Service monitoring method and device, medium and equipment
By obtaining the current average response time of the target interface and combining the monitoring strategy of traffic volume and holding time, the problem of timely preventive monitoring in the existing technology is solved, and timely and accurate business abnormality detection is achieved before failure.
Patent Information
- Application Number
- CN202510443957.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-04-09
- Publication Date
- 2025-07-25
AI Technical Summary
The existing business monitoring methods are mainly aimed at hardware monitoring and business failure monitoring, and timely preventive monitoring cannot be achieved, resulting in insufficient monitoring results.
By obtaining the current average response time when the target interface's current traffic volume is greater than the average traffic threshold, the first monitoring strategy corresponding to the target service is used for initial monitoring. If abnormal, the general second monitoring strategy is used for further monitoring based on the current traffic volume, the average response time and the holding time without abnormal conditions.
It realizes timely and accurately determining whether abnormal situations will occur in the business before a failure occurs, improves the accuracy of monitoring results, and realizes preventive monitoring.
Smart Images
Figure CN120371640A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the financial field and the computer technology field, and particularly relates to a service monitoring method, device, medium and equipment. Background Art
[0002] In the financial field, various services such as vehicle insurance services, medical insurance services, credit card services, asset management services, wealth management services, e-commerce services, payment services, etc. have emerged. In order to ensure the normal operation of various services, it is usually necessary to monitor the services. However, the existing service monitoring methods mainly focus on hardware monitoring and service fault monitoring. That is, only when a fault occurs can the fault problem be detected, resulting in untimely monitoring results and unable to achieve preventive monitoring of services.
[0003] Therefore, there is an urgent need for a service monitoring method to solve the problem in the prior art that preventive monitoring of services cannot be carried out in a timely manner. Summary of the Invention
[0004] In view of this, the present invention provides a service monitoring method, device, medium and equipment, mainly aiming to solve the problem that preventive monitoring of services cannot be carried out in a timely manner at present.
[0005] To solve the above problems, the present application provides a service monitoring method, including:
[0006] For a target interface of a target service to be monitored, obtain the current average response time when the current service volume of the target interface is greater than the average service volume threshold;
[0007] Based on the current average response time, adopt a first monitoring strategy corresponding to the target service to monitor the target service and obtain an initial monitoring result;
[0008] When the initial monitoring result indicates that the target service is abnormal, based on the current service volume of the target interface, the current average response time, and the current holding time without abnormal conditions, adopt a predetermined second monitoring strategy to monitor the target service and obtain a target monitoring result.
[0009] Optionally, the step of obtaining the current average response time when the current service volume of the target interface is greater than the average service volume threshold for the target interface of the target service to be monitored specifically includes:
[0010] Obtain the current service volume of the target service according to a predetermined monitoring period;
[0011] Compare the current service volume with a predetermined average service volume threshold;
[0012] When the current traffic volume is greater than the average traffic volume threshold, for the target interface of the target service, obtain the current average response time of the target interface.
[0013] Optionally, based on the current average response time, adopt a first monitoring strategy corresponding to the target service to monitor the target service and obtain an initial monitoring result, which specifically includes:
[0014] Based on the current average response time and the average response time threshold corresponding to the target service, determine the response time volatility;
[0015] Based on the response time volatility and a predetermined response time volatility threshold, monitor the target service to obtain the initial monitoring result.
[0016] Optionally, based on the response time volatility and a predetermined response time volatility threshold, monitor the target service to obtain the initial monitoring result, which specifically includes:
[0017] Compare the response time volatility with the response time volatility threshold;
[0018] When the response time volatility is greater than or equal to the response time volatility threshold, determine that the target service has an anomaly to obtain the initial monitoring result;
[0019] When the response time volatility is less than the response time volatility threshold, determine that the target service has no anomaly to obtain the initial monitoring result.
[0020] Optionally, the second monitoring strategy includes several sub-monitoring conditions;
[0021] Based on the current traffic volume of the target interface, the current average response time, and the current retention time under normal conditions, adopt a predetermined second monitoring strategy to monitor the target service and obtain a target monitoring result, which specifically includes:
[0022] Based on the current average response time, determine the response time volatility;
[0023] Based on the current average response time, the current traffic volume, the response time volatility, and the current retention time under normal conditions, determine whether any sub-monitoring condition is met;
[0024] When any sub-monitoring condition is met, determine that the target service has no anomaly to obtain the target monitoring result;
[0025] When no sub-monitoring condition is met, determine that the target service has an anomaly to obtain the target monitoring result.
[0026] Optionally, the several sub-monitoring conditions include: a first sub-monitoring condition, a second sub-monitoring condition, a third sub-monitoring condition, and a fourth sub-monitoring condition;
[0027] Each of the sub-monitoring conditions respectively includes a corresponding average response time baseline value, a total traffic volume baseline value, a response time volatility baseline value, and a non-abnormal retention time.
[0028] Optionally, the method further includes:
[0029] Presetting a traffic volume upper limit value and a response time upper limit value of the target interface in advance;
[0030] Before monitoring the target service by using a first monitoring strategy corresponding to the target service based on the current average response time, the method further includes:
[0031] Monitoring the target service based on the traffic volume upper limit value and the current traffic volume, and / or monitoring the target service based on the response time upper limit value and the current average response time.
[0032] To solve the above problems, the present application provides a service monitoring device, including:
[0033] An acquisition module, configured to acquire the current average response time when the current traffic volume of the target interface of the target service to be monitored is greater than the average traffic volume threshold;
[0034] A first monitoring module, configured to monitor the target service by using a first monitoring strategy corresponding to the target service based on the current average response time, and obtain an initial monitoring result;
[0035] A second monitoring module, configured to, when the initial monitoring result indicates that the target service is abnormal, monitor the target service by using a predetermined second monitoring strategy based on the current traffic volume of the target interface, the current average response time, and the current retention time in the non-abnormal situation, and obtain a target monitoring result.
[0036] To solve the above problems, the present application provides a storage medium storing a computer program, and when the computer program is executed by a processor, the steps of the service monitoring method described in any one of the above are implemented.
[0037] To solve the above problems, the present application provides an electronic device, including at least a memory and a processor, where the memory stores a computer program, and when the processor executes the computer program stored in the memory, the steps of the service monitoring method described in any one of the above are implemented.
[0038] In the business monitoring method, device, medium and equipment of this application, by obtaining the current average response time when the current business volume is greater than the average business volume threshold, it is possible to avoid the problem of inaccurate monitoring results caused by business monitoring when the current business volume is low, that is, when the current business volume is lower than the average business volume threshold, and realize the noise reduction processing of the current average response time. That is, only obtain the current average response time when the current business volume is above the average business volume, and then adopt the first monitoring strategy corresponding to the target business based on the current average response time to perform abnormal monitoring. When an abnormality is detected, adopt the second monitoring strategy common to each business to further monitor the target business, improve the accuracy of the monitoring results, and realize timely and accurate determination of whether the business is about to have an abnormal situation before a failure occurs, achieving preventive monitoring of the business.
[0039] The above description is only an overview of the technical solution of the present invention. In order to be able to understand the technical means of the present invention more clearly, it can be implemented according to the content of the specification. And in order to make the above and other purposes, features and advantages of the present invention more obvious and understandable, the following specifically illustrates the specific embodiments of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS
[0040] By reading the following detailed description of the preferred embodiments, various other advantages and benefits will become clear to those of ordinary skill in the art. The drawings are only for the purpose of showing the preferred embodiments and are not considered to be a limitation of the present invention. And throughout the drawings, the same reference numerals are used to represent the same components. In the drawings:
[0041] Figure 1 is a flowchart of a business monitoring method according to an embodiment of this application;
[0042] Figure 2 is a structural block diagram of a business monitoring device according to another embodiment of this application;
[0043] Figure 3 is a structural block diagram of a computer device according to an embodiment of this application;
[0044] Figure 4 is a structural block diagram of another computer device according to an embodiment of this application. DETAILED DESCRIPTION OF THE EMBODIMENTS
[0045] Reference is made herein to the various aspects and features of the present application with reference to the accompanying drawings.
[0046] It should be understood that various modifications can be made to the embodiments applied herein. Therefore, the above specification should not be considered as a limitation, but only as an example of the embodiments. Those skilled in the art will think of other modifications within the scope and spirit of the present application.
[0047] The accompanying drawings, which are included in and form a part of this specification, illustrate embodiments of the present application and, together with the general description of the present application given above and the detailed description of the embodiments given below, serve to explain the principles of the present application.
[0048] These and other features of the present application will become apparent from the following description of the preferred forms of the embodiments given by way of non-limiting examples with reference to the accompanying drawings.
[0049] It should also be understood that although the present application has been described with reference to some specific examples, those skilled in the art can surely implement many other equivalent forms of the present application.
[0050] When combined with the accompanying drawings, the above and other aspects, features, and advantages of the present application will become more apparent in view of the following detailed description.
[0051] Specific embodiments of the present application will be described hereinafter with reference to the accompanying drawings; however, it should be understood that the embodiments claimed are merely examples of the present application, which can be implemented in various ways. Well-known and / or repetitive functions and structures are not described in detail to avoid obscuring the present application with unnecessary or redundant details. Therefore, the specific structural and functional details claimed herein are not intended to be limiting, but rather are merely a basis and representative basis for the claims to teach those skilled in the art to use the present application in substantially any suitable detailed structure in a variety of ways.
[0052] This specification may use the phrases "in one embodiment", "in another embodiment", "in yet another embodiment", or "in other embodiments", each of which may refer to one or more of the same or different embodiments according to the present application.
[0053] Embodiments of the present application provide a service monitoring method, which can be specifically applied to the monitoring of financial services such as insurance services, e-commerce services, credit card services, etc., such as Figure 1 As shown, the method in this embodiment includes the following steps:
[0054] Step S101, for the target interface of the target service to be monitored, obtain the current average response time when the current traffic volume of the target interface is greater than the average traffic volume threshold;
[0055] In this step, the target service can specifically be various services such as vehicle insurance services, medical insurance services, credit card services, asset management services, wealth management services, e-commerce services, payment services, etc.
[0056] In this step, each service corresponds to an interface. Thus, when it is necessary to monitor a certain service, the target interface corresponding to the service can be determined according to the service, and then the current average response time avg of the target interface when the current service volume is greater than the average service volume threshold is obtained. The current average response time refers to the average of the time taken for the target interface to respond to each request within a predetermined time period, such as 1 hour or 30 minutes. For example, if there are 30 requests within 1 hour, the response times of the target interface for these 30 requests can be obtained, and then the average of these 30 response times can be calculated to obtain the current average response time.
[0057] Step S102: Based on the current average response time, use the first monitoring strategy corresponding to the target service to monitor the target service and obtain an initial monitoring result.
[0058] In this step, different services each correspond to different monitoring strategies, that is, the first monitoring strategy. Specifically, the first monitoring strategy includes a predetermined average response time threshold and a response time volatility threshold. For example, the average response time threshold in the first monitoring strategy corresponding to Service A is 22 ms, and the response time volatility threshold is 30%. Another example is that the average response time threshold in the first monitoring strategy corresponding to Service B is 50 ms, and the response time volatility threshold is 25%. The average response time threshold and the response time volatility threshold can be adjusted and set according to the actual response situations of each service.
[0059] Step S103: When the initial monitoring result indicates that the target service is abnormal, based on the current service volume of the target interface, the current average response time, and the current holding time without abnormal conditions, use a predetermined second monitoring strategy to monitor the target service and obtain a target monitoring result.
[0060] In this step, the second monitoring strategy is a monitoring strategy common to each service and includes several sub-monitoring conditions. That is, when the initial monitoring result indicates that the target service is abnormal, it is possible to determine whether any sub-monitoring condition in the second monitoring strategy is satisfied based on the current service volume of the target interface and the current average response time. If any sub-monitoring condition is satisfied, it is determined that the target service is not abnormal; otherwise, if none of the sub-monitoring conditions are satisfied, it is determined that the target service may have a fault, that is, it is abnormal, and thus the final target monitoring result can be obtained.
[0061] The service monitoring method in this embodiment can avoid the problem of inaccurate monitoring results caused by performing service monitoring even when the current service volume is low, i.e., when the current service volume is lower than the average service volume threshold, by obtaining the current average response time when the current service volume is greater than the average service volume threshold, and realizes the noise reduction processing of the current average response time. That is, only the current average response time when the current service volume is above the average service volume is obtained, and then based on the current average response time, the first monitoring strategy corresponding to the target service is adopted for anomaly monitoring. When an anomaly is detected, the second monitoring strategy common to each service is used to further monitor the target service, improving the accuracy of the monitoring results, realizing timely and accurate determination of whether an anomaly will occur in the service before a failure occurs, and realizing preventive monitoring of the service.
[0062] Another embodiment of the present application provides a service monitoring method, which specifically includes the following steps:
[0063] Step S201, pre-create a first monitoring strategy corresponding to each service and a second monitoring strategy common to each service;
[0064] In this step, different services each correspond to a different monitoring strategy, that is, the first monitoring strategy. Specifically, the first monitoring strategy includes: a predetermined average response time threshold and a response time volatility threshold.
[0065] At the same time, each service also uniformly corresponds to a second monitoring strategy. Among them, the second monitoring strategy may specifically include several sub-monitoring conditions, that is, including: a first sub-monitoring condition, a second sub-monitoring condition, a third sub-monitoring condition, and a fourth sub-monitoring condition. Each of the sub-monitoring conditions respectively includes a corresponding average response time baseline value, a total service volume baseline value, a response time volatility baseline value, and a non-anomaly holding time.
[0066] That is, the first sub-monitoring condition includes: a predetermined first average response time baseline value, a predetermined first total service volume baseline value, a predetermined response time volatility baseline value, and a non-anomaly holding time. For example, the first sub-monitoring condition is: the current average response time is less than 1000 ms, and at the same time, it satisfies that the current service volume total is less than 5000 transactions per hour, the average response time fluctuates less than 100% compared to the baseline value (i.e., the response time volatility is less than 100%), and there is no anomaly record within 12 hours (the non-anomaly holding time is greater than 12 hours). Among them, the response time volatility = (the current response time of the target service - the average response time threshold of the target service) ÷ the average response time threshold of the target service.
[0067] The second sub-monitoring condition includes: a predetermined second average response time baseline value, a predetermined second total traffic volume baseline value, a predetermined response time volatility baseline value, and a non-abnormal retention time. For example, the second sub-monitoring condition is that the current average response time is less than 3000 ms, while satisfying that the current traffic volume total is less than 500 transactions per hour, the average response time fluctuates less than 100% compared to the baseline value (i.e., the response time volatility is less than 100%), and there are no abnormal records within 12 hours (the non-abnormal situation retention time is greater than 12 hours).
[0068] The third sub-monitoring condition includes: a predetermined third average response time baseline value, a predetermined third total traffic volume baseline value, a predetermined response time volatility baseline value, and a non-abnormal retention time. For example, the current average response time is less than 6000 ms, while satisfying that the current traffic volume total is less than 100 transactions per hour, the average response time fluctuates less than 100% compared to the baseline value (i.e., the response time volatility is less than 100%), and there are no abnormal records within 12 hours (the non-abnormal situation retention time is greater than 12 hours).
[0069] The fourth sub-monitoring condition includes: a predetermined fourth average response time baseline value, a predetermined fourth total traffic volume baseline value, a predetermined response time volatility baseline value, and a non-abnormal retention time. For example, the current average response time is less than 10000 ms, while satisfying that the current traffic volume total is less than 50 transactions per hour, the average response time fluctuates less than 100% compared to the baseline value (i.e., the response time volatility is less than 100%), and there are no abnormal records within 12 hours (the non-abnormal situation retention time is greater than 12 hours).
[0070] Step S202: Obtain the current traffic volume of the target service according to a predetermined monitoring period;
[0071] In this step, the target service can specifically be various services such as vehicle insurance services, medical insurance services, credit card services, asset management services, wealth management services, e-commerce services, payment services, etc. The monitoring period can be 1 hour, 30 minutes, 10 minutes, 5 minutes, etc., and can be specifically set and adjusted according to actual needs.
[0072] Step S203: Compare the current traffic volume with a predetermined average traffic volume threshold;
[0073] In this step, the average business volume threshold can be statistically determined in advance according to the actual operation of the target business. Specifically, the average business volume threshold can be the average of the business volume per hour within 1 month, or the average of the business volume per day within 1 month, or the average of the business volume per hour within 10 days, or the average of the business volume per hour within 1 week. The specific calculation period can be set and adjusted according to actual needs. After determining the average business volume threshold, the current business volume can be determined according to the corresponding average period (per hour or per day), and then the current business volume is compared with the average business volume threshold.
[0074] Step S204: When the current business volume is greater than the average business volume threshold, obtain the current average response time of the target interface;
[0075] In this step, to avoid the problem of inaccurate monitoring results caused by business monitoring when the current business volume is low, that is, when the current business volume is lower than the average business volume threshold, the current average response time can be denoised by the current business volume. That is, only when the current business volume is greater than the average business volume threshold, the current average response time is obtained, which can make the subsequent monitoring results obtained based on the current average response time more accurate and reliable.
[0076] In this step, when the current business volume is greater than the average business volume threshold, for example, the current business volume in the most recent 1 hour is 150 transactions, which is greater than the predetermined average business volume threshold of 100 transactions per hour, indicating that there may be business anomalies. Therefore, the current average response time can be further obtained for further anomaly judgment. On the contrary, when the current business volume is less than or equal to the average business volume threshold, the probability of business anomalies is relatively low. And if the current average response time is obtained when the current business volume is less than or equal to the average business volume threshold, and business anomaly monitoring is performed based on the current average response time threshold, inaccurate monitoring results will occur. This is because when the business volume is low, the noise is large, that is, the business volume will be affected by the avg fluctuations of individual transactions and affect the overall avg. Therefore, by monitoring the average response time avg of the business volume above the average business volume water level (that is, excluding transactions with business volume below the average business volume), the business monitoring ignores the business attributes. At this time, further anomaly monitoring based on the average response time can obtain more accurate monitoring results.
[0077] Step S205: Based on the current average response time, adopt the first monitoring strategy corresponding to the target business to monitor the target business and obtain the initial monitoring result;
[0078] In this step, when monitoring the target business by adopting the first monitoring strategy, the specific monitoring process is as follows:
[0079] Step S2051: Determine the response time volatility based on the current average response time and the average response time threshold corresponding to the target service.
[0080] In this step, specifically, the response time volatility can be determined / calculated according to the current average response time and the average response time threshold in the first monitoring strategy. That is, response time volatility = (current average response time - average response time threshold) ÷ average response time threshold.
[0081] Step S2052: Monitor the target service based on the response time volatility and a predetermined response time volatility threshold to obtain the initial monitoring result.
[0082] In this step, specifically, the response time volatility can be compared with the response time volatility threshold in the first monitoring strategy; when the response time volatility is greater than or equal to the response time volatility threshold, it is determined that the target service is abnormal to obtain the initial monitoring result; when the response time volatility is less than the response time volatility threshold, it is determined that the target service is not abnormal to obtain the initial monitoring result. For example, if the current average response time is 80 ms and the average response time threshold is 20 ms, the response time volatility can be calculated as (80 - 20) ÷ 20 = 200%, which is greater than the predetermined volatility threshold of 30%. Thus, it can be determined that the target service may be abnormal, and the initial monitoring result can be obtained.
[0083] Step S206: When the initial monitoring result indicates that the target service is abnormal, based on the current traffic volume of the target interface, the current average response time, and the current holding time without abnormal conditions, adopt a predetermined second monitoring strategy to monitor the target service and obtain the target monitoring result.
[0084] In this step, when initially determining that the target service is abnormal, in order to ensure that the monitoring result is more accurate and reliable, the second monitoring strategy common to each service can be used to further monitor the target service for abnormalities. That is, the current average response time, the current traffic volume, the response time volatility, and the current holding time without abnormal conditions can be matched with each sub-monitoring condition in the second monitoring strategy to determine whether any sub-monitoring condition is met. When it is determined that any of the sub-monitoring conditions is met, it is determined that the target service is not abnormal to obtain the target monitoring result; conversely, if it is determined that none of the sub-monitoring conditions are met, it is determined that the target service is abnormal to obtain the target monitoring result.
[0085] For example, the current average response time of the target service is 80 ms, the current business volume is 150 transactions, the response time volatility corresponding to the current average response time is 200%, and the holding time without abnormal conditions is 13 hours. Thus, the above information can be matched with the following 4 sub-monitoring conditions.
[0086] The first sub-monitoring condition: The current average response time is less than 1000 ms. At the same time, it satisfies that the current business volume total is less than 5000 transactions per hour, the average response time fluctuates less than 100% compared to the baseline value (i.e., the response time volatility is less than 100%), and there are no abnormal records within 12 hours.
[0087] The second sub-monitoring condition: The current average response time is less than 3000 ms. At the same time, it satisfies that the current business volume total is less than 500 transactions per hour, the average response time fluctuates less than 100% compared to the baseline value (i.e., the response time volatility is less than 100%), and there are no abnormal records within 12 hours.
[0088] The third sub-monitoring condition: The current average response time is less than 6000 ms. At the same time, it satisfies that the current business volume total is less than 100 transactions per hour, the average response time fluctuates less than 100% compared to the baseline value (i.e., the response time volatility is less than 100%), and there are no abnormal records within 12 hours.
[0089] The fourth sub-monitoring condition: The current average response time is less than 10000 ms. At the same time, it satisfies that the current business volume total is less than 50 transactions per hour, the average response time fluctuates less than 100% compared to the baseline value (i.e., the response time volatility is less than 100%), and there are no abnormal records within 12 hours.
[0090] Through matching, it can be determined that the current average response time of 80 ms satisfies any one of the sub-monitoring conditions; the current business volume of 150 transactions only satisfies the first sub-monitoring condition (the current business volume is less than 5000 transactions per hour) and the second sub-monitoring condition (the current business volume is less than 500 transactions per hour); the response time volatility of 200% does not satisfy any one of the sub-monitoring conditions; the holding time without abnormal conditions of 13 hours satisfies any one of the sub-monitoring conditions. Finally, it can be determined that it does not satisfy any one of the sub-monitoring conditions. Therefore, it can be determined that there is an abnormality in the target service.
[0091] Another example, the current average response time of the target service is 2000 ms, the current business volume is 150 transactions, the response time volatility corresponding to the current average response time is 50%, and the holding time without abnormal conditions is 13 hours. Thus, the above information can be matched with the above 4 sub-monitoring conditions to determine that it satisfies the second sub-monitoring condition. Therefore, it can be determined that there is no abnormality in the target service.
[0092] In the specific implementation process of this embodiment, in order to make the monitoring of the target service more efficient and accurate, an upper limit value of the business volume and an upper limit value of the response time of the target interface can be further set in advance. That is, before monitoring the target service by using the first monitoring strategy corresponding to the target service, the target service can also be monitored based on the upper limit value of the business volume and the current business volume, and / or the target service can be monitored based on the upper limit value of the response time and the current average response time. When the current business volume is greater than the upper limit value of the business volume and / or the current average response time is greater than the upper limit value of the response time, it is determined that the target service may be abnormal in the future, so as to obtain the monitoring result; on the contrary, if the current business volume is less than or equal to the upper limit value of the business volume and the current average response time is less than or equal to the upper limit value of the response time, the first monitoring strategy can be used to further monitor the target service.
[0093] In the specific implementation process of this embodiment, for the long interface, a 95-line index value (95% of the maximum index value, and the maximum index value refers to the maximum value within the normal operation or acceptable range of the interface) can also be set. If the current index value exceeds the 95-line index value, it can be determined that the target service is abnormal.
[0094] In this embodiment, by obtaining the current average response time when the current business volume is greater than the average business volume threshold, it is possible to avoid the problem of inaccurate monitoring results caused by performing service monitoring even when the current business volume is low, that is, when the current business volume is lower than the average business volume threshold, realizing the noise reduction processing of the current average response time. That is, only the current average response time when the current business volume is above the average business volume is obtained, and then based on the current average response time, the first monitoring strategy corresponding to the target service is used to perform abnormal monitoring. When an abnormality is detected, the second monitoring strategy common to each service is used to further monitor the target service, improving the accuracy of the monitoring result, and realizing the timely and accurate determination of whether the service is about to be abnormal before a failure occurs, realizing the preventive monitoring of the service.
[0095] Another embodiment of this application provides a service monitoring device, as Figure 2 shown, including:
[0096] An acquisition module 11, configured to obtain the current average response time when the current business volume of the target interface of the target service to be monitored is greater than the average business volume threshold;
[0097] A first monitoring module 12, configured to monitor the target service based on the current average response time by using a first monitoring strategy corresponding to the target service, and obtain an initial monitoring result;
[0098] The second monitoring module 13 is configured to, when the initial monitoring result indicates that the target service is abnormal, monitor the target service based on the current traffic volume of the target interface, the current average response time, and the current retention time in the non-abnormal situation, by using a predetermined second monitoring strategy, to obtain a target monitoring result.
[0099] In the specific implementation process of this embodiment, the obtaining module is specifically configured to: obtain the current traffic volume of the target service according to a predetermined monitoring period; compare the current traffic volume with a predetermined average traffic volume threshold; and when the current traffic volume is greater than the average traffic volume threshold, obtain the current average response time of the target interface for the target service.
[0100] In the specific implementation process of this embodiment, the first monitoring module includes a determination unit and a monitoring unit. The determination unit is configured to: determine a response time volatility based on the current average response time and an average response time threshold corresponding to the target service. The monitoring unit is configured to: monitor the target service based on the response time volatility and a predetermined response time volatility threshold, to obtain the initial monitoring result.
[0101] In the specific implementation process of this embodiment, the monitoring unit is specifically configured to: compare the response time volatility with the response time volatility threshold; when the response time volatility is greater than or equal to the response time volatility threshold, determine that the target service is abnormal, to obtain the initial monitoring result; and when the response time volatility is less than the response time volatility threshold, determine that the target service is not abnormal, to obtain the initial monitoring result.
[0102] In the specific implementation process of this embodiment, the second monitoring strategy includes a plurality of sub-monitoring conditions. The second monitoring module is configured to: determine a response time volatility based on the current average response time; determine whether any sub-monitoring condition is satisfied based on the current average response time, the current traffic volume, the response time volatility, and the current retention time in the non-abnormal situation; when any sub-monitoring condition is satisfied, determine that the target service is not abnormal, to obtain the target monitoring result; and when no sub-monitoring condition is satisfied, determine that the target service is abnormal, to obtain the target monitoring result.
[0103] In the specific implementation process of this embodiment, the plurality of sub-monitoring conditions include: a first sub-monitoring condition, a second sub-monitoring condition, a third sub-monitoring condition, and a fourth sub-monitoring condition;
[0104] Each of the sub-monitoring conditions respectively includes a corresponding average response time baseline value, a total traffic volume baseline value, a response time volatility baseline value, and a non-abnormal retention time.
[0105] In the specific implementation process of this embodiment, the service monitoring device further includes: a setting module and an initial monitoring module; the setting module is used for: presetting an upper limit value of the service volume and an upper limit value of the response time of the target interface; the initial monitoring module is used for: monitoring the target service based on the upper limit value of the service volume and the current service volume, and / or monitoring the target service based on the upper limit value of the response time and the current average response time.
[0106] The service monitoring device in this embodiment can avoid the problem of inaccurate monitoring results caused by performing service monitoring even when the current service volume is low, that is, when the current service volume is lower than the average service volume threshold, by obtaining the current average response time when the current service volume of the target interface is greater than the average service volume threshold, realizing noise reduction processing of the current average response time. That is, only the current average response time when the current service volume is above the average service volume is obtained, and then based on the current average response time, the first monitoring strategy corresponding to the target service is adopted for anomaly monitoring. When an anomaly is detected, the second monitoring strategy common to each service is adopted to further monitor the target service, improving the accuracy of the monitoring results, and realizing timely and accurate determination of whether the service is about to have an abnormal situation before a failure occurs, achieving preventive monitoring of the service.
[0107] Another embodiment of this application provides a storage medium. Another embodiment of this application provides a storage medium, which stores a computer program. When the computer program is executed by a processor, the following method steps are implemented:
[0108] Step 1: For the target interface of the target service to be monitored, obtain the current average response time when the current service volume of the target interface is greater than the average service volume threshold;
[0109] Step 2: Based on the current average response time, adopt the first monitoring strategy corresponding to the target service to monitor the target service and obtain an initial monitoring result;
[0110] Step 3: When the initial monitoring result indicates that the target service is abnormal, based on the current service volume of the target interface, the current average response time, and the current holding time without abnormal conditions, adopt a predetermined second monitoring strategy to monitor the target service and obtain a target monitoring result.
[0111] For the specific implementation process of the above method steps, reference can be made to the embodiments of any of the above service monitoring methods, and this embodiment will not be repeated here.
[0112] The storage medium in the present application can avoid the problem of inaccurate monitoring results caused by business monitoring even when the current business volume is low, that is, when the current business volume is lower than the average business volume threshold, by obtaining the current average response time when the current business volume is greater than the average business volume threshold, and realizes the noise reduction processing of the current average response time. That is, only the current average response time when the current business volume is above the average business volume is obtained, and then based on the current average response time, the first monitoring strategy corresponding to the target business is adopted for anomaly monitoring. When an anomaly is detected, the second monitoring strategy common to each business is used to further monitor the target business, improving the accuracy of the monitoring results, and realizing timely and accurate determination of whether the business will have an abnormal situation before a failure occurs, and realizing preventive monitoring of the business.
[0113] Another embodiment of the present application provides a computer device, which can be a server, and its internal structure diagram can be as Figure 3 shown. The computer device includes a processor, a memory, a network interface, and a database connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile and / or volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external client through a network connection. When the computer program is executed by the processor, it realizes the functions or steps on the server side of a product marketing strategy determination method.
[0114] In one embodiment, a computer device is provided, which can be a client, and its internal structure diagram can be as Figure 4 shown. The computer device includes a processor, a memory, a network interface, a display screen, and an input device connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external server through a network connection. When the computer program is executed by the processor, it realizes the functions or steps on the client side of a product marketing strategy determination method.
[0115] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored on the memory and executable on the processor. When the processor executes the computer program, the following steps are realized:
[0116] Step 1: For the target interface of the target service to be monitored, obtain the current average response time when the current traffic volume of the target interface is greater than the average traffic volume threshold.
[0117] Step 2: Based on the current average response time, adopt the first monitoring strategy corresponding to the target service to monitor the target service and obtain an initial monitoring result.
[0118] Step 3: When the initial monitoring result indicates that the target service is abnormal, based on the current traffic volume of the target interface, the current average response time, and the current holding time under normal conditions, adopt a predetermined second monitoring strategy to monitor the target service and obtain a target monitoring result.
[0119] For the specific implementation process of the above method steps, reference can be made to the embodiments of any of the above service monitoring methods, and this embodiment will not be repeated here.
[0120] The computer device in this application can avoid the problem of inaccurate monitoring results caused by performing service monitoring even when the current traffic volume is low, that is, when the current traffic volume is lower than the average traffic volume threshold, by obtaining the current average response time when the current traffic volume is greater than the average traffic volume threshold, achieving noise reduction processing of the current average response time. That is, only the current average response time when the current traffic volume is above the average traffic volume is obtained, and then based on the current average response time, the first monitoring strategy corresponding to the target service is adopted for abnormal monitoring. When an abnormality is detected, the second monitoring strategy common to each service is adopted to further monitor the target service, improving the accuracy of the monitoring result and achieving timely and accurate determination of whether the service is about to become abnormal before a failure occurs, realizing preventive monitoring of the service.
[0121] The above embodiments are only exemplary embodiments of this application and are not used to limit this application. The protection scope of this application is defined by the claims. Those skilled in the art can make various modifications or equivalent replacements within the essence and protection scope of this application, and such modifications or equivalent replacements should also be regarded as falling within the protection scope of this application.
Claims
1. A service monitoring method, characterized in that, Including: For a target interface of a target service to be monitored, obtain the current average response time when the current traffic volume of the target interface is greater than the average traffic volume threshold; Based on the current average response time, adopt a first monitoring strategy corresponding to the target service to monitor the target service and obtain an initial monitoring result; When the initial monitoring result indicates that the target service is abnormal, based on the current traffic volume of the target interface, the current average response time, and the current holding time in the non-abnormal situation, adopt a predetermined second monitoring strategy to monitor the target service and obtain a target monitoring result.
2. The method according to claim 1, characterized in that, The step of, for a target interface of a target service to be monitored, obtaining the current average response time when the current traffic volume of the target interface is greater than the average traffic volume threshold specifically includes: Obtain the current traffic volume of the target service according to a predetermined monitoring period; Compare the current traffic volume with a predetermined average traffic volume threshold; When the current traffic volume is greater than the average traffic volume threshold, for the target interface of the target service, obtain the current average response time of the target interface.
3. The method according to claim 1, wherein The step of, based on the current average response time, adopting a first monitoring strategy corresponding to the target service to monitor the target service and obtain an initial monitoring result specifically includes: Based on the current average response time and the average response time threshold corresponding to the target service, determine the response time volatility; Based on the response time volatility and a predetermined response time volatility threshold, monitor the target service to obtain the initial monitoring result.
4. The method according to claim 3, wherein The step of, based on the response time volatility and a predetermined response time volatility threshold, monitoring the target service to obtain the initial monitoring result specifically includes: Compare the response time volatility with the response time volatility threshold; When the response time volatility is greater than or equal to the response time volatility threshold, determine that the target service is abnormal to obtain the initial monitoring result; When the response time volatility is less than the response time volatility threshold, determine that the target service is not abnormal to obtain the initial monitoring result.
5. The method according to claim 1, characterized in that, The second monitoring strategy includes a number of sub-monitoring conditions; The step of, based on the current traffic volume of the target interface, the current average response time, and the current holding time in the non-abnormal situation, adopting a predetermined second monitoring strategy to monitor the target service and obtain a target monitoring result specifically includes: Based on the current average response time, determine the response time volatility; Based on the current average response time, the current traffic volume, the response time volatility, and the current holding time in the non-abnormal situation, determine whether any sub-monitoring condition is satisfied; When any sub-monitoring condition is satisfied, determine that the target service is not abnormal to obtain the target monitoring result; When no sub-monitoring condition is satisfied, determine that the target service is abnormal to obtain the target monitoring result.
6. The method according to claim 5, wherein The number of sub-monitoring conditions includes: a first sub-monitoring condition, a second sub-monitoring condition, a third sub-monitoring condition, and a fourth sub-monitoring condition; Each of the sub-monitoring conditions respectively includes a corresponding average response time baseline value, a total traffic baseline value, a response time volatility baseline value, and a non-abnormal retention time.
7. The method according to any one of claims 1-6, characterized in that, The method further includes: Presetting a traffic upper limit value and a response time upper limit value of the target interface in advance; Before monitoring the target service by using a first monitoring strategy corresponding to the target service based on the current average response time, the method further includes: Monitoring the target service based on the traffic upper limit value and the current traffic volume, and / or monitoring the target service based on the response time upper limit value and the current average response time.
8. A service monitoring device, characterized in that, It includes: An acquisition module, configured to acquire the current average response time when the current traffic volume of the target interface of the target service to be monitored is greater than the average traffic volume threshold; A first monitoring module, configured to monitor the target service by using a first monitoring strategy corresponding to the target service based on the current average response time, and obtain an initial monitoring result; A second monitoring module, configured to, when the initial monitoring result indicates that the target service is abnormal, monitor the target service by using a predetermined second monitoring strategy based on the current traffic volume of the target interface, the current average response time, and the current retention time in the non-abnormal situation, and obtain a target monitoring result.
9. A storage medium, characterized in that, The storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the service monitoring method according to any one of claims 1-7 above are implemented.
10. An electronic device, characterized in that, It at least includes a memory and a processor. A computer program is stored on the memory, and when the processor executes the computer program on the memory, the steps of the service monitoring method according to any one of claims 1-7 above are implemented.