Monitoring management method and device, storage medium and electronic equipment

Abstract

The invention provides a monitoring management method and device, a storage medium and electronic equipment. The method comprises the following steps: acquiring target monitoring data of a target monitoring index under a target time index; determining an initial monitoring strategy of the target monitoring index under the target time index, and determining an undetermined monitoring strategy of the target monitoring index under the target time index based on the initial monitoring strategy and the target monitoring data; based on the to-be-determined monitoring strategy, determining target monitoring strategy indication data of the target monitoring index under the target time index, the target monitoring strategy indication data supporting management used for guiding the monitoring strategy of the target monitoring index under each target monitoring time period in a second time range, each target monitoring time period in the second time range belongs to the target time index. According to the embodiment of the invention, the monitoring accuracy can be improved.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular, to a monitoring and management method, device, storage medium, and electronic device. Background Art

[0002] At present, monitoring systems have been widely applied to various business services, and the construction of business service monitoring has become an important part of enterprise development. However, the monitoring strategies involved in related monitoring systems are usually set according to experience, resulting in a relatively rough setting of monitoring items, and thus frequent monitoring false alarms often occur, that is, the accuracy of monitoring is relatively low. Based on this, there is currently no good solution to how to improve the accuracy of monitoring. Summary of the Invention

[0003] In view of this, embodiments of the present invention provide a monitoring and management method, device, storage medium, and electronic device to solve problems such as relatively low accuracy of monitoring; that is, embodiments of the present invention can obtain target monitoring strategy indication data from target monitoring data for guiding the management of monitoring strategies for target monitoring indicators in each target monitoring period within a second time range, that is, for guiding the management of monitoring strategies for target monitoring indicators under target time indicators, which can improve the accuracy of monitoring strategies, and thus can achieve monitoring management through the management of monitoring strategies to effectively improve the accuracy of monitoring.

[0004] According to one aspect of embodiments of the present invention, a monitoring and management method is provided, and the method includes:

[0005] Obtain target monitoring data of a target monitoring indicator under a target time indicator, where the target monitoring data includes monitoring data of the target monitoring indicator in each target monitoring period within a first time range, each target monitoring period within the first time range belongs to the target time indicator, and the monitoring data of the target monitoring indicator within one target monitoring period includes the indicator values of the target monitoring indicator at each monitoring acquisition time within the corresponding target monitoring period;

[0006] Determine an initial monitoring strategy of the target monitoring indicator under the target time indicator, and based on the initial monitoring strategy and the target monitoring data, determine a pending monitoring strategy of the target monitoring indicator under the target time indicator;

[0007] Based on the pending monitoring strategy, determine target monitoring strategy indication data of the target monitoring indicator under the target time indicator, where the target monitoring strategy indication data is used to guide the management of monitoring strategies for the target monitoring indicator in each target monitoring period within a second time range, and each target monitoring period within the second time range belongs to the target time indicator.

[0008] According to another aspect of the embodiments of the present invention, a monitoring and management device is provided. The device includes:

[0009] An acquisition unit, configured to acquire target monitoring data of a target monitoring metric under a target time metric. The target monitoring data includes monitoring data of the target monitoring metric in each target monitoring period within a first time range, and each target monitoring period within the first time range belongs to the target time metric. The monitoring data of the target monitoring metric within a target monitoring period includes the metric values of the target monitoring metric at each monitoring acquisition time within the corresponding target monitoring period;

[0010] A processing unit, configured to determine an initial monitoring strategy of the target monitoring metric under the target time metric, and based on the initial monitoring strategy and the target monitoring data, determine a pending monitoring strategy of the target monitoring metric under the target time metric;

[0011] The processing unit is further configured to, based on the pending monitoring strategy, determine target monitoring strategy indication data of the target monitoring metric under the target time metric. The target monitoring strategy indication data supports the management of the monitoring strategy for guiding the target monitoring metric in each target monitoring period within a second time range, and each target monitoring period within the second time range belongs to the target time metric.

[0012] According to another aspect of the embodiments of the present invention, an electronic device is provided. The electronic device includes a processor and a memory storing a program. Wherein, the program includes instructions that, when executed by the processor, cause the processor to execute the method mentioned above.

[0013] According to another aspect of the embodiments of the present invention, a non-transitory computer-readable storage medium storing computer instructions is provided. The computer instructions are used to cause a computer to execute the method mentioned above.

[0014] Embodiments of the present invention can obtain target monitoring data of a target monitoring metric under a target time metric. The target monitoring data includes monitoring data of the target monitoring metric in each target monitoring period within a first time range. Each target monitoring period within the first time range belongs to the target time metric. The monitoring data of the target monitoring metric within a target monitoring period includes the metric values of the target monitoring metric at each monitoring acquisition time within the corresponding target monitoring period. Based on this, an initial monitoring strategy of the target monitoring metric under the target time metric can be determined, and based on the initial monitoring strategy and the target monitoring data, a pending monitoring strategy of the target monitoring metric under the target time metric can be determined. Further, based on the pending monitoring strategy, target monitoring strategy indication data of the target monitoring metric under the target time metric can be determined. The target monitoring strategy indication data supports the management of the monitoring strategy for guiding the target monitoring metric in each target monitoring period within a second time range. Each target monitoring period within the second time range belongs to the target time metric. It can be seen that embodiments of the present invention can obtain target monitoring strategy indication data through the target monitoring data to be used for guiding the management of the monitoring strategy for the target monitoring metric in each target monitoring period within the second time range, that is, for guiding the management of the monitoring strategy of the target monitoring metric under the target time metric, which can improve the accuracy of the monitoring strategy, and thus realize monitoring management through the management of the monitoring strategy to effectively improve the accuracy of monitoring. In addition, the target monitoring metric can be any monitoring metric under any service, and the target time metric can be any time metric. Embodiments of the present invention can achieve flexible monitoring management of service monitoring dimensions in different time periods to achieve flexible monitoring strategy configuration, which can meet the requirements of services and service operation and maintenance personnel for accurate monitoring and grasping real-time service conditions. Based on this, embodiments of the present invention can implement an intelligent alarm (i.e., warning) threshold prediction system for accurately predicting business monitoring outliers, which can assist the monitoring system to complete the monitoring work more flexibly and efficiently, thereby effectively improving the monitoring accuracy and operation and maintenance efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In the following description of exemplary embodiments with reference to the accompanying drawings, more details, features, and advantages of the present invention are disclosed. In the drawings:

[0016] Figure 1 FIG. shows a flowchart of a monitoring management method according to an exemplary embodiment of the present invention;

[0017] Figure 2 FIG. shows a flowchart of another monitoring management method according to an exemplary embodiment of the present invention;

[0018] Figure 3 FIG. shows a schematic diagram of a target monitoring strategy indication data according to an exemplary embodiment of the present invention;

[0019] Figure 4 A schematic block diagram of a monitoring and management device according to an exemplary embodiment of the present invention is shown;

[0020] Figure 5 A structural block diagram of an exemplary electronic device that can be used to implement an embodiment of the present invention is shown. Detailed implementation manners

[0021] Embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although some embodiments of the present invention are shown in the drawings, it should be understood that the present invention can be implemented in various forms and should not be construed as limited to the embodiments set forth herein. On the contrary, these embodiments are provided to more thoroughly and completely understand the present invention. It should be understood that the drawings and embodiments of the present invention are only for exemplary purposes and are not used to limit the protection scope of the present invention.

[0022] It should be understood that the various steps recited in the method embodiments of the present invention can be executed in a different order and / or in parallel. In addition, the method embodiments may include additional steps and / or omit the steps shown. The scope of the present invention is not limited in this regard.

[0023] The term "including" and its variations used herein are open-ended, that is, "including but not limited to". The term "based on" is "at least partially based on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". The relevant definitions of other terms will be given in the following description. It should be noted that the concepts such as "first" and "second" mentioned in the present invention are only used to distinguish different devices, modules or units, and are not used to limit the order of functions performed by these devices, modules or units or their interdependent relationships.

[0024] It should be noted that the modifications of "one" and "multiple" mentioned in the present invention are illustrative rather than restrictive. Those skilled in the art should understand that unless clearly stated otherwise in the context, it should be understood as "one or more".

[0025] The names of the messages or information exchanged between multiple devices in the embodiments of the present invention are only for illustrative purposes and are not used to limit the scope of these messages or information.

[0026] It should be noted that the execution subject of the monitoring and management method provided in the embodiments of the present invention may be one or more electronic devices, and the present invention does not limit this; among them, the electronic device may be a terminal (i.e., a client) or a server. Then, when the execution subject includes multiple electronic devices, and at least one terminal and at least one server are included in the multiple electronic devices, the monitoring and management method provided in the embodiments of the present invention may be jointly executed by the terminal and the server. Correspondingly, the terminals mentioned here may include, but are not limited to: smart phones, tablet computers, laptop computers, desktop computers, intelligent voice interaction devices, and so on. The servers mentioned here may be independent physical servers, or a server cluster or distributed system composed of multiple physical servers, or cloud servers that provide basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms, and so on.

[0027] Based on the above description, the embodiments of the present invention propose a monitoring and management method, which can be executed by the above-mentioned electronic devices (terminals or servers); or, this monitoring and management method can be jointly executed by the terminal and the server. For the convenience of description, in the following, the example of an electronic device executing this monitoring and management method will be used for illustration; as Figure 1 shown, this monitoring and management method may include the following steps S101 - S103:

[0028] S101, obtain the target monitoring data of the target monitoring indicator under the target time indicator. The target monitoring data includes the monitoring data of the target monitoring indicator in each target monitoring period within the first time range. Each target monitoring period within the first time range belongs to the target time indicator. The monitoring data of the target monitoring indicator within one target monitoring period includes the indicator values of the target monitoring indicator at each monitoring collection time within the corresponding target monitoring period.

[0029] Optionally, the target monitoring metric can be any monitoring metric under any service, and the embodiments of the present invention do not limit this; optionally, the target monitoring metric can also specifically be any monitoring metric under any service involved in any service, or the target monitoring metric can be any service monitoring metric under any service (such as interest rate calculation service, reach service, etc.), and so on. Optionally, any service can be a payment service, a credit service, a supply chain service, and so on; the embodiments of the present invention do not limit this. Optionally, any service can be an interest rate calculation service, a trigger service, a protocol service, etc., and the embodiments of the present invention do not limit this. Optionally, any monitoring metric can be the utilization rate of the CPU (Central Processing Unit), the total traffic of any service, the number of errors of any service, and so on; the embodiments of the present invention do not limit this. In the embodiments of the present invention, in the face of different time metrics and different monitoring sensitivity requirements of different services, as many service monitoring scenarios as possible can be sorted out, enumerated, and listed, so as to customize alarm strategies in different scenarios. That is to say, different monitoring management can be performed for different monitoring metrics to effectively improve the sensitivity of monitoring.

[0030] Optionally, the target time metric can be any time metric, and the embodiments of the present invention do not limit this. Optionally, a time metric can be used to indicate the corresponding monitoring period within the corresponding time range. That is to say, a monitoring period within a time range can belong to a time metric. Exemplarily, assuming that the target time metric is used to indicate the 3rd, 15th, 16th, 25th, and 30th of each month within the first quarter (at this time, a time range under the target time metric can be any first quarter), then assuming that the first time range is from January 2023 to March 2023 (at this time, the first time range is the first quarter of 2023), then each target monitoring period within the first time range can include January 3, 15, 16, 25, and 30, 2023, February 3, 15, 16, 25, and 30, 2023, and March 3, 15, 16, 25, and 30, 2023. Optionally, the first time range can be any time range under the target time metric, and the embodiments of the present invention do not limit this. Optionally, a time range can be one month, three months, one year, and so on; the embodiments of the present invention do not limit this. It can be seen that the embodiments of the present invention can independently configure monitoring dimensions according to service types and so on.

[0031] Optionally, the duration corresponding to a monitoring collection time (i.e., the monitoring collection time point) can be one hour (in this case, the time interval between every two monitoring collection times can be one hour), or one minute (in this case, the time interval between every two monitoring collection times can be one minute), and so on; the embodiments of the present invention do not limit this; for example, when the target monitoring metric is the access count of any service, the metric value of the target monitoring metric at a monitoring collection time can be the access count of any service at this monitoring collection time (i.e., it can be the access count within the time sub-range corresponding to this monitoring collection time (such as a certain hour)), when the target monitoring metric is the CPU utilization rate, the metric value of the target monitoring metric at a monitoring collection time can be the average CPU utilization rate at this monitoring collection time (in this case, multiple values can be collected within the time sub-range corresponding to a monitoring collection time for averaging) or the CPU utilization rate collected at this monitoring collection time, and so on; the embodiments of the present invention do not limit this.

[0032] In the embodiments of the present invention, the ways to obtain the target monitoring data may include but are not limited to the following several:

[0033] The first way to obtain: The storage space of the electronic device itself may store the monitoring data of multiple monitoring metrics at multiple time metrics, the multiple monitoring metrics include the target monitoring metric, and the multiple time metrics include the target time metric; in this case, the electronic device can determine the target monitoring data of the target monitoring metric at the target time metric from the monitoring data of multiple monitoring metrics at multiple time metrics, so as to obtain the target monitoring data of the target monitoring metric at the target time metric.

[0034] The second way to obtain: The electronic device can obtain the data download link of the target monitoring metric at the target time metric, and download the target monitoring data of the target monitoring metric at the target time metric based on this data download link, so as to obtain the target monitoring data of the target monitoring metric at the target time metric.

[0035] The third acquisition method: When the electronic device detects a monitoring policy analysis operation performed by a target object (such as a monitoring management personnel, etc.), it responds to the monitoring policy analysis operation and determines the data to be analyzed indicated by the monitoring policy analysis operation; Optionally, the data to be analyzed may include the indicator identifier of the target monitoring indicator (which can be used to indicate the target monitoring indicator), the indicator identifier of the target time indicator (which can be used to indicate the target time indicator), then the electronic device can obtain the target monitoring data of the target monitoring indicator under the target time indicator; Optionally, the data to be analyzed may include the target monitoring data, then the electronic device can obtain the target monitoring data from the data to be analyzed, that is, the monitoring data indicated by the monitoring policy analysis operation can be used as the target monitoring data, and so on. Optionally, the indicator identifier of a monitoring indicator can be the monitoring indicator name or monitoring indicator number of the corresponding monitoring indicator, etc., and the embodiments of the present invention do not limit this. Optionally, the indicator identifier of a time indicator can be the time indicator description information or time indicator number of the corresponding time indicator, etc., and the embodiments of the present invention do not limit this.

[0036] Optionally, the electronic device can also perform data cleaning on the target monitoring data to exclude data under monitoring periods or monitoring collection times with obvious sudden increases or decreases in perceived service traffic from the target monitoring data, such as excluding data during the time of business testing, and so on. Based on this, the accuracy of the target monitoring data can be effectively guaranteed, that is, it can be ensured that the target monitoring data are all monitoring data generated by real services, so that the target monitoring data can be closer to the real situation to improve the accuracy of the subsequent target monitoring policy indication data. In the embodiments of the present invention, the main purpose of data acquisition is to more accurately calculate a reasonable monitoring threshold, that is, a more reasonable monitoring policy can be calculated, so that the significance and value of the monitoring model (which can also be called a monitoring policy construction model or a threshold construction model, etc.) are maximized; Optionally, the target monitoring data can be the business scenarios of consulting business parties, and specific batch running rules (that is, using timed tasks to push or obtain data within a specified time range) are summarized from the business scenarios, or it can be historical monitoring data obtained from a monitoring platform or other relevant systems, and so on.

[0037] S102, determine the initial monitoring policy of the target monitoring indicator under the target time indicator, and based on the initial monitoring policy and the target monitoring data, determine the pending monitoring policy of the target monitoring indicator under the target time indicator.

[0038] In one implementation, when determining the initial monitoring strategy of the target monitoring metric under the target time metric, the electronic device can perform data analysis on the target monitoring data to obtain the data analysis result of the target monitoring data. The data analysis result can include the initial monitoring strategy of the target monitoring metric under the target time metric. Optionally, the data analysis result can further include, but is not limited to, at least one of the following: peak value, peak duration, and index value change amount, etc. The embodiments of the present invention do not limit this. Optionally, the data analysis can include, but is not limited to, at least one of the following: comparative analysis, retention analysis, and grouping analysis, etc. The embodiments of the present invention do not limit this.

[0039] Optionally, the initial monitoring strategy can include, but is not limited to: the lowest index value, the highest index value, and the average index value of the target monitoring metric under the target time metric. Based on this, the electronic device can determine the lowest index value from the target monitoring data (i.e., the minimum index value in the target monitoring data can be used as the lowest index value) and the highest index value (i.e., the maximum index value in the target monitoring data can be used as the highest index value), and can perform a mean operation on the target monitoring data to obtain the average index value of the target monitoring metric under the target time metric, and so on. Optionally, the initial monitoring strategy can further include the lowest index value duration indication information (which can be used to indicate that the index values in z consecutive monitoring acquisition times are the lowest index values, and z can represent the lowest index value duration information) and the highest index value duration information (which can be used to indicate that the index values in q consecutive monitoring acquisition times are the highest index values, and q can represent the highest index value duration information). Optionally, the number of the lowest index value duration information can be one or more, and the number of the highest index value duration information can be one or more. The embodiments of the present invention do not limit this. Based on this, the electronic device can determine the lowest index value duration information and the highest index value duration information based on the target monitoring data. Optionally, the electronic device can determine at least one monitoring sampling time number for which the lowest index value lasts based on the target monitoring data, so as to use each of the at least one monitoring sampling time numbers for which the lowest index value lasts as a lowest index value duration information. Correspondingly, at least one monitoring sampling time number for which the highest index value lasts can be determined, so as to use each of the at least one monitoring sampling time numbers for which the highest index value lasts as a highest index value duration information.

[0040] In another implementation, the data to be analyzed indicated by the above monitoring strategy analysis operation can include the initial monitoring strategy. In this case, the electronic device can determine the initial monitoring strategy from the data to be analyzed to implement the determination of the initial monitoring strategy, and so on.

[0041] S103. Based on the to-be-determined monitoring strategy, determine the target monitoring strategy indication data of the target monitoring metric under the target time metric. The target monitoring strategy indication data supports the management of the monitoring strategy for guiding the target monitoring metric in each target monitoring period within the second time range. Each target monitoring period within the second time range belongs to the target time metric.

[0042] Optionally, the electronic device may output the target monitoring strategy indication data; or, the target monitoring strategy indication data may include the rationality judgment indication information of the original monitoring strategy. The rationality judgment indication information may be a reasonable indication flag or an unreasonable indication flag. In this case, the target monitoring strategy indication data may be output when the rationality judgment indication information is an unreasonable indication flag, and so on. Among them, the reasonable indication flag may be used to indicate that the original monitoring strategy is reasonable, and the unreasonable indication flag may be used to indicate that the original monitoring strategy is unreasonable. Optionally, both the reasonable indication flag and the unreasonable indication flag may be set according to experience, or set according to actual requirements, or generated according to the number of original alarms, and so on. The embodiments of the present invention do not limit this.

[0043] Optionally, the electronic device may also first determine the rationality judgment indication information of the original monitoring strategy, and when the rationality judgment indication information is an unreasonable indication flag, trigger the execution of the above-mentioned initial monitoring strategy for determining the target monitoring metric under the target time metric, and so on. The embodiments of the present invention do not limit this.

[0044] Optionally, the second time range may be any time range belonging to the target time metric; optionally, the second time range may be the same as or different from the first time range. The embodiments of the present invention do not limit this. Exemplarily, when the target time metric is used to indicate the time range of the first quarter, the first time range may be from January 2023 to March 2023, and the second time range may be from January 2024 to March 2024, and so on.

[0045] Embodiments of the present invention can obtain target monitoring data of a target monitoring metric under a target time metric. The target monitoring data includes monitoring data of the target monitoring metric in each target monitoring period within a first time range. Each target monitoring period within the first time range belongs to the target time metric. The monitoring data of the target monitoring metric within a target monitoring period includes the metric values of the target monitoring metric at each monitoring acquisition time within the corresponding target monitoring period. Based on this, an initial monitoring strategy of the target monitoring metric under the target time metric can be determined, and based on the initial monitoring strategy and the target monitoring data, a pending monitoring strategy of the target monitoring metric under the target time metric can be determined. Further, based on the pending monitoring strategy, target monitoring strategy indication data of the target monitoring metric under the target time metric can be determined. The target monitoring strategy indication data supports the management of the monitoring strategy for guiding the target monitoring metric in each target monitoring period within a second time range. Each target monitoring period within the second time range belongs to the target time metric. It can be seen that embodiments of the present invention can obtain target monitoring strategy indication data through the target monitoring data to be used for guiding the management of the monitoring strategy for the target monitoring metric in each target monitoring period within the second time range, that is, for guiding the management of the monitoring strategy of the target monitoring metric under the target time metric, which can improve the accuracy of the monitoring strategy. Thus, monitoring management can be achieved through the management of the monitoring strategy to effectively improve the accuracy of monitoring. In addition, the target monitoring metric can be any monitoring metric under any service, and the target time metric can be any time metric. Embodiments of the present invention can achieve flexible monitoring management of service monitoring dimensions at different time periods to achieve flexible monitoring strategy configuration, which can meet the requirements of services and service operation and maintenance personnel for accurate monitoring and grasping real-time service conditions. Based on this, embodiments of the present invention can implement an intelligent alarm (i.e., warning) threshold prediction system for accurately predicting service monitoring outliers, which can assist the monitoring system to complete monitoring work more flexibly and efficiently, thereby effectively improving monitoring accuracy and operation and maintenance efficiency.

[0046] Based on the above description, embodiments of the present invention further propose a more specific monitoring management method. Correspondingly, this monitoring management method can be executed by the above-mentioned electronic device (terminal or server); or, this monitoring management method can be jointly executed by the terminal and the server. For the convenience of elaboration, in the following, it is assumed that the electronic device executes this monitoring management method for illustration; please refer to Figure 2 , this monitoring management method may include the following steps S201 - S206:

[0047] S201. Obtain the target monitoring data of the target monitoring metric under the target time metric. The target monitoring data includes the monitoring data of the target monitoring metric in each target monitoring period within the first time range. Each target monitoring period within the first time range belongs to the target time metric. The monitoring data of the target monitoring metric within a target monitoring period includes the metric values of the target monitoring metric at each monitoring acquisition time within the corresponding target monitoring period.

[0048] S202. Determine the initial monitoring strategy of the target monitoring metric under the target time metric.

[0049] Among them, the initial monitoring strategy includes the lowest metric value, the highest metric value, and the average metric value of the target monitoring metric under the target time metric.

[0050] Optionally, the monitoring management method mentioned in the embodiments of the present invention can be executed by an electronic device through a monitoring strategy construction model. That is to say, the electronic device can input the target monitoring data into the monitoring strategy construction model. Then, the electronic device can output the following target monitoring strategy indication data through the monitoring strategy construction model. That is to say, at this time, the electronic device can determine the target monitoring strategy indication data based on the target monitoring data according to the model logic of the monitoring strategy construction model.

[0051] S203. Determine the first mean judgment value and the second mean judgment value based on the average metric value.

[0052] In the embodiments of the present invention, when determining the first mean judgment value based on the average metric value, the electronic device can use the product of the average metric value and the first metric ratio as the first mean judgment value. Correspondingly, when determining the second mean judgment value based on the average metric value, the product of the average metric value and the second metric ratio can be used as the second mean judgment value.

[0053] Optionally, both the first metric ratio and the second metric ratio can be set according to experience or according to actual requirements. The embodiments of the present invention do not limit this. Exemplarily, the first metric ratio can be 10%, the second metric ratio can be 20%, and so on.

[0054] S204. Determine the pending lowest monitoring value based on the lowest metric value and the first mean judgment value; and determine the pending highest monitoring value based on the highest metric value and the second mean judgment value.

[0055] Optionally, when determining the pending minimum monitoring value based on the minimum value of the metric and the first mean judgment value, the electronic device may determine a preset minimum threshold, a first preset average threshold, etc. Based on this, when the minimum value of the metric is greater than the preset minimum threshold and the first mean judgment value is less than the first preset average threshold, the difference between the minimum value of the metric and the first preset value may be used as the pending minimum monitoring value; when the minimum value of the metric is greater than the preset minimum threshold and the first mean judgment value is greater than or equal to the first preset average threshold, the difference between the minimum value of the metric and the first mean judgment value may be used as the pending minimum monitoring value. Optionally, the preset minimum threshold, the first preset average threshold, and the first preset value may all be set according to experience or according to actual requirements, and the embodiments of the present invention do not limit this; for example, the preset minimum threshold may be 0, the first preset average threshold and the first preset value may be 1, and so on.

[0056] Optionally, when determining the pending maximum monitoring value based on the maximum value of the metric and the second mean judgment value, the electronic device may determine a second preset average threshold and a second preset value, etc. Based on this, when the second mean judgment value is less than the second preset average threshold, the sum of the maximum value of the metric and the second preset value may be used as the pending maximum monitoring value; when the second mean judgment value is greater than or equal to the second preset average threshold, the difference between the maximum value of the metric and the second mean judgment value may be used as the pending maximum monitoring value. Optionally, the second preset average threshold and the second preset value may both be set according to experience or according to actual requirements, and the embodiments of the present invention do not limit this; for example, the second preset average threshold may be 1, the second preset value may be 1, and so on.

[0057] Optionally, any two of the first preset average threshold, the second preset average threshold, the first preset value, and the second preset value may be the same or different, and the embodiments of the present invention do not limit this.

[0058] S205. Determine the alarm policy corresponding to the pending minimum monitoring value, and add the alarm policy corresponding to the pending minimum monitoring value to the pending monitoring policy of the target monitoring metric under the target time metric; and determine the alarm policy corresponding to the pending maximum monitoring value, and add the alarm policy corresponding to the pending maximum monitoring value to the pending monitoring policy, so as to determine the pending monitoring policy of the target monitoring metric under the target time metric based on the initial monitoring policy and the target monitoring data.

[0059] Optionally, the initial monitoring policy may further include the indication information of the duration of the minimum value of the metric and the information of the duration of the maximum value of the metric. Based on this, when determining the alarm policy corresponding to the to-be-determined minimum monitoring value, the alarm policy corresponding to the to-be-determined minimum monitoring value may be determined based on the indication information of the duration of the minimum value of the metric; in the embodiments of the present invention, the alarm policy corresponding to the to-be-determined minimum monitoring value may be determined to indicate that when the target monitoring metric values are all less than the to-be-determined minimum monitoring value (which may be represented as y) in the number of monitoring acquisition times indicated by the indication information of the duration of the minimum value of the metric (i.e., continuous z monitoring acquisition times), an alarm is triggered (i.e., an alert). Optionally, the embodiments of the present invention do not limit the specific representation manner of any alarm policy; for example, taking the alarm policy corresponding to the to-be-determined minimum monitoring value as an example, the alarm policy corresponding to the to-be-determined minimum monitoring value may be expressed as: when the target monitoring metric values are all less than the to-be-determined minimum monitoring value in continuous z monitoring acquisition times, an alarm is triggered, or it may be represented in the form of an array (such as [to-be-determined minimum monitoring value, z]), etc. Optionally, when there are multiple pieces of indication information of the duration of the minimum value of the metric, the to-be-determined minimum monitoring value may correspond to multiple pieces of indication information of the duration of the minimum value of the metric. At this time, the monitoring policy corresponding to the to-be-determined minimum monitoring value may include the monitoring policies of the to-be-determined minimum monitoring value under each piece of indication information of the duration of the minimum value of the metric among the multiple pieces of indication information of the duration of the minimum value of the metric.

[0060] Optionally, when the minimum value of the metric is less than or equal to the preset minimum threshold, the alarm policy corresponding to the preset minimum threshold may be determined, and the alarm policy corresponding to the preset minimum threshold may be added to the to-be-determined monitoring policy. Optionally, the alarm policy corresponding to the preset minimum threshold may be determined to indicate that when the minimum value of the target monitoring metric is less than or equal to the preset minimum threshold and has been continuous for p monitoring acquisition times, an alarm is triggered. Optionally, p may be the sum of the indication information of the duration of the minimum value of the metric and the preset minimum value delay time; optionally, the preset minimum value delay time may be set according to experience or according to actual requirements, and the embodiments of the present invention do not limit this; for example, the preset minimum value delay time may be 1, and at this time, p may be z + 1.

[0061] Correspondingly, when determining the alarm policy corresponding to the to-be-determined highest monitoring value, the alarm policy corresponding to the to-be-determined highest monitoring value may be determined based on the indication information of the duration of the highest value of the indicator; in the embodiments of the present invention, the alarm policy corresponding to the to-be-determined highest monitoring value may be determined to indicate that when the target monitoring indicator has values greater than the to-be-determined highest monitoring value (which may be denoted as w) in the number of monitoring acquisition times indicated by the duration of the consecutive highest value of the indicator (i.e., consecutive q monitoring acquisition times), an alarm is triggered. Optionally, when there are multiple pieces of indication information of the duration of the highest value of the indicator, the to-be-determined highest monitoring value may correspond to the multiple pieces of indication information of the duration of the highest value of the indicator. At this time, the monitoring policy corresponding to the to-be-determined highest monitoring value may include the monitoring policies of the to-be-determined highest monitoring value under each piece of indication information of the duration of the highest value of the indicator among the multiple pieces of indication information of the duration of the highest value of the indicator.

[0062] Optionally, the initial monitoring policy may further include an initial sudden drop limit value (which may be denoted as R%) and / or an initial sudden increase limit value (which may be denoted as S%). Optionally, the electronic device may determine the ratio of the change in the indicator value between any two adjacent monitoring acquisition times (that is, how much the indicator value at the latter monitoring acquisition time has changed compared to the indicator value at the previous monitoring acquisition time, such as an increase of a certain percentage or a decrease of a certain percentage, an increase can be positive, and a decrease can be negative) based on the target monitoring data, so as to determine the maximum ratio of the change in the indicator value (which can be used to indicate the maximum ratio of increase in the indicator value and can be a positive number) and the minimum ratio of the change in the indicator value (which can be used to indicate the maximum ratio of decrease in the indicator value and can be a negative number) under the target monitoring data, and thus use the maximum ratio of the change in the indicator value as the initial sudden increase limit value, and use the minimum ratio of the change in the indicator value as the initial sudden drop limit value, and so on; where the ratio of the change in the indicator value between any two adjacent monitoring acquisition times may be: the ratio of the difference between the indicator value at the latter monitoring acquisition time and the indicator value at the previous monitoring acquisition time (that is, the result of subtracting the indicator value at the previous monitoring acquisition time from the indicator value at the latter monitoring acquisition time) to the indicator value at the previous monitoring acquisition time. Optionally, in other embodiments, the initial sudden drop limit value and the initial sudden increase limit value may be set according to experience, may be set according to actual requirements, or may be obtained from the original monitoring policy, and so on; the present invention does not limit this.

[0063] Based on this, the electronic device can also determine a pending sudden drop limit value based on the initial sudden drop limit value and the preset sudden drop reduction value, and add the alarm policy corresponding to the pending sudden drop limit value to the pending monitoring policy; and / or, it can determine a pending sudden increase limit value based on the initial sudden increase limit value and the preset sudden increase increment value, and add the alarm policy corresponding to the pending sudden increase limit value to the pending monitoring policy. Optionally, the electronic device can use the difference between the initial sudden drop limit value and the preset sudden drop reduction value as the pending sudden drop limit value, which can be expressed as L (i.e., the pending sudden drop limit value) = R% - the preset sudden drop reduction value at this time; optionally, the sum of the initial sudden increase limit value and the preset sudden increase increment value can be used as the pending sudden increase limit value, which can be expressed as G (i.e., the pending sudden increase limit value) = S% + the preset sudden increase increment value at this time. Optionally, both the preset sudden drop reduction value and the preset sudden increase increment value can be set according to experience or according to actual needs, and the embodiments of the present invention do not limit this; for example, the preset sudden drop reduction value can be 5%, and the preset sudden increase increment value can be 5%, etc.

[0064] Optionally, the electronic device can determine that the alarm policy corresponding to the pending sudden drop limit value is used to indicate that when the index sudden drop ratio of the target monitoring index reaches the pending sudden drop limit value, an alarm is triggered (that is, when the index change ratio between the index value of the target monitoring index at the next monitoring acquisition time and the index value at the previous monitoring acquisition time is less than or equal to the pending sudden drop limit value, an alarm is triggered); correspondingly, it can determine the pending sudden increase limit value to indicate that when the index sudden increase ratio of the target monitoring index reaches the pending sudden increase limit value, an alarm is triggered (that is, when the index change ratio between the index value of the target monitoring index at the next monitoring acquisition time and the index value at the previous monitoring acquisition time is greater than or equal to the pending sudden increase limit value, an alarm is triggered).

[0065] S206. Based on the pending monitoring policy, determine the target monitoring policy indication data of the target monitoring index at the target time index. The target monitoring policy indication data supports the management of the monitoring policy for guiding the target monitoring index in each target monitoring period within the second time range. Each target monitoring period within the second time range belongs to the target time index.

[0066] Optionally, when determining the target monitoring policy indication data of the target monitoring metric under the target time metric based on the to-be-determined monitoring policy, the electronic device may obtain the original alarm count of the target monitoring data under the original monitoring policy (which can be represented as A, that is, it can be used to indicate that the original alarm is triggered A times), that is, the alarm count when monitoring the target monitoring data according to the original monitoring policy; based on this, a preset alarm count threshold can be determined, and based on the original alarm count and the preset alarm count threshold, the rationality judgment indication information of the original monitoring policy can be determined; thus, based on the rationality judgment indication information and the to-be-determined monitoring policy, the target monitoring policy indication data of the target monitoring metric under the target time metric can be determined. Optionally, the preset alarm count threshold can be set according to experience or according to actual requirements, and the embodiments of the present invention do not limit this. Optionally, when the original alarm count is greater than the preset alarm count threshold, the rationality judgment indication information of the original monitoring policy can be determined as an unreasonable indication flag; when the original alarm count is less than or equal to the preset alarm count threshold, the rationality judgment indication information of the original monitoring policy can be determined as a reasonable indication flag.

[0067] Optionally, when determining the target monitoring policy indication data of the target monitoring metric under the target time metric based on the rationality judgment indication information and the to-be-determined monitoring policy, the rationality judgment indication information and the to-be-determined monitoring policy can be added to the target monitoring policy indication data of the target monitoring metric under the target time metric to achieve the determination of the target monitoring policy indication data of the target monitoring metric under the target time metric.

[0068] Exemplarily, as Figure 3 shown, the unreasonable indication flag can be that the original alarm is misreported A times and it is recommended to change; the reasonable indication flag can be that there is no misreport of the original alarm, etc.; based on this, assuming that the preset minimum threshold is 0, the first preset average threshold and the second preset average threshold are 1, the first preset value and the second preset value are 1, and the preset sudden decrease reduction value and the preset sudden increase increase value are 5% as an example for illustration, the target monitoring policy indication data of the target monitoring metric under the target time metric can be obtained.

[0069] In one embodiment, when a monitoring policy modification requirement for a target monitoring metric under a target time metric is detected, the electronic device may determine the monitoring policy modification data indicated by the monitoring policy modification requirement, and modify the monitoring policy of the target monitoring metric under the target time metric according to the monitoring policy modification data. Optionally, when the electronic device detects a monitoring policy modification operation of the target object for the target monitoring metric under the target time metric, it may determine that a monitoring policy modification requirement for the target monitoring metric under the target time metric is detected. At this time, the monitoring policy modification data indicated by the monitoring policy modification requirement may be the monitoring policy modification data indicated by the monitoring policy modification operation. Optionally, the monitoring policy modification data may include, but is not limited to, at least one of the following: a second time range, each target monitoring period in the second time range, the monitoring policy to be modified, the original alarm policy identifier (such as the alarm policy name or alarm policy number, etc.), etc. The embodiments of the present invention do not limit this; optionally, the monitoring policy to be modified may be set by the target object based on the target monitoring policy indication data.

[0070] It should be noted that the embodiments of the present invention do not limit the specific implementation manner of the monitoring policy modification operation; for example, the target object may directly select the warning period (i.e., the second time range), the original alarm policy identifier, and the corresponding monitoring metric to perform the monitoring policy modification operation to implement the modification of the monitoring policy, or may input the second time range, the original alarm policy identifier, and the monitoring policy to be modified, etc. to perform the monitoring policy modification operation, and so on.

[0071] In another embodiment, when a monitoring policy addition requirement for a target monitoring metric under a target time metric is detected, the electronic device may determine the monitoring policy addition data indicated by the monitoring policy addition requirement, and add the monitoring policy of the target monitoring metric under the target time metric according to the monitoring policy addition data. Optionally, when the electronic device detects a monitoring policy addition operation of the target object for the target monitoring metric under the target time metric, it may determine that a monitoring policy addition requirement for the target monitoring metric under the target time metric is detected. At this time, the monitoring policy addition data indicated by the monitoring policy addition requirement may be the monitoring policy addition data indicated by the monitoring policy addition operation; it should be noted that the embodiments of the present invention do not limit the specific implementation manner of the monitoring policy addition operation. Optionally, the monitoring policy addition data may include, but is not limited to, at least one of the following: a second time range, each target monitoring period in the second time range, the monitoring policy to be added, etc. The embodiments of the present invention do not limit this; optionally, the monitoring policy to be added may be set by the target object based on the target monitoring policy indication data.

[0072] In summary, the embodiments of the present invention can optimize the prediction monitoring thresholds (such as the to-be-determined maximum monitoring value, the to-be-determined minimum monitoring value, etc.) accordingly according to different service scenarios and different monitoring indicators, so as to realize the addition or modification of monitoring strategies, etc., and further make the monitoring thresholds closer to the real alarm scenarios, so as to improve the alarm accuracy of the alarm system.

[0073] After obtaining the target monitoring data of the target monitoring indicator under the target time indicator, the embodiments of the present invention can determine the initial monitoring strategy of the target monitoring indicator under the target time indicator; wherein, the initial monitoring strategy includes the minimum value, the maximum value, and the average value of the target monitoring indicator under the target time indicator. Then, the first mean judgment value and the second mean judgment value can be determined based on the average value; based on this, the to-be-determined minimum monitoring value can be determined based on the minimum value of the indicator and the first mean judgment value, and the to-be-determined maximum monitoring value can be determined based on the maximum value of the indicator and the second mean judgment value. Further, the alarm strategy corresponding to the to-be-determined minimum monitoring value can be determined, and the alarm strategy corresponding to the to-be-determined minimum monitoring value can be added to the to-be-determined monitoring strategy of the target monitoring indicator under the target time indicator; and the alarm strategy corresponding to the to-be-determined maximum monitoring value can be determined, and the alarm strategy corresponding to the to-be-determined maximum monitoring value can be added to the to-be-determined monitoring strategy, so as to determine the to-be-determined monitoring strategy of the target monitoring indicator under the target time indicator based on the initial monitoring strategy and the target monitoring data. Then correspondingly, the target monitoring strategy indication data of the target monitoring indicator under the target time indicator can be determined based on the to-be-determined monitoring strategy, and the target monitoring strategy indication data supports the management of the monitoring strategies for each target monitoring period in the second time range of the target monitoring indicator, and each target monitoring period in the second time range belongs to the target time indicator. It can be seen that the embodiments of the present invention can make decision outputs according to the decision logic and the initially set model thresholds, and give corresponding decision conclusions, so that according to the decision conclusions, it can be inferred in reverse what monitoring thresholds the user configures in what time periods to achieve the expected alarm effect. Then the embodiments of the present invention can realize the hierarchical calculation logic of the intelligent alarm monitoring system through continuous experience accumulation and adjustment and modification by the user, thereby greatly reducing the monitoring false alarm rate and reducing the human business operation and maintenance cost. Based on this, the embodiments of the present invention can dynamically observe the rationality curve of the threshold through the monitoring strategy construction model, that is, continuously judge the rationality of the original monitoring strategy, and then give reasonable monitoring threshold suggestions, that is, give reasonable monitoring strategy suggestions, which can effectively avoid the situation that the thresholds of the current monitoring system are mostly configured according to business operation and maintenance experience, lack scientific authority, and often have false alarms.

[0074] Based on the description of the related embodiments of the above monitoring management method, the embodiments of the present invention also propose a monitoring management device, which can be a computer program (including program code) running in an electronic device; such asFigure 4 As shown, the monitoring and management device may include an acquisition unit 401 and a processing unit 402. The monitoring and management device can execute Figure 1 or Figure 2 the monitoring and management method shown, that is, the monitoring and management device can operate the above units:

[0075] The acquisition unit 402 is configured to acquire target monitoring data of a target monitoring metric under a target time metric. The target monitoring data includes monitoring data of the target monitoring metric in each target monitoring period within a first time range. Each target monitoring period within the first time range belongs to the target time metric. The monitoring data of the target monitoring metric within one target monitoring period includes the metric values at each monitoring acquisition time within the corresponding target monitoring period.

[0076] The processing unit 402 is configured to determine an initial monitoring strategy of the target monitoring metric under the target time metric, and based on the initial monitoring strategy and the target monitoring data, determine a pending monitoring strategy of the target monitoring metric under the target time metric.

[0077] The processing unit 402 is further configured to, based on the pending monitoring strategy, determine target monitoring strategy indication data of the target monitoring metric under the target time metric. The target monitoring strategy indication data supports the management of the monitoring strategy for the target monitoring metric in each target monitoring period within a second time range. Each target monitoring period within the second time range belongs to the target time metric.

[0078] In an implementation manner, the initial monitoring strategy includes the lowest metric value, the highest metric value, and the average metric value of the target monitoring metric under the target time metric. When the processing unit 402 determines the pending monitoring strategy of the target monitoring metric under the target time metric based on the initial monitoring strategy and the target monitoring data, it may specifically be configured to:

[0079] Determine a first mean judgment value and a second mean judgment value based on the average metric value;

[0080] Determine a pending lowest monitoring value based on the lowest metric value and the first mean judgment value; and determine a pending highest monitoring value based on the highest metric value and the second mean judgment value;

[0081] Determine the alarm policy corresponding to the to-be-determined minimum monitoring value, and add the alarm policy corresponding to the to-be-determined minimum monitoring value to the to-be-determined monitoring policy of the target monitoring metric under the target time metric; and determine the alarm policy corresponding to the to-be-determined maximum monitoring value, and add the alarm policy corresponding to the to-be-determined maximum monitoring value to the to-be-determined monitoring policy, so as to implement determining the to-be-determined monitoring policy of the target monitoring metric under the target time metric based on the initial monitoring policy and the target monitoring data.

[0082] In another implementation manner, when the processing unit 402 determines the to-be-determined minimum monitoring value based on the minimum value of the metric and the first mean value judgment value, it may specifically be used for:

[0083] When the minimum value of the metric is greater than the preset minimum threshold and the first mean value judgment value is less than the first preset average threshold, use the difference between the minimum value of the metric and the first preset value as the to-be-determined minimum monitoring value;

[0084] When the minimum value of the metric is greater than the preset minimum threshold and the first mean value judgment value is greater than or equal to the first preset average threshold, use the difference between the minimum value of the metric and the first mean value judgment value as the to-be-determined minimum monitoring value;

[0085] The processing unit 402 may also be used for:

[0086] When the minimum value of the metric is less than or equal to the preset minimum threshold, determine the alarm policy corresponding to the preset minimum threshold, and add the alarm policy corresponding to the preset minimum threshold to the to-be-determined monitoring policy.

[0087] In another implementation manner, when the processing unit 402 determines the to-be-determined maximum monitoring value based on the maximum value of the metric and the second mean value judgment value, it may specifically be used for:

[0088] When the second mean value judgment value is less than the second preset average threshold, use the sum of the maximum value of the metric and the second preset value as the to-be-determined maximum monitoring value;

[0089] When the second mean value judgment value is greater than or equal to the second preset average threshold, use the difference between the maximum value of the metric and the second mean value judgment value as the to-be-determined maximum monitoring value.

[0090] In another implementation manner, the initial monitoring policy further includes an initial sudden drop limit value and / or an initial sudden increase limit value; the processing unit 402 may also be used for:

[0091] Determine a to-be-determined sudden drop limit value based on the initial sudden drop limit value and a preset sudden drop reduction value, and add an alarm policy corresponding to the to-be-determined sudden drop limit value to the to-be-determined monitoring policy; and / or,

[0092] Determine a to-be-determined sudden increase limit value based on the initial sudden increase limit value and a preset sudden increase increment value, and add an alarm policy corresponding to the to-be-determined sudden increase limit value to the to-be-determined monitoring policy.

[0093] In another implementation manner, when the processing unit 402 determines the target monitoring policy indication data of the target monitoring metric under the target time metric based on the to-be-determined monitoring policy, it may specifically be used for:

[0094] Obtain the original number of alarm times of the target monitoring data under the original monitoring policy;

[0095] Determine a preset alarm times threshold, and determine rationality judgment indication information of the original monitoring policy based on the original number of alarm times and the preset alarm times threshold;

[0096] Determine the target monitoring policy indication data of the target monitoring metric under the target time metric based on the rationality judgment indication information and the to-be-determined monitoring policy.

[0097] In another implementation manner, the processing unit 402 may also be used for:

[0098] When detecting a monitoring policy modification requirement for the target monitoring metric under the target time metric, determine monitoring policy modification data indicated by the monitoring policy modification requirement, and modify the monitoring policy of the target monitoring metric under the target time metric according to the monitoring policy modification data; and / or,

[0099] When detecting a monitoring policy addition requirement for the target monitoring metric under the target time metric, determine monitoring policy addition data indicated by the monitoring policy addition requirement, and add a monitoring policy of the target monitoring metric under the target time metric according to the monitoring policy addition data.

[0100] According to an embodiment of the present invention, Figure 4Each unit in the monitoring and management device shown can be separately or entirely combined into one or several other units to form, or a certain one (or some) of the units can be further split into multiple smaller units with more specific functions to form. This can achieve the same operations without affecting the realization of the technical effects of the embodiments of the present invention. The above units are divided based on logical functions. In practical applications, the function of one unit can also be realized by multiple units, or the functions of multiple units can be realized by one unit. In other embodiments of the present invention, any monitoring and management device can also include other units. In practical applications, these functions can also be assisted by other units and can be realized through the cooperation of multiple units.

[0101] According to another embodiment of the present invention, it can be achieved by running a computer program (including program code) capable of executing the respective steps involved in the corresponding method shown in Figure 1 or Figure 2 on a general-purpose electronic device such as a computer including processing elements and storage elements such as a central processing unit (CPU), a random access storage medium (RAM), and a read-only storage medium (ROM), to construct a monitoring and management device as shown in Figure 4 and to implement the monitoring and management method of the embodiments of the present invention. The computer program can be recorded on, for example, a computer storage medium, loaded into the above-mentioned electronic device through the computer storage medium, and run therein.

[0102] Embodiments of the present invention can obtain target monitoring data of a target monitoring metric under a target time metric. The target monitoring data includes monitoring data of the target monitoring metric in each target monitoring period within a first time range. Each target monitoring period within the first time range belongs to the target time metric. The monitoring data of the target monitoring metric within a target monitoring period includes the metric values of the target monitoring metric at each monitoring acquisition time within the corresponding target monitoring period. Based on this, an initial monitoring strategy of the target monitoring metric under the target time metric can be determined, and based on the initial monitoring strategy and the target monitoring data, a pending monitoring strategy of the target monitoring metric under the target time metric can be determined. Further, based on the pending monitoring strategy, target monitoring strategy indication data of the target monitoring metric under the target time metric can be determined. The target monitoring strategy indication data supports the management of the monitoring strategy for guiding the target monitoring metric in each target monitoring period within a second time range. Each target monitoring period within the second time range belongs to the target time metric. It can be seen that embodiments of the present invention can obtain target monitoring strategy indication data through the target monitoring data to be used for guiding the management of the monitoring strategy of the target monitoring metric in each target monitoring period within the second time range, that is, for guiding the management of the monitoring strategy of the target monitoring metric under the target time metric, which can improve the accuracy of the monitoring strategy, and thus realize monitoring management through the management of the monitoring strategy to effectively improve the accuracy of monitoring. In addition, the target monitoring metric can be any monitoring metric under any service, and the target time metric can be any time metric. Embodiments of the present invention can achieve flexible monitoring management of service monitoring dimensions at different time periods to achieve flexible monitoring strategy configuration, which can meet the requirements of services and service operation and maintenance personnel for accurate monitoring and grasping real-time service conditions. Based on this, embodiments of the present invention can implement an intelligent alarm (i.e., warning) threshold prediction system for accurately predicting abnormal values in business monitoring, which can assist the monitoring system to complete monitoring work more flexibly and efficiently, thereby effectively improving monitoring accuracy and operation and maintenance efficiency.

[0103] Based on the descriptions of the above method embodiments and apparatus embodiments, an exemplary embodiment of the present invention further provides an electronic device, including: at least one processor; and a memory communicatively connected to the at least one processor. The memory stores a computer program capable of being executed by the at least one processor, and when the computer program is executed by the at least one processor, it is used to cause the electronic device to execute the method according to the embodiments of the present invention.

[0104] An exemplary embodiment of the present invention further provides a non-transitory computer-readable storage medium storing a computer program, wherein when the computer program is executed by a processor of a computer, it is used to cause the computer to execute the method according to the embodiments of the present invention.

[0105] An exemplary embodiment of the present invention further provides a computer program product, including a computer program, wherein the computer program, when executed by a processor of a computer, is configured to cause the computer to execute the method according to the embodiment of the present invention.

[0106] Reference Figure 5 , a block diagram of an electronic device 500 that can be used as a server or a client of the present invention will now be described. It is an example of a hardware device that can be applied to various aspects of the present invention. The electronic device is intended to represent various forms of digital electronic computer devices, such as, a laptop computer, a desktop computer, a workbench, a personal digital assistant, a server, a blade server, a mainframe computer, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as, a personal digital processor, a cellular phone, a smart phone, a wearable device, and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or claimed herein.

[0107] As Figure 5 shown, the electronic device 500 includes a computing unit 501, which can perform various appropriate actions and processes according to a computer program stored in a read-only memory (ROM) 502 or a computer program loaded from a storage unit 508 into a random access memory (RAM) 503. In the RAM 503, various programs and data required for the operation of the electronic device 500 can also be stored. The computing unit 501, the ROM 502, and the RAM 503 are connected to each other via a bus 504. An input / output (I / O) interface 505 is also connected to the bus 504.

[0108] A plurality of components in the electronic device 500 are connected to the I / O interface 505, including: an input unit 506, an output unit 507, a storage unit 508, and a communication unit 509. The input unit 506 can be any type of device that can input information into the electronic device 500. The input unit 506 can receive input digital or character information, and generate key signal inputs related to user settings and / or function controls of the electronic device. The output unit 507 can be any type of device that can present information, and can include but is not limited to a display, a speaker, a video / audio output terminal, a vibrator, and / or a printer. The storage unit 508 can include but is not limited to a magnetic disk, an optical disk. The communication unit 509 allows the electronic device 500 to exchange information / data with other devices via a computer network such as the Internet and / or various telecommunication networks, and can include but is not limited to a modem, a network card, an infrared communication device, a wireless communication transceiver, and / or a chipset, such as a BluetoothTM device, a WiFi device, a WiMax device, a cellular communication device, and / or the like.

[0109] The computing unit 501 can be various general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of the computing unit 501 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various computing units running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. The computing unit 501 executes the various methods and processes described above. For example, in some embodiments, the monitoring and management method can be implemented as a computer software program, which is tangibly contained in a machine-readable medium, such as the storage unit 508. In some embodiments, part or all of the computer program can be loaded and / or installed onto the electronic device 500 via the ROM 502 and / or the communication unit 509. In some embodiments, the computing unit 501 can be configured to execute the monitoring and management method in any other suitable way (e.g., by means of firmware).

[0110] The program code for implementing the method of the present invention can be written in any combination of one or more programming languages. These program codes can be provided to a processor or controller of a general-purpose computer, a special-purpose computer, or other programmable data processing devices, such that when the program codes are executed by the processor or controller, the functions / operations specified in the flowchart and / or block diagram are implemented. The program code can be executed entirely on the machine, partially on the machine, executed partially on the machine as an independent software package and partially on a remote machine, or executed entirely on a remote machine or server.

[0111] In the context of the present invention, a machine-readable medium can be a tangible medium that can contain or store a program for use by or in connection with an instruction execution system, apparatus, or device. A machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium can include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples of a machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0112] As used in this invention, the terms "machine-readable medium" and "computer-readable medium" refer to any computer program product, apparatus, and / or device (e.g., a magnetic disk, optical disk, memory, programmable logic device (PLD)) used to provide machine instructions and / or data to a programmable processor, including a machine-readable medium that receives machine instructions as a machine-readable signal. The term "machine-readable signal" refers to any signal used to provide machine instructions and / or data to a programmable processor.

[0113] To provide for interaction with a user, the systems and techniques described herein can be implemented on a computer having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or a trackball) by which the user can provide input to the computer. Other kinds of devices can also be used to provide for interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic, speech, or tactile input).

[0114] The systems and techniques described herein can be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer having a graphical user interface or a web browser through which the user can interact with an implementation of the systems and techniques described herein), or a computing system that includes any combination of such back-end, middleware, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), and the Internet.

[0115] A computer system can include clients and servers. Clients and servers are generally remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other.

[0116] Also, it should be understood that the above-disclosed are only preferred embodiments of the present invention, and of course cannot be used to limit the scope of rights of the present invention. Therefore, equivalent changes made in accordance with the claims of the present invention still fall within the scope covered by the present invention.

Claims

1. A monitoring management method, characterized in that: include: Obtain target monitoring data of a target monitoring indicator under a target time indicator, the target monitoring data including monitoring data of the target monitoring indicator in each target monitoring period in a first time range, each target monitoring period in the first time range belongs to the target time indicator, and the monitoring data of the target monitoring indicator in a target monitoring period includes indicator values ​​of the target monitoring indicator at each monitoring collection time in the corresponding target monitoring period; Determine an initial monitoring strategy for the target monitoring indicator under the target time indicator, and determine a pending monitoring strategy for the target monitoring indicator under the target time indicator based on the initial monitoring strategy and the target monitoring data; Based on the pending monitoring strategy, the target monitoring strategy indication data of the target monitoring indicator under the target time indicator is determined, and the target monitoring strategy indication data supports the management of the monitoring strategy for guiding the target monitoring indicator under each target monitoring time period in the second time range, and each target monitoring time period in the second time range belongs to the target time indicator.

2. The method according to claim 1, characterized in that The initial monitoring strategy includes the minimum value, the maximum value and the average value of the target monitoring indicator under the target time indicator; the determination of the pending monitoring strategy for the target monitoring indicator under the target time indicator based on the initial monitoring strategy and the target monitoring data includes: Determine a first mean judgment value and a second mean judgment value based on the indicator average value; Based on the lowest value of the indicator and the first mean judgment value, determine the lowest monitoring value to be determined; and based on the highest value of the indicator and the second mean judgment value, determine the highest monitoring value to be determined; Determine the alarm strategy corresponding to the pending minimum monitoring value, and add the alarm strategy corresponding to the pending minimum monitoring value to the pending monitoring strategy of the target monitoring indicator under the target time indicator; and determine the alarm strategy corresponding to the pending maximum monitoring value, and add the alarm strategy corresponding to the pending maximum monitoring value to the pending monitoring strategy, so as to realize the determination of the pending monitoring strategy of the target monitoring indicator under the target time indicator based on the initial monitoring strategy and the target monitoring data.

3. The method according to claim 2, characterized in that The determining of a pending minimum monitoring value based on the minimum value of the indicator and the first mean judgment value includes: When the lowest value of the indicator is greater than the preset lowest threshold value, and the first mean judgment value is less than the first preset average threshold value, the difference between the lowest value of the indicator and the first preset value is used as the pending lowest monitoring value; When the lowest value of the indicator is greater than the preset lowest threshold value, and the first average judgment value is greater than or equal to the first preset average threshold value, the difference between the lowest value of the indicator and the first average judgment value is used as the pending lowest monitoring value; The method further comprises: When the lowest value of the indicator is less than or equal to the preset lowest threshold, the alarm strategy corresponding to the preset lowest threshold is determined, and the alarm strategy corresponding to the preset lowest threshold is added to the pending monitoring strategy.

4. The method according to claim 2, characterized in that: The determining of the to-be-determined highest monitoring value based on the highest indicator value and the second mean judgment value includes: When the second mean judgment value is less than the second preset average threshold, the sum of the highest value of the indicator and the second preset value is used as the to-be-determined highest monitoring value; When the second mean judgment value is greater than or equal to the second preset average threshold, the difference between the highest value of the indicator and the second mean judgment value is used as the pending highest monitoring value.

5. The method according to claim 2, characterized in that: The initial monitoring strategy further includes an initial sudden drop limit value and / or an initial sudden increase limit value; the method further includes: Based on the initial sudden drop limit value and the preset sudden drop reduction value, determining a pending sudden drop limit value, and adding the alarm strategy corresponding to the pending sudden drop limit value to the pending monitoring strategy; and / or, Based on the initial sudden increase limit value and the preset sudden increase value, a pending sudden increase limit value is determined, and an alarm strategy corresponding to the pending sudden increase limit value is added to the pending monitoring strategy.

6. The method according to claim 2, characterized in that The step of determining target monitoring strategy indication data of the target monitoring indicator under the target time indicator based on the pending monitoring strategy includes: Obtaining the original alarm number of the target monitoring data under the original monitoring strategy; Determine a preset alarm number threshold, and determine the rationality judgment indication information of the original monitoring strategy based on the original alarm number and the preset alarm number threshold; Based on the rationality judgment indication information and the pending monitoring strategy, target monitoring strategy indication data of the target monitoring indicator under the target time indicator is determined.

7. The method according to any one of claims 1 to 6, characterized in that: The method further comprises: When a monitoring policy modification requirement for the target monitoring indicator under the target time indicator is detected, the monitoring policy modification data indicated by the monitoring policy modification requirement is determined, and the monitoring policy of the target monitoring indicator under the target time indicator is modified according to the monitoring policy modification data; and / or, When a new monitoring policy requirement for the target monitoring indicator under the target time indicator is detected, the monitoring policy new data indicated by the new monitoring policy requirement is determined, and the monitoring policy for the target monitoring indicator under the target time indicator is added according to the new monitoring policy data.

8. A monitoring management device, characterized in that: The device comprises: an acquisition unit, configured to acquire target monitoring data of a target monitoring indicator under a target time indicator, wherein the target monitoring data includes monitoring data of the target monitoring indicator in each target monitoring period in a first time range, each target monitoring period in the first time range belongs to the target time indicator, and the monitoring data of the target monitoring indicator in a target monitoring period includes indicator values ​​of the target monitoring indicator at each monitoring collection time in the corresponding target monitoring period; A processing unit, configured to determine an initial monitoring strategy for the target monitoring indicator under the target time indicator, and determine a pending monitoring strategy for the target monitoring indicator under the target time indicator based on the initial monitoring strategy and the target monitoring data; The processing unit is also used to determine the target monitoring strategy indication data of the target monitoring indicator under the target time indicator based on the pending monitoring strategy, and the target monitoring strategy indication data supports the management of the monitoring strategy for guiding the target monitoring indicator under each target monitoring time period in the second time range, and each target monitoring time period in the second time range belongs to the target time indicator.

9. An electronic device, characterized in that: include: processor; as well as Memory for storing programs, The program includes instructions, which, when executed by the processor, cause the processor to perform the method according to any one of claims 1 to 7.

10. A non-transitory computer-readable storage medium storing computer instructions, wherein: The computer instructions are used to make a computer execute the method according to any one of claims 1-7.

Images