Index monitoring method, device and equipment and storage medium

Abstract

The application provides a kind of index monitoring method, device, equipment and storage medium, it is related to network operation and maintenance technical field, the method comprises: the performance index data of monitored network element is acquired;The performance index data includes the index value of multiple monitoring indexes, and the index identification of each monitoring index;Threshold rule associated with the index identification is acquired;The index value of each monitoring index is combined according to the threshold rule to determine whether to generate the alarm information of the monitored network element. By acquiring the threshold rule associated with the index identification of monitoring index, multiple monitoring indexes are combined according to the threshold rule to determine whether to generate the alarm information of the monitored network element, based on the monitoring mode of multiple index combination determination, the invalid alarm and false alarm rate of the monitored network element are reduced, which is beneficial to improve the accuracy and credibility of network element alarm.

Description

TECHNICAL FIELD

[0001] The present application relates to the network operation and maintenance technical field, and particularly relates to an index monitoring method, device, equipment and storage medium. BACKGROUND

[0002] At present, in network operation and maintenance, the monitoring of network element performance indexes generally adopts a conventional "large particle" single performance index threshold, that is, a corresponding threshold is set for each index, and once the threshold is exceeded, a performance alarm is given to the network element for the out-of-limit index. In the traditional monitoring scene based on a single performance index threshold, due to network traffic changes and other factors, fluctuations in network element performance data will occur, which will usually cause the instantaneous value of the performance index of the network element to exceed the threshold. Abnormal alarms are given to the network element based on the single index threshold, which will generate a large number of invalid alarms or cause index abnormal false alarms, affecting the accuracy and reliability of the network element performance alarm. SUMMARY

[0003] The present application provides an index monitoring method, device, equipment and storage medium to solve the defects of the existing monitoring method based on a single performance index threshold, which is prone to invalid alarms or index abnormal false alarms, affecting the accuracy and reliability of the alarm.

[0004] The present application provides an index monitoring method, comprising:

[0005] Obtaining performance index data of a monitored network element; the performance index data comprises index values of a plurality of monitoring indexes and index identifiers of the monitoring indexes;

[0006] Obtaining a threshold rule associated with the index identifier;

[0007] Combining and determining the index values of the monitoring indexes according to the threshold rule to determine whether to generate alarm information of the monitored network element.

[0008] According to the index monitoring method provided by the present application, the combining and determining of the index values of the monitoring indexes according to the threshold rule to determine whether to generate alarm information of the monitored network element comprises:

[0009] Determining the threshold type of each monitoring index according to the threshold rule; the threshold type comprises a static threshold and a dynamic threshold;

[0010] Obtaining the threshold value of each monitoring index according to the threshold type, and comparing the index values of each monitoring index with the threshold value to obtain a comparison result of each monitoring index;

[0011] Combining and determining the comparison results of each monitoring index according to the threshold rule to determine whether to generate alarm information of the monitored network element.

[0012] According to the index monitoring method provided by the application, if the threshold type comprises a dynamic threshold, the threshold value of the dynamic threshold is a same period value; the threshold value of each monitoring index is obtained according to the threshold type, comprising:

[0013] determining a time granularity corresponding to a first monitoring index according to the threshold rule; the first monitoring index is a monitoring index in which the threshold type is a dynamic threshold and the threshold value of the dynamic threshold is a same period value;

[0014] obtaining the same period value of the first monitoring index based on the first historical index of the first monitoring index under the time granularity, and obtaining the threshold value of the first monitoring index.

[0015] According to the index monitoring method provided by the application, if the threshold type comprises a dynamic threshold, the threshold value of the dynamic threshold is a baseline value; the threshold value of each monitoring index is obtained according to the threshold type, comprising:

[0016] determining a cycle granularity corresponding to a second monitoring index according to the threshold rule; the second monitoring index is a monitoring index in which the threshold type is a dynamic threshold and the threshold value of the dynamic threshold is a baseline value;

[0017] obtaining a second historical index of the second monitoring index, and obtaining the baseline value of the second historical index according to the cycle granularity, to obtain the threshold value of the second monitoring index; the baseline value comprises at least one of a maximum value, a minimum value and an average value.

[0018] According to the index monitoring method provided by the application, the comparison results of each monitoring index are combined and determined according to the threshold rule, to determine whether to generate alarm information of the monitored network element, comprising:

[0019] determining an out-of-limit index according to the comparison results of each monitoring index, and determining an observation period of the out-of-limit index according to the threshold rule;

[0020] determining whether to generate alarm information of the monitored network element according to whether the out-of-limit time point of the out-of-limit index is within the observation period;

[0021] If the out-of-limit time point of the out-of-limit index is within the observation period, the alarm information of the monitored network element is generated.

[0022] According to the index monitoring method provided by the application, before the index values of each monitoring index are combined and determined according to the threshold rule, the method further comprises:

[0023] determine, according to the threshold rule, an index combination requiring combination judgment;

[0024] verify, based on the index combination, the index integrity of each monitoring index.

[0025] According to the index monitoring method provided by the application, the method further comprises:

[0026] obtain threshold configuration information of any monitored network element; the threshold configuration information comprises a threshold rule name, an effective time period, a start-stop state, and a threshold effective resource range;

[0027] generate a threshold rule of the monitored network element according to the threshold configuration information; the threshold effective resource range is used to represent a range of monitored network elements to which the threshold rule is applicable, and the threshold rule comprises an index combination that the monitored network element needs to monitor, and a threshold type of each monitoring index in the index combination;

[0028] associate the threshold rule with an index identifier of each monitoring index in the index combination.

[0029] The application further provides an index monitoring device, comprising:

[0030] an index collection module, configured to obtain performance index data of a monitored network element; the performance index data comprises index values of a plurality of monitoring indexes, and index identifiers of each monitoring index;

[0031] a rule association module, configured to obtain a threshold rule associated with the index identifier;

[0032] an index judgment module, configured to perform combination judgment on the index values of each monitoring index according to the threshold rule, and determine whether to generate alarm information of the monitored network element.

[0033] The application further provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the index monitoring method according to any of the above when executing the program.

[0034] The application further provides a non-transitory computer readable storage medium, which stores a computer program, and the computer program implements the steps of the index monitoring method according to any of the above when executed by a processor.

[0035] The application further provides a computer program product, comprising a computer program, and the computer program implements the steps of the index monitoring method according to any of the above when executed by a processor.

[0036] The application provides an index monitoring method, device, equipment and storage medium, the method comprises the steps that the threshold rule associated with the index identification of the monitoring index is acquired, the multiple monitoring indexes are combined and judged according to the threshold rule, and whether alarm information of the monitored network element is generated is determined, the monitoring mode based on the multiple index combination judgment reduces the invalid alarm and the false alarm rate of the monitored network element, and the accuracy and the credibility of the network element alarm are improved. BRIEF DESCRIPTION OF DRAWINGS

[0037] In order to more clearly illustrate the technical solutions in the application or prior art, the drawings needed to be used in the embodiments or prior art description will be briefly introduced as follows. Obviously, the drawings in the following description are some embodiments of the application, and other drawings can be obtained by those skilled in the art without creative effort on the basis of these drawings.

[0038] Figure 1 Fig. 1 is a flowchart of an index monitoring method provided by an embodiment of the application;

[0039] Figure 2 Fig. 2 is an index monitoring flowchart provided by an embodiment of the application;

[0040] Figure 3 Fig. 3 is a structural diagram of an index monitoring device provided by an embodiment of the application;

[0041] Figure 4 Fig. 4 is a structural diagram of an electronic device provided by the application. DETAILED DESCRIPTION

[0042] In order to make the purpose, technical scheme and advantages of the application more clear, the technical scheme in the application will be clearly and completely described in the following with reference to the drawings in the application. Obviously, the described embodiments are some of the embodiments of the application, but not all the embodiments. Based on the embodiments in the application, all other embodiments obtained by those skilled in the art without creative effort belong to the protection scope of the application.

[0043] It should be noted that in the description of the present application, the terms "comprising", "containing" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed or inherent to such a process, method, article or device. Without more limitations, the element defined by the statement "comprising a" does not exclude the presence of additional identical elements in the process, method, article or device comprising the element. The terms "upper", "lower" and the like indicate the orientation or positional relationship shown in the drawings, and are only used to facilitate the description of the present application and simplify the description, and do not indicate or imply that the devices or elements referred to must have a particular orientation, be constructed and operated in a particular orientation, and therefore cannot be understood as a limitation on the present application. Unless otherwise specified and limited, the terms "mounting", "connecting", "connecting" should be broadly understood, for example, it can be fixedly connected, or it can be detachably connected, or integrally connected; it can be mechanically connected, or it can be electrically connected; it can be directly connected, or it can be indirectly connected through an intermediate medium, or it can be connected inside two elements. For those skilled in the art, the specific meaning of the above terms in the present application can be understood according to the specific circumstances.

[0044] The terms "first", "second" and the like in the present application are used to distinguish similar objects, and are not used to describe a particular order or sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described herein, and the objects distinguished by "first", "second" and the like are generally a class, and do not limit the number of objects, for example, the first object can be one or more. In addition, "and / or" means at least one of the connected objects, and the character " / ", generally means that the front and rear associated objects are in a "or" relationship.

[0045] The embodiment of the present application provides an index monitoring method for monitoring the performance index of a network element, adopting a "small particle" monitoring mode of multiple index and multiple threshold combination, reducing the invalid alarm and false alarm of the network element, and improving the alarm accuracy and reliability. Specifically, referring to Figure 1 , Figure 1 is a flowchart of the index monitoring method provided by the embodiment of the present application, based on Figure 1 , the index monitoring method provided by the embodiment of the present application comprises:

[0046] Step 100, acquiring performance index data of a monitored network element; the performance index data comprises index values of a plurality of monitoring indexes, and index identifiers of each monitoring index;

[0047] Step 200, obtaining threshold rules associated with the index identifiers of the monitoring indexes;

[0048] Step 300, combining the index values of the monitoring indexes according to the threshold rules to determine whether to generate the alarm information of the monitored network element.

[0049] Firstly, the performance index data of the monitored network element is obtained, which includes the index values of the monitoring indexes of the monitored network element and the index identifiers of the monitoring indexes. The performance index data of the monitored network element is obtained by performing statistics and feature extraction on the performance data of the monitored network element. The monitored network element includes one or more, and the performance index data of any monitored network element can include multiple monitoring indexes and the index identifiers of the monitoring indexes.

[0050] Further, the threshold rules associated with the index identifiers of the monitoring indexes are obtained, which include one or more. When the threshold rules include multiple, each threshold rule involves the same or different monitoring indexes, and different threshold rules are independent of each other and do not affect each other. In some embodiments, the index identifier of the same monitoring index can be associated with one or more threshold rules, and the same threshold rule can also involve one or more monitoring indexes. That is, when obtaining the threshold rules, the index identifiers of multiple monitoring indexes can be associated with the same threshold rule, or the index identifier of each monitoring index can be associated with a threshold rule, which is not specifically limited here.

[0051] The monitoring indexes are combined and determined according to the obtained threshold rules to determine whether to generate the alarm information of the monitored network element. In one embodiment, the threshold rules include one, and the part or all of the monitoring indexes are determined according to the obtained threshold rules to determine whether to generate the alarm information of the monitored network element. In another embodiment, the threshold rules include multiple, and when the monitoring indexes are combined and determined according to the threshold rules, the monitoring indexes involved in each threshold rule are selected from the monitoring indexes, and then the monitoring indexes involved in each threshold rule are combined and determined according to each threshold rule, and whether to generate the alarm information of the monitored network element is determined according to the determination result of each threshold rule.

[0052] In some embodiments, if the obtained threshold rules include multiple, when determining whether to generate the alarm information of the monitored network element, whether to generate the alarm information of the monitored network element under each threshold rule is determined according to each threshold rule; or the determination results of the multiple threshold rules are comprehensively determined to determine whether to generate the alarm information of the monitored network element.

[0053] In some embodiments, when the network element fails, multiple performance indicators are generally abnormal, and the combination of multiple monitoring indicators is beneficial to reduce false positives of network element abnormalities. Further, different performance indicators are required for different network element abnormalities, and therefore different threshold rules can be set for performance indicators according to different types of network element performance abnormalities. It can be understood that the threshold rule can also be set by the user, and the user can set the corresponding threshold rule according to the network element and its performance indicators that need to be monitored, to achieve the individual needs of the index monitoring.

[0054] In the embodiment, the threshold rule associated with the index identifier of the monitoring indicator is obtained, and the multiple monitoring indicators are combined according to the threshold rule to determine whether to generate alarm information of the monitored network element. The multi-index combination monitoring method reduces invalid alarms and false positives of the monitored network element, and is beneficial to improve the accuracy and reliability of the network element alarm.

[0055] In one embodiment, the obtained threshold rule includes a threshold value of the monitoring indicator, and the threshold value has different threshold types such as dynamic threshold and static threshold. Based on this, in step 300, the index values of the monitoring indicators are combined according to the obtained threshold rule to determine whether to generate alarm information of the monitored network element, and specifically includes:

[0056] Step 310, determining the threshold type of each monitoring indicator according to the threshold rule; the threshold type includes static threshold and dynamic threshold;

[0057] Step 320, obtaining the threshold value of each monitoring indicator according to the threshold type, and comparing the index value of each monitoring indicator with the threshold value to obtain the comparison result of each monitoring indicator;

[0058] Step 330, combining the comparison results of each monitoring indicator according to the threshold rule to determine whether to generate alarm information of the monitored network element.

[0059] According to the threshold rule, the threshold type of each monitoring indicator is determined, and the threshold type includes static threshold and dynamic threshold. For multiple monitoring indicators, each monitoring indicator can have an independent threshold type, and the threshold types of different monitoring indicators can be the same or different.

[0060] According to the threshold type of each monitoring index, the corresponding threshold value is obtained, and then the index value of each monitoring index is compared with the threshold value to obtain the comparison result of each monitoring index. The comparison results of each monitoring index are combined to determine whether to generate the alarm information of the monitored network element. In the process of obtaining the threshold value of each monitoring index, for the monitoring index with the threshold type of static threshold, the threshold value is a pre-configured index threshold, and for the monitoring index with the threshold type of dynamic threshold, the threshold value is dynamically generated according to the historical data of the monitoring index.

[0061] In which, the index value of each monitoring index is compared with the threshold value, so as to determine whether each monitoring index exceeds the threshold value. The comparison results of each monitoring index are combined according to the threshold rule, so as to determine whether to generate the alarm information of the monitored network element. The comparison results of each monitoring index are combined according to the threshold rule, for example, for the threshold rule involving multiple monitoring indexes, the number of monitoring indexes exceeding the threshold value is determined, and if all the monitoring indexes involved in the threshold rule exceed the threshold value, the alarm information of the monitored network element is generated.

[0062] Further, for the monitoring index with the threshold type of dynamic threshold, the threshold value of the dynamic threshold includes the contemporaneous value and the baseline value. If the threshold type of the monitoring index is the dynamic threshold, and the threshold value of the dynamic threshold is the contemporaneous value, in step 320, according to the threshold type, the threshold value of each monitoring index is obtained, including:

[0063] In step 321, according to the threshold rule, the time granularity corresponding to the first monitoring index is determined; the first monitoring index is the monitoring index in which the threshold type is the dynamic threshold, and the threshold value of the dynamic threshold is the contemporaneous value.

[0064] In step 322, based on the first historical index of the first monitoring index at the time granularity, the contemporaneous value of the first monitoring index is obtained, and the threshold value of the first monitoring index is obtained.

[0065] For the first monitoring index with the threshold value of the contemporaneous value, in the process of obtaining the threshold value, first, the threshold rule corresponding to the first monitoring index determines the time granularity of the first monitoring index. Based on the first historical index of the first monitoring index at the time granularity, the contemporaneous value of the first monitoring index is obtained, and the threshold value of the first monitoring index is obtained.

[0066] That is, for the monitoring index, different time points have different index values, and correspondingly, different threshold values. After determining the time granularity of the monitoring index, the historical index data of the monitoring index at the corresponding time granularity is obtained, and the same period value at the same time point as the current index value history of the monitoring index is determined from the historical index data as the threshold value thereof. Exemplarily, the time granularity can be day granularity, week granularity, or month granularity, and the same period value can be yesterday's same period, last week's same period, or last month's same period, and the like. Taking the day granularity as an example, the threshold value of the current monitoring index is the index value of the monitoring index at the same time point of the previous day. It can be understood that the time granularity can also be a period set by a user, such as 12 hours, and the like.

[0067] Similarly, if the threshold type of the monitoring index is a dynamic threshold, and the threshold value of the dynamic threshold is a baseline value, then in step 320, the threshold value of each monitoring index is obtained according to the threshold type, including:

[0068] In step 323, the period granularity corresponding to a second monitoring index is determined according to the threshold rule; the second monitoring index is a monitoring index in which the threshold type is a dynamic threshold, and the threshold value of the dynamic threshold is a baseline value.

[0069] In step 324, a second historical index of the second monitoring index is obtained, and a baseline value of the second historical index is counted according to the period granularity, to obtain the threshold value of the second monitoring index; the baseline value includes at least one of a maximum value, a minimum value, and an average value.

[0070] For the second monitoring index with the threshold value being a baseline value, first, the period granularity corresponding to the second monitoring index is determined according to the threshold rule, then the second historical index of the second monitoring index is obtained, and the baseline value of the second historical index is counted according to the period granularity corresponding to the second monitoring index, as the threshold value of the second monitoring index. The counted baseline value includes at least one of a maximum value, a minimum value, and an average value.

[0071] Exemplarily, taking the week granularity as the period granularity as an example, the second historical index of the second monitoring index in a historical time period of a preset time length is obtained, for example, the historical data of the second monitoring index in the previous week is obtained, then the obtained historical data is counted according to the week granularity, to calculate the maximum value, the minimum value, and the average value of the second monitoring index in the previous week, and at least one of the counted maximum value, the minimum value, and the average value is taken as the threshold value of the second monitoring index.

[0072] Further, in step 330, the comparison results of the monitoring indexes are combined and determined according to the threshold rule to determine whether to generate the alarm information of the monitored network element, and the combination and determination can further include:

[0073] Step 331, determining an out-of-limit indicator according to the comparison result of each monitoring indicator, and determining an observation period of the out-of-limit indicator according to the threshold rule;

[0074] Step 332, determining whether to generate alarm information of the monitored network element according to whether the out-of-limit time point of the out-of-limit indicator is within the observation period;

[0075] Wherein, if the out-of-limit time point of the out-of-limit indicator is within the observation period, the alarm information of the monitored network element is generated.

[0076] Firstly, the out-of-limit indicator is determined according to the comparison result of each monitoring indicator, that is, the monitoring indicator whose indicator value exceeds the threshold value, and the observation period of the out-of-limit indicator is determined according to the threshold rule. The observation period is the monitoring period of the monitoring indicator defined in the threshold rule. Whether to generate the alarm information of the monitored network element is determined according to whether the out-of-limit time point of the out-of-limit indicator is within the observation period. If the out-of-limit time point of the out-of-limit indicator is within the observation period, the alarm information of the monitored network element is generated. If the out-of-limit time point of the out-of-limit indicator is not within the observation period, the alarm information of the monitored network element is not generated.

[0077] In an embodiment, before the combination determination of the plurality of monitoring indicators, the integrity of the monitoring indicators involved in the threshold rule needs to be verified. Therefore, in step 300, before the combination determination of the indicator values of each monitoring indicator according to the threshold rule, the following step can also be included:

[0078] Step 301, determining the indicator combination requiring combination determination according to the threshold rule;

[0079] Step 302, performing indicator integrity verification on each monitoring indicator based on the indicator combination.

[0080] Firstly, the indicator combination requiring combination determination is determined based on the acquired threshold rule, and the acquired each monitoring indicator is subjected to indicator integrity verification based on the indicator combination. Specifically, when there are multiple threshold rules, the integrity of the monitoring indicators involved in each threshold rule is verified. After the integrity verification, the combination determination of each monitoring indicator according to the acquired threshold rule is performed. If the integrity verification of the monitoring indicator fails, the subsequent processing flow is not continued. For example, a threshold rule involves two monitoring indicators, and among the acquired plurality of monitoring indicators, only one of the two monitoring indicators involved in the threshold rule is included. The indicator integrity verification of the threshold rule fails, and the combination determination is not performed for the threshold rule. It can be understood that when the threshold rule includes multiple threshold rules, the indicator integrity verification of some threshold rules can pass, while the indicator integrity verification of another part of threshold rules fails. When the combination determination of each monitoring indicator is performed, only the threshold rule whose indicator integrity verification passes is subjected to the combination determination.

[0081] The index monitoring method provided by the embodiment of the present application further comprises configuration of threshold rules, and specifically comprises the following steps:

[0082] In step 001, threshold configuration information of any monitored network element is acquired, wherein the threshold configuration information comprises a threshold rule name, an effective time period, an on-off state and a resource range in which the threshold is effective.

[0083] In step 002, a threshold rule of the monitored network element is generated according to the threshold configuration information, wherein the resource range in which the threshold is effective is used to represent the range of the monitored network element to which the threshold rule is applied, and the threshold rule comprises a combination of indexes that the monitored network element needs to monitor and the threshold type of each monitoring index in the combination of indexes.

[0084] In step 003, the threshold rule is associated with the index identifier of each monitoring index in the combination of indexes.

[0085] The threshold configuration information of any monitored network element is acquired, wherein the threshold configuration information comprises a threshold rule name, an effective time period, an on-off state and a resource range in which the threshold is effective, and a threshold rule of the monitored network element is generated according to the acquired threshold configuration information. The resource range in which the threshold is effective is used to represent the range of the monitored network element to which the generated threshold rule is applied, and the threshold rule further comprises a combination of one or more performance indexes that the monitored network element needs to monitor and the threshold type of each performance index in the combination of indexes.

[0086] Further, the generated threshold rule is associated with the index identifier of each performance index in the combination of indexes, and the performance index is a monitoring index. After the threshold rule is associated with the index identifier of each performance index in the combination of indexes, the threshold rule is cached in a database. When the on-off state of the threshold rule is an on state and the effective time period of the threshold rule is reached, the performance indexes of the monitored network element are monitored based on the threshold rule, and when the performance indexes of the monitored network element meet the alarm condition of the threshold rule, alarm information for abnormally alarming the monitored network element is generated.

[0087] The on-off state and the resource range in the acquired threshold configuration information can be configured by a user in a preset user interactive interface in a manner such as clicking, and the threshold rule name and the effective time period can be configured by text input, and the specific input method of the threshold configuration information is not limited herein.

[0088] In one embodiment, the threshold rule further comprises an alarm condition, in the case that the monitored index involved in the threshold rule satisfies the alarm condition, alarm information of the monitored network element is generated, the alarm information comprises an alarm level, and different alarm levels correspond to threshold values in the threshold rule. Exemplarily, the alarm condition is, for example, that the number of overruns of the monitored index in an observation period is greater than a preset number, and / or the overrun duration of the monitored index in the observation period is greater than a preset duration, etc.

[0089] In one embodiment, the index monitoring method provided by the embodiment of the present application mainly comprises real-time performance data collection, performance index management, performance threshold management, performance alarm generation and clearing, and performance index anomaly detection. The performance alarm clearing introduces an observation period mechanism, and timing starts from the first time when the alarm clearing condition is met. In the observation period, the alarm is cleared only when the alarm clearing condition is continuously met. In the observation period, once the monitored group index does not meet the alarm clearing condition, the observation period is restarted, thereby preventing the generation of a flash-off alarm when the index fluctuates and deteriorates. In the observation period, the threshold values of the monitored index at different time points may be different, and each time point should be judged according to the threshold value.

[0090] For performance alarm generation and clearing, the constraint condition of alarm generation is mainly involved, which mainly includes that different threshold rules are independent of each other and do not affect each other. For example, for the same monitored network element, if two threshold rules set the same monitored index and have the same threshold value, two alarms will be generated, that is, alarm information of the monitored network element is generated for each threshold rule, and the threshold rule and the alarm information allow repetition.

[0091] Optionally, for the same threshold rule of the same monitored network element, the alarm levels are the same, the alarm information is not regenerated, but one alarm information with the same serial number is sent, the alarm number, the alarm level, the alarm duration, and the alarm text are updated, and the alarm occurrence time is unchanged, which is the time point when the alarm information is first generated.

[0092] Optionally, for the same threshold rule of the same monitored network element, the alarm levels are different, the previous alarm information is cleared, and new alarm information is regenerated.

[0093] Further, the performance threshold management is mainly used for managing the threshold values of the performance indicators of the monitored network elements, including the threshold types of the monitoring indicators, the threshold types including static threshold and dynamic threshold, the dynamic threshold including contemporaneous value and baseline value, etc. From the dimension of the threshold objects, the threshold types can further include thresholds for network elements and thresholds for network element vendors, etc. For the static threshold, only the comparison between the currently acquired indicator value of the monitoring indicator and the fixed threshold value is needed to determine whether the monitoring indicator is out of limit. For the dynamic threshold, the comparison with the historical data of the same monitoring indicator is needed to determine whether the monitoring indicator is out of limit. Multiple monitoring indicators and their threshold values can be involved in the same threshold rule, and the multiple monitoring indicators can have different types of thresholds. The threshold rule of multiple indicators is a combined judgment of the monitoring indicators at the same time point, i.e. the comparison between the currently acquired indicator value of the monitoring indicator and the indicator value of the same monitoring indicator at the same time point in history.

[0094] In one embodiment, for the configuration of the static threshold, one or more monitoring indicators can be specified in the user interactive interface, and the upper and lower limits of the indicator value are set for each specified monitoring indicator. If the monitoring indicator has different alarm levels, the upper and lower limits are set for each alarm level respectively. For the configuration of the dynamic threshold, the continuous time period and the discrete time period are allowed to be specified, and the threshold values are dynamically generated according to the historical indicator data of the specified time period.

[0095] The performance threshold management further includes performance baseline generation. The historical indicator value data of the monitoring indicator is acquired from the database according to the time window and the indicator baseline configured in the threshold rule, and the indicator baseline is calculated in real time according to the configured baseline calculation rule and is cached to the in-memory database, which is used for the rule expression verification in the subsequent combined judgment of the monitoring indicator. For example, for the monitoring indicator with the threshold value as the contemporaneous value, if the contemporaneous value is configured as the threshold value for the comparison of the indicator when the dynamic threshold is configured, the comparison rule of the contemporaneous indicator is included in the threshold rule, and then the update message of the contemporaneous data of the indicator is triggered. When the performance baseline is generated, the historical indicator value data of the monitoring indicator for the previous n+1 days is queried from the database according to the contemporaneous period n (such as one day, etc.) set by the rule of the dynamic threshold, and is uniformly cached to the in-memory database, which is used for generating the contemporaneous value to judge the monitoring indicator when the performance alarm is generated. For the monitoring indicator with the threshold value as the baseline value, if the baseline value is configured as the threshold value of the monitoring indicator when the dynamic threshold is configured, the comparison rule of the baseline indicator is included in the threshold rule, and then the update message of the baseline data of the indicator is triggered. When the performance baseline is generated, the historical indicator value data of the monitoring indicator for the previous n+1 days is queried from the database according to the time window set by the rule of the dynamic threshold, such as the maximum value n of the set days, and the maximum value, the minimum value and the average value of the indicator baseline value are calculated and uniformly cached to the in-memory database, which is used for generating the baseline value to judge the monitoring indicator when the performance alarm is generated.

[0096] Compared with the monitoring mode of a single performance index threshold, the threshold needs to be configured for each monitoring index when configuring the threshold, which means a higher manual analysis cost and low efficiency. The threshold configuration mode based on the threshold rule only needs the user to configure the rule in the corresponding interactive interface, so as to realize automatic calculation and configuration of the threshold, greatly reduce the manual analysis cost, thereby saving the operation and maintenance time and improving the operation and maintenance efficiency.

[0097] In some embodiments, referring to the index monitoring process shown in Figure 2 , first, the current performance index data of the monitored network element is acquired, the threshold rule associated with the index identifier of each monitoring index in the performance index data is acquired through the identification association, and the index integrity is determined based on the threshold rule. If the index integrity verification is passed, it is judged according to the threshold rule whether the monitoring index is a dynamic threshold, if yes, the corresponding threshold value is obtained based on the historical monitoring index statistics of the monitoring index, if no, the preset static threshold value is acquired, the index value of the current monitoring index is compared with the threshold value, it is determined whether the threshold value is exceeded, if yes, the alarm information is generated, if no, the performance index data of the monitored network element is re-acquired, and the continuous monitoring of the monitored network element is realized.

[0098] Among them, when there are multiple monitoring indexes, the judgment of whether the index value of the monitoring index exceeds the threshold value can be the judgment of each monitoring index and its threshold value in sequence, or the judgment of multiple monitoring indexes simultaneously in parallel, which is not specifically limited here.

[0099] In this embodiment, through the multi-index network element performance abnormality monitoring, the false alarm of index abnormality can be effectively reduced, and the monitoring accuracy is improved. Meanwhile, for the multi-index network element monitoring, the index threshold value can be automatically calculated according to the configured threshold rule, the dynamic configuration and update of the index threshold are realized, the alarm information is generated when the index exceeds the threshold, the workload of the operation and maintenance personnel for configuring the index threshold is reduced, the configuration efficiency is improved, the operation and maintenance time is shortened, and the operation and maintenance efficiency is improved. Moreover, the configuration mode of the index threshold has high flexibility, which is beneficial to improve the alarm flexibility of the index of the monitored network element.

[0100] The index monitoring device provided by the present application is described below, and the index monitoring device described below can be correspondingly referred to the index monitoring method described above.

[0101] Referring to Figure 3 , the index monitoring device provided by the embodiment of the present application comprises:

[0102] The index collection module 10 is configured to acquire performance index data of the monitored network element; the performance index data comprises index values of a plurality of monitoring indexes and index identifiers of the monitoring indexes;

[0103] The rule association module 20 is configured to acquire threshold rules associated with the index identifiers;

[0104] The index determination module 30 is configured to determine, according to the threshold rules, whether to generate alarm information of the monitored network element based on the index values of the monitoring indexes.

[0105] In one embodiment, the index determination module 30 is further configured to:

[0106] determine threshold types of the monitoring indexes according to the threshold rules; the threshold types comprise static thresholds and dynamic thresholds;

[0107] acquire threshold values of the monitoring indexes according to the threshold types, and compare the index values of the monitoring indexes with the threshold values to obtain comparison results of the monitoring indexes;

[0108] determine, according to the threshold rules, whether to generate alarm information of the monitored network element based on the comparison results of the monitoring indexes.

[0109] In one embodiment, if the threshold types comprise dynamic thresholds, threshold values of the dynamic thresholds are contemporaneous values; the index determination module 30 is further configured to:

[0110] determine, according to the threshold rules, a time granularity corresponding to a first monitoring index; the first monitoring index is a monitoring index of the monitoring indexes, for which the threshold type is a dynamic threshold and the threshold value of the dynamic threshold is a contemporaneous value;

[0111] acquire the contemporaneous value of the first monitoring index based on a first historical index of the first monitoring index at the time granularity, to obtain the threshold value of the first monitoring index.

[0112] In one embodiment, if the threshold types comprise dynamic thresholds, threshold values of the dynamic thresholds are baseline values; the index determination module 30 is further configured to:

[0113] determine, according to the threshold rules, a cycle granularity corresponding to a second monitoring index; the second monitoring index is a monitoring index of the monitoring indexes, for which the threshold type is a dynamic threshold and the threshold value of the dynamic threshold is a baseline value;

[0114] acquire a second historical index of the second monitoring index, and acquire a baseline value of the second historical index according to the period granularity, to obtain a threshold value of the second monitoring index; the baseline value includes at least one of a maximum value, a minimum value and an average value.

[0115] In one embodiment, the index determining module 30 is further configured to:

[0116] determine an out-of-limit index according to the comparison result of each monitoring index, and determine an observation period of the out-of-limit index according to the threshold rule;

[0117] determine whether to generate alarm information of the monitored network element according to whether the out-of-limit time point of the out-of-limit index is within the observation period;

[0118] If the out-of-limit time point of the out-of-limit index is within the observation period, the alarm information of the monitored network element is generated.

[0119] In one embodiment, the index monitoring apparatus further includes an integrity verification module configured to:

[0120] determine an index combination requiring combination determination according to the threshold rule;

[0121] perform index integrity verification on each monitoring index based on the index combination.

[0122] In one embodiment, the index monitoring apparatus further includes a rule configuration module configured to:

[0123] acquire threshold configuration information of any monitored network element; the threshold configuration information includes a threshold rule name, an effective time period, a start-stop state and a threshold effective resource range;

[0124] generate a threshold rule of the monitored network element according to the threshold configuration information; the threshold effective resource range is used to represent a range of monitored network elements to which the threshold rule is applicable, and the threshold rule includes an index combination that the monitored network element needs to monitor, and a threshold type of each monitoring index in the index combination;

[0125] associate the threshold rule with an index identifier of each monitoring index in the index combination.

[0126] Figure 4 An example of an entity structure diagram of an electronic device is shown in FIG. 1. Figure 4As shown, the electronic device can include a processor 410, a communications interface 420, a memory 430, and a communications bus 440, wherein the processor 410, the communications interface 420, and the memory 430 complete communications with each other through the communications bus 440. The processor 410 can invoke a logical instruction in the memory 430 to execute steps of an index monitoring method, which includes:

[0127] Obtaining performance index data of a monitored network element; the performance index data includes index values of a plurality of monitoring indexes and index identifiers of the monitoring indexes;

[0128] Obtaining threshold rules associated with the index identifiers;

[0129] Combining and determining the index values of the monitoring indexes according to the threshold rules to determine whether to generate alarm information of the monitored network element.

[0130] In addition, the logical instruction in the memory 430 described above can be implemented in the form of a software function unit and sold or used as an independent product, which can be stored in a computer-readable storage medium. Based on such understanding, the technical solutions of the present application essentially or the part that contributes to the prior art or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a magnetic disk or an optical disk, and various media that can store program codes.

[0131] On the other hand, the present application also provides a computer program product, which includes a computer program, the computer program can be stored on a non-transitory computer readable storage medium, and the computer program is executed by a processor, and the computer can execute the steps of the index monitoring method provided by the above-mentioned methods, which includes:

[0132] Obtaining performance index data of a monitored network element; the performance index data includes index values of a plurality of monitoring indexes and index identifiers of the monitoring indexes;

[0133] Obtaining threshold rules associated with the index identifiers;

[0134] The index values of the monitoring indexes are combined according to the threshold rule to determine whether to generate the alarm information of the monitored network element.

[0135] In another aspect, the present application also provides a non-transitory computer readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the index monitoring method provided by the above method, and the method comprises:

[0136] Obtaining performance index data of the monitored network element; the performance index data comprises index values of a plurality of monitoring indexes and index identifiers of the monitoring indexes;

[0137] Obtaining a threshold rule associated with the index identifier;

[0138] Combining the index values of the monitoring indexes according to the threshold rule to determine whether to generate the alarm information of the monitored network element.

[0139] The device embodiments described above are merely illustrative, wherein the units described as separate components can or can not be physically separate, and the components displayed as units can or can not be physical units, i.e., they can be located in one place, or distributed on multiple network units. Part or all of the modules can be selected to achieve the purpose of the embodiment according to actual needs. Those skilled in the art can understand and implement without creative labor.

[0140] From the above description of the embodiments, those skilled in the art can clearly understand that the embodiments can be realized by means of software plus necessary universal hardware platforms, and of course, can also be realized by hardware. Based on such understanding, the above technical solutions, essentially or in terms of the contribution to the prior art, can be embodied in the form of a software product, which can be stored in a computer readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes a number of instructions to make a computer device (which can be a personal computer, a server, or a network device, etc.) execute the methods described in each embodiment or some parts of the embodiments.

[0141] Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present application, and not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacements to some technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A method for monitoring indicators, characterized in that, include: Obtain performance indicator data of the monitored network element; the performance indicator data includes the indicator values ​​of multiple monitoring indicators, and the indicator identifier of each monitoring indicator; Obtain the threshold rules associated with the indicator identifier; The values ​​of each monitoring indicator are combined and judged according to the threshold rules to determine whether to generate alarm information for the monitored network element. The step of combining and judging the values ​​of each monitoring indicator according to the threshold rules to determine whether to generate alarm information for the monitored network element includes: The threshold type for each monitoring indicator is determined according to the threshold rules; the threshold type includes static thresholds and dynamic thresholds. The threshold value of each monitoring indicator is obtained according to the threshold type, and the indicator value of each monitoring indicator is compared with the threshold value to obtain the comparison result of each monitoring indicator. The comparison results of each monitoring indicator are combined and judged according to the threshold rules to determine whether to generate alarm information for the monitored network element; The method further includes: Obtain threshold configuration information for any of the monitored network elements; the threshold configuration information includes the threshold rule name, effective time period, start / stop status, and resource range in which the threshold is effective; Threshold rules for the monitored network element are generated based on the threshold configuration information; the resource range in which the threshold takes effect is used to characterize the range of monitored network elements to which the threshold rules apply; the threshold rules include the combination of indicators that the monitored network element needs to monitor, and the threshold type of each monitoring indicator in the combination of indicators. Associate the threshold rule with the indicator identifier of each monitoring indicator in the indicator combination.

2. The indicator monitoring method according to claim 1, characterized in that, If the threshold type includes a dynamic threshold, the threshold value of the dynamic threshold is the synchronous value; The step of obtaining the threshold value of each monitoring indicator according to the threshold type includes: The time granularity corresponding to the first monitoring indicator is determined according to the threshold rules; the first monitoring indicator is a monitoring indicator whose threshold type is dynamic threshold and whose threshold value is the same period value among all the monitoring indicators. Based on the first historical index of the first monitoring index at the time granularity, the same period value of the first monitoring index is obtained, and the threshold value of the first monitoring index is obtained.

3. The indicator monitoring method according to claim 1, characterized in that, If the threshold type includes a dynamic threshold, the threshold value of the dynamic threshold is the baseline value; The step of obtaining the threshold value of each monitoring indicator according to the threshold type includes: The periodic granularity corresponding to the second monitoring indicator is determined according to the threshold rules; the second monitoring indicator is a monitoring indicator in which the threshold type is dynamic threshold and the threshold value of the dynamic threshold is the baseline value. Obtain the second historical index of the second monitoring index, and statistically analyze the baseline value of the second historical index according to the periodic granularity to obtain the threshold value of the second monitoring index; the baseline value includes at least one of the maximum value, minimum value and average value.

4. The indicator monitoring method according to claim 1, characterized in that, The comparison results of each monitoring indicator are combined and judged according to the threshold rules to determine whether to generate alarm information for the monitored network element, including: The exceeding indicators are determined based on the comparison results of each monitoring indicator, and the observation period of the exceeding indicators is determined based on the threshold rules. Whether to generate alarm information for the monitored network element depends on whether the time point of the exceeded limit indicator is within the observation period. If the time point of the exceeding limit indicator is within the observation period, an alarm message is generated for the monitored network element.

5. The indicator monitoring method according to claim 1, characterized in that, Before combining and determining the values ​​of each monitoring indicator according to the threshold rule, the method further includes: The combination of indicators that needs to be combined for judgment is determined according to the threshold rules; Based on the aforementioned combination of indicators, the integrity of each monitoring indicator is verified.

6. An indicator monitoring device, characterized in that, include: The indicator acquisition module is used to acquire performance indicator data of the monitored network elements; the performance indicator data includes the indicator values ​​of multiple monitoring indicators, as well as the indicator identifiers of each monitoring indicator. The rule association module is used to obtain the threshold rules associated with the indicator identifier; The indicator determination module is used to combine and determine the indicator values ​​of each monitoring indicator according to the threshold rules, and to determine whether to generate alarm information for the monitored network element. The indicator determination module is specifically used for: The threshold type for each monitoring indicator is determined according to the threshold rules; the threshold type includes static thresholds and dynamic thresholds. The threshold value of each monitoring indicator is obtained according to the threshold type, and the indicator value of each monitoring indicator is compared with the threshold value to obtain the comparison result of each monitoring indicator. The comparison results of each monitoring indicator are combined and judged according to the threshold rules to determine whether to generate alarm information for the monitored network element; The indicator monitoring device further includes a rule configuration module, which is used for: Obtain threshold configuration information for any of the monitored network elements; the threshold configuration information includes the threshold rule name, effective time period, start / stop status, and resource range in which the threshold is effective; Threshold rules for the monitored network element are generated based on the threshold configuration information; the resource range in which the threshold takes effect is used to characterize the range of monitored network elements to which the threshold rules apply; the threshold rules include the combination of indicators that the monitored network element needs to monitor, and the threshold type of each monitoring indicator in the combination of indicators. Associate the threshold rule with the indicator identifier of each monitoring indicator in the indicator combination.

7. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the steps of the indicator monitoring method as described in any one of claims 1 to 5.

8. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the steps of the indicator monitoring method as described in any one of claims 1 to 5.

Images