Fault processing method and device

Abstract

The invention provides a fault processing method and device, and relates to the technical field of data processing.The method comprises the steps that a plurality of pieces of log key information are extracted from log data, and the log key information comprises alarm levels and log content; determining a fault keyword corresponding to the alarm level in each piece of log key information; multiple pieces of log key information with faults are determined from the multiple pieces of log key information, and the log content of each piece of log key information in the multiple pieces of log key information comprises fault keywords corresponding to the alarm level; grouping the plurality of pieces of log key information based on the target dimension to obtain at least one group of fault log information after grouping; and performing unified fault processing on each group of fault log information in the at least one group of fault log information. The method and the device are used for solving the problem of low efficiency of processing faults based on log data.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a fault handling method and device. Background Art

[0002] Log systems are often used for log collection, log storage, log query, report statistics and log visualization. Logs record relevant information about system problems, such as the cause of a failure, and can also monitor events that occur in the system. Therefore, users can use the log system to check the cause of a system failure and handle the failure accordingly.

[0003] At present, faced with massive terminals with distributed access, the number of logs is huge. Based on the commonly used log system, the speed of determining faults by querying logs is slow, and the efficiency of fault handling is very low. Therefore, how to improve the efficiency of fault handling is an urgent problem to be solved. Summary of the invention

[0004] In order to solve the problem that the efficiency of determining faults and handling faults through log queries is very low, the embodiments of the present application provide a fault handling method, device, vehicle-mounted terminal, computer-readable storage medium, and vehicle to improve the efficiency of determining faults and handling faults through log queries.

[0005] In a first aspect, an embodiment of the present application provides a fault handling method, including:

[0006] Extracting some key log information from the log data, wherein the key log information includes: an alarm level and log content;

[0007] Determine the fault keyword corresponding to the alarm level in each piece of key log information;

[0008] Determine, from the plurality of key log information, a plurality of key log information having faults, wherein the log content of each of the plurality of key log information includes a fault keyword corresponding to the alarm level;

[0009] The multiple log key information are grouped based on the target dimension to obtain at least one group of fault log information after grouping

[0010] For each set of fault log information in the at least one set of fault log information, fault processing is performed uniformly.

[0011] As an optional implementation of the embodiment of the present application, the target dimension includes: one of: error location, content similarity, and fault template;

[0012] The grouping of the plurality of key log information based on the target dimension to obtain at least one group of grouped fault log information includes:

[0013] Grouping the plurality of key log information based on the error reporting position to obtain at least one group of fault log information after grouping; or,

[0014] Grouping the plurality of key log information based on the content similarity to obtain at least one group of fault log information after grouping; or,

[0015] The multiple pieces of key log information are grouped based on the fault template to obtain at least one group of grouped fault log information.

[0016] As an optional implementation of the embodiment of the present application, the key log information also includes a file name and / or a line number, and the target dimension is an error location;

[0017] The grouping of the plurality of key log information based on the error reporting position to obtain at least one group of fault log information after grouping includes:

[0018] The key log information with the same file name and / or line number among the multiple key log information are determined as a group of fault log information with the same error reporting position, so as to obtain the at least one group of fault log information.

[0019] As an optional implementation of the embodiment of the present application, the target dimension is a fault template;

[0020] The grouping of the plurality of key log information based on the fault template to obtain at least one group of grouped fault log information includes:

[0021] Reversely identifying the log printing templates of the multiple log key information to obtain multiple log printing templates corresponding to the multiple log key information;

[0022] The multiple log printing templates are matched with different fault templates, and the key log information corresponding to the log printing templates matching the same fault template among the multiple log printing templates is determined as a group of fault log information to obtain the at least one group of fault log information.

[0023] As an optional implementation of the embodiment of the present application, the target dimension is content similarity;

[0024] The grouping of the plurality of key log information based on the content similarity to obtain at least one group of fault log information after grouping includes:

[0025] Segmenting the multiple log key information to obtain multiple groups of segmentation results corresponding to the multiple log key information;

[0026] The multiple groups of word-segmenting results are clustered according to content similarity, so as to cluster the multiple log key information into the at least one group of fault log information.

[0027] As an optional implementation of the embodiment of the present application, the fault template includes fixed information and change information, the fixed information is used to indicate the fault category to which the fault in the fault template belongs, and the change information is used to indicate the service parameter corresponding to the fault;

[0028] The matching of the multiple log printing templates with different fault templates, and determining the log key information corresponding to the log printing templates matching the same fault template among the multiple log printing templates as a group of fault log information to obtain the at least one group of fault log information, includes:

[0029] The fixed information of the multiple log printing templates is matched with the fixed information of different fault templates, and the log key information corresponding to the fixed information in the multiple log printing templates and the fixed information in the same fault template is determined as a group of fault log information to obtain at least one group of fault log information.

[0030] As an optional implementation of the embodiment of the present application, the unified fault processing for each group of fault log information in the at least one group of fault log information includes:

[0031] For each set of fault log information in the at least one set of fault log information, at least one of the following processes is performed:

[0032] Performing fault information statistics on each group of fault log information;

[0033] Tracking the fault handling process corresponding to each set of fault log information;

[0034] An alarm message is uniformly pushed for each group of fault log information.

[0035] As an optional implementation of the embodiment of the present application, performing fault information statistics on each group of fault log information includes:

[0036] Counting the fault types included in each group of fault log information;

[0037] Counting the occurrence frequency of each fault type in each group of fault log information;

[0038] The impact surface parameter of each fault type in each group of fault log information is counted, and the impact surface parameter is positively correlated with the number of terminals affected by each fault type and the occurrence frequency of each fault type.

[0039] As an optional implementation of the embodiment of the present application, before uniformly pushing an alarm message for each group of fault log information, the method further includes:

[0040] Determine the processing priority of different fault types according to the occurrence frequency and impact surface parameters corresponding to different fault types in each group of fault log information;

[0041] The alarm message includes the processing priorities of the different fault types.

[0042] In a second aspect, an embodiment of the present application provides a fault handling device, comprising:

[0043] The identification module is used to extract some key log information from the log data, wherein the key log information includes: the alarm level and the log content;

[0044] A parsing module, used to determine the fault keyword corresponding to the alarm level in each of the key log information;

[0045] A determination module, used to determine, from the plurality of log key information, a plurality of log key information having faults, wherein the log content of each of the plurality of log key information includes a fault keyword corresponding to the alarm level;

[0046] A grouping module, used for grouping the plurality of key log information based on a target dimension to obtain at least one group of fault log information after grouping;

[0047] The processing module is used to uniformly process the faults of each group of fault log information in the at least one group of fault log information.

[0048] As an optional implementation of the embodiment of the present application, the target dimension includes: one of: error location, content similarity, and fault template;

[0049] The grouping module is specifically used to group the multiple key log information based on the error reporting position to obtain at least one group of fault log information after grouping; or

[0050] Grouping the plurality of key log information based on the content similarity to obtain at least one group of fault log information after grouping; or,

[0051] The multiple pieces of key log information are grouped based on the fault template to obtain at least one group of grouped fault log information.

[0052] As an optional implementation of the embodiment of the present application, the key log information also includes a file name and / or a line number, and the target dimension is an error location;

[0053] The grouping module is specifically used to determine the log key information with the same file name and / or line number in the multiple log key information as a group of fault log information with the same error reporting position, so as to obtain the at least one group of fault log information.

[0054] As an optional implementation of the embodiment of the present application, the target dimension is a fault template;

[0055] The grouping module is specifically used to reversely identify the log printing templates of the multiple log key information to obtain multiple log printing templates corresponding to the multiple log key information;

[0056] The multiple log printing templates are matched with different fault templates, and the key log information corresponding to the log printing templates matching the same fault template among the multiple log printing templates is determined as a group of fault log information to obtain the at least one group of fault log information.

[0057] As an optional implementation of the embodiment of the present application, the target dimension is content similarity;

[0058] The grouping module is specifically used to segment the multiple log key information to obtain multiple groups of segmentation results corresponding to the multiple log key information;

[0059] The multiple groups of word-segmenting results are clustered according to content similarity, so as to cluster the multiple log key information into the at least one group of fault log information.

[0060] As an optional implementation of the embodiment of the present application, the fault template includes fixed information and change information, the fixed information is used to indicate the fault category to which the fault in the fault template belongs, and the change information is used to indicate the service parameter corresponding to the fault;

[0061] The grouping module is specifically used to match the fixed information of the multiple log printing templates with the fixed information of different fault templates, and determine the log key information corresponding to the fixed information in the multiple log printing templates and the fixed information in the same fault template as a group of fault log information to obtain at least one group of fault log information.

[0062] As an optional implementation of the embodiment of the present application, the processing module is specifically configured to perform at least one of the following processing on each group of fault log information in the at least one group of fault log information:

[0063] Performing fault information statistics on each group of fault log information;

[0064] Tracking the fault handling process corresponding to each set of fault log information;

[0065] An alarm message is uniformly pushed for each group of fault log information.

[0066] As an optional implementation of the embodiment of the present application, the processing module is specifically used to count the fault types included in each group of fault log information;

[0067] Counting the occurrence frequency of each fault type in each group of fault log information;

[0068] The impact surface parameter of each fault type in each group of fault log information is counted, and the impact surface parameter is positively correlated with the number of terminals affected by each fault type and the occurrence frequency of each fault type.

[0069] As an optional implementation of the embodiment of the present application, the processing module is further used to determine the processing priority of different fault types according to the occurrence frequency and impact surface parameters corresponding to different fault types in each group of fault log information;

[0070] The alarm message includes the processing priorities of the different fault types.

[0071] In the third aspect, an embodiment of the present application provides a vehicle-mounted terminal, comprising: a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein when the computer program is executed by the processor, the fault handling method described in the first aspect or any optional implementation manner of the first aspect is executed.

[0072] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the fault handling method described in the first aspect or any optional implementation manner of the first aspect is implemented.

[0073] Compared with the prior art, the technical solution provided by the embodiments of the present application has the following advantages:

[0074] Extract several key log information from log data, wherein the key log information includes: alarm level and log content; determine the fault keyword corresponding to the alarm level in each of the key log information; from the several key log information, determine multiple key log information with faults, wherein the log content of each of the multiple key log information includes the fault keyword corresponding to the alarm level; group the multiple key log information based on the target dimension to obtain at least one group of fault log information after grouping; uniformly perform fault processing on each group of fault log information in the at least one group of fault log information. The fault processing method provided in the embodiment of the present application first groups multiple key log information based on the target dimension to obtain at least one group of fault log information after grouping, so that at least one group of fault log information can be processed simultaneously, instead of processing each fault log information one by one, which can improve the fault processing efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0075] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0076] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0077] Figure 1 A flowchart of a fault handling method provided according to one or more embodiments of the present application;

[0078] Figure 2 A flowchart of a fault handling method provided according to one or more embodiments of the present application;

[0079] Figure 3 A flowchart of a fault handling method provided according to one or more embodiments of the present application;

[0080] Figure 4 A structural block diagram of a fault handling device provided in one or more embodiments of the present application;

[0081] Figure 5 The internal structure diagram of the vehicle terminal provided according to one or more embodiments of the present application. DETAILED DESCRIPTION

[0082] In order to make the purpose, implementation mode and advantages of the present application clearer, the exemplary implementation mode of the present application will be clearly and completely described below in conjunction with the drawings in the exemplary embodiments of the present application. Obviously, the described exemplary embodiments are only part of the embodiments of the present application, rather than all the embodiments.

[0083] Based on the exemplary embodiments described in this application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the claims attached to this application. In addition, although the disclosure in this application is introduced according to one or several exemplary examples, it should be understood that each aspect of these disclosures can also constitute a complete implementation method separately. It should be noted that the brief description of the terms in this application is only for the convenience of understanding the implementation methods described below, and is not intended to limit the implementation methods of this application. Unless otherwise specified, these terms should be understood according to their common and usual meanings.

[0084] At present, commonly used log systems are faced with massive terminals with distributed access, and the number of logs is huge. The speed of determining faults by querying logs is slow, and the efficiency of handling faults is very low. Based on this, the embodiments of the present application provide a fault handling method and device for improving the efficiency of handling faults. The fault handling method provided by the embodiments of the present application can be executed by the vehicle-mounted terminal provided by the embodiments of the present application. The vehicle-mounted terminal provided by the embodiments of the present application can be but is not limited to a vehicle-mounted terminal (such as a vehicle-mounted computer), a vehicle-mounted infotainment product, and the like.

[0085] The fault handling method provided in this application will be described and elaborated through specific exemplary embodiments below.

[0086] Figure 1 The flowchart of the fault handling method provided in the embodiment of the present application is shown in FIG. Figure 1 As shown, the fault handling method provided in this embodiment includes the following steps:

[0087] S101. Extract some key log information from log data.

[0088] The key log information includes: alarm level and log content.

[0089] In some embodiments, the log key information also includes the file name and / or line number.

[0090] In some embodiments, the key log information also includes a timestamp, a service name, a source file name, etc.

[0091] Exemplarily, the log data is parsed through string operations and regular matching to obtain a log record list corresponding to the log data, wherein the log record list may include log content, timestamp, file name, line number, alarm level, service name, source file name, etc., and some log key information may be extracted from the parsed log record list, where the line number refers to the code line number. This embodiment only illustrates the extracted log key information and does not limit the quantity and category of the extracted log key information.

[0092] S102: Determine a fault keyword corresponding to the alarm level in each piece of key log information.

[0093] Exemplarily, each log key information includes the alarm level corresponding to the log key information, and each log key information is identified to determine the fault keyword corresponding to the alarm level. After determining the fault keyword corresponding to the alarm level, the log key information with faults can be determined from the plurality of log key information according to the fault keyword. Exemplarily, the log key information including the fault keyword is determined as the log key information with faults.

[0094] S103: Determine, from the plurality of log key information, a plurality of log key information having faults.

[0095] The log content of each of the multiple pieces of key log information includes a fault keyword corresponding to the alarm level.

[0096] Different alarm levels may correspond to different fault keywords. For example, it is queried whether there is a fault keyword corresponding to the alarm level in the plurality of log key information. If so, the log key information is determined as the log key information with a fault.

[0097] S104: Group the multiple pieces of key log information based on a target dimension to obtain at least one group of grouped fault log information.

[0098] The target dimension may include: one of error location, content similarity, and fault template.

[0099] Exemplarily, when the target dimension includes an error location, the plurality of key log information may be grouped based on the error location to obtain at least one group of fault log information after grouping.

[0100] Alternatively, when the target dimension includes content similarity, the plurality of key log information may be grouped based on the content similarity to obtain at least one group of grouped fault log information.

[0101] Alternatively, when the target dimension includes a fault template, the plurality of key log information may be grouped based on the fault template to obtain at least one group of grouped fault log information.

[0102] That is, the multiple log key information can be grouped based on the error position, and at least one group of fault log information can be obtained after grouping. Exemplarily, among the multiple log key information, if the file names in at least two log key information are the same, then the error positions of the at least two log key information are determined to be the same; or, among the multiple log key information, if the line numbers in at least two log key information are the same, then the error positions of the at least two log key information are determined to be the same; or, among the multiple log key information, if the file names and line numbers in at least two log key information are the same, then the error positions of the at least two log key information are determined to be the same.

[0103] Alternatively, the multiple log key information are grouped based on content similarity to obtain at least one group of fault log information. Exemplarily, the multiple log key information are normalized, and then the normalized multiple log key information are input into a machine learning model, and grouped by pattern matching and cluster analysis methods to obtain at least one group of fault log information.

[0104] Alternatively, the multiple log key information are grouped based on the fault template to obtain at least one group of fault log information. Exemplarily, the fault template is a fault template in a fault template library, and the log printing template corresponding to each of the multiple log key information is matched with the fault template in the fault template library, and the log key information corresponding to the log printing templates that match the same fault template are grouped into one group of fault log information.

[0105] S105: Perform unified fault processing on each set of fault log information in the at least one set of fault log information.

[0106] In at least one group of fault log information obtained after grouping multiple log key information, the log key information in each group of fault log information is the log key information of the same business fault, so that fault processing can be performed in a unified manner. Compared with identifying each fault log information and then processing the fault, the processing efficiency can be improved.

[0107] The fault handling method provided by the embodiment of the present application includes: extracting several log key information from log data, wherein the log key information includes: alarm level and log content; determining the fault keyword corresponding to the alarm level in each of the log key information; from the several log key information, determining multiple log key information with faults, wherein the log content of each of the multiple log key information includes the fault keyword corresponding to the alarm level; grouping the multiple log key information based on the target dimension to obtain at least one group of grouped fault log information; the target dimension includes: one of the error reporting position, content similarity, and fault template; uniformly handling the fault for each group of fault log information in the at least one group of fault log information. Since the target dimension includes one of the error reporting position, content similarity, and fault template, after the multiple log key information extracted are grouped according to the target dimension, the fault log information in each group of fault log information obtained is the fault log information corresponding to the same business fault, so each business fault can be uniformly handled, avoiding the problem of low fault handling efficiency caused by a large amount of log data in the log system and the presence of multiple duplicate log data.

[0108] In the three cases where the target dimension includes the error location, the target dimension includes the error location content similarity, and the target dimension includes the error location fault template, step S104, grouping the multiple log key information based on the target dimension to obtain at least one group of grouped fault log information can be implemented in different ways, for example, refer to Figure 2 As shown, Figure 2 A flowchart of a fault handling method provided in another embodiment of the present application is shown in Figure 1 Based on the embodiment shown, step S104 can be implemented by the following step S211, or steps S231 to S232, or steps S205 to S206. Figure 1 The same or similar steps in the embodiments shown are specifically described and illustrated. For details, please refer to Figure 1 The embodiments shown are illustrated and described.

[0109] The key log information also includes a file name and / or a line number. When the target dimension is an error location, step S104, grouping the multiple key log information based on the target dimension to obtain at least one group of grouped fault log information can be implemented by the following step S211:

[0110] S211. Determine the key log information with the same file name and / or line number among the multiple key log information as a group of fault log information with the same error reporting position, so as to obtain the at least one group of fault log information.

[0111] That is, the log key information with the same file name among the multiple log key information is determined as a group of fault log information with the same error reporting position; or, the log key information with the same line number among the multiple log key information is determined as a group of fault log information with the same error reporting position; or, the log key information with the same file name and line number among the multiple log key information is determined as a group of fault log information with the same error reporting position.

[0112] Exemplarily, first determine the file name of each of the multiple log key information, and determine the log key information with the same file name as a group of fault log information with the same error reporting position; or, determine the line number of each of the multiple log key information, and determine the log key information with the same line number as a group of fault log information with the same error reporting position; or, determine the file name and line number of each of the multiple log key information, and determine the log key information with the same file name and line number as a group of fault log information with the same error reporting position.

[0113] When the target dimension is a fault template, step S104, grouping the multiple log key information based on the target dimension to obtain at least one group of grouped fault log information can be achieved through the following steps S221 to S222.

[0114] S221. Reversely identify the log printing templates of the multiple pieces of key log information to obtain multiple log printing templates corresponding to the multiple pieces of key log information.

[0115] The multiple log printing templates corresponding to the multiple log key information are in a one-to-one relationship, that is, each log key information corresponds to a log printing template.

[0116] Exemplarily, a log printing template is a template used for printing logs, and the log printing template includes fixed information and variable information. For example, the log printing template may be "set value to sdc failed: xx, rsp: xxx". In the log printing template, "set value to sdc failed" is fixed information, and "xx, rsp: xxx" is variable information, and the variable information can be replaced by text. The log printing template is reversely identified, that is, the variable information in the log printing template is first determined, and the variable information is replaced with text to obtain a new log printing template. The engineering source code corresponding to the log data is analyzed to extract the fault code, and the statement is printed according to the new log printing template to obtain multiple log printing templates, and the variable information in the multiple log printing templates is the same.

[0117] S222, matching the multiple log printing templates with different fault templates, determining the log key information corresponding to the log printing templates matching the same fault template among the multiple log printing templates as a group of fault log information, so as to obtain the at least one group of fault log information.

[0118] The fault template includes fixed information and variable information. The fixed information included in the fault template is used to indicate the fault category to which the fault belongs, and the variable information can represent specific business parameters, etc. When multiple log printing templates are matched with different fault templates, they only need to match the fixed information.

[0119] Exemplarily, fixed information of multiple log printing templates is matched with fixed information of different fault templates, and key log information corresponding to the fixed information in multiple log printing templates and the fixed information in the same fault template is determined as a group of fault log information.

[0120] As another achievable manner, the multiple log printing templates are matched, and the key log information corresponding to the log printing templates with the same fixed information in the multiple log printing templates is determined as a group of fault log information.

[0121] When the target dimension is content similarity, step S104, grouping the plurality of log key information based on the target dimension to obtain at least one group of grouped fault log information can be implemented by following the steps S231 to S232.

[0122] S231 , segment the multiple log key information to obtain multiple groups of segmentation results corresponding to the multiple log key information.

[0123] The multiple log key information and the multiple groups of word segmentation results are in a one-to-one correspondence, that is, one log key information corresponds to one group of word segmentation results. Exemplarily, for each log key information, the log content in the log key information is word segmented according to the part of speech to obtain a corresponding group of word segmentation results.

[0124] S232: Clustering the multiple groups of word grouping results according to content similarity, so as to cluster the multiple log key information into the at least one group of fault log information.

[0125] Exemplarily, multiple groups of word-division results are compared to determine content similarity between the multiple groups of word-division results, and at least two log key information corresponding to at least two groups of word-division results having content similarity greater than a threshold similarity are clustered into the at least one group of fault log information.

[0126] The embodiment of the present application can group multiple key log information based on a variety of different methods to obtain at least one group of fault log information after grouping, so that the at least one group of fault log information can be uniformly processed to improve processing efficiency.

[0127] Figure 3 A flowchart of a fault handling method provided in another embodiment of the present application is provided, for example, with reference to Figure 3 As shown, in Figure 1 On the basis of the illustrated embodiment, step S105, uniformly performing fault processing on each set of fault log information in the at least one set of fault log information, includes the following steps S301 to S303.

[0128] S301. Perform fault information statistics on each group of fault log information.

[0129] Exemplarily, performing fault information statistics on each group of fault log information may include: counting the fault types included in each group of fault log information; counting the occurrence frequency of each fault type in each group of fault log information; and counting the impact surface parameters of each fault type in each group of fault log information.

[0130] Among them, the impact surface parameter is a parameter used to indicate the degree of impact caused by the fault, and the impact surface parameter is positively correlated with the number of terminals affected by each fault type and the frequency of occurrence of each fault type, that is, the more terminals affected by each fault type and the more frequent the occurrence of each fault type, the larger the impact surface parameter.

[0131] S302: Track the fault handling process corresponding to each set of fault log information.

[0132] S303: uniformly push an alarm message for each group of fault log information.

[0133] Pushing warning messages uniformly for each set of fault log information can promptly notify R&D personnel and improve follow-up efficiency.

[0134] Exemplarily, before uniformly pushing an alarm message for each group of fault log information, if the occurrence frequency of each fault type in each group of fault log information and the impact surface parameters of each fault type in each group of fault log information are obtained by statistics, the processing priority of different fault types can be determined according to the occurrence frequency and impact surface parameters corresponding to different fault types in each group of fault log information, so that the alarm message includes the processing priority of the different fault types.

[0135] There is no particular order in which steps S301 , S302 , and S303 are executed. This embodiment only lists one possible execution order, but does not constitute any limitation.

[0136] When the alarm message includes the processing priority of the fault type, the fault handling personnel can quickly determine the faults that need to be handled with priority, thereby improving the handling efficiency.

[0137] Based on the same inventive concept, as an implementation of the above method, the embodiment of the present application also provides a fault handling device for executing the above embodiment. The device embodiment corresponds to the above method embodiment. For ease of reading, the device embodiment will no longer repeat the details of the above method embodiment one by one, but it should be clear that the fault handling device in this embodiment can correspond to all the contents of the above method embodiment.

[0138] Figure 4 A schematic diagram of a fault handling device provided in one embodiment of the present application is shown in FIG. Figure 5 As shown, the fault handling device 400 provided in this embodiment includes:

[0139] The identification module 410 is used to extract some key log information from the log data, wherein the key log information includes: an alarm level and log content;

[0140] The parsing module 420 is used to determine the fault keyword corresponding to the alarm level in each of the key log information;

[0141] The determination module 430 is used to determine, from the plurality of log key information, a plurality of log key information having faults, wherein the log content of each of the plurality of log key information includes a fault keyword corresponding to the alarm level;

[0142] A grouping module 440 is used to group the multiple key log information based on the target dimension to obtain at least one group of fault log information after grouping;

[0143] The processing module 450 is used to uniformly process the faults of each group of fault log information in the at least one group of fault log information.

[0144] As an optional implementation of the embodiment of the present application, the target dimension includes: one of: error location, content similarity, and fault template;

[0145] The grouping module 440 is specifically used to group the multiple log key information based on the error location to obtain at least one group of fault log information after grouping; or, group the multiple log key information based on the content similarity to obtain at least one group of fault log information after grouping; or, group the multiple log key information based on the fault template to obtain at least one group of fault log information after grouping.

[0146] As an optional implementation of the embodiment of the present application, the key log information also includes a file name and / or a line number, and the target dimension is an error location;

[0147] The grouping module 440 is specifically used to determine the log key information with the same file name and / or line number in the multiple log key information as a group of fault log information with the same error reporting position, so as to obtain the at least one group of fault log information.

[0148] As an optional implementation of the embodiment of the present application, the target dimension is a fault template;

[0149] The grouping module 440 is specifically used to reversely identify the log printing templates of the multiple log key information to obtain multiple log printing templates corresponding to the multiple log key information; and match the multiple log printing templates with different fault templates, and determine the log key information corresponding to the log printing templates in the multiple log printing templates that match the same fault template as a group of fault log information to obtain the at least one group of fault log information.

[0150] As an optional implementation of the embodiment of the present application, the target dimension is content similarity;

[0151] The grouping module 440 is specifically used to segment the multiple log key information to obtain multiple groups of segmentation results corresponding to the multiple log key information; the multiple groups of segmentation results are clustered according to content similarity to cluster the multiple log key information into the at least one group of fault log information.

[0152] As an optional implementation of the embodiment of the present application, the fault template includes fixed information and change information, the fixed information is used to indicate the fault category to which the fault in the fault template belongs, and the change information is used to indicate the service parameter corresponding to the fault;

[0153] The grouping module 440 is specifically used to match the fixed information of the multiple log printing templates with the fixed information of different fault templates, and determine the log key information corresponding to the fixed information in the multiple log printing templates and the fixed information in the same fault template as a group of fault log information, so as to obtain at least one group of fault log information.

[0154] As an optional implementation of the embodiment of the present application, the processing module 450 is specifically configured to perform at least one of the following processing on each set of fault log information in the at least one set of fault log information:

[0155] Performing fault information statistics on each group of fault log information;

[0156] Tracking the fault handling process corresponding to each set of fault log information;

[0157] An alarm message is uniformly pushed for each group of fault log information.

[0158] As an optional implementation of the embodiment of the present application, the processing module 450 is specifically used to count the fault types included in each group of fault log information;

[0159] Counting the occurrence frequency of each fault type in each group of fault log information;

[0160] The impact surface parameter of each fault type in each group of fault log information is counted, and the impact surface parameter is positively correlated with the number of terminals affected by each fault type and the occurrence frequency of each fault type.

[0161] As an optional implementation of the embodiment of the present application, the processing module 450 is also used to determine the processing priority of different fault types based on the occurrence frequency and impact surface parameters corresponding to the different fault types in each group of fault log information; the alarm message includes the processing priority of the different fault types.

[0162] In one embodiment, an electronic device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of any one of the fault handling methods described in the above method embodiments when executing the computer program.

[0163] For example, Figure 5 This is a schematic diagram of the structure of the vehicle terminal provided in the embodiment of the present application. Figure 5 As shown, the vehicle terminal provided in this embodiment includes: a memory 51 and a processor 52, the memory 51 is used to store computer programs; the processor 52 is used to execute the steps of the fault handling method provided in the above method embodiment when calling the computer program, and its implementation principle and technical effect are similar, which will not be repeated here. Those skilled in the art can understand that Figure 5 The structure shown in the figure is only a block diagram of a part of the structure related to the scheme of the present application, and does not constitute a limitation on the vehicle-mounted terminal to which the scheme of the present application is applied. The specific vehicle-mounted terminal may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0164] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of any one of the fault handling methods described in the above method embodiments are implemented.

[0165] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory may include read-only memory (ROM), magnetic tape, floppy disk, flash memory or optical memory, etc. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in various forms, such as static random access memory (SRAM) and dynamic random access memory (DRAM).

[0166] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0167] For the convenience of explanation, the above description has been made in conjunction with specific embodiments. However, the above discussion in some embodiments is not intended to be exhaustive or limit the embodiments to the specific forms disclosed above. According to the above teachings, various modifications and variations can be obtained. The selection and description of the above embodiments are to better explain the principles and practical applications, so that those skilled in the art can better use the embodiments and various different variations of the embodiments suitable for specific use considerations.

Claims

1. A fault handling method, characterized in that: include: Extracting some key log information from the log data, wherein the key log information includes: an alarm level and log content; Determine the fault keyword corresponding to the alarm level in each piece of key log information; Determine, from the plurality of key log information, a plurality of key log information having faults, wherein the log content of each of the plurality of key log information includes a fault keyword corresponding to the alarm level; Grouping the multiple pieces of key log information based on a target dimension to obtain at least one group of fault log information after grouping; For each set of fault log information in the at least one set of fault log information, fault processing is performed uniformly.

2. The method according to claim 1, characterized in that The target dimension includes: one of: error location, content similarity, and fault template; The grouping of the plurality of key log information based on the target dimension to obtain at least one group of grouped fault log information includes: Grouping the plurality of key log information based on the error reporting position to obtain at least one group of fault log information after grouping; or, Grouping the plurality of key log information based on the content similarity to obtain at least one group of fault log information after grouping; or, The multiple pieces of key log information are grouped based on the fault template to obtain at least one group of grouped fault log information.

3. The method according to claim 2, characterized in that The key log information also includes the file name and / or line number; the target dimension is the error location; The grouping of the plurality of key log information based on the error reporting position to obtain at least one group of fault log information after grouping includes: The key log information with the same file name and / or line number among the multiple key log information are determined as a group of fault log information with the same error reporting position, so as to obtain the at least one group of fault log information.

4. The method according to claim 2, characterized in that: The target dimension is a fault template; The grouping of the plurality of key log information based on the fault template to obtain at least one group of grouped fault log information includes: Reversely identifying the log printing templates of the multiple log key information to obtain multiple log printing templates corresponding to the multiple log key information; The multiple log printing templates are matched with different fault templates, and the key log information corresponding to the log printing templates matching the same fault template among the multiple log printing templates is determined as a group of fault log information to obtain the at least one group of fault log information.

5. The method according to claim 2, characterized in that: The target dimension is content similarity; The grouping of the plurality of key log information based on the content similarity to obtain at least one group of fault log information after grouping includes: Segmenting the multiple log key information to obtain multiple groups of segmentation results corresponding to the multiple log key information; The multiple groups of word-segmenting results are clustered according to content similarity, so as to cluster the multiple log key information into the at least one group of fault log information.

6. The method according to claim 4, characterized in that The fault template includes fixed information and variable information, the fixed information is used to indicate the fault category to which the fault in the fault template belongs, and the variable information is used to indicate the service parameter corresponding to the fault; The matching of the multiple log printing templates with different fault templates, and determining the log key information corresponding to the log printing templates matching the same fault template among the multiple log printing templates as a group of fault log information to obtain the at least one group of fault log information, includes: The fixed information of the multiple log printing templates is matched with the fixed information of different fault templates, and the log key information corresponding to the fixed information in the multiple log printing templates and the fixed information in the same fault template is determined as a group of fault log information to obtain at least one group of fault log information.

7. The method according to claim 1, characterized in that The step of uniformly processing the faults of each group of fault log information in the at least one group of fault log information includes: For each set of fault log information in the at least one set of fault log information, at least one of the following processes is performed: Performing fault information statistics on each group of fault log information; Tracking the fault handling process corresponding to each set of fault log information; An alarm message is uniformly pushed for each group of fault log information.

8. The method according to claim 7, characterized in that Performing fault information statistics on each group of fault log information includes: Counting the fault types included in each group of fault log information; Counting the occurrence frequency of each fault type in each group of fault log information; The impact surface parameter of each fault type in each group of fault log information is counted, and the impact surface parameter is positively correlated with the number of terminals affected by each fault type and the occurrence frequency of each fault type.

9. The method according to claim 8, characterized in that Before uniformly pushing an alarm message to each group of fault log information, the method further includes: Determine the processing priority of different fault types according to the occurrence frequency and impact surface parameters corresponding to different fault types in each group of fault log information; The alarm message includes the processing priorities of the different fault types.

10. A fault handling device, characterized in that: include: The identification module is used to extract some key log information from the log data, wherein the key log information includes: the alarm level and the log content; A parsing module, used to determine the fault keyword corresponding to the alarm level in each of the key log information; A determination module, used to determine, from the plurality of log key information, a plurality of log key information having faults, wherein the log content of each of the plurality of log key information includes a fault keyword corresponding to the alarm level; A grouping module, used for grouping the plurality of key log information based on a target dimension to obtain at least one group of fault log information after grouping; The processing module is used to uniformly process the faults of each group of fault log information in the at least one group of fault log information.

11. A vehicle-mounted terminal, characterized in that: include: A processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the fault handling method according to any one of claims 1 to 9.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the fault handling method according to any one of claims 1 to 9 is implemented.

13. A vehicle, characterized in that: include: The vehicle is equipped with the fault handling device according to claim 10 or the on-board terminal according to claim 11 or the computer-readable storage medium according to claim 12.

Images