Self-adaptive monitoring alarm system and method

Abstract

The invention relates to the technical field of enterprise management, and discloses a self-adaptive monitoring alarm system and method, and the system comprises a data collection module, a data analysis module, a data recombination module, a monitoring alarm module and a visualization module. The method corresponds to the system. According to the application, the data acquisition module is used for acquiring original data, the data analysis module is used for dividing key and non-key business data, the non-key business data generates a data transmission instruction through the data recombination module to obtain recombined data, the monitoring alarm module generates prompts based on alarm information, and the visualization module displays related processes and results. The enterprise ICT equipment data is comprehensively and intelligently monitored and alarmed, service data importance is accurately distinguished, a monitoring strategy is adaptively adjusted, system resources are efficiently utilized, key services are guaranteed to be preferentially monitored and processed, abnormity is found in time and presented in a visual form, enterprise operation and maintenance personnel are effectively assisted to quickly position and solve problems, and the enterprise operation and maintenance efficiency is improved. And the operation stability and reliability of an enterprise ICT system are improved.

Description

Technical Field

[0001] This application relates to the technical field of enterprise management, and specifically, to an adaptive monitoring and warning system and method. Background Art

[0002] In today's enterprise digital operation environment, there are a wide variety of ICT (Information and Communication Technology) devices and a huge amount of data, including hardware operation data such as switches, routers, and servers, as well as various business execution data. Traditional monitoring and warning systems often process data in a fixed mode and lack the ability of self - adaptation, which is specifically manifested in:

[0003] In terms of data classification, traditional systems usually preset fixed critical and non - critical business criteria in advance and cannot automatically adjust according to the dynamic changes of enterprise business. For example, when the key business of an enterprise shifts or new important business is added, it cannot re - define critical business data in time;

[0004] In terms of monitoring rules, static rules are also adopted, which are difficult to adapt to the changes in data characteristics and easily lead to false alarms or missed alarms;

[0005] Traditional monitoring and warning systems are not intelligent enough in computing power allocation. Since they do not distinguish the importance of data and use the same processing intensity for all data, it causes waste of computing power resources in processing non - critical data, while the processing of critical data may be delayed due to insufficient computing power. For example, during the business peak period, the analysis and processing of a large amount of non - critical data occupy a large amount of computing power, resulting in delays in the supervision and warning generation of critical business data, affecting the timely handling of core business problems of enterprises and possibly leading to serious consequences such as business interruption or service quality decline.

[0006] Chinese Patent No. CN117667311A discloses a monitoring and warning method and device for a container cluster. However, the self - adaptation process of this invention focuses on the prediction of performance index data and threshold comparison. Relatively speaking, the self - adaptation dimension is relatively single, and the self - adaptation ability for various complex situations at the enterprise business level (such as business level changes, changes in ICT device data corresponding to business, etc.) is insufficient; Chinese Patent No. CN102497289A discloses a method and system for adaptive multi - protocol alarm processing. However, this invention focuses on the judgment, suppression of alarm status and message processing using multiple protocols during the alarm processing process. When dealing with situations such as changes in enterprise business focus, addition or subtraction of business, etc., it is difficult to accurately allocate monitoring resources and generate alarms according to the difference in data importance, and the flexibility is poor.

[0007] In summary, there is an urgent need for a new technical solution for adaptive monitoring and warning. Through dynamic data classification, adaptive rule application, and reasonable computing power allocation optimization, it can effectively improve the accuracy and timeliness of enterprise ICT device monitoring and warning, and ensure the stable and efficient operation of enterprise business. Summary of the Invention

[0008] The purpose of this application is to provide an adaptive monitoring and warning system and method to solve the technical problems raised in the above background technology.

[0009] To achieve the above object, the present application discloses the following technical solutions:

[0010] In the first aspect, the present application discloses an adaptive monitoring and warning system, which includes a data acquisition module, a data analysis module, a data recombination module, a monitoring and warning module, and a visualization module; wherein, the data analysis module and the data recombination module are both communicatively connected to the data acquisition module, the data analysis module and the data recombination module are both communicatively connected to the monitoring and warning module, the data recombination module and the monitoring and warning module are both communicatively connected to the visualization module, and the data analysis module is communicatively connected to the data recombination module;

[0011] The data acquisition module collects the original data of all ICT devices of the enterprise and transmits it to the data analysis module; the data analysis module divides the original data into key business data and non-key business data, generates a first warning message based on the supervision result of the key business data and transmits it to the monitoring and warning module, and transmits the non-key business data to the data recombination module; the data recombination module generates a data transmission instruction based on the non-key business data and transmits it to the data acquisition module; the data acquisition module generates recombined data based on the data transmission instruction and transmits it to the data recombination module; the data recombination module generates a second warning message based on the supervision result of the recombined data and transmits it to the monitoring and warning module; the monitoring and warning module generates a warning prompt based on the first warning message and / or the second warning message; the visualization module visually displays based on the operation processes of the data recombination module and the monitoring and warning module; wherein: the original data includes the data generated during the hardware operation of the ICT device and the data generated when the ICT device executes the enterprise business; the data transmission instruction is used to control the data acquisition module to transmit the required original data to the data recombination module; the recombined data is the original data filtered based on the data transmission instruction;

[0012] The data recombination module continuously divides the obtained non-key business data into updated key business data and updated non-key business data, and transmits the updated key business data to the data analysis module; wherein, the updated key business data corresponds to the key business data, and the updated non-key business data corresponds to the non-key business data.

[0013] Preferably, the division of the original data into key business data and non-key business data specifically includes:

[0014] Obtain a preset business level table, which records the priorities corresponding to different enterprise businesses;

[0015] Receive and parse the original data to obtain all the enterprise businesses executed in the current monitoring period, and match the enterprise businesses in the business level table to obtain all the priorities;

[0016] Compare all the priorities obtained by matching, define the original data of the enterprise business with a higher priority as key business data, and define the original data of the remaining enterprise businesses as non-key business data.

[0017] Preferably, generating a first warning message based on the supervision result of the key business data specifically includes:

[0018] Obtain a preset monitoring rule library, which stores monitoring rules for different business data, and the monitoring rules are used to analyze business data;

[0019] Match the monitoring rules in the monitoring rule library based on the key business data;

[0020] When the key business data does not meet the matched monitoring rules, generate a first warning message, and the first warning message at least includes the data source and data timestamp of the key business data.

[0021] Preferably, generating a data transmission instruction based on the non-key business data specifically includes:

[0022] Parse the non-key business to obtain the corresponding enterprise business, and match the enterprise business with ICT devices;

[0023] Based on the matched ICT devices, determine the original data of the ICT devices as the required original data, and generate a data transmission instruction based on the required original data. The data transmission instruction at least includes the data source of the required original data.

[0024] Preferably, generating recombined data based on the data transmission instruction specifically includes:

[0025] Parse the data transmission instruction to obtain the data source of the required original data, retrieve the data within the data traceability duration corresponding to the original data based on a preset data traceability duration, and combine it with the newly continuously obtained original data to generate recombined data and transmit it to the data recombination module, and the recombined data is no longer transmitted to the data analysis module.

[0026] Preferably, generating a second warning message based on the supervision result of the recombined data specifically includes:

[0027] Match the monitoring rules in the monitoring rule library based on the non-critical service data;

[0028] When the non-critical service data does not meet the matched monitoring rules, generate a second warning message, where the second warning message at least includes the data source and data timestamp of the non-critical service data.

[0029] Preferably, generating a warning prompt based on the first warning message and / or the second warning message specifically includes:

[0030] Generate a first warning schematic diagram of the critical service data based on the first warning message, where the first warning schematic diagram is used to display the data source and data timestamp of the critical service data;

[0031] Generate a second warning schematic diagram of the non-critical service data based on the second warning message, where the second warning schematic diagram is used to display the data source and data timestamp of the non-critical service data.

[0032] Preferably, visually displaying the running processes of the data reorganization module and the monitoring and warning module specifically includes:

[0033] Receive the first warning schematic diagram and / or the second warning schematic diagram, and display them using a preset display device;

[0034] Continuously display the result of dividing the non-critical service data in the data reorganization module into updated critical service data and updated non-critical service data.

[0035] Preferably, continuously dividing the obtained non-critical service data into updated critical service data and updated non-critical service data specifically includes:

[0036] Obtain the service level table;

[0037] Continuously analyze the non-critical data to obtain all enterprise services, and match the enterprise services in the service level table to obtain all priorities;

[0038] Compare all the obtained priorities, define the non-critical service data of the enterprise services with higher priorities as updated critical service data, and define the non-critical service data of the remaining enterprise services as updated non-critical service data.

[0039] In a second aspect, the present application discloses an adaptive monitoring and warning method, which is applicable to the adaptive monitoring and warning system as described above. The method includes:

[0040] S1: Collect the original data of all ICT devices of the enterprise and transmit it; the original data includes the data generated during the hardware operation of the ICT device and the data generated when the ICT device executes the enterprise business;

[0041] S2: Divide the original data into critical business data and non-critical business data, generate the first warning information based on the supervision result of the critical business data, and transmit the non-critical business data;

[0042] S3: Generate a data transmission instruction based on the non-critical business data; wherein, the data transmission instruction is used to obtain the required original data;

[0043] S4: Generate and transmit the reorganized data based on the data transmission instruction; the reorganized data is the original data screened based on the data transmission instruction;

[0044] S5: Generate and transmit the second warning information based on the supervision result of the reorganized data;

[0045] S6: Generate a warning prompt based on the first warning information and / or the second warning information;

[0046] S7: Perform visual display based on the operation processes of S2, S5, and S8;

[0047] S8: Continuously divide the obtained non-critical business data into updated critical business data and updated non-critical business data, and transmit the updated critical business data; wherein, the updated critical business data corresponds to the critical business data and executes S2, and the updated non-critical business data corresponds to the non-critical business data and executes S5.

[0048] Beneficial effects: The adaptive monitoring and warning system and method of the present application utilize the data acquisition module to collect the original data of the enterprise ICT devices, divide the critical and non-critical business data through the data analysis module, generate the first warning information based on the supervision of the critical business data by the monitoring rule library, generate a data transmission instruction for the non-critical business data through the data reorganization module to obtain the reorganized data and generate the second warning information, the monitoring and warning module generates a prompt based on the warning information, and the visualization module displays the relevant processes and results; realizes comprehensive and intelligent monitoring and warning of the enterprise ICT device data, accurately distinguishes the importance of business data, adaptively adjusts the monitoring strategy, efficiently utilizes system resources, ensures the priority monitoring and processing of critical business, discovers anomalies in a timely manner and presents them in an intuitive visual form, effectively assisting enterprise operation and maintenance personnel to quickly locate and solve problems, and improving the operation stability and reliability of the enterprise ICT system. Description of the Drawings

[0049] To more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the accompanying drawings required for the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only some embodiments of the present application. For those skilled in the art, without creative efforts, other drawings can be obtained based on these drawings.

[0050] Figure 1 It is a structural block diagram of an adaptive monitoring and alarming system provided by an embodiment of the present application;

[0051] Figure 2 It is a flow block diagram of an adaptive monitoring and alarming method provided by an embodiment of the present application. Detailed implementation manners

[0052] The following will clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all of them. Based on the embodiments of the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the scope of protection of the present application.

[0053] In this article, the term "including" is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such a process, method, article or device. Without more limitations, the elements defined by the statement "including..." do not exclude the existence of other identical elements in the process, method, article or device including the said elements.

[0054] The first aspect of this embodiment discloses an adaptive monitoring and alarming system as Figure 1 shown, which includes a data acquisition module, a data analysis module, a data recombination module, a monitoring and alarming module, and a visualization module; wherein, both the data analysis module and the data recombination module are communicatively connected to the data acquisition module, both the data analysis module and the data recombination module are communicatively connected to the monitoring and alarming module, both the data recombination module and the monitoring and alarming module are communicatively connected to the visualization module, and the data analysis module is communicatively connected to the data recombination module;

[0055] The data acquisition module collects the raw data of all the enterprise's ICT devices and transmits it to the data analysis module; the data analysis module divides the raw data into critical business data and non-critical business data, generates the first warning information based on the supervision results of the critical business data and transmits it to the monitoring and warning module, and transmits the non-critical business data to the data reorganization module; the data reorganization module generates a data transmission instruction based on the non-critical business data and transmits it to the data acquisition module; the data acquisition module generates reorganized data based on the data transmission instruction and transmits it to the data reorganization module; the data reorganization module generates the second warning information based on the supervision results of the reorganized data and transmits it to the monitoring and warning module; the monitoring and warning module generates a warning prompt based on the first warning information and / or the second warning information; the visualization module performs a visual display based on the operation processes of the data reorganization module and the monitoring and warning module; wherein: the raw data includes the data generated during the hardware operation of the ICT devices and the data generated when the ICT devices execute the enterprise's business; the data transmission instruction is used to control the data acquisition module to transmit the required raw data to the data reorganization module; the reorganized data is the raw data screened based on the data transmission instruction;

[0056] The data reorganization module continuously divides the obtained non-critical business data into updated critical business data and updated non-critical business data, and transmits the updated critical business data to the data analysis module; wherein, the updated critical business data corresponds to the critical business data, and the updated non-critical business data corresponds to the non-critical business data.

[0057] Through the above, this embodiment uses the data acquisition module to collect the raw data of the enterprise's ICT devices, divides the critical and non-critical business data through the data analysis module, generates the first warning information based on the supervision of the critical business data by the monitoring rule library, obtains the reorganized data through the data transmission instruction generated by the data reorganization module for the non-critical business data and generates the second warning information, the monitoring and warning module generates a prompt based on the warning information, and the visualization module displays the relevant processes and results; realizing comprehensive and intelligent monitoring and warning of the enterprise's ICT device data, accurately distinguishing the importance of business data, adaptively adjusting the monitoring strategy, efficiently using system resources, ensuring that critical business is monitored and processed first, promptly discovering anomalies and presenting them in an intuitive visual form, effectively assisting enterprise operation and maintenance personnel to quickly locate and solve problems, and improving the operation stability and reliability of the enterprise's ICT system.

[0058] Specifically, dividing the raw data into critical business data and non-critical business data specifically includes:

[0059] Obtain a preset business level table, which records the priorities corresponding to different enterprise businesses;

[0060] Receive and parse the raw data to obtain all the enterprise businesses executed in the current monitoring period, and match the enterprise businesses in the business level table to obtain all the priorities;

[0061] Compare all the priorities obtained by matching, and define the original data of enterprise services with higher priorities as key service data, and the remaining original data of enterprise services as non-key service data.

[0062] Through the above, this embodiment uses a service level table formulated based on the common knowledge of service level allocation known to those skilled in the art to match the priorities of enterprise services in the original data, defines the corresponding original data with higher priorities as key service data, and the rest as non-key service data; realizes the dynamic classification of data according to the characteristics of enterprise services, makes the monitoring focus closely fit the business reality, avoids uniform and undifferentiated processing of all data, optimizes the allocation of monitoring resources, ensures that key service data is preferentially and accurately supervised in the monitoring process, improves the pertinence and effectiveness of alarm generation, and provides a more valuable decision-making basis for enterprise operation and maintenance.

[0063] Specifically, generate a first alarm message based on the supervision result of key service data, which specifically includes:

[0064] Obtain a preset monitoring rule library, which stores monitoring rules for different service data, and the monitoring rules are used to analyze service data;

[0065] Match the monitoring rules in the monitoring rule library based on the key service data;

[0066] When the key service data does not meet the matched monitoring rules, generate a first alarm message, and the first alarm message at least includes the data source and data timestamp of the key service data.

[0067] Through the above, this embodiment uses a monitoring rule library formulated based on the service data analysis rules known to those skilled in the art to perform rule matching on key service data, and generates a first alarm message including the data source and timestamp when not meeting the requirements. Realize the precise monitoring of key service data, discover anomalies in a timely manner, and help operation and maintenance personnel quickly trace the problem source through detailed alarm information, quickly locate the equipment and time range where the failure occurs, effectively shorten the failure troubleshooting time, improve the business continuity of the enterprise, reduce losses caused by key service anomalies, and ensure the stable operation of the core business of the enterprise.

[0068] Specifically, generate a data transmission instruction based on non-key service data, which specifically includes:

[0069] Analyze the non-key service to obtain the corresponding enterprise service, and match the enterprise service with ICT equipment;

[0070] Based on the matched ICT device, determine the original data of the ICT device as the required original data, and generate a data transmission instruction based on the required original data. The data transmission instruction includes at least the data source of the required original data.

[0071] Through the above, this embodiment uses the parsed non-critical business data to match the corresponding ICT device, determines its original data, and generates a data transmission instruction including the data source; realizes the intelligent guidance of data collection based on the classified non-critical business, enables the data reorganization module to obtain the original data as needed, avoids blind collection and transmission, improves the data acquisition efficiency, reduces unnecessary data circulation and processing, saves system resources, lays a foundation for subsequent reorganization data generation and effective monitoring of non-critical business data, and improves the overall operation efficiency and data processing accuracy of the system.

[0072] Specifically, generating recombinant data based on the data transmission instruction specifically includes:

[0073] Parse the data transmission instruction to obtain the data source of the required original data, retrieve the data within the data traceability duration corresponding to the original data based on the preset data traceability duration, combine it with the newly continuously obtained original data to generate recombinant data, and then transmit the recombinant data to the data reorganization module, and the recombinant data is no longer transmitted to the data analysis module.

[0074] Through the above, this embodiment uses the parsed data transmission instruction to obtain the data source, retrieves data in combination with the preset data traceability duration and combines it with new data to form recombinant data; realizes the effective integration and expansion of non-critical business data, not only pays attention to the current data changes, but also mines potential problems by tracing historical data, enriches the data dimension for more comprehensive analysis, and at the same time ensures that the recombinant data flows according to the established path and does not interfere with the key business data monitoring process, improving the depth and breadth of non-critical business data monitoring and providing more sufficient data support for accurate alarm. It should be noted that the data traceability duration in this embodiment is an empirical value obtained based on the data volume required by those skilled in the art for data analysis.

[0075] Specifically, generating a second alarm message based on the supervision result of the recombinant data specifically includes:

[0076] Match the monitoring rules in the monitoring rule library based on the non-critical business data;

[0077] When the non-critical business data does not meet the matched monitoring rules, generate a second alarm message. The second alarm message includes at least the data source and data timestamp of the non-critical business data.

[0078] With the above, in this embodiment, the monitoring rule library is used to match rules for non-critical service data, and a second alarm message including the data source and timestamp is generated when the rules are not satisfied; realizing the standardized monitoring of non-critical service data, detecting anomalies with a unified standard, and facilitating the operation and maintenance personnel to understand the details of non-critical service anomalies through the clear alarm message. Although its priority is lower than that of critical services, it can still detect potential risks in a timely manner, avoid small problems from accumulating and causing major failures, ensure the stable and balanced operation of the overall system, and improve the robustness of the enterprise ICT system.

[0079] Specifically, generating an alarm prompt based on the first alarm message and / or the second alarm message specifically includes:

[0080] Generating a first alarm schematic diagram of critical service data based on the first alarm message, and this first alarm schematic diagram is used to display the data source and data timestamp of the critical service data;

[0081] Generating a second alarm schematic diagram of non-critical service data based on the second alarm message, and this second alarm schematic diagram is used to display the data source and data timestamp of the non-critical service data.

[0082] With the above, in this embodiment, a first alarm schematic diagram of critical service data is generated using the first alarm message, and a second alarm schematic diagram of non-critical service data is generated using the second alarm message; realizing the intuitive and visual presentation of the alarm message, displaying key contents such as the data source and timestamp in a graphical way, enabling the operation and maintenance personnel to immediately insight into the location of the anomaly, quickly screening out the key points from numerous information, without the need to laboriously interpret text data, greatly improving the alarm handling efficiency, reducing the probability of misjudgment, accelerating the fault repair process, and ensuring the normal operation of the enterprise business.

[0083] Specifically, visualizing the operation process of the data reorganization module and the monitoring and alarm module specifically includes:

[0084] Receiving the first alarm schematic diagram and / or the second alarm schematic diagram, and using a preset display device for display;

[0085] Continuously displaying the result of dividing the non-critical service data in the data reorganization module into updated critical service data and updated non-critical service data.

[0086] Through the above, this embodiment uses the received alarm schematic diagram to display and present the data division results of the data reorganization module; realizing the comprehensive visualization of the operation processes of the monitoring and alarm module and the data reorganization module. The operation and maintenance personnel can grasp the alarm dynamics and the evolution of data classification in real time, clearly understand the internal data processing logic and state changes of the system, which is convenient for timely adjusting strategies and resource allocation. At the same time, it enhances the transparency and operability of the system, providing strong support for enterprises to build an efficient, intelligent, and visualized ICT operation and maintenance environment. It should be noted that this embodiment uses existing visualization technologies to implement the functions of the visualization module.

[0087] Specifically, continuously divide the obtained non-critical business data into updated critical business data and updated non-critical business data, which specifically includes:

[0088] Obtain the business level table;

[0089] Continuously parse the non-critical data to obtain all enterprise operations, and match the enterprise operations in the business level table to obtain all priorities;

[0090] Compare all the obtained priorities, define the non-critical business data of the enterprise operations with higher priorities as updated critical business data, and define the non-critical business data of the remaining enterprise operations as updated non-critical business data.

[0091] Through the above, this embodiment continuously parses non-critical data using the business level table and matches priorities to divide updated critical and updated non-critical business data; realizing the dynamic re-evaluation and classification optimization of non-critical business data. As the enterprise operations develop and change, it timely updates the redefinition of data importance, making the monitoring resource allocation more reasonable, ensuring that critical business data is always accurately focused, and non-critical business data can also receive timely attention and effective monitoring, improving the system's adaptability, flexibly coping with the complex and changeable characteristics of enterprise operations, and ensuring the efficiency and accuracy of the overall operation and maintenance work.

[0092] The second aspect of this embodiment discloses an Figure 2 adaptive monitoring and alarm method as shown, which is applicable to the adaptive monitoring and alarm system as described above. The method includes:

[0093] S1: Collect the original data of all ICT devices of the enterprise and transmit it; the original data includes the data generated when the hardware of the ICT device is running and the data generated when the ICT device executes enterprise operations;

[0094] S2: Divide the original data into critical business data and non-critical business data, generate the first alarm information based on the supervision results of the critical business data, and transmit the non-critical business data;

[0095] S3: Generate a data transmission instruction based on non-critical business data; wherein, the data transmission instruction is used to obtain the required original data;

[0096] S4: Generate and transmit recombined data based on the data transmission instruction; the recombined data is the original data screened based on the data transmission instruction;

[0097] S5: Generate and transmit a second warning message based on the supervision result of the recombined data;

[0098] S6: Generate a warning prompt based on the first warning message and / or the second warning message;

[0099] S7: Perform visual display based on the operation processes of S2, S5, and S8;

[0100] S8: Continuously divide the obtained non-critical business data into updated critical business data and updated non-critical business data, and transmit the updated critical business data; wherein, the updated critical business data corresponds to the critical business data and executes S2, and the updated non-critical business data corresponds to the non-critical business data and executes S5.

[0101] It should be noted that the adaptive monitoring and warning method in this embodiment corresponds to the aforementioned adaptive monitoring and warning system. Therefore, for the content not specifically described in the adaptive monitoring and warning method in this embodiment, such as but not limited to function definitions, working principles, and technical effects, etc., reference can be made to the records of the aforementioned adaptive monitoring and warning system, and this text will not elaborate here.

[0102] In summary, the adaptive monitoring and warning system and method in this embodiment use the data acquisition module to collect the original data of enterprise ICT devices, divide the critical and non-critical business data through the data analysis module, generate the first warning message based on the supervision of the critical business data by the monitoring rule library, generate a data transmission instruction for the non-critical business data through the data recombination module to obtain the recombined data and generate the second warning message, the monitoring and warning module generates a prompt based on the warning message, and the visualization module displays the relevant processes and results; realizing comprehensive and intelligent monitoring and warning of enterprise ICT device data, accurately distinguishing the importance of business data, adaptively adjusting the monitoring strategy, efficiently using system resources, ensuring the priority monitoring and processing of critical business, promptly discovering anomalies and presenting them in an intuitive visual form, effectively assisting enterprise operation and maintenance personnel to quickly locate and solve problems, and improving the operation stability and reliability of enterprise ICT systems.

[0103] In the embodiments provided in the present application, it should be understood that the embodiments described herein can be implemented in hardware, software, firmware, middleware, code, or any suitable combination thereof. For hardware implementation, the processor can be implemented in one or more of the following units: application specific integrated circuit (ASIC), digital signal processor (DSP), digital signal processing device (DSPD), programmable logic device (PLD), field programmable gate array (FPGA), processor, controller, microcontroller, microprocessor, other electronic units designed to implement the functions described herein, or a combination thereof. For software implementation, part or all of the processes of the embodiments can be completed by instructing the relevant hardware through a computer program. When implemented, the above program can be stored in a computer-readable storage medium or transmitted as one or more instructions or codes on a computer-readable storage medium. The computer-readable storage medium includes computer storage media and communication media, where the communication media includes any medium that facilitates the transmission of a computer program from one place to another. The storage media can be any available medium that can be accessed by a computer. The computer-readable storage medium can include, but is not limited to, RAM, ROM, EEPROM, CD-ROM, or other optical disk storage, magnetic disk storage media, or other magnetic storage devices, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer.

[0104] Finally, it should be noted that the above are only the preferred embodiments of the present application and are not used to limit the present application. Although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art can still modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some of the technical features. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. An adaptive monitoring and alarm system, characterized in that: The system includes a data acquisition module, a data analysis module, a data reorganization module, a monitoring and alarm module and a visualization module; wherein the data analysis module and the data reorganization module are both communicatively connected to the data acquisition module, the data analysis module and the data reorganization module are both communicatively connected to the monitoring and alarm module, the data reorganization module and the monitoring and alarm module are both communicatively connected to the visualization module, and the data analysis module is communicatively connected to the data reorganization module; The data acquisition module acquires the original data of all ICT equipment of the enterprise and transmits it to the data analysis module; the data analysis module divides the original data into key business data and non-key business data, generates a first alarm information based on the supervision result of the key business data and transmits it to the monitoring alarm module, and transmits the non-key business data to the data reorganization module; the data reorganization module generates a data transmission instruction based on the non-key business data and transmits it to the data acquisition module; the data acquisition module generates reorganized data based on the data transmission instruction and transmits it to the data reorganization module; the data reorganization module generates a second alarm information based on the supervision result of the reorganized data and transmits it to the monitoring alarm module; the monitoring alarm module generates an alarm prompt based on the first alarm information and / or the second alarm information; the visualization module performs a visual display based on the operation process of the data reorganization module and the monitoring alarm module; wherein: the original data includes the data generated when the hardware of the ICT equipment is running and the data generated when the ICT equipment executes the enterprise business; the data transmission instruction is used to control the data acquisition module to transmit the required original data to the data reorganization module; the reorganized data is the original data filtered based on the data transmission instruction; The data reorganization module continuously divides the obtained non-critical business data into updated critical business data and updated non-critical business data, and transmits the updated critical business data to the data analysis module; wherein the updated critical business data corresponds to the critical business data, and the updated non-critical business data corresponds to the non-critical business data.

2. The adaptive monitoring and alarm system according to claim 1, characterized in that: The dividing of the original data into key business data and non-key business data specifically includes: Obtaining a preset service level table, wherein the service level table records the priorities corresponding to different enterprise services; Receive and analyze the original data to obtain all enterprise services executed in the current monitoring period, and match the enterprise services in the service level table to obtain all priorities; All priorities obtained by comparison and matching are defined as key business data for the original data of the enterprise business with a high priority, and the remaining original data of the enterprise business are defined as non-key business data.

3. The adaptive monitoring and alarm system according to claim 1, characterized in that: The generating of the first warning information based on the supervision result of the key business data specifically includes: Obtaining a preset monitoring rule library, wherein the monitoring rule library stores monitoring rules for different business data, and the monitoring rules are used to analyze the business data; Matching monitoring rules in the monitoring rule library based on the key business data; When the key business data does not satisfy the matched monitoring rule, first alarm information is generated, and the first alarm information at least includes a data source and a data timestamp of the key business data.

4. The adaptive monitoring and alarm system according to claim 1, characterized in that: The generating of the data transmission instruction based on the non-critical business data specifically includes: Analyze the non-critical business, obtain the corresponding enterprise business, and match the enterprise business with ICT equipment; Based on the matched ICT device, the original data of the ICT device is determined as the required original data, and a data transmission instruction is generated based on the required original data. The data transmission instruction at least includes a data source of the required original data.

5. The adaptive monitoring and alarm system according to claim 4, characterized in that: The generating of the reorganized data based on the data transmission instruction specifically includes: The data transmission instruction is parsed to obtain the data source of the required original data, and the data within the data tracing time corresponding to the original data is retrieved based on the preset data tracing time, and the data is combined with the new continuously obtained original data to generate reorganized data, which is then transmitted to the data reorganization module, and the reorganized data is no longer transmitted to the data analysis module.

6. The adaptive monitoring and alarm system according to claim 3, characterized in that: The generating of the second warning information based on the supervision result of the reorganized data specifically includes: Matching monitoring rules in the monitoring rule base based on the non-critical business data; When the non-critical business data does not satisfy the matched monitoring rule, second alarm information is generated, and the second alarm information at least includes a data source and a data timestamp of the non-critical business data.

7. The adaptive monitoring and alarm system according to claim 6, characterized in that: The generating of the alarm prompt based on the first alarm information and / or the second alarm information specifically includes: generating a first alarm schematic diagram of the key business data based on the first alarm information, the first alarm schematic diagram being used to display a data source and a data timestamp of the key business data; A second alarm schematic diagram of the non-critical business data is generated based on the second alarm information, where the second alarm schematic diagram is used to display a data source and a data timestamp of the non-critical business data.

8. The adaptive monitoring and alarm system according to claim 7, characterized in that: The visual display of the operation process based on the data reorganization module and the monitoring alarm module specifically includes: receiving the first alarm schematic diagram and / or the second alarm schematic diagram, and displaying them using a preset display device; The result of dividing the non-critical business data in the data reorganization module into updated critical business data and updated non-critical business data is continuously displayed.

9. The adaptive monitoring and alarm system according to claim 2, characterized in that: The continuously dividing the obtained non-critical business data into updating critical business data and updating non-critical business data specifically includes: Obtaining the service level table; Continuously analyzing the non-critical data to obtain all enterprise services, and matching the enterprise services in the service level table to obtain all priorities; All priorities obtained by comparison and matching are defined as non-critical business data of enterprise business with high priority as updated critical business data, and the remaining non-critical business data of enterprise business are defined as updated non-critical business data.

10. An adaptive monitoring and alarm method, the method being applicable to the adaptive monitoring and alarm system according to any one of claims 1 to 9, characterized in that: The method includes: S1: Collect and transmit the original data of all ICT equipment of the enterprise; the original data includes the data generated by the hardware operation of the ICT equipment and the data generated when the ICT equipment executes the enterprise business; S2: dividing the original data into critical business data and non-critical business data, generating first alarm information based on the supervision result of the critical business data, and transmitting the non-critical business data; S3: Generate a data transmission instruction based on the non-critical business data; wherein the data transmission instruction is used to obtain the required original data; S4: Generate and transmit reorganized data based on the data transmission instruction; the reorganized data is the original data screened based on the data transmission instruction; S5: Generate and transmit second alarm information based on the supervision result of the reorganized data; S6: Generate an alarm prompt based on the first alarm information and / or the second alarm information; S7: Visual display based on the operation process of S2, S5 and S8; S8: Continuously divide the obtained non-critical business data into updated critical business data and updated non-critical business data, and transmit the updated critical business data; wherein, the updated critical business data corresponds to the critical business data and executes S2, and the updated non-critical business data corresponds to the non-critical business data and executes S5.

Images