Server management method and device, equipment, storage medium and program product

Abstract

The invention relates to a server management method and device, equipment, a storage medium and a program product. The method comprises the following steps: controlling a log information capture program in a log capture toolkit to run, and obtaining multiple pieces of log information in a server running process; under the condition that the multiple pieces of log information are obtained, controlling an exception detection program in the log capture toolkit to run, and obtaining exception log information in the multiple pieces of log information and exception reasons of the exception log information; and managing the server according to the abnormal log information and the abnormal reason of the abnormal log information. By adopting the method, the server management efficiency can be improved.

Description

Technical Field

[0001] The present application relates to the field of server technology, and in particular to a server management method, apparatus, device, storage medium and program product. Background Art

[0002] In modern network and information technology projects, the server is one of the key infrastructures, and server management is particularly important in modern network and information technology projects.

[0003] In the conventional technology, the log information of the server is obtained by manual operation, and the server is managed according to the log information of the server. However, the conventional technology has the problem of low efficiency in server management. Summary of the invention

[0004] Based on this, it is necessary to provide a server management method, device, equipment, storage medium and program product that can improve the efficiency of server management in response to the above technical problems.

[0005] In a first aspect, the present application provides a server management method. The method comprises:

[0006] Control the operation of the log information capture program in the log capture toolkit to obtain multiple log information during the server operation process;

[0007] In the case of acquiring the plurality of log information, controlling the operation of the abnormality detection program in the log capture toolkit to acquire abnormal log information and abnormal reasons of the abnormal log information from the plurality of log information;

[0008] The server is managed according to the abnormal log information and the abnormal cause of the abnormal log information.

[0009] In one embodiment, the controlling the running of the anomaly detection program in the log capture toolkit to obtain the abnormal log information and the abnormal cause of the abnormal log information in each log information includes:

[0010] Controlling the operation of an anomaly detection program in the log capture toolkit to obtain standard information corresponding to the multiple log information;

[0011] Compare each of the log information with the standard information corresponding to each of the log information to obtain the abnormal log information and the abnormal reason of the abnormal log information.

[0012] In one embodiment, comparing each of the log information with the standard information corresponding to each of the log information to obtain the abnormal log information and the abnormal reason of the abnormal log information includes:

[0013] Determining the log information that is inconsistent with the standard information corresponding to each of the log information as the abnormal log information;

[0014] The abnormal cause of the abnormal information is determined according to the abnormal log information and the standard information corresponding to the abnormal log information.

[0015] In one embodiment, the log information capture program includes multiple subprograms; the log information capture program in the control log capture toolkit runs to obtain multiple log information during the server operation process, including:

[0016] Control each of the subprograms to send acquisition instructions to each component and system in the server to acquire each of the log information.

[0017] In one embodiment, the log information capture program also includes a judgment subroutine, and the method further includes:

[0018] Controlling the judgment subroutine to run and obtaining a judgment result; the judgment result is used to indicate whether the log information of each component and system in the server has been obtained;

[0019] If the judgment result indicates that the log information of any component or system in the server is not obtained, the steps of repeatedly executing the log information capture program in the control log capture toolkit to obtain multiple log information during the server operation process are repeated.

[0020] In one embodiment, the log information capture program includes an independent redundant disk array information capture subroutine, a hard disk information capture subroutine, a basic input and output system information capture subroutine, a baseboard management controller information capture subroutine, a mainboard information capture subroutine and a system information capture subroutine.

[0021] In one embodiment, the log capture toolkit also includes a log information classification program, and the method further includes:

[0022] Controlling the log information classification program to run, classifying each log information, and obtaining the classification result of each log information;

[0023] Based on the classification results and the interface information of the preset web page interface, the classification results of each log information are displayed.

[0024] In a second aspect, the present application also provides a server management device. The device includes:

[0025] The first acquisition module is used to control the operation of the log information capture program in the log capture toolkit to obtain multiple log information during the operation of the server;

[0026] A second acquisition module is used to control the operation of the anomaly detection program in the log capture toolkit to acquire the abnormal log information and the abnormal cause of the abnormal log information from the multiple log information when the multiple log information are acquired;

[0027] The management module is used to manage the server according to the abnormal log information and the abnormal reason of the abnormal log information.

[0028] In a third aspect, the present application further provides a computer device, wherein the computer device comprises a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the steps of the method described in the first aspect are implemented.

[0029] In a fourth aspect, the present application further provides a computer-readable storage medium, wherein a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the steps of the method described in the first aspect are implemented.

[0030] In a fifth aspect, the present application further provides a computer program product, wherein the computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the method described in the first aspect are implemented.

[0031] The above-mentioned server management method, device, equipment, storage medium and program product obtain multiple log information during the operation of the server by controlling the operation of the log information capture program in the log capture toolkit. When multiple log information is obtained, the anomaly detection program in the log capture toolkit is controlled to run to obtain abnormal log information and abnormal reasons of the abnormal log information in the multiple log information. Compared with the traditional technology, since the log information capture program can be used to timely obtain multiple log information during the operation of the server, the anomaly detection program can be used to timely perform anomaly detection on the obtained log information, and the server anomaly can be efficiently determined according to the log information during the operation of the server. Then, according to the determined abnormal log information and the abnormal reason of the abnormal log information, the operation and maintenance personnel can timely repair the server according to the abnormal log information and the abnormal reason, thereby improving the efficiency of server management. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 An application environment diagram of a server management method in an embodiment;

[0033] Figure 2 A schematic diagram of a flow chart of a server management method in an embodiment;

[0034] Figure 3is a flow chart of a server management method in another embodiment;

[0035] Figure 4 is a flow chart of a server management method in another embodiment;

[0036] Figure 5 is a flow chart of a server management method in another embodiment;

[0037] Figure 6 is a flow chart of a server management method in another embodiment;

[0038] Figure 7 is a structural block diagram of a server management device in one embodiment;

[0039] Figure 8 FIG. 4 is a structural block diagram of a server management device in another embodiment. DETAILED DESCRIPTION

[0040] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0041] In traditional technology, the management of servers is usually done by manually capturing the log information of the servers, and then monitoring the servers based on the analysis results of the log information. However, the efficiency of manually capturing log information is low, and the capturing process requires human intervention, which may cause missed captures due to subjective factors, resulting in low efficiency in server management. Moreover, in traditional technology, the log information during the operation of the server is stored on the disk in the form of logs, and the operation and maintenance personnel cannot reasonably classify and manage the log information, which reduces the utilization rate of the log information, thereby also leading to low efficiency in server management. Based on this, the present application provides a server management method for improving the management efficiency of the server.

[0042] The server management method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown. Figure 1 A computer device is provided, which can be a server, and its internal structure diagram can be as follows Figure 1As shown. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and the external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, a server management method is implemented. The display unit of the computer device is used to form a visually visible picture, which can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device shell, or an external keyboard, touchpad or mouse.

[0043] Those skilled in the art will understand that Figure 1 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0044] In one embodiment, Figure 2 As shown, a server management method is provided, which is applied to Figure 1 The server in the example is used to illustrate the following steps:

[0045] S201, controlling the log information capture program in the log capture toolkit to run, and obtaining a plurality of log information during the operation of the server.

[0046] Among them, log information refers to a file that records the operation information of the server, which is a log file created by the server itself during the operation of the server. For example, the system log information during the operation of the server can be used to record the hardware, software and system problems in the system. It can be understood that the system log information during the operation of the server can also be used to monitor the events that occur in the system, and the system log information can be used to check the cause of the system problem, or to find the attack traces of network attackers; the log information of the web server during the operation of the server can contain the historical record of page requests, such as the address of the client, the request time, the requested web page and other information. Through the program in the log capture toolkit that captures multiple log information of the server, the recorded log information can be obtained from the server. In this embodiment, the log information capture program in the log capture toolkit can capture log information of each hardware and software in the server respectively, for example, the log information of hardware such as the processor, memory, and driver can be obtained, and the log information of software such as the web server and application server can also be obtained.

[0047] As an optional implementation, the log information capture program may be configured with different interfaces to respectively obtain the log information of the hardware or software in the server, thereby obtaining multiple log information in the server.

[0048] Optionally, in this embodiment, the log information capture program in the log capture toolkit can be controlled to run automatically according to a preset time interval to obtain multiple log information during the server operation process; or, the log information capture program in the log capture toolkit can be controlled according to actual needs to obtain the corresponding log information during the server operation process.

[0049] S202, when multiple log information is obtained, control the abnormality detection program in the log capture toolkit to run, and obtain abnormal log information and abnormal reasons of the abnormal log information from the multiple log information.

[0050] Among them, the anomaly detection program is a program for determining whether there is abnormal log information in the log information. Further, after determining the abnormal log information in the operation process of the server, the abnormal cause of the abnormal log information can also be determined based on the abnormal log information. In this embodiment, when multiple log information is obtained, the multiple log information obtained can be used as input information of the anomaly detection program, the anomaly detection program can be run, and the multiple log information can be detected to obtain abnormal log information, and the abnormal cause of the abnormal log information can be further determined based on the type of the abnormal log information. Exemplarily, if the log information indicates that the operation state of the server is abnormal, the log information corresponding to the abnormal operation state can be determined as the abnormal log information. If the type of the abnormal log information is an interruption log, it can be determined that the abnormal cause of the abnormal log information is caused by an interruption.

[0051] It should be noted that the log information generated by different components in the server may contain abnormal log information. If the abnormality detection program is running and identifies that the log information contains keywords indicating that the log information is abnormal, the log information corresponding to the keyword can be determined as abnormal log information, and the abnormal reason of the abnormal log information can be determined based on the abnormal log information. For example, if the log information contains "error", it indicates that the log information is abnormal log information. If the log information is "command not fonud", it can be determined that the abnormal reason of the abnormal log information is that the command was not found.

[0052] As an optional implementation, the exception log information and the exception causes of the exception log information obtained by running the exception detection program can be stored in a database. When other server management programs need to obtain the exception log information and the exception causes of the exception log information, they can be queried from the database through a data query program and returned to other server management programs.

[0053] S203: managing the server according to the abnormal log information and the abnormal reason of the abnormal log information.

[0054] It should be noted that the server's log information can be used to determine whether the server's operating status is normal, thereby managing the server. For example, the CPU's log information can be used to determine whether the CPU is overloaded or whether there is resource occupation. Alternatively, the request information received by the server can be used to determine whether there are malicious requests, thereby determining whether there are problems with the server's firewall configuration.

[0055] In this embodiment, whether the operating status of the server is normal can be determined based on the abnormal log information, and when it is determined that the operating status of the server is abnormal, the abnormal situation is processed according to the abnormal cause of the abnormal log information, thereby realizing the management of the server.

[0056] In the above-mentioned server management method, by controlling the operation of the log information capture program in the log capture toolkit, multiple log information in the server operation process is obtained. When multiple log information is obtained, the anomaly detection program in the log capture toolkit is controlled to run to obtain abnormal log information and abnormal reasons of the abnormal log information in the multiple log information. Compared with the traditional technology, since the log information capture program can be used to timely obtain multiple log information in the server operation process, the anomaly detection program can be used to timely perform anomaly detection on the obtained log information, and the server anomaly can be efficiently determined according to the log information in the server operation process. Then, according to the determined abnormal log information and the abnormal reason of the abnormal log information, the operation and maintenance personnel can repair the server in time according to the abnormal log information and the abnormal reason, thereby improving the efficiency of server management.

[0057] In the scenario where the anomaly detection program in the control log capture toolkit is run to obtain the abnormal log information and the abnormal reason of the abnormal log information in each log information, the obtained log information can be compared with the standard information, so as to determine the abnormal log information and the abnormal reason of the abnormal log information according to the comparison result. Figure 3 As shown, the above S202 includes:

[0058] S301, controlling the operation of an anomaly detection program in a log capture toolkit to obtain standard information corresponding to a plurality of log information.

[0059] Among them, the standard information corresponding to the log information refers to the log information generated by the server in normal operation, for example, the security log information generated by the server that has not been attacked by the network during operation, or the log information generated by the server with normal load during operation.

[0060] In this embodiment, the anomaly detection program in the log capture toolkit can be controlled to run, and the standard information corresponding to the multiple log information can be obtained from the memory of the server by running the calling function in the anomaly detection program.

[0061] S302: Compare each log information with the standard information corresponding to each log information to obtain abnormal log information and abnormal reasons of the abnormal log information.

[0062] It is understandable that when the server operating status is abnormal, there will be differences between the log information corresponding to the abnormal operating status and the log information corresponding to the normal operating status. Therefore, by comparing the obtained log information with the standard information corresponding to each log information, it can be determined whether there is abnormal log information in the obtained log information.

[0063] Optional, such as Figure 4 As shown, the process of obtaining the abnormal log information and the abnormal cause of the abnormal log information may include:

[0064] S401: Determine the log information that is inconsistent with the standard information corresponding to each log information as abnormal log information.

[0065] In this embodiment, each log information can be compared with the standard information corresponding to each log information through an anomaly detection program. If there is a difference between a certain log information and the standard information corresponding to the log information, the log information in the log information that is inconsistent with the standard information is determined as abnormal log information. For example, if the response time in the log information of the server response request is 3s, and the response time in the standard information corresponding to the log information is 300ms, then the response time in the log information is abnormal information.

[0066] S402: Determine the abnormal cause of the abnormal information according to the abnormal log information and the standard information corresponding to the abnormal log information.

[0067] In this embodiment, the exception type of the exception information can be determined based on the exception log information and the standard information corresponding to the exception log information, and then the exception cause of the exception information can be determined based on the exception type. For example, if the type of the exception log information is "command not found", it can be determined that the exception cause of the exception log information is that the command cannot be found; if the exception information indicates the response time of the server, and the exception type of the exception information is that there is a time difference with the standard information, it can be determined that the exception cause of the exception log information is insufficient server resources.

[0068] In the above implementation mode, by determining the log information in each log information that is inconsistent with the standard information corresponding to the log information as abnormal log information, the abnormal log information can be quickly determined, so that the abnormal cause of the abnormal information can be determined based on the abnormal log information and the standard information corresponding to the abnormal log information, thereby improving the efficiency and accuracy of determining whether the server is abnormal based on the log information.

[0069] In this embodiment, by controlling the operation of the anomaly detection program in the log capture toolkit, standard information corresponding to multiple log information can be obtained, and each log information is compared with the standard information corresponding to each log information to obtain abnormal log information and the abnormal cause of the abnormal log information. Compared with manually determining the abnormal log information and the abnormal cause of the abnormal log information, the abnormal log information and the abnormal cause of the abnormal log information obtained by running the anomaly detection program can improve the accuracy and efficiency of the determined abnormal log information and the abnormal cause of the abnormal log information, thereby improving the efficiency of server management.

[0070] In the scenario where the log information capture program in the above-mentioned control log capture toolkit is run to obtain multiple log information during the operation of the server, the log information capture program can obtain multiple log information by sending acquisition instructions to each component and system in the server. In one embodiment, the log information capture program includes multiple subprograms, and the above-mentioned S201 includes: controlling each subprogram to send acquisition instructions to each component and system in the server respectively to obtain each log information.

[0071] The acquisition instruction is used to acquire the log information generated in each component and system. In this embodiment, the acquisition instruction can be generated according to the acquisition requirements of the log information input by the user. It should be noted that the operating principles of the components and systems in the server are different. In order to improve the management efficiency of the server, the log information of each component and system can be acquired by running different log information capture programs at the same time. The log information capture program can include multiple subroutines, each of which is used to acquire the log information of different components or systems.

[0072] Optionally, the log information capture program may include an independent redundant disk array information capture subroutine, a hard disk information capture subroutine, a basic input and output system information capture subroutine, a baseboard management controller information capture subroutine, a mainboard information capture subroutine and a system information capture subroutine. It can be understood that the independent redundant disk array information capture subroutine may include a calling function for transmitting information with the independent redundant disk array, and the log information of the independent redundant disk array can be obtained by running the calling function; the hard disk information capture subroutine may include a calling function for transmitting information with the hard disk, and the log information of the hard disk can be obtained by running the calling function; the basic input and output system information capture subroutine may include a calling function for transmitting information with the basic input and output system, and the log information of the basic input and output system can be obtained by running the calling function; the baseboard management controller information capture subroutine may include a calling function for transmitting information with the web server, and the log information corresponding to the baseboard management control can be obtained by obtaining the cookie recorded by the web server in the black box by running the calling function; the mainboard information capture subroutine may include an instruction for obtaining the mainboard log information, and the log information of the mainboard can be obtained by running the instruction; the system information capture subroutine may include an instruction for obtaining the system log information, and the system log information can be obtained by running the instruction.

[0073] In this embodiment, each subroutine can be controlled to send acquisition instructions to each component and system in the server by calling a function, so that each component and system can return the corresponding log information to the subroutine according to the acquisition instruction, thereby obtaining the corresponding log information of each component and system.

[0074] In this embodiment, by controlling each subroutine to send acquisition instructions to each component and system in the server respectively to obtain each log information, the log information of different components and systems in the server can be obtained respectively, avoiding confusion in the obtained log information, thereby improving the efficiency of managing each component and system in the server according to the log information.

[0075] In the scenario where the log information capture program in the control log capture toolkit is run to obtain multiple log information during the operation of the server, there may be a situation where the log information of a component or system is not obtained. Therefore, a judgment subroutine can be used to determine whether the log information of each component and system in the server is obtained. In one embodiment, the log information capture program also includes a judgment subroutine, such as Figure 5 As shown, the above method also includes:

[0076] S501, controlling the judgment subroutine to run and obtaining the judgment result; the judgment result is used to indicate whether the log information of each component and system in the server has been obtained.

[0077] The judgment subroutine is used to judge whether the acquired log information contains log information corresponding to each component and system in the server. It should be noted that each component or system in the server corresponding to the log information can be determined through the log information.

[0078] In this embodiment, when multiple log information of the server is obtained, the judgment subroutine can be controlled to run, and each obtained log information is identified according to the algorithm corresponding to the judgment subroutine, and whether the log information corresponding to each component and system in the server exists is determined according to the identification result. If all exist, it means that the log information of each component and system in the server has been obtained; if a certain log information does not exist, it means that the log information of the component or system corresponding to the log information has not been obtained.

[0079] S502, if the judgment result indicates that the log information of any component or system in the server is not obtained, then repeatedly execute the step of controlling the operation of the log information capture program in the log capture toolkit to obtain multiple log information during the operation of the server.

[0080] It should be noted that if the log information of any component or system in the server is not obtained, there will be deviations in the operating status of the server determined based on the log information of the server, and it will be impossible to accurately determine whether the server is normal, which will affect the efficiency of managing the server. Therefore, if the log information of any component or system is not obtained, it is necessary to repeat the steps of obtaining multiple log information during the server operation process until the log information of each component or system in the server is obtained.

[0081] In this embodiment, the failure to obtain log information of any component or system in the server can be used as a trigger condition. If the log information of any component or system in the server is not obtained, the log information capture program is triggered to run automatically to re-obtain multiple log information during the server operation process.

[0082] In this embodiment, by controlling the running of the judgment subroutine, a judgment result is obtained to indicate whether the log information of each component and system in the server has been obtained. Therefore, when the judgment result indicates that the log information of any component or system in the server has not been obtained, the steps of controlling the running of the log information capture program in the log capture toolkit to obtain multiple log information during the operation of the server can be repeated, thereby ensuring that the log information of each component and system in the server is obtained, thereby improving the efficiency of managing the server based on the obtained log information.

[0083] In order to facilitate the operation and maintenance personnel to manage the server according to the log information, the acquired log information can be classified and the classification results can be displayed through the web interface. The specific process of classifying and displaying the log information is described in detail below. In one embodiment, the log capture toolkit also includes a log information classification program, such as Figure 6 As shown, the above method also includes:

[0084] S601, controlling the operation of the log information classification program, classifying each log information, and obtaining the classification result of each log information.

[0085] Among them, the log information classification program is used to classify the log information. Optionally, in this embodiment, the log information classification program can be controlled to run, determine the information type corresponding to each log information, and then classify the log information according to the information type to obtain the classification result of each log information; or, the log information classification program can be controlled to run, and according to the components and systems corresponding to each log information, the log information of the same component is classified into the same category, and the log information of the same system is classified into the same category, so as to obtain the classification result of each log information.

[0086] It is understandable that each type of log information in the classification result may include the acquired log information, and may also include abnormal log information of the acquired log information and the abnormal reason of the abnormal log information.

[0087] S602: Based on the classification results and the interface information of the preset web page interface, the classification results of each log information are displayed.

[0088] The interface information of the preset web page interface may include a page structure and page elements. For example, the page structure may include a navigation bar, columns, and text, and the page elements may include text, pictures, and the like.

[0089] In this embodiment, the classification results can be bound to the interface information of the web page interface by using page tags, and an interface generation program for the interaction logic of the classification results and interface information can be written in Python language. By running the interface generation program, a web page interface corresponding to the classification results can be generated, thereby displaying the classification results of each log information through the web page interface. Operation and maintenance personnel can obtain the corresponding log information in a classification result by clicking on a classification result in the web page interface.

[0090] In this embodiment, by controlling the operation of the log information classification program, each log information can be classified and the classification result of each log information can be obtained. Since the log information classification program can automatically classify each log information, the confusion of the obtained log information is avoided. Therefore, the classification result of each log information can be displayed based on the classification result and the interface information of the preset web page interface, so that the operation and maintenance personnel can conveniently and intuitively view the log information of the server through the web page interface, thereby improving the efficiency and convenience of managing the server according to the log information.

[0091] To facilitate understanding by those skilled in the art, the server management method provided by the present application is described in detail below. The method may include:

[0092] S1, controls the independent redundant disk array information capture subroutine, hard disk information capture subroutine, basic input and output system information capture subroutine, baseboard management controller information capture subroutine, mainboard information capture subroutine and system information capture subroutine in the log capture toolkit to run, and sends acquisition instructions to each component and system in the server respectively.

[0093] S2, respectively obtain the log information corresponding to each component and system during the operation of the server.

[0094] S3, controlling the judgment subroutine to run and obtaining the judgment result; the judgment result is used to indicate whether the log information of each component and system in the server has been obtained.

[0095] S4, if the judgment result indicates that the log information of any component or system in the server is not obtained, then repeatedly execute the steps of controlling the operation of the log information capture program in the log capture toolkit to obtain multiple log information during the operation of the server.

[0096] S5, when multiple log information is obtained, the anomaly detection program in the log capture toolkit is controlled to run.

[0097] S6, obtaining standard information corresponding to the plurality of log information by running an anomaly detection program.

[0098] S7, comparing each log information with the standard information corresponding to each log information, and determining the log information that is inconsistent with the standard information corresponding to each log information as abnormal log information.

[0099] S8, determining the abnormal cause of the abnormal information according to the abnormal log information and the standard information corresponding to the abnormal log information.

[0100] S9, controlling the log information classification program to run, classifying each log information, and obtaining the classification result of each log information.

[0101] S10, based on the classification results and the interface information of the preset web page interface, the classification results of each log information are displayed.

[0102] It should be noted that for the description in the above S1-S10, reference may be made to the relevant description in the above embodiment, and the effects are similar, which will not be repeated in this embodiment.

[0103] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0104] Based on the same inventive concept, the embodiment of the present application also provides a server management device for implementing the server management method involved above. The implementation solution provided by the device to solve the problem is similar to the implementation solution recorded in the above method, so the specific limitations in one or more server management device embodiments provided below can refer to the limitations on the server management method above, and will not be repeated here.

[0105] In one embodiment, Figure 7 As shown, a server management device is provided, comprising: a first acquisition module 10, a second acquisition module 11, and a management module 12, wherein:

[0106] The first acquisition module 10 is used to control the operation of the log information capture program in the log capture toolkit to obtain a plurality of log information during the operation of the server.

[0107] The second acquisition module 11 is used to control the operation of the abnormality detection program in the log capture toolkit to obtain abnormal log information and abnormal reasons of the abnormal log information from the multiple log information when multiple log information are obtained.

[0108] The management module 12 is used to manage the server according to the abnormal log information and the abnormal reasons of the abnormal log information.

[0109] The server management device provided in this embodiment can execute the above method embodiment, and its implementation principle and technical effect are similar, which will not be repeated here.

[0110] In one embodiment, Figure 8 As shown, the second acquisition module 11 includes: a first acquisition unit 111 and a second acquisition unit 112, wherein:

[0111] The first acquisition unit 111 is used to control the operation of the anomaly detection program in the log capture toolkit to acquire standard information corresponding to multiple log information.

[0112] The second acquisition unit 112 is used to compare each log information with the standard information corresponding to each log information, and acquire the abnormal log information and the abnormal reason of the abnormal log information.

[0113] The server management device provided in this embodiment can execute the above method embodiment, and its implementation principle and technical effect are similar, which will not be repeated here.

[0114] In one embodiment, please continue to refer to Figure 8 The second acquisition unit 112 is specifically used to: determine the log information that is inconsistent with the standard information corresponding to each log information as abnormal log information; and determine the abnormal cause of the abnormal information according to the abnormal log information and the standard information corresponding to the abnormal log information.

[0115] The server management device provided in this embodiment can execute the above method embodiment, and its implementation principle and technical effect are similar, which will not be repeated here.

[0116] In one embodiment, the log information capture program includes multiple subprograms. Please continue to refer to Figure 8 The first acquisition module 10 includes: a third acquisition unit 101, wherein:

[0117] The third acquisition unit 101 is used to control each subprogram to send an acquisition instruction to each component and system in the server to acquire each log information.

[0118] Optionally, the log information capture program includes an independent redundant disk array information capture subroutine, a hard disk information capture subroutine, a basic input and output system information capture subroutine, a baseboard management controller information capture subroutine, a mainboard information capture subroutine and a system information capture subroutine.

[0119] The server management device provided in this embodiment can execute the above method embodiment, and its implementation principle and technical effect are similar, which will not be repeated here.

[0120] In one embodiment, the log information capture program also includes a judgment subroutine, please continue to refer to Figure 8 The above device further includes: a third acquisition module 13 and a fourth acquisition module 14, wherein:

[0121] The third acquisition module 13 is used to control the execution of the judgment subroutine and obtain the judgment result; the judgment result is used to indicate whether the log information of each component and system in the server is obtained.

[0122] The fourth acquisition module 14 is used to repeatedly execute the steps of controlling the log information capture program in the log capture toolkit to obtain multiple log information during the operation of the server if the judgment result indicates that the log information of any component or system in the server has not been acquired.

[0123] The server management device provided in this embodiment can execute the above method embodiment, and its implementation principle and technical effect are similar, which will not be repeated here.

[0124] In one embodiment, the log capture toolkit also includes a log information classification program, please continue to refer to Figure 8 The above device further includes: a fifth acquisition module 15 and a display module 16, wherein:

[0125] The fifth acquisition module 15 is used to control the operation of the log information classification program, classify each log information, and obtain the classification result of each log information.

[0126] The display module 16 is used to display the classification results of each log information based on the classification results and the interface information of the preset web page interface.

[0127] The server management device provided in this embodiment can execute the above method embodiment, and its implementation principle and technical effect are similar, which will not be repeated here.

[0128] Each module in the above-mentioned server management device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module above.

[0129] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0130] Control the operation of the log information capture program in the log capture toolkit to obtain multiple log information during the server operation process;

[0131] When multiple log information is obtained, the abnormality detection program in the log capture toolkit is controlled to run, and abnormal log information and abnormal reasons of the abnormal log information are obtained from the multiple log information;

[0132] Manage the server based on the abnormal log information and the abnormal reasons of the abnormal log information.

[0133] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0134] Control the operation of the anomaly detection program in the log capture toolkit to obtain standard information corresponding to multiple log information;

[0135] Compare each log information with the standard information corresponding to each log information to obtain abnormal log information and abnormal reasons of the abnormal log information.

[0136] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0137] Determine the log information that is inconsistent with the standard information corresponding to each log information as abnormal log information;

[0138] Determine the abnormal cause of the abnormal information based on the abnormal log information and the standard information corresponding to the abnormal log information.

[0139] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0140] Control each subprogram to send acquisition instructions to each component and system in the server to obtain each log information.

[0141] Optionally, the log information capture program includes an independent redundant disk array information capture subroutine, a hard disk information capture subroutine, a basic input and output system information capture subroutine, a baseboard management controller information capture subroutine, a mainboard information capture subroutine and a system information capture subroutine.

[0142] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0143] Control the execution of the judgment subroutine and obtain the judgment result; the judgment result is used to indicate whether the log information of each component and system in the server has been obtained;

[0144] If the judgment result indicates that the log information of any component or system in the server is not obtained, the steps of controlling the operation of the log information capture program in the log capture toolkit to obtain multiple log information during the operation of the server are repeated.

[0145] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0146] Control the operation of the log information classification program, classify each log information, and obtain the classification result of each log information;

[0147] Based on the classification results and the interface information of the preset web page interface, the classification results of each log information are displayed.

[0148] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0149] Control the operation of the log information capture program in the log capture toolkit to obtain multiple log information during the server operation process;

[0150] When multiple log information is obtained, the abnormality detection program in the log capture toolkit is controlled to run, and abnormal log information and abnormal reasons of the abnormal log information are obtained from the multiple log information;

[0151] Manage the server based on the abnormal log information and the abnormal reasons of the abnormal log information.

[0152] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0153] Control the operation of the anomaly detection program in the log capture toolkit to obtain standard information corresponding to multiple log information;

[0154] Compare each log information with the standard information corresponding to each log information to obtain abnormal log information and abnormal reasons of the abnormal log information.

[0155] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0156] Determine the log information that is inconsistent with the standard information corresponding to each log information as abnormal log information;

[0157] Determine the abnormal cause of the abnormal information based on the abnormal log information and the standard information corresponding to the abnormal log information.

[0158] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0159] Control each subprogram to send acquisition instructions to each component and system in the server to obtain each log information.

[0160] Optionally, the log information capture program includes an independent redundant disk array information capture subroutine, a hard disk information capture subroutine, a basic input and output system information capture subroutine, a baseboard management controller information capture subroutine, a mainboard information capture subroutine and a system information capture subroutine.

[0161] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0162] Control the execution of the judgment subroutine and obtain the judgment result; the judgment result is used to indicate whether the log information of each component and system in the server has been obtained;

[0163] If the judgment result indicates that the log information of any component or system in the server is not obtained, the steps of controlling the operation of the log information capture program in the log capture toolkit to obtain multiple log information during the operation of the server are repeated.

[0164] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0165] Control the operation of the log information classification program, classify each log information, and obtain the classification result of each log information;

[0166] Based on the classification results and the interface information of the preset web page interface, the classification results of each log information are displayed.

[0167] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0168] Control the operation of the log information capture program in the log capture toolkit to obtain multiple log information during the server operation process;

[0169] When multiple log information is obtained, the abnormality detection program in the log capture toolkit is controlled to run, and abnormal log information and abnormal reasons of the abnormal log information are obtained from the multiple log information;

[0170] Manage the server based on the abnormal log information and the abnormal reasons of the abnormal log information.

[0171] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0172] Control the operation of the anomaly detection program in the log capture toolkit to obtain standard information corresponding to multiple log information;

[0173] Compare each log information with the standard information corresponding to each log information to obtain abnormal log information and abnormal reasons of the abnormal log information.

[0174] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0175] Determine the log information that is inconsistent with the standard information corresponding to each log information as abnormal log information;

[0176] Determine the abnormal cause of the abnormal information based on the abnormal log information and the standard information corresponding to the abnormal log information.

[0177] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0178] Control each subprogram to send acquisition instructions to each component and system in the server to obtain each log information.

[0179] Optionally, the log information capture program includes an independent redundant disk array information capture subroutine, a hard disk information capture subroutine, a basic input and output system information capture subroutine, a baseboard management controller information capture subroutine, a mainboard information capture subroutine and a system information capture subroutine.

[0180] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0181] Control the execution of the judgment subroutine and obtain the judgment result; the judgment result is used to indicate whether the log information of each component and system in the server has been obtained;

[0182] If the judgment result indicates that the log information of any component or system in the server is not obtained, the steps of controlling the operation of the log information capture program in the log capture toolkit to obtain multiple log information during the operation of the server are repeated.

[0183] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0184] Control the operation of the log information classification program, classify each log information, and obtain the classification result of each log information;

[0185] Based on the classification results and the interface information of the preset web page interface, the classification results of each log information are displayed.

[0186] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0187] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0188] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A server management method, characterized in that: The method comprises: Control the operation of the log information capture program in the log capture toolkit to obtain multiple log information during the server operation process; In the case of acquiring the plurality of log information, controlling the operation of the abnormality detection program in the log capture toolkit to acquire abnormal log information and abnormal reasons of the abnormal log information from the plurality of log information; The server is managed according to the abnormal log information and the abnormal cause of the abnormal log information.

2. The method according to claim 1, characterized in that The controlling the operation of the abnormality detection program in the log capture toolkit to obtain abnormal log information and abnormal reasons of the abnormal log information in each log information includes: Controlling the operation of an anomaly detection program in the log capture toolkit to obtain standard information corresponding to the multiple log information; Compare each of the log information with the standard information corresponding to each of the log information to obtain the abnormal log information and the abnormal reason of the abnormal log information.

3. The method according to claim 2, characterized in that The comparing each of the log information with the standard information corresponding to each of the log information to obtain the abnormal log information and the abnormal reason of the abnormal log information includes: Determining the log information that is inconsistent with the standard information corresponding to each of the log information as the abnormal log information; The abnormal cause of the abnormal information is determined according to the abnormal log information and the standard information corresponding to the abnormal log information.

4. The method according to claim 1, characterized in that: The log information capture program includes multiple subprograms; the log information capture program in the control log capture toolkit runs to obtain multiple log information during the server operation process, including: Control each of the subprograms to send acquisition instructions to each component and system in the server to acquire each of the log information.

5. The method according to claim 1, characterized in that: The log information capture program includes a judgment subroutine, and the method further includes: Controlling the judgment subroutine to run and obtaining a judgment result; the judgment result is used to indicate whether the log information of each component and system in the server has been obtained; If the judgment result indicates that the log information of any component or system in the server is not obtained, the steps of repeatedly executing the log information capture program in the control log capture toolkit to obtain multiple log information during the server operation process are repeated.

6. The method according to claim 4, characterized in that The log information capture program includes an independent redundant disk array information capture subprogram, a hard disk information capture subprogram, a basic input and output system information capture subprogram, a baseboard management controller information capture subprogram, a mainboard information capture subprogram and a system information capture subprogram.

7. The method according to any one of claims 1 to 6, characterized in that: The log capture toolkit also includes a log information classification program, and the method also includes: Controlling the log information classification program to run, classifying each log information, and obtaining the classification result of each log information; Based on the classification results and the interface information of the preset web page interface, the classification results of each log information are displayed.

8. A server management device, characterized in that: The device comprises: The first acquisition module is used to control the operation of the log information capture program in the log capture toolkit to obtain multiple log information during the operation of the server; A second acquisition module is used to control the operation of the anomaly detection program in the log capture toolkit to acquire the abnormal log information and the abnormal cause of the abnormal log information from the multiple log information when the multiple log information are acquired; The management module is used to manage the server according to the abnormal log information and the abnormal reason of the abnormal log information.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

11. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images