Method, device and equipment for data monitoring and readable medium

Abstract

The embodiment of the invention provides a data monitoring method, device and equipment and a readable medium. The method comprises the following steps: injecting a monitoring code into a target system, wherein the monitoring code comprises monitoring configuration corresponding to at least one event associated with the target system; in the running process of the target system, a data set corresponding to the at least one event is obtained based on monitoring configuration by running the monitoring code, and the monitoring configuration at least indicates the type of data to be collected and alarm configuration information for the at least one event; and determining an alarm operation on the at least one event based on the data set and the alarm configuration information. In this way, a more accurate and more complete data set can be obtained, and the stability and availability of the target system can also be improved.

Description

Technical Field

[0001] Example embodiments of the present disclosure relate generally to the field of computer technology, and more particularly, to methods, apparatuses, devices, and computer-readable storage media for data monitoring. Background Art

[0002] With the rapid development of the Internet, systems are becoming more and more complex, and user behaviors are becoming more and more diverse. In order to better improve the stability and availability of the system, the monitoring of the target system's data has become more important. Through data monitoring, the system's performance can be monitored in real time, and problems can be discovered and solved in a timely manner. Summary of the invention

[0003] In a first aspect of the present disclosure, a method for data monitoring is provided. The method comprises: injecting a monitoring code into a target system, the monitoring code comprising a monitoring configuration corresponding to at least one event associated with the target system; during the operation of the target system, by running the monitoring code, obtaining a data set corresponding to at least one event based on the monitoring configuration, the monitoring configuration at least indicating the type of data to be collected and alarm configuration information for at least one event; and determining an alarm operation for at least one event based on the data set and the alarm configuration information.

[0004] In a second aspect of the present disclosure, a device for data monitoring is provided. The device includes: an execution module configured to inject a monitoring code into a target system, the monitoring code including a monitoring configuration corresponding to at least one event associated with the target system; an acquisition module configured to acquire a data set corresponding to at least one event based on the monitoring configuration by running the monitoring code during the operation of the target system, the monitoring configuration at least indicating the type of data to be collected and the alarm configuration information for at least one event; and a determination module configured to determine an alarm operation for at least one event based on the data set and the alarm configuration information.

[0005] In a third aspect of the present disclosure, an electronic device is provided. The electronic device includes at least one processing unit; and at least one memory, the at least one memory is coupled to the at least one processing unit and stores instructions for execution by the at least one processing unit, and when the instructions are executed by the at least one processing unit, the electronic device executes the method of the first aspect of the present disclosure.

[0006] In a fourth aspect of the present disclosure, a computer-readable storage medium is provided, wherein a computer program is stored on the computer-readable storage medium, and the computer program can be executed by a processor to perform the method according to the first aspect of the present disclosure.

[0007] It should be understood that the contents described in the summary of the invention are not intended to limit the key features or important features of the embodiments of the present disclosure, nor are they intended to limit the scope of the present disclosure. Other features of the present disclosure will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] In the following, in conjunction with the accompanying drawings and with reference to the following detailed description, the above and other features, advantages and aspects of various implementations of the present disclosure will become more apparent. In the accompanying drawings, the same or similar reference numerals represent the same or similar elements, wherein:

[0009] Figure 1 A schematic diagram showing an example environment in which embodiments of the present disclosure can be implemented;

[0010] Figure 2 A flowchart showing a process for data monitoring according to some embodiments of the present disclosure is shown;

[0011] Figure 3 A schematic diagram showing an architecture for data monitoring according to some embodiments of the present disclosure;

[0012] Figure 4 A schematic diagram showing a process for data monitoring according to some embodiments of the present disclosure is shown;

[0013] Figure 5 A schematic diagram showing an architecture for data monitoring according to other embodiments of the present disclosure;

[0014] Figure 6 A schematic diagram showing the architecture of a monitoring system according to some embodiments of the present disclosure;

[0015] Figure 7 A schematic structural block diagram of an apparatus for data monitoring according to some embodiments of the present disclosure is shown; and

[0016] Figure 8 A block diagram of an electronic device is shown in which one or more embodiments of the present disclosure may be implemented. DETAILED DESCRIPTION

[0017] Embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although some embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as being limited to the embodiments described herein. On the contrary, these embodiments are provided to provide a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are only for exemplary purposes and are not intended to limit the scope of protection of the present disclosure.

[0018] In the description of the embodiments of the present disclosure, the term "including" and similar terms should be understood as open inclusion, that is, "including but not limited to". The term "based on" should be understood as "based at least in part on". The term "one embodiment" or "the embodiment" should be understood as "at least one embodiment". The term "some embodiments" should be understood as "at least some embodiments". Other explicit and implicit definitions may also be included below.

[0019] It should be noted that the acquisition, storage and application of user personal information involved in the technical solution of the present disclosure are in compliance with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0020] It is understandable that before using the technical solutions disclosed in the embodiments of the present disclosure, the types, scope of use, usage scenarios, etc. of the personal information involved in the present disclosure should be informed to the user and the user's authorization should be obtained in an appropriate manner in accordance with relevant laws and regulations.

[0021] For example, in response to receiving an active request from a user, a prompt message is sent to the user to clearly prompt the user that the operation requested to be performed will require obtaining and using the user's personal information, so that the user can independently choose whether to provide personal information to software or hardware such as electronic devices, applications, servers or storage media that execute operations of the technical solution of the present disclosure based on the prompt message.

[0022] As an optional but non-limiting implementation, in response to receiving an active request from the user, the prompt information is sent to the user in a manner such as a pop-up window, in which the prompt information can be presented in text form. In addition, the pop-up window can also carry a selection control for the user to choose "agree" or "disagree" to provide personal information to the electronic device.

[0023] Traditionally, the data monitoring solution mainly includes tracking the events you want to detect during the operation of the target system. On the one hand, the solution has a high error rate and high maintenance cost. If the tracking error occurs, the collected data may be inaccurate, affecting the data analysis results. On the other hand, the solution has limitations. Using this solution may not obtain comprehensive data, so the collected data page cannot fully reflect the events associated with the target system during the operation of the target system. In addition, the solution may not be able to achieve real-time monitoring and fault location. When a problem occurs in the target system, it may take a lot of time to locate and solve the problem, affecting the stability and availability of the target system. Moreover, if different monitoring tools are used for data monitoring of the same target system, there may be repeated data collection, resulting in data redundancy and increased storage and processing costs. Some traditional data monitoring technologies also require manual insertion of code in the monitoring code, which is highly invasive to the original code and may introduce new errors. Moreover, different business scenarios may require different monitoring configurations, and traditional data monitoring solutions may not meet the needs of monitoring configuration for specific business scenarios.

[0024] In view of this, an embodiment of the present disclosure provides a solution for data monitoring. The solution includes: injecting monitoring code into the target system, the monitoring code includes a monitoring configuration corresponding to at least one event associated with the target system. During the operation of the target system, by running the monitoring code, a data set corresponding to at least one event is obtained based on the monitoring configuration, and the monitoring configuration at least indicates the type of data to be collected and the alarm configuration information for at least one event. Based on the data set and the alarm configuration information, the alarm operation for at least one event is determined. In this way, a more accurate and complete data set can be obtained, and corresponding alarm operations can be performed in a timely manner when problems occur in the target system, thereby improving the stability and availability of the target system.

[0025] Figure 1 1 is a schematic diagram of an example environment 100 in which embodiments of the present disclosure can be implemented. Figure 1 As shown, the target system 120 may be deployed in the electronic device 110. In some examples, the target system 120 may be software that operates one or more applications, applets, web pages, and the like.

[0026] In some embodiments, the electronic device 110 may inject the monitoring code 105 into the target system 120. In some examples, the monitoring code 105 may include a monitoring configuration 125 corresponding to at least one event associated with the target system 120. Further, during the operation of the target system 120, by running the monitoring code 105, the electronic device 110 may obtain a data set 130 corresponding to at least one event based on the monitoring configuration 125. In addition, the monitoring configuration 125 may at least indicate the type of data to be collected and the alarm configuration information 135 for at least one event. In some examples, the electronic device 110 may transmit the data set 130 and the alarm configuration information 135 to the monitoring system 140 to determine the alarm operation 145 for at least one event.

[0027] The electronic device 110 may include any computing system with computing capabilities, such as various computing devices / systems, terminal devices, server devices, etc. The terminal device may be any type of mobile terminal, fixed terminal or portable terminal, including a mobile phone, a desktop computer, a laptop computer, a notebook computer, a netbook computer, a tablet computer, a media computer, a multimedia tablet, a handheld computer, a portable game terminal, a VR / AR device, a personal communication system (PCS) device, a personal navigation device, a personal digital assistant (PDA), an audio / video player, a digital camera / camcorder, a positioning device, a television receiver, a radio broadcast receiver, an e-book device, a game device, or any combination of the foregoing, including accessories and peripherals of these devices or any combination thereof.

[0028] It should be understood that the structure and function of the various elements in the environment 100 are described for exemplary purposes only and do not imply any limitation on the scope of the present disclosure.

[0029] Some example embodiments of the present disclosure will be described below with continued reference to the accompanying drawings.

[0030] Figure 2 1 shows a flow chart of a process 200 for data monitoring according to some embodiments of the present disclosure. The process 200 may be implemented at the electronic device 110. For ease of discussion, reference will be made to Figure 1 The process 200 is described with reference to the environment 100 of FIG.

[0031] At block 210 , the electronic device 110 injects the monitoring code 105 into the target system 120 .

[0032] In some embodiments, monitoring code 105 may include monitoring configuration 125 corresponding to at least one event associated with target system 120. In some examples, monitoring configuration 125 may indicate at least the type of data to be collected and alarm configuration information 135 for at least one event.

[0033] In block 220 , the electronic device 110 acquires a data set 130 corresponding to at least one event based on the monitoring configuration 125 by executing the monitoring code 105 during the operation of the target system 120 .

[0034] In some embodiments, the electronic device 110 may collect raw data corresponding to at least one event. The electronic device 110 may filter the raw data based on the data type to be collected in the monitoring configuration 125 to determine the filtered data. The electronic device 110 may determine a data set 130 corresponding to the at least one event based on the filtered data.

[0035] Specifically, the data set 130 corresponding to at least one event may include a basic event data set, an abnormal event data set, a user behavior data set, an interface performance data set, a page performance data set, a platform configuration data set, and an alarm configuration data set. Further, the basic event data set may include at least one of the following, such as the number of visitors (UV), the number of views (PV), the number of new visitors, the total number of Internet Protocol addresses (IP number), the average frequency of visits per capita, the bounce rate, the year-on-year increase in the number of users in the first period (the year-on-year increase in the number of users in 24 hours), the page visit ranking, the source website ranking, and the city visit ranking. In some examples, the page visit ranking, the source website ranking, and the city visit ranking may also select the top ten data in the ranking for collection. More, the abnormal event data set may include at least one of the following, such as the number of page loading errors, the page loading error rate, the year-on-year data of page loading errors in the first period (such as the white screen rate of the access project), the year-on-year data of errors in the second period (such as the year-on-year increase in the white screen in 24 hours), and error information (such as the year-on-year increase in all errors in 24 hours, monitoring code errors, resource loading errors, and error alarms, etc.). In some examples, the error information may include the error type, error name, number of errors, error time, and error location.

[0036] Further, the user behavior data set may include at least one of the following user behavior data that can define user behavior. For example, the trajectory of the page that the user enters the target system 120 includes opening the page, clicking the page, sending a request, responding to a request, closing the page, and the user access timing. More, the interface performance data set may include the interface success rate of the third period (e.g., the 24-hour interface success rate), the interface time consumption ratio of the fourth period (e.g., the year-on-year increase in the interface time consumption of 72 hours), the number of interface requests in the fifth period (e.g., the year-on-year increase in the number of interface requests in 72 hours), and the detailed information of each interface. In some examples, the detailed information of each interface may include the average time consumption, the fastest time consumption, the slowest time consumption, the number of pages, and the interface time distribution.

[0037] In addition, the page performance data set may include at least one of the following. For example, the first rendering of the page, the first interactive page, the page is ready to load (Dom Ready), the page is fully loaded, the page loading waterfall chart, and the sixth period page performance average chart (24-hour page performance average chart), the page operating system distribution, and each page performance indicator. In some examples, the first rendering of the page can be the moment when text or icons are displayed for the first time in the page. In other examples, the first interactive page can be the moment when the page is clicked for the first time. It can be understood that this is merely exemplary and not restrictive.

[0038] More specifically, the platform configuration data set may include at least one of the following: For example, the total configuration load volume, the load success volume, the resolution success volume, the seventh period failure rate (for example, the 24-hour failure rate) and each domain name failure information.

[0039] After obtaining a data set 130 corresponding to at least one event based on the monitoring configuration 125 , at block 230 , an alarm operation 145 for the at least one event is determined based on the data set 130 and the alarm configuration information 135 .

[0040] In some embodiments, the alarm configuration information 135 may include at least an alarm condition. In some examples, the electronic device 110 may determine whether the data set 130 satisfies the alarm condition in the alarm configuration information 135. If the electronic device 110 detects that the data set 130 satisfies the alarm condition, the alarm operation 145 for at least one event is determined to be prompting alarm information. If the data set 130 is detected to not satisfy the alarm condition, the alarm operation 145 for at least one event is determined to be not prompting alarm information. In some embodiments, the alarm information may include at least one of the following. For example, the alarm name, alarm item, alarm status, and alarm update time.

[0041] In some embodiments, the alarm condition in the alarm configuration information 135 may indicate that the data identifier in the data set 130 has an abnormal identifier. More specifically, the electronic device 110 may determine whether there is an abnormal identifier in the data set 130 based on the predetermined identifier data set 130. Further, the electronic device 110 determines whether the data set 130 satisfies the alarm condition in the alarm configuration information 135 based on the result of determining whether there is an abnormal identifier in the data set 130. In some examples, if all the data identifiers in the data set 130 match the predetermined identifier data set 130, the electronic device 110 may determine that there is no abnormal identifier in the data set 130. If there is a data identifier in the data set 130 that does not match the predetermined identifier data set 130, the electronic device 110 may determine that there is an abnormal identifier in the database.

[0042] Further, the alarm configuration information 135 may also include at least one of the following items. For example, an alarm execution time and a monitoring period. In some examples, the electronic device 110 may determine an alarm operation 145 for at least one event at the alarm execution time. In addition, the electronic device 110 may also periodically determine an alarm operation 145 for at least one event according to the monitoring period.

[0043] Reference below Figure 3 The exemplary architecture for data monitoring is further described. It is understood that Figure 3 The illustrated architecture 300 is exemplary only and is not intended to be limiting.

[0044] Figure 3 Schematic diagram of an architecture 300 for data monitoring according to some embodiments of the present disclosure is shown. The architecture 300 may be implemented at the electronic device 110. For ease of discussion, reference will be made to Figure 1 The process 300 is described with reference to the environment 100 of FIG.

[0045] like Figure 3 As shown, the architecture 300 for data monitoring may include a data collection and reporting module 310 , a data storage module 320 , a statistical analysis module 330 , and a data display module 340 .

[0046] Specifically, the data collection and reporting module 310 can be used to collect a data set 130 of at least one event associated with the target system 120, and then report the collected data set 130 to the data storage module 320. Alternatively, the data set 130 can be reported or stored in a variety of forms, such as in the form of logs. In some examples, the at least one event associated with the target system 120 can be an event such as user behavior, page performance, interface performance, abnormal events, etc.

[0047] Furthermore, the data storage module 320 can store the received data set 130 in real time. Furthermore, the statistical analysis module 330 can count and filter the data set 130 by different dimensions, thereby performing data analysis to determine the analysis result of the data set 130. The statistical analysis module 330 can transmit the analysis result of the determined data set 130 to the data display module 340.

[0048] In addition, the data display module 340 can display the data analysis results received from the statistical analysis module 330 through a data panel, so as to locate and solve problems more quickly according to a predetermined analysis model and data panel.

[0049] Continue below Figure 4 The data monitoring process 400 is further described for example. It is understood that Figure 4 The illustrated process 400 is exemplary only and is not intended to be limiting.

[0050] Figure 4 FIG. 4 is a schematic diagram of a process 400 for data monitoring according to some embodiments of the present disclosure. The process 400 may be implemented at the electronic device 110. For ease of discussion, reference will be made to FIG. Figure 1 The process 400 is described with reference to the environment 100 of FIG.

[0051] like Figure 4 As shown, the data collection and reporting module 310 can collect data sets 130 of different target systems 120, such as target system 1, target system 2, and target system 3, etc. Further, the data set 130 of each target system 120 includes data corresponding to at least one event associated with the target system 120. In addition, the data collection and reporting module 310 can report the collected data set 130 to the data storage module 320 in a predetermined format. More, the data collection and reporting module 310 can report the data set 130 collected from each target system 120 to the data storage module 320 in the form of logs (410, 420, 430). In some examples, target system 1 can correspond to the first log, target system 2 can correspond to the second log, and target system 3 can correspond to the third log. In other examples, the data collection and reporting module 310 can report the data sets 130 of different target systems 120 to the data storage module 320 respectively. In more examples, the data collection and reporting module 310 may report the data sets 130 of different target systems 120 together to the data storage module 320. It should be understood that this is merely exemplary and not restrictive.

[0052] In some embodiments, the data storage module 320 can store data of the data sets 130 of different target systems 120 that are received and reported in a predetermined format. In addition, the data storage module 320 can also pass the received data sets 130 of different target systems 120 to the statistical analysis module 330. Furthermore, the statistical analysis module 330 can read the data sent by the received data storage module 320. In some examples, when the reported data received by the data storage module 320 is in the form of logs, the statistical analysis module 330 can consume logs (440) for the data sets 130 of different target systems 120. Log consumption here can mean sequential reading and writing of the full amount of data.

[0053] In some embodiments, the statistical analysis module 330 can also perform data analysis and data statistics (454) on at least one event associated with the target system 120 through the data sets 130 of different target systems 120 read. In some examples, the at least one event associated with the target system 120 can be project management (450), user behavior (452), page performance, interface performance, abnormal monitoring, platform configuration, and alarm configuration. It can be understood that the above is merely exemplary and not restrictive. The statistical analysis module 330 can also pass the analysis results of the data sets 130 of different target systems 120 to the data display module 340 to display the data and analysis results in the data sets 130 of different target systems 120 on the corresponding data panel.

[0054] In some embodiments, three projects corresponding to data monitoring may also be predetermined, and the first project may include the above-mentioned data collection and reporting module 310, which is used to collect data sets 130 of different target systems 120 and then report the data. In some examples, the data collection and reporting module 310 may include a software development kit. Furthermore, the second project may include the above-mentioned data storage module 320 and the statistical analysis module 330, which are used to perform data storage and data statistical analysis. In addition, the third project may include the above-mentioned data display module 340, which is used to display the data and analysis results in the data sets 130 of different target systems 120 on the corresponding data panel. In some examples, the content and function of the corresponding module can be adjusted by performing project management on the above-mentioned three projects corresponding to data monitoring.

[0055] Continue below Figure 5 Another exemplary architecture for data monitoring is further described for example. It can be understood that Figure 5 The illustrated architecture 500 is exemplary only and is not intended to be limiting.

[0056] Figure 5FIG. 5 is a schematic diagram showing an example of an architecture 500 for data monitoring according to some embodiments of the present disclosure. Figure 1 The architecture 500 is described with reference to the environment 100 of FIG.

[0057] like Figure 5 As shown, a data set 130 of target systems 120 in different forms may be collected from the electronic device 110 using the first project. In some examples, the target systems 120 in different forms may be mini-programs, public accounts, web pages, and the like.

[0058] At the business layer, three business modules may be included, namely a basic function module 510, a data analysis and display module 520, and a monitoring and warning module 530. Specifically, the basic function module 510 may include project management, authority management, and user management. In some examples, performing project management in the basic function module 510 may be to adjust the project content of the first project, the second project, and the third project. In other examples, performing authority management in the basic function module 510 may be to adjust the responsible persons of the first project, the second project, and the third project. In more examples, performing user management in the basic function module 510 may be to adjust the user information of the target system 120. It will be understood that this is merely exemplary and not restrictive.

[0059] Further, the data analysis and display module 520 at the business layer can perform data analysis on at least one event associated with the target system 120. In some examples, at least one event associated with the target system 120 can include interface performance, page performance, user behavior, and anomaly detection. In other examples, the data analysis and display module 520 can also display the data in the data set 130 of at least one event associated with the target system 120 on the data display page. Further, the monitoring and warning module 530 at the business layer can include data query services, alarm configuration information 135, and scheduled tasks. In some examples, when the data is in the form of logs, the data query service can be a log query service, which can provide a large number of log query and analysis functions, and can also perform log query and statistics according to conditions. In other examples, the alarm operation 145, alarm conditions, alarm information, alarm execution time, and monitoring cycle-related configurations can be adjusted by setting the alarm configuration information 135. In more embodiments, a scheduled alarm operation corresponding to at least one event related to the target system 120 can be set by setting a scheduled task.

[0060] At the data layer, a relational database management system 540 (MySQL) can be used, and the relational database management system 540 can save the data in different data tables. In addition, the data service 550 of the data layer can also monitor the data set 130 of at least one event associated with the target system 120 in real time. In some examples, when the data is in the form of logs, the data service 550 can be a log service (Simple Log Service, SLS). In addition, the log service can provide log consumption function and log query function. The log consumption function can read and write the full amount of data sequentially, and the log query function can provide a large number of log query and analysis functions, and can also perform log query and statistics according to conditions.

[0061] Continue below Figure 6 For example, an exemplary architecture of the monitoring system 140 is described. It is understood that Figure 6 The illustrated architecture 600 is exemplary only and is not intended to be limiting.

[0062] Figure 6 Schematic diagram of an architecture 600 of a monitoring system according to some embodiments of the present disclosure is shown. The architecture 600 may be implemented at the monitoring system 140. For ease of discussion, reference will be made to Figure 1 The architecture 600 is described with reference to the environment 100 of FIG.

[0063] like Figure 6 As shown, the monitoring system 140 may include a data collection module 620 , a data analysis module 630 , a data storage module 640 , an alarm module 650 , and a project management module 660 .

[0064] Specifically, the data acquisition module 620 can collect data for at least one event associated with the target system 120 through a web development toolkit, a small program software tool development kit, and a platform configuration software development toolkit to determine a data set 130 corresponding to the at least one event. Further, the data analysis module 630 can perform data analysis on the data set 130 corresponding to the at least one event. In some examples, the at least one event associated with the target system 120 can be project data, user behavior, error statistics, page performance, and interface performance. The data analysis module 630 can display data on the platform configuration display interface of the data set 130 corresponding to the at least one event. Further, the data storage module 640 can execute a log service, and the log service can provide a log consumption function and a log query function. Further, the alarm module 650 can perform operations such as alarm configuration, error alarm, configuration alarm, and regional monitoring alarm. In some examples, the alarm configuration can be to set the alarm condition, alarm operation 145, alarm name, alarm item, alarm status, and alarm update time, alarm execution time, monitoring cycle, etc. In other examples, the error alarm may be to perform an alarm operation 145 when the alarm condition is not met, and the error alarm may also be to perform an alarm operation 145 at a time other than the alarm execution time. In other examples, the configuration alarm may be to perform an alarm operation 145 when the system configuration information of the target system 120 is incorrect. In more embodiments, the regional monitoring alarm may be to perform a regional alarm operation in a certain area of ​​the target system 120 when the data in the data set 130 meets the alarm condition.

[0065] In addition, the project management module 660 may include project access, project list overview, and project disabling. In some examples, project access may be access to a first project, a second project, and a third project for data monitoring. In other examples, the project list overview may include project serial numbers, project names, project details, and project status. In more examples, projects with poor effects may be disabled, or when a disabled project is adjusted to a project with better effects, the disabled state of the disabled project may be released.

[0066] In summary, the embodiments of the present disclosure can obtain more accurate and complete data sets, and can also perform corresponding alarm operations in a timely manner when problems occur in the target system, thereby improving the stability and availability of the target system.

[0067] The embodiments of the present disclosure also provide corresponding devices for implementing the above methods or processes. Figure 71 is a schematic structural block diagram of an apparatus 700 for data monitoring according to some embodiments of the present disclosure. The apparatus 700 may be implemented as or included in the electronic device 110. Each module / component in the apparatus 700 may be implemented by hardware, software, firmware or any combination thereof.

[0068] like Figure 7 As shown, the apparatus 700 includes an execution module 710, which is configured to inject monitoring code into the target system, and the monitoring code includes a monitoring configuration corresponding to at least one event associated with the target system 120. The apparatus 700 also includes an acquisition module 720, which is configured to acquire a data set corresponding to at least one event based on the monitoring configuration by running the monitoring code during the operation of the target system, and the monitoring configuration at least indicates the type of data to be collected and the alarm configuration information for at least one event. The apparatus 700 also includes a determination module 730, which is configured to determine the alarm operation for at least one event based on the data set and the alarm configuration information.

[0069] In some embodiments, the alarm configuration information includes at least an alarm condition, and the determination module 730 is further configured to determine whether the data set satisfies the alarm condition in the alarm configuration information; in response to monitoring that the data set satisfies the alarm condition, determine that the alarm operation for at least one event is to prompt an alarm message; and in response to monitoring that the data set does not satisfy the alarm condition, determine that the alarm operation for at least one event is not to prompt an alarm message.

[0070] In some embodiments, the alarm condition in the alarm configuration information indicates that the data identifier in the data set has an abnormal identifier, and the determination module 730 is also configured to determine whether there is an abnormal identifier in the data set based on a predetermined identification data set; and based on the determination result of whether there is an abnormal identifier in the data set, determine whether the data set meets the alarm condition in the alarm configuration information.

[0071] In some embodiments, the alarm information includes at least one of the following: alarm name, alarm item, alarm status, and alarm update time.

[0072] In some embodiments, the determination module 730 is also configured to determine that there are no abnormal identifiers in the data set in response to all data identifiers in the data set matching a predetermined identification data set; and to determine that there are abnormal identifiers in the database in response to there being data identifiers in the data set that do not match the predetermined identification data set.

[0073] In some embodiments, the alarm configuration information further includes at least one of the following: alarm execution time, monitoring period. In other embodiments, the determination module 730 is further configured to determine the alarm operation for at least one event at the alarm execution time, or to periodically determine the alarm operation for at least one event according to the monitoring period.

[0074] In some embodiments, the acquisition module 720 is also configured to collect raw data corresponding to at least one event; filter the raw data based on the type of data to be collected in the monitoring configuration to determine the filtered data; and determine a data set corresponding to at least one event based on the filtered data.

[0075] The units and / or modules included in the device 700 can be implemented in various ways, including software, hardware, firmware, or any combination thereof. In some embodiments, one or more units and / or modules can be implemented using software and / or firmware, such as machine executable instructions stored on a storage medium. In addition to or as an alternative to machine executable instructions, some or all of the units and / or modules in the device 700 can be implemented at least in part by one or more hardware logic components. As an example and not limitation, exemplary types of hardware logic components that can be used include field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0076] It should be understood that one or more steps in the above method can be performed by a suitable electronic device or a combination of electronic devices. Such an electronic device or a combination of electronic devices may include, for example, Figure 1 The electronic device 110 in.

[0077] Figure 8 8 is a block diagram of an electronic device 800 in which one or more embodiments of the present disclosure may be implemented. It should be understood that Figure 8 The electronic device 800 shown is merely exemplary and should not constitute any limitation on the functionality and scope of the embodiments described herein. Figure 8 The electronic device 800 shown can be used to implement Figure 1 Electronic device 110 or Figure 7 Device 700.

[0078] like Figure 8 As shown, the electronic device 800 is in the form of a general electronic device. The components of the electronic device 800 may include, but are not limited to, one or more processors or processing units 810, a memory 820, a storage device 830, one or more communication units 840, one or more input devices 850, and one or more output devices 880. The processing unit 810 may be an actual or virtual processor and is capable of performing various processes according to a program stored in the memory 820. In a multi-processor system, multiple processing units execute computer executable instructions in parallel to improve the parallel processing capability of the electronic device 800.

[0079] The electronic device 800 typically includes a plurality of computer storage media. Such media can be any available media accessible to the electronic device 800, including but not limited to volatile and non-volatile media, removable and non-removable media. The memory 820 can be a volatile memory (e.g., register, cache, random access memory (RAM)), a non-volatile memory (e.g., a read-only memory (ROM), an electrically erasable programmable read-only memory (EEPROM), flash memory) or some combination thereof. The storage device 830 can be a removable or non-removable medium, and can include a machine-readable medium, such as a flash drive, a disk, or any other medium, which can be used to store information and / or data and can be accessed within the electronic device 800.

[0080] The electronic device 800 may further include additional removable / non-removable, volatile / non-volatile storage media. Figure 8 As shown in , a disk drive for reading or writing from a removable, non-volatile disk (e.g., a "floppy disk") and an optical drive for reading or writing from a removable, non-volatile optical disk may be provided. In these cases, each drive may be connected to the bus (not shown) by one or more data media interfaces. The memory 820 may include a computer program product 825 having one or more program modules that are configured to perform various methods or actions of various embodiments of the present disclosure.

[0081] The communication unit 840 implements communication with other electronic devices through a communication medium. Additionally, the functions of the components of the electronic device 800 can be implemented with a single computing cluster or multiple computing machines that can communicate through a communication connection. Therefore, the electronic device 800 can operate in a networked environment using a logical connection with one or more other servers, a network personal computer (PC), or another network node.

[0082] The input device 850 may be one or more input devices, such as a mouse, a keyboard, a tracking ball, etc. The output device 880 may be one or more output devices, such as a display, a speaker, a printer, etc. The electronic device 800 may also communicate with one or more external devices (not shown) through the communication unit 840 as needed, such as a storage device, a display device, etc., communicate with one or more devices that allow a user to interact with the electronic device 800, or communicate with any device that allows the electronic device 800 to communicate with one or more other electronic devices (e.g., a network card, a modem, etc.). Such communication may be performed via an input / output (I / O) interface (not shown).

[0083] According to an exemplary implementation of the present disclosure, a computer-readable storage medium is provided, on which computer-executable instructions are stored, wherein the computer-executable instructions are executed by a processor to implement the method described above. According to an exemplary implementation of the present disclosure, a computer program product is also provided, which is tangibly stored on a non-transitory computer-readable medium and includes computer-executable instructions, and the computer-executable instructions are executed by a processor to implement the method described above.

[0084] Various aspects of the present disclosure are described herein with reference to the flowcharts and / or block diagrams of the methods, devices, equipment, and computer program products implemented according to the present disclosure. It should be understood that each box in the flowchart and / or block diagram and the combination of each box in the flowchart and / or block diagram can be implemented by computer-readable program instructions.

[0085] These computer-readable program instructions can be provided to a processing unit of a general-purpose computer, a special-purpose computer, or other programmable data processing device, thereby producing a machine, so that when these instructions are executed by the processing unit of the computer or other programmable data processing device, a device that implements the functions / actions specified in one or more boxes in the flowchart and / or block diagram is generated. These computer-readable program instructions can also be stored in a computer-readable storage medium, and these instructions cause the computer, programmable data processing device, and / or other equipment to work in a specific manner, so that the computer-readable medium storing the instructions includes a manufactured product, which includes instructions for implementing various aspects of the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0086] Computer-readable program instructions can be loaded onto a computer, other programmable data processing apparatus, or other device so that a series of operational steps are performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, so that the instructions executed on the computer, other programmable data processing apparatus, or other device implement the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0087] The flow chart and block diagram in the accompanying drawings show the possible architecture, function and operation of the system, method and computer program product according to multiple implementations of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a part of a module, program segment or instruction, and a part of a module, program segment or instruction includes one or more executable instructions for realizing the logical function of the specification. In some implementations as replacements, the function marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two continuous square boxes can actually be executed substantially in parallel, and they can sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be realized by a special hardware-based system that performs the function or action of the specification, or can be realized by a combination of special hardware and computer instructions.

[0088] The above descriptions of various implementations of the present disclosure are exemplary, non-exhaustive, and not limited to the disclosed implementations. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described implementations. The selection of terms used herein is intended to best explain the principles of the implementations, practical applications, or improvements to the technology in the market, or to enable other persons of ordinary skill in the art to understand the various implementations disclosed herein.

Claims

1. A method for data monitoring, comprising: Injecting monitoring code into a target system, the monitoring code including a monitoring configuration corresponding to at least one event associated with the target system; During the operation of the target system, by running the monitoring code, a data set corresponding to the at least one event is acquired based on the monitoring configuration, wherein the monitoring configuration at least indicates the type of data to be collected and alarm configuration information for the at least one event; as well as An alarm operation for the at least one event is determined based on the data set and the alarm configuration information.

2. The method according to claim 1, wherein the alarm configuration information comprises at least an alarm condition, and determining an alarm operation for the at least one event based on the data set and the alarm configuration information comprises: Determining whether the data set meets the alarm condition in the alarm configuration information; In response to monitoring that the data set meets the alarm condition, determining that the alarm operation for the at least one event is to prompt alarm information; as well as In response to monitoring that the data set does not satisfy the alarm condition, determining that the alarm operation for the at least one event is not to prompt an alarm message.

3. The method according to claim 2, wherein the alarm condition in the alarm configuration information indicates that a data identifier in the data set has an abnormal identifier, and determining whether the data set satisfies the alarm condition in the alarm configuration information comprises: Based on a predetermined identification data set, determining whether there is an abnormal identification in the data set; as well as Based on the result of determining whether there is an abnormal identification in the data set, it is determined whether the data set meets the alarm condition in the alarm configuration information. 4 . The method according to claim 2 , wherein the alarm information includes at least one of the following: an alarm name, an alarm item, an alarm status, and an alarm update time.

5. The method according to claim 3, wherein based on the result of determining whether there is an abnormal identification in the data set, determining whether the data set meets the alarm condition in the alarm configuration information comprises: In response to the data identifiers in the data set all matching the predetermined identifier data set, determining that there are no abnormal identifiers in the data set; as well as In response to a data identifier in the data set not matching the predetermined identifier data set, it is determined that an abnormal identifier is present in the database.

6. The method according to claim 2, wherein the alarm configuration information further includes at least one of the following: an alarm execution time, a monitoring period, and wherein determining an alarm operation for the at least one event includes at least one of the following: determining an alarm operation for the at least one event at the alarm execution time, or According to the monitoring cycle, an alarm operation for the at least one event is periodically determined.

7. The method according to claim 1, wherein obtaining a data set corresponding to the at least one event comprises: Collecting raw data corresponding to the at least one event; Based on the data type to be collected in the monitoring configuration, the raw data is screened to determine screened data; as well as Based on the filtered data, the data set corresponding to the at least one event is determined.

8. A device for data monitoring, comprising: an execution module configured to inject a monitoring code into a target system, wherein the monitoring code includes a monitoring configuration corresponding to at least one event associated with the target system; an acquisition module configured to acquire a data set corresponding to the at least one event based on the monitoring configuration by running the monitoring code during the operation of the target system, wherein the monitoring configuration at least indicates a data type to be collected and alarm configuration information for the at least one event; as well as The determination module is configured to determine an alarm operation for the at least one event based on the data set and the alarm configuration information.

9. An electronic device, comprising: at least one processing unit; as well as At least one memory, the at least one memory is coupled to the at least one processing unit and stores instructions for execution by the at least one processing unit, the instructions, when executed by the at least one processing unit, causing the electronic device to perform the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, wherein the computer program can be executed by a processor to implement the method according to any one of claims 1 to 7.

Images