Visual analysis method and device for custom WEB application and electronic equipment

Abstract

The invention relates to a visual analysis method and device for a custom WEB application and electronic equipment, and belongs to the technical field of computers, and the method comprises the steps: extracting URL information in a flow message when the protocol type of the flow message in a session flow is identified as an HTTP protocol; matching the URL information based on the strategy configuration information; analyzing the traffic message when the matching is successful, and obtaining key index data of the to-be-monitored WEB application; and based on the index evaluation information, carrying out visual analysis on the key index data. According to the visual analysis method for the custom WEB application provided by the invention, the performance of the WEB application can be monitored in real time, so that related operation and maintenance personnel can perform comprehensive monitoring according to various visual dimensions such as time and URL (Uniform Resource Locator), and the enterprise operation and maintenance personnel are helped to master the performance bottleneck of WEB service provision in real time and can quickly respond and troubleshoot when abnormal faults occur.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a visualization analysis method, device and electronic equipment for custom WEB applications. Background Art

[0002] The current network traffic is increasing day by day, and web applications account for a large proportion of network traffic, which is carried on the TCP protocol. The web application services provided by enterprises face a large number of TCP connections and HTTP protocol requests every second. Among these huge access requests, how many web application requests are successful, how many are failed, and how long is the web page response time? These information are generally not presented intuitively.

[0003] On the one hand, in different networking environments, the response and transmission indicators of corresponding WEB applications often have different judgment signs. For example, in some networking scenarios, the server response time is required to be less than 10ms, which is considered a good response. In other networking scenarios, the server response time is required to be less than 20ms, which is considered a good response. This solution allows users to customize performance indicators very flexibly.

[0004] On the other hand, if the WEB service page cannot be opened or the response times out, it is difficult for operation and maintenance personnel to discover and handle it immediately. They usually only know that there is a problem through indirect feedback from the client. In addition, there are usually many subdomains or URL links under a web domain name, and it is impossible to comprehensively monitor each URL. Summary of the invention

[0005] In view of this, it is necessary to provide a method, device and electronic device for visual analysis of a custom WEB application, so as to achieve the purpose of real-time monitoring of the performance of the WEB application.

[0006] In order to achieve the above object, the present invention provides a visual analysis method for a custom WEB application, comprising: When the protocol type of the traffic message in the session flow is identified as the HTTP protocol, extracting URL information in the traffic message; Matching the URL information based on the policy configuration information; the policy configuration information includes URL configuration information, four-tuple information and indicator evaluation information; When the match is successful, the traffic message is parsed to obtain key indicator data of the web application to be monitored; the web application to be monitored is determined based on the URL configuration information and the four-tuple information; Based on the indicator evaluation information, the key indicator data is visualized and analyzed.

[0007] In a possible implementation, when the protocol type of the traffic message in the session flow is identified as the HTTP protocol, before extracting the URL information in the traffic message, the method further includes: Obtain traffic packets in the network through the network card; The flow is processed by constructing a flow for the traffic message in the network based on the five-tuple information to obtain the session flow.

[0008] In a possible implementation, matching the URL information based on the policy configuration information includes: Comparing the URL configuration information with the URL information; When the URL configuration information contains the URL information, the match is successful.

[0009] In a possible implementation, the performing a visual analysis on the key indicator data based on the indicator evaluation information includes: Analyze the key indicator data based on the indicator evaluation information to determine the analysis result; The analysis result is saved in a storage directory corresponding to the physical link; different physical links correspond to different storage directories; Scan the files in the storage directory in real time, call the parsing program to parse the files, and write the parsed data into the database table; Query the data table corresponding to the web application to be monitored in the database table through the query interface; In one possible implementation, the data tables corresponding to the web applications to be monitored are aggregated and displayed, including: The data table is aggregated and displayed in the form of a chart, a graph or a list.

[0010] In a possible implementation, the key indicator data includes at least one of the following: Number of requests, number of responses, number of no responses, number of successes, maximum response time, and maximum transfer time.

[0011] The present invention also provides a visual analysis device for a custom WEB application, comprising: An extraction module, configured to extract URL information in the traffic message when identifying that the protocol type of the traffic message in the session flow is the HTTP protocol; A matching module, used to match the URL information based on the policy configuration information; the policy configuration information includes URL configuration information, four-tuple information and indicator evaluation information; A parsing module, used to parse the traffic message when the match is successful, and obtain key indicator data of the web application to be monitored; the web application to be monitored is determined based on the URL configuration information and the four-tuple information; The analysis module is used to perform visual analysis on the key indicator data based on the indicator evaluation information.

[0012] On the other hand, the present invention also provides an electronic device, including a memory and a processor, wherein: The memory is used to store programs; The processor is coupled to the memory and is used to execute the program stored in the memory to implement the visual analysis method of the custom WEB application described in any of the above implementations.

[0013] On the other hand, the present invention further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the visual analysis method for a custom WEB application described in any of the above implementations is implemented.

[0014] On the other hand, the present invention further provides a computer program product, including a computer program, which, when executed by a processor, implements the visualization analysis method of the custom WEB application described in any of the above implementations.

[0015] The beneficial effects of the present invention are as follows: the visualization analysis method, device and electronic device of the custom WEB application provided by the present invention determine the session flow according to the traffic message in the network, extract the URL information in the traffic message when the protocol type of the traffic message in the session flow is identified as the HTTP protocol, and match the extracted URL information according to the URL configuration information in the policy configuration information, and parse the traffic message when the match is successful to obtain the key indicator data of the WEB application to be monitored, so as to visualize the key indicator data according to the indicator evaluation information, realize real-time monitoring of the performance of the WEB application, and allow relevant operation and maintenance personnel to perform comprehensive monitoring according to multiple visualization dimensions such as time and URL, so as to help enterprise operation and maintenance personnel to grasp the performance bottleneck of providing WEB services in real time and to quickly respond and troubleshoot when abnormal failures occur. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

[0017] Figure 1One of the method flow charts of an embodiment of the visual analysis method of a custom WEB application provided by the present invention; Figure 2 A second method flow chart of an embodiment of the visual analysis method for a custom WEB application provided by the present invention; Figure 3 A third method flow chart of an embodiment of the visual analysis method for a custom WEB application provided by the present invention; Figure 4 A schematic diagram of the structure of an embodiment of a visual analysis device for a custom WEB application provided by the present invention; Figure 5 A schematic structural diagram of an embodiment of an electronic device provided by the present invention. DETAILED DESCRIPTION

[0018] The technical solutions in the embodiments of the present invention will be described clearly and completely below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0019] In the description of the embodiments of the present invention, unless otherwise specified, "multiple" means two or more than two. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" may mean: A exists alone, A and B exist at the same time, and B exists alone.

[0020] The descriptions of "first", "second", etc. involved in the embodiments of the present invention are only for descriptive purposes and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of the indicated technical features. Therefore, the technical features defined as "first" or "second" may explicitly or implicitly include at least one of the features.

[0021] Figure 1 One of the method flow charts of an embodiment of the visual analysis method of a custom WEB application provided by the present invention is as follows Figure 1 As shown, the visualization analysis method of custom WEB applications includes: S101, when it is identified that the protocol type of the traffic message in the session flow is the HTTP protocol, extracting URL information in the traffic message; S102, matching the URL information based on the policy configuration information; the policy configuration information includes URL configuration information, four-tuple information and indicator evaluation information; S103, when the match is successful, the traffic message is parsed to obtain key indicator data of the web application to be monitored; the web application to be monitored is determined based on the URL configuration information and the four-tuple information; S104: Based on the indicator evaluation information, perform visual analysis on the key indicator data.

[0022] In S101, when it is identified that the protocol type of the traffic message in the session flow is the HTTP protocol, URL information in the traffic message is extracted.

[0023] The session flow can be obtained by forming a five-tuple flow of traffic messages in the network. In the network traffic, by identifying the protocol type of the traffic message in the session flow, when the protocol type is identified as HTTP, the URL information of the message is extracted.

[0024] In S102, the URL information is matched based on the policy configuration information.

[0025] Policy configuration information can include URL configuration information, four-tuple information, and indicator evaluation information. URL configuration information can be used to match specific URL patterns or paths; four-tuple information includes source IP, destination IP, source port, and destination port; indicator evaluation information can be used to define the evaluation criteria of performance indicators, such as response time threshold, number of requests, etc.

[0026] By matching the extracted URL information with the URL configuration information in the policy configuration information, it is possible to determine which URLs correspond to WEB applications that need to be monitored and which key indicators need to be evaluated.

[0027] In S103, when the match is successful, the traffic message is parsed to obtain key indicator data of the web application to be monitored.

[0028] When the URL configuration information and the extracted URL information match successfully, the traffic message is deeply analyzed to obtain the key performance indicator data of the web application to be monitored. The key indicator data may include the number of requests, the number of responses, the number of no responses, the number of successes, the maximum response time, and the maximum transmission time.

[0029] The web application to be monitored is a custom web application determined according to the URL configuration information and the four-tuple information. For example, the web application can be flexibly customized, and the customized parameters include the four-tuple information (source IP, destination IP, source port, destination port) and URL configuration information. These parameters can be combined in different usage scenarios, and the performance evaluation index range can be customized to adapt to different monitoring usage scenarios.

[0030] In S104, based on the indicator evaluation information, the key indicator data is visualized and analyzed.

[0031] The indicator evaluation information can be a preset performance indicator judgment standard range. The analysis methods and visualization tools defined in the indicator evaluation information are used to process and analyze the key indicator data obtained, which may include data aggregation, trend analysis, anomaly detection, etc. Based on the analysis results, visualization forms such as charts, graphs, and dashboards are generated to intuitively display the performance status of the WEB application.

[0032] Through visual analysis, it helps users quickly understand the performance of WEB applications, identify potential problems, and take corresponding measures to optimize them.

[0033] Compared with the prior art, the visualization analysis method for customized WEB applications provided by the embodiment of the present invention determines the session flow according to the traffic packets in the network, extracts the URL information in the traffic packets when the protocol type of the traffic packets in the session flow is identified as the HTTP protocol, and matches the extracted URL information according to the URL configuration information in the policy configuration information, and parses the traffic packets when the match is successful to obtain the key indicator data of the WEB application to be monitored, thereby visually analyzing the key indicator data according to the indicator evaluation information, realizing real-time monitoring of the performance of the WEB application, allowing relevant operation and maintenance personnel to perform comprehensive monitoring according to multiple visualization dimensions such as time and URL, helping enterprise operation and maintenance personnel to grasp the performance bottleneck of providing WEB services in real time and to quickly respond and troubleshoot when abnormal failures occur.

[0034] In some embodiments of the present invention, when the protocol type of the traffic message in the session flow is identified as the HTTP protocol, before extracting the URL information in the traffic message, the method further includes: Obtain traffic packets in the network through the network card; The flow is processed by constructing a flow for the traffic message in the network based on the five-tuple information to obtain the session flow.

[0035] Device traffic is accessed according to physical links. One physical network card interface corresponds to one traffic interface. First, traffic is differentiated and accessed at the physical layer to avoid duplicate traffic, which interferes with indicator analysis and wastes server resources.

[0036] After the device receives the traffic message, the program will distribute the message to different threads for parallel processing, and build flow processing based on the five-tuple (source IP address, source port, destination IP address, destination port, protocol type) to ensure the integrity of the same session processing.

[0037] Flow creation means classifying the messages with the same five-tuple information into the same session flow. The five-tuple information of the message is checked and classified into the corresponding session flow.

[0038] In some embodiments of the present invention, matching the URL information based on the policy configuration information includes: Comparing the URL configuration information with the URL information; When the URL configuration information contains the URL information, the match is successful.

[0039] After the five-element flow is completed, it will enter the protocol identification process. When the protocol is identified as HTTP, the message will be forwarded to the HTTP protocol decoding program. While decoding, all URL information under the WEB application will be extracted.

[0040] The extracted URL information is compared with the URL configuration information configured by the user. When the URL configuration information contains the URL information, the match is successful, that is, the traffic message belongs to the message of the WEB application that needs to be monitored.

[0041] In some embodiments of the present invention, the key indicator data includes at least one of the following: Number of requests, number of responses, number of no responses, number of successes, maximum response time, and maximum transfer time.

[0042] Key indicator data may include one or more of the following data: number of requests, number of responses, number of no responses, number of successes, maximum response time, and maximum transmission time.

[0043] Optionally, key indicator data may also include minimum response time, average response time, number of request data packets, number of request bytes, number of response packets, number of response bytes, maximum transmission time, minimum transmission time, average transmission time, number of good responses, number of general responses, number of poor responses, number of very poor responses, good response ratio, general response ratio, poor response ratio, very poor response ratio, number of good transmissions, number of general transmissions, number of poor transmissions, number of very poor transmissions, etc.

[0044] In some embodiments of the present invention, the visual analysis of the key indicator data based on the indicator evaluation information includes: Analyze the key indicator data based on the indicator evaluation information to determine the analysis result; The analysis result is saved in a storage directory corresponding to the physical link; different physical links correspond to different storage directories; Scan the files in the storage directory in real time, call the parsing program to parse the files, and write the parsed data into the database table; Query the data table corresponding to the web application to be monitored in the database table through the query interface; The data tables corresponding to the web applications to be monitored are aggregated and displayed.

[0045] In some embodiments of the present invention, the aggregated display of the data tables corresponding to the web applications to be monitored includes: The data tables are aggregated and displayed in the form of charts, graphs or lists.

[0046] After a successful match, the various performance indicators in the message can be extracted and analyzed, and the analysis results will be stored in specific file data generated through the write process.

[0047] Exemplarily, when the response time is defined in the indicator evaluation information as less than or equal to 10ms, and the response time in the key indicator data is less than or equal to 10ms, it can be analyzed that the effect of the response time is very good; when the response time is greater than 10ms and less than 40ms, it can be analyzed that the effect of the response time is average; when the response time is greater than 40ms and less than 100ms, it can be analyzed that the effect of the response time is poor; when the response time is greater than 100ms, it can be analyzed that the effect of the response time is very poor.

[0048] The analysis results are written into the process to generate specific file data for storage. The specific file is also partitioned and stored according to the ID information of the physical link, which is equivalent to each link having its own storage directory. In this way, a large number of WEB application traffic data files are secondary diverted to avoid storage and parsing congestion caused by too many files. Different link storage files call the parsing process for parsing and storage, which improves the processing capability of parallel parsing.

[0049] The timing program will scan the file data storage directory once every 1 second. When a file is found in the directory, the file parsing program will be called to read and parse the file and write it into the database partition table for storage.

[0050] The page queries the data table of the URL corresponding to the WEB application by passing different parameters and calling the query interface. The query result data is aggregated and displayed in the time range dimension, and various performance indicators of the WEB application are counted in various rich dimensions such as charts, curves, lists, etc. At the same time, the list data is aggregated and counted according to different dimensions, such as URL, source IP or source network segment. Users can intuitively see the performance indicator information such as the request response of the URL.

[0051] The visual analysis method of a custom WEB application provided in an embodiment of the present invention analyzes key indicator data based on indicator evaluation information and saves the analysis results in a specific storage directory. The system monitors these directories in real time, parses new files, and writes data into a database. Users can access these data through a query interface and display them in an aggregated manner to obtain intuitive insights into the performance of WEB applications.

[0052] Figure 2 The second method flow chart of an embodiment of the visual analysis method of a custom WEB application provided by the present invention is as follows: Figure 3 The third method flow chart of an embodiment of the visual analysis method of a custom WEB application provided by the present invention is as follows: Figure 2 and Figure 3 The visual analysis method of the custom WEB application provided by the present invention is described in detail. The method provided by the present invention includes: S201. Define the web application to be monitored.

[0053] System users define the web applications that need to be monitored in the policy configuration interface according to requirements and usage scenarios. For example, the destination IP is equal to 192.168.1.1, the destination port is equal to 80, and the URL address contains baidu.com. Based on these three combinations of information, a custom web application is determined. After the policy is submitted and saved, it is sent to the underlying structured file through the interface.

[0054] S202: Extract key performance indicator data.

[0055] Device traffic is accessed according to physical links. One physical network card interface corresponds to one traffic interface. First, traffic is differentiated and accessed at the physical layer to avoid duplicate traffic, which interferes with indicator analysis and wastes server resources.

[0056] After the device receives the traffic message, the program will distribute the message to different threads for parallel processing, and build flow processing based on the five-tuple to ensure the integrity of the same session processing.

[0057] After the five-element group flow is completed, it will enter the protocol identification process. When the protocol is identified as the HTTP protocol, the message will be forwarded to the HTTP protocol decoding program. While decoding, all URL information under the WEB application will be extracted and compared with the monitoring policy configured by the user. After a successful match, the various performance indicators in the message will be extracted and analyzed. The results of the analysis will be stored in specific file data generated by the write process.

[0058] S203, partition storage.

[0059] Specific files are also partitioned and stored according to the physical link ID information, which is equivalent to each link having its own storage directory. This allows a large number of WEB application traffic data files to be diverted for the second time to avoid storage and parsing congestion caused by too many files. Different link storage files call the parsing process to parse and store them, improving the processing capability of parallel parsing.

[0060] The timing program will scan the file data storage directory once every 1 second. When a file is found in the directory, the file parsing program will be called to read and parse the file and write it into the database partition table for storage.

[0061] S204. Visual analysis.

[0062] The page queries the data table of the URL corresponding to the WEB application by passing different parameters and calling the query interface. The query result data is aggregated and displayed in the time range dimension, and various performance indicators of the WEB application are counted in various rich dimensions such as charts, curves, lists, etc. At the same time, the list data is aggregated and counted according to different dimensions, such as URL, source IP or source network segment. Users can intuitively see the performance indicator information such as the request response of the URL.

[0063] The visual analysis method for customized WEB applications provided by the present invention can perform structured storage on WEB application policy data of user-defined combinations, perform preliminary identification and real-time matching screening on massive WEB application traffic, discard unmatched traffic data, alleviate hardware resource processing bottlenecks, perform real-time analysis on matched traffic and calculate up to dozens of performance indicator parameters, save the parsed data in the format of a csv file to a specified directory on the server, and the parsing program reads the directory file in real time for parsing, writes the parsed data content into the clickhouse database for storage, performs relevant data aggregation analysis according to scheduled tasks, and finally performs multi-dimensional visual analysis and display on the page.

[0064] The visualization analysis method of custom WEB applications provided by the present invention provides a flexible configuration method, which can provide operation and maintenance personnel with operation and maintenance monitoring of different WEB service scenarios, and present the invisible and intangible traffic in the network in the form of charts, curves, etc. after analysis, so as to intuitively understand and grasp the performance indicators of the current WEB services, and provide a global monitoring perspective for operation and maintenance personnel. When data anomalies are found in the global monitoring perspective, a quick response can be made and a more refined drill-down analysis can be performed on the abnormal time point, and a specific URL indicator can be specifically located, which can finally be associated with the traffic message to collect evidence for the problem, thus helping operation and maintenance personnel to quickly locate and troubleshoot the problem.

[0065] The visualization analysis method of the customized WEB application provided by the present invention only needs to configure the concerned domain name or URL information, as well as the four-tuple information and the user-defined performance indicator judgment standard range into the system. The program will perform in-depth collection and analysis on all URLs containing the domain name, and combine the session message interaction scenario, and comprehensively calculate the relevant performance indicators according to the flow message characteristics, including but not limited to the number of requests, the number of responses, the number of no responses, the number of successes, the maximum response time, the maximum transmission time and other indicators, and perform real-time statistics, aggregation and graphical analysis and presentation of these indicators. Relevant operation and maintenance personnel can conduct comprehensive monitoring according to multiple visualization dimensions such as time and URL, helping enterprise operation and maintenance personnel to grasp the performance bottleneck of providing WEB services in real time and respond and troubleshoot quickly when abnormal failures occur.

[0066] In order to better implement the visual analysis method of the custom WEB application in the embodiment of the present invention, based on the visual analysis method of the custom WEB application, the embodiment of the present invention also provides a visual analysis device for the custom WEB application. Figure 4 A structural diagram of an embodiment of a visual analysis device for a custom WEB application provided by the present invention is shown in FIG. Figure 4 As shown, the visual analysis device 400 for customizing a WEB application includes: The extraction module 410 is used to extract URL information in the traffic message when the protocol type of the traffic message in the session flow is identified as the HTTP protocol; A matching module 420, configured to match the URL information based on policy configuration information; the policy configuration information includes URL configuration information, four-tuple information and indicator evaluation information; The parsing module 430 is used to parse the traffic message when the match is successful, and obtain key indicator data of the web application to be monitored; the web application to be monitored is determined based on the URL configuration information and the four-tuple information; The analysis module 440 is used to perform visual analysis on the key indicator data based on the indicator evaluation information.

[0067] The visual analysis device 400 for custom WEB applications provided in the above embodiment can implement the technical solution described in the visual analysis method embodiment for custom WEB applications. The specific implementation principles of the above modules or units can refer to the corresponding contents in the visual analysis method embodiment for custom WEB applications, which will not be repeated here.

[0068] like Figure 5 As shown, the present invention also provides an electronic device 500. The electronic device 500 includes a processor 501, a memory 502 and a display 503. Figure 5Only some components of the electronic device 500 are shown, but it should be understood that it is not required to implement all of the components shown, and more or fewer components may be implemented instead.

[0069] In some embodiments, the processor 501 may be a central processing unit (CPU), a microprocessor or other data processing chip, used to run program codes stored in the memory 502 or process data, such as the visualization analysis method of the custom WEB application in the present invention.

[0070] In some embodiments, the processor 501 may be a single server or a server group. The server group may be centralized or distributed. In some embodiments, the processor 501 may be local or remote. In some embodiments, the processor 501 may be implemented in a cloud platform. In some embodiments, the cloud platform may include a private cloud, a public cloud, a hybrid cloud, a community cloud, a distributed cloud, an internal cloud, a multi-cloud, etc., or any combination thereof.

[0071] In some embodiments, the memory 502 may be an internal storage unit of the electronic device 500, such as a hard disk or memory of the electronic device 500. In other embodiments, the memory 502 may also be an external storage device of the electronic device 500, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the electronic device 500.

[0072] Furthermore, the memory 502 may include both an internal storage unit of the electronic device 500 and an external storage device. The memory 502 is used to store application software installed in the electronic device 500 and various data.

[0073] In some embodiments, the display 503 may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an organic light-emitting diode (OLED) touch device, etc. The display 503 is used to display information on the electronic device 500 and to display a visual user interface. The components 501-503 of the electronic device 500 communicate with each other via a system bus.

[0074] In one embodiment, when the processor 501 executes the visual analysis program of the custom WEB application in the memory 502, the following steps may be implemented: When the protocol type of the traffic message in the session flow is identified as the HTTP protocol, extracting URL information in the traffic message; Matching the URL information based on the policy configuration information; the policy configuration information includes URL configuration information, four-tuple information and indicator evaluation information; When the match is successful, the traffic message is parsed to obtain key indicator data of the web application to be monitored; the web application to be monitored is determined based on the URL configuration information and the four-tuple information; Based on the indicator evaluation information, the key indicator data is visualized and analyzed.

[0075] It should be understood that: when the processor 501 executes the visual analysis program of the custom WEB application in the memory 502, in addition to the above functions, other functions can also be implemented. For details, please refer to the description of the corresponding method embodiment above.

[0076] Furthermore, the embodiment of the present invention does not specifically limit the type of the electronic device 500 mentioned, and the electronic device 500 may be a portable electronic device such as a mobile phone, a tablet computer, a personal digital assistant (PDA), a wearable device, a laptop computer, etc. Exemplary embodiments of portable electronic devices include but are not limited to portable electronic devices equipped with IOS, Android, Microsoft or other operating systems. The above-mentioned portable electronic device may also be other portable electronic devices, such as a laptop computer with a touch-sensitive surface (e.g., a touch panel). It should also be understood that in some other embodiments of the present invention, the electronic device 500 may not be a portable electronic device, but a desktop computer with a touch-sensitive surface (e.g., a touch panel).

[0077] Accordingly, an embodiment of the present invention also provides a computer-readable storage medium, which is used to store computer-readable programs or instructions. When the program or instructions are executed by a processor, it can implement the steps or functions of the visualization analysis method of the custom WEB application provided by the above-mentioned method embodiments.

[0078] On the other hand, the present invention also provides a computer program product, which includes a computer program. The computer program can be stored on a non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer can execute the steps or functions in the visualization analysis method of the custom WEB application provided in the above-mentioned method embodiments.

[0079] Those skilled in the art will appreciate that all or part of the processes of the above-mentioned embodiments can be implemented by instructing related hardware (such as a processor, a controller, etc.) through a computer program, and the computer program can be stored in a computer-readable storage medium, wherein the computer-readable storage medium is a disk, an optical disk, a read-only storage memory, or a random access memory, etc.

[0080] The visual analysis method, device and electronic device for the customized WEB application provided by the present invention are introduced in detail above. The principle and implementation mode of the present invention are explained in this article by using specific examples. The description of the above embodiments is only used to help understand the method and core idea of ​​the present invention. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation mode and application scope. In summary, the content of this specification should not be understood as limiting the present invention.

Claims

1. A visual analysis method for a custom WEB application, characterized in that: include: When the protocol type of the traffic message in the session flow is identified as the HTTP protocol, extracting URL information in the traffic message; Matching the URL information based on the policy configuration information; the policy configuration information includes URL configuration information, four-tuple information and indicator evaluation information; When the match is successful, the traffic message is parsed to obtain key indicator data of the web application to be monitored; The web application to be monitored is determined based on the URL configuration information and the four-tuple information; Based on the indicator evaluation information, the key indicator data is visualized and analyzed.

2. The visual analysis method of a custom WEB application according to claim 1, characterized in that: When the protocol type of the traffic message in the session flow is identified as the HTTP protocol, before extracting the URL information in the traffic message, the method further includes: Obtain traffic packets in the network through the network card; The flow is processed by constructing a flow for the traffic message in the network based on the five-tuple information to obtain the session flow.

3. The visual analysis method for custom WEB applications according to claim 1, characterized in that: The matching of the URL information based on the policy configuration information includes: Comparing the URL configuration information with the URL information; When the URL configuration information contains the URL information, the match is successful.

4. The visual analysis method for custom WEB applications according to claim 1, characterized in that: The visual analysis of the key indicator data based on the indicator evaluation information includes: Analyze the key indicator data based on the indicator evaluation information to determine the analysis result; The analysis result is saved in a storage directory corresponding to the physical link; different physical links correspond to different storage directories; Scan the files in the storage directory in real time, call the parsing program to parse the files, and write the parsed data into the database table; Query the data table corresponding to the web application to be monitored in the database table through the query interface; The data tables corresponding to the web applications to be monitored are aggregated and displayed.

5. The visual analysis method of a custom WEB application according to claim 4, characterized in that: The aggregated display of the data tables corresponding to the web applications to be monitored includes: The data table is aggregated and displayed in the form of a chart, a graph or a list.

6. The visual analysis method of a custom WEB application according to claim 1, characterized in that: The key indicator data includes at least one of the following: Number of requests, number of responses, number of no responses, number of successes, maximum response time, and maximum transfer time.

7. A visual analysis device for a custom WEB application, characterized in that: include: An extraction module, configured to extract URL information in the traffic message when identifying that the protocol type of the traffic message in the session flow is the HTTP protocol; A matching module, used to match the URL information based on the policy configuration information; the policy configuration information includes URL configuration information, four-tuple information and indicator evaluation information; The parsing module is used to parse the traffic message when the match is successful, and obtain the key indicator data of the WEB application to be monitored; The web application to be monitored is determined based on the URL configuration information and the four-tuple information; The analysis module is used to perform visual analysis on the key indicator data based on the indicator evaluation information.

8. An electronic device, characterized in that: comprising a memory and a processor, wherein: The memory is used to store programs; The processor is coupled to the memory and is used to execute the program stored in the memory to implement the visual analysis method of the custom WEB application as described in any one of claims 1 to 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the visual analysis method for a custom WEB application as claimed in any one of claims 1 to 6 is implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the visual analysis method for a custom WEB application as claimed in any one of claims 1 to 6 is implemented.

Images