Alarm information processing method and device, computer equipment and storage medium

Abstract

The invention discloses an alarm information processing method and device, computer equipment and a storage medium. The method comprises the following steps: acquiring alarm information from different alarm sources through a preset alarm rule template; performing alarm processing on the alarm information through a preset alarm rule engine to obtain target alarm information; and after executing and processing the target alarm information through a preset alarm execution engine, completing notification or display of the target alarm information. The scheme can be applied to quality inspection business in the field of financial science and technology, alarm information of alarm sources of different system parties can be subjected to data processing by aggregating the preset alarm rule template, the preset alarm rule engine and the preset alarm execution engine, processing can be carried out for different teams, the business does not need to pay attention to technical indexes and details, and the business efficiency is improved. The alarm noise is effectively reduced, and the operation and maintenance efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the fields of monitoring and financial technology, and in particular to a method, device, computer equipment and storage medium for processing alarm information. Background Art

[0002] As the core platform for data management and analysis of enterprise back-end services, the data middle platform carries multiple key tasks such as integration, cleaning, storage, and analysis. Each task is closely connected with many business systems, realizing the reception, processing, and output of data, forming an intricate and closely connected operation system. However, in the actual operation process, the frequent and complex data interactions between tasks often trigger a large number of alarm messages, many of which are repeated, invalid, or low-priority. These problem alarms are not only difficult for the business team to understand, but also fail to receive timely maintenance from the development team. The operation and maintenance team also finds it difficult to make effective judgments quickly when faced with massive alarms, which seriously affects the efficiency and accuracy of problem handling. For example, in financial business scenarios, the alarm information corresponding to the voice-to-text quality inspection business cannot be processed efficiently and accurately. Specifically, there are three core challenges currently facing: 1. Insufficient alarm coverage: The service scope of the data center is wide, spanning multiple teams and upstream and downstream components, resulting in diverse and complex alarm sources. Currently, alarms are independently raised by different development / operation and maintenance teams, resulting in uneven coverage and repeated coverage. The effectiveness and comprehensiveness of overall alarms need to be improved; 2. Weak business perception: The number of alarm configuration points far exceeds the needs of a single business focus point. Once an abnormality occurs in the production environment, the business team will be faced with hundreds of alarm indicators, making it difficult to quickly identify and understand key information, thus affecting the ability to make quick decisions.

[0003] 3. Development team response fatigue: The existing alarm processing mechanism is mostly closed-loop management within the development / operation and maintenance team, lacking consideration from a business perspective. This leads to delays in alarm reconstruction and emergency processing, which can easily lead to "alarm fatigue" in the long run, reducing the credibility and effectiveness of the alarm system.

[0004] To summarize the above, most existing alarm noise reduction solutions are still limited to a single system, and it is difficult to span multiple teams of stakeholders and connect hundreds of business system data sources. Therefore, finding an alarm noise reduction solution that can both serve multiple teams in a friendly manner and support multi-system access has become a key issue that needs to be solved urgently. Summary of the invention

[0005] Based on this, a method, apparatus, computer equipment and storage medium for processing alarm information are provided to solve the technical problems in the prior art that a team cannot span multiple stakeholders and cannot connect to hundreds of business system data sources.

[0006] A method for processing alarm information, comprising: Obtain alarm information from different alarm sources through preset alarm rule templates; After the alarm information is processed by a preset alarm rule engine, target alarm information is obtained; After the target alarm information is executed and processed by a preset alarm execution engine, notification or display of the target alarm information is completed.

[0007] A device for processing alarm information, comprising: The acquisition module is used to obtain alarm information from different alarm sources through a preset alarm rule template; An alarm processing module is used to obtain target alarm information after performing alarm processing on the alarm information through a preset alarm rule engine; The execution processing module is used to complete the notification or display of the target alarm information after executing the target alarm information through a preset alarm execution engine.

[0008] A computer device comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned method for processing alarm information when executing the computer program.

[0009] A computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method for processing the alarm information is implemented.

[0010] The above-mentioned alarm information processing method, device, computer equipment and storage medium obtain alarm information from different alarm sources through a preset alarm rule template; after alarm processing of the alarm information through a preset alarm rule engine, the target alarm information is obtained; after execution processing of the target alarm information through a preset alarm execution engine, the notification or display of the target alarm information is completed. In this way, this solution can process the alarm information of alarm sources of different system parties by aggregating into a preset alarm rule template, a preset alarm rule engine and a preset alarm execution engine, and can process it for different teams, and the business does not need to pay attention to technical indicators and details, which effectively reduces alarm noise and improves operation and maintenance efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative labor.

[0012] Figure 1 It is a schematic diagram of an application environment of a method for processing alarm information in one embodiment of the present invention; Figure 2 is a process diagram of a method for processing alarm information in one embodiment of the present invention; Figure 3 is a schematic diagram of the structure of a device for processing alarm information in one embodiment of the present invention; Figure 4 is a schematic diagram of a computer device in one embodiment of the present invention. DETAILED DESCRIPTION

[0013] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0014] The method for processing alarm information provided by the present invention can be applied in Figure 1 In an application environment, a client communicates with a server through a network. The client may be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, and portable wearable devices. The server may be implemented as an independent server or a server cluster consisting of multiple servers, such as the present invention may be applied to the server corresponding to the data middle station.

[0015] In one embodiment, if Figure 2As shown, a method for processing alarm information is provided, which can solve the existing alarm noise reduction capability, which is usually done in an independent alarm system and has problems in reducing alarm noise. In addition, the alarm capability provided by the existing alarm system is differentiated according to the source of the alarm system, and mainly includes the following parts: 1. Data input class, including Pangu tasks, real-time stream tasks, OGG corresponding hosts, application corresponding resource links and linkdo task execution warning information; 2. Data processing class, including wide table configuration platform, label platform, analysis cloud, deep cloud and other corresponding resource links and linkdo / airflow task alarm information 3. Data output class, including cloud gate and wide table configuration platform push corresponding resource links and Cron task alarm information; This application can solve the problems existing in the existing alarm system, and this method is applied in Figure 1 The server in the example is used as an example to illustrate the process, including the following steps: S10, obtaining alarm information from different alarm sources through a preset alarm rule template.

[0016] Understandably, there may be multiple preset alarm rule templates, and one alarm rule may set at least one preset alarm rule template, which may define the relationship between alarm information related to business alarms and alarm sources, such as which alarm sources may generate which types of alarm information, etc. In addition, the template may also pre-set business alarm thresholds for different business scenarios, such as in financial business scenarios, quality inspection business alarm thresholds, health insurance business alarm thresholds, life insurance business alarm thresholds, production line business alarm thresholds, human service business alarm thresholds, financial service business alarm thresholds, collection business alarm thresholds, and procurement business alarm thresholds; alarm information comes from different alarm sources, such as task execution sources, wide table configuration execution and push sources, cloud push sources, and resource monitoring sources; The alarm rule template in this embodiment is defined by the business, and is jointly maintained by data development and operation and maintenance. It can be agreed that a review of the matters corresponding to the template will be conducted after each production accident.

[0017] S20, after performing alarm processing on the alarm information through a preset alarm rule engine, target alarm information is obtained.

[0018] Understandably, the preset alarm rule engine is a component embedded in the application, which separates the business rules from the application code, making the implementation of complex business rules simple, and can dynamically modify the business rules to quickly respond to changes in requirements. Its basic principle is to detect specific conditions by defining a set of rules and trigger corresponding actions when the conditions are met; specifically, the alarm processing rules are defined by the preset alarm rule engine, and the rules are usually composed of conditional expressions and actions, which are used to detect specific alarm conditions; when new alarm information is received, the alarm processing rule engine will traverse the defined alarm processing rules and match them according to the conditional expressions; if the alarm processing rules are matched, the corresponding alarm processing actions are executed, and the alarm processing work includes integrity check, intelligent deduplication and matching compression; The preset alarm rule engine in this embodiment can generate target alarm information after alarm processing to reduce alarm noise.

[0019] S30, after executing and processing the target alarm information through a preset alarm execution engine, the notification or display of the target alarm information is completed.

[0020] Understandably, the preset alarm execution engine is a system component that can automatically detect and trigger alarm operations according to preset rules and conditions. It is usually combined with a monitoring system, a log analysis system, a network security system, etc., and is used to detect the operating status of the system in real time, and automatically trigger alarm operations when abnormal conditions are detected, such as sending alarm notifications, triggering other system components, recording logs, etc. It may include a rule configuration module, a detection module, a trigger module and a log recording module. The specific contents are as follows: Rule configuration module: Users can define alarm rules in this module, including alarm conditions, triggering actions, etc. The rules are usually based on the operating status, performance indicators, log information, etc. of the system; Detection module: This module is responsible for real-time detection of the operating status of the system, collecting relevant performance indicators and log information, and comparing them with the preset alarm rules; Trigger module: When the detection module detects an abnormal situation that meets the alarm conditions, the trigger module will perform corresponding actions according to the preset rules, such as sending alarm notifications or displaying messages to relevant personnel, triggering other system components to respond, etc.; Log recording module: This module is used to record relevant information of alarm events, including alarm time, triggering conditions, execution actions, etc., for subsequent analysis and auditing; The preset alarm execution engine in this embodiment can notify or display the target alarm information, thereby improving the processing efficiency of the target alarm information.

[0021] It should be noted that this solution can be used in the server where the data middle station is located. The data middle station may include alarm rule templates, preset alarm rule engines and preset alarm execution engines, as well as alarm sources that have external relationships, notification platforms and platforms corresponding to system functions, etc.; in the quality inspection scenario in the financial business scenario, the associated task is the quality inspectors going to work. If the dependent tasks of the associated tasks are not completed within the specified time, then after exceeding the specified time, the corresponding target alarm information will be generated to alarm.

[0022] In the embodiment of step S10 to step S30, the alarm information of alarm sources of different system parties can be processed by aggregating into a preset alarm rule template, a preset alarm rule engine and a preset alarm execution engine. Different teams can be processed, and the business does not need to pay attention to technical indicators and details, which effectively reduces alarm noise and improves operation and maintenance efficiency.

[0023] Furthermore, the alarm information from different alarm sources is obtained through the preset alarm rule template, including: Acquire a service alarm template associated with the alarm information; the service alarm template is associated with the alarm source; After the midway point and the end point in the service alarm template are mapped to different alarm sources, the alarm information of different alarm sources is obtained.

[0024] Understandably, the business alarm template may be different in different business scenarios. The corresponding alarm rules are determined by the alarm information, and then the corresponding alarm template can be determined by the alarm rules. Each alarm template can define the association between the alarm information and the alarm source, what alarm information appears for what alarm source, etc., wherein the format of the business alarm template can be in the form of a table format, and different alarm source information, midpoint information and end point information are defined in the table; the midpoint and the end point can be the process nodes corresponding to the template, and the purpose of setting the midpoint and the end point is to be mapped to different alarm sources to establish a link relationship. More specifically, the midpoint can be a node used to temporarily store or forward the alarm information during the transmission and processing of the alarm information, and the end point can be the final receiving point (also a checkpoint) of the alarm information; This embodiment uses business alarm templates and mapping mechanisms to ensure that alarm information is accurately sent to relevant processing systems or personnel, which helps to reduce false alarms and missed alarms and improve the accuracy and efficiency of alarm processing; business alarm templates can be dynamically updated and adjusted according to changes in business needs and alarm sources, and can adapt to different business scenarios and alarm needs, enhancing the scalability and flexibility of the system.

[0025] Furthermore, before obtaining the alarm information from different alarm sources through the preset alarm rule template, the method further includes: Determine the corresponding core business indicators according to different business scenarios; Setting different business alarm thresholds on the preset alarm rule template according to the core business indicators; Understandably, the core business indicators can be adjusted according to specific scenarios. For example, the tasks that business personnel are concerned about will be adjusted over time. However, in different scenarios, the means used to determine the method used can use a specific keyword recognition model. The pre-trained model can be used to determine the corresponding core business indicators according to different application scenarios. For example, in the quality inspection business scenario, the core business indicator can be the conversion time of phonetic characters. The business alarm threshold has different values ​​in different business scenarios. The business alarm threshold corresponding to the corresponding business scenario can be pre-set. After the matters corresponding to the current scenario match the matters of the business scenario, the alarm threshold corresponding to the business scenario is determined for the current scenario. For example, the quality inspection business is concerned about whether all phonetic characters at 8:00 in the morning have been uploaded to the quality inspection database. This is a quality inspection business alarm threshold that a business is concerned about. After the midway point and the end point in the service alarm template are mapped to different alarm sources, the alarm information of different alarm sources is obtained, including: When it is determined that the current situation reaches the service alarm threshold, the alarm information of different alarm sources is obtained by mapping the midpoints and end points in the service alarm template to different alarm sources.

[0026] It can be understood that by setting the midway points and end points, the business scenarios that reach the alarm threshold can be processed and the conditions of the corresponding nodes can be checked. The alarm threshold is set based on the minimum time required by the business. For example, the quality inspector's quality inspection business is to conduct manual + machine inspection of the content of the voice-to-text conversion to determine whether there are any words or routines that violate regulations or laws. The quality inspector goes to work at 8:30 in the morning, so the completion time of the associated related tasks must be completed by 8:00, and the dependent tasks of these associated tasks require an earlier completion time. The current situation exceeds the specified completion time, and it is necessary to generate an alarm alarm corresponding to the alarm source; the alarm threshold set in this embodiment can be used to determine whether alarm information is received from different alarm sources, and to respond to the alarm information in a timely manner.

[0027] Furthermore, before obtaining the alarm information from different alarm sources through the preset alarm rule template, the method further includes: After tracing and analyzing the service sources, the different alarm sources are classified in advance through the preset alarm rule template; each successfully classified alarm source corresponds to a category of alarm information.

[0028] Understandably, the purpose of business traceability analysis is to deeply understand each link and process of the business, and to clarify the possible location and cause of each alarm source. The process of traceability analysis can start from monitoring the entire business activity, obtaining the key information fed back by the entire business, and classifying and summarizing the key information. Specifically, it can include penetrating the enterprise strategy into performance indicators, and then further penetrating into the business system and data collection system, and finally locating the responsible unit and business activities; classification processing can be classified according to the nature and importance of matching alarm sources. Each successfully classified alarm source corresponds to a category of alarm information, among which, classification processing can be based on factors such as the severity of the alarm, the scope of impact, and the degree of urgency; according to the classification results, the corresponding alarm information is generated, and the alarm information can include key information such as the alarm source, alarm type, alarm level, trigger time, and scope of impact, so that relevant personnel can quickly understand the alarm situation and take corresponding countermeasures; This embodiment classifies and processes the alarm sources after business source tracing analysis through a preset alarm rule template, thereby ensuring the accuracy and timeliness of the alarm information and providing a strong guarantee for the stable operation of the enterprise.

[0029] Further, after the alarm information is processed by the preset alarm rule engine, target alarm information is obtained, including: After performing an integrity check on the key fields in the alarm information through the preset alarm rule engine, the first alarm information is obtained; Deduplication processing is performed on the multi-dimensional information in the first alarm information by using the preset alarm rule engine to obtain second alarm information; The preset alarm rule engine is used to compress similar alarm contents in the second alarm information to obtain the target alarm information.

[0030] Understandably, integrity check is mainly used to detect whether the alarm information contains all necessary fields and whether the field values ​​are complete and valid; deduplication processing is mainly used to process the repeated first alarm information received by the data center; compression processing is mainly used to process a large number of similar alarm information generated in a short period of time, and multiple alarms are combined into a comprehensive alarm through alarm compression technology to reduce alarm noise and improve the efficiency of alarm processing; Specifically, parse the received alarm information, extract key fields, such as alarm content, timestamp, system identifier, etc., determine whether the alarm information contains all necessary fields through the extracted key fields, and determine whether the field values ​​corresponding to the key fields are complete and valid; pre-process the received first alarm information, including removing irrelevant characters, formatting field values, etc., match the first alarm information using multi-dimensional information such as alarm content, timestamp, system identifier, etc. If multiple first alarm information are highly similar or identical in dimension, they are considered to be duplicates, and deduplicate the duplicate first alarm information based on the matching results; use the matching algorithm to identify a large number of similar second alarm information generated in a short period of time. The identification of similar second alarm information can be judged based on the similarity of information such as alarm content, timestamp, system identifier, etc., compress the identified similar second alarm information, and the compression strategy may include merging similar alarm information, extracting common features to generate comprehensive alarm information, etc. Generate comprehensive alarm information based on the compression processing results, and the comprehensive alarm information may contain the common features and key information of all similar alarms; This implementation example plays an important role in processing the alarm information received by the data center through integrity checking, deduplication algorithm and matching algorithm, which jointly ensures the accuracy, completeness and efficiency of the alarm information, reduces alarm noise, and provides strong support for the company's business operations.

[0031] Further, after the target alarm information is executed and processed by the preset alarm execution engine, the notification or display of the target alarm information is completed, including: Acquire an alarm type corresponding to the target alarm information through the preset alarm acquisition mechanism alarm; Connecting the preset alarm execution engine to the corresponding alarm notification executor under the alarm type; The target alarm information is notified or displayed through the alarm notification executor.

[0032] Understandably, the alarm type is a label that classifies alarm information, which helps the system take corresponding processing measures according to different types of alarms; the alarm execution engine is the core component of the system, responsible for calling the corresponding alarm notification executor according to the alarm type, and the alarm notification executor is the component that actually executes the alarm notification or display operation, such as sending SMS, email, and pushing messages to the user interface; Specifically, through the preset alarm acquisition mechanism, the alarm type corresponding to the target alarm information is identified and extracted, which is usually based on specific fields or attributes of the alarm information, such as alarm code, alarm description or alarm level; according to the identified alarm type, the corresponding alarm notification executor is connected through the preset alarm execution engine; the target alarm information is notified or displayed through the alarm notification executor, and the specific operation depends on the type and configuration of the alarm notification executor. If the alarm notification executor is an SMS sender, the system will send a text message containing the alarm information to the specified mobile phone number. If the alarm notification executor is a user interface pusher, a pop-up window or notification bar containing the alarm information will be displayed on the user interface to complete the notification or display of the target alarm information; This embodiment realizes automatic identification, classification and processing of target alarm information through preset alarm acquisition, alarm execution engine and alarm notification executor, which helps to improve the efficiency and accuracy of alarm processing and ensure that relevant personnel can receive alarm information in time and take corresponding response measures. At the same time, by flexibly configuring the alarm notification executor, the system can also meet the alarm notification needs in different scenarios.

[0033] Further, after the preset alarm execution engine executes the target alarm information and completes the notification or display of the target alarm information, it also includes: triggering a system function for the target warning information according to a preset historical rule or the importance of the target warning information; Complete the alarm processing of the target alarm information according to the system function.

[0034] Understandably, the preset historical rule refers to the system function that has been triggered the most times in history after the last similar target alarm information appeared; the importance of the target alarm information is bound to the system function, and when the importance level of the target alarm information is very high, the system function that attracts the attention of the corresponding personnel can be determined; the system function is to select the claim (no longer remind other teams), upgrade (leadership assistance is required), collaboration (customized addition of co-processors) and other functions for the target alarm information after the business / corresponding development and operation and maintenance receives the notification or message, so as to finally complete the alarm processing by cooperating with other parties; This embodiment combines the target alarm information with other systems for alarm processing based on the historical rules or the importance of the target alarm information, so as to improve the alarm processing efficiency of the target alarm information.

[0035] In summary, the above provides a method for processing alarm information, wherein an output vector is obtained after encoding the phoneme text by a preset text encoder; a global speaker representation is obtained after encoding the speaker prompt language by a preset speaker encoder; a rhythm representation vector is obtained after predicting the output vector and the global speaker representation by a preset rhythm module; and reconstructed speech data is obtained after decoding the rhythm representation vector by a preset decoder. This scheme can process the alarm information of alarm sources of different system parties by aggregating into a preset alarm rule template, a preset alarm rule engine and a preset alarm execution engine, and can be processed for different teams, and the business does not need to pay attention to technical indicators and details, effectively reducing alarm noise and improving operation and maintenance efficiency; alarm noise reduction can improve the response speed and processing efficiency of alarms, which helps to restore the normal operation of the business faster; due to the reduction in the number of alarms and the improvement of operation and maintenance efficiency, the operation and maintenance cost can be reduced; the business interruption time of data-related tasks can be shortened by alarm noise reduction, and the fault recovery time can be shortened, thereby significantly improving the stability and reliability of the business.

[0036] It should be understood that the order of execution of the steps in the above embodiment does not necessarily mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present invention.

[0037] In one embodiment, a device for processing alarm information is provided, and the device for processing alarm information corresponds to the method for processing alarm information in the above embodiment. Figure 3 As shown, the alarm information processing device includes an acquisition module 11, an alarm processing module 12 and an execution processing module 13. The detailed description of each functional module is as follows: The acquisition module 11 is used to obtain alarm information from different alarm sources through a preset alarm rule template; An alarm processing module 12 is used to obtain target alarm information after performing alarm processing on the alarm information through a preset alarm rule engine; The execution processing module 13 is used to complete the notification or display of the target alarm information after executing the target alarm information through a preset alarm execution engine.

[0038] Furthermore, the acquisition module includes: A first acquisition unit is used to acquire a service alarm template associated with the alarm information; the service alarm template is associated with the alarm source; The second acquisition unit is used to acquire the alarm information of different alarm sources after mapping the midpoints and end points in the service alarm template to different alarm sources.

[0039] Furthermore, the acquisition module includes: A determination unit is used to determine corresponding core business indicators according to different business scenarios; A setting unit, configured to set different business alarm thresholds on the preset alarm rule template according to the core business indicator; The third acquisition unit is used to acquire the alarm information of different alarm sources after mapping the midpoints and end points in the service alarm template to different alarm sources when it is determined that the current situation reaches the service alarm threshold.

[0040] Furthermore, the warning information processing device further includes: The classification processing module is used to classify and process different alarm sources in advance through the preset alarm rule template after business tracing analysis; each successfully classified alarm source corresponds to a category of alarm information.

[0041] Furthermore, the alarm processing module includes: An integrity checking unit, configured to obtain first alarm information after performing an integrity check on key fields in the alarm information through the preset alarm rule engine; a deduplication processing unit, configured to perform deduplication processing on the multi-dimensional information in the first alarm information through the preset alarm rule engine to obtain second alarm information; A compression processing unit is used to compress similar alarm content in the second alarm information through the preset alarm rule engine to obtain the target alarm information.

[0042] Furthermore, the execution processing module includes: A fourth acquisition unit, configured to acquire an alarm type corresponding to the target alarm information through the preset alarm acquisition mechanism; A docking unit, used to dock the corresponding alarm notification executor under the alarm type through the preset alarm execution engine; A notification or display processing unit is used to perform notification or display processing on the target alarm information through the alarm notification executor.

[0043] Furthermore, the warning information processing device further includes: A trigger module, used to trigger a system function for the target warning information according to a preset historical rule or the importance of the target warning information; The notification or display module is used to complete the alarm processing of the target alarm information according to the system function.

[0044] For the specific definition of the alarm information processing device, please refer to the definition of the alarm information processing method above, which will not be repeated here. Each module in the above alarm information processing device can be implemented in whole or in part by software, hardware and a combination thereof. The above modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0045] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Figure 4 As shown. The computer device includes a processor, a memory, a network interface and a database connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data involved in the method for processing alarm information. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a method for processing alarm information is implemented.

[0046] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the method for processing alarm information in the above embodiment are implemented, such as Figure 2 Steps S10 to S30 shown include the following steps: Obtain alarm information from different alarm sources through preset alarm rule templates; After the alarm information is processed by a preset alarm rule engine, target alarm information is obtained; After the target alarm information is executed and processed by a preset alarm execution engine, notification or display of the target alarm information is completed.

[0047] Alternatively, when the processor executes the computer program, the functions of each module / unit of the alarm information processing device in the above embodiment are realized, for example Figure 3 The functions of modules 11 to 13 are shown in Figure 1. To avoid repetition, they will not be described here.

[0048] In one embodiment, a computer-readable storage medium is provided on which a computer program is stored. When the computer program is executed by a processor, the steps of the method for processing alarm information in the above embodiment are implemented, for example Figure 2Steps S10 to S30 shown include the following steps: Obtain alarm information from different alarm sources through preset alarm rule templates; After the alarm information is processed by a preset alarm rule engine, target alarm information is obtained; After the target alarm information is executed and processed by a preset alarm execution engine, notification or display of the target alarm information is completed.

[0049] Alternatively, when the computer program is executed by the processor, the functions of each module / unit of the alarm information processing device in the above embodiment are realized, for example Figure 3 The functions of modules 11 to 13 are shown in Figure 1. To avoid repetition, they will not be described here.

[0050] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided by the present invention can include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0051] Those skilled in the art can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above.

[0052] The embodiments described above are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be included in the protection scope of the present invention.

Claims

1. A method for processing alarm information, characterized in that: include: Obtain alarm information from different alarm sources through preset alarm rule templates; Performing alarm processing on the alarm information through a preset alarm rule engine to obtain target alarm information; After the target alarm information is executed and processed by a preset alarm execution engine, notification or display of the target alarm information is completed.

2. The method for processing alarm information according to claim 1, characterized in that: The alarm information from different alarm sources is obtained through the preset alarm rule template, including: Acquire a service alarm template associated with the alarm information; the service alarm template is associated with the alarm source; After the midway point and the end point in the service alarm template are mapped to different alarm sources, the alarm information of different alarm sources is obtained.

3. The method for processing alarm information according to claim 2, characterized in that: Before obtaining the alarm information from different alarm sources through the preset alarm rule template, the method further includes: Determine the corresponding core business indicators according to different business scenarios; Setting different business alarm thresholds on the preset alarm rule template according to the core business indicators; After the midway point and the end point in the service alarm template are mapped to different alarm sources, the alarm information of different alarm sources is obtained, including: When it is determined that the current situation reaches the service alarm threshold, the alarm information of different alarm sources is obtained by mapping the midpoints and end points in the service alarm template to different alarm sources.

4. The method for processing alarm information according to any one of claims 1 to 3, characterized in that: Before obtaining the alarm information from different alarm sources through the preset alarm rule template, the method further includes: After tracing and analyzing the service sources, the different alarm sources are classified in advance through the preset alarm rule template; each successfully classified alarm source corresponds to a category of alarm information.

5. The method for processing alarm information according to claim 1, characterized in that: After the alarm information is processed by the preset alarm rule engine, target alarm information is obtained, including: After performing an integrity check on the key fields in the alarm information through the preset alarm rule engine, the first alarm information is obtained; Deduplication processing is performed on the multi-dimensional information in the first alarm information by using the preset alarm rule engine to obtain second alarm information; The preset alarm rule engine is used to compress similar alarm contents in the second alarm information to obtain the target alarm information.

6. The method for processing alarm information according to claim 1, characterized in that: After the target alarm information is executed and processed by the preset alarm execution engine, the notification or display of the target alarm information is completed, including: Acquire the alarm type corresponding to the target alarm information through the preset alarm acquisition mechanism; Connecting the preset alarm execution engine to the corresponding alarm notification executor under the alarm type; The target alarm information is notified or displayed through the alarm notification executor.

7. The method for processing alarm information according to claim 1, characterized in that: After the target alarm information is executed and processed by the preset alarm execution engine, and the notification or display of the target alarm information is completed, the method further includes: triggering a system function for the target warning information according to a preset historical rule or the importance of the target warning information; Complete the alarm processing of the target alarm information according to the system function.

8. A device for processing alarm information, characterized in that: include: The acquisition module is used to obtain alarm information from different alarm sources through a preset alarm rule template; An alarm processing module is used to obtain target alarm information after performing alarm processing on the alarm information through a preset alarm rule engine; The execution processing module is used to complete the notification or display of the target alarm information after executing the target alarm information through a preset alarm execution engine.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method for processing alarm information according to any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method for processing alarm information as claimed in any one of claims 1 to 7 is implemented.

Images