.

8. A computer-readable storage medium, characterized in that, A computer program is stored in a computer readable storage medium, and the computer program is configured to execute the processing method of the alarm event record in any one of claims 1 to 6 when running.

9. An electronic device, comprising: An apparatus includes one or more processors and memory storing one or more programs, wherein the one or more programs, when executed by the one or more processors, cause the one or more processors to implement the processing method of the alarm event record in any one of claims 1 to 6.

Images