Alarm service noise reduction method, device and equipment and storage medium

Abstract

The application discloses an alarm service noise reduction method, device and equipment and a storage medium, and belongs to the technical field of network monitoring. The application determines a pseudo-alarm service according to the standard deviation of the index value of a monitored service, and determines the correlation between the pseudo-alarm services; obtains a pseudo-alarm service set based on the correlation, and determines whether each index of each pseudo-alarm service in the pseudo-alarm service set is in a normal fluctuation range according to the standard deviation of the index value of the pseudo-alarm service set; determines whether the pseudo-alarm service corresponding to the index of the pseudo-alarm service not in the normal fluctuation range meets a noise reduction processing condition; and performs noise reduction processing on the pseudo-alarm service meeting the noise reduction processing condition, thereby improving the accuracy of the alarm by performing noise reduction processing on the alarm service not meeting the noise reduction processing condition through multiple screening.

Description

Technical Field

[0001] This invention relates to the field of network monitoring technology, and in particular to a method, apparatus, device, and storage medium for noise reduction of alarm services. Background Technology

[0002] In network management, alarms are event records of errors or abnormal states occurring in the hardware and software components that make up a network. Telecommunications networks are large-scale, complex, and diverse, generating a large number of alarms daily from various hardware and software modules. Excessive alarms can easily lead to network congestion, therefore alarm processing is necessary to avoid unnecessary alarms.

[0003] The current alarm noise reduction schemes generally pre-set different alarm types with different priorities for different monitored objects. When an alarm is triggered, it is selectively sent according to the logical and priority relationships configured in the system. The noise reduction is achieved through the concept of alarm hierarchy. However, the factors considered are relatively simple and one-sided, resulting in inaccurate alarms. Summary of the Invention

[0004] The main objective of this invention is to provide an alarm service noise reduction method, apparatus, device, and storage medium, which aims to solve the technical problem that existing alarms are not accurate enough.

[0005] To achieve the above objectives, the present invention provides a method for noise reduction in alarm services, the method comprising the following steps:

[0006] The proposed alarm services are determined based on the standard deviation of the indicator values ​​of the monitored services, and the correlation between the proposed alarm services is determined.

[0007] Based on the aforementioned correlation, a set of proposed alarm services is obtained, and based on the standard deviation of the indicator values ​​of the proposed alarm service set, it is determined whether each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range.

[0008] Determine whether the proposed alarm service corresponding to the indicator that is not within the normal fluctuation range meets the noise reduction processing conditions;

[0009] Noise reduction processing will be applied to alarm services that meet the noise reduction processing criteria.

[0010] Optionally, determining whether the indicators of the proposed alarm service that are not within the normal fluctuation range meet the noise reduction processing conditions includes:

[0011] When the indicator of a proposed alarm service in the proposed alarm service set is not within the normal fluctuation range, the proposed alarm service corresponding to the indicator of the proposed alarm service that is not within the normal fluctuation range shall be regarded as an alarm service.

[0012] Obtain the year-on-year and month-on-month changes of the alarm indicators for the alarm service;

[0013] The relationship type of each proposed alarm service is obtained based on the association relationship between each proposed alarm service in the proposed alarm service set;

[0014] Based on the year-on-year change, the month-on-month change, and the relationship type, determine whether the alarm service corresponding to the set of proposed alarm services meets the noise reduction processing conditions.

[0015] Optionally, determining whether the proposed alarm service in the proposed alarm service set meets the noise reduction processing conditions based on the year-on-year change, the month-on-month change, and the relationship type includes:

[0016] When the relationship between the various proposed alarm services is a continuous relationship, the year-on-year change and month-on-month change of each proposed alarm service in the previous period are obtained based on the year-on-year change and the month-on-month change.

[0017] If either the year-on-year change in the previous period or the month-on-month change in the previous period is inconsistent, it is determined that the proposed alarm service does not meet the noise reduction processing conditions.

[0018] The proposed alarm services that have the same year-on-year change and month-on-month change in the previous period are merged into a target proposed alarm service, wherein the target proposed alarm service is a proposed alarm service that meets the noise reduction processing conditions.

[0019] Optionally, determining whether the proposed alarm service in the proposed alarm service set meets the noise reduction processing conditions based on the year-on-year change, the month-on-month change, and the relationship type includes:

[0020] When the relationship between the various proposed alarm services is a synchronous relationship, the year-on-year change and month-on-month change of each proposed alarm service in the current period are obtained based on the year-on-year change and the month-on-month change.

[0021] If either the year-on-year change or the month-on-month change for the current period is inconsistent, it is determined that the proposed alarm service does not meet the noise reduction processing conditions.

[0022] When both the year-on-year change and the month-on-month change for the current period are consistent, the fitted alarm services are merged into a target proposed alarm service, wherein the target proposed alarm service is a proposed alarm service that meets the noise reduction processing conditions. The step of determining whether the proposed alarm service in the proposed alarm service set meets the noise reduction processing conditions based on the year-on-year change, the month-on-month change, and the relationship type includes:

[0023] When the relationship between the various proposed alarm services is a synchronous relationship, the year-on-year change and month-on-month change of each proposed alarm service in the current period are obtained based on the year-on-year change and the month-on-month change.

[0024] If either the year-on-year change or the month-on-month change for the current period is inconsistent, it is determined that the proposed alarm service does not meet the noise reduction processing conditions.

[0025] When the year-on-year change and the month-on-month change in the current period are both consistent, the fitted alarm services are merged into a target proposed alarm service, wherein the target proposed alarm service is a proposed alarm service that meets the noise reduction processing conditions.

[0026] Optionally, the step of obtaining a set of proposed alarm services based on the correlation relationship, and determining whether each indicator of each proposed alarm service in the set of proposed alarm services is within the normal fluctuation range based on the standard deviation of the indicator values ​​of the set of proposed alarm services, includes:

[0027] Based on the aforementioned relationships, a set of proposed alarm services is obtained;

[0028] Obtain the index values ​​of each proposed alarm service in the proposed alarm service set;

[0029] The metrics provide the number of calls, service response time, and system health index within the sampling period.

[0030] The standard deviations of the call count, response time, and system health index are calculated using the call count, response time, and system health index.

[0031] The standard deviation of the number of calls, the standard deviation of the response time, and the standard deviation of the system health index are used to determine whether each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range.

[0032] Optionally, determining whether each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range using the standard deviation of the call count, the standard deviation of the response time, and the standard deviation of the system health index includes:

[0033] The standard deviation of the number of calls, the standard deviation of the response time, and the standard deviation of the system health index are compared with the first alarm baseline threshold, the second alarm baseline threshold, and the third alarm baseline threshold, respectively, wherein the first alarm baseline threshold is greater than the second alarm baseline threshold, and the second alarm baseline threshold is greater than the third alarm baseline threshold.

[0034] When the standard deviation of the response time is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, it is determined that each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range.

[0035] When the standard deviation of the response time is greater than the first alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold but less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold but less than the second alarm baseline threshold, it is determined that the response time index of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range.

[0036] Optionally, after comparing the standard deviation of the number of calls, the standard deviation of the response time, and the standard deviation of the system health index with the first alarm baseline threshold, the second alarm baseline threshold, and the third alarm baseline threshold, the method further includes:

[0037] When the standard deviation of the response time is greater than the second alarm baseline threshold and less than the first alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, calculate the year-on-year response time standard deviation, month-on-month response time standard deviation, year-on-year system health index standard deviation, month-on-month system health index standard deviation, year-on-year call count standard deviation, and month-on-month call count standard deviation within a preset time period;

[0038] The fluctuation type of each proposed alarm service in the proposed alarm service set is determined by the year-on-year response time standard deviation, the year-on-year system health index standard deviation, the year-on-year call count standard deviation, the month-on-month response time standard deviation, the month-on-month system health index standard deviation, and the month-on-month call count standard deviation.

[0039] When the fluctuation type of the proposed alarm service is small-amplitude continuous fluctuation, it is determined that each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range.

[0040] When the fluctuation type of the proposed alarm service is large and continuous fluctuation, it is determined that the response time index of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range.

[0041] When the fluctuation type of the proposed alarm service is occasional fluctuation, it is determined that the response time index of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range.

[0042] Furthermore, to achieve the above objectives, the present invention also proposes an alarm service noise reduction device, the alarm service noise reduction device comprising:

[0043] The determination module is used to determine the services to be alarmed based on the standard deviation of the indicator values ​​of the monitored services, and to determine the correlation between the services to be alarmed.

[0044] The acquisition module is used to obtain a set of proposed alarm services based on the association relationship, and to determine whether each indicator of each proposed alarm service in the set of proposed alarm services is within the normal fluctuation range according to the standard deviation of the indicator values ​​of the set of proposed alarm services.

[0045] The determining module is further configured to determine whether the proposed alarm service corresponding to the indicator of the proposed alarm service that is not within the normal fluctuation range meets the noise reduction processing conditions.

[0046] The noise reduction module is used to reduce the noise of alarm services that meet the noise reduction processing conditions.

[0047] Furthermore, to achieve the above objectives, the present invention also proposes an alarm service noise reduction device, which includes: a memory, a processor, and an alarm service noise reduction program stored in the memory and executable on the processor. The alarm service noise reduction program is configured to implement the steps of the alarm service noise reduction method described above.

[0048] In addition, to achieve the above objectives, the present invention also proposes a storage medium storing an alarm service noise reduction program, wherein when the alarm service noise reduction program is executed by a processor, it implements the steps of the alarm service noise reduction method described above.

[0049] This invention determines potential alarm services based on the standard deviation of the monitored service's indicator values ​​and establishes the correlation between these potential alarm services. Based on this correlation, a set of potential alarm services is obtained, and the standard deviation of the indicator values ​​of the set of potential alarm services is used to determine whether each indicator of each potential alarm service in the set is within the normal fluctuation range. The invention then determines whether the potential alarm services whose indicators are not within the normal fluctuation range meet the noise reduction processing conditions. The potential alarm services that meet the noise reduction processing conditions are then subjected to noise reduction processing. By identifying potential alarm services and determining whether their indicators are within the normal fluctuation range based on their standard deviation, potential alarm services that are not within the normal fluctuation range are filtered out. Further filtering of potential alarm services using noise reduction processing conditions is then performed on the denoising services that meet the noise reduction processing conditions, thereby improving the accuracy of alarms. Attached Figure Description

[0050] Figure 1 This is a schematic diagram of the structure of the alarm service noise reduction device in the hardware operating environment involved in the embodiments of the present invention;

[0051] Figure 2 This is a flowchart illustrating the first embodiment of the alarm service noise reduction method of the present invention;

[0052] Figure 3 This is a schematic diagram of the monitored service and its indicators in an embodiment of the alarm service noise reduction method of the present invention;

[0053] Figure 4 This is a flowchart illustrating the second embodiment of the alarm service noise reduction method of the present invention;

[0054] Figure 5 This is a flowchart illustrating the third embodiment of the alarm service noise reduction method of the present invention;

[0055] Figure 6 This is a flowchart illustrating the fourth embodiment of the alarm service noise reduction method of the present invention;

[0056] Figure 7 This is a flowchart illustrating the fifth embodiment of the alarm service noise reduction method of the present invention;

[0057] Figure 8 This is a schematic diagram illustrating the dynamic distribution of the standard deviation of various indicators in a preset time period of an embodiment of the alarm service noise reduction method of the present invention.

[0058] Figure 9 This is a dynamic schematic diagram illustrating a small-amplitude continuous fluctuation type in one embodiment of the alarm service noise reduction method of the present invention.

[0059] Figure 10 This is a dynamic schematic diagram illustrating a large-amplitude continuous fluctuation type in one embodiment of the alarm service noise reduction method of the present invention.

[0060] Figure 11 This is a dynamic schematic diagram of an embodiment of the alarm service noise reduction method of the present invention, where the fluctuation type is occasional fluctuation.

[0061] Figure 12 This is a schematic diagram of the overall process of alarm noise reduction according to an embodiment of the alarm service noise reduction method of the present invention;

[0062] Figure 13 This is a structural block diagram of the first embodiment of the alarm service noise reduction device of the present invention.

[0063] The realization of the objective, functional features and advantages of the present invention will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0064] It should be understood that the specific embodiments described herein are for illustrative purposes only and are not intended to limit the scope of the invention.

[0065] Reference Figure 1 , Figure 1 This is a schematic diagram of the alarm service noise reduction device structure in the hardware operating environment involved in the embodiment of the present invention.

[0066] like Figure 1 As shown, the alarm service noise reduction device may include: a processor 1001, such as a central processing unit (CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. The communication bus 1002 is used to enable communication between these components. The user interface 1003 may include a display screen or an input unit such as a keyboard; optionally, the user interface 1003 may also include a standard wired interface or a wireless interface. The network interface 1004 may optionally include a standard wired interface or a wireless interface (such as a Wireless-Fidelity (Wi-Fi) interface). The memory 1005 may be high-speed random access memory (RAM) or stable non-volatile memory (NVM), such as a disk storage device. Optionally, the memory 1005 may also be a storage device independent of the aforementioned processor 1001.

[0067] Those skilled in the art will understand that Figure 1 The structure shown does not constitute a limitation on alarm service noise reduction equipment, and may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0068] like Figure 1 As shown, the memory 1005, which serves as a storage medium, may include an operating system, a network communication module, a user interface module, and an alarm service noise reduction program.

[0069] exist Figure 1 In the alarm service noise reduction device shown, the network interface 1004 is mainly used for data communication with the network server; the user interface 1003 is mainly used for data interaction with the user; the processor 1001 and the memory 1005 in the alarm service noise reduction device of the present invention can be set in the alarm service noise reduction device, and the alarm service noise reduction device calls the alarm service noise reduction program stored in the memory 1005 through the processor 1001 and executes the alarm service noise reduction method provided in the embodiment of the present invention.

[0070] This invention provides a method for noise reduction in alarm services, referring to... Figure 2 , Figure 2 This is a flowchart illustrating the first embodiment of the alarm service noise reduction method of the present invention.

[0071] In this embodiment, the alarm service noise reduction method includes the following steps:

[0072] Step S10: Determine the proposed alarm services based on the standard deviation of the indicator values ​​of the monitored services, and determine the correlation between each proposed alarm service.

[0073] It should be noted that the execution subject of this embodiment can be an alarm service noise reduction device, or other devices that can achieve the same or similar functions. This embodiment does not limit this; this embodiment uses an alarm service noise reduction device as an example for explanation.

[0074] In practice, the indicator values ​​of the monitored service can be obtained by sampling during the sampling period of the monitored service, such as... Figure 3 As shown, Figure 3 This diagram illustrates the monitored services and their metrics. During the current sampling period (permissible fluctuation range), metric values ​​for the monitored services are collected. These values ​​include response time, system health index, and call count, reflecting the current quality of the service. By collecting response time, system health index, and call count values ​​for each monitored service, the standard deviation and variance of each metric value are calculated using standard deviation and variance calculation methods. Response time, system health index, and call count can be automatically calculated. The standard deviation and variance of each metric value can be calculated by obtaining the average of the metric values. Standard deviation and variance describe the dispersion of a set of data from the mean, reflecting the fluctuation of the data relative to the mean. Larger standard deviations and variances indicate greater volatility. By calculating the standard deviation and variance of response time, system health index, and call count, the fluctuation factors of the monitored service can be identified, providing sufficient alarm elements or reference indicators for subsequent alarms. The variance and standard deviation of different metric dimensions can be used as performance indicators.

[0075] It should be noted that if the standard deviation of a monitored service's metric value exceeds a preset threshold, this monitored service will be designated as a potential alarm service. The service identifier of the monitored service will be obtained, and based on the service identifier, it will be determined whether there are any relationships, such as continuity or synchronization, among the potential alarm services, thereby establishing the correlation between them. The preset threshold can be set according to requirements; for example, the preset threshold can be a value greater than the normal value.

[0076] A continuation relationship can be defined as the requirement for the successful completion of business B to be processed in business A. A synchronization relationship can be defined as the relationship between business A and business B, which are related and need to be processed simultaneously. The relationships between different businesses can be set and stored in advance to query and determine whether there are relationships between different businesses.

[0077] Determining the correlation between services that are likely to trigger alarms is mainly based on the consideration that if an alarm occurs in a related service, the related services, even if they do not trigger alarms, should be alerted to the possibility of triggering alarms. Therefore, it can be predicted that if alarms occur in related services, alarm aggregation is highly probable.

[0078] Step S20: Based on the correlation, obtain the set of proposed alarm services, and determine whether each indicator of each proposed alarm service in the set of proposed alarm services is within the normal fluctuation range according to the standard deviation of the indicator values ​​of the set of proposed alarm services.

[0079] It should be noted that, based on the correlation, the related services that are intended to trigger alarms can be aggregated to obtain a set of intended alarm services, thus obtaining multiple sets of intended alarm services. For each set of intended alarm services, based on the number of calls, response time, system health index, and standard deviation of the number of calls of each intended alarm service in the sampling period, it can be determined whether each indicator of the intended alarm service is within the normal fluctuation range.

[0080] Whether the indicators in the proposed alarm service are within the normal fluctuation range can be determined by setting an alarm baseline threshold. For example, the standard deviation of the indicator value of the proposed alarm service can be compared with the alarm baseline threshold, and the comparison result can be used to determine whether the indicators in the proposed alarm service are within the normal fluctuation range.

[0081] Step S30: Determine whether the proposed alarm service corresponding to the indicator of the proposed alarm service that is not within the normal fluctuation range meets the noise reduction processing conditions.

[0082] It should be understood that when the metric of a proposed alarm service is outside the normal fluctuation range, this metric is considered to be experiencing abnormal fluctuation. When the metrics of proposed alarm services within the proposed alarm service set are outside the normal fluctuation range (i.e., the metrics fluctuate abnormally), it can be basically determined that an alarm has occurred. However, it is necessary to exclude cases where alarm denoising cannot be performed on alarms from different services. Performing alarm denoising in such cases may cause important alarms to be missed. In the remaining cases (i.e., cases where aggregated denoising can be performed on alarms from different services), alarm aggregated denoising can be performed. Then, it can be further determined whether the proposed alarm service corresponding to this metric meets the denoising processing conditions. For example, the correlation between proposed alarm services can be used to determine whether aggregated denoising can be performed. If aggregated denoising is possible, then the proposed alarm service meets the denoising processing conditions.

[0083] Step S40: Perform noise reduction processing on the proposed alarm services that meet the noise reduction processing conditions.

[0084] Understandably, services that meet the noise reduction criteria can be processed by noise reduction, while services that meet the noise reduction criteria can be downgraded or not triggered at all.

[0085] If the proposed alarm service does not meet the noise reduction processing conditions, the proposed alarm service can be directly processed as an alarm.

[0086] This embodiment determines the proposed alarm services based on the standard deviation of the indicator values ​​of the monitored services and establishes the correlation between each proposed alarm service. Based on the correlation, a set of proposed alarm services is obtained, and the standard deviation of the indicator values ​​of the proposed alarm service set is used to determine whether each indicator of each proposed alarm service in the set is within the normal fluctuation range. It then determines whether the proposed alarm services corresponding to the indicators of those not within the normal fluctuation range meet the noise reduction processing conditions. The proposed alarm services that meet the noise reduction processing conditions are then subjected to noise reduction processing. By identifying the proposed alarm services and determining whether the indicators of the proposed alarm services are within the normal fluctuation range based on their standard deviation, proposed alarm services not within the normal fluctuation range are filtered out. Further filtering of the proposed alarm services using noise reduction processing conditions is then performed, thereby reducing the noise of the proposed alarm services that meet the noise reduction processing conditions and improving the accuracy of the alarms.

[0087] refer to Figure 4 , Figure 4 This is a flowchart illustrating the second embodiment of the alarm service noise reduction method of the present invention.

[0088] Based on the first embodiment described above, step S30 of the alarm service noise reduction method in this embodiment specifically includes:

[0089] Step S301: When the indicator of the proposed alarm service in the proposed alarm service set is not within the normal fluctuation range, the proposed alarm service corresponding to the indicator of the proposed alarm service that is not within the normal fluctuation range shall be regarded as an alarm service.

[0090] In practice, when the indicator of a proposed alarm service in the proposed alarm service set is not within the normal fluctuation range, it is proven that the indicator is an abnormal fluctuation indicator, and the proposed alarm service corresponding to this abnormal fluctuation indicator is taken as an alarm service.

[0091] Step S302: Obtain the year-on-year and month-on-month changes of the alarm indicators for the alarm service.

[0092] It should be noted that the alarm indicator is an abnormal fluctuation indicator, which can obtain the year-on-year and month-on-month changes of the alarm indicator of the alarm service. This includes obtaining the year-on-year standard deviation of the response time of the alarm indicator and the standard deviation of the response time at different times, and setting a weight value. Then, the year-on-year change is calculated by using the year-on-year standard deviation of the response time, the standard deviation of the response time at different times, and the weight value. The calculation process is as follows: Equation 1:

[0093] A1=[(NS*Q1-TRNS*Q1) / (TRNS*Q1)]*100% (Formula 1)

[0094] In Equation 1, A1 represents the year-on-year change, NS represents the standard deviation of response time at different times, TRNS represents the year-on-year standard deviation of response time, and Q1 is the weight value. The year-on-year change is calculated using Equation 1. The year-on-year change can be the year-on-year increase rate, which can be positive or negative. A positive value indicates an increase in response time, while a negative value indicates a decrease in response time.

[0095] The standard deviation calculated over a preset time period can be obtained. Then, the standard deviation of the month-on-month response time can be calculated using the standard deviation of the preset time period, the weight value, and the standard deviation of the response time at different times. The calculation process is shown in Equation 2 below:

[0096] A2=[(NS*Q1-FS*Q1) / (FS*Q1)]*100% (Formula 2)

[0097] In Equation 2, A2 represents the month-on-month change, and FS represents the standard deviation of a preset time period, which can be 3 minutes, 5 minutes, etc. The month-on-month change is calculated using Equation 2. The month-on-month change is the month-on-month increase rate, which can be positive or negative. A positive value indicates an increase in response time, while a negative value indicates a decrease in response time. The weight values ​​in Equations 1 and 2 can be set through data analysis or according to user requirements.

[0098] Step S303: Obtain the relationship type of each proposed alarm service based on the association relationship between each proposed alarm service in the proposed alarm service set.

[0099] It should be noted that there may be different relationships between the proposed alarm services. Therefore, the relationship type of each proposed alarm service can be obtained based on the association between each proposed alarm service in the proposed alarm service set. The relationship type can be a continuation relationship or a synchronous relationship.

[0100] Step S304: Determine whether the alarm service in the set of proposed alarm services meets the noise reduction processing conditions based on the year-on-year change, the month-on-month change, and the relationship type.

[0101] In practice, whether an alarm service meets the noise reduction processing conditions can be determined based on the year-on-year and month-on-month changes in alarm services and the type of relationship.

[0102] This embodiment identifies proposed alarm services whose metrics are outside the normal fluctuation range as alarm services when they are in the proposed alarm service set. It obtains the year-on-year and month-on-month changes in the alarm metrics of these alarm services. Based on the correlation between each proposed alarm service in the proposed alarm service set, it obtains the relationship type of each proposed alarm service. According to the year-on-year changes, month-on-month changes, and relationship types, it determines whether the corresponding alarm service in the proposed alarm service set meets the noise reduction processing conditions. By obtaining the year-on-year and month-on-month changes in the metrics of the proposed alarm services outside the normal fluctuation range, as well as the relationship type, it determines whether the proposed alarm service meets the noise reduction processing conditions. This fully considers the correlation between alarms and actual service conditions, improving the noise reduction processing effect.

[0103] refer to Figure 5 , Figure 5 This is a flowchart illustrating the third embodiment of the alarm service noise reduction method of the present invention.

[0104] Based on the first and second embodiments described above, step S304 of the alarm service noise reduction method in this embodiment specifically includes:

[0105] Step S3041: When the relationship type between the proposed alarm services is a continuous relationship, obtain the year-on-year change and month-on-month change of each proposed alarm service in the previous period based on the year-on-year change and the month-on-month change.

[0106] It should be noted that the processing of business A, which is a continuation relationship, requires the successful processing of business B. When the relationship between various proposed alarm businesses is a continuation relationship, the fluctuation of the indicators of each proposed alarm business can be further analyzed. Then, the year-on-year change and month-on-month change of each proposed alarm business in the previous period can be obtained based on the year-on-year change and month-on-month change.

[0107] Step S3042: If either the year-on-year change in the previous period or the month-on-month change in the previous period is inconsistent, it is determined that the proposed alarm service does not meet the noise reduction processing conditions.

[0108] In practical implementation, for example, if the proposed alarm services are Service A and Service B, and the year-on-year and month-on-month changes of Service B's indicators in the previous period are inconsistent with the year-on-year and month-on-month changes of Service A's indicators in the previous period, or if the year-on-year and month-on-month changes are inconsistent, it indicates that Service A and Service B have low consistency in indicator fluctuations and do not meet the conditions for noise reduction processing. Therefore, alarm merging will not be performed, and alarms can be issued separately or observation can continue.

[0109] Step S3043: Merge the proposed alarm services whose year-on-year changes and month-on-month changes in the previous period are consistent into a target proposed alarm service, wherein the target proposed alarm service is a proposed alarm service that meets the noise reduction processing conditions.

[0110] It should be understood that when the year-on-year changes and month-on-month changes of business A and business B in the previous period are consistent, it indicates that the two businesses have a consistent tendency to change in the fluctuation of this indicator. This means that the business to be alarmed meets the conditions for noise reduction processing and alarm merging can be performed to achieve alarm noise reduction.

[0111] This embodiment obtains the year-on-year and month-on-month changes of each proposed alarm service in the previous period based on the year-on-year and month-on-month changes when the relationship between the proposed alarm services is a continuation relationship. If either the year-on-year or month-on-month change is inconsistent, the proposed alarm service is determined to be non-compliant with noise reduction processing conditions. Proposed alarm services with consistent year-on-year and month-on-month changes in the previous period are merged into a target proposed alarm service, which is a proposed alarm service that meets the noise reduction processing conditions. By considering the continuation relationship between proposed alarm services, the year-on-year and month-on-month changes between each proposed alarm service are compared to further determine whether each proposed alarm service meets the noise reduction processing conditions, thereby improving the noise reduction processing effect.

[0112] refer to Figure 6 , Figure 6 This is a flowchart illustrating the fourth embodiment of the alarm service noise reduction method of the present invention.

[0113] Based on the first and second embodiments described above, step S304 of the alarm service noise reduction method in this embodiment specifically includes:

[0114] Step S3041': When the relationship type between the various proposed alarm services is a synchronous relationship, the year-on-year change and month-on-month change of each proposed alarm service in this period are obtained based on the year-on-year change and the month-on-month change.

[0115] In practice, when the relationship between the proposed alarm services is synchronous, that is, the proposed alarm services are related to each other and need to be performed synchronously, the year-on-year change and month-on-month change of each proposed alarm service in this period can be further evaluated to determine whether each proposed alarm service meets the noise reduction processing conditions.

[0116] Step S3042': If either the year-on-year change in the current period or the month-on-month change in the current period is inconsistent, it is determined that the proposed alarm service does not meet the noise reduction processing conditions.

[0117] It should be noted that if any of the year-on-year or month-on-month changes of the proposed alarm services are inconsistent in this period, it indicates that the consistency of the indicator fluctuations of the proposed alarm services is low and does not meet the requirements for noise reduction processing. In this case, alarm merging will not be carried out, and alarms can be issued separately or continued observation can be performed.

[0118] Step S3043': When the year-on-year change and the month-on-month change of the current period are consistent, the fitted alarm service is merged into a target proposed alarm service, wherein the target proposed alarm service is a proposed alarm service that meets the noise reduction processing conditions.

[0119] In practice, if the year-on-year and month-on-month changes of each proposed alarm service are consistent in this period, it indicates that the indicators of each proposed alarm service are highly consistent and meet the conditions for noise reduction processing. Alarm merging can be performed to achieve alarm noise reduction.

[0120] This embodiment obtains the year-on-year and month-on-month changes of each proposed alarm service within the current period based on the year-on-year and month-on-month changes when the relationship between the proposed alarm services is synchronous. If either the year-on-year or month-on-month change is inconsistent, the proposed alarm service is determined to be non-compliant with noise reduction processing conditions. If both the year-on-year and month-on-month changes are consistent, the fitted alarm services are merged into a target proposed alarm service, wherein the target proposed alarm service is a proposed alarm service that meets the noise reduction processing conditions. Considering that the proposed alarm services are synchronous, the year-on-year and month-on-month changes between each proposed alarm service are compared to further determine whether each proposed alarm service meets the noise reduction processing conditions, thereby improving the noise reduction processing effect.

[0121] refer to Figure 7 , Figure 7 This is a flowchart illustrating the fifth embodiment of the alarm service noise reduction method of the present invention.

[0122] Based on the first embodiment described above, step S20 of the alarm service noise reduction method in this embodiment specifically includes:

[0123] S201: Based on the aforementioned association, a set of proposed alarm services is obtained.

[0124] Each proposed alarm service in the proposed alarm service set satisfies a corresponding relationship. Proposed alarm services with relationships can be aggregated to obtain the proposed alarm service set.

[0125] S202: Obtain the index value of each proposed alarm service in the proposed alarm service set.

[0126] S203: The number of calls, service response time, and system health index within the sampling period can be obtained through the aforementioned indicators.

[0127] The indicator values ​​of each proposed alarm service in the proposed alarm service set can be obtained separately. The indicator values ​​include the number of calls within the sampling period, the service response time, the system health index, and may also include other indicators. This embodiment does not limit this.

[0128] S204: Calculate the standard deviation of the number of calls, the standard deviation of the response time, and the standard deviation of the system health index using the number of calls, the response time, and the system health index.

[0129] It should be noted that the standard deviation of the call count can be calculated using the call count metric, the standard deviation of the response time can be calculated using the response time metric, and the standard deviation of the system health index can be calculated using the system health index metric.

[0130] S205: Determine whether each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range by using the standard deviation of the number of calls, the standard deviation of the response time, and the standard deviation of the system health index.

[0131] The standard deviation of call count, response time, and system health index can be used to determine whether the corresponding call count, response time, or system health index in the set of services to be alerted is within the normal fluctuation range.

[0132] For example, an alarm baseline threshold can be set. By comparing the standard deviation of each indicator with the alarm baseline threshold, it can be determined whether the corresponding indicator is within the normal fluctuation range. Figure 8 As shown, Figure 8This diagram illustrates the dynamic distribution of the standard deviation of various indicators over a preset time period. The system calculates the standard deviation and variance every moment and records fluctuations. Based on the statistical results of the frequency of occurrence, the system establishes multiple different intervals, which we call fluctuation tolerance intervals. Combining the different interval distributions, the system automatically calculates the variance and standard deviation of different intervals, thereby obtaining an alarm baseline threshold. When no faults occur, no manual intervention is required. For example, the system calculates the fluctuation intervals and the corresponding alarm baseline thresholds for each dimension at 0:00 every day. The establishment of intervals can be understood as the system automatically learning and mastering the system's peak and off-peak business periods, setting different thresholds for different intervals, which greatly reduces alarms caused by peak business periods.

[0133] Specifically, different alarm baseline thresholds can be set, so each permission interval has a different alarm baseline threshold. Regardless of whether the standard deviation of response time, health indicators, or number of calls exceeds the alarm baseline threshold of the permission interval, analysis will be performed to compare the increase rate and determine whether an alarm is triggered.

[0134] Optionally, the step of determining whether each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range using the standard deviation of the call count, the standard deviation of the response time, and the standard deviation of the system health index specifically includes: comparing the standard deviation of the call count, the standard deviation of the response time, and the standard deviation of the system health index with a first alarm baseline threshold, a second alarm baseline threshold, and a third alarm baseline threshold, respectively, wherein the first alarm baseline threshold is greater than the second alarm baseline threshold, and the second alarm baseline threshold is greater than the third alarm baseline threshold; when the standard deviation of the response time is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, the standard deviation of the call count is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, it is determined that each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range.

[0135] The first alarm baseline threshold is greater than the second alarm baseline threshold, and the second alarm baseline threshold is greater than the third alarm baseline threshold. For example, the second alarm baseline threshold is 1.5 times the third alarm baseline threshold, and the first alarm baseline threshold is 3 times the third alarm baseline threshold.

[0136] If the standard deviation of the response time is greater than the third alarm baseline threshold but less than the second alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold but less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold but less than the second alarm baseline threshold, it indicates that the system corresponding to the proposed alarm service is within the healthy and normal range. The response time is slightly slower due to the increase in the number of calls. Therefore, it can be determined that each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range and will not trigger an alarm. Further analysis and observation will continue.

[0137] When the standard deviation of the response time is greater than the first alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold but less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold but less than the second alarm baseline threshold, it is determined that the response time index of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range.

[0138] When the standard deviation of the response time is greater than the first alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold but less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold but less than the second alarm baseline threshold, it indicates that the system corresponding to the alarm service is within the healthy and normal range. The increase in the number of calls is within the normal range. At this time, it indicates that the system's response time indicator has become abnormal. It is not due to the increase in the number of calls that the slowness is caused by network factors or other abnormalities in the program. Therefore, an alarm SMS can be issued in a timely manner, and the phenomenon should be further analyzed, observed and tracked.

[0139] When the standard deviation of the response time is greater than the second alarm baseline threshold and less than the first alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, calculate the year-on-year response time standard deviation, month-on-month response time standard deviation, year-on-year system health index standard deviation, month-on-month system health index standard deviation, year-on-year call count standard deviation, and month-on-month call count standard deviation within a preset time period;

[0140] It should be noted that when the standard deviation of the response time is greater than the second alarm baseline threshold and less than the first alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, it can be determined that the system corresponding to the proposed alarm service is within the healthy normal range, and the increase in the number of calls is within the normal range. At this time, it is necessary to analyze the indicators corresponding to the response time to determine whether it is within the normal fluctuation range. Then, the year-on-year response time standard deviation, month-on-month response time standard deviation, year-on-year system health index standard deviation, month-on-month system health index standard deviation, year-on-year call number standard deviation, and month-on-month call number standard deviation can be calculated to further determine whether the indicators of the proposed alarm service are within the normal fluctuation range.

[0141] The fluctuation type of each proposed alarm service in the proposed alarm service set is determined by the year-on-year response time standard deviation, the year-on-year system health index standard deviation, the year-on-year call count standard deviation, the month-on-month response time standard deviation, the month-on-month system health index standard deviation, and the month-on-month call count standard deviation.

[0142] It should be understood that the fluctuation type of each proposed alarm service can be determined by calculating the year-on-year and month-on-month standard deviations of various indicators, thereby determining whether the indicators of the proposed alarm service are within the normal fluctuation range. The fluctuation types of the proposed alarm service include small-amplitude continuous fluctuations, large-amplitude continuous fluctuations, and occasional fluctuations. Occasional fluctuations can include occasional abnormal fluctuations and occasional normal fluctuations.

[0143] Further, the step of determining the fluctuation type of the proposed alarm service includes: determining the fluctuation type of each proposed alarm service in the proposed alarm service set by using the year-on-year response time standard deviation, the year-on-year system health index standard deviation, the year-on-year call count standard deviation, the month-on-month response time standard deviation, the month-on-month system health index standard deviation, and the month-on-month call count standard deviation, including: determining the fluctuation type of each proposed alarm service in the proposed alarm service set when the year-on-year response time standard deviation, the year-on-year system health index standard deviation, the year-on-year call count standard deviation, the month-on-month response time standard deviation, the month-on-month system health index standard deviation, and the month-on-month call count standard deviation are all less than the second alarm baseline threshold. The fluctuation type is determined to be small-amplitude continuous fluctuation when the standard deviation of the month-on-month response time, the standard deviation of the month-on-month system health index, and the standard deviation of the month-on-month call count are all greater than the fourth alarm baseline threshold and the duration is greater than the first preset number. The fourth alarm baseline threshold is greater than the second alarm baseline threshold and less than the first alarm baseline threshold. When the standard deviation of the month-on-month response time, the standard deviation of the month-on-month system health index, and the standard deviation of the month-on-month call count are all greater than the fourth alarm baseline threshold and the duration is less than the first preset number, the fluctuation type is determined to be occasional fluctuation.

[0144] The standard deviation of response time compared to the same period last year is calculated as follows: (Formula 3)

[0145]

[0146] In Equation 3, TRNS is the standard deviation of response time compared to the same period last year, T1 is the average response time value of the current time period, and t is the request time of the same period in history, thus the standard deviation of response time compared to the same period last year is calculated.

[0147] The standard deviation of the month-on-month response time is calculated as follows: Formula 4:

[0148]

[0149] In Equation 4, HRNS is the standard deviation of the month-on-month response time, T1 is the average response time value of the current time period, and s is the data of a preset time period in the historical record, such as the data of the previous 5 minutes.

[0150] Based on Equations 4 and 5, the average system health index value for the current time period and the number of calls for the current time period can also be obtained, thereby calculating the standard deviation of the system health index year-on-year, the standard deviation of the number of calls year-on-year, the standard deviation of the system health index month-on-month, and the standard deviation of the number of calls month-on-month.

[0151] By continuously analyzing the performance index fluctuations of data over N minutes, it can be determined whether the standard deviations of year-on-year response time, year-on-year system health index, year-on-year call count, month-on-month response time, month-on-month system health index, and month-on-month call count are all within the second alarm baseline threshold. When the standard deviations of year-on-year response time, year-on-year system health index, year-on-year call count, month-on-month response time, month-on-month system health index, and month-on-month call count are all less than the second alarm baseline threshold, the fluctuation type of each proposed alarm service in the proposed alarm service set is determined to be small-amplitude continuous fluctuation.

[0152] When the fluctuation type of the proposed alarm service is small-amplitude continuous fluctuation, it is determined that each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range.

[0153] Small, continuous fluctuations are considered normal fluctuations and will not trigger an alarm, thus enabling automatic noise reduction.

[0154] like Figure 9 As shown, Figure 9 This is a dynamic diagram illustrating a small-amplitude continuous fluctuation. Figure 9 The year-on-year and month-on-month comparisons are multi-dimensional, including the number of calls, system health indicators, and the year-on-year and month-on-month standard deviations of response time.

[0155] It should be noted that when the standard deviation of the month-on-month response time, the standard deviation of the month-on-month system health index, and the standard deviation of the month-on-month call count are all greater than the fourth alarm baseline threshold, and the duration is greater than the first preset number, the fluctuation type of each proposed alarm service in the proposed alarm service set is determined to be large-scale continuous fluctuation. Here, the fourth alarm baseline threshold is greater than the second alarm baseline threshold and less than the first alarm baseline threshold. The fourth alarm baseline threshold can be twice the third alarm baseline threshold, and the first preset number can be half of the statistical time. For example, if the statistical time is 6 minutes, then the first preset number is 3 times. For example, if the month-on-month increase of 3 times is greater than the fourth alarm baseline threshold, then it is a continuous abnormal fluctuation, that is, a large-scale continuous fluctuation.

[0156] When the fluctuation type of the proposed alarm service is large and continuous fluctuation, it is determined that the response time index of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range.

[0157] It should be noted that when the fluctuation type of the proposed alarm service is large and continuous fluctuation, it is determined that the response time index of the proposed alarm service in the proposed alarm service set is not within the normal fluctuation range, and an alarm needs to be triggered.

[0158] like Figure 10 As shown, Figure 10 This is a dynamic diagram illustrating a type of fluctuation characterized by large-amplitude continuous fluctuations. Figure 10 If the month-on-month standard deviation of the medium indicator is greater than the fourth alarm baseline threshold, it is considered a continuous abnormal fluctuation.

[0159] It should be understood that when the standard deviation of the month-on-month response time, the standard deviation of the month-on-month system health index, and the standard deviation of the month-on-month call count are all greater than the fourth alarm baseline threshold and the duration is less than the first preset number, the fluctuation type of each proposed alarm service in the proposed alarm service set is determined to be occasional fluctuation. Data for 6 minutes can be analyzed continuously. If the month-on-month increase of less than 3 times is greater than the fourth alarm baseline threshold, it is considered occasional abnormal fluctuation.

[0160] When the fluctuation type of the proposed alarm service is occasional fluctuation, it is determined that the response time index of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range.

[0161] In practical implementation, when the fluctuation type of the proposed alarm service is intermittent fluctuation, if the response time index of the proposed alarm service in the proposed alarm service set is determined to be outside the normal fluctuation range, the alarm configuration adjustment can be referenced to further determine whether to trigger the alarm. For intermittent fluctuations, if it is an intermittent small-scale fluctuation, the tested alarm type such as intermittent small-scale fluctuation and short duration can be downgraded and noise-reduced, for example, only sent to the manufacturer and not to the user. If it is an intermittent large-scale fluctuation, it is only sent once. If it is continuous, it is handled according to the logic of long-term continuous. If the fault is continuous for a long time, the alarm noise reduction is achieved by different time intervals such as the first time, the second time after 5 minutes, the third time after 10 minutes, etc. The third alarm is then escalated and sent to the superior.

[0162] like Figure 11 As shown, Figure 11 This is a dynamic diagram illustrating the type of fluctuation as sporadic fluctuation. Figure 11 If the year-on-year standard deviation of the response time exceeds the fourth alarm baseline threshold for a certain period of time, it is considered an occasional abnormal fluctuation.

[0163] It should be understood that if the fluctuation type of the proposed alarm service is small-amplitude continuous fluctuation, it can be determined that each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range, and therefore no alarm will be triggered. When the fluctuation type of the proposed alarm service is large-amplitude continuous fluctuation, it can be determined that the response time indicator of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range. When the fluctuation type of the proposed alarm service is occasional fluctuation, it can be determined that the response time indicator of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range, and therefore it is necessary to further determine whether the proposed alarm service meets the noise reduction processing conditions.

[0164] like Figure 12 As shown, Figure 12 This is a schematic diagram of the overall alarm noise reduction process. By calculating the standard deviation, the proposed alarm services are determined based on the standard deviation, and it is determined whether the indicators of the proposed alarm services are within the normal fluctuation range. Multi-dimensional analysis and continuity analysis are performed on the indicators to identify proposed alarm services that are not within the normal fluctuation range. Furthermore, it is determined whether the proposed alarm services that are not within the normal fluctuation range meet the noise reduction processing conditions. Proposed alarm services that meet the noise reduction processing conditions are processed for noise reduction, while proposed alarm services that do not meet the noise reduction processing conditions are set as alarms.

[0165] This embodiment obtains a set of proposed alarm services based on the aforementioned correlation; acquires the indicator values ​​of each proposed alarm service in the set; obtains the call count, service response time, and system health index within the sampling period using the indicator values; calculates the standard deviations of the call count, response time, and system health index using the call count, response time, and system health index; and determines whether each indicator of each proposed alarm service in the set is within the normal fluctuation range using the standard deviations of the call count, response time, and system health index. This allows for quick and accurate judgment of whether each indicator of the proposed alarm service is within the normal fluctuation range based on different performance indicators from single and multi-dimensional perspectives, thereby improving the alarm effect.

[0166] Reference Figure 13 , Figure 13 This is a structural block diagram of the first embodiment of the alarm service noise reduction device of the present invention.

[0167] like Figure 13 As shown, the alarm service noise reduction device proposed in this embodiment of the invention includes:

[0168] The determination module 10 is used to determine the proposed alarm services based on the standard deviation of the indicator values ​​of the monitored services, and to determine the correlation between each proposed alarm service.

[0169] The acquisition module 20 is used to obtain a set of proposed alarm services based on the association relationship, and to determine whether each indicator of each proposed alarm service in the set of proposed alarm services is within the normal fluctuation range according to the standard deviation of the indicator values ​​of the set of proposed alarm services.

[0170] The determining module 10 is further configured to determine whether the proposed alarm service corresponding to the indicator of the proposed alarm service that is not within the normal fluctuation range meets the noise reduction processing conditions.

[0171] The noise reduction module 30 is used to perform noise reduction processing on the proposed alarm services that meet the noise reduction processing conditions.

[0172] This embodiment determines the proposed alarm services based on the standard deviation of the indicator values ​​of the monitored services and establishes the correlation between each proposed alarm service. Based on the correlation, a set of proposed alarm services is obtained, and the standard deviation of the indicator values ​​of the proposed alarm service set is used to determine whether each indicator of each proposed alarm service in the set is within the normal fluctuation range. It then determines whether the proposed alarm services corresponding to the indicators of those not within the normal fluctuation range meet the noise reduction processing conditions. The proposed alarm services that meet the noise reduction processing conditions are then subjected to noise reduction processing. By identifying the proposed alarm services and determining whether the indicators of the proposed alarm services are within the normal fluctuation range based on their standard deviation, proposed alarm services not within the normal fluctuation range are filtered out. Further filtering of the proposed alarm services using noise reduction processing conditions is then performed, thereby reducing the noise of the proposed alarm services that meet the noise reduction processing conditions and improving the accuracy of the alarms.

[0173] In one embodiment, the determining module 10 is further configured to: when the indicators of the proposed alarm services in the proposed alarm service set are not within the normal fluctuation range, designate the proposed alarm services corresponding to the indicators of the proposed alarm services that are not within the normal fluctuation range as alarm services; obtain the year-on-year and month-on-month changes in the alarm indicators of the alarm services; obtain the relationship type of each proposed alarm service based on the correlation between each proposed alarm service in the proposed alarm service set; and determine whether the corresponding alarm service in the proposed alarm service set meets the noise reduction processing conditions based on the year-on-year changes, the month-on-month changes, and the relationship type.

[0174] In one embodiment, the determining module 10 is further configured to: when the relationship type between the various proposed alarm services is a continuation relationship, obtain the year-on-year change and month-on-month change of each proposed alarm service in the previous period based on the year-on-year change and the month-on-month change; if either the year-on-year change or the month-on-month change in the previous period is inconsistent, determine that the proposed alarm service does not meet the noise reduction processing conditions; and merge the proposed alarm services in which both the year-on-year change and the month-on-month change in the previous period are consistent into a target proposed alarm service, wherein the target proposed alarm service is a proposed alarm service that meets the noise reduction processing conditions.

[0175] In one embodiment, the determining module 10 is further configured to: when the relationship type between the various proposed alarm services is a synchronous relationship, obtain the year-on-year change and month-on-month change of each proposed alarm service in the current period based on the year-on-year change and the month-on-month change; when either the year-on-year change or the month-on-month change is inconsistent, determine that the proposed alarm service does not meet the noise reduction processing conditions; when both the year-on-year change and the month-on-month change are consistent, merge the fitted alarm services into a target proposed alarm service, wherein the target proposed alarm service is a proposed alarm service that meets the noise reduction processing conditions.

[0176] In one embodiment, the acquisition module 20 is further configured to obtain a set of proposed alarm services based on the association relationship; obtain the indicator values ​​of each proposed alarm service in the set of proposed alarm services; obtain the number of calls, the response time of the service, and the system health index within the sampling period through the indicator values; calculate the standard deviation of the number of calls, the standard deviation of the response time, and the standard deviation of the system health index through the number of calls, the response time, and the system health index; and determine whether each indicator of each proposed alarm service in the set of proposed alarm services is within the normal fluctuation range through the standard deviation of the number of calls, the standard deviation of the response time, and the standard deviation of the system health index.

[0177] In one embodiment, the acquisition module 20 is further configured to compare the standard deviation of the number of calls, the standard deviation of the response time, and the standard deviation of the system health index with a first alarm baseline threshold, a second alarm baseline threshold, and a third alarm baseline threshold, respectively, wherein the first alarm baseline threshold is greater than the second alarm baseline threshold, and the second alarm baseline threshold is greater than the third alarm baseline threshold; when the standard deviation of the response time is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, it is determined that each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range; when the standard deviation of the response time is greater than the first alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, it is determined that the response time indicator of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range.

[0178] In one embodiment, the acquisition module 20 is further configured to calculate, when the response time standard deviation is greater than the second alarm baseline threshold and less than the first alarm baseline threshold, the call count standard deviation is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, and the system health index standard deviation is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, calculate the year-on-year response time standard deviation, the month-on-month response time standard deviation, the year-on-year system health index standard deviation, the month-on-month system health index standard deviation, the year-on-year call count standard deviation, and the month-on-month call count standard deviation within a preset time period; and use the year-on-year response time standard deviation, the year-on-year system health index standard deviation, and the month-on-month call count standard deviation to calculate the response time standard deviation, the system health index standard deviation, the call count standard deviation, and the call count standard deviation within a preset time period. The standard deviation, the year-on-year call count standard deviation, the month-on-month response time standard deviation, the month-on-month system health index standard deviation, and the month-on-month call count standard deviation determine the fluctuation type of each proposed alarm service in the proposed alarm service set; when the fluctuation type of the proposed alarm service is small-amplitude continuous fluctuation, it is determined that each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range; when the fluctuation type of the proposed alarm service is large-amplitude continuous fluctuation, it is determined that the response time indicator of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range; when the fluctuation type of the proposed alarm service is occasional fluctuation, it is determined that the response time indicator of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range.

[0179] Furthermore, to achieve the above objectives, the present invention also proposes an alarm service noise reduction device, which includes: a memory, a processor, and an alarm service noise reduction program stored in the memory and executable on the processor. The alarm service noise reduction program is configured to implement the steps of the alarm service noise reduction method described above.

[0180] Since this alarm service noise reduction device adopts all the technical solutions of all the above embodiments, it has at least all the beneficial effects brought about by the technical solutions of the above embodiments, which will not be repeated here.

[0181] Furthermore, this embodiment of the invention also proposes a storage medium storing an alarm service noise reduction program, which, when executed by a processor, implements the steps of the alarm service noise reduction method described above.

[0182] Since this storage medium adopts all the technical solutions of all the above embodiments, it has at least all the beneficial effects brought about by the technical solutions of the above embodiments, which will not be repeated here.

[0183] It should be understood that the above are merely illustrative examples and do not constitute any limitation on the technical solutions of the present invention. In specific applications, those skilled in the art can make settings as needed, and the present invention does not impose any restrictions on this.

[0184] It should be noted that the workflow described above is merely illustrative and does not limit the scope of protection of this invention. In practical applications, those skilled in the art can select some or all of the workflow to achieve the purpose of this embodiment according to actual needs, and no restrictions are imposed here.

[0185] In addition, for technical details not described in detail in this embodiment, please refer to the alarm service noise reduction method provided in any embodiment of the present invention, which will not be repeated here.

[0186] Furthermore, it should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or system that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or system. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or system that includes that element.

[0187] The sequence numbers of the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0188] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as read-only memory (ROM) / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal device (which may be a mobile phone, computer, server, or network device, etc.) to execute the methods described in the various embodiments of the present invention.

[0189] The above are merely preferred embodiments of the present invention and do not limit the scope of the patent. Any equivalent structural or procedural transformations made based on the description and drawings of the present invention, or direct or indirect applications in other related technical fields, are similarly included within the scope of patent protection of the present invention.

Claims

1. A method for noise reduction in alarm services, characterized in that, The alarm service noise reduction method includes: The proposed alarm services are determined based on the standard deviation of the indicator values ​​of the monitored services, and the correlation between each proposed alarm service is determined. The indicator values ​​of the monitored services include the response time, system health index, and number of calls of the monitored services. The correlation includes a continuation relationship or a synchronization relationship. Based on the aforementioned correlation, a set of proposed alarm services is obtained, and based on the standard deviation of the indicator values ​​of the proposed alarm service set, it is determined whether each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range. Determine whether the proposed alarm service corresponding to the indicator that is not within the normal fluctuation range meets the noise reduction processing conditions; Noise reduction processing will be applied to alarm services that meet the noise reduction processing conditions. The determination of whether the indicators for the proposed alarm service that are not within the normal fluctuation range meet the noise reduction processing conditions includes: When the indicator of a proposed alarm service in the proposed alarm service set is not within the normal fluctuation range, the proposed alarm service corresponding to the indicator of the proposed alarm service that is not within the normal fluctuation range shall be regarded as an alarm service. Obtain the year-on-year and month-on-month changes of the alarm indicators for the alarm service; The relationship type of each proposed alarm service is obtained based on the association relationship between each proposed alarm service in the proposed alarm service set; Based on the year-on-year change, the month-on-month change, and the relationship type, determine whether the alarm service corresponding to the set of proposed alarm services meets the noise reduction processing conditions; The step of determining whether the proposed alarm service in the proposed alarm service set meets the noise reduction processing conditions based on the year-on-year change, the month-on-month change, and the relationship type includes: When the relationship between the various proposed alarm services is a continuous relationship, the year-on-year change and month-on-month change of each proposed alarm service in the previous period are obtained based on the year-on-year change and the month-on-month change. If either the year-on-year change in the previous period or the month-on-month change in the previous period is inconsistent, it is determined that the proposed alarm service does not meet the noise reduction processing conditions. The proposed alarm services that have the same year-on-year change and month-on-month change in the previous period are merged into a target proposed alarm service, wherein the target proposed alarm service is a proposed alarm service that meets the noise reduction processing conditions.

2. The alarm service noise reduction method as described in claim 1, characterized in that, The step of determining whether the proposed alarm service in the proposed alarm service set meets the noise reduction processing conditions based on the year-on-year change, the month-on-month change, and the relationship type includes: When the relationship between the various proposed alarm services is a synchronous relationship, the year-on-year change and month-on-month change of each proposed alarm service in the current period are obtained based on the year-on-year change and the month-on-month change. If either the year-on-year change or the month-on-month change for the current period is inconsistent, it is determined that the proposed alarm service does not meet the noise reduction processing conditions. When the year-on-year change and the month-on-month change in the current period are both consistent, the proposed alarm services are merged into a target proposed alarm service, wherein the target proposed alarm service is a proposed alarm service that meets the noise reduction processing conditions.

3. The alarm service noise reduction method as described in claim 1, characterized in that, The process of obtaining a set of proposed alarm services based on the aforementioned correlation, and determining whether each indicator of each proposed alarm service in the set is within the normal fluctuation range based on the standard deviation of the indicator values ​​of the proposed alarm service set, includes: Based on the aforementioned relationships, a set of proposed alarm services is obtained; Obtain the index values ​​of each proposed alarm service in the proposed alarm service set; The metrics provide the number of calls, service response time, and system health index within the sampling period. The standard deviations of the call count, response time, and system health index are calculated using the call count, response time, and system health index. The standard deviation of the number of calls, the standard deviation of the response time, and the standard deviation of the system health index are used to determine whether each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range.

4. The alarm service noise reduction method as described in claim 3, characterized in that, The step of determining whether each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range by using the standard deviation of the call count, the standard deviation of the response time, and the standard deviation of the system health index includes: The standard deviation of the number of calls, the standard deviation of the response time, and the standard deviation of the system health index are compared with the first alarm baseline threshold, the second alarm baseline threshold, and the third alarm baseline threshold, respectively, wherein the first alarm baseline threshold is greater than the second alarm baseline threshold, and the second alarm baseline threshold is greater than the third alarm baseline threshold. When the standard deviation of the response time is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, it is determined that each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range. When the standard deviation of the response time is greater than the first alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold but less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold but less than the second alarm baseline threshold, it is determined that the response time index of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range.

5. The alarm service noise reduction method as described in claim 4, characterized in that, After comparing the standard deviation of the number of calls, the standard deviation of the response time, and the standard deviation of the system health index with the first alarm baseline threshold, the second alarm baseline threshold, and the third alarm baseline threshold, respectively, the method further includes: When the standard deviation of the response time is greater than the second alarm baseline threshold and less than the first alarm baseline threshold, the standard deviation of the number of calls is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, and the standard deviation of the system health index is greater than the third alarm baseline threshold and less than the second alarm baseline threshold, calculate the year-on-year response time standard deviation, month-on-month response time standard deviation, year-on-year system health index standard deviation, month-on-month system health index standard deviation, year-on-year call count standard deviation, and month-on-month call count standard deviation within a preset time period; The fluctuation type of each proposed alarm service in the proposed alarm service set is determined by the year-on-year response time standard deviation, the year-on-year system health index standard deviation, the year-on-year call count standard deviation, the month-on-month response time standard deviation, the month-on-month system health index standard deviation, and the month-on-month call count standard deviation. When the fluctuation type of the proposed alarm service is small-amplitude continuous fluctuation, it is determined that each indicator of each proposed alarm service in the proposed alarm service set is within the normal fluctuation range. When the fluctuation type of the proposed alarm service is large and continuous fluctuation, it is determined that the response time index of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range. When the fluctuation type of the proposed alarm service is occasional fluctuation, it is determined that the response time index of each proposed alarm service in the proposed alarm service set is not within the normal fluctuation range.

6. An alarm service noise reduction device, characterized in that, The alarm service noise reduction device includes: The determination module is used to determine the proposed alarm services based on the standard deviation of the indicator values ​​of the monitored services, and to determine the correlation between the proposed alarm services. The indicator values ​​of the monitored services include the response time, system health index and call count of the monitored services, and the correlation includes a continuation relationship or a synchronization relationship. The acquisition module is used to obtain a set of proposed alarm services based on the association relationship, and to determine whether each indicator of each proposed alarm service in the set of proposed alarm services is within the normal fluctuation range according to the standard deviation of the indicator values ​​of the set of proposed alarm services. The determining module is further configured to determine whether the proposed alarm service corresponding to the indicator of the proposed alarm service that is not within the normal fluctuation range meets the noise reduction processing conditions. The noise reduction module is used to reduce the noise of potential alarm services that meet the noise reduction processing conditions. The determining module is further configured to: when the indicators of the proposed alarm services in the proposed alarm service set are not within the normal fluctuation range, identify the proposed alarm services corresponding to the indicators of the proposed alarm services that are not within the normal fluctuation range as alarm services; obtain the year-on-year and month-on-month changes in the alarm indicators of the alarm services; obtain the relationship type of each proposed alarm service based on the correlation between each proposed alarm service in the proposed alarm service set; and determine whether the corresponding alarm service in the proposed alarm service set meets the noise reduction processing conditions based on the year-on-year changes, the month-on-month changes, and the relationship type. The determining module is further configured to, when the relationship type between the various proposed alarm services is a continuous relationship, obtain the year-on-year change and month-on-month change of each proposed alarm service in the previous period based on the year-on-year change and the month-on-month change; if either the year-on-year change or the month-on-month change in the previous period is inconsistent, determine that the proposed alarm service does not meet the noise reduction processing conditions; merge the proposed alarm services in which both the year-on-year change and the month-on-month change in the previous period are consistent into a target proposed alarm service, wherein the target proposed alarm service is a proposed alarm service that meets the noise reduction processing conditions.

7. An alarm service noise reduction device, characterized in that, The alarm service noise reduction device includes: a memory, a processor, and an alarm service noise reduction program stored in the memory and executable on the processor, wherein the alarm service noise reduction program is configured to implement the alarm service noise reduction method as described in any one of claims 1 to 5.

8. A storage medium, characterized in that, The storage medium stores an alarm service noise reduction program, which, when executed by the processor, implements the alarm service noise reduction method as described in any one of claims 1 to 5.

Images