Storage array alarm information processing method and device, storage medium and program product

Abstract

The invention discloses a storage array alarm information processing method and device, a storage medium and a program product, and relates to the technical field of storage arrays. On the basis of obtaining the incidence relation tree and the alarm information of each storage object, determining an alarm storage object, and generating target alarm information of the alarm storage object; judging whether the to-be-analyzed alarm object has a sub-storage object or not through the incidence relation tree, if the to-be-analyzed alarm object has the sub-storage object, judging whether the alarm of the to-be-analyzed alarm object has an influence on the sub-storage object in combination with the corresponding real-time alarm information, and if the to-be-analyzed alarm object has the influence, generating target alarm information of the sub-storage object; if the target alarm information of the sub-storage object meets the preset alarm condition, determining the sub-storage object as a to-be-analyzed alarm object, and returning to the step of judging whether the to-be-analyzed alarm object has the sub-storage object; and if the preset alarm condition is not met, outputting the target alarm information of the alarm storage object to the monitoring platform, thereby solving the problem that the alarm information is not reported in time.

Description

Technical Field

[0001] The present application relates to the technical field of storage arrays, and in particular to a storage array alarm information processing method, device, storage medium and program product. Background Art

[0002] As the core component of information infrastructure, storage arrays are equipped with a large number of hard disks, which can create thousands or even millions of volumes or file systems to ensure data security and reliability. However, when these volumes and / or file systems fail, a large number of alarm messages will be generated, and a large number of alarm messages will be reported to the target server at the same time, resulting in an alarm storm, affecting the normal operation of user services.

[0003] In the related art, a delayed reporting time interval is often set to extract the event features of the alarm information within the delayed reporting time interval, and the alarm information with the same or similar event features is merged, and then the alarm information is reported to avoid the occurrence of an alarm storm. However, the processing method of merging and reporting the alarm information will lead to the problem of untimely reporting of the alarm information. Summary of the invention

[0004] The present application provides a storage array alarm information processing method, device, storage medium and program product to at least solve the problem of untimely alarm information reporting caused by merging alarm information and reporting to avoid alarm storms in the related art.

[0005] The present application provides a storage array alarm information processing method, comprising: obtaining an association relationship tree corresponding to each storage object in the storage array; obtaining the alarm information of each storage object, and determining the corresponding alarm time according to the alarm information of each storage object; screening out the alarm storage object from each storage object according to the alarm time of each storage object; generating target alarm information of the alarm storage object according to the alarm state of the alarm information of the alarm storage object; using the alarm storage object as the alarm object to be analyzed; judging whether the alarm object to be analyzed has a child storage object according to the association relationship tree; if the alarm object to be analyzed has a child storage object, obtaining the real-time alarm information corresponding to the child storage object; and generating the target alarm information according to the target storage object. The alarm information, the association tree and the parameter information of the sub-storage object are used to generate the other-cause alarm information of the sub-storage object; the first impact degree corresponding to the other-cause alarm information is compared with the second impact degree corresponding to the real-time alarm information; if the first impact degree is greater than the second impact degree, the target alarm information of the sub-storage object is generated according to the other-cause alarm information; if the target alarm information of the sub-storage object meets the preset alarm condition, the sub-storage object is determined as the alarm object to be analyzed, and the step of determining whether the alarm object to be analyzed has a sub-storage object according to the association tree is returned; if the target alarm information of the sub-storage object does not meet the preset alarm condition, the target alarm information of the alarm storage object is output to the monitoring platform.

[0006] The present application also provides a storage array alarm information processing device, comprising:

[0007] An acquisition module, used to acquire an association relationship tree corresponding to each storage object in the storage array;

[0008] The acquisition module is also used to acquire the alarm information of each storage object, and determine the corresponding alarm time according to the alarm information of each storage object;

[0009] The first processing module is used to filter out the alarm storage object from each storage object according to the alarm time of each storage object; generate target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object; and use the alarm storage object as the alarm object to be analyzed;

[0010] The first judgment module is used to judge whether the alarm object to be analyzed has a child storage object according to the association tree;

[0011] The second processing module is used to obtain the real-time alarm information corresponding to the sub-storage object if the alarm object to be analyzed has a sub-storage object; generate the other cause alarm information of the sub-storage object according to the target alarm information, the association tree and the parameter information of the sub-storage object;

[0012] A second judgment module is used to compare the first impact degree corresponding to the alarm information with the second impact degree corresponding to the real-time alarm information;

[0013] A third processing module, configured to generate target alarm information of the sub-storage object according to the alarm information if the first impact degree is greater than the second impact degree;

[0014] The fourth processing module is used for determining the sub-storage object as the alarm object to be analyzed if the target alarm information of the sub-storage object meets the preset alarm condition, and returning to the step of determining whether the alarm object to be analyzed has a sub-storage object according to the association tree;

[0015] The output module is used to output the target alarm information of the alarm storage object to the monitoring platform if the target alarm information of the sub-storage object does not meet the preset alarm conditions.

[0016] The present application also provides an electronic device, comprising: a memory for storing a computer program; and a processor for implementing the steps of any one of the above-mentioned storage array alarm information processing methods when executing the computer program.

[0017] The present application also provides a computer-readable storage medium, in which a computer program is stored, wherein when the computer program is executed by a processor, the steps of any of the above-mentioned storage array alarm information processing methods are implemented.

[0018] The present application also provides a computer program product, including a computer program, which implements the steps of any of the above storage array alarm information processing methods when executed by a processor.

[0019] Through the storage array alarm information processing method, device, storage medium and program product provided by the present application, on the basis of obtaining the association tree corresponding to each storage object in the storage array and the alarm information of each storage object, the alarm storage object is determined from each storage object, and the target alarm information of the alarm storage object is generated according to the alarm status of the alarm information of the alarm storage object; then, the alarm storage object is used as the alarm object to be analyzed, and through the association tree, it is determined whether the alarm object to be analyzed has a child storage object; if the alarm object to be analyzed has a child storage object, the real-time alarm information corresponding to the child storage object is obtained, and it is further determined whether the alarm of the alarm object to be analyzed (alarm storage object) has an impact on its child storage object; if so, the target alarm information of the child storage object is generated; then, if the child storage object If the target alarm information of the storage object meets the preset alarm condition, the sub-storage object is determined as the alarm object to be analyzed, and the step of judging whether the alarm object to be analyzed has a sub-storage object is returned to the association tree; if the target alarm information of the sub-storage object does not meet the preset alarm condition, the target alarm information of the alarm storage object is output to the monitoring platform; while reporting the target alarm information of the alarm storage object, the real-time alarm information of the sub-storage object of the alarm storage object caused by the target alarm information of the alarm storage object is not reported, that is, the occurrence of alarm storms is avoided, and the target alarm information of the alarm storage object is reported to the monitoring platform in a timely manner, which solves the problem of untimely reporting of alarm information caused by merging alarm information and reporting to avoid alarm storms in related technologies. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0021] Figure 1 A schematic diagram of a scenario of a storage array alarm information processing method provided in an embodiment of the present application;

[0022] Figure 2 A flowchart of a storage array alarm information processing method provided in an embodiment of the present application Figure 1 ;

[0023] Figure 3 A schematic diagram of an association relationship tree determined based on association relationship information provided in an embodiment of the present application;

[0024] Figure 4 A schematic diagram of a specific implementation method of step S104 provided in an embodiment of the present application;

[0025] Figure 5 A flowchart of a storage array alarm information processing method provided in an embodiment of the present application Figure 2 ;

[0026] Figure 6 A schematic diagram of the structure of a storage array alarm information processing device provided in an embodiment of the present application;

[0027] Figure 7 A schematic diagram of the structure of the electronic device provided in this application. DETAILED DESCRIPTION

[0028] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0029] It should be noted that, in the description of this application, the terms "include", "comprise" or any other variant thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. The terms "first", "second", etc. in this application are used to distinguish similar objects, and are not used to describe a specific order or sequence.

[0030] As a core component of the information infrastructure, the storage array is equipped with a large number of hard disks, which can create thousands or even millions of volumes or file systems, thereby ensuring the security and reliability of data. However, when these volumes and / or file systems fail, a large number of alarm messages will be generated, and a large number of alarm messages will be reported to the target server in the same time period, which will lead to an alarm storm and affect the normal operation of user services; wherein, the alarm information that causes the alarm storm is the alarm information that requires the user's attention and processing. In the related art, it is often necessary to set a delayed reporting time interval, extract the event characteristics of the alarm information within the delayed reporting time interval, merge the alarm information with the same or similar event characteristics, and then report the alarm information to avoid the occurrence of an alarm storm. However, the processing method of merging and reporting the alarm information will lead to the problem of untimely reporting of the alarm information.

[0031] In order to solve the above technical problems, the embodiments of the present application propose the following technical concepts: on the basis of obtaining the association tree corresponding to each storage object in the storage array and the alarm information of each storage object, the alarm storage object is determined from each storage object, and the target alarm information of the alarm storage object is generated according to the alarm status of the alarm information of the alarm storage object; then, the alarm storage object is used as the alarm object to be analyzed, and through the association tree, it is determined whether the alarm object to be analyzed has a child storage object; if the alarm object to be analyzed has a child storage object, the real-time alarm information corresponding to the child storage object is obtained, and the other cause alarm information of the child storage object is generated according to the target alarm information, the association tree and the parameter information of the child storage object; the first impact degree corresponding to the other cause alarm information is compared with the second impact degree corresponding to the real-time alarm information; if the first impact degree is greater than the second impact degree, the other cause alarm information is generated according to the other cause alarm information. Alarm information is generated to generate target alarm information of the sub-storage object; if the target alarm information of the sub-storage object meets the preset alarm condition, the sub-storage object is determined as the alarm object to be analyzed, and the step of judging whether the alarm object to be analyzed has a sub-storage object is returned to the association tree; if the target alarm information of the sub-storage object does not meet the preset alarm condition, the target alarm information of the alarm storage object is output to the monitoring platform; while reporting the target alarm information of the alarm storage object, the real-time alarm information of the sub-storage object of the alarm storage object caused by the target alarm information of the alarm storage object is not reported, that is, the occurrence of alarm storms is avoided, and the target alarm information of the alarm storage object is reported to the monitoring platform in a timely manner, which solves the problem of untimely reporting of alarm information caused by merging alarm information and reporting in related technologies to avoid alarm storms.

[0032] In order to enable those skilled in the art to better understand the present application, the present application is further described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0033] In conjunction with the specific application environment architecture or specific hardware architecture on which the execution of the storage array alarm information processing method depends, the specific application environment architecture or specific hardware architecture is described herein. Figure 1 , Figure 1 A schematic diagram of a scenario of a storage array alarm information processing method provided in an embodiment of the present application.

[0034] like Figure 1 As shown, the scenario includes: a storage array server and a monitoring platform.

[0035] The storage array server processes the alarm information of each storage object in the storage array by executing the storage array alarm information processing method provided in the embodiment of the present application, and then sends the target alarm information of the alarm storage object to the monitoring platform, thereby realizing that while reporting the target alarm information of the alarm storage object, the real-time alarm information of the sub-storage object of the alarm storage object caused by the target alarm information of the alarm storage object is not reported, that is, the occurrence of an alarm storm is avoided, and the target alarm information of the alarm storage object is reported to the monitoring platform in a timely manner, which solves the problem of untimely reporting of alarm information caused by merging alarm information and reporting to avoid the occurrence of an alarm storm in the related technology.

[0036] Figure 2 A flowchart of a storage array alarm information processing method provided in an embodiment of the present application Figure 1 ,like Figure 2 As shown, an embodiment of the present application provides a storage array alarm information processing method, with the storage array server as the execution subject, and the method is described in detail as follows:

[0037] S101: Obtain an association relationship tree corresponding to each storage object in a storage array.

[0038] Exemplarily, the association tree indicates the upper and lower storage dependency relationships between storage objects in the storage array; specifically, the specific implementation of step S101 includes:

[0039] Step S1011, obtaining association relationship information between storage objects in the storage array; wherein the association relationship information is determined by the upper and lower level storage dependency relationship between the storage objects.

[0040] Step S1012: Generate an association tree according to the association information between the storage objects.

[0041] Figure 3 A schematic diagram of an association relationship tree determined based on association relationship information provided in an embodiment of the present application, such as Figure 3As shown, each storage object includes a hard disk enclosure, a hard disk, a redundant array of independent disks (RAID), a storage pool, a volume, a file system, a network file system (NFS), a snapshot and a clone, and a remote replication, wherein the number of each storage object is one or more; then, according to the upper and lower storage dependency relationships among the hard disk enclosure, the hard disk, the RAID, the storage pool, the volume, the file system, the NFS, the snapshot and the clone, and the remote replication, the association relationship information is generated, wherein the association relationship information includes that the hard disk is the next level of the hard disk enclosure, the RAID is the next level of the hard disk, the storage pool is the next level of the RAID, the volume is the next level of the storage pool, the file system is the next level of the storage pool, the NFS is the next level of the file system, the snapshot and the clone are the next level of the volume, and the remote replication is the next level of the volume, then, according to the association relationship information between the storage objects, the following can be generated: Figure 3 The relationship tree shown.

[0042] S102: Acquire alarm information of each storage object, and determine a corresponding alarm time according to the alarm information of each storage object.

[0043] Exemplarily, when an alarm occurs in one or several storage objects, the storage array server can obtain corresponding alarm information, and then process the alarm information of each storage object to determine the corresponding alarm time, which is the time when the alarm occurs in the corresponding storage object.

[0044] In this embodiment, the storage array server acquires the alarm information of each storage object by means of active polling acquisition based on a preset time and passive receiving acquisition; further, the acquisition method of active polling acquisition based on a preset time specifically includes: acquiring the alarm information of each storage object in response to a preset polling time. Further, the process of determining the preset polling time includes: the storage array server determines the preset polling time according to the association tree corresponding to each storage object; specifically, the more complex the association relationship of the association tree, the shorter the preset polling time.

[0045] S103: Filter out alarm storage objects from the storage objects according to the alarm time of each storage object.

[0046] Exemplarily, each storage object corresponds to a different alarm time, and then the first alarm time is determined among the alarm times corresponding to each storage object. Then, based on the first alarm time, the alarm storage object is filtered out from each storage object, that is, the first alarm of the alarm storage object.

[0047] S104: Generate target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object.

[0048] Exemplarily, different alarm states corresponding to alarm information indicate the alarm cause of the alarm storage object, and then according to the alarm cause of the alarm storage object, the corresponding target alarm information can be generated. Specifically, for example, an alarm occurs in the alarm storage object, and then according to the alarm state, it is determined whether the alarm cause of the alarm storage object is due to its own reasons or non-self reasons; then, in combination with the alarm cause, the corresponding target alarm information is generated; wherein the target alarm information includes the storage object number, storage object name, storage object type, alarm state, and self-cause alarm identifier of the alarm storage object.

[0049] Furthermore, if the alarm reason of the alarm storage object is its own reason, the subsequent steps are executed to realize the output of the target alarm information of the alarm storage object to the monitoring platform; if the alarm reason of the alarm storage object is not its own reason (that is, the alarm of the alarm storage object is caused by the alarm of the upper-level storage object of the alarm storage object), the target alarm information of the alarm storage object will not be output to the monitoring platform for the time being to avoid the occurrence of an alarm storm.

[0050] Specifically, Figure 4 A schematic diagram of a specific implementation method of step S104 provided in an embodiment of the present application is shown in FIG. Figure 4 As shown, the specific implementation of step S104 includes:

[0051] Step S1041, obtaining the alarm status of the alarm information of the alarm storage object.

[0052] Step S1042, determining whether the alarm status of the alarm information of the alarm storage object is an offline alarm status.

[0053] Exemplarily, there are multiple reasons that cause the alarm storage object to be in an offline alarm state. The alarm storage object is in an offline alarm state due to different reasons. Then, by judging whether the alarm state of the alarm information of the alarm storage object is an offline alarm state, it is determined whether the alarm cause of the alarm storage object is due to its own reasons or not due to its own reasons.

[0054] Step S1043: if the alarm status of the alarm information of the alarm storage object is not an offline alarm status, a first type of self-caused alarm identifier is generated.

[0055] Step S1044: Generate target alarm information of the alarm storage object according to the self-caused alarm identifier of the first category and the alarm information of the alarm storage object.

[0056] In this embodiment, the self-caused alarm flag is used to indicate that the offline alarm state of the alarm storage object is caused by factors of the alarm storage object itself.

[0057] Exemplarily, when it is determined that the alarm status of the alarm information of the alarm storage object is not an offline alarm status, it is determined that the offline alarm status of the alarm storage object is caused by factors of the alarm storage object itself, and then a first type of self-caused alarm identifier is generated; further, the alarm information of the alarm storage object is identified according to the first type of self-caused alarm identifier, and target alarm information of the alarm storage object is generated, wherein the target alarm information includes the storage object number, storage object name, storage object type, alarm status, and the first type of self-caused alarm identifier of the alarm storage object.

[0058] Step S1045: if the alarm status of the alarm information of the alarm storage object is an offline alarm status, it is determined whether the alarm storage object has a parent storage object according to the association relationship tree.

[0059] Exemplarily, on the basis of determining that the alarm status of the alarm information of the alarm storage object is an offline alarm status, it is necessary to further determine the cause of the offline alarm status of the alarm storage object, that is, it is necessary to judge whether the offline alarm status of the alarm storage object is caused by the alarm storage object itself or by the alarm of the upper-level storage object of the alarm storage object, so it is judged whether the alarm storage object has a parent storage object according to the association relationship tree.

[0060] Step S1046: If the alarm storage object has no parent storage object, a second type of self-caused alarm identifier is generated.

[0061] Step S1047: Generate target alarm information of the alarm storage object according to the second type of self-caused alarm identifier and the alarm information of the alarm storage object.

[0062] Exemplarily, when it is determined that the alarm storage object has no parent storage object (i.e., the upper-level storage object), it is determined that the offline alarm state of the alarm storage object is caused by factors of the alarm storage object itself, and then a second-class self-caused alarm identifier is generated; further, the alarm information of the alarm storage object is identified according to the second-class self-caused alarm identifier, and target alarm information of the alarm storage object is generated, wherein the target alarm information includes the storage object number, storage object name, storage object type, alarm state, and the second-class self-caused alarm identifier of the alarm storage object.

[0063] Step S1048: If the alarm storage object has a parent storage object, it is determined whether the alarm state corresponding to the parent storage object is a partial offline alarm state, a full offline alarm state, or a full online alarm state.

[0064] Exemplarily, on the basis of determining that the alarm storage object has a parent storage object, it is necessary to determine the cause of the offline alarm state of the alarm storage object by judging whether the alarm state corresponding to the parent storage object is a partially offline alarm state, a completely offline alarm state, or a completely non-offline alarm state; specifically, for example, the parent storage objects include a first parent storage object, a second parent storage object, and a third parent storage object, and the second parent storage object and the third parent storage object are spare storage objects of the alarm storage object, that is, when the first parent storage object is offline, as long as the second parent storage object and / or the third parent storage object are not offline, the alarm storage object is not offline, and only when the first parent storage object, the second parent storage object, and the third parent storage object are all offline, the alarm storage object is offline; therefore, it is necessary to judge whether the alarm state corresponding to the parent storage object is a partially offline alarm state, a completely offline alarm state, or a completely non-offline alarm state.

[0065] Step S1049: If the alarm state corresponding to the parent storage object is a partial offline alarm state or a completely online alarm state, a third type of self-caused alarm reporting mark is generated.

[0066] Step S104a: generating target alarm information of the alarm storage object according to the third type of self-caused alarm identifier and the alarm information of the alarm storage object.

[0067] Exemplarily, when it is determined that the alarm status corresponding to the parent storage object is a partial offline alarm status or a completely online alarm status, it is determined that the offline alarm status of the alarm storage object is caused by factors of the alarm storage object itself, and then a third type of self-caused alarm identifier is generated; further, the alarm information of the alarm storage object is identified according to the third type of self-caused alarm identifier, and target alarm information of the alarm storage object is generated, wherein the target alarm information includes the storage object number, storage object name, storage object type, alarm status, and the third type of self-caused alarm identifier of the alarm storage object.

[0068] Optionally, after the target alarm information of the alarm storage object is generated, the alarm status of the alarm information of the alarm storage object continues to be obtained.

[0069] Step S104b: if the alarm state corresponding to the parent storage object is all offline alarm states, a reporting suspension information is generated; wherein the reporting suspension information is used to indicate that the target alarm information of the alarm storage object is not output to the monitoring platform temporarily.

[0070] Exemplarily, when it is determined that the alarm status corresponding to the parent storage object is a fully offline alarm status, it is determined that the offline alarm status of the alarm storage object is caused by the fully offline alarm status of the parent storage object, that is, the alarm reason for the offline alarm of the alarm storage object is not its own reason. Furthermore, the storage array server temporarily does not output the target alarm information of the alarm storage object to the monitoring platform to avoid the occurrence of an alarm storm.

[0071] Optionally, after generating the reporting suspension information, the alarm status of the alarm information of the alarm storage object continues to be obtained.

[0072] S105: Use the alarm storage object as the alarm object to be analyzed.

[0073] S106: Determine whether the alarm object to be analyzed has a child storage object according to the association tree.

[0074] Exemplarily, when it is determined that the alarm storage object generates an alarm due to its own reasons, the alarm storage object is used as the alarm object to be analyzed; and then, it is determined whether the alarm object to be analyzed has a child storage object according to the association tree; Figure 3 As shown, for example, if the alarm object to be analyzed is a storage pool, the alarm object to be analyzed has a sub-storage object; if the alarm object to be analyzed is an NFS, the alarm object to be analyzed has no sub-storage object.

[0075] Furthermore, if the alarm object to be analyzed has no sub-storage object, the target alarm information of the alarm storage object is output to the monitoring platform.

[0076] If the alarm object to be analyzed has a sub-storage object, step S107 is executed.

[0077] S107: If the alarm object to be analyzed has a sub-storage object, real-time alarm information corresponding to the sub-storage object is obtained.

[0078] Exemplarily, if the alarm object to be analyzed has a sub-storage object, the alarm information of the sub-storage object is re-acquired to obtain the real-time alarm status of the sub-storage object, that is, to obtain the real-time alarm information corresponding to the sub-storage object.

[0079] S108: Generate other cause alarm information of the sub-storage object according to the target alarm information, the association relationship tree and the parameter information of the sub-storage object.

[0080] Furthermore, based on the target alarm information including the storage object number, storage object name, storage object type, alarm status, and self-cause alarm identifier of the alarm storage object (i.e., the alarm object to be analyzed), the target alarm information is processed through the association relationship tree and the parameter information of the sub-storage object to generate other-cause alarm information of the sub-storage object. The other-cause alarm information includes the storage object number, storage object name, storage object type, alarm status, and other-cause alarm identifier of the sub-storage object. The other-cause alarm identifier is used to indicate that the other-cause alarm information is not generated due to the sub-storage object's own reasons.

[0081] Specifically, according to the association tree, it is determined that the parent storage objects of the child storage object include the first parent storage object, the second parent storage object and the third parent storage object, wherein the first parent storage object is an alarm storage object (i.e., an alarm object to be analyzed), and no alarm occurs in the second parent storage object and the third parent storage object. For example, the first parent storage object is in an offline alarm state, and the second parent storage object and the third parent storage object are in a normal operating state. The alarm state of the alarm storage object (i.e., the alarm object to be analyzed) included in the corresponding target alarm information is an offline alarm state; then, the target alarm information is processed through the association tree and the parameter information of the child storage object to generate the other cause alarm information of the child storage object, the other cause alarm information including the storage object number, storage object name, storage object type, alarm state, and other cause alarm identifier of the child storage object, wherein the alarm state of the child storage object included in the other cause alarm information is a weakened data redundancy capability.

[0082] S109: Compare the first impact level corresponding to the alarm information with the second impact level corresponding to the real-time alarm information.

[0083] Exemplarily, based on a preset impact quantification rule, according to the upper and lower storage dependencies of the child storage object, the impact of the alarm information on the child storage object is calculated and quantified, and then a first impact degree is obtained; for example, if the parent storage objects of the child storage object include a first parent storage object, a second parent storage object and a third parent storage object, wherein the first parent storage object is an alarm storage object (i.e., an alarm object to be analyzed), and the second parent storage object and the third parent storage object have no alarm, for example, the first parent storage object is in an offline alarm state, and the second parent storage object and the third parent storage object are in a normal operating state, then the impact of the alarm information on the child storage object is "weakened data redundancy capability", and then the first impact degree is quantified as 5; if the parent storage objects of the child storage object include a first parent storage object and a second parent storage object, wherein the first parent storage object is an alarm storage object (an alarm object to be analyzed), and the second parent storage object has no alarm, for example, the first parent storage object is in an offline alarm state, and the second parent storage object is in a normal operating state, then the impact of the alarm information on the child storage object is "loss of data redundancy capability", and then the first impact degree is quantified as 10.

[0084] Furthermore, based on a preset impact quantification rule, the impact of the real-time alarm information on the sub-storage object is quantified to obtain a second impact degree.

[0085] Furthermore, the magnitude relationship between the first impact degree corresponding to the alarm information and the second impact degree corresponding to the real-time alarm information is determined.

[0086] In another possible implementation, the target alarm information of the alarm object to be analyzed, the other-cause alarm information of the sub-storage object, and the real-time alarm information of the sub-storage object are input into a pre-trained large language model to output a first impact degree corresponding to the other-cause alarm information and a second impact degree corresponding to the real-time alarm information; wherein the pre-trained large language model estimates the alarm repair time required to resolve the alarm based on the alarm type of the target alarm information of the alarm object to be analyzed, and then estimates the comprehensive impact of the other-cause alarm information of the sub-storage object on the sub-storage object and the next-level storage object of the sub-storage object (if any) based on the upper and lower storage dependencies of the sub-storage object; and then, based on the alarm repair time and the comprehensive impact of the alarm, a first impact degree is generated; the pre-trained large language model estimates the comprehensive impact of the real-time alarm information of the sub-storage object on the sub-storage object and the next-level storage object of the sub-storage object (if any) based on the upper and lower storage dependencies of the sub-storage object, and then, based on the comprehensive impact of the real-time alarm, a second impact degree is generated.

[0087] S110: If the first impact is greater than the second impact, generating target alarm information of the sub-storage object according to the alarm information.

[0088] Exemplarily, if the first impact degree is greater than the second impact degree, it indicates that when the sub-storage object has a storage object at the next level, the alarm corresponding to the alarm information may continue to affect the operating status of the sub-storage object with a storage object at the next level; then, based on the alarm information, the target alarm information of the sub-storage object is generated, wherein the target alarm information of the sub-storage object includes the storage object number, storage object name, storage object type, alarm status, and alarm identifier of the sub-storage object; wherein the alarm identifier in the alarm information only includes the storage object number of the alarm storage object (i.e., the alarm object to be analyzed), and the alarm identifier in the target alarm information of the sub-storage object includes the storage object number of the alarm storage object (i.e., the alarm object to be analyzed), and the storage object number of the sub-storage object.

[0089] Further, if the first impact degree is less than or equal to the second impact degree, target alarm information of the sub-storage object is not generated.

[0090] S111: Determine whether the target alarm information of the sub-storage object meets the preset alarm condition.

[0091] Exemplarily, the first impact degree corresponding to the alarm information is used as the sub-storage object impact degree of the target alarm information of the sub-storage object, and then it is determined whether the sub-storage object impact degree meets the preset alarm condition, that is, the relationship between the sub-storage object impact degree and the impact degree threshold corresponding to the preset alarm condition is determined, wherein the impact degree threshold corresponding to the preset alarm condition is determined based on the storage object type of the sub-storage object; specifically, for example, if the sub-storage object is RAID, then based on the sub-storage object being RAID, the impact degree threshold corresponding to the preset alarm condition is determined to be 3; if the sub-storage object is a volume, then based on the sub-storage object being a volume, the impact degree threshold corresponding to the preset alarm condition is determined to be 6.

[0092] S112: If the target alarm information of the sub-storage object meets the preset alarm condition, the sub-storage object is determined as the alarm object to be analyzed, and the process returns to the step of determining whether the alarm object to be analyzed has a sub-storage object according to the association tree.

[0093] Exemplarily, if the target alarm information of the sub-storage object meets the preset alarm condition, that is, the influence of the sub-storage object is greater than or equal to the influence threshold corresponding to the preset alarm condition, it indicates that the alarm occurring in the alarm storage object also affects the storage object at the next level of the sub-storage object, and then the sub-storage object is determined as the alarm object to be analyzed, and the process returns to the step of determining whether the alarm object to be analyzed has a sub-storage object according to the association tree, thereby achieving the goal of not reporting the real-time alarm information of the sub-storage object caused by the target alarm information of the alarm storage object.

[0094] Specifically, for example, the sub-storage object is RAID, the corresponding sub-storage object impact is 5, and the impact threshold corresponding to the preset alarm condition is 3. Then, based on the fact that the sub-storage object impact 5 is greater than the impact threshold 3 corresponding to the preset alarm condition, it is determined that the alarm occurring in the alarm storage object also affects the storage object at the next level of the sub-storage object (i.e., RAID), and the sub-storage object is then determined as the alarm object to be analyzed, and the process returns to step S106.

[0095] Optionally, while or after determining the sub-storage object as the alarm object to be analyzed and returning to the step of determining whether the alarm object to be analyzed has a sub-storage object according to the association tree, low-level alarm information is generated based on the real-time alarm information of the sub-storage object caused by the target alarm information of the alarm storage object, and the target alarm information of the alarm storage object is output to the monitoring platform; wherein the low-level alarm information is used to record the occurrence of an alarm in the sub-storage object for user viewing, but does not require user attention and processing, thereby avoiding the generation of an alarm storm.

[0096] S113: If the target alarm information of the sub-storage object does not meet the preset alarm condition, the target alarm information of the alarm storage object is output to the monitoring platform.

[0097] Exemplarily, if the target alarm information of the sub-storage object meets the preset alarm condition, that is, the impact of the sub-storage object is less than the impact threshold corresponding to the preset alarm condition, it indicates that the alarm generated by the alarm storage object no longer affects the next-level storage object of the sub-storage object, and then the target alarm information of the alarm storage object is output to the monitoring platform.

[0098] Specifically, for example, the sub-storage object is a volume, the corresponding sub-storage object impact is 5, and the impact threshold corresponding to the preset alarm condition is 6. Then, based on the fact that the sub-storage object impact 5 is less than the impact threshold 6 corresponding to the preset alarm condition, it is determined that the alarm generated by the alarm storage object no longer affects the next-level storage object of the sub-storage object (i.e., the volume), and then the target alarm information of the alarm storage object is output to the monitoring platform.

[0099] Furthermore, if the storage object at the next level of the sub-storage object corresponds to alarm information, the storage object at the next level of the sub-storage object is determined as a new alarm storage object, and based on the alarm status of the alarm information of the alarm storage object (the storage object at the next level of the sub-storage object), the target alarm information of the alarm storage object (the storage object at the next level of the sub-storage object) is generated, and the subsequent steps provided in the embodiment of the present application (step S105-step S113) are re-executed.

[0100] In the embodiment of the present application, based on obtaining the association tree corresponding to each storage object in the storage array and the alarm information of each storage object, an alarm storage object is determined from each storage object, and the target alarm information of the alarm storage object is generated according to the alarm status of the alarm information of the alarm storage object; then, the alarm storage object is used as the alarm object to be analyzed, and through the association tree, it is determined whether the alarm object to be analyzed has a child storage object. If the alarm object to be analyzed has a child storage object, the real-time alarm information corresponding to the child storage object is obtained, and it is further determined whether the alarm of the alarm object to be analyzed (alarm storage object) has an impact on its child storage object. If so, the target alarm information of the child storage object is generated; then, if the target alarm information of the child storage object meets the preset If the alarm condition is met, the sub-storage object is determined as the alarm object to be analyzed, and the step of determining whether the alarm object to be analyzed has a sub-storage object is returned to the association tree; if the target alarm information of the sub-storage object does not meet the preset alarm condition, the target alarm information of the alarm storage object is output to the monitoring platform; while reporting the target alarm information of the alarm storage object, the real-time alarm information of the sub-storage object of the alarm storage object caused by the target alarm information of the alarm storage object is not reported, that is, the occurrence of alarm storms is avoided, and the target alarm information of the alarm storage object is reported to the monitoring platform in a timely manner, which solves the problem of untimely reporting of alarm information caused by merging alarm information and reporting to avoid alarm storms in related technologies.

[0101] Furthermore, after step S113, the method provided in the embodiment of the present application further includes:

[0102] S114: Generate alarm impact object information according to the determined at least one sub-storage object.

[0103] S115: Send the alarm impact object information to the monitoring platform.

[0104] Exemplarily, the sub-storage objects affected by the alarm of the alarm storage object, and / or the sub-storage objects of the alarm storage object determined as the alarm object to be analyzed, are summarized to generate alarm-affected object information, that is, the alarm-affected object information includes the storage object number and storage object name of the sub-storage object; and then the alarm-affected object information is sent to the monitoring platform, so that the user can know the impact range of the alarm storage object through the information output by the monitoring platform. Specifically, for example, combined with Figure 3In the association tree shown, the alarm storage object is a hard disk, and the sub-storage object affected by the hard disk alarm is RAID. Based on steps S107 to S112, RAID is determined as the alarm object to be analyzed, and then it is further determined that the sub-storage object of RAID affected by the hard disk alarm is a storage pool. Furthermore, based on steps S107 to S112, the storage pool is not determined as the alarm object to be analyzed, and then it is determined that the impact scope of the alarm storage object (hard disk) alarm includes RAID and storage pool, that is, alarm impact object information is generated; and then the alarm impact object information is sent to the monitoring platform.

[0105] Furthermore, after the alarm affected object information is sent to the monitoring platform, the method provided by the embodiment of the present application also includes: in response to the release information of the alarm status corresponding to the alarm storage object, obtaining the alarm information of each sub-storage object corresponding to the alarm affected object information, and determining the corresponding alarm time according to the alarm information of each sub-storage object; according to the alarm time of each sub-storage object, filtering out the alarm storage object from each sub-storage object; executing the step of generating the target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object, and subsequent steps.

[0106] For example, in combination Figure 3 In the association tree shown, the alarm storage object is a hard disk, and the scope of influence of the alarm of the alarm storage object (hard disk) includes RAID and storage pool; then, after the alarm state corresponding to the hard disk is released, the corresponding alarm state release information is generated; then, the storage array server responds to the alarm state release information of the hard disk and re-acquires the alarm information of the RAID and the storage pool; then, according to the alarm information of the RAID and the storage pool, the corresponding alarm time is determined respectively; further, according to the alarm time of the RAID and the storage pool, the alarm storage objects are screened out from the RAID and the storage pool, and then steps S104-S112 are executed to realize the confirmation of the target alarm information of the alarm storage object in the storage array and output it to the monitoring platform, so that while reporting the target alarm information of the alarm storage object, the real-time alarm information of the sub-storage object of the alarm storage object caused by the target alarm information of the alarm storage object is not reported, that is, the occurrence of alarm storm is avoided, and the target alarm information of the alarm storage object is reported to the monitoring platform in time.

[0107] Figure 5 A flowchart of a storage array alarm information processing method provided in an embodiment of the present application Figure 2 In the embodiment of the present application, Figure 2 Based on the embodiment provided, step S108, step S110-step S113 are further refined, such as Figure 5As shown, the storage array alarm information processing method provided in this embodiment includes the following steps:

[0108] S201: Obtain an association relationship tree corresponding to each storage object in the storage array.

[0109] In this embodiment, the discussion on obtaining the association relationship tree has been described in detail in step S101 and will not be repeated here.

[0110] S202: Acquire alarm information of each storage object, and determine a corresponding alarm time according to the alarm information of each storage object.

[0111] In this embodiment, the discussion on obtaining alarm information and determining the alarm time has been described in detail in step S102, which will not be repeated here.

[0112] S203: Filter out alarm storage objects from the storage objects according to the alarm time of each storage object.

[0113] In this embodiment, the discussion on filtering the alarm storage objects has been described in detail in step S103 and will not be repeated here.

[0114] S204: Generate target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object.

[0115] In this embodiment, the discussion on generating the target alarm information of the alarm storage object has been described in detail in step S104, which will not be repeated here.

[0116] S205: Use the alarm storage object as the alarm object to be analyzed.

[0117] In this embodiment, the discussion on taking the alarm storage object as the alarm object to be analyzed has been described in detail in step S105, which will not be repeated here.

[0118] S206: Determine whether the alarm object to be analyzed has a child storage object according to the association tree.

[0119] In this embodiment, the discussion on determining whether the alarm object to be analyzed has a sub-storage object has been described in detail in step S106, which will not be repeated here.

[0120] S207: If the alarm object to be analyzed has a sub-storage object, real-time alarm information corresponding to the sub-storage object is obtained.

[0121] In this embodiment, the discussion on obtaining the real-time alarm information corresponding to the sub-storage object has been described in detail in step S107, which will not be repeated here.

[0122] S208: Obtaining the alarm impact range information of the alarm object to be analyzed according to the target alarm information and the association tree.

[0123] S209: Obtaining an initial alarm impact value according to the alarm impact range information.

[0124] Exemplarily, according to the alarm status of the target alarm information and the upper and lower storage dependencies of the alarm object to be analyzed in the association tree, the sub-storage objects affected by the alarm status of the alarm object to be analyzed and / or the next-level storage objects of the sub-storage objects are estimated, and then the alarm impact range information of the alarm object to be analyzed is obtained; specifically, for example, combined with Figure 3 In the association tree shown, the alarm storage object is a hard disk. When an alarm occurs in the hard disk, it is estimated to affect the sub-storage object RAID, the next-level storage object storage pool of the RAID, and the next-level storage object volume of the storage pool, thereby obtaining the alarm impact scope information, which includes RAID, storage pool and volume. Further, based on the alarm impact scope information, the initial alarm impact value can be obtained. For example, if the alarm impact scope information includes 3 estimated affected storage objects, the initial alarm impact value is 3. If the alarm impact scope information includes 4 estimated affected storage objects, the initial alarm impact value is 4.

[0125] S210: Generate other-cause alarm information of the sub-storage object according to the target alarm information, the initial alarm impact value and the parameter information of the sub-storage object.

[0126] Exemplarily, based on the parameter information of the sub-storage object, the storage object number, storage object name, and storage object type of the sub-storage object are determined, and based on the target alarm information and the parameter information of the sub-storage object, the alarm status of the sub-storage object is obtained; further, based on the initial alarm impact value, the alarm status of the sub-storage object, the storage object number, storage object name, and storage object type of the sub-storage object, other-cause alarm information of the sub-storage object is generated, wherein the other-cause alarm information includes the storage object number, storage object name, storage object type, alarm status, other-cause alarm identifier, and initial alarm impact value of the sub-storage object.

[0127] S211: Compare the first impact level corresponding to the alarm information with the second impact level corresponding to the real-time alarm information.

[0128] In this embodiment, the discussion on determining the first impact degree corresponding to the alarm information and the second impact degree corresponding to the real-time alarm information has been described in detail in step S109, which will not be repeated here.

[0129] S212: If the first impact is greater than the second impact, update the initial alarm impact value according to the alarm information to generate a current alarm impact value corresponding to the sub-storage object; generate target alarm information of the sub-storage object according to the alarm information and the current alarm impact value corresponding to the sub-storage object.

[0130] Exemplarily, for example, the initial alarm impact value is 5, and the initial alarm impact value is updated according to its cause alarm information to obtain the current alarm impact value of 4 corresponding to the generated sub-storage object. Then, according to its cause alarm information and the current alarm impact value 3 corresponding to the sub-storage object, the target alarm information of the sub-storage object is generated, wherein the target alarm information of the sub-storage object includes the storage object number of the sub-storage object, storage object name, storage object type, alarm status, its cause alarm identifier, and current alarm impact value.

[0131] S213: Determine whether the target alarm information of the sub-storage object meets the preset alarm condition.

[0132] Exemplarily, based on the current alarm impact value corresponding to the target alarm information of the sub-storage object, it is determined whether the target alarm information of the sub-storage object satisfies the preset alarm condition, that is, the relationship between the current alarm impact value of the sub-storage object and the alarm impact threshold corresponding to the preset alarm condition is determined, wherein the alarm impact threshold corresponding to the preset alarm condition is determined based on the storage object type of the sub-storage object; specifically, for example, if the sub-storage object is RAID, then based on the sub-storage object being RAID, the alarm impact threshold corresponding to the preset alarm condition is determined to be 3; if the sub-storage object is a volume, then based on the sub-storage object being a volume, the alarm impact threshold corresponding to the preset alarm condition is determined to be 6.

[0133] S214: If the target alarm information of the sub-storage object meets the preset alarm condition, the sub-storage object is determined as the alarm object to be analyzed, and the process returns to the step of determining whether the alarm object to be analyzed has a sub-storage object according to the association tree.

[0134] Exemplarily, if the target alarm information of the sub-storage object meets the preset alarm condition, that is, the current alarm impact value of the sub-storage object is greater than or equal to the alarm impact threshold corresponding to the preset alarm condition, it indicates that the alarm occurring in the alarm storage object also affects the storage object at the next level of the sub-storage object, and then the sub-storage object is determined as the alarm object to be analyzed, and the step of determining whether the alarm object to be analyzed has a sub-storage object is returned according to the association relationship tree, thereby achieving the goal of not reporting the real-time alarm information of the sub-storage object caused by the target alarm information of the alarm storage object.

[0135] Specifically, for example, the sub-storage object is RAID, the corresponding current alarm impact value is 5, and the alarm impact threshold corresponding to the preset alarm condition is 3. Then, based on the fact that the current alarm impact value 5 is greater than the alarm impact threshold 3 corresponding to the preset alarm condition, it is determined that the alarm occurring in the alarm storage object also affects the storage object at the next level of the sub-storage object (i.e., RAID), and then the sub-storage object is determined as the alarm object to be analyzed, and the process returns to step S206.

[0136] S215: If the target alarm information of the sub-storage object does not meet the preset alarm condition, the target alarm information of the alarm storage object is output to the monitoring platform.

[0137] Exemplarily, if the target alarm information of the sub-storage object meets the preset alarm condition, that is, the current alarm impact value of the sub-storage object is less than the alarm impact threshold corresponding to the preset alarm condition, then it indicates that the alarm occurring in the alarm storage object no longer affects the next-level storage object of the sub-storage object, and then the target alarm information of the alarm storage object is output to the monitoring platform.

[0138] Specifically, for example, the sub-storage object is a volume, the corresponding current alarm impact value is 5, and the alarm impact threshold corresponding to the preset alarm condition is 6. Then, based on the fact that the current alarm impact value 5 is less than the alarm impact threshold 6 corresponding to the preset alarm condition, it is determined that the alarm occurring in the alarm storage object no longer affects the next-level storage object of the sub-storage object (i.e., the volume), and then the target alarm information of the alarm storage object is output to the monitoring platform.

[0139] Through the description of the above implementation methods, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method.

[0140] Figure 6 This is a schematic diagram of the structure of the storage array alarm information processing device provided in the embodiment of the present application. Figure 6 As shown, an embodiment of the present application also provides a storage array alarm information processing device 3, including: an acquisition module 31, a first processing module 32, a first judgment module 33, a second processing module 34, a second judgment module 35, a third processing module 36, a third judgment module 37, a fourth processing module 38, and an output module 39.

[0141] An acquisition module 31 is used to acquire an association relationship tree corresponding to each storage object in the storage array;

[0142] The acquisition module 31 is also used to acquire the alarm information of each storage object, and determine the corresponding alarm time according to the alarm information of each storage object;

[0143] The first processing module 32 is used to filter out the alarm storage object from each storage object according to the alarm time of each storage object; generate target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object; and use the alarm storage object as the alarm object to be analyzed;

[0144] A first judgment module 33 is used to judge whether the alarm object to be analyzed has a child storage object according to the association tree;

[0145] The second processing module 34 is used to obtain the real-time alarm information corresponding to the sub-storage object if the alarm object to be analyzed has a sub-storage object; generate the other cause alarm information of the sub-storage object according to the target alarm information, the association tree and the parameter information of the sub-storage object;

[0146] A second judgment module 35 is used to compare the first impact degree corresponding to the alarm information with the second impact degree corresponding to the real-time alarm information;

[0147] A third processing module 36 is used to generate target alarm information of the sub-storage object according to the alarm information if the first impact degree is greater than the second impact degree;

[0148] The third judgment module 37 is used to judge whether the target alarm information of the sub-storage object meets the preset alarm condition;

[0149] The fourth processing module 38 is used to determine the sub-storage object as the alarm object to be analyzed if the target alarm information of the sub-storage object meets the preset alarm condition, and return to the step of determining whether the alarm object to be analyzed has a sub-storage object according to the association tree;

[0150] The output module 39 is used to output the target alarm information of the alarm storage object to the monitoring platform if the target alarm information of the sub-storage object does not meet the preset alarm condition.

[0151] In a possible implementation, when the first processing module 32 generates target alarm information of the alarm storage object based on the alarm status of the alarm information of the alarm storage object, it is specifically used to: determine whether the alarm status of the alarm information of the alarm storage object is an offline alarm status; if the alarm status of the alarm information of the alarm storage object is not an offline alarm status, generate a first type of self-caused alarm identifier; wherein the self-caused alarm identifier is used to indicate that the offline alarm status of the alarm storage object is caused by factors of the alarm storage object itself; and generate target alarm information of the alarm storage object based on the first type of self-caused alarm identifier and the alarm information of the alarm storage object.

[0152] In one possible implementation, after determining whether the alarm status of the alarm information of the alarm storage object is an offline alarm status, the first processing module 32 is further used to: if the alarm status of the alarm information of the alarm storage object is an offline alarm status, determine whether the alarm storage object has a parent storage object according to the association tree; if the alarm storage object has no parent storage object, generate a second type of self-caused alarm identifier; and generate target alarm information of the alarm storage object according to the second type of self-caused alarm identifier and the alarm information of the alarm storage object.

[0153] In a possible implementation, after determining whether the alarm storage object has a parent storage object according to the association tree, the first processing module 32 is further used to: if the alarm storage object has a parent storage object, determine whether the alarm state corresponding to the parent storage object is a partial offline alarm state, a full offline alarm state, or a full online alarm state; if the alarm state corresponding to the parent storage object is a partial offline alarm state or a full online alarm state, generate a third type of self-caused alarm reporting identifier; and generate target alarm information of the alarm storage object based on the third type of self-caused alarm identifier and the alarm information of the alarm storage object.

[0154] In one possible implementation, after determining whether the alarm status corresponding to the parent storage object is a partially offline alarm status, a fully offline alarm status, or a fully online alarm status, the first processing module 32 is further used to: if the alarm status corresponding to the parent storage object is a fully offline alarm status, generate a suspended reporting information; wherein the suspended reporting information is used to indicate that the target alarm information of the alarm storage object is not output to the monitoring platform temporarily.

[0155] In a possible implementation, when acquiring the association relationship tree corresponding to each storage object in the storage array, the acquisition module 31 is specifically used to: acquire the association relationship information between each storage object in the storage array; wherein the association relationship information is determined by the upper and lower storage dependency relationship between each storage object; and generate an association relationship tree based on the association relationship information between each storage object.

[0156] In one possible implementation, when the second processing module 34 generates the other-cause alarm information of the sub-storage object based on the target alarm information, the association tree and the parameter information of the sub-storage object, it is specifically used to: obtain the alarm impact range information of the alarm object to be analyzed based on the target alarm information and the association tree; obtain the initial alarm impact value based on the alarm impact range information; generate the other-cause alarm information of the sub-storage object based on the target alarm information, the initial alarm impact value and the parameter information of the sub-storage object.

[0157] In one possible implementation, when the third processing module 36 generates the target alarm information of the sub-storage object based on its cause alarm information, it is specifically used to: update the initial alarm impact value based on its cause alarm information to generate the current alarm impact value corresponding to the sub-storage object; generate the target alarm information of the sub-storage object based on its cause alarm information and the current alarm impact value corresponding to the sub-storage object.

[0158] In a possible implementation, after determining whether the alarm object to be analyzed has a sub-storage object according to the association tree, the output module 39 is further used to: if the alarm object to be analyzed has no sub-storage object, output the target alarm information of the alarm storage object to the monitoring platform.

[0159] In a possible implementation, after outputting the target alarm information of the alarm storage object to the monitoring platform, the storage array alarm information processing device 3 is also used to: generate alarm impact object information based on at least one determined sub-storage object; and send the alarm impact object information to the monitoring platform.

[0160] In a possible implementation, after the alarm affected object information is sent to the monitoring platform, the storage array alarm information processing device 3 is also used to: in response to the alarm status release information corresponding to the alarm storage object, obtain the alarm information of each sub-storage object corresponding to the alarm affected object information, and determine the corresponding alarm time according to the alarm information of each sub-storage object; according to the alarm time of each sub-storage object, filter out the alarm storage object from each sub-storage object; execute the step of generating the target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object, and the subsequent steps.

[0161] In a possible implementation, after comparing the first impact degree corresponding to the alarm information with the second impact degree corresponding to the real-time alarm information, the third processing module 36 is also used to: if the first impact degree is less than or equal to the second impact degree, then the target alarm information of the sub-storage object is not generated.

[0162] For the description of the features in the embodiment corresponding to the storage array alarm information processing device 3, reference may be made to the relevant description of the embodiment corresponding to the storage array alarm information processing method, which will not be described in detail here.

[0163] Figure 7 This is a schematic diagram of the structure of the electronic device provided in this application. Figure 7 As shown, the electronic device 50 provided in this embodiment includes: at least one processor 501 and a memory 502. Optionally, the electronic device 50 also includes a communication component 503. The processor 501, the memory 502 and the communication component 503 are connected via a bus.

[0164] In a specific implementation process, at least one processor 501 executes the computer execution instructions stored in the memory 502, so that at least one processor 501 executes the above-mentioned storage array alarm information processing method embodiment.

[0165] The specific implementation process of the processor 501 can be found in the above method embodiment, and its implementation principle and technical effect are similar, so this embodiment will not be repeated here.

[0166] In the above embodiments, it should be understood that the processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), etc. A general-purpose processor may be a microprocessor or any conventional processor, etc. The steps of the method disclosed in the application may be directly implemented as being executed by a hardware processor, or may be executed by a combination of hardware and software modules in the processor.

[0167] The memory may include a high-speed memory (Random Access Memory, RAM), and may also include a non-volatile memory (NVM), such as at least one disk storage.

[0168] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of this application is not limited to only one bus or one type of bus.

[0169] An embodiment of the present application further provides a computer-readable storage medium, in which a computer program is stored, wherein the computer program is configured to execute the steps of any of the above-mentioned storage array alarm information processing method embodiments when running.

[0170] In an exemplary embodiment, the computer-readable storage medium may include, but is not limited to, various media that can store computer programs, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk.

[0171] An embodiment of the present application further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the steps in any one of the above storage array alarm information processing method embodiments are implemented.

[0172] An embodiment of the present application also provides another computer program product, including a non-volatile computer-readable storage medium, the non-volatile computer-readable storage medium storing a computer program, and when the computer program is executed by a processor, the steps in any of the above-mentioned storage array alarm information processing method embodiments are implemented.

[0173] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0174] The above is a detailed introduction to a storage array alarm information processing method, device, storage medium and program product provided by the present application. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method and core ideas of the present application. It should be pointed out that for ordinary technicians in this technical field, without departing from the principles of the present application, several improvements and modifications can be made to the present application, and these improvements and modifications also fall within the scope of protection of the claims of the present application.

Claims

1. A storage array alarm information processing method, characterized in that: include: Obtaining an association relationship tree corresponding to each storage object in the storage array; Acquire the alarm information of each storage object, and determine the corresponding alarm time according to the alarm information of each storage object; According to the alarm time of each storage object, filter out the alarm storage object from the storage objects; Generating target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object; Using the alarm storage object as the alarm object to be analyzed; Determining whether the alarm object to be analyzed has a child storage object according to the association tree; If the alarm object to be analyzed has a sub-storage object, obtaining real-time alarm information corresponding to the sub-storage object; Generate other cause alarm information of the sub-storage object according to the target alarm information, the association relationship tree and the parameter information of the sub-storage object; Comparing a first impact level corresponding to the other cause alarm information with a second impact level corresponding to the real-time alarm information; If the first impact is greater than the second impact, generating target alarm information of the sub-storage object according to the other cause alarm information; If the target alarm information of the sub-storage object meets the preset alarm condition, the sub-storage object is determined as the alarm object to be analyzed, and the process returns to the step of determining whether the alarm object to be analyzed has a sub-storage object according to the association tree; If the target alarm information of the sub-storage object does not meet the preset alarm condition, the target alarm information of the alarm storage object is output to the monitoring platform.

2. The storage array alarm information processing method according to claim 1, characterized in that: The generating target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object comprises: Determine whether the alarm state of the alarm information of the alarm storage object is an offline alarm state; If the alarm state of the alarm information of the alarm storage object is not an offline alarm state, a first type of self-caused alarm identifier is generated; wherein the self-caused alarm identifier is used to indicate that the offline alarm state of the alarm storage object is caused by the alarm storage object itself; The target alarm information of the alarm storage object is generated according to the self-caused alarm identifier of the first category and the alarm information of the alarm storage object.

3. The storage array alarm information processing method according to claim 2, characterized in that: After determining whether the alarm state of the alarm information of the alarm storage object is an offline alarm state, the method further includes: If the alarm state of the alarm information of the alarm storage object is an offline alarm state, determining whether the alarm storage object has a parent storage object according to the association tree; If the alarm storage object has no parent storage object, a second type of self-caused alarm identifier is generated; The target alarm information of the alarm storage object is generated according to the second type of self-caused alarm identifier and the alarm information of the alarm storage object.

4. The storage array alarm information processing method according to claim 3, characterized in that: After determining whether the alarm storage object has a parent storage object according to the association tree, the method further includes: If the alarm storage object has a parent storage object, determining whether the alarm state corresponding to the parent storage object is a partial offline alarm state, a full offline alarm state, or a full online alarm state; If the alarm state corresponding to the parent storage object is a partial offline alarm state or a completely online alarm state, a third type of self-caused alarm reporting mark is generated; The target alarm information of the alarm storage object is generated according to the self-caused alarm identifier of the third category and the alarm information of the alarm storage object.

5. The storage array alarm information processing method according to claim 4, characterized in that: After determining whether the alarm state corresponding to the parent storage object is a partially offline alarm state, a completely offline alarm state, or a completely non-offline alarm state, the method further includes: If the alarm state corresponding to the parent storage object is all offline alarm states, a reporting suspension information is generated; wherein the reporting suspension information is used to indicate that the target alarm information of the alarm storage object is not output to the monitoring platform temporarily.

6. The storage array alarm information processing method according to any one of claims 1 to 5, characterized in that: The step of obtaining an association relationship tree corresponding to each storage object in the storage array includes: Acquire association relationship information between storage objects in the storage array; wherein the association relationship information is determined by the upper and lower level storage dependency relationship between the storage objects; The association tree is generated according to the association information between the storage objects.

7. The storage array alarm information processing method according to any one of claims 1 to 5, characterized in that: The generating, according to the target alarm information, the association relationship tree and the parameter information of the sub-storage object, the other-cause alarm information of the sub-storage object comprises: Obtaining the alarm impact range information of the alarm object to be analyzed according to the target alarm information and the association relationship tree; Obtaining an initial alarm impact value according to the alarm impact range information; Generate other-cause alarm information of the sub-storage object according to the target alarm information, the initial alarm impact value and the parameter information of the sub-storage object.

8. The storage array alarm information processing method according to claim 7, characterized in that: The step of generating target alarm information of the sub-storage object according to the other cause alarm information includes: The initial alarm impact value is updated according to the other alarm information to generate a current alarm impact value corresponding to the sub-storage object; The target alarm information of the sub-storage object is generated according to the other cause alarm information and the current alarm impact value corresponding to the sub-storage object.

9. The storage array alarm information processing method according to any one of claims 1 to 5, characterized in that: After determining whether the alarm object to be analyzed has a child storage object according to the association tree, the method further includes: If the alarm object to be analyzed has no sub-storage object, the target alarm information of the alarm storage object is output to the monitoring platform.

10. The storage array alarm information processing method according to any one of claims 1 to 5, characterized in that: After outputting the target alarm information of the alarm storage object to the monitoring platform, the method further includes: Generate alarm impact object information according to the determined at least one sub-storage object; The alarm impact object information is sent to the monitoring platform.

11. The storage array alarm information processing method according to claim 10, characterized in that: After sending the alarm impact object information to the monitoring platform, the method further includes: In response to the release information of the alarm state corresponding to the alarm storage object, the alarm information of each sub-storage object corresponding to the alarm affected object information is obtained, and the corresponding alarm time is determined according to the alarm information of each sub-storage object; According to the alarm time of each sub-storage object, filter out the alarm storage object from each sub-storage object; The execution step generates target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object, and the subsequent steps.

12. The storage array alarm information processing method according to any one of claims 1 to 5, characterized in that: After comparing the first impact degree corresponding to the other cause alarm information with the second impact degree corresponding to the real-time alarm information, the method further includes: If the first impact degree is less than or equal to the second impact degree, target alarm information of the sub-storage object is not generated.

13. An electronic device, characterized in that: include: Memory for storing computer programs; A processor, configured to implement the steps of the storage array alarm information processing method as claimed in any one of claims 1 to 12 when executing the computer program.

14. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, wherein the computer program, when executed by a processor, implements the steps of the storage array alarm information processing method according to any one of claims 1 to 12.

15. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the storage array alarm information processing method according to any one of claims 1 to 12 are implemented.

Images