Method, device and equipment for processing alarm information and computer readable medium

Abstract

The invention discloses a method, device and equipment for processing alarm information and a computer readable medium, and relates to the technical field of cloud computing. A specific embodiment of the method comprises the steps of responding to alarm information sent by a monitoring system, analyzing the alarm information sent by the monitoring system based on an alarm information format, and obtaining an alarm device identifier, an alarm device identifier priority, an alarm content, an alarm content priority, alarm trigger time and an alarm trigger time priority; according to the alarm device identifier priority, the alarm content priority and the alarm triggering time priority, determining a query sequence of the alarm device identifier, the alarm content and the alarm triggering time, and querying a configuration center according to the query sequence to obtain an operation mode identifier; and the operation mode identifier is sent to a distributor, and the distributor calls a script to process the alarm information according to the operation mode identifier and the alarm equipment identifier. According to the embodiment, the alarm information processing efficiency of the cloud platform can be improved, so that normal operation of the server in the cloud platform is ensured.

Description

Technical Field

[0001] The present invention relates to the field of cloud computing technology, and in particular to a method, device, equipment and computer-readable medium for processing alarm information. Background Art

[0002] With the rapid development of the Internet and computer technology, the number of applications deployed on cloud platforms is increasing. The scale of cloud platforms is also getting larger and larger, and the number of servers managed by system operation and maintenance is growing.

[0003] Various faults often occur during system operation and maintenance: for example, high CPU temperature, high memory usage, high traffic, service failure or freezing, machine downtime, etc.

[0004] In the process of implementing the present invention, the inventors found that there are at least the following problems in the prior art: most cloud platforms use manual processing of alarm information. Due to the large scale of cloud platforms and the large number of servers, manual processing of alarm information is too inefficient. Summary of the invention

[0005] In view of this, embodiments of the present invention provide a method, apparatus, device and computer-readable medium for processing alarm information, which can improve the efficiency of a cloud platform in processing alarm information to ensure the normal operation of servers in the cloud platform.

[0006] To achieve the above object, according to one aspect of an embodiment of the present invention, a method for processing alarm information is provided, comprising:

[0007] In response to an alarm message sent by a monitoring system, the alarm message sent by the monitoring system is parsed based on an alarm message format to obtain an alarm device identifier, an alarm device identifier priority, an alarm content, an alarm content priority, an alarm trigger time, and an alarm trigger time priority, wherein the alarm message format is set in the monitoring system;

[0008] Determine the query order of the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority, and query the configuration center according to the query order to obtain the operation mode identifier corresponding to the alarm information;

[0009] The acquired operation mode identifier is sent to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation mode identifier and the alarm device identifier.

[0010] The response to the alarm information sent by the monitoring system is to parse the alarm information sent by the monitoring system based on the alarm information format to obtain the alarm device identifier, the alarm device identifier priority, the alarm content, the alarm content priority, the alarm trigger time and the alarm trigger time priority, wherein the alarm information format is set in the monitoring system, including:

[0011] In response to the alarm information sent by the monitoring system, the alarm information sent by the monitoring system is parsed according to the alarm information format to obtain fields in the alarm information;

[0012] According to the field identifier in the alarm information format, the alarm device identifier, alarm device identifier priority, alarm content, alarm content priority, alarm trigger time and alarm trigger time priority are obtained in the fields in the alarm information. The alarm device identifier priority, the alarm content priority and the alarm trigger time priority are parameters determined according to the monitoring system and the monitored object.

[0013] The determining, according to the alarm device identification priority, the alarm content priority and the alarm trigger time priority, a query order of the alarm device identification, the alarm content and the alarm trigger time, and querying a configuration center according to the query order to obtain an operation mode identification corresponding to the alarm information, includes:

[0014] Determine query parameters and the query order of the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority;

[0015] The configuration center is queried according to the query parameters and in the query order to obtain the operation mode identifier corresponding to the alarm information.

[0016] The determining, according to the alarm device identification priority, the alarm content priority and the alarm trigger time priority, query parameters and the query order of the alarm device identification, the alarm content and the alarm trigger time includes:

[0017] According to the alarm device identification priority, the alarm content priority and the alarm triggering time priority, filtering out query parameters from the alarm device identification, the alarm content and the alarm triggering time;

[0018] The query order is determined according to the priority of the query parameters.

[0019] The determining, according to the alarm device identification priority, the alarm content priority and the alarm trigger time priority, a query order of the alarm device identification, the alarm content and the alarm trigger time, and querying a configuration center according to the query order to obtain an operation mode identification corresponding to the alarm information, includes:

[0020] Determine the query order of the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority, and query the configuration center according to the query order to determine the trigger type of the alarm information;

[0021] The database is queried according to the trigger type of the alarm information to obtain the operation mode identifier corresponding to the alarm information.

[0022] The acquired operation mode identifier is sent to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation identifier and the alarm device identifier, including:

[0023] The acquired operation mode identifier is sent to the distributor, and the distributor successfully verifies the operation mode identifier according to the alarm device identifier;

[0024] The distributor queries and obtains a script according to the operation mode identifier to process the alarm information, and the processing includes one or more of the following: service restart, flow control and fault isolation.

[0025] The method further comprises:

[0026] In response to the alarm information processing request, the alarm information and the processing method of the alarm information are displayed, and the script corresponding to the operation method identifier is updated based on the actual processing method of the alarm information.

[0027] According to a second aspect of an embodiment of the present invention, there is provided a device for processing alarm information, including:

[0028] A parsing module, configured to respond to the alarm information sent by the monitoring system, parse the alarm information sent by the monitoring system based on the alarm information format, and obtain the alarm device identification, the alarm device identification priority, the alarm content, the alarm content priority, the alarm trigger time and the alarm trigger time priority, wherein the alarm information format is set in the monitoring system;

[0029] A query module, used to determine the query order of the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority, and query the configuration center according to the query order to obtain the operation mode identifier corresponding to the alarm information;

[0030] The processing module is used to send the acquired operation mode identifier to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation mode identifier and the alarm device identifier.

[0031] According to a third aspect of an embodiment of the present invention, there is provided an electronic device for processing alarm information, including:

[0032] one or more processors;

[0033] a storage device for storing one or more programs,

[0034] When the one or more programs are executed by the one or more processors, the one or more processors implement the above method.

[0035] According to a fourth aspect of an embodiment of the present invention, there is provided a computer-readable medium on which a computer program is stored, and when the program is executed by a processor, the method as described above is implemented.

[0036] According to a fifth aspect of an embodiment of the present invention, a computer program product is provided, including a computer program, and when the program is executed by a processor, the method as described above provided by an embodiment of the present invention is implemented.

[0037] An embodiment of the above invention has the following advantages or beneficial effects: in response to the alarm information sent by the monitoring system, the alarm information sent by the monitoring system is parsed based on the alarm information format to obtain the alarm device identification, the alarm device identification priority, the alarm content, the alarm content priority, the alarm trigger time and the alarm trigger time priority, and the alarm information format is set in the monitoring system; according to the alarm device identification priority, the alarm content priority and the alarm trigger time priority, the query order of the alarm device identification, the alarm content and the alarm trigger time is determined, and the configuration center is queried according to the query order to obtain the operation mode identification corresponding to the alarm information; the obtained operation mode identification is sent to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation mode identification and the alarm device identification. By calling the script to process the alarm information, the efficiency of the cloud platform in processing the alarm information can be improved to ensure the normal operation of the server in the cloud platform.

[0038] The further effects of the above-mentioned non-conventional optional manner will be described below in conjunction with the specific implementation manner. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] The accompanying drawings are used to better understand the present invention and do not constitute an improper limitation of the present invention.

[0040] Figure 1 is a schematic diagram of the main flow of a method for processing alarm information according to an embodiment of the present invention;

[0041] Figure 2 is a schematic diagram of a process of analyzing alarm information sent by a monitoring system according to an embodiment of the present invention;

[0042] Figure 3 is a flow chart of querying a configuration center to obtain an operation mode identifier corresponding to alarm information according to an embodiment of the present invention;

[0043] Figure 4 is a schematic diagram of a process for determining query parameters and query order according to an embodiment of the present invention;

[0044] Figure 5 is a schematic diagram of a process of querying a database according to a trigger type of alarm information according to an embodiment of the present invention;

[0045] Figure 6 is a flow chart of querying and calling a script to process alarm information according to an operation identifier and an alarm device identifier according to an embodiment of the present invention;

[0046] Figure 7 is a schematic diagram of the main structure of a device for processing alarm information according to an embodiment of the present invention;

[0047] Figure 8 is an exemplary system architecture diagram to which embodiments of the present invention may be applied;

[0048] Fig. 9 It is a schematic diagram of the structure of a computer system of a terminal device or a server suitable for implementing an embodiment of the present invention. DETAILED DESCRIPTION

[0049] The following is a description of exemplary embodiments of the present invention in conjunction with the accompanying drawings, including various details of the embodiments of the present invention to facilitate understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for clarity and conciseness, the description of well-known functions and structures is omitted in the following description. The acquisition, storage, use, and processing of data in the technical solution of this application comply with the relevant provisions of national laws and regulations.

[0050] It should be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0051] In the process of cloud platform operation and maintenance, server failures have the characteristics of periodicity and homogeneity. Periodicity means that the same failure may occur repeatedly in a fixed time period or irregularly. Homogeneity means that multiple failures may belong to the same category and have the same handling methods.

[0052] Currently, the handling of alarm information in cloud platforms mainly requires manual identification. For known faults of the same or the same type, they can only be handled repeatedly manually, which greatly increases the cost and efficiency of operation and maintenance.

[0053] In order to solve the problem of low efficiency in manually handling alarm information, the following technical solution in the embodiment of the present invention may be adopted.

[0054] See also Figure 1 , Figure 1 FIG. 1 is a schematic diagram of the main flow of a method for processing alarm information according to an embodiment of the present invention, which queries a configuration center based on the alarm information to perform alarm information processing. Figure 1 As shown in 100, the following steps are specifically included:

[0055] S101. In response to the alarm information sent by the monitoring system, the alarm information sent by the monitoring system is parsed based on the alarm information format to obtain the alarm device identification, the alarm device identification priority, the alarm content, the alarm content priority, the alarm trigger time and the alarm trigger time priority, and the alarm information format is set in the monitoring system.

[0056] In the embodiment of the present invention, the monitoring system sends the monitoring results through alarm information during the process of monitoring the server and / or application in the cloud platform. A gateway can be used in the cloud platform to receive the alarm information sent by the monitoring system. The gateway serves as a unified entrance and exit of the cloud platform and is isolated from the business data, which facilitates the statistics of alarm information, user operation behavior and security logs. It can be understood that the cloud platform is Figure 1 The executing entity of the embodiment in FIG.

[0057] After receiving the alarm information sent by the monitoring system, the above alarm information can be parsed to obtain the alarm device identification, alarm device identification priority, alarm content, alarm content priority, alarm trigger time and alarm trigger time priority.

[0058] See also Figure 2 That is 200, Figure 2 This is a schematic diagram of the process of analyzing the alarm information sent by the monitoring system according to an embodiment of the present invention. Specifically, it includes the following steps:

[0059] S201. In response to alarm information sent by a monitoring system, the alarm information sent by the monitoring system is parsed according to an alarm information format to obtain fields in the alarm information.

[0060] The monitoring system stores the alarm information format, that is, the alarm information format is set in the monitoring system. In this way, the alarm information sent by the monitoring system is established according to the alarm information format. As an example, the alarm information format includes the alarm device identification, the alarm device identification priority, the alarm content, the alarm content priority, the alarm trigger time and the alarm trigger time priority.

[0061] In response to the alarm information sent by the monitoring system, in order to obtain the fields in the alarm information, the alarm information sent by the monitoring system may be parsed according to the alarm information format to obtain the fields in the alarm information.

[0062] By setting the alarm information format in the monitoring system, the monitoring system can construct the alarm information according to the alarm information format, thereby improving the accuracy of parsing the alarm information.

[0063] S202. According to the field identifier in the alarm information format, the alarm device identifier, the alarm device identifier priority, the alarm content, the alarm content priority, the alarm trigger time and the alarm trigger time priority are obtained from the fields in the alarm information. The alarm device identifier priority, the alarm content priority and the alarm trigger time priority are parameters determined according to the monitoring system and the monitored object.

[0064] According to the field identifier in the alarm information format, the alarm device identifier, the alarm device identifier priority, the alarm content, the alarm content priority, the alarm trigger time and the alarm trigger time priority are obtained from the fields in the alarm information.

[0065] In one embodiment of the present invention, the alarm device identification priority, alarm content priority and alarm trigger time priority are parameters determined according to the monitoring system and the monitoring object. The monitoring object includes a server and / or an application. The alarm device identification priority, alarm content priority and alarm trigger time priority are set for different monitoring systems and monitoring objects.

[0066] As an example, the monitoring corresponds to application A, which is more sensitive to alarm content. The alarm content priority can be set to high, the alarm device identification priority can be set to low, and the alarm trigger time priority can be set to medium.

[0067] exist Figure 2 In the embodiment, the alarm information sent by the monitoring system can be accurately parsed according to the alarm information format.

[0068] S102. Determine the query order of the alarm device identification, alarm content and alarm trigger time according to the alarm device identification priority, alarm content priority and alarm trigger time priority, and query the configuration center according to the query order to obtain the operation mode identification corresponding to the alarm information.

[0069] In an embodiment of the present invention, the configuration center stores the operation mode identifier corresponding to the alarm information. The query order of the alarm device identifier, alarm content and alarm trigger time can be determined according to the alarm device identifier priority, alarm content priority and alarm trigger time priority, and the configuration center is queried according to the query order.

[0070] See also Figure 3 That is 300, Figure 3 This is a flow chart of querying a configuration center to obtain an operation mode identifier corresponding to alarm information according to an embodiment of the present invention. Specifically, the following steps are included:

[0071] S301. Determine query parameters and query order of alarm device identification, alarm content and alarm trigger time according to the alarm device identification priority, alarm content priority and alarm trigger time priority.

[0072] In an embodiment of the present invention, in order to quickly and accurately obtain the operation mode identifier corresponding to the alarm information, query parameters and the query order of the query parameters can be determined from the alarm device identifier, alarm content and alarm trigger time.

[0073] In an embodiment of the present invention, the configuration center stores the operation mode identifier. As an example, the configuration center can set the operation mode identifier according to the alarm device identifier, the alarm content, and the alarm trigger time. For example, the alarm device identifier 11 is set to correspond to the operation mode identifier a, the operation mode identifier b, and the operation mode identifier c. The alarm content 21 is set to correspond to the operation mode identifier a, the operation mode identifier c, and the operation mode identifier d. The alarm trigger time 31 is set to correspond to the operation mode identifier d, the operation mode identifier e, and the operation mode identifier f.

[0074] The operation mode identifier is used to mark the script for processing the alarm information. Different operation mode identifiers result in different scripts for processing the alarm information.

[0075] See also Figure 4 That is 400, Figure 4 1 is a flow chart of determining query parameters and query order according to an embodiment of the present invention. Specifically, the following steps are included:

[0076] S401. Filter out query parameters from the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority.

[0077] The alarm device identification priority represents the importance of the alarm device in obtaining the operation mode identification corresponding to the alarm information. The alarm content priority represents the importance of the alarm content in obtaining the operation mode identification corresponding to the alarm information. The alarm trigger time priority represents the importance of the alarm trigger time in obtaining the operation mode identification corresponding to the alarm information.

[0078] By presetting the alarm device identification priority, alarm content priority and alarm trigger time priority, query parameters can be filtered out from the alarm device identification, alarm content and alarm trigger time.

[0079] In one embodiment of the present invention, considering that too many query parameters will prolong the processing time of alarm information, two parameters can be selected from the alarm device identifier, alarm content and alarm trigger time as query parameters according to the alarm device identifier priority, alarm content priority and alarm trigger time priority.

[0080] As an example, according to the alarm device identification priority, the alarm content priority and the alarm triggering time priority, two parameters with higher priorities are selected as query parameters.

[0081] For example: Alarm device identification priority: high; Alarm content priority: medium; Alarm trigger time priority: low. Select the alarm device identification and alarm content as query parameters.

[0082] For example: Alarm device identification priority: Medium; Alarm content priority: High; Alarm trigger time priority: Low. Select the alarm device identification and alarm content as query parameters.

[0083] S402: Determine a query order according to the priority of the query parameters.

[0084] After the query parameters are determined, the query order can be determined according to the priority of the query parameters. As an example, the query parameters include the alarm device identifier and the alarm content, and the alarm device identifier priority is: medium, and the alarm content priority is: high, then the query order is: first query according to the alarm content, then query according to the alarm device identifier.

[0085] exist Figure 4 In the embodiment, the configuration center is queried based on the query parameters according to the query order to improve the accuracy of the operation method.

[0086] S302: query the configuration center according to the query parameters and in the query order to obtain the operation mode identifier corresponding to the alarm information.

[0087] After the query parameters and query sequence are determined, the configuration center can be queried according to the query parameters and the query sequence to obtain the operation mode identifier corresponding to the alarm information.

[0088] As an example, the query parameters include a first query parameter and a second query parameter. The query sequence includes first searching according to the first query parameter and then searching according to the second query parameter.

[0089] For example: first query the configuration center according to the first query parameter to obtain the operation mode identifier. The number of operation mode identifiers corresponding to the first query parameter is greater than one. Based on the second query parameter, query and determine the operation mode identifier corresponding to the second query parameter in the above operation mode identifier. If the operation mode identifier corresponding to the second query parameter is one, the operation mode identifier corresponding to the second query parameter is used as the operation mode identifier corresponding to the alarm information. If there is more than one operation mode identifier corresponding to the second query parameter, any one of the operation mode identifiers corresponding to the second query parameter is used as the operation mode identifier corresponding to the alarm information.

[0090] For example, first query the configuration center to obtain the operation mode identifier according to the first query parameter. If the operation mode identifier corresponding to the first query parameter is one, the operation mode identifier corresponding to the first query parameter is used as the operation mode identifier corresponding to the alarm information.

[0091] If the corresponding operation mode identifier is not found using the first query parameter, manual processing is performed.

[0092] exist Figure 3 In the embodiment, the configuration center is queried based on the query parameters and in the query order to accurately obtain the operation mode identifier corresponding to the alarm information.

[0093] See also Figure 5 That is 500, Figure 5 This is a flow chart of querying a database according to the trigger type of alarm information according to an embodiment of the present invention. Specifically, it includes the following steps:

[0094] S501. Determine the query order of the alarm device identification, alarm content and alarm trigger time according to the alarm device identification priority, alarm content priority and alarm trigger time priority, and query the configuration center according to the query order to determine the trigger type of the alarm information.

[0095] In one embodiment of the present invention, the configuration center stores the corresponding relationship between the alarm device identification, alarm content and alarm trigger time and the trigger type. In this way, the trigger type of the alarm information can be determined according to one or more parameters of the alarm device identification, alarm content and alarm trigger time.

[0096] As an example, the trigger types of alarm information include: CPU alarm during working hours and CPU alarm during non-working hours. For example, the CPU alarm of the video server appears at 10 o'clock every morning because the video related to study and work is played at this time, resulting in tight CPU resource usage. Another example: The CPU alarm of the video server appears at 9 o'clock in the evening because there are many requests to watch game videos.

[0097] According to the alarm device identification priority, alarm content priority and alarm trigger time priority, the query order of alarm device identification, alarm content and alarm trigger time can be determined. As an example, if the alarm device identification priority is medium, the alarm content priority is low, and the alarm trigger time priority is high, the query order is: alarm trigger time, alarm device identification, alarm content. Query the configuration center according to the upload query order to determine the trigger type of the alarm information.

[0098] S502: query a database according to the trigger type of the alarm information to obtain an operation mode identifier corresponding to the alarm information.

[0099] The correspondence between the trigger type of the alarm information and the operation mode identifier is stored in the database, and the database is queried according to the trigger type of the alarm information to obtain the operation mode identifier corresponding to the alarm information.

[0100] exist Figure 5 In the embodiment, the corresponding operation mode identifier is obtained based on the trigger type of the alarm information to improve the speed and pertinence of processing the alarm information.

[0101] S103: Send the acquired operation mode identifier to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation mode identifier and the alarm device identifier.

[0102] In an embodiment of the present invention, the distributor queries and calls a script to process the alarm information based on the operation mode identifier and the alarm device identifier.

[0103] See also Figure 6 That is 600, Figure 6 This is a flow chart of querying and calling a script to process alarm information according to an operation identifier and an alarm device identifier according to an embodiment of the present invention. Specifically, the following steps are included:

[0104] S601. Send the acquired operation mode identifier to the distributor, and the distributor successfully verifies the operation mode identifier according to the alarm device identifier.

[0105] The obtained operation mode identifier is sent to the distributor, which is responsible for verifying the operation mode identifier. For the alarm device, the executed operation mode identifier needs to be outside the blacklist to ensure the operation of the alarm device. Therefore, the distributor determines based on the operation mode identifier that the operation mode identifier does not belong to the blacklist of the alarm device identifier to successfully verify the operation mode identifier.

[0106] S602: The distributor queries and obtains a script according to the operation mode identifier to process the alarm information, and the processing includes one or more of the following: service restart, flow control, and fault isolation.

[0107] After the distributor identifies the query script according to the operation mode, it processes the alarm information with the queried script. The processing includes one or more of the following: service restart, flow control and fault isolation.

[0108] In the embodiment of the present invention, a distributor is used in the cloud platform to process the alarm information according to the script to achieve one or more of service restart, flow control and fault isolation, so as to realize the automatic processing of the alarm information.

[0109] In one embodiment of the present invention, in response to an alarm information processing request, the alarm information and the processing method of the alarm information are displayed, and the script corresponding to the operation method identifier is updated based on the actual processing method of the alarm information.

[0110] The actual processing method of the alarm information is the processing method after manual adjustment. The script corresponding to the operation method identifier is updated with the actual processing method to improve the accuracy of processing the alarm information.

[0111] In the above-mentioned embodiment of the present invention, in response to the alarm information sent by the monitoring system, the alarm information sent by the monitoring system is parsed based on the alarm information format to obtain the alarm device identification, alarm device identification priority, alarm content, alarm content priority, alarm trigger time and alarm trigger time priority, and the alarm information format is set in the monitoring system; according to the alarm device identification priority, the alarm content priority and the alarm trigger time priority, the query order of the alarm device identification, the alarm content and the alarm trigger time is determined, and the configuration center is queried according to the query order to obtain the operation mode identification corresponding to the alarm information; the obtained operation mode identification is sent to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation mode identification and the alarm device identification. By calling the script to process the alarm information, the efficiency of the cloud platform in processing the alarm information can be improved to ensure the normal operation of the server in the cloud platform.

[0112] The embodiments of the present invention are described below by way of example.

[0113] During the coupon-grabbing activity, the server was overloaded, memory usage skyrocketed, and the application process was shut down by the system due to memory overflow, resulting in interruption of business operations.

[0114] The monitoring system detects memory overflow and sends an alarm message to the gateway.

[0115] In response to the alarm information sent by the monitoring system, the alarm information sent by the monitoring system is parsed based on the alarm information format to obtain the alarm device identification, the alarm device identification priority, the alarm content, the alarm content priority, the alarm trigger time and the alarm trigger time priority;

[0116] According to the alarm device identification priority, alarm content priority and alarm trigger time priority, determine the query order of the alarm device identification, alarm content and alarm trigger time, and query the configuration center according to the query order to obtain the operation mode identification corresponding to the alarm information: 001.

[0117] The obtained operation mode identifier: 001 is sent to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation mode identifier and the alarm device identifier. Among them, processing the alarm information includes restarting the application process to reduce the weight of the IPR address bound by the load balancer on the cloud platform to achieve load balancing.

[0118] See also Figure 7 , Figure 7 is a schematic diagram of the main structure of an apparatus for processing alarm information according to an embodiment of the present invention. The apparatus for processing alarm information can implement a method for processing alarm information, such as Figure 7 As shown in 700, the device for processing alarm information specifically includes:

[0119] The parsing module 701 is used to respond to the alarm information sent by the monitoring system, parse the alarm information sent by the monitoring system based on the alarm information format, and obtain the alarm device identification, the alarm device identification priority, the alarm content, the alarm content priority, the alarm trigger time and the alarm trigger time priority, and the alarm information format is set in the monitoring system;

[0120] The query module 702 is used to determine the query order of the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority, and query the configuration center according to the query order to obtain the operation mode identifier corresponding to the alarm information;

[0121] The processing module 703 is used to send the acquired operation mode identifier to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation mode identifier and the alarm device identifier.

[0122] In one embodiment of the present invention, the parsing module 701 is specifically used to respond to the alarm information sent by the monitoring system, parse the alarm information sent by the monitoring system according to the alarm information format, and obtain the fields in the alarm information;

[0123] According to the field identifier in the alarm information format, the alarm device identifier, alarm device identifier priority, alarm content, alarm content priority, alarm trigger time and alarm trigger time priority are obtained in the fields in the alarm information. The alarm device identifier priority, the alarm content priority and the alarm trigger time priority are parameters determined according to the monitoring system and the monitored object.

[0124] In one embodiment of the present invention, the query module 702 is specifically used to determine the query parameters and the query order of the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority;

[0125] The configuration center is queried according to the query parameters and in the query order to obtain the operation mode identifier corresponding to the alarm information.

[0126] In one embodiment of the present invention, the query module 702 is specifically used to filter out query parameters from the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority;

[0127] The query order is determined according to the priority of the query parameters.

[0128] In one embodiment of the present invention, the query module 702 is specifically used to determine the query order of the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority, and query the configuration center according to the query order to determine the trigger type of the alarm information;

[0129] The database is queried according to the trigger type of the alarm information to obtain the operation mode identifier corresponding to the alarm information.

[0130] In one embodiment of the present invention, the processing module 703 is specifically configured to send the acquired operation mode identifier to a distributor, and the distributor successfully verifies the operation mode identifier according to the alarm device identifier;

[0131] The distributor queries and obtains a script according to the operation mode identifier to process the alarm information, and the processing includes one or more of the following: service restart, flow control and fault isolation.

[0132] In one embodiment of the present invention, the processing module 703 is specifically used to respond to an alarm information processing request, display the alarm information and the processing method of the alarm information, and update the script corresponding to the operation method identifier based on the actual processing method of the alarm information.

[0133] Figure 8 An exemplary system architecture 800 is shown to which the method for processing alarm information or the apparatus for processing alarm information according to the embodiments of the present invention can be applied.

[0134] like Figure 8 As shown, system architecture 800 may include terminal devices 801, 802, 803, a network 804, and a server 805. Network 804 is used to provide a medium for communication links between terminal devices 801, 802, 803 and server 805. Network 804 may include various connection types, such as wired, wireless communication links, or optical fiber cables, etc.

[0135] Users can use terminal devices 801, 802, and 803 to interact with server 805 through network 804 to receive or send messages, etc. Various communication client applications can be installed on terminal devices 801, 802, and 803, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only examples).

[0136] The terminal devices 801 , 802 , and 803 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.

[0137] The server 805 may be a server that provides various services, such as a backend management server (only an example) that provides support for shopping websites browsed by users using the terminal devices 801, 802, and 803. The backend management server may analyze and process the received data such as product information query requests, and feed back the processing results (such as target push information, product information - only an example) to the terminal device.

[0138] It should be noted that the method for processing alarm information provided in the embodiment of the present invention is generally executed by the server 805 , and accordingly, the device for processing alarm information is generally set in the server 805 .

[0139] It should be understood that Figure 8 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to the implementation requirements.

[0140] A computer program product according to an embodiment of the present invention includes a computer program, and when the program is executed by a processor, the method for processing alarm information provided by an embodiment of the present invention is implemented.

[0141] Reference below Fig. 9, which shows a schematic diagram of the structure of a computer system 900 of a terminal device suitable for implementing an embodiment of the present invention. Fig. 9 The terminal device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0142] like Fig. 9 As shown, the computer system 900 includes a central processing unit (CPU) 901, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 902 or a program loaded from a storage part 908 into a random access memory (RAM) 903. In the RAM 903, various programs and data required for the operation of the system 900 are also stored. The CPU 901, the ROM 902, and the RAM 903 are connected to each other through a bus 904. An input / output (I / O) interface 905 is also connected to the bus 904.

[0143] The following components are connected to the I / O interface 905: an input section 906 including a keyboard, a mouse, etc.; an output section 907 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 908 including a hard disk, etc.; and a communication section 909 including a network interface card such as a LAN card, a modem, etc. The communication section 909 performs communication processing via a network such as the Internet. A drive 910 is also connected to the I / O interface 905 as needed. A removable medium 911, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 910 as needed, so that a computer program read therefrom is installed into the storage section 908 as needed.

[0144] In particular, according to the embodiments disclosed in the present invention, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present invention include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 909, and / or installed from the removable medium 911. When the computer program is executed by the central processing unit (CPU) 901, the above-mentioned functions defined in the system of the present invention are executed.

[0145] It should be noted that the computer-readable medium shown in the present invention may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present invention, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0146] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0147] The modules involved in the embodiments of the present invention may be implemented in software or hardware. The modules described may also be set in a processor. For example, they may be described as: a processor including a parsing module, a query module, and a processing module. The names of these modules do not constitute limitations on the modules themselves in certain cases. For example, the parsing module may also be described as "used to respond to the alarm information sent by the monitoring system, parse the alarm information sent by the monitoring system based on the alarm information format, and obtain the alarm device identification, the alarm device identification priority, the alarm content, the alarm content priority, the alarm trigger time, and the alarm trigger time priority, wherein the alarm information format is set in the monitoring system".

[0148] As another aspect, the present invention further provides a computer-readable medium, which may be included in the device described in the above embodiment; or may exist independently without being assembled into the device. The above computer-readable medium carries one or more programs, and when the above one or more programs are executed by a device, the device includes:

[0149] In response to an alarm message sent by a monitoring system, the alarm message sent by the monitoring system is parsed based on an alarm message format to obtain an alarm device identifier, an alarm device identifier priority, an alarm content, an alarm content priority, an alarm trigger time, and an alarm trigger time priority, wherein the alarm message format is set in the monitoring system;

[0150] Determine the query order of the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority, and query the configuration center according to the query order to obtain the operation mode identifier corresponding to the alarm information;

[0151] The acquired operation mode identifier is sent to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation mode identifier and the alarm device identifier.

[0152] According to the technical solution of the embodiment of the present invention, in response to the alarm information sent by the monitoring system, the alarm information sent by the monitoring system is parsed based on the alarm information format to obtain the alarm device identification, alarm device identification priority, alarm content, alarm content priority, alarm trigger time and alarm trigger time priority, and the alarm information format is set in the monitoring system; according to the alarm device identification priority, the alarm content priority and the alarm trigger time priority, the query order of the alarm device identification, the alarm content and the alarm trigger time is determined, and the configuration center is queried according to the query order to obtain the operation mode identification corresponding to the alarm information; the obtained operation mode identification is sent to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation mode identification and the alarm device identification. By calling the script to process the alarm information, the efficiency of the cloud platform in processing the alarm information can be improved to ensure the normal operation of the server in the cloud platform.

[0153] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may occur depending on design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

[0154] It should be noted that in the technical solution of the present invention, the collection, analysis, use, transmission, storage and other aspects of user personal information involved are in compliance with the provisions of relevant laws and regulations, are used for legal and reasonable purposes, are not shared, leaked or sold outside of these legal uses, and are subject to supervision and management by regulatory authorities. Necessary measures should be taken for user personal information to prevent illegal access to such personal information data, ensure that persons who have access to personal information data comply with the provisions of relevant laws and regulations, and ensure the security of user personal information. Once these user personal information data are no longer needed, the risks should be minimized by limiting or even prohibiting data collection and / or deleting data.

[0155] When applicable, including in certain relevant applications, protect user privacy by de-identifying data, such as by removing specific identifiers (e.g., date of birth, etc.) when applicable, controlling the amount or specificity of data stored (e.g., collecting location data at a city level rather than at a specific address level), controlling how data is stored, and / or other de-identification methods.

Claims

1. A method for processing alarm information, characterized in that: include: In response to an alarm message sent by a monitoring system, the alarm message sent by the monitoring system is parsed based on an alarm message format to obtain an alarm device identifier, an alarm device identifier priority, an alarm content, an alarm content priority, an alarm trigger time, and an alarm trigger time priority, wherein the alarm message format is set in the monitoring system; Determine the query order of the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority, and query the configuration center according to the query order to obtain the operation mode identifier corresponding to the alarm information; The acquired operation mode identifier is sent to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation mode identifier and the alarm device identifier.

2. The method for processing alarm information according to claim 1, characterized in that: The response to the alarm information sent by the monitoring system is to parse the alarm information sent by the monitoring system based on the alarm information format to obtain the alarm device identifier, the alarm device identifier priority, the alarm content, the alarm content priority, the alarm trigger time and the alarm trigger time priority, wherein the alarm information format is set in the monitoring system, including: In response to the alarm information sent by the monitoring system, the alarm information sent by the monitoring system is parsed according to the alarm information format to obtain fields in the alarm information; According to the field identifier in the alarm information format, the alarm device identifier, alarm device identifier priority, alarm content, alarm content priority, alarm trigger time and alarm trigger time priority are obtained in the fields in the alarm information. The alarm device identifier priority, the alarm content priority and the alarm trigger time priority are parameters determined according to the monitoring system and the monitored object.

3. The method for processing alarm information according to claim 1, characterized in that: The determining, according to the alarm device identification priority, the alarm content priority and the alarm trigger time priority, a query order of the alarm device identification, the alarm content and the alarm trigger time, and querying a configuration center according to the query order to obtain an operation mode identification corresponding to the alarm information, includes: Determine query parameters and the query order of the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority; The configuration center is queried according to the query parameters and in the query order to obtain the operation mode identifier corresponding to the alarm information.

4. The method for processing alarm information according to claim 3, characterized in that: The determining, according to the alarm device identification priority, the alarm content priority and the alarm trigger time priority, query parameters and the query order of the alarm device identification, the alarm content and the alarm trigger time includes: According to the alarm device identification priority, the alarm content priority and the alarm triggering time priority, filtering out query parameters from the alarm device identification, the alarm content and the alarm triggering time; The query order is determined according to the priority of the query parameters.

5. The method for processing alarm information according to claim 1, characterized in that: The determining, according to the alarm device identification priority, the alarm content priority and the alarm trigger time priority, a query order of the alarm device identification, the alarm content and the alarm trigger time, and querying a configuration center according to the query order to obtain an operation mode identification corresponding to the alarm information, includes: Determine the query order of the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority, and query the configuration center according to the query order to determine the trigger type of the alarm information; The database is queried according to the trigger type of the alarm information to obtain the operation mode identifier corresponding to the alarm information.

6. The method for processing alarm information according to claim 1, characterized in that: The acquired operation mode identifier is sent to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation identifier and the alarm device identifier, including: The acquired operation mode identifier is sent to the distributor, and the distributor successfully verifies the operation mode identifier according to the alarm device identifier; The distributor queries and obtains a script according to the operation mode identifier to process the alarm information, and the processing includes one or more of the following: service restart, flow control and fault isolation.

7. The method for processing alarm information according to claim 1, characterized in that: The method further comprises: In response to the alarm information processing request, the alarm information and the processing method of the alarm information are displayed, and the script corresponding to the operation method identifier is updated based on the actual processing method of the alarm information.

8. A device for processing alarm information, characterized in that: include: A parsing module, configured to respond to the alarm information sent by the monitoring system, parse the alarm information sent by the monitoring system based on the alarm information format, and obtain the alarm device identification, the alarm device identification priority, the alarm content, the alarm content priority, the alarm trigger time and the alarm trigger time priority, wherein the alarm information format is set in the monitoring system; A query module, used to determine the query order of the alarm device identifier, the alarm content and the alarm trigger time according to the alarm device identifier priority, the alarm content priority and the alarm trigger time priority, and query the configuration center according to the query order to obtain the operation mode identifier corresponding to the alarm information; The processing module is used to send the acquired operation mode identifier to the distributor, and the distributor queries and calls the script to process the alarm information according to the operation mode identifier and the alarm device identifier.

9. An electronic device for processing alarm information, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 7.

10. A computer readable medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

11. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images