Alarm processing method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention provides an alarm processing method and device, electronic equipment and a storage medium, and relates to the technical field of computers. The method comprises the following steps: displaying a plurality of selectable network types, and displaying selectable applications respectively corresponding to the selected target network types in response to a selection operation for the network types; in response to a selection operation for the selectable application, performing dial testing on the selected first application through the detection system to obtain a dial testing result; if yes, taking the first application corresponding to the abnormal dial test result as a second application; and displaying an exception analysis result for the second application on a display interface of the analysis system. When the alarm information sent by the detection system is received, the analysis system analyzes the real-time data, finds out the abnormal data, proposes the corresponding exception handling strategy, and displays the abnormal data and the exception handling strategy together, thereby saving human resources and improving efficiency. And meanwhile, compared with a traditional processing mode, the method has higher objectivity.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer, in particular, the present application relates to an alarm processing method and device, electronic equipment and storage medium. BACKGROUND

[0002] With the rapid development of computer, Internet and image processing transmission technology, people's demand for safety is getting higher and higher. In order to find the abnormal situation of target object work in time, usually when the target object work data does not meet the requirement standard, alarm is carried out.

[0003] In the prior art, the detection index of part of the data of the target object is usually set in advance. When the detection index exceeds the preset normal threshold range, the detection system will issue an alarm signal, so that the relevant operation and maintenance personnel can adjust the target object according to the alarm signal.

[0004] However, in the current detection system, when the alarm signal is issued, only the real-time data of the current target object will be displayed to the operation and maintenance personnel, but as to which part of the data is the problem, the operation and maintenance personnel still need to further investigate, which consumes a lot of human resources and the processing efficiency of the alarm information is low. SUMMARY

[0005] The purpose of the present application is to at least solve one of the above technical defects. The technical scheme provided by the embodiments of the present application is as follows: In a first aspect, the embodiments of the present application provide an alarm processing method, characterized in that it is applied to an alarm processing system, which includes a detection system and an analysis system, and comprises: Displaying a plurality of selectable network types in the configuration interface of the detection system, and in response to a first selection operation on at least one selectable network type, displaying at least one selectable application corresponding to at least one selected target network type; In response to a second selection operation on at least one selectable application, performing a test on at least one first application selected by the second selection operation through the detection system, and obtaining the test result of each first application; If an abnormal test result is detected, the first application corresponding to the abnormal test result is taken as a second application; For each second application, the abnormal analysis result of the second application is displayed in the display interface of the analysis system. The abnormal analysis result includes the detailed data of the test result of the second application and the abnormal processing strategy for the test result; The abnormal analysis result is generated by the analysis system based on the following way: Obtaining the alarm information of the second application issued by the detection system; obtain a test analysis component corresponding to the alarm information, and analyze the alarm information through the test analysis component to obtain an initial result; render the initial result to obtain an abnormality analysis result.

[0006] In an optional embodiment of the present application, the abnormality analysis result for the second application is displayed, and specifically includes: display title information about at least one analysis result of the second application; each title information corresponds to an abnormality analysis result of the second application in one dimension; in response to a first trigger operation on a first control corresponding to any title information, display brief information of a test result corresponding to the any title information; in response to a second trigger operation on a second control in the brief information, display detailed data information of the test result and an abnormality processing strategy for the test result.

[0007] In an optional embodiment of the present application, if there is a third control in an interface for displaying the detailed data information of the test result, the method further specifically includes: in response to a trigger operation on the third control, display a preset selectable chart display type; in response to a confirmation operation on a target chart display type, generate a target chart based on the target chart display type and the detailed data of the test result; the target chart is of the target chart display type and contains the detailed data; display the target chart in the current interface.

[0008] In an optional embodiment of the present application, the test analysis component corresponding to the alarm information is obtained, and specifically includes: obtain the test analysis component corresponding to the alarm information based on a preset matching rule; The preset matching rule is generated based on the following manner: display a plurality of selectable rule matching dimensions in a rule configuration interface; in response to a selection operation on at least one rule matching dimension, generate the preset matching rule based on the rule matching dimensions selected by the selection operation.

[0009] In an optional embodiment of the present application, the test analysis component corresponding to the alarm information is obtained based on a preset matching rule, and specifically includes: display each first application and a candidate test analysis component corresponding to each first application; the candidate test analysis component is matched from a plurality of selectable test analysis components based on the preset matching rule; in response to a confirmation operation on a target candidate analysis component, take the target candidate analysis component as the test analysis component.

[0010] In an optional embodiment of the present application, the alarm information is generated in the following manner: When the stress testing operation for the first application is detected, the performance data of the first application is acquired through the detection system; The performance data is evaluated based on a preset algorithm to obtain an evaluation result for the first application; If the evaluation result is not within a preset normal evaluation interval, the first application is taken as the second application, and the initial alarm information corresponding to the evaluation result is generated; The interference information in the initial alarm information is determined, the interference information is deleted from the initial alarm information, and the alarm information is obtained.

[0011] In an optional embodiment of the present application, the method further comprises: Based on the initial result, the determination degree of the stress testing analysis component for the initial result is acquired; If the determination degree is not less than a preset determination degree, after the initial result is rendered, the abnormal processing strategy is executed.

[0012] In an optional embodiment of the present application, before the initial result is rendered, the method specifically comprises: Based on the initial result and a preset urgency calculation rule, the urgency corresponding to the initial result is acquired; If the urgency is not less than a first preset urgency, after the initial result is rendered to obtain the analysis result, the method further comprises: An emergency signal is sent to a preset terminal through a preset emergency call system, so that the preset terminal processes the alarm information based on the emergency signal; If the urgency is less than a second preset urgency, the initial result is intercepted, and the initial result is not rendered; The initial result is stored in a first preset database.

[0013] In an optional embodiment of the present application, if the alarm information is generated based on a target network connection failure of a target network type, the alarm information is analyzed by the stress testing analysis component to obtain the initial result, specifically comprising: The operator information and the machine room information corresponding to the target network type are acquired; The address information corresponding to the target network connection failure is acquired, and the network information of the target network type is generated based on the operator information, the machine room information and the address information; Based on the network information, the corresponding target platform is determined from a plurality of candidate platforms, and the identification information of the target platform is acquired; Based on the identification information, the corresponding analysis and processing plan is called from a second preset database, and the initial result is obtained based on the analysis and processing plan; wherein the identification information of each target platform and the corresponding analysis and processing plan are stored through the second preset database.

[0014] In an optional embodiment of the present application, if the alarm information is not generated by the target network connection failure corresponding to the target network type, the alarm information is analyzed by the dial test analysis component to obtain an initial result, including: determining at least one error information generated by the alarm information by the dial test analysis component; determining the error type corresponding to each error information, and clustering each error information based on the error type; generating an error information report log based on the clustering result, and obtaining the initial result based on the error information report log.

[0015] In a second aspect, the embodiments of the present application provide an alarm processing device, including: a first display module configured to display a plurality of selectable network types on a configuration interface of a detection system, and display at least one selectable application corresponding to at least one selected target network type in response to a first selection operation on the at least one selectable network type; an application dial test module configured to perform dial test on at least one first application selected by a second selection operation in response to the second selection operation on the at least one selectable application, and obtain dial test results of each first application by the detection system; an abnormal application obtaining module configured to, if an abnormal dial test result is detected, take the first application corresponding to the abnormal dial test result as a second application; a second display module configured to display an abnormal analysis result for each second application on a display interface of an analysis system; the abnormal analysis result includes detailed data of the dial test result of the second application and an abnormal handling strategy for the dial test result; an abnormal result analysis module configured to obtain alarm information for the second application sent by the detection system; obtain a dial test analysis component corresponding to the alarm information, and analyze the alarm information by the dial test analysis component to obtain an initial result; render the initial result to obtain the abnormal analysis result.

[0016] In an optional embodiment of the present application, the second display module is specifically configured to: display title information of at least one analysis result about the second application; each title information corresponds to an analysis result of the second application in one dimension; display brief information of the dial test result corresponding to any title information in response to a first trigger operation on a first control corresponding to any title information; display detailed data information of the dial test result and an abnormal handling strategy for the dial test result in response to a second trigger operation on a second control in the brief information.

[0017] In an optional embodiment of the present application, if the interface for displaying the detailed data information of the test result comprises a third control; the apparatus further comprises a chart display module, specifically configured to: display a preset selectable chart display type in response to a triggering operation on the third control; generate a target chart based on the target chart display type and the detailed data of the test result in response to a confirmation operation on the target chart display type; wherein the target chart is of the target chart display type and contains the detailed data; display the target chart in the current interface.

[0018] In an optional embodiment of the present application, the abnormal result analysis module is specifically configured to: obtain a test analysis component corresponding to the alarm information based on a preset matching rule; The preset matching rule is generated based on the following manner: display a plurality of selectable rule matching dimensions in a rule configuration interface; generate the preset matching rule based on each rule matching dimension selected by a selection operation in response to the selection operation on at least one rule matching dimension.

[0019] In an optional embodiment of the present application, the abnormal result analysis module is further configured to: display each first application and a candidate test analysis component corresponding to each first application; the candidate test analysis component is matched from a plurality of selectable test analysis components based on a preset matching rule; determine the target candidate analysis component as the test analysis component in response to a confirmation operation on the target candidate analysis component.

[0020] In an optional embodiment of the present application, the apparatus further comprises an alarm information generation module, specifically configured to: obtain each performance data of the first application through a detection system when detecting a test operation on the first application; evaluate each performance data based on a preset algorithm to obtain an evaluation result for the first application; determine the first application as the second application if the evaluation result is not within a preset normal evaluation range, and generate corresponding initial alarm information based on the evaluation result; determine the interference information in the initial alarm information, delete the interference information from the initial alarm information, and obtain the alarm information.

[0021] In an optional embodiment of the present application, the apparatus further comprises a policy execution module, specifically configured to: obtain the degree of certainty of the test analysis component for the initial result based on the initial result; If the certainty is not less than the preset certainty, the abnormal processing strategy is executed after the initial result is rendered.

[0022] In an optional embodiment of the present application, the device further comprises an emergency processing device, specifically configured to: obtain an emergency degree corresponding to the initial result based on the initial result and a preset emergency degree calculation rule; If the emergency degree is not less than a first preset emergency degree, the initial result is rendered to obtain an analysis result, and the method further comprises: sending an emergency signal to a preset terminal through a preset emergency call system, so that the preset terminal processes the alarm information based on the emergency signal; If the emergency degree is less than a second preset emergency degree, the initial result is intercepted and is not rendered; storing the initial result into a first preset database.

[0023] In an optional embodiment of the present application, the abnormal result analysis module is further configured to: obtain operator information and machine room information corresponding to the target network type; obtain address information corresponding to the target network connection failure, and generate network information of the target network type based on the operator information, the machine room information and the address information; determine a corresponding target platform from a plurality of candidate platforms based on the network information, and obtain identification information of the target platform; invoke a corresponding analysis and processing plan from a second preset database based on the identification information, and obtain the initial result based on the analysis and processing plan; wherein the identification information of each target platform and the corresponding analysis and processing plan are stored through the second preset database.

[0024] In an optional embodiment of the present application, the abnormal result analysis module is further configured to: determine at least one error information generating the alarm information through a stress test analysis component; determine error types corresponding to each error information, and cluster each error information based on the error types; generate an error information report log based on the clustering result, and obtain the initial result based on the error information report log.

[0025] In a third aspect, the embodiments of the present application provide an electronic device, comprising a memory, a processor and a computer program stored in the memory; The processor executes the computer program to implement the method provided in the first aspect or any optional embodiment of the first aspect.

[0026] In a fourth aspect, the embodiments of the present application provide a computer readable storage medium, and the computer readable storage medium stores a computer program. The computer program is executed by a processor to implement the method provided in the first aspect or any optional embodiment of the first aspect.

[0027] The technical scheme provided by the embodiments of the present application has the beneficial effects that: When receiving the alarm information sent by the detection system, the real-time data of the corresponding application when the alarm information is sent is analyzed by the analysis system to find out the abnormal real-time data, and the corresponding abnormal processing strategy is proposed according to the abnormal real-time data, and the abnormal data and the abnormal processing strategy are displayed to the operation and maintenance personnel at the same time, which saves the human resources and the time of the operation and maintenance personnel to check the abnormality, improves the efficiency. Compared with the traditional processing method, it has stronger objectivity. BRIEF DESCRIPTION OF DRAWINGS

[0028] In order to more clearly illustrate the technical scheme in the embodiments of the present application, the drawings needed to be used in the description of the embodiments of the present application will be briefly introduced.

[0029] Figure 1 A flowchart of an alarm processing method provided by the embodiments of the present application; Figure 2 A flowchart of an abnormal result analysis method provided by the embodiments of the present application; Figure 3 An initialization interface example of an alarm processing system in an example of the embodiments of the present application; Figure 4 An operation interface example of instant detection in an example of the embodiments of the present application; Figure 5 A detection configuration modification interface example in an example of the embodiments of the present application; Figure 6 An abnormal analysis result example in an example of the embodiments of the present application; Figure 7 An alarm information example in an example of the embodiments of the present application; Figure 8 A diagnosis conclusion example for alarm information in an example of the embodiments of the present application; Figure 9 A chart example about the test data in an example of the embodiments of the present application; Figure 10 An example of a chart modification interface in an example of the embodiments of the present application; Figure 11 A whole system architecture diagram of an alarm processing method in an example of the embodiments of the present application; Figure 12 A flowchart of an alarm processing method in one example of an embodiment of the present application; Figure 13 A practical architecture flowchart of an alarm processing method in one example of an embodiment of the present application; Figure 14 An analysis flowchart of an alarm analysis method in one example of an embodiment of the present application; Figure 15 An example diagram of basic alarm information provided by an analysis system in one example of an embodiment of the present application; Figure 16 An example diagram of analysis results after analysis of basic alarm information provided by an analysis system in one example of an embodiment of the present application; Figure 17 An example diagram of types of stress test abnormal error information obtained by system analysis in one example of an embodiment of the present application; Figure 18 A structural block diagram of an alarm processing apparatus provided by an embodiment of the present application; Figure 19 A structural schematic diagram of an electronic device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0030] Embodiments of the present application will be described herein below with reference to the accompanying drawings. It should be understood that the embodiments described below with reference to the accompanying drawings are exemplary descriptions of the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions of the embodiments of the present application. Those skilled in the art can understand that, unless specifically stated, the singular forms "a", "an" and "the" used herein can also include the plural forms. It should be further understood that the terms "comprise" and "include" used in the embodiments of the present application mean that the corresponding features can be implemented as the presented features, information, data, steps, operations, elements and / or components, but do not exclude other features, information, data, steps, operations, elements, components and / or combinations thereof supported by the present technology. It should be understood that when we say that an element is "connected" or "coupled" to another element, the element can be directly connected or coupled to the other element, or it can mean that the element and the other element are connected through an intermediate element. In addition, "connected" or "coupled" used herein can include wireless connection or wireless coupling. The term "and / or" used herein indicates that at least one of the items defined by the term, for example, "A and / or B" can be implemented as "A", or as "B", or as "A and B". When describing a plurality of (two or more) items, if the relationship between the plurality of items is not specifically limited, the plurality of items can mean one, more or all of the plurality of items, for example, for the description of "parameters A include A1, A2, A3", it can be implemented that the parameter A includes A1 or A2 or A3, or it can be implemented that the parameter A includes at least two of the three parameters A1, A2 and A3.

[0031] The alarm processing method in the embodiments of the present application can be implemented based on artificial intelligence. Artificial intelligence (AI) is a theory, method, technology and application system for simulating, extending and expanding human intelligence by using a digital computer or a machine controlled by a digital computer, perceiving an environment, acquiring knowledge and using the knowledge to obtain the best results. In other words, artificial intelligence is a comprehensive technology of computer science, which attempts to understand the essence of intelligence and produce a new intelligent machine that can react in a similar way to human intelligence. Artificial intelligence is to study the design principles and implementation methods of various intelligent machines, so that machines have the functions of perception, reasoning and decision-making. Artificial intelligence technology is a comprehensive discipline, involving a wide range of fields, including both hardware and software technologies. Artificial intelligence basic technologies generally include technologies such as sensors, special artificial intelligence chips, cloud computing, distributed storage, big data processing technology, operation / interaction system, mechatronics, etc. Artificial intelligence software technologies mainly include computer vision technology, speech processing technology, natural language processing technology, and machine learning / deep learning, autonomous driving, intelligent transportation, etc. Machine learning (ML) is a multi-disciplinary subject, involving probability theory, statistics, approximation theory, convex analysis, algorithm complexity theory, etc. It is a subject that studies how computers simulate or implement human learning behavior to acquire new knowledge or skills, and reorganize existing knowledge structure to continuously improve their performance. Machine learning is the core of artificial intelligence and the fundamental approach to enabling computers to have intelligence, and its applications span all areas of artificial intelligence. Machine learning and deep learning usually include artificial neural networks, belief networks, reinforcement learning, transfer learning, inductive learning, and example-based learning. In the specific embodiments of the present application, any data related to the object involved in the process of using the application program is involved. When the embodiments of the present application are applied to specific products or technologies, the permission or consent of the object is required, and the collection, use and processing of related data need to comply with relevant laws, regulations and standards of the country and region. That is, if any of the above data related to the object is involved in the embodiments of the present application, these data need to be obtained with the authorization and consent of the object, and in compliance with the relevant laws, regulations and standards of the country and region.

[0032] The technical solutions of the embodiments of the present application and the technical effects produced by the technical solutions of the present application will be described below through the description of several exemplary embodiments. It should be pointed out that the following embodiments can be mutually referenced, borrowed or combined. For the same terms, similar features and similar implementation steps in different embodiments, they will not be described repeatedly.

[0033] Figure 1A flowchart of an alarm processing method is provided for an embodiment of the present application. The execution subject of the method can be a terminal (such as a computer, a mobile phone, etc.), as shown in the figure, the method can include: Figure 1 Step S101: In the configuration interface of the detection system, a plurality of selectable network types are displayed. In response to a first selection operation on at least one selectable network type, at least one selected target network type is displayed, and at least one selectable application corresponding to the target network type is displayed.

[0034] In the present application, a plurality of selectable network types are provided, including a public network, an IDC (Internet Data Center) in a company, and a private cluster, etc. Each target network type includes a plurality of selectable applications. The application can be an application program, an IP (Internet Protocol) address, a website, etc., which is not limited in the present application.

[0035] Specifically, when an operation and maintenance personnel needs to detect a specific application, the detection system can be opened. The terminal displays an initialization interface as shown in the figure. After the operation and maintenance personnel clicks the "start detection" button, the terminal displays the configuration interface of the detection system on the terminal screen, and displays a plurality of selectable network types on the configuration interface of the detection system. When the operation and maintenance personnel selects (i.e., a first selection operation) a target network type from the plurality of selectable network types, the configuration interface of the detection system jumps to a plurality of selectable applications under the target network type. Figure 3

[0036] Step S102: In response to a second selection operation on at least one selectable application, the detection system detects the at least one first application selected by the second selection operation, and obtains the detection result of each first application.

[0037] The detection can be a test access to the target application. The detection result is the data result obtained by the detection system after detecting each first application selected by the operation and maintenance personnel, which includes the performance data of each first application in each dimension obtained in this detection.

[0038] Specifically, after the operation and maintenance personnel selects the first application, the detection system can start to detect each first application selected by the operation and maintenance personnel, and obtain the detection result of each first application in this detection after the detection is completed.

[0039] ​​Optionally, in the embodiment of the present application, the operation and maintenance personnel can select the instant detection or periodic detection mode according to the needs, the instant detection can also be understood as one-time detection, that is, after the operation and maintenance personnel issues the instruction of "performing detection", the detection system starts to perform one-time detection on the selected first applications; the periodic detection is that the operation and maintenance personnel sets the detection period in advance, and the detection system can perform detection on the first applications every detection period.

[0040] Optionally, in the embodiment of the present application, the operation and maintenance personnel can also customize the detection task, which can be specifically as shown in Figure 4 Figure 4 Taking the instant detection as an example, the operation and maintenance personnel can input the target website that needs to be detected, and can also select the protocol type (IPV4 or IPV6); after the operation and maintenance personnel clicks the "detect" button, the execution record after the start of the detection system can be displayed below the interface, the execution record contains the detailed information of the detection task, and the operation and maintenance personnel can also search the detection execution record that needs to be searched through the keyword search method.

[0041] It should be noted that in the embodiment of the present application, the operation and maintenance personnel can also modify the detection object and the corresponding detection configuration at any time during the test process, which has high flexibility. Specifically, it can be as shown in Figure 5 for example, as shown in Figure 5 The detection system can be selected to perform the follow-up operation of the detection point in real time, and how to analyze the DNS (Domain Name System), and a plurality of network operators are provided (such as intranet, mobile, and telecom, etc.), and the operation personnel can complete the modification of the detection configuration after clicking the "submit" button.

[0042] In step S103, if the abnormal test result is detected, the first application corresponding to the abnormal test result is taken as the second application.

[0043] Specifically, when the first application appears abnormal data in the test process, the detection system marks the first application as an abnormal application (i.e. the second application) so as to facilitate subsequent further analysis and processing.

[0044] In step S104, for each second application, the abnormal analysis result of the second application is displayed on the display interface of the analysis system; the abnormal analysis result includes the detailed data of the test result of the second application and the abnormal processing strategy for the test result.

[0045] The abnormal processing strategy is the processing mode for the abnormality of the second application, the analysis system provided in the embodiment of the present application can not only analyze the reason for the abnormality of the second application, but also can give the corresponding processing suggestion for the reference of the operation and maintenance personnel.​

[0046] Specifically, after the detection system determines the second application, the corresponding alarm information is generated according to each second application, and the alarm information is sent to the analysis system. The analysis system analyzes each second application based on each alarm information, obtains an abnormal analysis result, and displays the abnormal analysis result on a display interface of the analysis system for an operation and maintenance personnel. The operation and maintenance personnel can select an abnormal processing strategy given by the analysis system according to detailed data in the abnormal analysis result, or select other processing strategies.

[0047] Figure 2 A flowchart of an alarm processing method is provided for the embodiments of the present application. The execution subject of the method can be a terminal (for example, a computer, a mobile phone, etc.), as shown in Figure 2 The method can include the following steps. Step S201: Alarm information for a second application sent by a detection system is acquired.

[0048] Specifically, the alarm information is sent by the detection system after determining the second application according to real-time data of each second system.

[0049] Step S202: A stress test analysis component corresponding to the alarm information is acquired, and the alarm information is analyzed through the stress test analysis component to obtain an initial result.

[0050] The stress test analysis component can also be referred to as a stress test analysis atom, and can be used to process and analyze stress test data. The initial result is a non-visual result obtained after analysis by the detection system. The initial result needs to be rendered to obtain a visual abnormal analysis result that can be displayed on a terminal display screen.

[0051] Specifically, after the analysis system receives the alarm information, the stress test analysis component that needs to analyze the alarm information can be selected according to the alarm information, and then the alarm information is analyzed through the stress test analysis component, and a non-visual initial analysis result is output.

[0052] Step S203: The initial result is rendered to obtain an abnormal analysis result.

[0053] The scheme provided in the present application analyzes real-time data of an application corresponding to the alarm information when the alarm information sent by the detection system is received, finds out abnormal real-time data, proposes a corresponding abnormal processing strategy according to the abnormal real-time data, and displays the abnormal data and the abnormal processing strategy to an operation and maintenance personnel, thereby saving human resources and time for the operation and maintenance personnel to troubleshoot the abnormality, improving efficiency. Compared with the traditional processing method, the scheme has stronger objectivity.

[0054] In an optional embodiment of the present application, the abnormal analysis result for the second application is displayed, and specifically includes: The title information of at least one analysis result about the second application is displayed; wherein each title information corresponds to the abnormal analysis result of the second application in one dimension; In response to the first trigger operation of the first control corresponding to any title information, the brief information of the stress test result corresponding to any title information is displayed; In response to the second trigger operation of the second control in the brief information, the detailed data information of the stress test result and the abnormal processing strategy for the stress test result are displayed.

[0055] The title information can represent the dimension of any second application. The dimension can represent the analysis result of the second application in one aspect, such as the machine room network, IP address, etc. The control can be used to expand the further information corresponding to the title information. By default, the terminal only displays the identifier of the control and does not display the further information of the title information. When the operation and maintenance personnel click the control, the terminal can display the further information corresponding to the title information.

[0056] Specifically, in the embodiment of the present application, as shown in Figure 6 The terminal displays the title information about multiple dimensions of the second application, and each title information (TGET machine room network analysis, access failure diagnosis) displays the corresponding first control. When the operation and maintenance personnel click the first control (i.e. the first trigger operation of the first control), more brief information (machine room network information, clustering mutation analysis, TGET stress test source IP clustering / mutation analysis, TGET stress test source machine room clustering / mutation analysis, TGET stress test source IP version clustering / mutation analysis, TGET stress test target IP clustering / mutation analysis, TGET stress test return code clustering / mutation analysis) and the corresponding second control are further displayed. When the operation and maintenance personnel click the second control in the brief information again, more detailed data information and the corresponding abnormal processing strategy are further displayed.

[0057] Optionally, in the embodiment of the present application, the abnormal analysis result can also include the overall alarm content interface and the specific diagnosis conclusion. For example, as shown in Figure 7 and Figure 8 , Figure 7 The reason for the alarm (XXXXX stress test abnormality), the province of the client sending the alarm, the time range of the alarm, the specific project of the alarm, the alarm application, the index triggering the alarm (success rate), the specific alarm content (the success rate is 96.373057%, which is in the alarm interval) and the abnormal time are displayed. Figure 8The interface displays the overall conclusion of the current stress test failure and the analysis process of the analysis system on the alarm information. The interface can enable the operation and maintenance personnel to quickly understand the overall cause of the alarm, can quickly locate for the operation and maintenance personnel, and improves the efficiency of processing the alarm.

[0058] In an optional embodiment of the present application, if the interface for displaying the detailed data information of the stress test result exists a third control; the method further specifically comprises: In response to a triggering operation on the third control, a preset selectable chart display type is displayed; In response to a confirmation operation on the target chart display type, a target chart is generated based on the target chart display type and the detailed data of the stress test result; wherein the target chart is of the target chart display type and contains the detailed data; The target chart is displayed in the current interface.

[0059] Specifically, in order to enable the operation and maintenance personnel to more clearly understand the cause of sending the alarm, the analysis system can also draw the corresponding chart based on the detailed data of the stress test result, and the chart can enable the operation and maintenance personnel to more intuitively understand the situation of the data mutation or abnormality of the second application in a certain period. Meanwhile, the operation and maintenance personnel can also select a suitable icon display type for chart drawing according to their own personal habits. Figure 9 For a chart example, the horizontal coordinate represents the date, and the vertical coordinate represents the number of failed stress test operations (i.e. Failed_req). Optionally, the embodiments of the present application can also convert the generated chart in real time according to the needs, which can be specifically as follows: Figure 10 For example, in Figure 10 , the required options can be selected in the drop-down box according to the actual needs, and after clicking "Query", the analysis system can display the corresponding chart according to the selected options (such as setting a preset period through the drop-down box, and then displaying the data change chart in the preset period).

[0060] In an optional embodiment of the present application, the stress test analysis component corresponding to the alarm information is obtained, specifically comprising: The stress test analysis component corresponding to the alarm information is obtained based on a preset matching rule; The preset matching rule is generated based on the following manner: A plurality of selectable rule matching dimensions are displayed in a rule configuration interface; In response to a selection operation on at least one rule matching dimension, and based on each rule matching dimension selected by the selection operation, a preset matching rule is generated.

[0061] Specifically, in the embodiment of the present application, the terminal displays a plurality of configuration boxes of dimensions that can be set, and the operation and maintenance personnel can select the dimensions that need to be detected according to actual needs. After the selection is completed, the analysis system can generate a corresponding preset matching rule based on the selected dimensions, and then select a corresponding dialysis analysis component for the alarm information sent by the detection system according to the preset matching rule.

[0062] The embodiment of the present application provides a selectable detection environment for the operation and maintenance personnel, so that the operation and maintenance personnel do not need to perform detection of the application in a single fixed configuration environment, and the flexibility is high. Meanwhile, the operation and maintenance personnel can select some dimensions not to be detected, so that the resources of the detection system can be saved, the saved resources can be allocated to the dimensions that need to be detected, and the detection efficiency is further improved.

[0063] In an optional embodiment of the present application, the dialysis analysis component corresponding to the alarm information is obtained based on the preset matching rule, and specifically includes: The first application and the candidate dialysis analysis component corresponding to the first application are displayed; the candidate dialysis analysis component is matched from a plurality of selectable dialysis analysis components based on the preset matching rule; In response to the confirmation operation on the target candidate analysis component, the target candidate analysis component is used as the dialysis analysis component.

[0064] Specifically, in the embodiment of the present application, the analysis system can first obtain a plurality of candidate dialysis analysis components that can be used for the first application from all selectable dialysis analysis components based on the preset matching rule, and then can display all candidate dialysis analysis components to the operation and maintenance personnel through the terminal screen. The operation and maintenance personnel can select the optimal dialysis analysis component as the target dialysis analysis component according to actual needs. When the operation and maintenance personnel complete the selection and confirmation, the analysis system can use the selected target dialysis analysis component as the dialysis analysis component for analyzing the alarm information of the application in the subsequent process.

[0065] In an optional embodiment of the present application, the alarm information is generated in the following manner: When the dialysis operation for the first application is detected, the performance data of the first application is obtained through the detection system; The performance data is evaluated based on a preset algorithm, and an evaluation result for the first application is obtained; If the evaluation result is not in a preset normal evaluation interval, the first application is used as the second application, and the corresponding initial alarm information is generated based on the evaluation result; The interference information in the initial alarm information is determined, the interference information is deleted from the initial alarm information, and the alarm information is obtained.

[0066] The preset algorithm used in the embodiments of the present application can include but is not limited to threshold algorithm, fluctuation algorithm and machine learning algorithm, which can accurately detect and analyze abnormal points in performance data. The threshold algorithm quickly identifies the dimension indicators that exceed the normal range by comparing real-time data with preset performance standards. The fluctuation algorithm detects the change trend of the indicators and identifies unusual fluctuation patterns, while the machine learning algorithm uses historical data to predict and identify potential abnormal behaviors. These algorithms work together to ensure that the detection system can timely send alarm information when there are signs of performance degradation or service interruption.

[0067] Specifically, when the detection system probes the first application, the detection system obtains the probing result of the first application about this time of probing. The probing result can include performance data (such as success rate, etc.) of the first application in each selected dimension of this time of probing. Then, the detection system evaluates whether the data obtained this time of probing is normal according to the preset normal threshold range interval in this dimension. If the data obtained this time of probing is within the normal threshold range interval in this dimension, it indicates that the first application is in a normal state. If the data obtained this time of probing is not within the normal threshold range interval in this dimension, it indicates that the first application is in an abnormal state. At this time, the detection system can mark the first application as a second application and generate initial alarm information for the second application according to the evaluation result. Generally, the initial alarm information usually contains a large amount of interference information, which will interfere with the accurate judgment of the abnormality. At this time, the preset filtering layer can be used to clean up these interference information to avoid the interference of interference information on the analysis of the subsequent analysis system, and further improve the accuracy of the analysis.

[0068] In an optional embodiment of the present application, the method further specifically includes: Based on the initial result, the determination degree of the probing analysis component for the initial result is obtained. If the determination degree is not less than the preset determination degree, the abnormal processing strategy is executed after the initial result is rendered.

[0069] Specifically, in the embodiments of the present application, after the analysis system obtains the initial result, the determination degree of the obtained initial result is calculated. The determination degree can represent the degree of accuracy of the analysis system in this time of abnormal analysis. Generally, the higher the determination degree, the more accurate the analysis system is in this time of abnormal analysis. When the determination degree is not less than the preset determination degree, it indicates that the result obtained this time of analysis is almost completely correct. Therefore, after the abnormal analysis result is displayed, the abnormal processing strategy obtained this time of analysis can be directly executed, without the need for operation and maintenance personnel to process it, which can further save human resources.

[0070] In an optional embodiment of the present application, before rendering the initial result, the method specifically comprises: Based on the initial result and a preset emergency degree calculation rule, an emergency degree corresponding to the initial result is obtained; If the emergency degree is not less than a first preset emergency degree, the initial result is rendered to obtain an analysis result, and the method further specifically comprises: An emergency signal is sent to a preset terminal through a preset emergency call system, so that the preset terminal processes the alarm information based on the emergency signal; If the emergency degree is less than a second preset emergency degree, the initial result is intercepted and the initial result is not rendered; The initial result is stored in a first preset database.

[0071] The preset terminal can be a terminal device carried by an operation and maintenance personnel, or a special notification terminal for processing emergency events.

[0072] Specifically, since part of the detection tasks are performed in real time, and the operation and maintenance personnel cannot pay attention to the detection terminal in real time, the analysis system in the embodiment of the present application can further judge the initial result of the alarm information through a preset emergency degree calculation rule.

[0073] If the emergency degree is high (i.e., not less than the first preset emergency degree), it means that the abnormality needs to be processed in time, at this time, an emergency signal can be immediately sent to the terminal (such as a mobile phone) carried by the operation and maintenance personnel through a preset emergency call system (on call), so that the operation and maintenance personnel can receive the alarm in time and process it in time; or an emergency signal is sent to a preset duty room through the preset emergency call system to notify the current on-duty personnel, so that the current on-duty personnel can perform emergency processing or contact relevant operation and maintenance personnel for timely processing.

[0074] If the emergency degree is low (i.e., less than the second preset emergency degree), it means that the abnormality can be a detection error, at this time, the initial result is intercepted, and the operation and maintenance personnel does not need to be actively shown the abnormality analysis result, but at the same time, the initial result generated this time is stored in a first preset database, so as to provide analysis support data for the operation and maintenance personnel in the future.

[0075] Next, the overall flow of the alarm processing method provided by the embodiment of the present application will be briefly introduced in combination with the drawings. As shown in Figure 11 Figure 11 ​This is a diagram illustrating the overall system architecture of the alarm processing method provided in this application embodiment. The terminal includes a detection system and an analysis system. The detection system uses a preset algorithm to determine whether abnormal data exists in the target application being detected (which can also be single-machine resource detection, process resource detection, business detection, etc.). When abnormal data is generated, an alarm message is issued (which can be categorized as request / traffic alarm, status code alarm, failure origin rate alarm, etc.). After receiving the alarm message, the analysis system first removes interference information from the alarm message through a filtering layer. Then, it uses a central control service to match and converge statistics of the alarm message using a dial-up analysis component (such as SSS script atoms). Next, it analyzes and interprets the alarm message using the matched dial-up analysis component. Simultaneously, it can further analyze the alarm message using log analysis tools combined with historical logs to obtain initial results and determine whether the alarm needs to be displayed on the front end. If so, the initial results are rendered on the front end through a rendering layer, and the rendered anomaly analysis results are displayed. If not, the anomaly is intercepted, and the alarm is recorded in a first preset database. At the same time, the urgency of this alarm is assessed. If the urgency is high, the maintenance personnel can be notified promptly by phone.

[0076] Figure 12 This is a flowchart illustrating an alarm processing method provided in an embodiment of this application, as shown below. Figure 12 As shown, after the operations and maintenance personnel configure the detection settings, the detection system begins to detect the target application. When an anomaly is detected in the probe test results, the detection system will send an alarm message to the analysis system. The analysis system first preprocesses the alarm message on the server side (i.e., removes interference information and performs a certain amount of incremental information and analysis). Then, according to the generated preset matching rules (including content, policy name, indicator name, custom parameters, etc., and also supports IP analysis and CDN static scene logoro analysis), it matches the corresponding probe test analysis component and obtains the analysis results through asynchronous analysis processing by the probe test analysis component. Then, it determines whether the analysis results need to be notified to the on-duty team. If so, it notifies through the oncall system. If not, it intercepts the analysis results and records them in the second preset database, and creates a work order for this anomaly record. This work order will contain all relevant alarm information and analysis results, ensuring that the operations and maintenance team can review and handle them when needed.

[0077] Figure 13 This is a schematic diagram of the actual architecture of an alarm processing method provided in an embodiment of this application, as shown below. Figure 13As shown, when the probe system end detects a stress test anomaly, it will generate an alarm information and send it to the analysis system front end, and also can add the polling of the detection task which is not analyzed to the analysis system; the automatic polling function of the analysis system front end can ensure that all detection items are captured in time and added to the analysis system, and the preset matching rule is sent to the analysis system service end to match the corresponding stress test analysis component. After the analysis system service end pre-processes the alarm information (such as removing interference information and information increment), the alarm information is sent to the stress test analysis component for analysis. After the stress test analysis component completes the analysis, the initial result (i.e. the processing result in the figure) is returned to the service end. The service end determines whether the initial result needs to be displayed at this time. If it needs, the initial result is rendered and displayed to the operation and maintenance personnel.

[0078] In an optional embodiment of the present application, if the alarm information is generated based on the target network type corresponding to the target network connection failure, the alarm information is analyzed by the stress test analysis component to obtain the initial result, which specifically includes: obtaining operator information and machine room information corresponding to the target network type; obtaining address information corresponding to the target network connection failure, and generating network information of the target network type based on the operator information, the machine room information and the address information; determining the corresponding target platform from the plurality of candidate platforms based on the network information, and obtaining the identification information of the target platform; calling the corresponding analysis and processing plan from the second preset database based on the identification information, and obtaining the initial result based on the analysis and processing plan; wherein the identification information of each target platform and the corresponding analysis and processing plan are stored through the second preset database.

[0079] Specifically, as shown in Figure 14 Before the analysis system analyzes the alarm information, the information of the operation and maintenance personnel can be obtained in advance, so that the operation and maintenance personnel can be contacted quickly when the alarm occurs. After obtaining the alarm information and starting the analysis, the analysis system will first make a preliminary judgment on the abnormality that generates the alarm information to determine whether it is caused by the target network connection failure. If it is, it is possible that the operator or the machine room corresponding to the target network type has an abnormality, so the corresponding operator information, machine room information and failed IP address information are further obtained, and the target network platform to which the network information belongs is determined based on the above-mentioned network information, and the identification information of the target platform is obtained. Since the second preset database stores the identification information of each target platform and the analysis and processing plan corresponding to the abnormality, with the identification information, the corresponding analysis and processing plan can be matched from the second preset database, and the initial result can be obtained based on the analysis and processing plan.

[0080] Figures 15-17An abnormal analysis result example diagram of target network connection failure provided by an embodiment of the present application. After a certain probing operation, an alarm information is generated, Figure 15 An example diagram of basic alarm information provided by the analysis system, Figure 15 It can be seen that the overall reason for this alarm is that dcache.hy.qcloudcdn.com fails to be resolved in Hunan Telecom. Figure 16 An example diagram of analysis result after analyzing the basic alarm information provided by the analysis system, Figure 16 It can be found that a certain IP in a certain computer room of Changsha Telecom has a clustering failure, and the failure rate is as high as 100%. Figure 17 An example diagram of error information type obtained by the analysis system in this probing exception, Figure 17 It can be seen that the error type "waiting for the first packet of the server timeout" accounts for 100%. Therefore, it can be Figure 16 The identification information (Plat_id) in the above-mentioned alarm information is matched with the corresponding analysis and processing plan from the second preset database. According to the analysis and processing plan, "most of them are server problems, and are single computer room clustering, single IP clustering, and IP disabling operation". Finally, the analysis system can obtain the abnormal processing strategy "currently, the IP needs to be disabled" according to the above-mentioned analysis and processing plan.

[0081] In an optional embodiment of the present application, if the alarm information is not generated by the target network connection failure of the target network type, the alarm information is analyzed by the probing analysis component to obtain an initial result, including: At least one error information is determined by the probing analysis component to generate the alarm information; The error types corresponding to each error information are determined, and each error information is clustered based on the error types; The error information report log is generated based on the clustering result, and the initial result is obtained based on the error information report log.

[0082] Specifically, as shown in Figure 14 If the analysis system detects that the reason is not the target network connection failure, further error information needs to be found, at which time the alarm information can be further analyzed by the probing analysis component to find at least one error information. After finding each error information, each error information can be further clustered according to the type of each error information, and a detailed error information report log is generated. These report logs can be used to further obtain the initial result, and can also be used for subsequent operation and maintenance personnel to view and analyze and process.

[0083] Figure 18 A structure block diagram of an alarm processing device provided by an embodiment of the present application, as Figure 18As shown, the alarm processing apparatus 1800 can include a first display module 1801, an application dialing module 1802, an abnormal application obtaining module 1803, a second display module 1804, and an abnormal result analysis module 1805, wherein The first display module 1801 is configured to display a plurality of selectable network types on a configuration interface of a detection system, and in response to a first selection operation on at least one selectable network type, display at least one selectable application corresponding to at least one selected target network type, respectively. The application dialing module 1802 is configured to, in response to a second selection operation on at least one selectable application, dial at least one first application selected by the second selection operation through the detection system, and obtain dialing results of the first applications. The abnormal application obtaining module 1803 is configured to, if it is detected that there is an abnormal dialing result, take the first application corresponding to the abnormal dialing result as a second application. The second display module 1804 is configured to, for each second application, display an abnormal analysis result of the second application on a display interface of an analysis system; the abnormal analysis result includes detailed data of the dialing result of the second application and an abnormal handling strategy for the dialing result. The abnormal result analysis module 1805 is configured to obtain alarm information of the second application sent by the detection system. Obtain a dialing analysis component corresponding to the alarm information, and analyze the alarm information through the dialing analysis component to obtain an initial result. Render the initial result to obtain an abnormal analysis result.

[0084] The scheme provided in the present application, when receiving alarm information sent by a detection system, analyzes real-time data of an application corresponding to the alarm information through an analysis system, finds out real-time data that appears to be abnormal, proposes a corresponding abnormal handling strategy according to the real-time data that appears to be abnormal, and displays the abnormal data and the abnormal handling strategy to an operation and maintenance personnel, thereby saving human resources and time for the operation and maintenance personnel to troubleshoot the abnormality, improving efficiency. Compared with the traditional processing method, the scheme has stronger objectivity.

[0085] In an optional embodiment of the present application, the second display module is specifically configured to: Display title information about at least one analysis result of the second application; wherein each title information corresponds to an analysis result of the second application in one dimension; In response to a first trigger operation on a first control corresponding to any title information, display brief information of a dialing result corresponding to the any title information; In response to a second triggering operation on the second control in the brief information, detailed data information of the dial test result and an abnormal processing strategy for the dial test result are displayed.

[0086] In an optional embodiment of the present application, if a third control exists in the interface in which the detailed data information of the dial test result is displayed, the apparatus further comprises a chart display module, which is specifically configured to: In response to a triggering operation on the third control, a preset selectable chart display type is displayed; In response to a confirmation operation on the target chart display type, a target chart is generated based on the target chart display type and the detailed data of the dial test result; the target chart is of the target chart display type and contains the detailed data; The target chart is displayed in the current interface.

[0087] In an optional embodiment of the present application, the abnormal result analysis module is specifically configured to: Based on a preset matching rule, a dial test analysis component corresponding to the alarm information is obtained; The preset matching rule is generated based on the following manner: In a rule configuration interface, a plurality of selectable rule matching dimensions are displayed; In response to a selection operation on at least one rule matching dimension, the preset matching rule is generated based on each rule matching dimension selected by the selection operation.

[0088] In an optional embodiment of the present application, the abnormal result analysis module is further configured to: Each first application and a candidate dial test analysis component corresponding to each first application are displayed; the candidate dial test analysis component is matched from a plurality of selectable dial test analysis components based on a preset matching rule; In response to a confirmation operation on a target candidate analysis component, the target candidate analysis component is taken as a dial test analysis component.

[0089] In an optional embodiment of the present application, the apparatus further comprises an alarm information generation module, which is specifically configured to: When a dial test operation on the first application is detected, each performance data of the first application is obtained through a detection system; Each performance data is evaluated based on a preset algorithm to obtain an evaluation result for the first application; If the evaluation result is not in a preset normal evaluation interval, the first application is taken as a second application, and corresponding initial alarm information is generated based on the evaluation result; The interference information in the initial alarm information is determined, the interference information is deleted from the initial alarm information, and the alarm information is obtained.

[0090] In an optional embodiment of the present application, the apparatus further comprises a policy execution module, specifically configured to: based on the initial result, obtain a degree of certainty of the initial result by the stress test analysis component; if the degree of certainty is not less than a preset degree of certainty, perform an abnormality processing policy after rendering the initial result.

[0091] In an optional embodiment of the present application, the apparatus further comprises an emergency processing apparatus, specifically configured to: based on the initial result and a preset emergency degree calculation rule, obtain an emergency degree corresponding to the initial result; if the emergency degree is not less than a first preset emergency degree, perform rendering on the initial result to obtain an analysis result, and the method further comprises: sending an emergency signal to a preset terminal through a preset emergency call system, so that the preset terminal processes the alarm information based on the emergency signal; if the emergency degree is less than a second preset emergency degree, intercept the initial result and do not perform rendering on the initial result; store the initial result in a first preset database.

[0092] In an optional embodiment of the present application, the abnormal result analysis module is further configured to: obtain operator information and machine room information corresponding to the target network type; obtain address information corresponding to the target network connection failure, and generate network information of the target network type based on the operator information, the machine room information and the address information; determine a corresponding target platform from a plurality of candidate platforms based on the network information, and obtain identification information of the target platform; invoke a corresponding analysis and processing plan from a second preset database based on the identification information, and obtain the initial result based on the analysis and processing plan; wherein the identification information of each target platform and the corresponding analysis and processing plan are stored through the second preset database.

[0093] In an optional embodiment of the present application, the abnormal result analysis module is further configured to: determine at least one error information for generating the alarm information through the stress test analysis component; determine error types corresponding to each error information, and cluster each error information based on the error types; generate an error information report log based on the clustering result, and obtain the initial result based on the error information report log.

[0094] Reference will now be made to the following description Figure 19 which illustrates an electronic device (e.g., an electronic device 100) suitable for use in implementing embodiments of the present application. Figure 1 or Figure 2FIG. 19 is a block diagram of an electronic device 1900 according to an embodiment of the present application. The electronic device according to an embodiment of the present application can include, but is not limited to, a mobile terminal such as a mobile phone, a notebook computer, a digital broadcasting receiver, a PDA (Personal Digital Assistant), a PAD (a tablet PC), a PMP (a Portable Multimedia Player), a car terminal (e.g., a car navigation terminal), a wearable device, and the like, as well as a stationary terminal such as a digital TV, a desktop computer, and the like. Figure 19 The electronic device shown is merely an example and should not impose any limitation on the function and range of use of the embodiments of the present application.

[0095] The electronic device includes a memory for storing a program for executing the methods described above according to the various method embodiments, and a processor configured to execute the program stored in the memory. Here, the processor can be referred to as a processing device 1901 described below, and the memory can include at least one of a read-only memory (ROM) 1902, a random access memory (RAM) 1903, and a storage device 1908, as shown below. As shown, Figure 19 The electronic device 1900 can include a processing device (e.g., a central processing unit, a graphic processing unit, etc.) 1901 that can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 1902 or a program loaded from a storage device 1908 into a random access memory (RAM) 1903, as shown. In the RAM 1903, various programs and data required for the operation of the electronic device 1900 are also stored. The processing device 1901, the ROM 1902, and the RAM 1903 are connected to each other through a bus 1904. An input / output (I / O) interface 1905 is also connected to the bus 1904.

[0096] In general, the following devices can be connected to the I / O interface 1905: input devices 1906 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, and the like; output devices 1907 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, and the like; storage devices 1908 including, for example, a magnetic tape, a hard disk, and the like; and communication devices 1909. The communication devices 1909 can allow the electronic device 1900 to communicate wirelessly or wiredly with other devices to exchange data. Although Figure 19 The electronic device is shown with various devices, but it is understood that all of the shown devices are not required to be implemented or provided. More or less devices can alternatively be implemented or provided.

[0097] In particular, according to embodiments of the present application, the processes described above with reference to the flowcharts can be implemented as a computer software program. For example, embodiments of the present application include a computer program product comprising a computer program carried on a non-transitory computer-readable medium, the computer program containing program code for carrying out the methods illustrated by the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network by the communication device 1909, or installed from the storage device 1908, or installed from the ROM 1902. When the computer program is executed by the processing device 1901, the above-mentioned functions defined in the methods of embodiments of the present application are performed.

[0098] It should be noted that the computer-readable storage medium described above in the present application can be a computer-readable signal medium or a computer-readable storage medium or any combination of the two. The computer-readable storage medium may, for example, but is not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or apparatus, or any combination of the above. More specific examples of computer-readable storage media can include, but are not limited to, an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present application, the computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, device or apparatus. In the present application, the computer-readable signal medium can include a data signal carried in a baseband or as a part of a carrier wave, which carries computer-readable program code. Such a propagated data signal can take many forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination of the above. The computer-readable signal medium can also be any computer-readable medium other than the computer-readable storage medium, which can send, propagate or transmit a program for use by or in conjunction with an instruction execution system, device or apparatus. The program code contained on the computer-readable medium can be transmitted by any suitable medium, including but not limited to a wire, an optical fiber, an RF (radio frequency) or the like, or any suitable combination of the above.

[0099] In some embodiments, the client, server, or other computing machines communicating via the network can utilize any known or future developed network protocols, such as the HyperText Transfer Protocol (HTTP), to communicate. The computing machines can be interconnected by any form or medium of digital data communication (for example, a communication network) including present-day Internet technology, local area networks ("LAN"), wide area networks ("WAN"), public switched telephone networks, wired networks, wireless networks, fiber optic technology, and any future networking technology.

[0100] The computer readable medium described above can be included in the electronic device described above; or can exist separately from the electronic device and be not assembled into the electronic device.

[0101] The computer readable medium described above carries one or more programs, when the one or more programs are executed by the electronic device, the electronic device is caused to: In the configuration interface of the detection system, a plurality of selectable network types are displayed, in response to a first selection operation for at least one selectable network type, at least one selected target network type corresponding to at least one selectable application is displayed; in response to a second selection operation for at least one selectable application, the detection system is used to perform a test on at least one first application selected by the second selection operation, and test results of each first application are obtained; if an abnormal test result is detected, the first application corresponding to the abnormal test result is taken as a second application; for each second application, an abnormal analysis result of the second application is displayed on the display interface of the analysis system; the abnormal analysis result includes detailed data of the test result of the second application and an abnormal handling strategy for the test result; the abnormal analysis result is generated by the analysis system based on the following manner: alarm information of the second application sent by the detection system is obtained; a test analysis component corresponding to the alarm information is obtained, and the alarm information is analyzed by the test analysis component to obtain an initial result; the initial result is rendered to obtain the abnormal analysis result.

[0102] Computer program code for carrying out operations of the present application can be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C++ or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code can execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection can be made to an external computer (for example, through the Internet using an Internet Service Provider).

[0103] The computer program instructions can also be loaded onto a computer or other programmable information processing apparatus to cause a series of operations to be performed on the computer or other programmable information processing apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable information processing apparatus implement the functions / acts specified in the flowchart and / or block diagram block or blocks.

[0104] The modules or units described in the embodiments of the present application can be implemented by software, or by hardware, or by a combination of software and hardware. In some cases, the names of the modules or units do not constitute a limitation on the modules or units themselves. For example, the first constraint obtaining module can also be referred to as a "module that obtains a first constraint".

[0105] The functions described above in the specification of the present application can be performed by one or more hardware logic components. For example, and without limitation, illustrative types of hardware logic components that can be used include Field-programmable Gate Arrays (FPGAs), Program-specific Integrated Circuits (ASICs), Program-specific Standard Products (ASSPs), System-on-a-chip systems (SOCs), Complex Programmable Logic Devices (CPLDs), etc.

[0106] In the context of this application, a machine-readable medium can be a tangible medium that contains or stores a program for use by or in connection with an instruction execution system, apparatus, or device. The machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium can include but is not limited to an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples of the machine-readable storage medium will include one or more lines of electrical connections, portable computer disks, hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or Flash memory), optical fibers, portable compact disc read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination of the foregoing.

[0107] It should be understood that although the steps in the flowcharts of the drawings are shown in a sequential order, these steps can not necessarily be performed in the order shown. Unless explicitly stated, the steps can be performed in any order, and the execution of some steps can even be concurrent with the execution of others. Moreover, at least some of the steps in the flowcharts can include multiple sub-steps or multiple stages, which can be performed at different times or in different orders, and not necessarily sequentially.

[0108] The above description is merely exemplary of the application and should not be construed as limiting. Since modifications and variations of the specifically described embodiments of the application can be perceived by those of ordinary skill in the art, it is intended that the application encompass all such modifications and variations.

Claims

1. An alarm processing method, characterized in that, The method is applied to an alarm processing system, which includes a detection system and an analysis system, and includes: The configuration interface of the detection system displays multiple selectable network types. In response to a first selection operation for at least one selectable network type, at least one selectable application corresponding to each of the selected target network types is displayed. In response to a second selection operation for the at least one optional application, a probe system is used to probe at least one first application selected by the second selection operation to obtain probe results for each first application. If an abnormal dialing test result is detected, the first application corresponding to the abnormal dialing test result will be used as the second application. For each second application, the anomaly analysis results for the second application are displayed on the display interface of the analysis system; the anomaly analysis results include detailed data of the test results of the second application and anomaly handling strategies for the test results; The anomaly analysis results are generated by the analysis system based on the following method: Obtain alarm information issued by the detection system for the second application; Obtain the dial-up test analysis component corresponding to the alarm information, and analyze the alarm information through the dial-up test analysis component to obtain initial results; The initial result is rendered to obtain the anomaly analysis result.

2. The method according to claim 1, wherein displaying the anomaly analysis results for the second application includes: Display title information for at least one analysis result of the second application; wherein each title information corresponds to an anomaly analysis result of the second application in one dimension; In response to a first trigger operation on a first control corresponding to any title information, a brief description of the dialing result corresponding to any title information is displayed; In response to a second trigger operation on the second control in the description information, detailed data information of the dial test results and an exception handling strategy for the dial test results are displayed.

3. The method according to claim 2, characterized in that, If a third control exists in the interface displaying the detailed data information of the test results; the method further includes: In response to a trigger operation on the third control, a preset selectable chart display type is displayed; In response to a confirmation operation for a target chart display type, a target chart is generated based on the target chart display type and detailed data of the test results; wherein the target chart is the target chart display type and contains the detailed data; The target chart is displayed in the current interface.

4. The method according to claim 1, characterized in that, The probe analysis component for obtaining the alarm information includes: Based on preset matching rules, obtain the dial-up analysis component corresponding to the alarm information; The preset matching rules are generated based on the following method: The rule configuration interface displays multiple selectable rule matching dimensions; In response to a selection operation for at least one rule matching dimension, the preset matching rule is generated based on each rule matching dimension selected by the selection operation.

5. The method according to claim 4, characterized in that, The component for obtaining the corresponding test analysis information based on preset matching rules includes: The system displays each first application and its corresponding candidate dial-up analysis component; the candidate dial-up analysis component is obtained by matching from multiple optional dial-up analysis components based on the preset matching rules; In response to the confirmation operation for the target candidate analysis component, the target candidate analysis component is designated as the probe analysis component.

6. The method according to claim 1, characterized in that, The alarm information is generated in the following manner: When a test operation is detected targeting the first application, the detection system acquires various performance data of the first application. The performance data are evaluated based on a preset algorithm to obtain the evaluation results for the first application. If the evaluation result is not within the preset normal evaluation range, the first application will be used as the second application, and corresponding initial alarm information will be generated based on the evaluation result. The interference information in the initial alarm information is identified, and the interference information is deleted from the initial alarm information to obtain the alarm information.

7. The method according to claim 1, characterized in that, The method further includes: Based on the initial results, the degree of certainty of the test analysis component for the initial results is obtained; If the certainty is not less than the preset certainty, then the exception handling strategy is executed after rendering the initial result.

8. The method according to claim 1, characterized in that, Before rendering the initial result, the following steps are included: Based on the initial result and the preset urgency calculation rules, the urgency corresponding to the initial result is obtained; If the urgency level is not less than a first preset urgency level, after rendering the initial result to obtain the analysis result, the method further includes: An emergency signal is sent to a preset terminal through a preset emergency call system, so that the preset terminal processes the alarm information based on the emergency signal; If the urgency level is less than the second preset urgency level, the initial result is intercepted and the initial result is not rendered. The initial results are stored in the first preset database.

9. The method according to claim 1, characterized in that, If the alarm information is generated based on a target network connection failure corresponding to the target network type, the step of analyzing the alarm information through the dial-up analysis component to obtain initial results includes: Obtain the carrier information and data center information corresponding to the target network type; Obtain the address information corresponding to the target network connection failure, and generate network information of the target network type based on the operator information, the data center information, and the address information; Based on the network information, the corresponding target platform is determined from multiple candidate platforms, and the identification information of the target platform is obtained; Based on the identification information, the corresponding analysis and processing plan is retrieved from the second preset database, and the initial result is obtained based on the analysis and processing plan; wherein, the identification information of each target platform and the corresponding analysis and processing plan are stored in the second preset database.

10. The method according to claim 9, characterized in that, If the alarm information is not generated by a target network connection failure corresponding to the target network type, the step of analyzing the alarm information through the dial-up testing and analysis component to obtain initial results includes: The detection and analysis component determines at least one error message that generated the alarm information. Determine the error type corresponding to each error message, and cluster each error message based on its error type; An error message report log is generated based on the clustering results, and the initial result is obtained based on the error message report log.

11. An alarm processing device, characterized in that, include: The first display module is configured to display multiple selectable network types in the configuration interface of the detection system, and in response to a first selection operation for at least one selectable network type, display at least one selectable application corresponding to each of the selected target network types; The application testing module is used to respond to a second selection operation for the at least one selectable application, and to perform testing on the at least one first application selected by the second selection operation through a detection system to obtain the testing results of each first application. An abnormal application acquisition module is used to, if an abnormal dialing test result is detected, use the first application corresponding to the abnormal dialing test result as the second application. The second display module is used to display the anomaly analysis results for each second application on the display interface of the analysis system; the anomaly analysis results include detailed data of the test results of the second application and anomaly handling strategies for the test results; An abnormal result analysis module is used to obtain alarm information issued by the detection system for the second application; Obtain the dial-up test analysis component corresponding to the alarm information, and analyze the alarm information through the dial-up test analysis component to obtain initial results; The initial result is rendered to obtain the anomaly analysis result.

12. An electronic device comprising a memory, a processor, and a computer program stored in the memory, characterized in that, The processor executes the computer program to implement the steps of the method according to any one of claims 1-10.

13. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1-10.

Images