Equipment monitoring method and device, equipment and storage medium

Abstract

The invention provides an equipment monitoring method and device, monitored equipment and a storage medium, and particularly relates to the technical field of equipment monitoring, and the method comprises the steps that an analysis server obtains I monitored equipment state logs; wherein the I monitored equipment state logs comprise M monitored equipment normal logs and N monitored equipment fault logs; determining fault summary of N monitored devices corresponding to the first preset fault keyword according to a first mapping relation, and screening out N monitored device fault logs from the I monitored device state logs according to the fault summary of the N monitored devices; and sending the fault logs of the N pieces of monitored equipment and the fault summary of the N pieces of monitored equipment to a tester terminal through a notification strategy. According to the method, the monitored equipment fault log and the fault summary of the monitored equipment can be timely sent to the tester terminal, so that the processing timeliness and the processing efficiency of the monitored equipment fault are improved.

Description

Technical Field

[0001] The present application relates to the technical field of equipment monitoring, and in particular to an equipment monitoring method, apparatus, device and storage medium. Background Art

[0002] In the research and development, testing and daily operations of communication equipment and network equipment, a strict monitoring process is essential. In order to ensure the stable operation of the monitored equipment and to detect potential problems in a timely manner, we need to perform a series of sophisticated tests. These tests not only cover the performance evaluation of the monitored equipment, but also require us to be highly alert to the real-time status of the monitored equipment. Once the monitored equipment is abnormal, it is crucial to quickly capture and obtain its operation log and other information to quickly locate the problem and develop a solution. Therefore, an efficient and accurate monitored equipment status monitoring system is an indispensable part of our guarantee of the quality of communication monitored equipment and improvement of testing efficiency. The network monitored equipment is equipped with a relatively complete log system, but the logs are often ignored and covered, and are not well utilized.

[0003] Currently, it mainly relies on active manual inspection, such as verifying expected results in functional testing, or checking whether the service is running normally after the monitored device is put into operation. Taking AP (Access Point) as an example, testers need to regularly check whether the AP is online, whether key processes are running stably, and whether the CPU (central processing unit) utilization and memory utilization are kept within a reasonable range. This traditional monitoring method not only consumes a lot of manpower costs, but also often has unsatisfactory results. For example, the monitored device may have a short-term high CPU utilization, disconnection, or even restart during an unattended period, and these problems have been restored when someone uses the service, so it is difficult for testers to detect these potential serious problems. In addition, even if the tester can find the abnormality afterwards, if the relevant logs are not recorded or obtained in time when the problem occurs, then these key information may be lost due to log duplication and other reasons, which seriously affects the analysis of the cause of the problem.

[0004] Therefore, the failure log of the monitored device cannot be sent to the tester in time, resulting in the tester being unable to timely analyze the cause of the failure of the monitored device according to the failure log of the monitored device, which is a problem that needs to be solved urgently. Summary of the invention

[0005] In view of this, the purpose of the present application is to provide a device monitoring method, apparatus, equipment and storage medium to solve the above-mentioned problems, and to realize the timely sending of the fault log of the monitored equipment to the tester, so that the tester can timely analyze the cause of the failure of the monitored equipment according to the fault log of the monitored equipment.

[0006] In a first aspect, an embodiment of the present application provides a device monitoring method, which is applied to an analysis server, and the method includes: The analysis server obtains I monitored device status logs; wherein the I monitored device status logs include M monitored device normal logs and N monitored device fault logs; The analysis server determines the fault overviews of N monitored devices corresponding to the first preset fault keyword according to the first mapping relationship; wherein the first mapping relationship is a mapping relationship between the first reference preset fault keyword and the reference fault overview; The analysis server selects N monitored device fault logs from I monitored device status logs according to the fault overviews of the N monitored devices; The analysis server sends the fault logs of N monitored devices and the fault summaries of N monitored devices to the tester terminal through the notification strategy.

[0007] Preferably, the method further comprises: The analysis server analyzes the fault logs of N monitored devices to obtain the fault types of the N monitored devices; The analysis server sends the N monitored device fault logs and the N monitored device fault types to the tester terminal through the notification strategy.

[0008] Preferably, the method further comprises: The analysis server analyzes the fault logs of N monitored devices to obtain the IP addresses of N faulty monitored devices; The analysis server sends N monitored device fault logs and the IP addresses of N faulty monitored devices to the tester terminal through the notification strategy.

[0009] Preferably, the method further comprises: The tester terminal determines the location of the faulty monitored device according to the N monitored device fault logs and the IP addresses of the N faulty monitored devices.

[0010] Preferably, the method further comprises: The management device obtains the status log of I monitored devices; The management device sends I monitored device status logs to the analysis server through the access device.

[0011] Preferably, the notification strategy includes at least one of the following: email, phone message and warning information.

[0012] The monitored device monitoring method provided by the present application brings the following beneficial effects: The present application provides a method for monitoring a monitored device, in which an analysis server selects N monitored device fault logs from I monitored device status logs according to the fault overviews of N monitored devices, and sends the N monitored device fault logs and the N monitored device fault overviews to a tester terminal through a notification strategy. The method can send the monitored device fault logs and the monitored device fault overviews to the tester terminal in a timely manner, and the tester does not need to pay attention to the situation of each terminal monitored device at all times. It only needs to analyze and process the fault situation of the monitored device in a timely manner when receiving the monitored device fault log and the monitored device fault overview, thereby improving the timeliness and efficiency of processing the monitored device fault. In addition, since the tester terminal receives the monitored device fault logs selected from all monitored device status logs by the analysis server in the method, the tester can obtain the fault situation of each monitored device without screening, thereby reducing the work burden of the tester. Moreover, in the method, since the analysis server does not need to store each monitored device status log for a long time, it is avoided that a large number of monitored device status logs occupy the memory resources of the analysis server.

[0013] In a second aspect, the present application also provides an equipment monitoring device, the device comprising: An acquisition module is used to acquire I monitored device status logs; wherein the I monitored device status logs include M monitored device normal logs and N monitored device fault logs; A data processing module, configured to determine, according to a first mapping relationship, fault summaries of N monitored devices corresponding to a first preset fault keyword; wherein the first mapping relationship is a mapping relationship between a first reference preset fault keyword and a reference fault summary; The data processing module is further used to filter out N monitored device fault logs from I monitored device status logs according to the fault overviews of the N monitored devices; The sending module is used to send the fault logs of N monitored devices and the fault overviews of N monitored devices to the tester terminal through the notification strategy.

[0014] The equipment monitoring device provided in the embodiment of the present application has the same technical features as the equipment monitoring method provided in the above embodiment, so it can also solve the same technical problems and achieve the same technical effects.

[0015] In a third aspect, the present application provides a computing device, including a memory and a processor; One or more computer programs are stored in the memory, and the one or more computer programs include instructions; when the instructions are executed by the processor, the computing device executes the method as described in any one of the first aspects.

[0016] In a fourth aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium is used to store a computer program, and the computer program is used to execute the method as described in any one of the first aspects.

[0017] In a fifth aspect, the present application provides a computer program product, wherein the computer program product comprises one or more computer instructions, and when the computer instructions are executed by a computer, the computer executes the method as described in any one of the first aspects.

[0018] Other features and advantages of the present application will be described in the following description, and partly become apparent from the description, or understood by practicing the present application. The purpose and other advantages of the present application are realized and obtained by the structures particularly pointed out in the description and the drawings.

[0019] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, preferred embodiments are specifically cited below and described in detail with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the specific implementation methods of the present application or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0021] Figure 1 A schematic diagram of a device monitoring method flow chart provided in an embodiment of the present application; Figure 2 A schematic diagram of the structure of an equipment monitoring device provided in an embodiment of the present application; Figure 3 A schematic diagram of a computing device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0022] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution of the present application will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.

[0023] To facilitate understanding of this embodiment, the embodiments of the present application are described in detail below.

[0024] The present application embodiment provides a device monitoring method, which is applied to an analysis server, such as Figure 1 As shown, Figure 1 A schematic diagram of a device monitoring method provided in an embodiment of the present application. The method comprises the following steps: S101, the analysis server obtains I monitored device status logs.

[0025] Among them, I monitored device status logs include M monitored device normal logs and N monitored device fault logs.

[0026] Specifically, the above analysis server is a syslog server, which is used to receive, store and manage system log software or monitored devices. The above status log records the operating status of each monitored device, for example: the monitored device is offline, the monitored device is disconnected, and the monitored device is in an abnormal state of receiving or sending business data, which is a monitored device fault log; the monitored device is in a normal state of receiving or sending business data, the monitored device is in a normal connection state, and the monitored device is online, which belongs to the normal log of the monitored device.

[0027] S102: The analysis server determines, according to a first mapping relationship, fault summaries of N monitored devices corresponding to a first preset fault keyword.

[0028] The first mapping relationship is a mapping relationship between a first reference preset fault keyword and a reference fault overview.

[0029] Specifically, as shown in Table 1, Table 1 is an example table of the first mapping relationship. The analysis server pre-stores the first mapping relationship, which is obtained by the analysis server through learning and training of a large number of sample fault keywords and the fault overviews of sample monitored devices corresponding to the sample fault keywords, and has high accuracy.

[0030] Table 1:

[0031] With this arrangement, the analysis server can quickly determine the fault overview of the monitored device, so that it can subsequently filter out the monitored device fault logs from each monitored device status log based on the fault overview of the monitored device, thereby improving the accuracy of the analysis server in extracting the monitored device fault logs.

[0032] S103: The analysis server selects N monitored device fault logs from I monitored device status logs according to the fault overviews of the N monitored devices.

[0033] Specifically, the fault overview of the monitored device is used to characterize the features of the fault log of the monitored device. The analysis server extracts the fault log of the monitored device from I monitored device status logs according to the fault overview of the monitored device based on regular expressions or NPL (Natural Language Processing).

[0034] With such a configuration, the analysis server does not need to traverse all monitored device status logs to select monitored device fault logs, thereby improving the extraction efficiency of monitored device fault logs.

[0035] S104, the analysis server sends the fault logs of the N monitored devices and the fault summaries of the N monitored devices to the tester terminal through the notification strategy.

[0036] Specifically, the notification strategy includes at least one of the following: email, phone message and warning information, and the tester terminal includes at least one of the following: mailbox, mobile phone and monitor; wherein the monitor is provided with a display screen. After the analysis server extracts the monitored device fault log, it can timely upload the monitored device fault log and the monitored device fault overview to the tester terminal.

[0037] The analysis server sends the monitored device fault log and the monitored device fault overview to the mobile phone of the tester who is on a business trip through a telephone message. The tester can rush back to the location of the faulty monitored device in time and repair the faulty monitored device in time. The analysis server sends the monitored device fault log and the monitored device fault overview to the tester's mailbox through an email, and the mailbox can store the monitored device fault log and the monitored device fault overview to avoid the loss of the monitored device fault log and the monitored device fault overview caused by the restart or disconnection of the analysis server or the occurrence of a failure, which causes the tester to be unable to know the fault situation of the monitored device. The analysis server sends the monitored device fault log and the monitored device fault overview to the display screen of the monitor through a warning message, so that the tester can obtain the fault information of the monitored device more intuitively. Among them, the monitored device fault overview can determine the key fault of the monitored device, so that the tester can deal with the key fault first, and the monitored device fault log can describe the specific monitored device fault, so that the tester can understand the situation of the monitored device fault more comprehensively and in detail.

[0038] The embodiment of the present application provides a device monitoring method, in which the analysis server selects N monitored device fault logs from I monitored device status logs according to the fault overviews of N monitored devices, and sends the N monitored device fault logs and the N monitored device fault overviews to the tester terminal through the notification strategy. The tester terminal can obtain the fault status of the monitored device in a timely manner. Compared with the prior art, the tester needs to pay attention to the state change of the monitoring system at all times. In this method, the monitored device fault log and the monitored device fault overview can be sent to the tester terminal in a timely manner. The tester does not need to pay attention to the status of each terminal monitored device at all times. It only needs to analyze and process the fault status of the monitored device in a timely manner when receiving the monitored device fault log and the monitored device fault overview, thereby improving the timeliness and efficiency of processing the monitored device fault. In addition, since the tester terminal receives the monitored device fault log selected by the analysis server from all monitored device status logs in the method, the tester can obtain the fault status of each monitored device without screening, thereby reducing the workload of the tester. Furthermore, in the method, since the analysis server does not need to store each monitored device status log for a long time, it is avoided that a large number of monitored device status logs occupy the memory resources of the analysis server.

[0039] In one implementation, the analysis server analyzes N monitored device fault logs to obtain N monitored device fault types; and sends the N monitored device fault logs and the N monitored device fault types to the tester terminal through a notification strategy.

[0040] Specifically, the analysis server can determine the fault type of the monitored device based on the fault log of the monitored device. The tester can conduct a preliminary analysis of the faulty monitored device based on the fault type of the monitored device and develop targeted repair plans for different fault types.

[0041] This method clearly divides the fault types of the monitored equipment, allowing testers to more accurately predict and arrange maintenance activities, specify targeted maintenance plans based on the fault types, save maintenance time for faulty monitored equipment, and improve the maintenance efficiency of faulty monitored equipment.

[0042] In one embodiment, the analysis server analyzes the fault logs of N monitored devices to obtain the IP addresses of N faulty monitored devices; sends the fault logs of N monitored devices and the IP addresses of N faulty monitored devices to the tester terminal through a notification strategy; the tester terminal determines the location of the faulty monitored device based on the fault logs of N monitored devices and the IP addresses of N faulty monitored devices.

[0043] Specifically, the above analysis server extracts the IP address of the faulty monitored device from the fault log of the monitored device, and the tester terminal can determine the local area network to which the faulty monitored device is connected based on the IP address of the faulty monitored device, and then determine the location of the faulty monitored device. It should be noted that the analysis server and the tester terminal do not need to be in the same local area network as each monitored device. The analysis server and the tester terminal can be in any area reachable by the network. The analysis server and the tester terminal can be deployed everywhere on the Internet to solve the problem of simultaneous testing in multiple locations.

[0044] In this method, the analysis server extracts the IP address of the faulty monitored device from the fault log of the monitored device, thereby improving the accuracy of the tester's terminal in determining the location of the faulty monitored device, thereby saving the tester's time in locating the faulty monitored device and improving the subsequent maintenance efficiency of the faulty monitored device.

[0045] In one implementation, the management device obtains I monitored device status logs; and sends the I monitored device status logs to the analysis server by accessing the monitored device.

[0046] Specifically, the management device can monitor one monitored device in real time and upload the status log of one monitored device to the analysis server in real time. It should be noted that the management device, the analysis server and the tester terminal do not need to be in the same local area network as each monitored device.

[0047] In this method, both the management device and the monitored device can upload the monitored device status log to the analysis server. With this setting, even if the monitored device has a serious fault and cannot complete the log upload work, the management device can write the status of the monitored device with a serious fault into the monitored device status log and upload it to the analysis server in time for further processing. This improves the stability of the analysis server's processing of the monitored device status log.

[0048] Based on the above method embodiment, the present application embodiment also provides a device monitoring device, such as Figure 2 As shown, Figure 2 This is a schematic diagram of the structure of a device monitoring device provided in an embodiment of the present application. The device includes: an acquisition module 21, a data processing module 22 and a sending module 23. The functions of each module are as follows: The acquisition module 21 is used to acquire I monitored device status logs; wherein the I monitored device status logs include M monitored device normal logs and N monitored device fault logs; The data processing module 22 is used to determine the fault overviews of N monitored devices corresponding to the first preset fault keyword according to the first mapping relationship; wherein the first mapping relationship is a mapping relationship between the first reference preset fault keyword and the reference fault overview; The data processing module 22 is further used to filter out N monitored device fault logs from I monitored device status logs according to the fault overviews of the N monitored devices; The sending module 23 is used to send the fault logs of the N monitored devices and the fault summaries of the N monitored devices to the tester terminal through the notification strategy.

[0049] Preferably, the data processing module 22 is also used to analyze the fault logs of N monitored devices to obtain the fault types of the N monitored devices; and send the fault logs of the N monitored devices and the fault types of the N monitored devices to the tester terminal through the notification strategy.

[0050] Preferably, the data processing module 22 is also used to analyze the fault logs of N monitored devices to obtain the IP addresses of N faulty monitored devices; and send the fault logs of N monitored devices and the IP addresses of N faulty monitored devices to the tester terminal through the notification strategy.

[0051] Preferably, the data processing module 22 is further configured to determine the location of the faulty monitored device according to the N monitored device fault logs and the IP addresses of the N faulty monitored devices.

[0052] Preferably, the acquisition module 21 is further used to obtain a status log of a monitored device; The sending module 23 is also used to send the status log of I monitored devices to the analysis server through the access device.

[0053] Preferably, the notification strategy includes at least one of the following: email, phone message and warning information.

[0054] The equipment monitoring device provided in the embodiment of the present application has the same technical features as the equipment monitoring method provided in the above embodiment, so it can also solve the same technical problems and achieve the same technical effects.

[0055] The present application also provides a computing device. Figure 3 As shown, this figure is a schematic diagram of a computing device provided in an embodiment of the present application, and the computing device 400 includes a bus 401, a processor 402, a communication interface 403 and a memory 404. The processor 402, the memory 404 and the communication interface 403 communicate with each other through the bus 401.

[0056] The bus 401 may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 3 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0057] The processor 402 may be any one or more of a CPU, a graphics processing unit (GPU), a microprocessor (MP), or a digital signal processor (DSP).

[0058] The communication interface 403 is used for communicating with the outside. The memory 404 may include a volatile memory, such as a random access memory (RAM). The memory 404 may also include a non-volatile memory, such as a read-only memory (ROM), a flash memory, a hard disk drive (HDD) or a solid state drive (SSD).

[0059] The memory 404 stores executable codes, and the processor 402 executes the executable codes to perform the aforementioned method.

[0060] The embodiment of the present application also provides a computer-readable storage medium. The computer-readable storage medium can be any available medium that can be stored by the computing device or a data storage device such as a data center containing one or more available media. The available medium can be a magnetic medium (such as a floppy disk, a hard disk, a tape), an optical medium (such as a DVD), or a semiconductor medium (such as a solid-state hard disk). The computer-readable storage medium includes instructions that instruct the computing device to execute the above-mentioned device monitoring method.

[0061] The embodiment of the present application further provides a computer program product, which includes one or more computer instructions. When the computer instructions are loaded and executed on a computing device, the process or function described in the embodiment of the present application is generated in whole or in part.

[0062] The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from one website, computer or data center to another website, computer or data center via wired (e.g., coaxial cable, optical fiber) or wireless (e.g., infrared, wireless, microwave, etc.) means.

[0063] When the computer program product is executed by a computer, the computer executes any of the aforementioned device monitoring methods. The computer program product may be a software installation package, and when any of the aforementioned device monitoring methods is needed, the computer program product may be downloaded and executed on the computer.

[0064] The descriptions of the processes or structures corresponding to the above-mentioned figures have different emphases. For parts that are not described in detail in a certain process or structure, please refer to the relevant descriptions of other processes or structures.

[0065] The above description is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions within the technical scope disclosed in the present application should be included in the protection scope of the present application.

Claims

1. A device monitoring method, characterized in that: Applied to an analysis server, the method comprises: The analysis server obtains I monitored device status logs; wherein the I monitored device status logs include M monitored device normal logs and N monitored device fault logs; The analysis server determines the fault overviews of N monitored devices corresponding to the first preset fault keyword according to the first mapping relationship; wherein the first mapping relationship is a mapping relationship between the first reference preset fault keyword and the reference fault overview; The analysis server selects N monitored device fault logs from I monitored device status logs according to the fault overviews of the N monitored devices; The analysis server sends the fault logs of N monitored devices and the fault summaries of N monitored devices to the tester terminal through the notification strategy.

2. The device monitoring method according to claim 1, characterized in that: The method further comprises: The analysis server analyzes the fault logs of N monitored devices to obtain the fault types of the N monitored devices; The analysis server sends the N monitored device fault logs and the N monitored device fault types to the tester terminal through the notification strategy.

3. The device monitoring method according to claim 1, characterized in that: The method further comprises: The analysis server analyzes the fault logs of N monitored devices to obtain the IP addresses of N faulty monitored devices; The analysis server sends N monitored device fault logs and the IP addresses of N faulty monitored devices to the tester terminal through the notification strategy.

4. The device monitoring method according to claim 3, characterized in that: The method further comprises: The tester terminal determines the location of the faulty monitored device according to the N monitored device fault logs and the IP addresses of the N faulty monitored devices.

5. The device monitoring method according to claim 1, characterized in that: The method further comprises: The management device obtains the status log of I monitored devices; The management device sends I monitored device status logs to the analysis server through the access device.

6. The device monitoring method according to claim 1, characterized in that: The notification strategy includes at least one of the following: email, phone message and warning information.

7. An equipment monitoring device, characterized in that: The device comprises: An acquisition module is used to acquire I monitored device status logs; wherein the I monitored device status logs include M monitored device normal logs and N monitored device fault logs; A data processing module, configured to determine, according to a first mapping relationship, fault summaries of N monitored devices corresponding to a first preset fault keyword; wherein the first mapping relationship is a mapping relationship between a first reference preset fault keyword and a reference fault summary; The data processing module is further used to filter out N monitored device fault logs from I monitored device status logs according to the fault overviews of the N monitored devices; The sending module is used to send the fault logs of N monitored devices and the fault overviews of N monitored devices to the tester terminal through the notification strategy.

8. A computing device, characterized in that including memory and processor; One or more computer programs are stored in the memory, and the one or more computer programs include instructions; when the instructions are executed by the processor, the computing device executes the method as claimed in any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium is used to store a computer program, and the computer program is used to execute the method according to any one of claims 1 to 6.

10. A computer program product, characterized in that The computer program product comprises one or more computer instructions. When the computer instructions are executed by a computer, the computer performs the method according to any one of claims 1 to 6.

Images