Method, device, storage medium and program product for processing storage array alarm information

Abstract

The present application discloses a method, device, storage medium, and program product for processing warning information of a storage array, which relates to the technical field of storage arrays. On the basis of obtaining an association relationship tree and warning information of each storage object, a warning storage object is determined, and target warning information of the warning storage object is generated. Through the association relationship tree, it is judged whether the warning object to be analyzed has sub-storage objects. If there are sub-storage objects, then in combination with the corresponding real-time warning information, it is judged whether the warning of the warning object to be analyzed has an impact on its sub-storage objects. If there is an impact, then target warning information of the sub-storage objects is generated. If the target warning information of the sub-storage objects meets the preset warning conditions, then the sub-storage objects are determined as the warning objects to be analyzed, and the step of judging whether the warning objects to be analyzed have sub-storage objects is returned. If the preset warning conditions are not met, then the target warning information of the warning storage object is output to the monitoring platform, solving the problem of untimely reporting of warning information.

Description

Technical Field

[0001] The present application relates to the technical field of storage arrays, and particularly to a method, a device, a storage medium and a program product for processing warning information of a storage array. Background Art

[0002] As a core component of information infrastructure, a storage array is provided with a large number of hard disks, and can create thousands or even millions of volumes or file systems, thereby ensuring the security and reliability of data. However, when these volumes and / or file systems fail, a large number of warning messages will be generated, and a large number of warning messages will be reported to the target server in the same time period, thus resulting in a warning storm and affecting the normal operation of user services.

[0003] In related technologies, a delay reporting time interval is often set, the event characteristics of the warning information within the delay reporting time interval are extracted, and the warning information with the same or similar event characteristics is merged, and then the warning information is reported, so as to avoid the occurrence of a warning storm. However, the processing method of merging and reporting warning information will cause the problem of untimely reporting of warning information. Summary of the Invention

[0004] The present application provides a method, a device, a storage medium and a program product for processing warning information of a storage array, so as to at least solve the problem of untimely reporting of warning information caused by merging and reporting warning information in related technologies to avoid the occurrence of a warning storm.

[0005] The present application provides a method for processing storage array alarm information, including: obtaining an associated relationship tree corresponding to each storage object in the storage array; obtaining the alarm information of each storage object, and determining the corresponding alarm time according to the alarm information of each storage object; screening out alarm storage objects from each storage object according to the alarm time of each storage object; generating target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object; taking the alarm storage object as the to-be-analyzed alarm object; judging whether the to-be-analyzed alarm object has sub-storage objects according to the associated relationship tree; if the to-be-analyzed alarm object has sub-storage objects, obtaining the real-time alarm information corresponding to the sub-storage objects; generating other-cause alarm information of the sub-storage objects according to the target alarm information, the associated relationship tree and the parameter information of the sub-storage objects; comparing the first influence degree corresponding to the other-cause alarm information with the second influence degree corresponding to the real-time alarm information; if the first influence degree is greater than the second influence degree, generating target alarm information of the sub-storage objects according to the other-cause alarm information; if the target alarm information of the sub-storage objects meets the preset alarm conditions, determining the sub-storage objects as the to-be-analyzed alarm objects, and re-performing the step of judging whether the to-be-analyzed alarm objects have sub-storage objects according to the associated relationship tree; if the target alarm information of the sub-storage objects does not meet the preset alarm conditions, outputting the target alarm information of the alarm storage object to the monitoring platform.

[0006] The present application further provides a device for processing storage array alarm information, including:

[0007] An obtaining module, configured to obtain an associated relationship tree corresponding to each storage object in the storage array;

[0008] The obtaining module is further configured to obtain the alarm information of each storage object, and determine the corresponding alarm time according to the alarm information of each storage object;

[0009] A first processing module, configured to screen out alarm storage objects from each storage object according to the alarm time of each storage object; generate target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object; take the alarm storage object as the to-be-analyzed alarm object;

[0010] A first judging module, configured to judge whether the to-be-analyzed alarm object has sub-storage objects according to the associated relationship tree;

[0011] A second processing module, configured to, if the to-be-analyzed alarm object has sub-storage objects, obtain the real-time alarm information corresponding to the sub-storage objects; generate other-cause alarm information of the sub-storage objects according to the target alarm information, the associated relationship tree and the parameter information of the sub-storage objects;

[0012] A second judging module, configured to compare the first influence degree corresponding to the other-cause alarm information with the second influence degree corresponding to the real-time alarm information;

[0013] A third processing module, configured to, if the first influence degree is greater than the second influence degree, generate target alarm information of the sub-storage object according to the other-factor alarm information;

[0014] A fourth processing module, configured to, if the target alarm information of the sub-storage object meets a preset alarm condition, determine the sub-storage object as an alarm object to be analyzed, and re-return to the step of determining whether there is a sub-storage object for the alarm object to be analyzed according to the association relationship tree;

[0015] An output module, configured to, if the target alarm information of the sub-storage object does not meet the preset alarm condition, output the target alarm information of the alarm storage object to the monitoring platform.

[0016] The present application further provides an electronic device, including: a memory, configured to store a computer program; a processor, configured to implement the steps of any one of the above storage array alarm information processing methods when executing the computer program.

[0017] The present application further provides a computer-readable storage medium, in which a computer program is stored, and the computer program implements the steps of any one of the above storage array alarm information processing methods when being executed by a processor.

[0018] The present application further provides a computer program product, including a computer program, and the computer program implements the steps of any one of the above storage array alarm information processing methods when being executed by a processor.

[0019] Through the storage array alarm information processing method, device, storage medium and program product provided by this application, based on obtaining the association relationship tree corresponding to each storage object in the storage array and the alarm information of each storage object, an alarm storage object is determined from each storage object, and target alarm information of the alarm storage object is generated according to the alarm status of the alarm information of the alarm storage object; furthermore, the alarm storage object is used as the to-be-analyzed alarm object, and through the association relationship tree, it is judged whether the to-be-analyzed alarm object has sub-storage objects. If the to-be-analyzed alarm object has sub-storage objects, the real-time alarm information corresponding to the sub-storage objects is obtained, and it is further judged whether the alarm of the to-be-analyzed alarm object (alarm storage object) has an impact on its sub-storage objects. If there is an impact, target alarm information of the sub-storage objects is generated; furthermore, if the target alarm information of the sub-storage objects meets the preset alarm conditions, the sub-storage objects are determined as the to-be-analyzed alarm objects, and the step of judging whether the to-be-analyzed alarm object has sub-storage objects through the association relationship tree is returned again; if the target alarm information of the sub-storage objects does not meet the preset alarm conditions, the target alarm information of the alarm storage object is output to the monitoring platform; it realizes reporting the target alarm information of the alarm storage object while not reporting the real-time alarm information of the sub-storage objects of the alarm storage object caused by the target alarm information of the alarm storage object, that is, it realizes avoiding the occurrence of alarm storms, and also timely reports the target alarm information of the alarm storage object to the monitoring platform, solving the problem of untimely reporting of alarm information in the related technology by merging and reporting alarm information to avoid the occurrence of alarm storms. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0021] Figure 1 It is a schematic diagram of the scenario of the storage array alarm information processing method provided by the embodiment of the present application;

[0022] Figure 2 It is a schematic flowchart of the storage array alarm information processing method provided by the embodiment of the present application Figure 1 ;

[0023] Figure 3 It is a schematic diagram of the association relationship tree determined based on the association relationship information provided by the embodiment of the present application;

[0024] Figure 4 It is a schematic diagram of the specific implementation manner of step S104 provided by the embodiment of the present application;

[0025] Figure 5 Flow schematic of the storage array alarm information processing method provided by the embodiment of the present application Figure 2 ;

[0026] Figure 6 Structural schematic diagram of the storage array alarm information processing device provided by the embodiment of the present application;

[0027] Figure 7 Structural schematic diagram of the electronic device provided by the present application. Specific embodiments

[0028] Next, the technical solutions in the embodiments of the present application will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

[0029] It should be noted that in the description of the present application, the terms "including", "comprising" or any other variant thereof are intended to cover a non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, but also includes other elements not expressly listed, or further includes elements inherent to such process, method, article or device. The terms "first", "second", etc. in the present application are used to distinguish similar objects, rather than to describe a specific order or sequence.

[0030] As a core component of the information infrastructure, a large number of hard disks are set in the storage array, and thousands or even millions of volumes or file systems can be created, thereby ensuring the security and reliability of data. However, when these volumes and / or file systems fail, a large number of alarm messages will be generated, and a large number of alarm messages will be reported to the target server in the same time period, resulting in an alarm storm and affecting the normal operation of the user's business; among them, the alarm messages that cause the alarm storm are the alarm messages that need the user's attention and processing. In the related art, the alarm reporting time interval is often set, the event characteristics of the alarm messages in the delay reporting time interval are extracted, and the alarm messages with the same or similar event characteristics are merged, and then the alarm messages are reported to avoid the occurrence of the alarm storm. However, the processing method of merging and reporting alarm messages will cause the problem of untimely reporting of alarm messages.

[0031] To solve the above technical problems, the embodiments of the present application propose the following technical conceptions: on the basis of obtaining the association relationship trees corresponding to each storage object in the storage array and the alarm information of each storage object, determine the alarm storage objects from each storage object, and generate the target alarm information of the alarm storage objects according to the alarm status of the alarm information of the alarm storage objects; furthermore, use the alarm storage objects as the alarm objects to be analyzed, and through the association relationship trees, determine whether the alarm objects to be analyzed have child storage objects. If the alarm objects to be analyzed have child storage objects, obtain the real-time alarm information corresponding to the child storage objects, and generate the other-cause alarm information of the child storage objects according to the target alarm information, the association relationship trees, and the parameter information of the child storage objects; compare the first influence degree corresponding to the other-cause alarm information with the second influence degree corresponding to the real-time alarm information; if the first influence degree is greater than the second influence degree, generate the target alarm information of the child storage objects according to the other-cause alarm information; if the target alarm information of the child storage objects meets the preset alarm conditions, determine the child storage objects as the alarm objects to be analyzed, and return to the step of determining whether the alarm objects to be analyzed have child storage objects through the association relationship trees; if the target alarm information of the child storage objects does not meet the preset alarm conditions, output the target alarm information of the alarm storage objects to the monitoring platform; this realizes reporting the target alarm information of the alarm storage objects while not reporting the real-time alarm information of the child storage objects of the alarm storage objects caused by the target alarm information of the alarm storage objects, that is, it realizes avoiding the occurrence of alarm storms, and also timely reports the target alarm information of the alarm storage objects to the monitoring platform, solving the problem of untimely reporting of alarm information in the related technology caused by merging alarm information and reporting to avoid alarm storms.

[0032] To enable those skilled in the art of this technology to better understand the solution of the present application, the present application will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0033] Combined with the specific application environment architecture or specific hardware architecture on which the execution of the storage array alarm information processing method depends, the specific application environment architecture or specific hardware architecture will be described herein. Refer to Figure 1 , Figure 1 is a schematic diagram of the scenario of the storage array alarm information processing method provided by the embodiments of the present application.

[0034] As Figure 1 shown, this scenario includes: a storage array server and a monitoring platform.

[0035] By executing the storage array alarm information processing method provided in the embodiments of the present application, the storage array server processes the alarm information of each storage object in the storage array, and then sends the target alarm information of the alarm storage object to the monitoring platform. While reporting the target alarm information of the alarm storage object, it does not report the real-time alarm information of the sub-storage object of the alarm storage object caused by the target alarm information of the alarm storage object, that is, it realizes the avoidance of the occurrence of alarm storms, and also timely reports the target alarm information of the alarm storage object to the monitoring platform, solving the problem of untimely reporting of alarm information caused by merging alarm information and reporting in the related art to avoid alarm storms.

[0036] Figure 2 Schematic flow of the storage array alarm information processing method provided in the embodiments of the present application Figure 1 As Figure 2 shown, the embodiments of the present application provide a storage array alarm information processing method, taking the storage array server as the execution subject, and describing the method in detail as follows:

[0037] S101: Obtain the association relationship tree corresponding to each storage object in the storage array.

[0038] Exemplarily, the association relationship tree indicates the superior-subordinate storage dependency relationship between each storage object in the storage array; specifically, the specific implementation manner of step S101 includes:

[0039] Step S1011, obtain the association relationship information between each storage object in the storage array; wherein, the association relationship information is determined by the superior-subordinate storage dependency relationship between each storage object.

[0040] Step S1012, generate an association relationship tree according to the association relationship information between each storage object.

[0041] Figure 3 Schematic diagram of the association relationship tree determined based on the association relationship information provided in the embodiments of the present application, as Figure 3As shown, each storage object includes a disk enclosure, hard disks, a Redundant Array of Independent Disks (RAID), a storage pool, a volume, a file system, a Network File System (NFS), snapshots and clones, and remote replication. Among them, the number of each storage object is one or more. Further, according to the hierarchical storage dependency relationships among the disk enclosure, hard disks, RAID, storage pool, volume, file system, NFS, snapshots and clones, and remote replication, association relationship information is generated. The association relationship information includes that hard disks are the next level of the disk enclosure, RAID is the next level of hard disks, the storage pool is the next level of RAID, the volume is the next level of the storage pool, the file system is the next level of the storage pool, NFS is the next level of the file system, snapshots and clones are the next level of the volume, and remote replication is the next level of the volume. Then, according to the association relationship information among the storage objects, an association relationship tree as shown in Figure 3 can be generated.

[0042] S102: Obtain the alarm information of each storage object, and determine the corresponding alarm time according to the alarm information of each storage object.

[0043] Exemplarily, when one or several storage objects have alarms, the storage array server can obtain the corresponding alarm information, and then process the alarm information of each storage object to determine the corresponding alarm time. The alarm time is the time when the corresponding storage object has an alarm.

[0044] In this embodiment, the implementation methods for the storage array server to obtain the alarm information of each storage object include active polling based on a preset time and passive reception. Further, the active polling based on a preset time specifically includes: in response to the preset polling time, obtaining the alarm information of each storage object. Further, the determination process of the preset polling time includes: the storage array server determines the preset polling time according to the association relationship tree corresponding to each storage object. Specifically, the more complex the association relationship of the association relationship tree, the shorter the preset polling time.

[0045] S103: Screen out the alarm storage objects from each storage object according to the alarm time of each storage object.

[0046] Exemplarily, each storage object corresponds to a different alarm time. Then, among the alarm times corresponding to each storage object, the earliest alarm time is determined. Further, according to the earliest alarm time, the alarm storage objects are screened out from each storage object, that is, the alarm that occurs first for the alarm storage object.

[0047] S104: Generate the target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object.

[0048] Exemplarily, different alarm statuses corresponding to the alarm information indicate the alarm reasons for the alarm of the alarm storage object. Then, according to the alarm reasons for the alarm of the alarm storage object, the corresponding target alarm information can be generated. Specifically, for example, when the alarm storage object alarms, then according to the alarm status, determine whether the alarm reason for the alarm of the alarm storage object is its own reason or due to non-self reasons; then, combine the alarm reason to generate the corresponding target alarm information; where the target alarm information includes the storage object number, storage object name, storage object type, alarm status, and self-cause alarm flag of the alarm storage object.

[0049] Further, if the alarm reason for the alarm of the alarm storage object is its own reason, then perform the subsequent steps to output the target alarm information of the alarm storage object to the monitoring platform; if the alarm reason for the alarm of the alarm storage object is non-self reasons (that is, the alarm of the alarm storage object is caused by the alarm of the upper-level storage object of the alarm storage object), then temporarily do not output the target alarm information of the alarm storage object to the monitoring platform to avoid the occurrence of alarm storms.

[0050] Specifically, Figure 4 is a schematic diagram of the specific implementation manner of step S104 provided in the embodiment of the present application, as Figure 4 shown, the specific implementation manner of step S104 includes:

[0051] Step S1041, obtain the alarm status of the alarm information of the alarm storage object.

[0052] Step S1042, determine whether the alarm status of the alarm information of the alarm storage object is the offline alarm status.

[0053] Exemplarily, there are various reasons for the alarm storage object to be in the offline alarm status. Under different reasons, the alarm storage object is in the offline alarm status. Then, by determining whether the alarm status of the alarm information of the alarm storage object is the offline alarm status, determine whether the alarm reason for the alarm of the alarm storage object is its own reason or due to non-self reasons.

[0054] Step S1043, if the alarm status of the alarm information of the alarm storage object is not the offline alarm status, then generate the first type of self-cause alarm flag.

[0055] Step S1044, generate the target alarm information of the alarm storage object according to the first type of self-cause alarm flag and the alarm information of the alarm storage object.

[0056] In this embodiment, a self-caused alarm identifier is used to indicate that the offline alarm status of an alarm storage object is caused by factors of the alarm storage object itself.

[0057] Exemplarily, when it is determined that the alarm status of the alarm information of the alarm storage object is not an offline alarm status, it is determined that the offline alarm status of the alarm storage object is caused by factors of the alarm storage object itself, and then a first type of self-caused alarm identifier is generated; further, the alarm information of the alarm storage object is identified according to the first type of self-caused alarm identifier to generate the target alarm information of the alarm storage object, where the target alarm information includes the storage object number, storage object name, storage object type, alarm status, and the first type of self-caused alarm identifier of the alarm storage object.

[0058] Step S1045, if the alarm status of the alarm information of the alarm storage object is an offline alarm status, determine whether the alarm storage object has a parent storage object according to the association relationship tree.

[0059] Exemplarily, on the basis of determining that the alarm status of the alarm information of the alarm storage object is an offline alarm status, it is necessary to further determine the reason for the offline alarm status of the alarm storage object, that is, to determine whether the offline alarm status of the alarm storage object is caused by factors of the alarm storage object itself or by an alarm occurring in the upper-level storage object of the alarm storage object. Therefore, it is determined whether the alarm storage object has a parent storage object according to the association relationship tree.

[0060] Step S1046, if the alarm storage object has no parent storage object, generate a second type of self-caused alarm identifier.

[0061] Step S1047, generate the target alarm information of the alarm storage object according to the second type of self-caused alarm identifier and the alarm information of the alarm storage object.

[0062] Exemplarily, when it is determined that the alarm storage object has no parent storage object (that is, the upper-level storage object), it is determined that the offline alarm status of the alarm storage object is caused by factors of the alarm storage object itself, and then a second type of self-caused alarm identifier is generated; further, the alarm information of the alarm storage object is identified according to the second type of self-caused alarm identifier to generate the target alarm information of the alarm storage object, where the target alarm information includes the storage object number, storage object name, storage object type, alarm status, and the second type of self-caused alarm identifier of the alarm storage object.

[0063] Step S1048, if the alarm storage object has a parent storage object, determine whether the alarm status corresponding to the parent storage object is a partial offline alarm status, a full offline alarm status, or a full non-offline alarm status.

[0064] Exemplarily, on the basis of determining that the alarm storage object has a parent storage object, it is necessary to determine the reason for the offline alarm state of the alarm storage object by judging whether the alarm state corresponding to the parent storage object is a partial offline alarm state, a full offline alarm state, or a full non - offline alarm state; specifically, for example, the parent storage object includes a first parent storage object, a second parent storage object, and a third parent storage object, and the second parent storage object and the third parent storage object are spare storage objects of the alarm storage object. That is, when the first parent storage object is offline, as long as the second parent storage object and / or the third parent storage object is not offline, the alarm storage object is not offline. Only when the first parent storage object, the second parent storage object, and the third parent storage object are all offline, the alarm storage object is offline; therefore, it is necessary to judge whether the alarm state corresponding to the parent storage object is a partial offline alarm state, a full offline alarm state, or a full non - offline alarm state.

[0065] Step S1049, if the alarm state corresponding to the parent storage object is a partial offline alarm state or a full non - offline alarm state, generate a self - cause alarm reporting identifier of the third type.

[0066] Step S104a, generate the target alarm information of the alarm storage object according to the self - cause alarm identifier of the third type and the alarm information of the alarm storage object.

[0067] Exemplarily, when it is determined that the alarm state corresponding to the parent storage object is a partial offline alarm state or a full non - offline alarm state, it is determined that the offline alarm state of the alarm storage object is caused by the factors of the alarm storage object itself, and then a self - cause alarm identifier of the third type is generated; further, the alarm information of the alarm storage object is identified according to the self - cause alarm identifier of the third type to generate the target alarm information of the alarm storage object, where the target alarm information includes the storage object number, storage object name, storage object type, alarm state, and self - cause alarm identifier of the third type of the alarm storage object.

[0068] Optionally, after generating the target alarm information of the alarm storage object, continue to obtain the alarm state of the alarm information of the alarm storage object.

[0069] Step S104b, if the alarm state corresponding to the parent storage object is a full offline alarm state, generate a suspension reporting message; where the suspension reporting message is used to indicate that the target alarm information of the alarm storage object is not output to the monitoring platform temporarily.

[0070] Exemplarily, when it is determined that the alarm status corresponding to the parent storage object is the all-offline alarm status, it is determined that the offline alarm status of the alarm storage object is caused by the all-offline alarm status of the parent storage object, that is, the alarm reason for the alarm storage object to have an offline alarm is not its own reason. Furthermore, the storage array server temporarily does not output the target alarm information of the alarm storage object to the monitoring platform to avoid the occurrence of an alarm storm.

[0071] Optionally, after generating the suspension reporting information, continue to obtain the alarm status of the alarm information of the alarm storage object.

[0072] S105: Take the alarm storage object as the alarm object to be analyzed.

[0073] S106: Determine whether the alarm object to be analyzed has child storage objects according to the association relationship tree.

[0074] Exemplarily, when it is determined that the alarm reason for the alarm storage object to have an alarm is its own reason, take the alarm storage object as the alarm object to be analyzed; and then determine whether the alarm object to be analyzed has child storage objects according to the association relationship tree; as Figure 3 shown, for example, if the alarm object to be analyzed is a storage pool, the alarm object to be analyzed has child storage objects, and if the alarm object to be analyzed is NFS, the alarm object to be analyzed has no child storage objects.

[0075] Furthermore, if the alarm object to be analyzed has no child storage objects, output the target alarm information of the alarm storage object to the monitoring platform.

[0076] If the alarm object to be analyzed has child storage objects, that is, execute step S107.

[0077] S107: If the alarm object to be analyzed has child storage objects, obtain the real-time alarm information corresponding to the child storage objects.

[0078] Exemplarily, if the alarm object to be analyzed has child storage objects, re-obtain the alarm information of the child storage objects to obtain the real-time alarm status of the child storage objects, that is, obtain the real-time alarm information corresponding to the child storage objects.

[0079] S108: Generate the other-cause alarm information of the child storage objects according to the target alarm information, the association relationship tree, and the parameter information of the child storage objects.

[0080] Further, based on the target alarm information including the storage object number, storage object name, storage object type, alarm status, and self-caused alarm flag of the alarm storage object (i.e., the alarm object to be analyzed), and then through the association relationship tree and the parameter information of the sub-storage object, the target alarm information is processed to generate the other-caused alarm information of the sub-storage object. The other-caused alarm information includes the storage object number, storage object name, storage object type, alarm status, and other-caused alarm flag of the sub-storage object. The other-caused alarm flag is used to indicate that the other-caused alarm information is not generated due to the self-reason of the sub-storage object.

[0081] Specifically, according to the association relationship tree, it is determined that the parent storage objects of the sub-storage object include the first parent storage object, the second parent storage object, and the third parent storage object. Among them, the first parent storage object is the alarm storage object (i.e., the alarm object to be analyzed), and the second parent storage object and the third parent storage object have no alarms. For example, the first parent storage object is in the offline alarm state, and the second parent storage object and the third parent storage object are in the normal operation state. The alarm status of the alarm storage object (i.e., the alarm object to be analyzed) included in the corresponding target alarm information is the offline alarm state. Further, through the association relationship tree and the parameter information of the sub-storage object, the target alarm information is processed to generate the other-caused alarm information of the sub-storage object. The other-caused alarm information includes the storage object number, storage object name, storage object type, alarm status, and other-caused alarm flag of the sub-storage object. The alarm status of the sub-storage object included in the other-caused alarm information is the weakening of data redundancy ability.

[0082] S109: Compare the first influence degree corresponding to the other-caused alarm information with the second influence degree corresponding to the real-time alarm information.

[0083] Exemplarily, based on the preset impact quantification rule, according to the hierarchical storage dependency relationship of the sub-storage object, the impact of the other-cause alarm information on the sub-storage object is quantified, and then the first impact degree is obtained. For example, if the parent storage object of the sub-storage object includes a first parent storage object, a second parent storage object, and a third parent storage object, where the first parent storage object is the alarm storage object (i.e., the alarm object to be analyzed), the second parent storage object and the third parent storage object do not have alarms. For example, the first parent storage object is in an offline alarm state, and the second parent storage object and the third parent storage object are in a normal operation state, then the impact of the other-cause alarm information on the sub-storage object is "weakened data redundancy ability", and then the first impact degree is quantified as 5. If the parent storage object of the sub-storage object includes a first parent storage object and a second parent storage object, where the first parent storage object is the alarm storage object (the alarm object to be analyzed), and the second parent storage object does not have an alarm. For example, the first parent storage object is in an offline alarm state, and the second parent storage object is in a normal operation state, then the impact of the other-cause alarm information on the sub-storage object is "loss of data redundancy ability", and then the first impact degree is quantified as 10.

[0084] Furthermore, based on the preset impact quantification rule, the impact of the real-time alarm information on the sub-storage object is quantified, and then the second impact degree is obtained.

[0085] Furthermore, the magnitude relationship between the first impact degree corresponding to the other-cause alarm information and the second impact degree corresponding to the real-time alarm information is determined.

[0086] In another possible implementation, the target alarm information of the alarm object to be analyzed, the other-cause alarm information of the sub-storage object, and the real-time alarm information of the sub-storage object are input into a pre-trained large language model to output the first impact degree corresponding to the other-cause alarm information and the second impact degree corresponding to the real-time alarm information. Among them, the pre-trained large language model estimates the alarm repair duration required to resolve the alarm based on the alarm type of the target alarm information of the alarm object to be analyzed, and then estimates the comprehensive impact of the other-cause alarm information of the sub-storage object on the sub-storage object and the next-level storage object (if any) of the sub-storage object based on the hierarchical storage dependency relationship of the sub-storage object. Furthermore, according to the alarm repair duration and the comprehensive alarm impact, the first impact degree is generated. The pre-trained large language model estimates the comprehensive real-time alarm impact of the real-time alarm information of the sub-storage object on the sub-storage object and the next-level storage object (if any) of the sub-storage object based on the hierarchical storage dependency relationship of the sub-storage object, and then generates the second impact degree according to the comprehensive real-time alarm impact.

[0087] S110: If the first impact degree is greater than the second impact degree, then based on the other-cause alarm information, the target alarm information of the sub-storage object is generated.

[0088] Exemplarily, if the first influence degree is greater than the second influence degree, it indicates that in the case where the sub-storage object has a lower-level storage object, the alarm corresponding to the alarm information may continue to affect the operating state of the lower-level storage object of the sub-storage object; furthermore, according to the alarm information due to other reasons, the target alarm information of the sub-storage object is generated, where the target alarm information of the sub-storage object includes the storage object number, storage object name, storage object type, alarm status, and alarm identifier due to other reasons of the sub-storage object; among them, the alarm identifier due to other reasons in the alarm information due to other reasons only includes the storage object number of the alarm storage object (i.e., the object to be analyzed for alarm), and the alarm identifier due to other reasons in the target alarm information of the sub-storage object includes the storage object number of the alarm storage object (i.e., the object to be analyzed for alarm) and the storage object number of the sub-storage object.

[0089] Furthermore, if the first influence degree is less than or equal to the second influence degree, the target alarm information of the sub-storage object is not generated.

[0090] S111: Determine whether the target alarm information of the sub-storage object meets the preset alarm conditions.

[0091] Exemplarily, the first influence degree corresponding to the alarm information due to other reasons is used as the influence degree of the sub-storage object of the target alarm information of the sub-storage object, and then it is determined whether the influence degree of the sub-storage object meets the preset alarm conditions, that is, to judge the magnitude relationship between the influence degree of the sub-storage object and the influence degree threshold corresponding to the preset alarm conditions, where the influence degree threshold corresponding to the preset alarm conditions is determined based on the storage object type of the sub-storage object; specifically, for example, if the sub-storage object is a RAID, based on the fact that the sub-storage object is a RAID, it is determined that the influence degree threshold corresponding to the preset alarm conditions is 3; if the sub-storage object is a volume, based on the fact that the sub-storage object is a volume, it is determined that the influence degree threshold corresponding to the preset alarm conditions is 6.

[0092] S112: If the target alarm information of the sub-storage object meets the preset alarm conditions, the sub-storage object is determined as the object to be analyzed for alarm, and the step of judging whether the object to be analyzed for alarm has a sub-storage object according to the association relationship tree is returned again.

[0093] Exemplarily, if the target alarm information of the sub-storage object meets the preset alarm conditions, that is, the influence degree of the sub-storage object is greater than or equal to the influence degree threshold corresponding to the preset alarm conditions, it indicates that the alarm that occurs in the alarm storage object also affects the lower-level storage object of the sub-storage object, and then the sub-storage object is determined as the object to be analyzed for alarm, and the step of judging whether the object to be analyzed for alarm has a sub-storage object according to the association relationship tree is returned again, so as to achieve not reporting the real-time alarm information of the sub-storage object caused by the target alarm information of the alarm storage object.

[0094] Specifically, for example, if the sub-storage object is a RAID, the corresponding impact degree of the sub-storage object is 5, and the impact degree threshold corresponding to the preset alarm condition is 3, then based on the fact that the impact degree of the sub-storage object 5 is greater than the impact degree threshold 3 corresponding to the preset alarm condition, it is determined that the alarm occurring in the alarm storage object also affects the storage object at the next level of the sub-storage object (i.e., RAID), and then the sub-storage object is determined as the alarm object to be analyzed, and the process returns to step S106 again.

[0095] Optionally, when determining the sub-storage object as the alarm object to be analyzed and returning to the step of judging whether the alarm object to be analyzed has a sub-storage object according to the association relationship tree, at the same time or after that, according to the real-time alarm information of the sub-storage object caused by the target alarm information of the alarm storage object, low-level alarm information is generated, and the target alarm information of the alarm storage object is output to the monitoring platform; wherein, the low-level alarm information is used to record that an alarm has occurred in the sub-storage object for the user to view, but does not require the user to pay attention to the processing, that is, the generation of the alarm storm is avoided.

[0096] S113: If the target alarm information of the sub-storage object does not meet the preset alarm condition, then output the target alarm information of the alarm storage object to the monitoring platform.

[0097] Exemplarily, if the target alarm information of the sub-storage object meets the preset alarm condition, that is, the impact degree of the sub-storage object is less than the impact degree threshold corresponding to the preset alarm condition, it indicates that the alarm occurring in the alarm storage object no longer affects the storage object at the next level of the sub-storage object, and then the target alarm information of the alarm storage object is output to the monitoring platform.

[0098] Specifically, for example, if the sub-storage object is a volume, the corresponding impact degree of the sub-storage object is 5, and the impact degree threshold corresponding to the preset alarm condition is 6, then based on the fact that the impact degree of the sub-storage object 5 is less than the impact degree threshold 6 corresponding to the preset alarm condition, it is determined that the alarm occurring in the alarm storage object no longer affects the storage object at the next level of the sub-storage object (i.e., volume), and then the target alarm information of the alarm storage object is output to the monitoring platform.

[0099] Further, if the storage object at the next level of the sub-storage object corresponds to alarm information, then the storage object at the next level of the sub-storage object is determined as the new alarm storage object, and according to the alarm status of the alarm information of the alarm storage object (the storage object at the next level of the sub-storage object), the target alarm information of the alarm storage object (the storage object at the next level of the sub-storage object) is generated, and the subsequent steps provided in the embodiment of the present application (step S105 - step S113) are executed again.

[0100] In the embodiment of the present application, based on obtaining the association relationship tree corresponding to each storage object in the storage array and the alarm information of each storage object, an alarm storage object is determined from each storage object, and target alarm information of the alarm storage object is generated according to the alarm status of the alarm information of the alarm storage object; furthermore, the alarm storage object is used as the to-be-analyzed alarm object, and it is judged whether the to-be-analyzed alarm object has sub-storage objects through the association relationship tree. If the to-be-analyzed alarm object has sub-storage objects, the real-time alarm information corresponding to the sub-storage objects is obtained, and it is further judged whether the alarm of the to-be-analyzed alarm object (alarm storage object) affects its sub-storage objects. If there is an impact, target alarm information of the sub-storage objects is generated; furthermore, if the target alarm information of the sub-storage objects meets the preset alarm conditions, the sub-storage objects are determined as the to-be-analyzed alarm objects, and the step of judging whether the to-be-analyzed alarm objects have sub-storage objects through the association relationship tree is returned again; if the target alarm information of the sub-storage objects does not meet the preset alarm conditions, the target alarm information of the alarm storage object is output to the monitoring platform; it realizes reporting the target alarm information of the alarm storage object while not reporting the real-time alarm information of the sub-storage objects of the alarm storage object caused by the target alarm information of the alarm storage object, that is, it realizes avoiding the occurrence of alarm storms, and also timely reports the target alarm information of the alarm storage object to the monitoring platform, solving the problem that the alarm information is not reported in time in the related art by merging and reporting the alarm information to avoid the occurrence of alarm storms.

[0101] Further, after step S113, the method provided by the embodiment of the present application further includes:

[0102] S114: Generate alarm impact object information according to the determined at least one sub-storage object.

[0103] S115: Send the alarm impact object information to the monitoring platform.

[0104] Exemplarily, the sub-storage objects affected by the alarm of the alarm storage object and / or the sub-storage objects of the to-be-analyzed alarm object determined after determining the sub-storage objects of the alarm storage object as the to-be-analyzed alarm objects are summarized to generate alarm impact object information, that is, the alarm impact object information includes the storage object number and storage object name of the sub-storage objects; furthermore, the alarm impact object information is sent to the monitoring platform so that the user can know the impact range affected by the alarm of the alarm storage object through the information output by the monitoring platform. Specifically, for example, in combination with Figure 3In the association tree shown, the alarm storage object is a hard disk, and the sub-storage object affected by the hard disk alarm is RAID. Based on steps S107 to S112, RAID is determined as the alarm object to be analyzed, and then it is further determined that the sub-storage object of RAID affected by the hard disk alarm is a storage pool. Furthermore, based on steps S107 to S112, the storage pool is not determined as the alarm object to be analyzed, and then it is determined that the impact scope of the alarm storage object (hard disk) alarm includes RAID and storage pool, that is, alarm impact object information is generated; and then the alarm impact object information is sent to the monitoring platform.

[0105] Furthermore, after the alarm affected object information is sent to the monitoring platform, the method provided by the embodiment of the present application also includes: in response to the release information of the alarm status corresponding to the alarm storage object, obtaining the alarm information of each sub-storage object corresponding to the alarm affected object information, and determining the corresponding alarm time according to the alarm information of each sub-storage object; according to the alarm time of each sub-storage object, filtering out the alarm storage object from each sub-storage object; executing the step of generating the target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object, and subsequent steps.

[0106] For example, in combination Figure 3 In the association tree shown, the alarm storage object is a hard disk, and the scope of influence of the alarm of the alarm storage object (hard disk) includes RAID and storage pool; then, after the alarm state corresponding to the hard disk is released, the corresponding alarm state release information is generated; then, the storage array server responds to the alarm state release information of the hard disk and re-acquires the alarm information of the RAID and the storage pool; then, according to the alarm information of the RAID and the storage pool, the corresponding alarm time is determined respectively; further, according to the alarm time of the RAID and the storage pool, the alarm storage objects are screened out from the RAID and the storage pool, and then steps S104-S112 are executed to realize the confirmation of the target alarm information of the alarm storage object in the storage array and output it to the monitoring platform, so that while reporting the target alarm information of the alarm storage object, the real-time alarm information of the sub-storage object of the alarm storage object caused by the target alarm information of the alarm storage object is not reported, that is, the occurrence of alarm storm is avoided, and the target alarm information of the alarm storage object is reported to the monitoring platform in time.

[0107] Figure 5 A flowchart of a storage array alarm information processing method provided in an embodiment of the present application Figure 2 In the embodiment of the present application, Figure 2 Based on the embodiment provided, step S108, step S110-step S113 are further refined, such as Figure 5As shown in the figure, the method for processing storage array alarm information provided in this embodiment includes the following steps:

[0108] S201: Obtain the associated relationship tree corresponding to each storage object in the storage array.

[0109] In this embodiment, the discussion on obtaining the associated relationship tree has been described in detail in step S101, and will not be elaborated here.

[0110] S202: Obtain the alarm information of each storage object, and determine the corresponding alarm time according to the alarm information of each storage object.

[0111] In this embodiment, the discussion on obtaining the alarm information and determining the alarm time has been described in detail in step S102, and will not be elaborated here.

[0112] S203: Screen out the alarm storage objects from each storage object according to the alarm time of each storage object.

[0113] In this embodiment, the discussion on screening out the alarm storage objects has been described in detail in step S103, and will not be elaborated here.

[0114] S204: Generate the target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object.

[0115] In this embodiment, the discussion on generating the target alarm information of the alarm storage object has been described in detail in step S104, and will not be elaborated here.

[0116] S205: Use the alarm storage object as the alarm object to be analyzed.

[0117] In this embodiment, the discussion on using the alarm storage object as the alarm object to be analyzed has been described in detail in step S105, and will not be elaborated here.

[0118] S206: Determine whether the alarm object to be analyzed has sub-storage objects according to the associated relationship tree.

[0119] In this embodiment, the discussion on determining whether the alarm object to be analyzed has sub-storage objects has been described in detail in step S106, and will not be elaborated here.

[0120] S207: If the alarm object to be analyzed has sub-storage objects, obtain the real-time alarm information corresponding to the sub-storage objects.

[0121] In this embodiment, the discussion on obtaining the real-time alarm information corresponding to the sub-storage objects has been described in detail in step S107, and will not be elaborated here.

[0122] S208: Obtain the alarm impact scope information of the alarm object to be analyzed according to the target alarm information and the association relationship tree.

[0123] S209: Obtain the initial alarm impact value according to the alarm impact scope information.

[0124] Exemplarily, according to the alarm status of the target alarm information and the upper and lower - level storage dependency relationships of the alarm object to be analyzed in the association relationship tree, estimate the sub - storage objects affected by the alarm status of the alarm object to be analyzed, and / or the next - level storage objects of the sub - storage objects, so as to obtain the alarm impact scope information of the alarm object to be analyzed; specifically, for example, combined with Figure 3 the shown association relationship tree, the alarm storage object is the hard disk. When an alarm occurs on the hard disk, estimate the affected sub - storage object RAID, the next - level storage object storage pool of RAID, and the next - level storage object volume of the storage pool, so as to obtain the alarm impact scope information. The alarm impact scope information includes RAID, storage pool, and volume; further, according to the alarm impact scope information, the initial alarm impact value can be obtained. For example, if the alarm impact scope information includes 3 estimated affected storage objects, the initial alarm impact value is 3; if the alarm impact scope information includes 4 estimated affected storage objects, the initial alarm impact value is 4.

[0125] S210: Generate the other - cause alarm information of the sub - storage object according to the target alarm information, the initial alarm impact value, and the parameter information of the sub - storage object.

[0126] Exemplarily, according to the parameter information of the sub - storage object, determine the storage object number, storage object name, and storage object type of the sub - storage object. According to the target alarm information and the parameter information of the sub - storage object, obtain the alarm status of the sub - storage object; further, according to the initial alarm impact value, the alarm status of the sub - storage object, the storage object number, storage object name, and storage object type of the sub - storage object, generate the other - cause alarm information of the sub - storage object, where the other - cause alarm information includes the storage object number, storage object name, storage object type, alarm status, other - cause alarm flag, and initial alarm impact value of the sub - storage object.

[0127] S211: Compare the first impact degree corresponding to the other - cause alarm information with the second impact degree corresponding to the real - time alarm information.

[0128] In this embodiment, the discussion on determining the first impact degree corresponding to the other - cause alarm information and the second impact degree corresponding to the real - time alarm information has been described in detail in step S109, and will not be elaborated here.

[0129] S212: If the first influence degree is greater than the second influence degree, update the initial alarm influence value according to the other-factor alarm information to generate the current alarm influence value corresponding to the sub-storage object; generate the target alarm information of the sub-storage object according to the other-factor alarm information and the current alarm influence value corresponding to the sub-storage object.

[0130] Exemplarily, for example, the initial alarm influence value is 5. Update the initial alarm influence value according to the other-factor alarm information to obtain the current alarm influence value corresponding to the sub-storage object as 4. Furthermore, generate the target alarm information of the sub-storage object according to the other-factor alarm information and the current alarm influence value 3 corresponding to the sub-storage object. The target alarm information of the sub-storage object includes the storage object number, storage object name, storage object type, alarm status, other-factor alarm flag, and current alarm influence value of the sub-storage object.

[0131] S213: Determine whether the target alarm information of the sub-storage object meets the preset alarm conditions.

[0132] Exemplarily, according to the current alarm influence value corresponding to the target alarm information of the sub-storage object, determine whether the target alarm information of the sub-storage object meets the preset alarm conditions, that is, judge the magnitude relationship between the current alarm influence value of the sub-storage object and the alarm influence threshold corresponding to the preset alarm conditions. The alarm influence threshold corresponding to the preset alarm conditions is determined based on the storage object type of the sub-storage object; specifically, for example, if the sub-storage object is a RAID, based on the sub-storage object being a RAID, determine that the alarm influence threshold corresponding to the preset alarm conditions is 3; if the sub-storage object is a volume, based on the sub-storage object being a volume, determine that the alarm influence threshold corresponding to the preset alarm conditions is 6.

[0133] S214: If the target alarm information of the sub-storage object meets the preset alarm conditions, determine the sub-storage object as the alarm object to be analyzed, and re-return to the step of judging whether the alarm object to be analyzed has a sub-storage object according to the association relationship tree.

[0134] Exemplarily, if the target alarm information of the sub-storage object meets the preset alarm conditions, that is, the current alarm influence value of the sub-storage object is greater than or equal to the alarm influence threshold corresponding to the preset alarm conditions, it indicates that the alarm occurring in the alarm storage object also affects the next-level storage object of the sub-storage object. Furthermore, determine the sub-storage object as the alarm object to be analyzed, and re-return to the step of judging whether the alarm object to be analyzed has a sub-storage object according to the association relationship tree, thereby realizing not reporting the real-time alarm information of the sub-storage object caused by the target alarm information of the alarm storage object.

[0135] Specifically, for example, if the sub-storage object is a RAID, the corresponding current alarm impact value is 5, and the alarm impact threshold corresponding to the preset alarm condition is 3, then based on the fact that the current alarm impact value of 5 is greater than the alarm impact threshold of 3 corresponding to the preset alarm condition, it is determined that the alarm occurring in the alarm storage object also affects the storage object at the next level of the sub-storage object (i.e., RAID), and then the sub-storage object is determined as the alarm object to be analyzed, and the process returns to step S206 again.

[0136] S215: If the target alarm information of the sub-storage object does not meet the preset alarm condition, then output the target alarm information of the alarm storage object to the monitoring platform.

[0137] Exemplarily, if the target alarm information of the sub-storage object meets the preset alarm condition, that is, the current alarm impact value of the sub-storage object is less than the alarm impact threshold corresponding to the preset alarm condition, it indicates that the alarm occurring in the alarm storage object no longer affects the storage object at the next level of the sub-storage object, and then output the target alarm information of the alarm storage object to the monitoring platform.

[0138] Specifically, for example, if the sub-storage object is a volume, the corresponding current alarm impact value is 5, and the alarm impact threshold corresponding to the preset alarm condition is 6, then based on the fact that the current alarm impact value of 5 is less than the alarm impact threshold of 6 corresponding to the preset alarm condition, it is determined that the alarm occurring in the alarm storage object no longer affects the storage object at the next level of the sub-storage object (i.e., volume), and then output the target alarm information of the alarm storage object to the monitoring platform.

[0139] Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by means of software plus a necessary general hardware platform. Of course, it can also be implemented by hardware, but in many cases the former is a better implementation method.

[0140] Figure 6 It is a schematic structural diagram of a storage array alarm information processing device provided by an embodiment of the present application. As Figure 6 shown, an embodiment of the present application also provides a storage array alarm information processing device 3, including: an acquisition module 31, a first processing module 32, a first judgment module 33, a second processing module 34, a second judgment module 35, a third processing module 36, a third judgment module 37, a fourth processing module 38, and an output module 39.

[0141] The acquisition module 31 is used to acquire the associated relationship tree corresponding to each storage object in the storage array;

[0142] The acquisition module 31 is further used to acquire the alarm information of each storage object, and determine the corresponding alarm time according to the alarm information of each storage object;

[0143] The first processing module 32 is configured to screen out alarm storage objects from each storage object according to the alarm time of each storage object; generate target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object; and use the alarm storage object as the to-be-analyzed alarm object.

[0144] The first judgment module 33 is configured to judge whether the to-be-analyzed alarm object has sub-storage objects according to the association relationship tree.

[0145] The second processing module 34 is configured to, if the to-be-analyzed alarm object has sub-storage objects, obtain the real-time alarm information corresponding to the sub-storage objects; generate other-cause alarm information of the sub-storage objects according to the target alarm information, the association relationship tree, and the parameter information of the sub-storage objects.

[0146] The second judgment module 35 is configured to compare the first influence degree corresponding to the other-cause alarm information with the second influence degree corresponding to the real-time alarm information.

[0147] The third processing module 36 is configured to, if the first influence degree is greater than the second influence degree, generate target alarm information of the sub-storage objects according to the other-cause alarm information.

[0148] The third judgment module 37 is configured to judge whether the target alarm information of the sub-storage objects meets the preset alarm conditions.

[0149] The fourth processing module 38 is configured to, if the target alarm information of the sub-storage objects meets the preset alarm conditions, determine the sub-storage objects as the to-be-analyzed alarm objects, and return to the step of judging whether the to-be-analyzed alarm objects have sub-storage objects according to the association relationship tree.

[0150] The output module 39 is configured to, if the target alarm information of the sub-storage objects does not meet the preset alarm conditions, output the target alarm information of the alarm storage object to the monitoring platform.

[0151] In a possible implementation manner, when generating the target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object, the first processing module 32 is specifically configured to: judge whether the alarm status of the alarm information of the alarm storage object is an offline alarm status; if the alarm status of the alarm information of the alarm storage object is not an offline alarm status, generate a first type of self-cause alarm identifier, where the self-cause alarm identifier is used to indicate that the offline alarm status of the alarm storage object is caused by the factors of the alarm storage object itself; and generate the target alarm information of the alarm storage object according to the first type of self-cause alarm identifier and the alarm information of the alarm storage object.

[0152] In a possible implementation, after the first processing module 32 determines whether the alarm status of the alarm information of the alarm storage object is the offline alarm status, it is further configured to: if the alarm status of the alarm information of the alarm storage object is the offline alarm status, determine whether the alarm storage object has a parent storage object according to the association relationship tree; if the alarm storage object has no parent storage object, generate a second type of self-caused alarm identifier; and generate the target alarm information of the alarm storage object according to the second type of self-caused alarm identifier and the alarm information of the alarm storage object.

[0153] In a possible implementation, after the first processing module 32 determines whether the alarm storage object has a parent storage object according to the association relationship tree, it is further configured to: if the alarm storage object has a parent storage object, determine whether the alarm status corresponding to the parent storage object is the partial offline alarm status, the full offline alarm status, or the full non-offline alarm status; if the alarm status corresponding to the parent storage object is the partial offline alarm status or the full non-offline alarm status, generate a third type of self-caused alarm reporting identifier; and generate the target alarm information of the alarm storage object according to the third type of self-caused alarm reporting identifier and the alarm information of the alarm storage object.

[0154] In a possible implementation, after the first processing module 32 determines whether the alarm status corresponding to the parent storage object is the partial offline alarm status, the full offline alarm status, or the full non-offline alarm status, it is further configured to: if the alarm status corresponding to the parent storage object is the full offline alarm status, generate a suspension reporting message; where the suspension reporting message is used to indicate that the target alarm information of the alarm storage object is not output to the monitoring platform temporarily.

[0155] In a possible implementation, when the acquisition module 31 acquires the association relationship tree corresponding to each storage object in the storage array, it is specifically configured to: acquire the association relationship information between each storage object in the storage array; where the association relationship information is determined by the upper and lower storage dependency relationships between each storage object; and generate the association relationship tree according to the association relationship information between each storage object.

[0156] In a possible implementation, when the second processing module 34 generates the other-caused alarm information of the sub-storage object according to the target alarm information, the association relationship tree, and the parameter information of the sub-storage object, it is specifically configured to: obtain the alarm influence range information of the alarm object to be analyzed according to the target alarm information and the association relationship tree; obtain the initial alarm influence value according to the alarm influence range information; and generate the other-caused alarm information of the sub-storage object according to the target alarm information, the initial alarm influence value, and the parameter information of the sub-storage object.

[0157] In one possible implementation, when the third processing module 36 generates the target alarm information of the sub-storage object based on its cause alarm information, it is specifically used to: update the initial alarm impact value based on its cause alarm information to generate the current alarm impact value corresponding to the sub-storage object; generate the target alarm information of the sub-storage object based on its cause alarm information and the current alarm impact value corresponding to the sub-storage object.

[0158] In a possible implementation, after determining whether the alarm object to be analyzed has a sub-storage object according to the association tree, the output module 39 is further used to: if the alarm object to be analyzed has no sub-storage object, output the target alarm information of the alarm storage object to the monitoring platform.

[0159] In a possible implementation, after outputting the target alarm information of the alarm storage object to the monitoring platform, the storage array alarm information processing device 3 is also used to: generate alarm impact object information based on at least one determined sub-storage object; and send the alarm impact object information to the monitoring platform.

[0160] In a possible implementation, after the alarm affected object information is sent to the monitoring platform, the storage array alarm information processing device 3 is also used to: in response to the alarm status release information corresponding to the alarm storage object, obtain the alarm information of each sub-storage object corresponding to the alarm affected object information, and determine the corresponding alarm time according to the alarm information of each sub-storage object; according to the alarm time of each sub-storage object, filter out the alarm storage object from each sub-storage object; execute the step of generating the target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object, and the subsequent steps.

[0161] In a possible implementation, after comparing the first impact degree corresponding to the alarm information with the second impact degree corresponding to the real-time alarm information, the third processing module 36 is also used to: if the first impact degree is less than or equal to the second impact degree, then the target alarm information of the sub-storage object is not generated.

[0162] For the description of the features in the embodiment corresponding to the storage array alarm information processing device 3, reference may be made to the relevant description of the embodiment corresponding to the storage array alarm information processing method, which will not be described in detail here.

[0163] Figure 7 This is a schematic diagram of the structure of the electronic device provided in this application. Figure 7 As shown, the electronic device 50 provided in this embodiment includes: at least one processor 501 and a memory 502. Optionally, the electronic device 50 also includes a communication component 503. The processor 501, the memory 502 and the communication component 503 are connected via a bus.

[0164] In a specific implementation process, at least one processor 501 executes computer-executable instructions stored in a memory 502, so that at least one processor 501 executes the above-described method embodiments for processing storage array alarm information.

[0165] For the specific implementation process of the processor 501, reference may be made to the above method embodiments. Their implementation principles and technical effects are similar, and will not be elaborated herein.

[0166] In the above embodiments, it should be understood that the processor may be a central processing unit (CPU for short), or may also be other general-purpose processors, digital signal processors (DSP for short), application specific integrated circuits (ASIC for short), etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc. The steps of the method disclosed in combination with the application can be directly embodied as being executed by a hardware processor, or can be executed by a combination of hardware and software modules in the processor.

[0167] The memory may include a high-speed random access memory (RAM), and may also include a non-volatile memory (NVM), such as at least one disk memory.

[0168] The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the buses in the drawings of this application are not limited to only one bus or one type of bus.

[0169] An embodiment of the present application also provides a computer-readable storage medium, in which a computer program is stored. The computer program is configured to execute the steps in any of the above method embodiments for processing storage array alarm information when running.

[0170] In an exemplary embodiment, the computer-readable storage medium may include, but is not limited to: various media that can store computer programs, such as USB flash drives, read-only memory (ROM for short), random access memory (RAM for short), external hard drives, magnetic disks, or optical discs.

[0171] An embodiment of the present application also provides a computer program product. The computer program product includes a computer program, and when the computer program is executed by a processor, it implements the steps in any of the embodiments of the above storage array alarm information processing method.

[0172] Another embodiment of the present application also provides a computer program product, including a non-volatile computer-readable storage medium. The non-volatile computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, it implements the steps in any of the embodiments of the above storage array alarm information processing method.

[0173] Those skilled in the art can further realize that the units and algorithm steps of each example described in combination with the embodiments disclosed herein can be implemented by electronic hardware, computer software, or a combination of the two. To clearly illustrate the interchangeability of hardware and software, the components and steps of each example have been generally described according to functions in the above description. Whether these functions are executed in a hardware or software manner depends on the specific application and design constraints of the technical solution. Skilled professionals can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of this application.

[0174] The above has introduced in detail a storage array alarm information processing method, device, storage medium, and program product provided by this application. Specific examples are used in this article to elaborate on the principle and implementation manner of this application. The description of the above embodiments is only used to help understand the method and its core idea of this application. It should be noted that for those of ordinary skill in the art in this technical field, without departing from the principle of this application, several improvements and modifications can be made to this application, and these improvements and modifications also fall within the protection scope of the claims of this application.

Claims

1. A method for processing storage array alarm information, characterized in that Including: Obtain the associated relationship tree corresponding to each storage object in the storage array; Obtain the alarm information of each storage object, and determine the corresponding alarm time according to the alarm information of each storage object; Screen out the alarm storage objects from each storage object according to the alarm time of each storage object; Generate the target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object; Take the alarm storage object as the alarm object to be analyzed; Judge whether the alarm object to be analyzed has sub-storage objects according to the associated relationship tree; If the alarm object to be analyzed has sub-storage objects, obtain the real-time alarm information corresponding to the sub-storage objects; Generate the other-cause alarm information of the sub-storage object according to the target alarm information, the associated relationship tree and the parameter information of the sub-storage object; Compare the first influence degree corresponding to the other-cause alarm information with the second influence degree corresponding to the real-time alarm information; If the first influence degree is greater than the second influence degree, generate the target alarm information of the sub-storage object according to the other-cause alarm information; If the target alarm information of the sub-storage object meets the preset alarm condition, determine the sub-storage object as the alarm object to be analyzed, and return to the step of judging whether the alarm object to be analyzed has sub-storage objects according to the associated relationship tree; If the target alarm information of the sub-storage object does not meet the preset alarm condition, output the target alarm information of the alarm storage object to the monitoring platform; The generating the other-cause alarm information of the sub-storage object according to the target alarm information, the associated relationship tree and the parameter information of the sub-storage object includes: Obtain the alarm influence range information of the alarm object to be analyzed according to the target alarm information and the associated relationship tree; Obtain the initial alarm influence value according to the alarm influence range information; Generate the other-cause alarm information of the sub-storage object according to the target alarm information, the initial alarm influence value and the parameter information of the sub-storage object.

2. The method for processing storage array alarm information according to claim 1, wherein The generating the target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object includes: Judge whether the alarm status of the alarm information of the alarm storage object is an offline alarm status; If the alarm status of the alarm information of the alarm storage object is not an offline alarm status, generate a first type of self-cause alarm identifier; wherein, the self-cause alarm identifier is used to indicate that the offline alarm status of the alarm storage object is caused by its own factors of the alarm storage object; Generate the target alarm information of the alarm storage object according to the first type of self-cause alarm identifier and the alarm information of the alarm storage object.

3. The method for processing storage array alarm information according to claim 2, wherein After judging whether the alarm status of the alarm information of the alarm storage object is an offline alarm status, it further includes: If the alarm status of the alarm information of the alarm storage object is an offline alarm status, judge whether the alarm storage object has a parent storage object according to the associated relationship tree; If the alarm storage object has no parent storage object, generate a second type of self-cause alarm identifier; The target alarm information of the alarm storage object is generated according to the second type of self-caused alarm identifier and the alarm information of the alarm storage object.

4. The method for processing storage array alarm information according to claim 3, wherein After determining whether the alarm storage object has a parent storage object according to the association tree, the method further includes: If the alarm storage object has a parent storage object, determining whether the alarm state corresponding to the parent storage object is a partial offline alarm state, a full offline alarm state, or a full online alarm state; If the alarm state corresponding to the parent storage object is a partial offline alarm state or a completely online alarm state, a third type of self-caused alarm reporting mark is generated; The target alarm information of the alarm storage object is generated according to the self-caused alarm identifier of the third category and the alarm information of the alarm storage object.

5. The method for processing storage array alarm information according to claim 4, wherein After determining whether the alarm state corresponding to the parent storage object is a partially offline alarm state, a completely offline alarm state, or a completely non-offline alarm state, the method further includes: If the alarm state corresponding to the parent storage object is all offline alarm states, a reporting suspension information is generated; wherein the reporting suspension information is used to indicate that the target alarm information of the alarm storage object is not output to the monitoring platform temporarily.

6. The method for processing storage array alarm information according to any one of claims 1 to 5, characterized in that The step of obtaining an association relationship tree corresponding to each storage object in the storage array includes: Acquire association relationship information between storage objects in the storage array; wherein the association relationship information is determined by the upper and lower level storage dependency relationship between the storage objects; The association tree is generated according to the association information between the storage objects.

7. The method for processing storage array alarm information according to claim 1, wherein The step of generating target alarm information of the sub-storage object according to the other cause alarm information includes: The initial alarm impact value is updated according to the other alarm information to generate a current alarm impact value corresponding to the sub-storage object; The target alarm information of the sub-storage object is generated according to the other cause alarm information and the current alarm impact value corresponding to the sub-storage object.

8. The method for processing storage array alarm information according to any one of claims 1 to 5, characterized in that, After determining whether the alarm object to be analyzed has a child storage object according to the association tree, the method further includes: If the alarm object to be analyzed has no sub-storage object, the target alarm information of the alarm storage object is output to the monitoring platform.

9. The method for processing storage array alarm information according to any one of claims 1 to 5, characterized in that, After outputting the target alarm information of the alarm storage object to the monitoring platform, the method further includes: Generate alarm impact object information according to the determined at least one sub-storage object; The alarm impact object information is sent to the monitoring platform.

10. The method for processing storage array alarm information according to claim 9, wherein After sending the alarm impact object information to the monitoring platform, the method further includes: In response to the release information of the alarm state corresponding to the alarm storage object, the alarm information of each sub-storage object corresponding to the alarm affected object information is obtained, and the corresponding alarm time is determined according to the alarm information of each sub-storage object; According to the alarm time of each sub-storage object, filter out the alarm storage object from each sub-storage object; The execution step generates target alarm information of the alarm storage object according to the alarm status of the alarm information of the alarm storage object, and the subsequent steps.

11. The method for processing storage array alarm information according to any one of claims 1 to 5, characterized in that, After comparing the first influence degree corresponding to the other cause warning information with the second influence degree corresponding to the real-time warning information, it further includes: If the first influence degree is less than or equal to the second influence degree, the target warning information of the sub-storage object is not generated.

12. An electronic device, characterized in that, It includes: A memory for storing a computer program; A processor for implementing the steps of the storage array warning information processing method according to any one of claims 1 to 11 when executing the computer program.

13. A computer-readable storage medium, characterized in that, A computer program is stored in the computer-readable storage medium, wherein the computer program implements the steps of the storage array warning information processing method according to any one of claims 1 to 11 when executed by a processor.

14. A computer program product, comprising a computer program, characterized in that, The computer program implements the steps of the storage array warning information processing method according to any one of claims 1 to 11 when executed by a processor.

Images