Method and device for locating abnormal server in business system, and storage medium
By constructing a reference system architecture diagram of the business system and collecting performance parameters, abnormal servers can be automatically located, solving the problem of low efficiency in abnormal server location in existing technologies and achieving fast and efficient abnormal server identification.
Patent Information
- Application Number
- CN202410590847.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-05-13
- Publication Date
- 2025-12-12
- Estimated Expiration
- 2044-05-13
AI Technical Summary
The current business system has low efficiency in locating abnormal servers. Existing technologies rely on manual detection and understanding the data call relationships of a large number of servers, resulting in a waste of time and resources.
By extracting the data interaction relationships between servers from the interaction data set of the target business system, constructing a reference system structure diagram, and collecting server performance parameters to update node status, abnormal servers can be automatically located.
It enables rapid and intuitive location of abnormal servers in the target business system, improves the efficiency of abnormal server location, and reduces manual intervention and resource waste.
Smart Images

Figure CN118550792B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the field of financial technology, in particular, to a method and device for locating an abnormal server in a business system, and a storage medium. BACKGROUND
[0002] The normal operation of the current business system usually depends on multiple servers. As the business of the business system gradually becomes complex, the number of servers relied on by the business system becomes increasingly large, and the data calling relationship between the large number of servers is extremely complex, which brings challenges to the abnormal positioning of the business system.
[0003] Currently, for the abnormal server positioning in the business system, it is usually relied on the operation and maintenance personnel to detect the running state of each server in the business system in real time, and to locate the abnormal server based on the detected running state of each server and the data calling relationship between the servers. On the one hand, the detection of the running state of a large number of servers consumes a lot of time, and usually many servers are normal, and the detection of this part of the servers will bring a lot of waste of time and resources, on the other hand, the correct positioning of the abnormal server relies on the operation and maintenance personnel to have a very good understanding of the data calling relationship between the large number of servers in the business system. Based on the above two aspects, the current abnormal server positioning in the business system is low in efficiency.
[0004] In view of the problems such as low efficiency of abnormal server positioning in the business system in the related art, there is no effective solution at present. SUMMARY
[0005] The main purpose of the present application is to provide a method and device for locating an abnormal server in a business system, and a storage medium, to solve the problem of low efficiency of abnormal server positioning in the business system in the related art.
[0006] In order to achieve the above purpose, according to one aspect of the present application, a method for locating an abnormal server in a business system is provided. The method comprises:
[0007] extracting a data interaction relationship between N servers included in a target business system from an interaction data set corresponding to the target business system, wherein the target business system is a business system allowing a target business to run, the running of the target business depends on the normal running of N servers in the target business system, the interaction data set includes interaction data between N servers, the transmission of the interaction data exists between the servers with the data interaction relationship, and N is an integer greater than 2;
[0008] Based on the data interaction relationship, a reference system structure diagram is constructed for the target business system. The reference system structure diagram includes N system nodes with connection relationships. Each of the N system nodes represents one of the N servers. The connection relationship between the system nodes indicates that the corresponding servers have the data interaction relationship.
[0009] The current performance parameters of each of the N servers are collected, and the node status of each system node in the reference system structure diagram is updated according to the performance parameters to obtain the target system structure diagram. The node status is used to indicate the current running status of the server represented by the corresponding system node, and the target system structure diagram is used to locate the server in the target business system that is in an abnormal running state.
[0010] Optionally, extracting the data interaction relationships between the N servers included in the target business system from the interaction data set corresponding to the target business system includes:
[0011] Extract the source address and destination address corresponding to each interactive data in the interactive data set to obtain M sets of source addresses and destination addresses with corresponding relationships. The source address is the sending server address of the sending server that sends the corresponding interactive data, and the destination address is the receiving server address of the receiving server that receives the corresponding interactive data. M is an integer greater than or equal to N-1.
[0012] The sending server and the receiving server corresponding to each of the M groups of source addresses and destination addresses with corresponding relationships are determined to have the data interaction relationship, thus obtaining the data interaction relationship between N servers.
[0013] Optionally, before extracting the data interaction relationships between the N servers included in the target business system from the interaction data set corresponding to the target business system, the method further includes:
[0014] Generate target configuration information, wherein the target configuration information is used to indicate the data characteristics of the interactive data to be captured;
[0015] The target configuration information is used to configure the initial data crawling tool corresponding to the target business system to obtain the target data crawling tool, wherein the target data crawling tool is used to crawl data in the target business system according to the data characteristics indicated by the target configuration information;
[0016] The target data scraping tool is invoked to scrape data from the target business system, thereby obtaining the interactive data set.
[0017] Optionally, constructing a reference system architecture diagram for the target business system based on the data interaction relationship includes:
[0018] Generate the system node for each of the N servers to obtain the initial system structure diagram;
[0019] Identify the target server type for each of the N servers in the target business system;
[0020] The distribution positions of N system nodes in the initial system structure diagram are adjusted according to the target server type of each server to obtain a candidate system structure diagram, wherein the system nodes corresponding to servers of the same target server type in the candidate system structure diagram are distributed in the same area;
[0021] From the N system nodes in the candidate system structure diagram, locate the system nodes that have the data interaction relationship, and construct the connection relationship between the system nodes that have the data interaction relationship to obtain the reference system structure diagram.
[0022] Optionally, identifying the target server type of each of the N servers in the target business system includes:
[0023] Obtain the target port information for each of the N servers;
[0024] Match the target server type of each of the N servers from the corresponding port information and server types.
[0025] Optionally, the step of collecting the current performance parameters of each of the N servers includes:
[0026] A performance parameter capture tool is used to collect the current processor parameters, memory parameters, bandwidth parameters, and disk parameters of each of the N servers. The call parameters of each of the N servers are then queried from the call management platform corresponding to the target business system. The processor parameters indicate the current processor usage of the corresponding server, the memory parameters indicate the current memory usage of the corresponding server, the bandwidth parameters indicate the current bandwidth usage of the corresponding server, the disk parameters indicate the current disk usage of the corresponding server, and the call parameters indicate the success rate of the service call of the corresponding server. The call management platform records the current success rate of the service call of each server in the target business system.
[0027] The current processor parameters, memory parameters, bandwidth parameters, disk parameters, and call parameters of each server are determined as the current performance parameters of each server.
[0028] Optionally, updating the node state of each system node in the reference system structure diagram according to the performance parameters to obtain the target system structure diagram includes:
[0029] The node state of the i-th system node in the reference system structure diagram is updated through the following steps, where i is an integer greater than or equal to 1 and less than or equal to N:
[0030] The current expected performance parameter is generated based on the T historical performance parameters corresponding to the i-th system node, wherein the historical performance parameters are the performance parameters of the i-th server represented by the i-th system node during historical operation, and the expected performance parameter is the average of the T historical performance parameters, where T is an integer greater than 1.
[0031] If the absolute value of the difference between the current performance parameter of the i-th server and the i-th expected performance parameter is less than the target threshold, the node state of the i-th system node is updated to a normal node state, wherein the normal node state is used to indicate that the current operating state of the i-th server represented by the i-th system node is a normal operating state.
[0032] If the absolute value of the difference between the current performance parameter of the i-th server and the i-th expected performance parameter is greater than or equal to the target threshold, the node state of the i-th system node is updated to an abnormal node state, wherein the abnormal node state is used to indicate that the current operating state of the i-th server represented by the i-th system node is the abnormal operating state.
[0033] To achieve the above objectives, according to another aspect of this application, an abnormal server location device in a business system is provided. The device includes:
[0034] An extraction module is used to extract the data interaction relationship between N servers included in the target business system from the interaction data set corresponding to the target business system. The target business system is a business system that is allowed to run the target business. The operation of the target business depends on the normal operation of the N servers in the target business system. The interaction data set includes the interaction data between the N servers. The servers with the data interaction relationship transmit the interaction data between them. N is an integer greater than 2.
[0035] A construction module is used to construct a reference system structure diagram for the target business system based on the data interaction relationship. The reference system structure diagram includes N system nodes with connection relationships. Each of the N system nodes represents one of the N servers. The connection relationship between the system nodes indicates that the corresponding servers have the data interaction relationship.
[0036] An update module is used to collect the current performance parameters of each of the N servers and update the node status of each system node in the reference system structure diagram according to the performance parameters to obtain a target system structure diagram. The node status is used to indicate the current operating status of the server represented by the corresponding system node, and the target system structure diagram is used to locate the server in the target business system that is in an abnormal operating state.
[0037] This application employs the following steps: Extracting the data interaction relationships between N servers included in the target business system from the interaction data set corresponding to the target business system. The target business system is the business system allowed to run the target business, and the operation of the target business depends on the normal operation of the N servers within the target business system. The interaction data set includes the interaction data between the N servers, and servers with data interaction relationships transmit interaction data between them. N is an integer greater than 2. Constructing a reference system structure diagram for the target business system based on the data interaction relationships. The reference system structure diagram includes N system nodes with interconnected relationships. Each of the N system nodes represents one of the N servers, and the interconnected relationships between the system nodes indicate that the corresponding servers have data interaction relationships. Collecting data from the N servers... The system obtains the target system structure diagram by updating the node status of each system node in the reference system structure diagram based on the current performance parameters of each server. The node status indicates the current operating status of the server represented by the corresponding system node. The target system structure diagram is used to locate servers in abnormal operating states within the target business system. This method automatically obtains the data interaction relationships between N servers based on the interaction data set in the target business system, thereby constructing the target system structure diagram. Each system node in the target system structure diagram also has a corresponding node status. Based on the target system structure diagram, the current operating status of each server can be understood, enabling rapid and intuitive location of abnormal servers in the target business system. This solves the problem of low efficiency in locating abnormal servers in business systems in related technologies, thus achieving the technical effect of improving the efficiency of locating abnormal servers in business systems. Attached Figure Description
[0038] The accompanying drawings, which form part of this application, are used to provide a further understanding of this application. The illustrative embodiments and descriptions of this application are used to explain this application and do not constitute an undue limitation of this application. In the drawings:
[0039] Figure 1 This is a schematic diagram of the CMDB configuration management database interface provided according to an embodiment of this application;
[0040] Figure 2 This is a flowchart of an abnormal server location method in a business system provided according to an embodiment of this application;
[0041] Figure 3 This is a schematic diagram of the abnormal server location process in a business system provided according to an embodiment of this application;
[0042] Figure 4 This is a schematic diagram of an integrated operation and maintenance view of a business system provided according to an embodiment of this application;
[0043] Figure 5 This is a schematic diagram of a reference system architecture diagram of a business system provided according to an embodiment of this application;
[0044] Figure 6 This is a schematic diagram of an abnormal server location device in a business system according to an embodiment of this application;
[0045] Figure 7 This is a schematic diagram of an electronic device according to an embodiment of this application. Detailed Implementation
[0046] It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. This application will now be described in detail with reference to the accompanying drawings and embodiments.
[0047] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.
[0048] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate for the embodiments of this application described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.
[0049] To better understand the inventiveness of the proposed solution, the relevant technologies will be explained before describing the specific embodiments:
[0050] In related technologies, the current operation and maintenance of business systems mainly relies on monitoring server information and usage to understand the health status of the business system. The relevant server information is mainly obtained from the CMDB configuration management database.
[0051] Figure 1 This is a schematic diagram of the CMDB configuration management database interface provided according to an embodiment of this application, such as... Figure 1As shown, after selecting the server IP address of the server to be queried on the CMDB configuration management database interface, operations and maintenance personnel can view the corresponding server information. In related technologies, this method mainly has two problems:
[0052] First, it is necessary to ensure the accuracy of the information maintained in the CMDB. Business systems usually adopt a distributed architecture and an elastic and scalable server provisioning model. The server information in the business system will change from time to time, while the information in the CMDB usually needs to be maintained manually, which may result in untimely information updates.
[0053] Secondly, operations and maintenance personnel need to accurately understand the physical structure and connection relationships between servers in the business system. They need to understand the overall system operation status by checking the server information (performance and capacity data) of each server one by one. Especially when troubleshooting problems, the lack of a global view to display the performance and capacity data of each server affects the location and tracking of abnormal servers.
[0054] It should be noted that all information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for display, data used for analysis, etc.) involved in this disclosure are information and data authorized by the user or fully authorized by all parties. For example, this system has an interface with relevant users or organizations. Before obtaining relevant information, it is necessary to send an acquisition request to the aforementioned user or organization through the interface, and obtain the relevant information after receiving consent information from the aforementioned user or organization.
[0055] The information collected in this disclosure is information and data authorized by the user or fully authorized by all parties. The collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data all comply with the relevant laws, regulations and standards of the relevant countries and regions, necessary confidentiality measures have been taken, and they do not violate public order and good morals. Corresponding operation portals are provided for users to choose to authorize or refuse.
[0056] The present invention will now be described in conjunction with preferred implementation steps. Figure 2 This is a flowchart of an abnormal server location method in a business system provided according to an embodiment of this application, such as... Figure 2 As shown, the method includes the following steps:
[0057] Step S202: Extract the data interaction relationship between the N servers included in the target business system from the interaction data set corresponding to the target business system. The target business system is a business system that is allowed to run the target business. The operation of the target business depends on the normal operation of the N servers in the target business system. The interaction data set includes the interaction data between the N servers. The servers with the data interaction relationship transmit the interaction data between them. N is an integer greater than 2.
[0058] Step S204: Construct a reference system structure diagram for the target business system based on the data interaction relationship. The reference system structure diagram includes N system nodes with connection relationships. Each of the N system nodes represents one of the N servers. The connection relationship between the system nodes indicates that the corresponding servers have the data interaction relationship.
[0059] Step S206: Collect the current performance parameters of each of the N servers, and update the node status of each system node in the reference system structure diagram according to the performance parameters to obtain the target system structure diagram. The node status is used to indicate the current operating status of the server represented by the corresponding system node, and the target system structure diagram is used to locate the server in the target business system that is in an abnormal operating state.
[0060] Through the above steps, the data interaction relationships between the N servers included in the target business system are extracted from the interaction data set corresponding to the target business system. The target business system is the business system that allows the target business to run, and the operation of the target business depends on the normal operation of the N servers in the target business system. The interaction data set includes the interaction data between the N servers, and servers with data interaction relationships transmit interaction data between them. N is an integer greater than 2. A reference system structure diagram is constructed for the target business system based on the data interaction relationships. The reference system structure diagram includes N system nodes with interconnected relationships. Each of the N system nodes represents one of the N servers, and the connection relationships between the system nodes indicate that the corresponding servers have data interaction relationships. Data is collected from each of the N servers. The system's current performance parameters are used to update the node status of each system node in the reference system architecture diagram, resulting in the target system architecture diagram. The node status indicates the current operating status of the server represented by that system node. The target system architecture diagram is used to locate servers in abnormal operating states within the target business system. This method automatically obtains the data interaction relationships between N servers based on the interaction data set in the target business system, thus constructing the target system architecture diagram. Each system node in the target system architecture diagram also has a corresponding node status. Based on the target system architecture diagram, the current operating status of each server can be understood, enabling rapid and intuitive location of abnormal servers in the target business system. This solves the problem of low efficiency in locating abnormal servers in business systems in related technologies, thereby achieving the technical effect of improving the efficiency of locating abnormal servers in business systems.
[0061] Figure 3 This is a schematic diagram of the abnormal server location process in the business system provided in the embodiments of this application, such as... Figure 3 As shown, the abnormal server location process in the business system includes the following stages:
[0062] 1) Network Traffic Acquisition: Use packet capture tools such as Wireshark to acquire network traffic and call relationships between N servers, serving as the foundation for subsequent data interaction relationship construction; the specific steps are as follows:
[0063] 1-1) Configure and set up the packet capture tool as necessary. This includes monitoring the network interface and setting filters to determine the types of packets to capture.
[0064] 1-2) Packet (Network Traffic) Capture: When a packet arrives, the packet capture tool captures it and stores it in a file. These packets can be any type of packet in the TCP / IP protocol suite, such as HTTP, FTP, SMTP, DNS, etc.
[0065] 2) Topology Construction: By identifying the open ports of the servers, the server type is determined; for example, a server using port 1521 is a MySQL database server. Network traffic access patterns are used to determine the data interaction relationships between the servers, thus constructing the physical topology for the N servers. The detailed process is as follows:
[0066] 2-1) First, based on the recorded IP and port data (port number), determine the role of the server and label it accordingly, such as data storage server, application server, etc.
[0067] 2-2) After completing the server tag settings, for the saved network traffic, parse the source IP and source port information, destination IP and destination port information of the network traffic, obtain the data interaction relationship between N servers, and then draw the network topology diagram of N servers.
[0068] 3) Performance and Capacity Acquisition: By deploying a performance acquisition agent tool, server performance and capacity data, such as CPU, memory, bandwidth, and disk usage, are captured. This agent software runs in the background without the need for operation and maintenance personnel to intervene. It periodically reads the above hardware information from the server and uploads it to a centralized server, realizing the collection of performance data for each server at different time periods. Service call success rate is obtained by calling the service management platform's interface, and the data is also uploaded to the centralized server, realizing automated capture of service call success rate data.
[0069] 4) Display an integrated operation and maintenance view: Figure 4 This is a schematic diagram of an integrated operation and maintenance view of a business system provided according to an embodiment of this application, such as... Figure 4 As shown, after constructing a network topology diagram with N servers, the corresponding performance and capacity data for each server are displayed on the network topology diagram.
[0070] 5) Intelligent Baseline Anomaly Detection: Based on the historical performance data of each server, a performance indicator baseline is constructed for the system node corresponding to each server. Nodes whose current performance data exceeds the performance indicator baseline range are identified as anomaly nodes. Specifically, the performance capacity data of each server at each point in time, stored in the centralized server database from step 3, is read. A reasonable baseline range is determined through analysis and comparison. For example, if the performance indicator baseline range indicates that the server's historical CPU utilization is within the normal range of 40%-60%, and the current CPU utilization is 70%, then the system node corresponding to that server is determined to be an anomaly node.
[0071] 6) Abnormal node marking: System nodes in abnormal node states are marked in red in the integrated operation and maintenance view, and affected nodes are marked in blue to accurately assess the blast radius.
[0072] 7. Emergency Response: When a system node malfunctions, emergency operations can be performed directly using the restart and isolation buttons to improve emergency response efficiency. For example, if CPU and memory usage exceed the normal baseline range, a restart can be performed; if the service response time exceeds a specific threshold, the server will be isolated and no longer provide services. If a system node represents a faulty server with a redundant server (a server with the same function as the faulty server), the faulty server will be isolated. If a system node represents a faulty server without a redundant server, the faulty server will be restarted.
[0073] In the technical solution provided in step S102 above, the target business system may be, but is not limited to, an application system, and the interaction data set may be, but is not limited to, network traffic transmitted between N servers in the application system. The data interaction relationship may be, but is not limited to, used to indicate the transmission and interaction of network traffic between two corresponding servers, and the data interaction relationship may represent the calling relationship between N servers in the target business system.
[0074] In an exemplary embodiment, the data interaction relationship between N servers included in the target business system can be extracted from the interaction data set corresponding to the target business system in the following manner, but not limited to: extracting the source address and destination address corresponding to each piece of interaction data in the interaction data set to obtain M sets of source addresses and destination addresses with corresponding relationships, wherein the source address is the sending server address of the sending server that sends the corresponding interaction data, and the destination address is the receiving server address of the receiving server that receives the corresponding interaction data, and M is an integer greater than or equal to N-1; determining the sending server and the receiving server corresponding to each set of source addresses and destination addresses with corresponding relationships in the M sets as having the data interaction relationship, thereby obtaining the data interaction relationship between N servers.
[0075] Optionally, in this embodiment, the source address may be, but is not limited to, the source IP of the interactive data, and the destination address may be, but is not limited to, the destination IP of the interactive data.
[0076] In one exemplary embodiment, before extracting the data interaction relationships between the N servers included in the target business system from the interaction data set corresponding to the target business system, the method may include, but is not limited to, the following: generating target configuration information, wherein the target configuration information is used to indicate the data characteristics of the interaction data to be crawled; configuring the initial data crawling tool corresponding to the target business system using the target configuration information to obtain a target data crawling tool, wherein the target data crawling tool is used to crawl data in the target business system according to the data characteristics indicated by the target configuration information; and calling the target data crawling tool to crawl data in the target business system to obtain the interaction data set.
[0077] Optionally, in this embodiment, the target configuration information is used to indicate the data characteristics of the interactive data to be captured. For example, the target configuration information is used to indicate that any type of packet in the TCP / IP protocol suite, such as HTTP, FTP, SMTP, DNS, etc., needs to be captured.
[0078] Optionally, in this embodiment, the target data capture tool may be, but is not limited to, packet capture tools such as Wireshark mentioned above.
[0079] Optionally, in this embodiment, the target configuration information is used to configure the initial data crawling tool corresponding to the target business system to obtain the target data crawling tool. This can be, but is not limited to, using the target configuration information to set filters in the initial data crawling tool. Filters can determine the data characteristics of the crawled data.
[0080] In the technical solution provided in step S104 above, Figure 5 This is a schematic diagram of a reference system architecture diagram of a business system provided according to an embodiment of this application, such as... Figure 5 As shown, taking N as an example of 12, the reference system architecture diagram includes 12 system nodes, such as double 1 (PaaS), business:6-8 (PaaS), center 1 (PaaS), and business-gray:2-4 (PaaS), etc. Each system node in the reference system architecture diagram represents a server, and the connection relationship between system nodes indicates that the servers have the aforementioned data interaction relationship.
[0081] In one exemplary embodiment, a reference system structure diagram for the target business system can be constructed based on the data interaction relationship in the following manner, but not limited to: generating a system node for each of the N servers to obtain an initial system structure diagram; identifying the target server type of each of the N servers in the target business system; adjusting the distribution positions of the N system nodes in the initial system structure diagram according to the target server type of each server to obtain a candidate system structure diagram, wherein the system nodes corresponding to servers of the same target server type in the candidate system structure diagram are distributed in the same area; locating the system nodes with the data interaction relationship from the N system nodes in the candidate system structure diagram, and constructing the connection relationship between the system nodes with the data interaction relationship to obtain the reference system structure diagram.
[0082] Optionally, in this embodiment, the distribution positions of the N system nodes in the initial system structure diagram are adjusted according to the target server type of each server, such as... Figure 5 As shown, for example, if both double 1 (PaaS) and center1 (PaaS) are database servers, then double 1 (PaaS) and center1 (PaaS), etc., can be distributed in the same row (same level). Specific application servers, such as business:6-8 (PaaS) and business-gray:2-4 (PaaS), etc., can also be distributed in the same row.
[0083] In one exemplary embodiment, the target server type of each of the N servers in the target business system may be identified by, but is not limited to, the following: obtaining the target port information of each of the N servers; and matching the target server type of each of the N servers from the port information and server type that have a corresponding relationship.
[0084] Optionally, in this embodiment, the target port information may be, but is not limited to, the port data (port number) mentioned above. For example, a server with port number 1521 is a MySQL database server. This method allows us to determine the target server type.
[0085] In the technical solution provided in step S106 above, the target system structure diagram may be, but is not limited to, the integrated operation and maintenance view described above.
[0086] In one exemplary embodiment, the current performance parameters of each of the N servers can be collected, but are not limited to, by means of the following: A performance parameter capture tool is invoked to collect the current processor parameters, memory parameters, bandwidth parameters, and disk parameters of each of the N servers; and the call parameters of each of the N servers are queried from the call management platform corresponding to the target business system. The processor parameters indicate the current processor usage of the corresponding server, the memory parameters indicate the current memory usage of the corresponding server, the bandwidth parameters indicate the current bandwidth usage of the corresponding server, the disk parameters indicate the current disk usage of the corresponding server, and the call parameters indicate the success rate of service calls for the corresponding server. The call management platform records the current success rate of service calls for each server in the target business system. The current processor parameters, memory parameters, bandwidth parameters, disk parameters, and call parameters of each server are determined as the current performance parameters of each server.
[0087] Optionally, in this embodiment, the performance parameter capture tool may be, but is not limited to, the aforementioned agent tool. Calling the performance parameter capture tool to collect the current processor parameters, memory parameters, bandwidth parameters, and disk parameters of each of the N servers may be, but is not limited to, using a performance acquisition agent tool to capture server performance capacity data, such as CPU, memory, bandwidth, and disk usage.
[0088] Optionally, in this embodiment, the call management platform may be, but is not limited to, the call service management platform described above.
[0089] In an exemplary embodiment, the node state of each system node in the reference system structure diagram can be updated according to the performance parameters in the following manner to obtain the target system structure diagram: The node state of the i-th system node in the reference system structure diagram is updated through the following steps, where i is an integer greater than or equal to 1 and less than or equal to N: The current i-th expected performance parameter is generated based on T historical performance parameters corresponding to the i-th system node, where the historical performance parameters are the performance parameters of the i-th server represented by the i-th system node during historical operation, and the expected performance parameter is the average of the T historical performance parameters, where T is an integer greater than 1; In the i-th... If the absolute value of the difference between the current performance parameter of the server and the i-th expected performance parameter is less than the target threshold, the node state of the i-th system node is updated to a normal node state, wherein the normal node state is used to indicate that the current operating state of the i-th server represented by the i-th system node is a normal operating state; if the absolute value of the difference between the current performance parameter of the i-th server and the i-th expected performance parameter is greater than or equal to the target threshold, the node state of the i-th system node is updated to an abnormal node state, wherein the abnormal node state is used to indicate that the current operating state of the i-th server represented by the i-th system node is an abnormal operating state.
[0090] Optionally, in this embodiment, after updating the node status of each system node in the reference system structure diagram according to the performance parameters to obtain the target system structure diagram, the method further includes: locating the target system node with an abnormal node status from the target system structure diagram, and determining the target server corresponding to the target system node as the faulty server.
[0091] Optionally, in this embodiment, after updating the node state of each system node in the reference system structure diagram according to the performance parameters to obtain the target system structure diagram, the method further includes:
[0092] A first marker is added to the system node in the normal node state in the target system structure diagram, wherein the system node with the first marker indicates that the corresponding server is currently in a normal operating state;
[0093] A second marker is added to the system node in the target system structure diagram that is in the abnormal operating state, wherein the system node with the second marker indicates that the corresponding server is currently in the abnormal operating state;
[0094] A third marker is added to the system nodes adjacent to the system node in the abnormal operating state, wherein the system node with the third marker indicates that the probability that the current operating state of the corresponding server is affected by the server in the abnormal operating state is greater than the target probability.
[0095] Optionally, in this embodiment, the desired performance parameter may be, but is not limited to, the baseline of the aforementioned performance indicators. The desired performance parameter minus the target threshold may be, but is not limited to, the lower limit of the baseline range, and the desired performance parameter plus the target threshold may be, but is not limited to, the upper limit of the baseline range.
[0096] It should be noted that the abnormal server location method in the business system proposed in this application automatically constructs a complete application system network topology (target system structure diagram) through interactive data sets, realizing automated perception of the system nodes and structures deployed in the target business system. On this basis, the performance data (performance parameters) of the server is automatically captured and displayed in the above-mentioned target system structure diagram (the current performance parameters and node status of the corresponding server can be viewed by clicking on the corresponding system node in the target system structure diagram). Abnormal nodes are marked through intelligent baselines, so that operation and maintenance personnel can intuitively understand the operation of the entire system and accurately understand the performance capacity of the system.
[0097] The abnormal server location method in the business system proposed in this application can achieve architecture awareness, automate network topology construction, and reduce the quality requirements for static operation and maintenance information; it can display the status of all application nodes in an integrated manner, reducing the operational costs for operation and maintenance personnel; it can achieve visualized management of production anomalies and their blast radius through intelligent baselines, improving problem location capabilities; and it can directly implement emergency operations through an integrated page, improving the timeliness of problem resolution.
[0098] It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.
[0099] This application also provides an abnormal server location device in a business system. It should be noted that this abnormal server location device can be used to execute the abnormal server location method provided in this application. The abnormal server location device in a business system provided in this application will be described below.
[0100] Figure 6 This is a schematic diagram of an abnormal server location device in a business system according to an embodiment of this application. Figure 6 As shown, the device includes:
[0101] Extraction module 602 is used to extract the data interaction relationship between N servers included in the target business system from the interaction data set corresponding to the target business system. The target business system is a business system that is allowed to run the target business. The operation of the target business depends on the normal operation of the N servers in the target business system. The interaction data set includes the interaction data between the N servers. The servers with the data interaction relationship transmit the interaction data between them. N is an integer greater than 2.
[0102] The construction module 604 is used to construct a reference system structure diagram for the target business system based on the data interaction relationship. The reference system structure diagram includes N system nodes with connection relationships. Each of the N system nodes is used to represent one of the N servers. The connection relationship between the system nodes is used to indicate that the corresponding servers have the data interaction relationship.
[0103] The update module 606 is used to collect the current performance parameters of each of the N servers and update the node status of each system node in the reference system structure diagram according to the performance parameters to obtain the target system structure diagram. The node status is used to indicate the current running status of the server represented by the corresponding system node, and the target system structure diagram is used to locate the server in the target business system that is in an abnormal running state.
[0104] Optionally, in the abnormal server location device in the business system provided in this application embodiment, the extraction module includes:
[0105] The extraction unit is used to extract the source address and destination address corresponding to each interactive data in the interactive data set, and obtain M sets of source addresses and destination addresses with corresponding relationships, wherein the source address is the sending server address of the sending server that sends the corresponding interactive data, the destination address is the receiving server address of the receiving server that receives the corresponding interactive data, and M is an integer greater than or equal to N-1.
[0106] The first determining unit is used to determine the sending server and the receiving server corresponding to each of the M groups of source addresses and destination addresses that have a corresponding relationship as having the data interaction relationship, thereby obtaining the data interaction relationship between N servers.
[0107] Optionally, in the abnormal server location device in the business system provided in the embodiments of this application, the device further includes:
[0108] The generation module is used to generate target configuration information before extracting the data interaction relationship between the N servers included in the target business system from the interaction data set corresponding to the target business system. The target configuration information is used to indicate the data characteristics of the interaction data to be captured.
[0109] A configuration module is used to configure the initial data crawling tool corresponding to the target business system using the target configuration information to obtain the target data crawling tool, wherein the target data crawling tool is used to crawl data in the target business system according to the data characteristics indicated by the target configuration information;
[0110] The calling module is used to call the target data crawling tool to crawl data from the target business system and obtain the interactive data set.
[0111] Optionally, in the abnormal server location device in the business system provided in this application embodiment, the construction module includes:
[0112] A generation unit is used to generate the system node for each of the N servers to obtain an initial system structure diagram.
[0113] The identification unit is used to identify the target server type of each of the N servers in the target business system;
[0114] An adjustment unit is used to adjust the distribution positions of N system nodes in the initial system structure diagram according to the target server type of each server to obtain a candidate system structure diagram, wherein the system nodes corresponding to servers of the same target server type in the candidate system structure diagram are distributed in the same area;
[0115] The positioning unit is used to locate the system node with the data interaction relationship from the N system nodes in the candidate system structure diagram, and to construct the connection relationship between the system nodes with the data interaction relationship to obtain the reference system structure diagram.
[0116] Optionally, in the abnormal server location device in the business system provided in this application embodiment, the identification unit is further used for:
[0117] Obtain the target port information for each of the N servers;
[0118] Match the target server type of each of the N servers from the corresponding port information and server types.
[0119] Optionally, in the abnormal server location device in the business system provided in this application embodiment, the update module includes:
[0120] The calling unit is used to invoke a performance parameter capture tool to collect the current processor parameters, memory parameters, bandwidth parameters, and disk parameters of each of the N servers, and to query the calling parameters of each of the N servers from the calling management platform corresponding to the target business system. The processor parameters indicate the current processor usage of the corresponding server, the memory parameters indicate the current memory usage of the corresponding server, the bandwidth parameters indicate the current bandwidth usage of the corresponding server, the disk parameters indicate the current disk usage of the corresponding server, and the calling parameters indicate the success rate of the service calls of the corresponding server. The calling management platform records the current success rate of the service calls of each server in the target business system.
[0121] The second determining unit is used to determine the current processor parameters, memory parameters, bandwidth parameters, disk parameters, and calling parameters of each server as the corresponding current performance parameters of each server.
[0122] Optionally, in the abnormal server location device in the business system provided in this application embodiment, the update module includes:
[0123] The update unit is used to update the node state of the i-th system node in the reference system structure diagram through the following steps, where i is an integer greater than or equal to 1 and less than or equal to N:
[0124] The current expected performance parameter is generated based on the T historical performance parameters corresponding to the i-th system node, wherein the historical performance parameters are the performance parameters of the i-th server represented by the i-th system node during historical operation, and the expected performance parameter is the average of the T historical performance parameters, where T is an integer greater than 1.
[0125] If the absolute value of the difference between the current performance parameter of the i-th server and the i-th expected performance parameter is less than the target threshold, the node state of the i-th system node is updated to a normal node state, wherein the normal node state is used to indicate that the current operating state of the i-th server represented by the i-th system node is a normal operating state.
[0126] If the absolute value of the difference between the current performance parameter of the i-th server and the i-th expected performance parameter is greater than or equal to the target threshold, the node state of the i-th system node is updated to an abnormal node state, wherein the abnormal node state is used to indicate that the current operating state of the i-th server represented by the i-th system node is the abnormal operating state.
[0127] The abnormal server location device in the business system includes a processor and a memory. All of the above-mentioned units are stored in the memory as program units, and the processor executes the above-mentioned program units stored in the memory to realize the corresponding functions.
[0128] The processor contains a kernel, which retrieves the corresponding program units from memory. One or more kernels can be configured, and adjusting kernel parameters can improve the efficiency of locating abnormal servers in a business system.
[0129] The memory may include non-permanent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.
[0130] This invention provides a computer-readable storage medium storing a program thereon, which, when executed by a processor, implements the abnormal server location method in the business system.
[0131] This invention provides a processor for running a program, wherein the program executes an abnormal server location method in the business system during runtime.
[0132] Figure 7 This is a schematic diagram of an electronic device according to an embodiment of this application, such as... Figure 7 As shown, an embodiment of the present invention provides an electronic device, which includes a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, it performs the following steps:
[0133] Extract the data interaction relationship between the N servers included in the target business system from the interaction data set corresponding to the target business system. The target business system is a business system that is allowed to run the target business. The operation of the target business depends on the normal operation of the N servers in the target business system. The interaction data set includes the interaction data between the N servers. The servers with the data interaction relationship transmit the interaction data between them. N is an integer greater than 2.
[0134] Based on the data interaction relationship, a reference system structure diagram is constructed for the target business system. The reference system structure diagram includes N system nodes with connection relationships. Each of the N system nodes represents one of the N servers. The connection relationship between the system nodes indicates that the corresponding servers have the data interaction relationship.
[0135] The current performance parameters of each of the N servers are collected, and the node status of each system node in the reference system structure diagram is updated according to the performance parameters to obtain the target system structure diagram. The node status is used to indicate the current running status of the server represented by the corresponding system node, and the target system structure diagram is used to locate the server in the target business system that is in an abnormal running state.
[0136] Optionally, the processor described above may also perform the following steps when executing the program:
[0137] Extract the source address and destination address corresponding to each interactive data in the interactive data set to obtain M sets of source addresses and destination addresses with corresponding relationships. The source address is the sending server address of the sending server that sends the corresponding interactive data, and the destination address is the receiving server address of the receiving server that receives the corresponding interactive data. M is an integer greater than or equal to N-1.
[0138] The sending server and the receiving server corresponding to each of the M groups of source addresses and destination addresses with corresponding relationships are determined to have the data interaction relationship, thus obtaining the data interaction relationship between N servers.
[0139] Optionally, the processor described above may also perform the following steps when executing the program:
[0140] Before extracting the data interaction relationship between the N servers included in the target business system from the interaction data set corresponding to the target business system, target configuration information is generated, wherein the target configuration information is used to indicate the data characteristics of the interaction data to be captured;
[0141] The target configuration information is used to configure the initial data crawling tool corresponding to the target business system to obtain the target data crawling tool, wherein the target data crawling tool is used to crawl data in the target business system according to the data characteristics indicated by the target configuration information;
[0142] The target data scraping tool is invoked to scrape data from the target business system, thereby obtaining the interactive data set.
[0143] Optionally, the processor described above may also perform the following steps when executing the program:
[0144] Generate the system node for each of the N servers to obtain the initial system structure diagram;
[0145] Identify the target server type for each of the N servers in the target business system;
[0146] The distribution positions of N system nodes in the initial system structure diagram are adjusted according to the target server type of each server to obtain a candidate system structure diagram, wherein the system nodes corresponding to servers of the same target server type in the candidate system structure diagram are distributed in the same area;
[0147] From the N system nodes in the candidate system structure diagram, locate the system nodes that have the data interaction relationship, and construct the connection relationship between the system nodes that have the data interaction relationship to obtain the reference system structure diagram.
[0148] Optionally, the processor described above may also perform the following steps when executing the program:
[0149] Obtain the target port information for each of the N servers;
[0150] Match the target server type of each of the N servers from the corresponding port information and server types.
[0151] Optionally, the processor described above may also perform the following steps when executing the program:
[0152] A performance parameter capture tool is used to collect the current processor parameters, memory parameters, bandwidth parameters, and disk parameters of each of the N servers. The call parameters of each of the N servers are then queried from the call management platform corresponding to the target business system. The processor parameters indicate the current processor usage of the corresponding server, the memory parameters indicate the current memory usage of the corresponding server, the bandwidth parameters indicate the current bandwidth usage of the corresponding server, the disk parameters indicate the current disk usage of the corresponding server, and the call parameters indicate the success rate of the service call of the corresponding server. The call management platform records the current success rate of the service call of each server in the target business system.
[0153] The current processor parameters, memory parameters, bandwidth parameters, disk parameters, and call parameters of each server are determined as the current performance parameters of each server.
[0154] Optionally, the processor described above may also perform the following steps when executing the program:
[0155] The node state of the i-th system node in the reference system structure diagram is updated through the following steps, where i is an integer greater than or equal to 1 and less than or equal to N:
[0156] The current expected performance parameter is generated based on the T historical performance parameters corresponding to the i-th system node, wherein the historical performance parameters are the performance parameters of the i-th server represented by the i-th system node during historical operation, and the expected performance parameter is the average of the T historical performance parameters, where T is an integer greater than 1.
[0157] If the absolute value of the difference between the current performance parameter of the i-th server and the i-th expected performance parameter is less than the target threshold, the node state of the i-th system node is updated to a normal node state, wherein the normal node state is used to indicate that the current operating state of the i-th server represented by the i-th system node is a normal operating state.
[0158] If the absolute value of the difference between the current performance parameter of the i-th server and the i-th expected performance parameter is greater than or equal to the target threshold, the node state of the i-th system node is updated to an abnormal node state, wherein the abnormal node state is used to indicate that the current operating state of the i-th server represented by the i-th system node is the abnormal operating state.
[0159] The devices mentioned in this article can be servers, PCs, tablets, mobile phones, etc.
[0160] This application also provides a computer program product, which, when executed on a data processing device, is suitable for executing a program that initializes the following method steps:
[0161] Extract the data interaction relationship between the N servers included in the target business system from the interaction data set corresponding to the target business system. The target business system is a business system that is allowed to run the target business. The operation of the target business depends on the normal operation of the N servers in the target business system. The interaction data set includes the interaction data between the N servers. The servers with the data interaction relationship transmit the interaction data between them. N is an integer greater than 2.
[0162] Based on the data interaction relationship, a reference system structure diagram is constructed for the target business system. The reference system structure diagram includes N system nodes with connection relationships. Each of the N system nodes represents one of the N servers. The connection relationship between the system nodes indicates that the corresponding servers have the data interaction relationship.
[0163] The current performance parameters of each of the N servers are collected, and the node status of each system node in the reference system structure diagram is updated according to the performance parameters to obtain the target system structure diagram. The node status is used to indicate the current running status of the server represented by the corresponding system node, and the target system structure diagram is used to locate the server in the target business system that is in an abnormal running state.
[0164] Optionally, when the above-mentioned computer program product is executed on a data processing device, it is suitable to execute a program that initializes the following method steps:
[0165] Extract the source address and destination address corresponding to each interactive data in the interactive data set to obtain M sets of source addresses and destination addresses with corresponding relationships. The source address is the sending server address of the sending server that sends the corresponding interactive data, and the destination address is the receiving server address of the receiving server that receives the corresponding interactive data. M is an integer greater than or equal to N-1.
[0166] The sending server and the receiving server corresponding to each of the M groups of source addresses and destination addresses with corresponding relationships are determined to have the data interaction relationship, thus obtaining the data interaction relationship between N servers.
[0167] Optionally, when the above-mentioned computer program product is executed on a data processing device, it is suitable to execute a program that initializes the following method steps:
[0168] Before extracting the data interaction relationship between the N servers included in the target business system from the interaction data set corresponding to the target business system, target configuration information is generated, wherein the target configuration information is used to indicate the data characteristics of the interaction data to be captured;
[0169] The target configuration information is used to configure the initial data crawling tool corresponding to the target business system to obtain the target data crawling tool, wherein the target data crawling tool is used to crawl data in the target business system according to the data characteristics indicated by the target configuration information;
[0170] The target data scraping tool is invoked to scrape data from the target business system, thereby obtaining the interactive data set.
[0171] Optionally, when the above-mentioned computer program product is executed on a data processing device, it is suitable to execute a program that initializes the following method steps:
[0172] Generate the system node for each of the N servers to obtain the initial system structure diagram;
[0173] Identify the target server type for each of the N servers in the target business system;
[0174] The distribution positions of N system nodes in the initial system structure diagram are adjusted according to the target server type of each server to obtain a candidate system structure diagram, wherein the system nodes corresponding to servers of the same target server type in the candidate system structure diagram are distributed in the same area;
[0175] From the N system nodes in the candidate system structure diagram, locate the system nodes that have the data interaction relationship, and construct the connection relationship between the system nodes that have the data interaction relationship to obtain the reference system structure diagram.
[0176] Optionally, when the above-mentioned computer program product is executed on a data processing device, it is suitable to execute a program that initializes the following method steps:
[0177] Obtain the target port information for each of the N servers;
[0178] Match the target server type of each of the N servers from the corresponding port information and server types.
[0179] Optionally, when the above-mentioned computer program product is executed on a data processing device, it is suitable to execute a program that initializes the following method steps:
[0180] A performance parameter capture tool is used to collect the current processor parameters, memory parameters, bandwidth parameters, and disk parameters of each of the N servers. The call parameters of each of the N servers are then queried from the call management platform corresponding to the target business system. The processor parameters indicate the current processor usage of the corresponding server, the memory parameters indicate the current memory usage of the corresponding server, the bandwidth parameters indicate the current bandwidth usage of the corresponding server, the disk parameters indicate the current disk usage of the corresponding server, and the call parameters indicate the success rate of the service call of the corresponding server. The call management platform records the current success rate of the service call of each server in the target business system.
[0181] The current processor parameters, memory parameters, bandwidth parameters, disk parameters, and call parameters of each server are determined as the current performance parameters of each server.
[0182] Optionally, when the above-mentioned computer program product is executed on a data processing device, it is suitable to execute a program that initializes the following method steps:
[0183] The node state of the i-th system node in the reference system structure diagram is updated through the following steps, where i is an integer greater than or equal to 1 and less than or equal to N:
[0184] The current expected performance parameter is generated based on the T historical performance parameters corresponding to the i-th system node, wherein the historical performance parameters are the performance parameters of the i-th server represented by the i-th system node during historical operation, and the expected performance parameter is the average of the T historical performance parameters, where T is an integer greater than 1.
[0185] If the absolute value of the difference between the current performance parameter of the i-th server and the i-th expected performance parameter is less than the target threshold, the node state of the i-th system node is updated to a normal node state, wherein the normal node state is used to indicate that the current operating state of the i-th server represented by the i-th system node is a normal operating state.
[0186] If the absolute value of the difference between the current performance parameter of the i-th server and the i-th expected performance parameter is greater than or equal to the target threshold, the node state of the i-th system node is updated to an abnormal node state, wherein the abnormal node state is used to indicate that the current operating state of the i-th server represented by the i-th system node is the abnormal operating state.
[0187] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0188] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.
[0189] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.
[0190] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 Figure 1 The steps of the function specified in one or more boxes.
[0191] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.
[0192] Memory may include non-persistent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media.
[0193] Computer-readable media includes both permanent and non-permanent, removable and non-removable media that can store information using any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.
[0194] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.
[0195] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0196] The above are merely embodiments of this application and are not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.
Claims
1. A method for locating an abnormal server in a business system, characterized by, The method comprises the following steps: extracting a data interaction relationship between N servers included in a target business system from an interaction data set corresponding to the target business system, wherein the target business system is a business system allowing a target business to run, the running of the target business depends on the normal running of N servers in the target business system, the interaction data set comprises interaction data between the N servers, the transmission of the interaction data exists between the servers with the data interaction relationship, N is an integer greater than 2; constructing a reference system structure diagram for the target business system according to the data interaction relationship, wherein the reference system structure diagram comprises N system nodes with a connection relationship, each of the N system nodes is used to represent one of the N servers, and the connection relationship between the system nodes is used to represent the data interaction relationship between the corresponding servers; collecting a current performance parameter of each of the N servers, and updating a node state of each of the system nodes in the reference system structure diagram according to the performance parameter to obtain a target system structure diagram, wherein the node state is used to indicate a current running state of the server represented by the corresponding system node, and the target system structure diagram is used to locate the server in an abnormal running state in the target business system; wherein the constructing of the reference system structure diagram for the target business system according to the data interaction relationship comprises: generating the system node for each of the N servers to obtain an initial system structure diagram; identifying a target server type of each of the N servers of the target business system; adjusting a distribution position of the N system nodes in the initial system structure diagram according to the target server type of each of the servers to obtain a candidate system structure diagram, wherein the system nodes corresponding to the servers of the same target server type in the candidate system structure diagram are distributed in the same region; locating the system nodes with the data interaction relationship from the N system nodes of the candidate system structure diagram, and constructing the connection relationship between the system nodes with the data interaction relationship to obtain the reference system structure diagram.
2. The method of claim 1, wherein, The extracting of the data interaction relationship between the N servers included in the target business system from the interaction data set corresponding to the target business system comprises: extracting a source address and a destination address corresponding to each of the interaction data in the interaction data set to obtain M groups of the source address and the destination address with a corresponding relationship, wherein the source address is a sending server address of a sending server sending the corresponding interaction data, the destination address is a receiving server address of a receiving server receiving the corresponding interaction data, and M is an integer greater than or equal to N-1. Determine the sending server and the receiving server corresponding to each of the source address and the destination address with the correspondence in the M groups as existing the data interaction relationship, to obtain the data interaction relationship between the N servers.
3. The method of claim 1, wherein, Before extracting the data interaction relationship between the N servers included in the target business system from the interaction data set corresponding to the target business system, the method further comprises: Generating target configuration information, wherein the target configuration information is used to indicate the data characteristics of the interaction data that need to be captured; Using the target configuration information to configure the initial data capture tool corresponding to the target business system to obtain a target data capture tool, wherein the target data capture tool is used to capture data in the target business system according to the data characteristics indicated by the target configuration information; Calling the target data capture tool to capture data in the target business system to obtain the interaction data set.
4. The method of claim 1, wherein, The target server type of each of the N servers of the target business system is identified, comprising: Obtaining target port information of each of the N servers; Matching the target server type of each of the N servers from the port information and the server type with the correspondence.
5. The method of claim 1, wherein, The current performance parameters of each of the N servers are collected, comprising: Calling a performance parameter capture tool to collect the current processor parameters, memory parameters, bandwidth parameters and disk parameters of each of the N servers, and querying the call parameters of each of the N servers from the call management platform corresponding to the target business system, wherein the processor parameters are used to indicate the current usage of the processor of the corresponding server, the memory parameters are used to indicate the current usage of the memory of the corresponding server, the bandwidth parameters are used to indicate the current usage of the bandwidth of the corresponding server, the disk parameters are used to indicate the current usage of the disk of the corresponding server, and the call parameters are used to indicate the success rate of service call of the corresponding server. The call management platform records the success rate of current service call of each of the servers in the target business system; Determine the current processor parameters, memory parameters, bandwidth parameters, disk parameters and call parameters of each of the servers as the current performance parameters of each of the corresponding servers.
6. The method of claim 1, wherein, The node state of each of the system nodes in the reference system structure diagram is updated according to the performance parameters to obtain a target system structure diagram, comprising: Update the node state of the i-th system node in the reference system structure diagram by the following steps, wherein i is an integer greater than or equal to 1 and less than or equal to N: generating a current i-th expected performance parameter according to T historical performance parameters corresponding to the i-th system node, wherein the historical performance parameter is the performance parameter of the i-th server represented by the i-th system node in a historical running process, the expected performance parameter is a mean value of the T historical performance parameters, and T is an integer greater than 1; updating a node state of the i-th system node to a normal node state in a case where an absolute value of a difference between the current performance parameter of the i-th server and the i-th expected performance parameter is less than a target threshold, wherein the normal node state is used to indicate that a current running state of the i-th server represented by the i-th system node is a normal running state; updating the node state of the i-th system node to an abnormal node state in a case where the absolute value of the difference between the current performance parameter of the i-th server and the i-th expected performance parameter is greater than or equal to the target threshold, wherein the abnormal node state is used to indicate that the current running state of the i-th server represented by the i-th system node is the abnormal running state.
7. An abnormal server location device in a business system, characterized in that, comprising: an extraction module configured to extract a data interaction relationship between N servers included in a target business system from an interaction data set corresponding to the target business system, wherein the target business system is a business system allowing a target business to run, running of the target business depends on normal running of the N servers in the target business system, the interaction data set includes interaction data between the N servers, the servers having the data interaction relationship have transmission of the interaction data between them, and N is an integer greater than 2; a construction module configured to construct a reference system structure diagram for the target business system according to the data interaction relationship, wherein the reference system structure diagram includes N system nodes having a connection relationship, each of the N system nodes is used to represent one of the N servers, and the connection relationship between the system nodes is used to represent that the corresponding servers have the data interaction relationship; an updating module configured to collect a current performance parameter of each of the N servers, and update a node state of each of the system nodes in the reference system structure diagram according to the performance parameter to obtain a target system structure diagram, wherein the node state is used to indicate a current running state of the server represented by the corresponding system node, and the target system structure diagram is used to locate the server in an abnormal running state in the target business system. The construction module comprises: a generation unit configured to generate the system node for each of the N servers to obtain an initial system structure diagram; an identification unit configured to identify a target server type of each of the N servers of the target business system; an adjustment unit configured to adjust a distribution position of the N system nodes in the initial system structure diagram according to the target server type of each of the servers to obtain an alternative system structure diagram, wherein the system nodes corresponding to the servers of the same target server type in the alternative system structure diagram are distributed in the same region; and a positioning unit configured to position the system nodes having the data interaction relationship from the N system nodes of the alternative system structure diagram, and to construct the connection relationship between the system nodes having the data interaction relationship to obtain the reference system structure diagram.
8. A computer readable storage medium, characterized in that, The computer readable storage medium comprises a stored program, wherein the program performs the method of any one of claims 1 to 6 when executed.
9. An electronic device comprising a memory and a processor, characterized in that The memory stores a computer program, and the processor is configured to execute the method of any one of claims 1 to 6 by using the computer program.
Citation Information
Patent Citations
Business performance and safety monitoring method and device, storage medium and electronic equipment
CN111371623A
Business monitoring method and device based on graph data, equipment and storage medium
CN113536054A