Alarm merging method, system and device based on correlation and medium

Abstract

The invention belongs to the technical field of monitoring alarm, and particularly relates to a correlation-based alarm merging method, system and device, and a medium, and the method comprises the steps: obtaining alarm data generated when an alarm rule meets a triggering condition or a recovery condition; performing drill-down analysis on the alarm data to expand the attribute tag of the alarm data, and generating one or more alarm sending tasks according to the receiver based on the alarm data and the attribute tag of the alarm data; and temporarily storing the generated alarm sending tasks in a task buffer list, and regularly pulling the alarm sending tasks from the task buffer list in batches, and merging and sending the alarm sending tasks according to correlation until the task buffer list is empty. The invention provides an alarm message merging strategy according to correlation, and part of alarm messages with strong correlation can be merged for sending and displaying, so that not only can the density of the alarm messages be improved, but also the pressure of business operation and maintenance personnel can be greatly reduced.

Description

Technical Field

[0001] The present invention belongs to the technical field of monitoring alarms, and in particular relates to a correlation-based alarm merging method, system, device, and medium. Background Art

[0002] In the Internet monitoring system, developers and operators set a large number of alarm rules for services to avoid missing monitoring items. An alarm rule may generate multiple alarm messages of different dimensions at the same time. However, when the alarm messages generated by multiple alarm rules are aggregated together, they may belong to the same business, the same IP, or the same pod. A large part of these original large number of alarm messages is redundant, and the generation of a large number of alarm messages will also make it difficult for business operators to distinguish the primary and secondary relationships of alarm messages. However, there is currently no reasonable alarm message merging strategy designed. Summary of the invention

[0003] In view of the shortcomings of the prior art mentioned above, the purpose of the present invention is to propose an alarm message merging strategy based on correlation, which can merge some strongly correlated alarm messages for sending and display, which can not only improve the density of alarm messages, but also greatly reduce the pressure on business operation and maintenance personnel.

[0004] To achieve the above-mentioned purpose and other related purposes, the present invention provides a correlation-based alarm merging method, including: obtaining alarm data generated when the alarm rule meets the trigger condition or recovery condition; performing a drill-down analysis on the alarm data to expand its attribute labels, and generating one or more alarm sending tasks according to the recipient based on the alarm data and its attribute labels; temporarily storing the generated alarm sending tasks in a task buffer list, and periodically pulling alarm sending tasks in batches from the task buffer list to merge and send them according to correlation until the task buffer list is empty.

[0005] According to a specific embodiment of the present invention, the generated alarm sending tasks are temporarily stored in the task buffer list, and the alarm sending tasks are periodically pulled in batches from the task buffer list to be merged and sent according to relevance until the task buffer list is empty. The steps include: grouping the batch pulled alarm sending tasks according to their respective relevance as an alternative for task merging; scoring each group of alarm sending tasks, and selecting the group with the highest score as the plan with the highest relevance, so as to merge all the alarm sending tasks in the group into one and send it to the corresponding recipients.

[0006] According to a specific embodiment of the present invention, the step of grouping batch-pulled alarm sending tasks according to their respective correlations as an alternative for task merging includes: for each alarm sending task, according to multiple fields preset in each group, the alarm sending tasks containing all fields of the group are divided into the group to obtain multiple groups of alarm sending tasks, and each group of alarm sending tasks serves as an alternative for task merging; wherein, any alarm sending task can be divided into different groups at the same time, and each group of preset fields includes fields corresponding to any one or more attribute tags, so as to merge the alarm sending tasks according to the correlation of the attribute tags; each group of alarm sending tasks is at least in the same state and is sent to the same recipient.

[0007] According to a specific embodiment of the present invention, the step of grouping the batch-pulled alarm sending tasks according to their respective relevance as an alternative for task merging further includes: directly sending the alarm sending tasks that failed in grouping to the corresponding recipients.

[0008] According to a specific embodiment of the present invention, each group of alarm sending tasks is scored, and the group with the highest score is selected as the solution with the highest relevance, so as to merge all the alarm sending tasks in the group into one and send it to the corresponding recipient. The steps include: calculating the total score of each group based on the preset weight scores of different fields and the number of alarm sending tasks in each group; selecting the group with the highest score from multiple groups with the same status and recipients as the solution with the highest relevance, so as to merge all the alarm sending tasks in the group into one and send it to the corresponding recipient.

[0009] According to a specific embodiment of the present invention, each group of alarm sending tasks is scored, and the group with the highest score is selected as the most relevant solution, so as to merge all the alarm sending tasks in the group into one and send it to the corresponding recipient. The step also includes: marking the sent alarm sending tasks, skipping them, and regrouping and scoring the unsent alarm sending tasks and the newly pulled alarm sending tasks to continue merging the alarm sending tasks for sending until all the pulled alarm sending tasks are sent.

[0010] According to a specific embodiment of the present invention, the data structure of the alarm sending task includes: rule identification, original attribute tag, extended attribute tag, status, recipient, and all are represented in the form of fields.

[0011] A correlation-based alarm merging system includes: a data monitoring module for acquiring alarm data generated when an alarm rule meets a trigger condition or a recovery condition; a label expansion module for performing a drill-down analysis on the alarm data to expand its attribute labels, and generating one or more alarm sending tasks according to the recipient based on the alarm data and its attribute labels; a task merging module for temporarily storing the generated alarm sending tasks in a task buffer list, and periodically pulling alarm sending tasks in batches from the task buffer list to merge and send them according to correlation until the task buffer list is empty.

[0012] An electronic device includes a processor, wherein the processor is coupled to a memory, and the memory stores program instructions. When the program instructions stored in the memory are executed by the processor, the above-mentioned method is implemented.

[0013] A computer-readable storage medium includes a program. When the program is run on a computer, the computer is enabled to execute the method described above.

[0014] The present invention provides an alarm merging method based on correlation, which can group different alarm sending tasks according to the same attribute tags they contain, and score the grouped alternative plans, so as to screen out a group with the highest correlation as a merging plan, and merge and send them accordingly, so as to reduce the work pressure of operation and maintenance personnel and avoid receiving a large number of alarm sending tasks that cannot be accurately processed. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 A flowchart of a specific embodiment of a correlation-based alarm merging method provided by the present invention; Figure 2 A flowchart of another specific embodiment of a correlation-based alarm merging method provided by the present invention; Figure 3 A schematic diagram of the structure of a specific embodiment of a correlation-based alarm merging system provided by the present invention; Figure 4 The present invention provides a structural block diagram of a specific embodiment of an electronic device. DETAILED DESCRIPTION

[0016] In order to facilitate understanding of the present application, the present application will be described more fully below with reference to the relevant drawings. Embodiments of the present application are provided in the drawings. However, the present application can be implemented in many different forms and is not limited to the embodiments described herein. On the contrary, the purpose of providing these embodiments is to make the disclosure of the present application more thorough and comprehensive.

[0017] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein in the specification of this application are only for the purpose of describing specific embodiments and are not intended to limit this application.

[0018] The following describes the embodiments of the present invention by specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict.

[0019] In the following description, numerous details are discussed to provide a more thorough explanation of the embodiments of the present invention. However, it is obvious to those skilled in the art that the embodiments of the present invention can be implemented without these specific details. In other embodiments, well-known structures and devices are shown in the form of block diagrams rather than in detail to avoid making the embodiments of the present invention difficult to understand.

[0020] Example 1 See also Figure 1 , a correlation-based alarm merging method shown in 2 is applied to a monitoring alarm system, such as a monitoring alarm system built based on Prometheus, or other monitoring alarm systems. At the same time, the monitoring alarm system can be used to monitor the relevant data generated by the intelligent logistics platform during the operation and maintenance process to ensure the safe and stable operation of the application. Of course, the monitoring alarm system and the corresponding monitoring objects are not limited to the above. Without departing from the spirit of the present invention, the modifications and embellishments made to the embodiments of the present invention by those skilled in the art still fall within the scope of the invention patent application of the present invention.

[0021] Step S100, obtaining alarm data generated when the alarm rule meets the triggering condition or the restoring condition.

[0022] It should be noted that, firstly, a large number of alarm rules are configured in the monitoring alarm system. The alarm rules are calculated periodically to detect whether the alarm rules are triggered, and an alarm notification is sent to the corresponding receiving end after the alarm rules are triggered. Secondly, usually after the alarm rules are calculated, if the corresponding triggering conditions are met, the corresponding original data, that is, the alarm data, will be generated, and an alarm sending task will be created based on the alarm data to send the alarm sending tasks one by one to the corresponding receiving end to notify the user. It should also be added here that the data structure of the alarm data usually includes: rule identifier (id), which can be matched to the corresponding alarm rule; attribute tags (tags), that is, the tags triggered by the alarm rule, such as ip=1.1.1.1, or host=test, etc., and displayed in a Map data structure; status, that is, the triggering status or recovery status of the alarm rule.

[0023] Therefore, the alarm merging method provided in this embodiment first obtains the corresponding alarm data, and then merges and sends it according to the alarm sending task created by it.

[0024] Step S200: Drill-down analysis is performed on the alarm data to expand its attribute tags, and one or more alarm sending tasks are generated according to the alarm data and its attribute tags according to the recipients.

[0025] It is understandable that under the microservice architecture system, affected by machine equipment, capacity, network environment, etc., the container (pod) is larger than the traditional ESC server. Therefore, based on the performance and capability requirements of the monitoring alarm system, the monitoring alarm service is usually deployed in the container, but at the same time, the container deployment solution is more prone to overall fluctuations. In this regard, if the alarm data can be drilled down to the corresponding IP or pod-name, it will be more conducive to the merging of subsequent alarm sending tasks.

[0026] Specifically, the attribute labels of the alarm data are first expanded by performing an indicator drill-down analysis on the alarm data. Further, an alarm sending task is created based on the alarm data and the expanded attribute labels, and the data structure of the alarm sending task includes: rule identifier, attribute label, status, and corresponding recipient. It can be understood that the attribute labels here include original attribute labels and expanded attribute labels. At the same time, one alarm data may correspond to multiple recipients, and multiple alarm sending tasks will be created accordingly based on different recipients to notify different recipients respectively. Of course, there is no limitation to this. Without departing from the spirit of the present invention, the modifications and embellishments made to the embodiments of the present invention by those skilled in the art still fall within the scope of the invention patent application of the present invention.

[0027] Step S300, temporarily storing the generated alarm sending tasks in a task buffer list, and periodically pulling alarm sending tasks in batches from the task buffer list to merge and send them according to relevance until the task buffer list is empty.

[0028] It should be noted that usually after the alarm sending task is created, it is sent to the corresponding recipient. However, once during the alarm storm and stress test, a large amount of alarm data will generate a large number of alarm sending tasks. If it is sent directly to the recipient, the recipient will receive a large number of alarm sending tasks in a short period of time, and thus cannot distinguish the primary and secondary relationships among them, and thus cannot accurately handle the alarm sending tasks that should be processed in time. In this regard, in this embodiment, a database table is used as a buffer for the alarm sending task. After the alarm sending task is created, it will be written to the database table. After waiting for a fixed time, all the alarm sending tasks to be sent will be pulled together and sent. Among them, the above-mentioned database table is the buffer list.

[0029] It can also be understood here that scheduled pulling does not affect the timely processing of massive alarm sending tasks. The timing can be adjusted to meet different scenario requirements. Of course, it is not limited to the scheduled pulling of alarm sending tasks for merging. For example, during alarm storms and stress testing, a strategy can be formulated to uniformly pull all alarm sending tasks for merging and sending when the database table is full. Without departing from the spirit of the present invention, modifications and embellishments made to the embodiments of the present invention by those skilled in the art still fall within the scope of the invention patent application of the present invention.

[0030] After a certain period of time, batch pull alarm sending tasks from the buffer list. The batch pull here can be pulling all alarm sending tasks at one time, or pulling a certain number of alarm sending tasks. Different response strategies are formulated according to different scenario requirements. For example, when the number of alarm sending tasks in the buffer list is large, they can be pulled in multiple batches. When the number of alarm sending tasks in the buffer list is small, they can be pulled at one time, and so on.

[0031] Further, the pulled alarm sending tasks are grouped according to their respective correlations, and each group is an alternative solution for merging the alarm sending tasks. Specifically, the data structure based on the above alarm sending tasks includes: rule identification, attribute label, status, recipient, and all are represented in the form of fields. Accordingly, different alarm sending tasks can be associated according to the attribute label of the alarm sending task, and since the attribute label is represented in the form of a field, they can be grouped according to whether the field of the attribute label is included. For example, an alarm sending task contains the field of attribute label A and the field of attribute label B, another alarm sending task contains the field of attribute label B and the field of attribute label C, and another alarm sending task contains the field of attribute label A, the field of attribute label B and the field of attribute label C, then the grouping strategy can be formulated as a group containing the field of attribute label A and the field of attribute label B, a group containing the field of attribute label B and the field of attribute label C, and a group containing the field of attribute label A and the field of attribute label C, and the three alarm sending tasks can be divided into different groups accordingly. It can be understood here that the same alarm sending task can be divided into different groups, so that the most suitable and most relevant merging solution can be found from multiple groups.

[0032] It should also be added that each grouping needs to at least contain fields corresponding to the recipient and the state. Since each alarm sending task corresponds to different states, such as the trigger state and the recovery state, and corresponds to different recipients. Therefore, when merging alarm sending tasks, at least it is necessary to consider that the group of alarm sending tasks are in the same state and sent to the same recipient. For example, although there are two alarm sending tasks that can be grouped together if grouped according to attribute tags, they cannot be merged and sent because they need to be sent to different recipients, or one is in the recovery state and the other is in the trigger state. They also cannot be merged and sent. Therefore, groups can be divided according to whether they contain fields with the same or multiple attribute tags, fields with the same state, and fields with the same recipient.

[0033] In this regard, a grouping strategy can be formulated in advance. For example, the first group includes at least the fields of the A attribute tag and the B attribute tag, as well as the fields of the trigger status and the X recipient. The second group includes at least the fields of the A attribute tag and the B attribute tag, as well as the fields of the trigger status and the Y recipient. The third group includes at least the fields of the A attribute tag and the B attribute tag, as well as the fields of the recovery status and the X recipient. The fourth group includes at least the fields of the A attribute tag and the B attribute tag, as well as the fields of the recovery status and the Y recipient, and so on. Accordingly, the alarm sending tasks that meet the conditions can be divided into corresponding groups.

[0034] When the grouping is completed, each group can be scored to find the merging solution with the highest correlation. In addition, since the grouping strategy has been pre-established, and the fields of the attribute labels corresponding to each group can be preset with corresponding weight scores in advance, for example, the field of the A attribute label is set to 4, the field of the B attribute label is set to 3, and the field of the C attribute label is set to 2, and then the total score can be calculated according to the number of alarm sending tasks in each group. It can be understood here that, according to the above-mentioned preset weight scores, if the fields of a group of corresponding attribute labels include A and B, then the score of an alarm sending task in the group is 7 points, and the total score of the group can be calculated according to the number of alarm sending tasks, for example, if the group includes 10 alarm sending tasks, it is 70 points, so that the scoring of each group can be completed. It can also be understood that the fields of recipients and status do not participate in the scoring, and correspondingly, only the scores of the fields of the preset attribute labels need to be preset.

[0035] Based on the scores of each group mentioned above, the group with the highest score is selected as the merge scheme with the highest correlation, so that all the alarm sending tasks in the group can be merged and sent. It should also be noted here that the merge scheme with the highest correlation mentioned above refers to the grouping of the same state and recipient. For example, the same trigger state and X recipients include multiple grouping schemes. After scoring each group, the merge scheme with the highest score is found. Therefore, after pulling multiple urgent sending tasks in batches from the buffer list, the final merge scheme can be one or more. The specific reason is that it is necessary to merge and send for the same state and recipient.

[0036] It should also be added that after the above grouping step, if the alarm sending task fails in grouping, it will be sent directly. In addition, since the alarm sending tasks are pulled in batches from the buffer list at a fixed time, depending on the preset time, a batch of alarm sending tasks may be pulled again when selecting the most relevant merging scheme or when performing the alarm sending task. Moreover, since the group with the highest correlation is selected for merging and sending, and other grouping schemes are directly discarded, although an alarm sending task can be divided into different groups, it may eventually fail to be merged and sent. In this regard, the sent alarm sending tasks can be marked to skip regrouping and rescoring of all unsent alarm sending tasks and newly pulled alarm sending tasks, so as to continue to screen out the most relevant merging schemes and merge and send them until all pulled alarm sending tasks are sent.

[0037] Based on the above steps, the alarm sending tasks are continuously pulled in batches from the buffer list and merged and sent, and the cycle is repeated until the buffer list is empty.

[0038] It should be noted that the step division of the above methods is only for clear description. When implemented, they can be combined into one step or some steps can be split and decomposed into multiple steps. As long as they contain the same logical relationship, they are all within the scope of protection of this patent; adding insignificant modifications to the algorithm or process or introducing insignificant designs without changing the core design of the algorithm and process are all within the scope of protection of this patent.

[0039] Example 2 See also Figure 3 As shown, this embodiment also provides a correlation-based alarm merging system, including: The data monitoring module 10 is used to obtain the alarm data generated when the alarm rule meets the triggering condition or the recovery condition.

[0040] The label expansion module 20 is used to perform drill-down analysis on the alarm data to expand its attribute labels, and generate one or more alarm sending tasks according to the alarm data and its attribute labels according to the recipients.

[0041] The task merging module 30 is used to temporarily store the generated alarm sending tasks in the task buffer list, and periodically pull the alarm sending tasks in batches from the task buffer list to merge and send them according to relevance until the task buffer list is empty.

[0042] It should be noted that the correlation-based alarm merging system provided in the above embodiment and the correlation-based alarm merging method provided in the above embodiment 1 belong to the same concept, wherein the specific manner in which each module and unit performs the operation has been described in detail in the method embodiment and will not be repeated here. In practical applications, the correlation-based alarm merging method provided in the above embodiment 1 can allocate the above functions to different functional modules as needed, that is, divide the internal structure of the device into different functional modules to complete all or part of the functions described above, and this is not limited here.

[0043] Example 3 See also Figure 4 As shown, an embodiment of the present application further provides an electronic device, comprising a memory 2, a processor 1, and a program stored in the memory and executable on the processor, wherein the processor implements the steps of any of the above methods when executing the program.

[0044] Among them, the memory includes at least one type of readable storage medium, and the readable storage medium includes flash memory, mobile hard disk, multimedia card, card-type memory (for example: SD or DX memory, etc.), magnetic memory, disk, optical disk, etc. In some embodiments, the memory can be an internal storage unit of the electronic device, such as a mobile hard disk of the electronic device. In other embodiments, the memory can also be an external storage device of the electronic device, such as a plug-in mobile hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the electronic device. Further, the memory can also include both an internal storage unit of the electronic device and an external storage device. The memory can not only be used to store application software and various types of data installed in the electronic device, but also can be used to temporarily store data that has been output or is to be output.

[0045] In some embodiments, the processor may be composed of an integrated circuit, for example, a single packaged integrated circuit, or a plurality of packaged integrated circuits with the same or different functions, including one or more central processing units (CPUs), microprocessors, digital processing chips, graphics processors, and a combination of various control chips. The processor is the control core (Control Unit) of the electronic device, which connects the various components of the entire electronic device using various interfaces and lines, and executes various functions of the electronic device and processes data by running or executing programs or modules stored in the memory, and calling data stored in the memory.

[0046] The processor executes the operating system of the electronic device and various installed application programs. The processor executes the application programs to implement the steps in the above method embodiment.

[0047] Exemplarily, the program may be divided into one or more modules, which are stored in the memory and executed by the processor to complete the present invention. The one or more modules may be a series of program instruction segments capable of completing specific functions, which are used to describe the execution process of the program in the electronic device.

[0048] The above-mentioned integrated unit implemented in the form of software function modules can be stored in a computer-readable storage medium. The above-mentioned software function modules are stored in a storage medium and include several instructions for enabling a computer device (which can be a personal computer, a computer device, or a network device, etc.) or a processor to perform part of the functions of various embodiments of the present invention.

[0049] In summary, the present invention provides an alarm merging method based on correlation, which can group different alarm sending tasks according to the same attribute labels they contain, and score the grouped alternative plans, so as to screen out the group with the highest correlation as the merging plan, and merge and send them accordingly, so as to reduce the work pressure of operation and maintenance personnel and avoid receiving a large number of alarm sending tasks that cannot be accurately processed.

[0050] The above embodiments are merely illustrative of the principles and effects of the present invention, and are not intended to limit the present invention. Anyone familiar with the technology may modify or change the above embodiments without violating the spirit and scope of the present invention. Therefore, all equivalent modifications or changes made by a person of ordinary skill in the art without departing from the spirit and technical ideas disclosed by the present invention shall still be covered by the claims of the present invention.

Claims

1. A correlation-based alarm merging method, characterized in that: include: Get the alarm data generated when the alarm rule meets the trigger condition or recovery condition; Drill down analysis is performed on the alarm data to expand its attribute tags, and one or more alarm sending tasks are generated according to the alarm data and its attribute tags according to the recipients; The generated alarm sending tasks are temporarily stored in the task buffer list, and the alarm sending tasks are periodically pulled in batches from the task buffer list, merged and sent according to relevance until the task buffer list is empty.

2. The method for merging alarms based on correlation according to claim 1, characterized in that: The steps of temporarily storing the generated alarm sending tasks in the task buffer list, and periodically pulling the alarm sending tasks in batches from the task buffer list to merge and send them according to the relevance until the task buffer list is empty include: Group the batch-pulled alarm sending tasks according to their relevance as an alternative to task merging; Each group of alarm sending tasks is scored, and the group with the highest score is selected as the most relevant solution, so as to merge all the alarm sending tasks in the group into one and send it to the corresponding recipient.

3. The method for merging alarms based on correlation according to claim 2, characterized in that: The steps of grouping the batch-pulled alarm sending tasks according to their relevance as an alternative to task merging include: For each alarm sending task, according to the multiple fields preset in each group, the alarm sending tasks containing all the fields in the group are divided into the group, so as to obtain multiple groups of alarm sending tasks, and each group of alarm sending tasks is used as an alternative solution for task merging; Among them, any alarm sending task can be divided into different groups at the same time, and each group of preset fields includes any one or more fields corresponding to attribute tags, so as to merge the alarm sending tasks according to the relevance of attribute tags; Each group of alarm sending tasks is at least in the same state and is sent to the same recipient.

4. The method for merging alarms based on correlation according to claim 2 or 3, characterized in that: The step of grouping the batch-pulled alarm sending tasks according to their relevance as an alternative to task merging also includes: Send the grouping failure alarm sending task directly to the corresponding recipient.

5. The method for merging alarms based on correlation according to claim 2, characterized in that: The steps of scoring each group of alarm sending tasks and selecting the group with the highest score as the most relevant solution to merge all the alarm sending tasks in the group into one and send it to the corresponding recipient include: The total score of each group is calculated based on the preset weight scores of different fields and the number of alarm sending tasks in each group; The group with the highest score is selected from multiple groups with the same status and recipients as the solution with the highest correlation, so as to merge all the alarm sending tasks in the group into one and send it to the corresponding recipients.

6. The method for merging alarms based on correlation according to claim 2 or 5, characterized in that: The step of scoring each group of alarm sending tasks and selecting the group with the highest score as the most relevant solution to merge all the alarm sending tasks in the group into one and send it to the corresponding recipient also includes: Mark the sent alarm sending tasks, skip them, regroup and score the unsent alarm sending tasks and the newly pulled alarm sending tasks, and continue to merge the alarm sending tasks for sending, until all the pulled alarm sending tasks are sent.

7. The method for merging alarms based on correlation according to claim 1, characterized in that: The data structure of the alarm sending task includes: rule identification, original attribute label, extended attribute label, status, recipient, and all are represented in the form of fields.

8. A correlation-based alarm merging system, characterized in that: include: Data monitoring module, used to obtain alarm data generated when the alarm rule meets the triggering condition or recovery condition; The label expansion module is used to perform drill-down analysis on the alarm data to expand its attribute labels, and generate one or more alarm sending tasks according to the recipients based on the alarm data and its attribute labels; The task merging module is used to temporarily store the generated alarm sending tasks in the task buffer list, and periodically pull the alarm sending tasks in batches from the task buffer list to merge and send them according to relevance until the task buffer list is empty.

9. An electronic device, characterized in that: The method comprises a processor, wherein the processor is coupled to a memory, wherein the memory stores program instructions, and when the program instructions stored in the memory are executed by the processor, the method according to any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium, characterized in that: The invention comprises a program, which, when being executed on a computer, causes the computer to execute the method according to any one of claims 1 to 7.

Images