A link alarm processing method, device, equipment and storage medium

Abstract

The present invention discloses a link alarm processing method, device, equipment and storage medium, including: obtaining an alarm service node, and determining an alarm service log corresponding to the alarm service node; obtaining a link identifier recorded in the alarm service log, and obtaining a tracking link corresponding to the alarm service node according to the link identifier, and a service log of each service node in the tracking link; wherein each service log includes a link identifier, a service node identifier and a parent node identifier; determining a child service node according to a service node identifier corresponding to the alarm service node and a parent node identifier of each service node; determining a target service node according to the service log corresponding to the child service node, and performing alarm processing according to the status information of the target service node. The technical solution of the present invention can improve the processing efficiency of link alarms and reduce the processing cost of link alarms.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a link alarm processing method, device, equipment and storage medium. Background Art

[0002] With the rapid development of information technology, the application scope of computer systems is becoming more and more extensive, and the information construction of various industries is becoming more and more perfect. As the business operations carried by information systems gradually increase, the security of information systems becomes more and more important. Whether link alarms can be quickly processed has become an important factor affecting the performance of information systems.

[0003] In the prior art, link alarms are usually handled by operation and maintenance personnel. Specifically, after receiving the link identifier corresponding to the alarm service node, the operation and maintenance personnel can manually search for the tracking link corresponding to each link identifier. Then, each service node in the above tracking link can be checked to determine whether each service node has an abnormality. Finally, each abnormal service node can be processed.

[0004] However, since the tracking links have not been analyzed, when there are many tracking links involved, multiple operation and maintenance personnel are required to check them at the same time to reduce the troubleshooting time, resulting in high labor costs and low troubleshooting efficiency. Summary of the invention

[0005] The present invention provides a link alarm processing method, device, equipment and storage medium, which can improve the processing efficiency of link alarms and reduce the processing cost of link alarms.

[0006] In a first aspect, an embodiment of the present invention provides a link alarm processing method, including:

[0007] Obtain the alarm service node and determine the alarm service log corresponding to the alarm service node;

[0008] Obtain the link identifier recorded in the alarm service log, and obtain the tracking link corresponding to the alarm service node and the service log of each service node in the tracking link according to the link identifier;

[0009] Among them, each service log includes a link identifier, a service node identifier, and a parent node identifier;

[0010] Determine the child service node according to the service node identifier corresponding to the alarm service node and the parent node identifier of each service node;

[0011] According to the service log corresponding to the sub-service node, the target service node is determined, and alarm processing is performed according to the status information of the target service node.

[0012] Optionally, obtain an alarm service node and determine the alarm service log corresponding to the alarm service node, including:

[0013] According to the preset alarm rules, determine whether each service node meets the alarm triggering conditions;

[0014] If so, determine whether each service node is in maintenance status through the maintenance system;

[0015] If there is an abnormal service node that is not in maintenance state, the abnormal service node is used as an alarm service node, and the alarm time period corresponding to the alarm service node is obtained;

[0016] Collect the alarm service logs of the alarm service node within the alarm time period.

[0017] Optionally, determining the child service node according to the link identifier and the service node identifier corresponding to the alarm service node includes:

[0018] According to the service node identifier corresponding to the alarm service node, determine whether there is a service node whose parent node identifier is equal to the service node identifier in the tracking link;

[0019] If yes, the service node is used as a child service node.

[0020] Optionally, determining the target service node according to the service log corresponding to the sub-service node includes:

[0021] Determine whether the service log corresponding to the sub-service node reports an error;

[0022] If so, determining whether there is a service node in the tracking link whose parent node identifier is equal to the service node identifier of the child service node;

[0023] If not, the parent service node of the child service node is used as the target service node.

[0024] Optionally, alarm processing is performed according to the status information of the target service node, including:

[0025] The target service node and the status of the target service node are displayed to the user through a visual interface to implement alarm processing.

[0026] Optionally, after the target service node and the status information of the target service node are displayed to the user through a visual interface, the method further includes:

[0027] Responding to a click operation triggered by a user on a target service node;

[0028] Obtain the association relationship between the target service node and each service node in the tracking link, and display the association relationship to the user through a visual interface.

[0029] In a second aspect, an embodiment of the present invention further provides a link alarm processing device, including:

[0030] The alarm log acquisition module is used to obtain the alarm service node and determine the alarm service log corresponding to the alarm service node;

[0031] A service log acquisition module is used to obtain the link identifier recorded in the alarm service log, and obtain the tracking link corresponding to the alarm service node according to the link identifier, as well as the service log of each service node in the tracking link; wherein each service log includes a link identifier, a service node identifier and a parent node identifier;

[0032] A sub-node determination module, used to determine a sub-service node according to a link identifier and a service node identifier corresponding to the alarm service node;

[0033] The alarm processing module is used to determine the target service node according to the service log corresponding to the sub-service node, and perform alarm processing according to the status of the target service node.

[0034] In a third aspect, an embodiment of the present invention further provides an electronic device, the electronic device comprising:

[0035] at least one processor; and

[0036] a memory communicatively connected to at least one processor; wherein,

[0037] The memory stores a computer program that can be executed by at least one processor. The computer program is executed by at least one processor so that the at least one processor can execute the link alarm processing method provided by any embodiment of the present invention.

[0038] In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium, which stores computer instructions, and the computer instructions are used to enable a processor to implement the link alarm processing method provided by any embodiment of the present invention when executed.

[0039] In a fifth aspect, a computer program product is provided. The computer program product includes a computer program. When the computer program is executed by a processor, the link alarm processing method provided by any embodiment of the present invention is implemented.

[0040] The technical solution provided by the embodiment of the present invention obtains an alarm service node and determines the alarm service log corresponding to the alarm service node; obtains the link identifier recorded in the alarm service log, and obtains the tracking link corresponding to the alarm service node according to the link identifier, and the service log of each service node in the tracking link; wherein each service log includes a link identifier, a service node identifier and a parent node identifier; determines the child service node according to the service node identifier corresponding to the alarm service node and the parent node identifier of each service node; determines the target service node according to the service log corresponding to the child service node, and performs alarm processing according to the status of the target service node. The technical means can improve the processing efficiency of link alarms and reduce the processing cost of link alarms.

[0041] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0043] Figure 1 is a flowchart of a link alarm processing method provided according to Embodiment 1 of the present invention;

[0044] Figure 2 is a flowchart of another link alarm processing method provided according to Embodiment 2 of the present invention;

[0045] Figure 3 is a flow chart of a method for determining a target service node provided by an embodiment of the present invention;

[0046] Figure 4 is a flowchart of another link alarm processing method provided according to Embodiment 3 of the present invention;

[0047] Figure 5 is a scenario schematic diagram of a link alarm processing method provided according to an embodiment of the present invention;

[0048] Figure 6 It is a structural diagram of a link alarm processing device provided according to Embodiment 4 of the present invention;

[0049] Figure 7 It is a schematic diagram of the structure of an electronic device provided by Embodiment 5 of the present invention. DETAILED DESCRIPTION

[0050] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0051] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0052] Embodiment 1

[0053] Figure 1 It is a flowchart of a link alarm processing method provided according to an embodiment of the present invention. This embodiment is applicable to the situation of processing link alarms. The method can be executed by a link alarm processing device. The link alarm processing device can be implemented in the form of hardware and / or software. The link alarm processing device can be configured in an electronic device such as a computer.

[0054] like Figure 1 As shown, a link alarm processing method disclosed in this embodiment includes:

[0055] S110: Acquire an alarm service node, and determine an alarm service log corresponding to the alarm service node.

[0056] In this step, optionally, the alarm service node can be determined according to the response parameters and / or preset status codes corresponding to each service node. For example, if the status code of service node A is different from the preset status code, service node A can be used as the alarm service node. Then, the alarm service log corresponding to the alarm service node can be collected through the log collection system.

[0057] S120: Obtain a link identifier recorded in the alarm service log, and obtain a tracking link corresponding to the alarm service node and a service log of each service node in the tracking link according to the link identifier.

[0058] Each service log includes a link identifier, a service node identifier, and a parent node identifier.

[0059] In this embodiment, the link identifier can be used to indicate the tracking link corresponding to each service node. The service node identifier can be used to identify the position of each service node in the tracking link. The parent node identifier can be used to indicate the parent service node of each service node. In actual applications, if the service node identifier of service A is equal to the parent node identifier of service B, then service A can be considered to be the parent service node of service B, that is, service A can call service B.

[0060] In a specific implementation, since each service node corresponds to at least one link identifier, all link identifiers corresponding to the alarm service node can be obtained according to the alarm service log. Then, each service node with the same link identifier as the alarm service node can be screened out. After that, the service logs of the above service nodes can be obtained.

[0061] S130: Determine a child service node according to the service node identifier corresponding to the alarm service node and the parent node identifier of each service node.

[0062] In this embodiment, after obtaining the link identifier and service node identifier corresponding to the alarm service node, the parent node identifier of each service node in the tracking link can be obtained. Then, the service node identifier can be compared with each parent node identifier to determine the child service node.

[0063] S140: Determine a target service node according to the service log corresponding to the sub-service node, and perform alarm processing according to the status of the target service node.

[0064] In this embodiment, the target service node may be the last abnormal service node in the tracking link. The status of the target service node may include the target service node being maintained, the target service node being abnormal, and the target service node being normal. The status of the target service node may be used to reflect the root cause of the alarm.

[0065] In a specific implementation, the service node identifier corresponding to the sub-service node can be determined based on the service log of the sub-service node. Then, the target service node can be determined based on the above service node identifier and the parent node identifier of the remaining service nodes in the tracking link. Finally, if the target service node is under maintenance, the alarm information issued by the alarm service node can be ignored. Alternatively, if the target service node is in an abnormal state, the tracking link corresponding to the alarm service node can be checked. Alternatively, if the target service node is in a normal state, the target service node may be incorrectly determined, and a message confirming the abnormality of the target service node may be sent to the user.

[0066] The advantage of this setting is that, compared with the prior art in which operation and maintenance personnel manually search for the tracking link corresponding to each link identifier to determine the target service node, the technical solution of this embodiment obtains the tracking link corresponding to the alarm service node through the alarm service log, and determines the target service node based on the service log of each service node in the tracking link, thereby reducing the processing cost of link alarms and improving the processing efficiency of link alarms.

[0067] The technical solution of this embodiment obtains an alarm service node and determines the alarm service log corresponding to the alarm service node; obtains the link identifier recorded in the alarm service log, and obtains the tracking link corresponding to the alarm service node and the service log of each service node in the tracking link according to the link identifier; wherein each service log includes a link identifier, a service node identifier and a parent node identifier; determines the child service node according to the service node identifier corresponding to the alarm service node and the parent node identifier of each service node; determines the target service node according to the service log corresponding to the child service node, and performs alarm processing according to the status of the target service node. This technical solution solves the problem that in the prior art, operation and maintenance personnel manually search each tracking link to determine the target service node, resulting in a long alarm investigation time when there are many tracking links corresponding to the alarm service node, reduces the processing cost of link alarms, and improves the processing efficiency of link alarms.

[0068] Embodiment 2

[0069] Figure 2 It is a flowchart of another link alarm processing method provided according to the second embodiment of the present invention. This embodiment is based on the further optimization and expansion of the above embodiments and can be combined with various optional technical solutions in the above implementation methods.

[0070] like Figure 2 As shown, another link alarm processing method disclosed in this embodiment includes:

[0071] S210: Obtain an alarm service node, and determine an alarm service log corresponding to the alarm service node.

[0072] In an optional implementation of an embodiment of the present invention, an alarm service node is obtained, and an alarm service log corresponding to the alarm service node is determined, including: judging whether each service node meets the alarm triggering condition according to a preset alarm rule; if so, determining whether each service node is in a maintenance state through a maintenance system; if there is an abnormal service node that is not in a maintenance state, the abnormal service node is used as an alarm service node, and the alarm time period corresponding to the alarm service node is obtained; and the alarm service log of the alarm service node within the alarm time period is collected.

[0073] In this embodiment, optionally, an alarm rule may be preset such that if the response time of the service node corresponding to the service log exceeds a preset time threshold, it may be considered that the service node meets the alarm triggering condition.

[0074] For example, assuming that there are services A, B, and C, you can collect logs for services A, B, and C within 1 minute. Then, you can first determine whether there are any responses that take longer than 3 seconds in the 1-minute log corresponding to service A. If so, it can be considered that service A meets the alarm triggering condition. If not, you can determine whether there are any responses that take longer than 3 seconds in the 1-minute log corresponding to services B and C.

[0075] In a specific implementation, since the maintenance system records each maintenance of each service node, when a service node meets the alarm triggering condition, it can be determined according to the maintenance system whether the service node is under maintenance.

[0076] The advantage of this setting is that by obtaining the maintenance status of the alarm service node through the maintenance system, it is possible to quickly confirm whether the alarm service node is under maintenance. Secondly, by collecting the alarm service logs within the alarm time period, the collection scope of the alarm service logs can be reduced and the efficiency of alarm investigation can be improved.

[0077] S220: Obtain a link identifier recorded in the alarm service log, and obtain a tracking link corresponding to the alarm service node and a service log of each service node in the tracking link according to the link identifier.

[0078] S230. According to the service node identifier corresponding to the alarm service node, determine whether there is a service node in the tracking link whose parent node identifier is equal to the service node identifier. If so, execute S240; if not, execute S260.

[0079] S240: Use the service node as a child service node.

[0080] S250: Determine the target service node according to the service log corresponding to the sub-service node.

[0081] S260: Set the alarm service node as the target service node.

[0082] In a specific implementation, if there is no service node in the tracing link whose parent node identifier is equal to the service node identifier of the alarm service node, the alarm service node may be considered to be the last error reporting node in the tracing link, ie, the target service node.

[0083] Figure 3 The present invention provides a flow chart of a method for determining a target service node according to an embodiment of the present invention.

[0084] For example, Figure 3 As shown, assuming that application C service F is an alarm service node, the alarm service log is obtained. The above alarm service log contains the following content: the link identifier is 1, the parent node identifier is 04, the service node identifier is 05, the log error, the alarm service node is service F, and the application corresponding to service F is application C. Traverse the service logs of each service node in the tracking link. Determine whether there is a service log containing the following content: the link identifier is 1, the parent node identifier is 05, and the log error. If not, it can be considered that application C service F is the last error node of a branch of the tracking link with the link identifier 1, that is, the target service node.

[0085] S270: Perform alarm processing according to the status of the target service node.

[0086] The advantage of such a setting is that, when the target service node is in a maintenance state, other service nodes that call the target service node may also be abnormal, resulting in a large number of tracking links for the same target service node, and the abnormal service nodes corresponding to each tracking link will all issue alarm information, resulting in a large number of alarms and difficulty in alarm troubleshooting. Therefore, the technical solution of this embodiment quickly confirms whether the alarm service node is caused by the target service node in a maintenance state according to the state of the target service node. If so, the alarm information issued by the alarm service node is ignored, which reduces the alarm troubleshooting scope and improves the efficiency of alarm processing.

[0087] In an optional implementation of the embodiment of the present invention, alarm processing is performed according to the state of the target service node, including: displaying the target service node and the state of the target service node to the user through a visual interface to implement alarm processing.

[0088] In this step, specifically, the visualization interface may be a human-computer interaction interface. The user may trigger a query request through the visualization interface, and after the query request is detected, the query result is fed back to the user.

[0089] Optionally, after the target service node and the status of the target service node are displayed to the user through a visual interface, it also includes: responding to a click operation triggered by the user on the target service node; obtaining the association relationship between the target service node and each service node in the tracking link, and displaying the association relationship to the user through a visual interface.

[0090] In a specific implementation, after a click operation is detected, it can be considered that the user has triggered a query request. After detecting that the user has triggered a query request, the association relationship between the target service node and each service node in the tracking link can be displayed to the user through a visual interface. Optionally, the above association relationship can be a call relationship between each service node in the tracking link.

[0091] The advantage of this setting is that, through the visual interface, users can more intuitively understand the relationship between the service nodes in the tracking link.

[0092] The technical solution of this embodiment obtains an alarm service node and determines an alarm service log; obtains a link identifier recorded in the alarm service log, and obtains a tracking link corresponding to the alarm service node and a service log of each service node in the tracking link according to the link identifier; determines whether there is a service node in the tracking link whose parent node identifier is equal to the service node identifier according to the service node identifier corresponding to the alarm service node, and if so, uses the service node as a child service node; determines a target service node according to the service log corresponding to the child service node; if not, uses the alarm service node as the target service node; and processes an alarm according to the status of the target service node, solving the problem that in the prior art, when the operation and maintenance personnel manually search each tracking link to determine the target service node, the alarm investigation time is too long when there are many tracking links corresponding to the alarm service node, thereby reducing the processing cost of link alarms and improving the processing efficiency of link alarms.

[0093] Embodiment 3

[0094] Figure 4 It is a flowchart of another link alarm processing method provided according to the third embodiment of the present invention. This embodiment is based on the further optimization and expansion of the above embodiments and can be combined with various optional technical solutions in the above implementation methods.

[0095] like Figure 4 As shown, another link alarm processing method disclosed in this embodiment includes:

[0096] S310: Obtain an alarm service node, and determine the alarm service log corresponding to the alarm service node.

[0097] S320: Obtain a link identifier recorded in the alarm service log, and obtain a tracking link corresponding to the alarm service node and a service log of each service node in the tracking link according to the link identifier.

[0098] S330: Determine a child service node according to the service node identifier corresponding to the alarm service node and the parent node identifier of each service node.

[0099] S340, determine whether the service log corresponding to the child service node reports an error, if so, execute S350, if not, execute S380.

[0100] For example, Figure 3As shown, assuming that the alarm service node is application A service D, the service log of service D in the alarm time period is obtained. The above alarm service log records the following content: the link identifier is 1, the parent node identifier is 03, the service node identifier is 04, the log reports an error, the alarm service node is service D, and the application corresponding to service D is application A. Traverse the service logs of each service node in the tracking link. Determine whether there is a service log containing the following content: the link identifier is 1, the parent node identifier is 04, and the log does not report an error. If so, it can be considered that application A service D is the last error reporting node of a branch of the tracking link with the link identifier 1, that is, the target service node.

[0101] S350, determine whether there is a service node in the tracking link whose parent node identifier is equal to the service node identifier of the child service node, if so, execute S360, if not, execute S370.

[0102] S360: Use the current service node as a new child service node.

[0103] After the current service node is used as a new child service node, the process returns to execute S340.

[0104] S370: Use the child service node as the target service node.

[0105] S380: Use the parent service node of the child service node as the target service node.

[0106] S390: Perform alarm processing according to the status of the target service node.

[0107] The technical solution of this embodiment obtains an alarm service node and determines an alarm service log; obtains a link identifier recorded in the alarm service log, a tracking link corresponding to the alarm service node, and a service log of each service node in the tracking link; determines a child service node according to a service node identifier corresponding to the alarm service node and a parent node identifier of each service node; determines whether the service log corresponding to the child service node reports an error, and if so, determines whether there is a service node in the tracking link whose parent node identifier is equal to the service node identifier of the child service node, and if so, uses the service node as an updated child service node, and if not, uses the child service node as a target service node; if not, uses the parent service node of the child service node as the target service node; the technical means of performing alarm processing according to the status of the target service node solves the problem that in the prior art, operation and maintenance personnel manually search each tracking link to determine the target service node, resulting in a long alarm troubleshooting time when there are many tracking links corresponding to the alarm service node, reduces the alarm troubleshooting cost, and improves the alarm processing efficiency.

[0108] Figure 5The figure is a schematic diagram of a link alarm processing method provided according to an embodiment of the present invention.

[0109] In a preferred implementation of the embodiment of the present invention, Figure 5 As shown, first, the alarm system determines whether each service node meets the alarm triggering condition according to the preset alarm rules, and sends the alarm service node that meets the alarm triggering condition to the maintenance system. The maintenance system searches for the maintenance parameters corresponding to the alarm service node according to the alarm service node sent by the alarm system, and sends the above maintenance parameters to the alarm system. The alarm system receives the above maintenance parameters and determines whether the above alarm service node is in maintenance state. If so, the alarm system shields the alarm information of the alarm service node according to the user settings. If not, the alarm system sends the application, service and time parameters to the data factory. The data factory forwards the received application, service and time parameters to the data engine. Optionally, the above data factory can be used for data cleaning. Then, the data engine receives the application, service and time parameters, and searches the alarm service log according to the above parameters. The data engine can filter the link identifier in the alarm service log, and search the service logs of each service node corresponding to all the tracking links involved in the above link identifier according to the filtering results. Optionally, service logs of non-alarm service nodes within any time period may be collected.

[0110] Afterwards, each service log is sent to the data factory. The data factory stores each service log in the message collection corresponding to the distributed streaming platform kafka. The data factory searches for each service node with the same link identifier based on the service node identifier of the alarm service log. There can be multiple results of the retrieval. For example, the parent node identifier with the same value as the service node identifier of the alarm service log cannot be found in other service logs with the same link identifier. Alternatively, the parent node identifier with the same value as the service node identifier of the alarm service log is found in other service logs with the same link identifier, but there is no error in each service log. The data factory can summarize the service logs of all filtered target service nodes and send the target service node to the alarm system. After the alarm system receives the above-mentioned target service node, it searches for the maintenance parameters of the target service node in the maintenance system to determine whether the target service node is in maintenance status.

[0111] Finally, the alarm system issues an alarm based on the maintenance status of the target service node and pushes the alarm content to the alarm page. Exemplarily, the alarm content is as follows: a certain application service triggers a certain alarm rule; the target service nodes of all tracking links involved in the service during the alarm time period are: application B service A (not maintained), application D service A (under maintenance), click to view details. Users can open the alarm details page according to the click to view details link provided on the alarm page to obtain the aggregate topology of the tracking links involved in the target service node. The above-mentioned aggregate topology can include application dimensions and service dimensions. Users can click on the application node or service node in the aggregate topology to obtain the status of the above-mentioned application node or service node.

[0112] The advantage of this setting is that by aggregating the nodes in the tracking link, users can intuitively obtain the upstream and downstream service nodes and related core indicators of the alarm service node, thereby improving the efficiency of alarm investigation.

[0113] Embodiment 4

[0114] Figure 6 This is a structural diagram of a link alarm processing device provided in Embodiment 4 of the present invention. This embodiment is applicable to the situation of processing link alarms. The link alarm processing device can be implemented in the form of hardware and / or software and can be configured in an electronic device such as a computer.

[0115] like Figure 6 As shown, the link alarm processing device disclosed in this embodiment includes:

[0116] The alarm log acquisition module 61 is used to acquire the alarm service node and determine the alarm service log corresponding to the alarm service node;

[0117] The service log acquisition module 62 is used to obtain the link identifier recorded in the alarm service log, and obtain the tracking link corresponding to the alarm service node according to the link identifier, and the service log of each service node in the tracking link; wherein each service log includes a link identifier, a service node identifier and a parent node identifier;

[0118] The sub-node determination module 63 is used to determine the sub-service node according to the link identifier and the service node identifier corresponding to the alarm service node;

[0119] The alarm processing module 64 is used to determine the target service node according to the service log corresponding to the sub-service node, and perform alarm processing according to the status of the target service node.

[0120] The technical solution in this embodiment, through the mutual cooperation of the alarm log acquisition module, the service log acquisition module, the sub-node determination module and the alarm processing module, solves the problem that the prior art requires operation and maintenance personnel to manually search each tracking link to determine the target service node, resulting in a long alarm investigation time when there are many tracking links corresponding to the alarm service node. It reduces the processing cost of link alarms and improves the processing efficiency of link alarms.

[0121] Optionally, the alarm log acquisition module 61 includes:

[0122] An alarm judgment unit is used to judge whether each service node meets the alarm triggering condition according to the preset alarm rules;

[0123] a maintenance status judgment unit, for determining whether each service node is in a maintenance state through a maintenance system;

[0124] An alarm time period acquisition unit is used to, if there is an abnormal service node that is not in maintenance state, take the abnormal service node as an alarm service node and acquire the alarm time period corresponding to the alarm service node;

[0125] The alarm log collection unit is used to collect the alarm service logs of the alarm service node within the alarm time period.

[0126] Optionally, the child node determination module 63 includes:

[0127] An identification judgment unit, used to judge whether there is a service node whose parent node identification is equal to the service node identification in the tracking link according to the service node identification corresponding to the alarm service node;

[0128] The sub-service node determining unit is configured to, if yes, use the service node as a sub-service node.

[0129] Optionally, the alarm processing module 64 includes:

[0130] A log error judgment unit, used to judge whether the service log corresponding to the sub-service node reports an error;

[0131] a service identification determination unit, configured to determine whether there is a service node in the tracking link whose parent node identification is equal to the service node identification of the child service node;

[0132] a target service node determination unit, configured to, if not, use the parent service node of the child service node as the target service node;

[0133] A visualization display unit is used to display the target service node and the status of the target service node to the user through a visualization interface to realize alarm processing;

[0134] A click operation response unit, used to respond to a click operation triggered by a user on a target service node;

[0135] The association relationship acquisition unit is used to acquire the association relationship between the target service node and each service node in the tracking link, and display the association relationship to the user through a visual interface.

[0136] The link alarm processing device provided in the embodiment of the present invention can execute the link alarm processing method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method. For the contents not described in detail in this embodiment, reference can be made to the description in any method embodiment of the present application.

[0137] Embodiment 5

[0138] Figure 7 A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. The electronic device 10 is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device 10 can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0139] like Figure 7 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0140] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0141] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as a link alarm processing method.

[0142] In some embodiments, the link alarm processing method may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the link alarm processing method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to execute the link alarm processing method in any other appropriate manner (e.g., by means of firmware).

[0143] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0144] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0145] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0146] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0147] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0148] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0149] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0150] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A link alarm processing method, characterized in that: include: Obtain an alarm service node, and determine the alarm service log corresponding to the alarm service node; Obtaining a link identifier recorded in the alarm service log, and obtaining a tracking link corresponding to the alarm service node and a service log of each service node in the tracking link according to the link identifier; Wherein, each of the service logs includes a link identifier, a service node identifier, and a parent node identifier; Determine a child service node according to the service node identifier corresponding to the alarm service node and the parent node identifier of each service node; Determine the target service node according to the service log corresponding to the sub-service node, and perform alarm processing according to the status of the target service node; The step of determining the target service node according to the service log corresponding to the sub-service node includes: Determine whether the service log corresponding to the sub-service node reports an error; If the service log corresponding to the sub-service node reports an error, determine whether there is a service node whose parent node identifier is equal to the service node identifier of the sub-service node in the tracking link; if there is a service node whose parent node identifier is equal to the service node identifier of the sub-service node in the tracking link, use the current service node as the new sub-service node; if there is no service node whose parent node identifier is equal to the service node identifier of the sub-service node in the tracking link, use the sub-service node as the target service node; If the service log corresponding to the child service node does not report an error, the parent service node of the child service node is used as the target service node; Wherein, the target service node is the last abnormal service node in the tracking link; The obtaining of the alarm service node and determining the alarm service log corresponding to the alarm service node includes: According to the preset alarm rules, determine whether each service node meets the alarm triggering conditions; If yes, determining whether each of the service nodes is in maintenance state through the maintenance system; If there is an abnormal service node that is not in maintenance state, the abnormal service node is used as an alarm service node, and an alarm time period corresponding to the alarm service node is obtained; Collecting the alarm service log of the alarm service node within the alarm time period; The performing alarm processing according to the status information of the target service node includes: The target service node and the status of the target service node are displayed to the user through a visual interface to implement alarm processing; After presenting the target service node and the status information of the target service node to the user through a visual interface, the method further includes: Responding to a click operation triggered by a user on a target service node; The association relationship between the target service node and each service node in the tracking link is obtained, and the association relationship is displayed to the user through a visual interface; wherein the association relationship is a calling relationship between each service node in the tracking link.

2. The method according to claim 1, characterized in that The determining the sub-service node according to the link identifier and the service node identifier corresponding to the alarm service node includes: According to the service node identifier corresponding to the alarm service node, determining whether there is a service node whose parent node identifier is equal to the service node identifier in the tracking link; If so, the service node is used as a child service node.

3. A link alarm processing device, characterized in that: The device comprises: An alarm log acquisition module is used to acquire an alarm service node and determine the alarm service log corresponding to the alarm service node; A service log acquisition module, used to obtain the link identifier recorded in the alarm service log, and obtain the tracking link corresponding to the alarm service node and the service log of each service node in the tracking link according to the link identifier; wherein each of the service logs includes a link identifier, a service node identifier and a parent node identifier; A sub-node determination module, used to determine a sub-service node according to a link identifier and a service node identifier corresponding to the alarm service node; An alarm processing module, used to determine a target service node according to the service log corresponding to the sub-service node, and perform alarm processing according to the status of the target service node; Wherein, the alarm processing module includes: A log error judgment unit, used to judge whether the service log corresponding to the sub-service node reports an error; a service identification judgment unit, configured to judge whether there is a service node whose parent node identification is equal to the service node identification of the child service node in the tracking link if the service log corresponding to the child service node reports an error; if there is a service node whose parent node identification is equal to the service node identification of the child service node in the tracking link, use the current service node as a new child service node; if there is no service node whose parent node identification is equal to the service node identification of the child service node in the tracking link, use the child service node as a target service node; a target service node determination unit, configured to use the parent service node of the child service node as the target service node if the service log corresponding to the child service node does not report an error; wherein the target service node is the last abnormal service node in the tracking link; Wherein, the alarm log acquisition module includes: An alarm judgment unit is used to judge whether each service node meets the alarm triggering condition according to the preset alarm rules; a maintenance status judgment unit, configured to determine, through a maintenance system, whether each of the service nodes is in a maintenance state; An alarm time period determination and acquisition unit, configured to, if there is an abnormal service node that is not in maintenance state, use the abnormal service node as an alarm service node and acquire an alarm time period corresponding to the alarm service node; An alarm log collection unit, used to collect the alarm service log of the alarm service node within the alarm time period; Wherein, the alarm processing module further includes: A visualization display unit, used to display the target service node and the status of the target service node to the user through a visualization interface to implement alarm processing; A click operation response unit, used to respond to a click operation triggered by a user on a target service node; The association relationship acquisition unit is used to acquire the association relationship between the target service node and each service node in the tracking link, and present the association relationship to the user through a visual interface; wherein the association relationship is a calling relationship between each service node in the tracking link.

4. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the link alarm processing method according to any one of claims 1 to 2.

5. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the link alarm processing method according to any one of claims 1 to 2 when executed.

6. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the link alarm processing method according to any one of claims 1 to 2 is implemented.

Images