Abnormality positioning analysis system

Abstract

The invention discloses an abnormity positioning analysis system. The system comprises a data acquisition module, a data processing module, an analysis engine module, a display and interaction module and an alarm and response module. According to the method, a high-precision algorithm and an advanced data analysis technology are adopted, a fault source can be accurately positioned, a complex system architecture and hidden potential problems can be revealed by the system, it is ensured that fault positioning is accurate and error-free, and the risk of service interruption is reduced; a multi-verification mechanism is adopted, a positioning result is verified and compared for multiple times, the accuracy and consistency of the result are ensured, meanwhile, detailed fault analysis reports including fault occurrence time, position and reason and suggested solutions can be provided, it is ensured that the system can stably operate under various emergencies, and the system reliability is improved. Through strategies such as redundancy deployment, load balancing and failover, sudden challenges such as hardware faults and network interruption can be effectively handled, and continuity and reliability of fault positioning service are guaranteed.

Description

Technical Field

[0001] The present application relates to an analysis system, specifically an anomaly location analysis system. Background Art

[0002] With the development and expansion of the Internet, network traffic has also increased, and the stability of interface performance is crucial. In this case, data stability monitoring solutions have emerged. Whether it is self-developed or using monitoring solutions, how to locate the problem is a relatively troublesome matter. In the complex IT technology, every failure is a challenge to operation and maintenance. Traditional manual troubleshooting is time-consuming, labor-intensive and inefficient. As one of the important technical solutions in the field of IT operation and maintenance, the fault location system has broad application prospects and market demand. By continuously optimizing and improving the system architecture and key technical means, the performance and reliability of the system can be further improved, providing enterprises with more efficient and accurate fault location services. In the future, with the continuous development and application promotion of technologies such as cloud computing, big data, and artificial intelligence, the fault location system will usher in a broader development space and opportunities.

[0003] There is no unified standard or tool in the industry that can quickly analyze positioning problems. Currently, manual positioning is often used. In manual positioning, there is no data support and it can only be evaluated through manual perception. It is highly subjective and everyone has their own opinions, making it difficult to form a set of standards. It also wastes resources and requires the participation of multiple people in the same environment to minimize variables. Summary of the invention

[0004] In order to solve the technical problem of low efficiency in fault anomaly location analysis, the present application provides an anomaly location analysis system.

[0005] This application solves the above technical problems through the following technical solutions:

[0006] The present application provides an abnormality location analysis system, including a data acquisition module, a data processing module, an analysis engine module, a display and interaction module, and an alarm and response module;

[0007] The data acquisition module includes a data monitoring unit and a data acquisition unit, the data processing module includes a data integration unit and a data calculation unit, the analysis engine module includes a fault analysis unit and a fault location unit, the display and interaction module includes a data display unit and an interaction unit, and the alarm and response module includes an alarm unit and a transmission unit.

[0008] In this technical solution, the data acquisition module is connected to the server, network equipment, and application system respectively, and the data acquisition module is connected to the data processing module, analysis engine module, display and interaction module, and alarm and response module respectively.

[0009] In the technical solution, the data collection unit is connected to the performance indicator port, the log information port and the network traffic port respectively, and the data collection unit is connected to the data monitoring unit.

[0010] In this technical solution, the data acquisition module is connected to the Agent mode interface, the SNMP protocol interface and the API interface respectively.

[0011] In this technical solution, the data integration unit is connected to the data computing unit, and the data integration unit is composed of a distributed storage system and a real-time computing framework.

[0012] In this technical solution, the fault analysis unit is connected to the fault location unit, and the fault analysis unit has a built-in fault analysis algorithm and model.

[0013] In the technical solution, the data display unit is connected to the interactive unit, and the data display unit is composed of a display screen or a dashboard, etc.

[0014] In this technical solution, the alarm unit is connected to the transmission unit, and the alarm unit is connected to the data monitoring unit.

[0015] In the technical solution, the transmission unit is respectively connected to one or more of emails, text messages and instant messaging tools.

[0016] In this technical solution, the alarm unit is connected to the fault analysis unit and the fault location unit respectively.

[0017] The beneficial effect of the present application is that the present application provides a multi-dimensional data collection, and through data collection of real link data, forms an abnormal location analysis system of the data comparison system. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0019] Figure 1 A schematic diagram of the system structure of an embodiment of the present application.

[0020] In the figure: 10, data acquisition module; 11, data monitoring unit; 12, data collection unit;

[0021] 20. Data processing module; 21. Data integration unit; 22. Data calculation unit;

[0022] 30. Analysis engine module; 31. Fault analysis unit; 32. Fault location unit;

[0023] 40. Display and interaction module; 41. Data display unit; 42. Interaction unit;

[0024] 50. Alarm and response module; 51. Alarm unit; 52. Transmission unit. DETAILED DESCRIPTION

[0025] In order to enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of this application.

[0026] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequential order. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present application described here. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0027] In the present application, the terms "upper", "lower", "left", "right", "front", "back", "top", "bottom", "inner", "outer", "middle", "vertical", "horizontal", "lateral", "longitudinal" and the like indicate positions or positional relationships based on the positions or positional relationships shown in the drawings. These terms are mainly used to better describe the present application and its embodiments, and are not used to limit the indicated devices, elements or components to have a specific orientation, or to be constructed and operated in a specific orientation.

[0028] In addition, some of the above terms may be used to express other meanings in addition to indicating orientation or positional relationship. For example, the term "on" may also be used to express a certain dependency or connection relationship in some cases. For those of ordinary skill in the art, the specific meanings of these terms in this application can be understood according to specific circumstances.

[0029] In addition, the terms "installed", "set", "provided with", "connected", "connected", and "socketed" should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral structure; it can be a mechanical connection, or an electrical connection; it can be a direct connection, or an indirect connection through an intermediate medium, or it can be an internal connection between two devices, elements, or components. For those of ordinary skill in the art, the specific meanings of the above terms in this application can be understood according to specific circumstances.

[0030] It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0031] See also Figure 1 As shown, the abnormal location analysis system includes a data acquisition module, a data processing module, an analysis engine module, a display and interaction module, and an alarm and response module;

[0032] The data acquisition module includes a data monitoring unit and a data acquisition unit, the data processing module includes a data integration unit and a data calculation unit, the analysis engine module includes a fault analysis unit and a fault location unit, the display and interaction module includes a data display unit and an interaction unit, and the alarm and response module includes an alarm unit and a transmission unit.

[0033] The data acquisition module is connected to the server, network equipment, and application system respectively; the data acquisition module is connected to the data processing module, analysis engine module, display and interaction module, and alarm and response module respectively; the data collection unit is connected to the performance indicator port, log information port, and network traffic port respectively; the data collection unit is connected to the data monitoring unit; the data acquisition module is connected to the Agent mode interface, SNMP protocol interface, and API interface respectively.

[0034] In this technical solution, the data monitoring unit and data collection unit in the data acquisition module are responsible for collecting monitoring data from various IT resources (such as servers, network equipment, application systems, etc.), including performance indicators, log information, network traffic, etc. The data collection methods are diverse, including Agent mode, SNMP protocol, API interface, etc., to ensure the comprehensiveness and accuracy of the data.

[0035] The data integration unit is connected to the data computing unit, and the data integration unit is composed of a distributed storage system and a real-time computing framework. The system supports the collection of monitoring data from multiple data sources and protocols to ensure the comprehensiveness and accuracy of the data. At the same time, data from different sources are uniformly processed and managed through data integration technology to improve data availability and consistency.

[0036] In this technical solution, the data integration unit and data computing unit in the data processing module clean, integrate and store the collected raw data, and use distributed storage systems (such as Hadoop, HBase, etc.) and real-time computing frameworks (such as Spark Streaming, Kafka Streams, etc.) to process massive data, improve data processing efficiency and response speed, and at the same time, standardize the data to ensure data consistency and comparability.

[0037] The fault analysis unit is connected to the fault location unit. The fault analysis unit has built-in fault analysis algorithms and models, and uses real-time computing frameworks and machine learning algorithms to perform real-time analysis and mining of monitoring data. By identifying abnormal patterns and fault characteristics, accurate fault location and early warning are achieved. At the same time, it supports retrospective analysis of historical data to help users discover potential problems and trends.

[0038] In this technical solution, the fault analysis unit and fault location unit in the analysis engine module use built-in advanced fault analysis algorithms and models to conduct in-depth mining and analysis of the processed data, and automatically identify and locate potential fault points through technical means such as machine learning and anomaly detection. At the same time, it supports customized analysis rules and strategies to meet the needs of different business scenarios.

[0039] The data display unit is connected to the interactive unit. The data display unit is composed of a display screen or a dashboard, etc., and provides intuitive data analysis and visualization functions to help users quickly understand business status and find problems. It supports interactive query and data analysis functions to facilitate users to deeply explore the rules behind the data. At the same time, it supports multiple data views and report modes to meet the needs of different users.

[0040] In this technical solution, the data display unit and the interaction unit in the display and interaction module can provide intuitive data analysis and visualization display functions, and display key performance indicators (KPIs), business trends, abnormal alarms and other information in the form of charts, dashboards, etc., to help users quickly understand the business status and discover problems. At the same time, it supports interactive query and data analysis functions, which facilitates users to deeply explore the laws behind the data.

[0041] The alarm unit is connected to the transmission unit, and the alarm unit is connected to the data monitoring unit; the transmission unit is respectively connected to one or more of email, SMS and instant messaging tools; the alarm unit is respectively connected to the fault analysis unit and the fault location unit, and automatically generates alarm information and notifies relevant personnel according to the preset alarm rules and user-defined strategies. It supports alarm convergence and intelligent analysis functions to reduce the occurrence of false alarms and missed alarms. At the same time, it provides a variety of alarm notification channels and response mechanisms to ensure that faults are responded to and handled in a timely manner.

[0042] In this technical solution, the alarm unit and transmission unit in the alarm and response module automatically trigger the alarm mechanism when abnormalities or faults are detected according to the preset alarm rules. Relevant personnel are notified through various means such as email, SMS, instant messaging tools, etc., and fault location and processing suggestions are provided. Customized alarm notification channels and strategies are supported to meet the needs of different enterprises.

[0043] The implementation steps when using it include:

[0044] Demand analysis: clarify the goals and scope of the fault location system, and determine the IT resources and business scenarios that need to be monitored;

[0045] System design: Design system architecture and module division based on demand analysis results, and determine technical solutions and implementation paths for each link including data collection, processing, analysis and display;

[0046] System deployment: deploy the designed system to the actual environment, and perform configuration and debugging to ensure smooth data flow and collaboration between modules;

[0047] Data access and verification: Access the actual monitoring data source and perform data verification to ensure that the collected data accurately reflects the operating status and performance characteristics of the system;

[0048] Rule configuration and testing: Configure alarm rules and analysis strategies according to business needs, and perform testing and verification to ensure that the system can accurately identify and locate potential fault points and trigger corresponding alarm notifications;

[0049] Training and support: Provide users with system usage training and technical support services to help users master the system's operating methods and usage skills and improve the efficiency and effectiveness of system use.

[0050] The benefits of the present application are as follows: the abnormal location analysis system adopts high-precision algorithms and advanced data analysis technology, which can accurately locate the source of the fault. Whether it is a complex system architecture or a hidden potential problem, it can be revealed by the system to ensure accurate fault location and reduce the risk of business interruption; and adopts a multiple verification mechanism to perform multiple checks and comparisons on the positioning results to ensure the accuracy and consistency of the results. At the same time, it can also provide a detailed fault analysis report, including the time, location, cause and recommended solution of the fault; it adopts a high-availability design to ensure that the system can run stably in various emergency situations. Through redundant deployment, load balancing and failover strategies, it can effectively respond to sudden challenges such as hardware failures and network interruptions, and ensure the continuity and reliability of fault location services.

[0051] The circuits, electronic components and modules involved are all prior art and can be fully implemented by those skilled in the art. Needless to say, the content protected by this application does not involve improvements to software and methods.

[0052] The above description is only the preferred embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. Anomaly location analysis system, characterized by: It includes data collection module, data processing module, analysis engine module, display and interaction module, and alarm and response module; The data acquisition module includes a data monitoring unit and a data acquisition unit, the data processing module includes a data integration unit and a data calculation unit, the analysis engine module includes a fault analysis unit and a fault location unit, the display and interaction module includes a data display unit and an interaction unit, and the alarm and response module includes an alarm unit and a transmission unit.

2. The abnormality location analysis system according to claim 1, characterized in that: The data acquisition module is connected to the server, the network device and the application system respectively, and the data acquisition module is connected to the data processing module, the analysis engine module, the display and interaction module and the alarm and response module respectively.

3. The abnormality location analysis system according to claim 1, characterized in that: The data collection unit is connected to the performance indicator port, the log information port and the network flow port respectively, and the data collection unit is connected to the data monitoring unit.

4. The abnormality location analysis system according to claim 1, characterized in that: The data acquisition module is connected to the Agent mode interface, the SNMP protocol interface and the API interface respectively.

5. The abnormality location analysis system according to claim 1, characterized in that: The data integration unit is connected to the data computing unit, and the data integration unit is composed of a distributed storage system and a real-time computing framework.

6. The abnormality location analysis system according to claim 1, characterized in that: The fault analysis unit is connected to the fault location unit, and the fault analysis unit has a built-in fault analysis algorithm and model.

7. The abnormality location analysis system according to claim 1, characterized in that: The data display unit is connected to the interactive unit, and the data display unit is composed of a display screen or a dashboard.

8. The abnormality location analysis system according to claim 1, characterized in that: The alarm unit is connected to the transmission unit, and the alarm unit is connected to the data monitoring unit.

9. The abnormality location analysis system according to claim 1, characterized in that: The transmission unit is respectively connected to one or more of emails, text messages and instant messaging tools for communication.

10. The abnormality location analysis system according to claim 1, characterized in that: The alarm unit is connected to the fault analysis unit and the fault location unit respectively.

Images