Network connection state monitoring and log recording system

Abstract

The invention provides a network connection state monitoring and log recording system, and relates to the technical field of computer network management, and the system comprises a real-time connection monitoring module which is used for carrying out the real-time monitoring of the connection state of network equipment; the integration analysis module is connected with the performance analysis module and used for integrating and analyzing the network performance data; the abnormal connection alarm module is used for identifying an abnormal phenomenon in network connection and carrying out abnormal notification; the log storage and retrieval module is used for storing network connection log data and screening and extracting the log data based on retrieval conditions input by a user; and the data visualization module is used for integrating data of the real-time connection monitoring module, the connection performance analysis module, the abnormal connection alarm module and the log storage and retrieval module and generating a visual report. By adopting the scheme, the network connection state can be monitored in real time, and the visualization of the monitoring process is realized.

Description

Technical Field

[0001] The present application relates to the technical field of computer network management, and in particular to a network connection status monitoring and log recording system and method. Background Art

[0002] In today's digital age, the scale of networks continues to expand and applications become increasingly complex, and network management faces many challenges. First, traditional network monitoring relies on manual regular inspections, which is inefficient and easy to miss problems. It is difficult to grasp the connection status of network devices in real time and comprehensively, and it is impossible to detect network failures or abnormal connections in time, which in turn affects the normal operation of the business. Second, the existing log recording system has relatively single functions. When processing a large amount of log data, retrieval and analysis are extremely difficult. There is a lack of effective classification and screening mechanisms, and it is difficult to quickly locate specific events, and it is impossible to provide strong support for network optimization and security strategy formulation. Third, the current network anomaly detection methods are lagging behind, and it is impossible to detect and alarm abnormal connection behaviors in time, resulting in a significant increase in network security risks, which is vulnerable to attacks and may lead to serious consequences such as data leakage and system paralysis. Fourth, the evaluation of network performance is not comprehensive and in-depth enough, and it is difficult to comprehensively analyze multiple indicators such as bandwidth, delay, and signal strength. It is impossible to provide a scientific basis for the reasonable allocation of network resources, which limits the improvement of the overall network performance. Fifth, the existing network data display method is not intuitive enough, and it is difficult to quickly obtain key information and trends from massive and complex data, which is not conducive to network managers making accurate decisions. Therefore, in order to solve the above problems, a comprehensive and efficient network connection status monitoring and log recording system is needed. Summary of the invention

[0003] The present application aims to solve one of the technical problems in the related art at least to some extent.

[0004] To this end, the first purpose of the present application is to propose a network connection status monitoring and log recording system that can achieve comprehensive and efficient network connection status monitoring and visualize the monitoring process.

[0005] The second objective of the present application is to provide a network connection status monitoring and log recording method.

[0006] To achieve the above-mentioned objectives, the first embodiment of the present application proposes a network connection status monitoring and log recording system, including: a real-time connection monitoring module, which is used to monitor the connection status of network devices in real time; a connection performance analysis module, which is used to integrate and analyze network performance data; an abnormal connection alarm module, which is used to identify abnormal phenomena in network connections and provide abnormal notifications; a log storage and retrieval module, which is used to store network connection log data and filter and extract log data based on retrieval conditions entered by the user; a data visualization module, which is used to integrate the data of the real-time connection monitoring module, the connection performance analysis module, the abnormal connection alarm module and the log storage and retrieval module to generate a visualization report.

[0007] To achieve the above-mentioned purpose, the second aspect of the embodiment of the present invention proposes a network connection status monitoring and log recording method, which is applied to the above-mentioned network connection status monitoring and log recording system, and the method includes: obtaining the connection status of the network device through an interface to realize real-time monitoring of the connection status of the network device; storing the obtained network connection log data in a database; performing connection performance analysis based on the data in the database to determine whether the connection performance is good, and if so, generating a performance report, if not, marking precautions; performing data visualization based on the data in the database and the connection performance analysis results to generate a visualization report.

[0008] The network connection status monitoring and log recording system and method of the embodiment of the present application integrates real-time connection monitoring, log storage and retrieval, abnormal connection alarm, connection performance analysis, data visualization and historical data reporting. By collecting connection data from the device and entering real-time connection monitoring, it is ensured that users can view the network status at any time; the data is stored, and through the log storage and retrieval function, users can query historical records on demand; abnormal activities are monitored in real time, and when an abnormality is identified, an alarm is automatically triggered and the relevant personnel are notified in time; the collected network performance data is integrated and analyzed to generate a performance report; various types of data are visualized and converted into intuitive charts to provide a clear basis for user decision-making. This embodiment solves the technical problems of low monitoring efficiency, delayed abnormal response, and complex data analysis in traditional network management systems to a certain extent, realizes the intelligence and automation of network operation and maintenance, improves network operation and maintenance efficiency, and ensures network security and stability.

[0009] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

[0011] Figure 1 A schematic diagram of the structure of a network connection status monitoring and log recording system provided in Example 1 of the present application;

[0012] Figure 2 A design diagram of another network connection status monitoring and log recording system according to an embodiment of the present application;

[0013] Figure 3 A flowchart of a network connection status monitoring and log recording method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0014] Embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present application, and should not be construed as limiting the present application.

[0015] The following describes the network connection status monitoring and log recording system and method of the embodiments of the present application with reference to the accompanying drawings.

[0016] Figure 1 A schematic diagram of the structure of a network connection status monitoring and logging system provided in Example 1 of the present application.

[0017] like Figure 1 As shown, the network connection status monitoring and logging system includes:

[0018] A real-time connection monitoring module is used to monitor the connection status of network devices in real time;

[0019] Connection performance analysis module, used to integrate and analyze network performance data;

[0020] Abnormal connection alarm module, used to identify abnormal phenomena in network connections and provide abnormal notification;

[0021] The log storage and retrieval module is used to store network connection log data and filter and extract log data based on the search conditions entered by the user;

[0022] The data visualization module is used to integrate the data of the real-time connection monitoring module, the connection performance analysis module, the abnormal connection alarm module and the log storage and retrieval module to generate a visualization report.

[0023] The network connection status monitoring and log recording system and method of the embodiment of the present application integrates real-time connection monitoring, log storage and retrieval, abnormal connection alarm, connection performance analysis, data visualization and historical data reporting. By collecting connection data from the device and entering real-time connection monitoring, it is ensured that users can view the network status at any time; the data is stored, and through the log storage and retrieval function, users can query historical records on demand; abnormal activities are monitored in real time, and when an abnormality is identified, an alarm is automatically triggered and the relevant personnel are notified in time; the collected network performance data is integrated and analyzed to generate a performance report; various types of data are visualized and converted into intuitive charts to provide a clear basis for user decision-making. This embodiment solves the technical problems of low monitoring efficiency, delayed abnormal response, and complex data analysis in traditional network management systems to a certain extent, realizes the intelligence and automation of network operation and maintenance, improves network operation and maintenance efficiency, and ensures network security and stability.

[0024] In order to implement the above embodiment, this embodiment also proposes another network connection status monitoring and log recording system. Figure 2 The design diagram of this system.

[0025] The system includes real-time connection monitoring module, log storage and retrieval module, abnormal connection alarm module, connection performance analysis module, data visualization module and historical data reporting module. Each module cooperates with each other to achieve comprehensive monitoring, recording and analysis of network connection status. The system interface design is designed to ensure efficient communication and seamless integration between various functional modules, while providing a standardized way for external systems to interact with this system. This design ensures the flexibility, scalability and compatibility of the system with third-party applications. Specifically:

[0026] The top of the system main interface provides keyword search and filtering functions, which support data query by date, time, IP address, connection status, response time, location, user, etc., so as to accurately locate the required information. The middle area includes three chart modules: connection status distribution, connection type ratio, and regional connection status, which intuitively display the data proportion. The function center on the right includes four information modules: today's number of connections, average response time, abnormality rate and total number of users, which quickly present core data. The bottom of the page displays key connection logs and provides viewing and editing operations to facilitate users to manage data.

[0027] The real-time connection monitoring interface is one of the core functional modules of the system, which is designed to present relevant information of the real-time connection monitoring function. The interface displays key data such as serial number, device name, IP address, MAC address, status, location, online time, last check, user name, connection type, progress, etc. in a tabular form, and intuitively displays the current progress. A search bar and operation buttons such as filter, import, export, and refresh are provided at the top to facilitate users to quickly locate and manage. In addition, each row of device records comes with "Edit" and "Delete" function buttons to support users' maintenance and operation of table data. The interface has a clear layout and comprehensive information, which helps users quickly understand the system data and the operation of each device in the network, so as to quickly discover and solve potential problems and make corresponding management and decisions.

[0028] For the real-time connection monitoring module, the interface design focuses on the real-time and accuracy of data collection and transmission. The system needs to automatically obtain the connection status from various network devices through the interface, including IP address, device name, connection duration and other information. These interfaces need to support high concurrency and large data volume transmission to ensure that the data is updated in time and available for use by other modules.

[0029] The main display page of the log storage and retrieval module is divided into a classification tree on the left and a log record detail list on the right. The left side groups the log storage and retrieval categories through a tree directory, and users can check specific categories for filtering. The right side is the log record details, showing the log number, timestamp, user name, operation, IP address, status, and other information. The interface layout is clear and provides quick search and filtering functions to facilitate users to manage efficiently.

[0030] For the log storage and retrieval module, the interface is designed to support multiple retrieval conditions, such as filtering and extracting log data by date, event type, user, etc., to ensure that users can easily query and audit historical operation records in the system.

[0031] The import interface is a batch data import function module of the network connection status monitoring and logging system, which is designed to help users quickly and efficiently upload data information from external files to the system to achieve batch updates of data. Through the clear step progress bar, users can complete the three steps of "select file", "configure import options" and "finish" in sequence. In the file selection link, it supports uploading .xls and .xlsx format files to ensure compatibility. In the configuration import options, users can check "overwrite existing data" to replace existing information, and select the notification method after import (such as email notification or SMS notification), and can also set the import priority and note additional information. "Start Import" and "Cancel" buttons are provided at the bottom of the interface to facilitate users to execute or exit the import operation. The overall interface is simple and intuitive, meeting the needs of adding or updating information in batches, and greatly improving data management efficiency.

[0032] The filter interface is an important functional module of the network connection status monitoring and logging system, which aims to help users quickly filter information through multi-dimensional conditions and improve query efficiency. The interface is divided into three parts: basic filtering, advanced filtering, and other options. Users can accurately locate target data based on serial number, device name, IP address, MAC address, status, location, online time, last check, user name, connection type, progress, and other conditions. It also supports entering remark keywords to further narrow the filtering range. The operation is simple and intuitive. You can get a list of data that meets the conditions through the "Filter" button, which provides strong support for management and troubleshooting.

[0033] The abnormal connection alarm interface is one of the core functions of the network connection status monitoring and logging system. In the filter bar on the left, users can make accurate inquiries based on work order number, initiation date, user name, device name, problem type, priority, status, person in charge, solution, completion date, and other conditions to meet diverse analysis needs. The right side is the abnormal connection alarm record display area, which lists in detail the alarm number, timestamp, IP address, user name, location, alarm type, status, and other key data. Through this interface, users can intuitively understand the data information.

[0034] The abnormal connection processing process interface comprehensively displays the event number, timestamp, detector, severity, affected system, event description, current status, assigned team, solution steps, root cause, mitigation measures, alarm type, location, action, expected solution, communication record, person in charge, verification status, completion time, follow-up measures, document record, customer notification, and other detailed information. In addition, the flowchart below shows multiple steps such as alarm triggering, preliminary analysis, in-depth investigation, implementation of solutions, verification and repair, record summary, report generation, supervision feedback, etc. Users can easily view the process progress to ensure the orderly execution of tasks.

[0035] For the abnormal connection alarm module, the interface design focuses on the detection, notification and management of abnormal events. The interface needs to provide the configuration and operation of custom alarm rules, support real-time alarm notification mechanism, and ensure that any abnormal connection activities can be quickly identified by users. Alarm information must be able to be transmitted to the user's terminal device or other management system through the interface to provide immediate warning.

[0036] The left side of the connection performance analysis interface is the classification and filtering area, and the right side of the interface is the connection performance data. The top provides multiple filtering conditions, including device name, IP address, MAC address, signal strength, online time, response time, jitter, packet loss rate, last check, location, network type, and user name, which are convenient for users to quickly locate the required data. The most recent connection performance data is displayed below, and each record contains device name, IP address, MAC address, signal strength, online time, response time, jitter, packet loss rate, last check, location, network type, user name, and other information. At the same time, the interface also provides relevant pictures of the corresponding data of the connection performance data.

[0037] For the connection performance analysis module, the interface design needs to be able to obtain performance indicators from different data sources, including bandwidth usage, network latency, signal strength, etc. The data interface should be able to integrate and analyze, and output performance reports that meet user needs. At the same time, users can view the analysis results in detail and compare historical performance through the interface.

[0038] The main interface of the data visualization module helps users fully understand the usage and distribution of data visualization through multi-dimensional data display and chart analysis. Key indicators are displayed at the top of the interface, including user visits, system load, and network latency, providing users with an overall overview of the data visualization status. The middle part contains multiple charts, such as bar charts and pie charts, which respectively display information such as download traffic, upload traffic, and device type distribution. In addition, the line chart in the lower right corner of the interface clearly records the quarterly performance trends, including CPU utilization, memory occupancy, and network bandwidth. The overall layout is clear and intuitive, combined with graphic and text presentation, to achieve comprehensive visualization of the data.

[0039] For the data visualization module, the interface design is mainly used for the creation and update of interactive charts. The system converts real-time data into visualization results, such as bar charts, pie charts, or line charts, through the interface and presents them directly to the user. The interface needs to provide a variety of parameter options so that users can customize the way data is displayed according to different analysis needs.

[0040] The top of the historical data report interface shows an overview of the historical data status, including data statistics, monitoring details, user distribution, and device status, helping users quickly understand the overall situation of the current historical data status overview. The central area displays a monthly traffic comparison chart through a bar chart, which intuitively reflects the current status. The table on the right records the date, user name, IP address, behavior, result, data volume, location, device type, duration, status in detail, and provides "view" and "set" operations to facilitate users to quickly locate and handle problems. This interface design is simple and clear, and the data presentation is intuitive, providing users with powerful data analysis and decision support tools.

[0041] For the historical data reporting module, the interface design is mainly used to provide flexible filtering conditions, allowing users to filter historical data based on time range, device type, network area and other conditions, and ensure rapid response to query requests when processing large amounts of data.

[0042] In order to implement the above embodiment, the present application also proposes a network connection status monitoring and log recording method, which is applied to the above network connection status monitoring and log recording system.

[0043] Figure 3 A flowchart of a network connection status monitoring and log recording method provided in an embodiment of the present application.

[0044] like Figure 3 As shown, the network connection status monitoring and log recording method includes the following steps:

[0045] Step 301, obtaining the connection status of the network device through the interface to achieve real-time monitoring of the connection status of the network device;

[0046] Step 302, storing the acquired network connection log data in a database;

[0047] Step 303, performing connection performance analysis based on the data in the database to determine whether the connection performance is good, if so, generating a performance report, if not, marking precautions;

[0048] Step 304: Perform data visualization based on the data in the database and the connection performance analysis results to generate a visualization report.

[0049] Furthermore, in the embodiment of the present application, real-time monitoring of the connection status of the network device includes:

[0050] If the connection is normal, update the connection status of the network data. If the connection is abnormal, trigger the abnormal connection alarm according to the custom alarm rules.

[0051] It should be noted that the aforementioned explanation of the network connection status monitoring and log recording system embodiment is also applicable to the network connection status monitoring and log recording method of this embodiment, and will not be repeated here.

[0052] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example" or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, without contradiction.

[0053] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of this application, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0054] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, fragment or portion of code comprising one or more executable instructions for implementing the steps of a custom logical function or process, and the scope of the preferred embodiments of the present application includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in the reverse order depending on the functions involved, which should be understood by technicians in the technical field to which the embodiments of the present application belong.

[0055] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute the instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purpose of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk box (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), a fiber optic device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or processing in other suitable ways if necessary, and then stored in a computer memory.

[0056] It should be understood that the various parts of the present application can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0057] A person skilled in the art may understand that all or part of the steps in the method for implementing the above-mentioned embodiment may be completed by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, which, when executed, includes one or a combination of the steps of the method embodiment.

[0058] In addition, each functional unit in each embodiment of the present application may be integrated into a processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer-readable storage medium.

[0059] The storage medium mentioned above may be a read-only memory, a magnetic disk or an optical disk, etc. Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limiting the present application. A person of ordinary skill in the art may change, modify, replace and modify the above embodiments within the scope of the present application.

Claims

1. A network connection status monitoring and log recording system, characterized in that: include: A real-time connection monitoring module is used to monitor the connection status of network devices in real time; Connection performance analysis module, used to integrate and analyze network performance data; Abnormal connection alarm module, used to identify abnormal phenomena in network connections and provide abnormal notification; The log storage and retrieval module is used to store network connection log data and filter and extract log data based on the search conditions entered by the user; The data visualization module is used to integrate the data of the real-time connection monitoring module, the connection performance analysis module, the abnormal connection alarm module and the log storage and retrieval module to generate a visualization report.

2. The system according to claim 1, characterized in that The real-time connection monitoring module is specifically used for: The connection status of each device in the network is determined by at least one of the device name, device status, IP address, connection time and connection location of the network device.

3. The system according to claim 1, characterized in that The connection performance analysis module is specifically used for: Analyze bandwidth usage, network latency, and signal strength of network connections.

4. The system according to claim 1, characterized in that The abnormal connection alarm module is specifically used for: Identify anomalies in network connections, including repeated login attempts, abnormal traffic, and port scans; Based on the identified abnormal phenomena, according to the customized alarm rules, the abnormal connection alarm is triggered.

5. The system according to claim 1, wherein: The log storage and retrieval module is specifically used for: The log data is screened and extracted based on the search condition input by the user, wherein the search condition includes at least one of date, event type and user.

6. The system according to claim 1, characterized in that The visual report includes an interactive chart; The system further includes a historical data reporting module, wherein the historical data reporting module is specifically used for: A historical visualization report is provided to the user based on a filter condition input by the user, wherein the filter condition includes at least one of a time range, a device type, and a network area.

7. A network connection status monitoring and log recording method, characterized in that: The method is applied to the system according to claims 1-6, and the method comprises: Obtain the connection status of network devices through interfaces to achieve real-time monitoring of the connection status of network devices; Store the acquired network connection log data into a database; Perform connection performance analysis based on the data in the database to determine whether the connection performance is good. If so, generate a performance report. If not, mark the precautions. Data visualization is performed based on the data in the database and the connection performance analysis results to generate visualization reports.

8. The method according to claim 7, characterized in that Real-time monitoring of network device connection status, including: If the connection is normal, update the connection status of the network data. If the connection is abnormal, trigger the abnormal connection alarm according to the custom alarm rules.

Images