Alarm system for monitoring network devices in virtualization platforms

Abstract

We provide an alarm system that monitors network devices in all directions, transmits alarms to a cloud server, and dispatches workers in real time. [Solution] An alarm system that monitors network devices on a virtualization platform includes a cloud server and a monitoring server installed on a different client platform. The monitoring server includes a log management module that analyzes whether a log transmitted by the network device contains an alarm event, a status test module that periodically sends a test signal to each network device and determines whether it is operating based on the test response returned, a status monitoring module that receives status information of the network devices and determines whether an abnormal condition has occurred, and a signal transmission module that transmits the information received and generated by these from the network devices to the cloud server.

Description

[Technical field]

[0001] The present invention relates to the field of network monitoring, and in particular to an alarm system for monitoring network devices in a virtualization platform. [Background technology]

[0002] Conventionally, a local network of an information and electronics company usually includes multiple network devices. In the conventional technology, when an abnormality occurs in a network device, such as a network cable being disconnected or a component being damaged, the user usually discovers that the network device needs repair, and then proactively contacts the manufacturer, and the manufacturer arranges for an engineer to go to the site to make repairs, or the engineer regularly inspects and repairs the network device.

[0003] However, this makes it difficult to timely inspect and maintain network devices, and some abnormalities do not immediately cause shutdowns, but still affect the performance of the devices. Therefore, if the state of each network device can be automatically detected through a monitoring system, and abnormalities in the network device can be detected in advance before the user discovers them, and workers can be automatically dispatched, the problem of shutting down the client's network device can be largely avoided. In addition, when the number of client's network devices is greatly expanded, how to quickly adjust the performance of the monitoring system to accommodate the huge number of devices is also an important issue.

[0004] In view of this, in response to the above-mentioned deficiencies in the prior art and future needs, the present invention proposes an alarm system for monitoring network devices in a virtualization platform, the specific structure and embodiments of which are detailed below. Summary of the Invention [Problem to be solved by the invention]

[0005] The objective of the present invention is to provide an alarm system for monitoring network devices in a virtualization platform, which acquires the device status of the network devices, acquires the logs of the network devices, monitors in all directions whether an abnormal state has occurred in the network devices, and returns an alarm to a cloud server.

[0006] Another object of the present invention is to provide an alarm system for monitoring network devices on a virtualization platform that can be deployed on different client virtualization platforms, and adjusts the configuration of hardware computing resources according to environmental conditions based on the characteristics of virtualization, and expands or contracts the hardware computing resources provided to the monitoring server according to an increase or decrease in the number of network devices to be monitored. [Means for solving the problem]

[0007] In order to achieve the above object, the present invention 1. An alarm system for monitoring network devices of a virtualization platform, comprising: At least one monitoring server installed in at least one client platform for monitoring a plurality of network devices of the client platform, the at least one monitoring server comprising: a log management module that receives logs transmitted by a plurality of network devices and analyzes whether the logs include an alarm event; a status test module for periodically sending a test signal to each network device and determining whether each network device is operational according to a test response sent back by each network device; a status monitoring module that receives status information of a plurality of network devices and determines whether an abnormality has occurred in the network devices; A monitoring server including: a signal transmission module connected to the log management module, the status test module, and the status monitoring module, for transmitting information received from and generated by the log management module, the status test module, and the status monitoring module from a plurality of network devices; The present invention provides an alarm system including: a cloud server connected to at least one monitoring server via a signal transmission module, and configured to receive and store information transmitted by the signal transmission module.

[0008] According to an embodiment of the present invention, a number of keywords are set in the log management module; The log management module searches the log to see if it contains at least one of the keywords and determines whether there is an alarm event.

[0009] According to an embodiment of the present invention, the monitoring server further includes a log management module, a status test module, a status monitoring module and a connection device connected to a plurality of network devices, for sending test signals to the plurality of network devices, and receiving test responses, logs and status information sent from each network device.

[0010] According to an embodiment of the present invention, the connection device includes an active receiving module, which obtains status information from a plurality of network devices through a Simple Network Management Protocol (SNMP), and provides the status information to a status monitoring module.

[0011] According to an embodiment of the present invention, the connection device includes a passive receiving module, which receives logs transmitted by a plurality of network devices through a System Logging Protocol (Syslog) service and provides the logs to a log management module.

[0012] According to an embodiment of the present invention, the signal transmission module in the monitoring server is connected to the cloud server through a Web server interface (WebAPI).

[0013] According to an embodiment of the present invention, the signal transmission module transmits the information received and generated by the log management module, the status test module and the status monitoring module from the multiple network devices to the cloud server via email.

[0014] According to an embodiment of the present invention, the number of client platforms is multiple, and these client platforms are the same or different virtualization platforms.

[0015] According to an embodiment of the present invention, the status monitoring module determines whether the number of the multiple network devices has been expanded based on the status information of the multiple network devices, and if the number of the multiple network devices has been expanded, relatively expands the computing resources of the monitoring server.

[0016] According to an embodiment of the present invention, the computing resources of the monitoring server include at least one central processing unit core number, at least one memory, and at least one hard disk space capacity.

[0017] According to an embodiment of the present invention, when the cloud server receives information that an alarm event or an abnormal state occurs in a plurality of network devices, the cloud server automatically sends a dispatch notification to device maintenance personnel. [Brief description of the drawings]

[0018] [Figure 1] 1 is an architecture diagram of an alarm system for monitoring network devices in a virtualization platform of the present invention; [Diagram 2] FIG. 2 is a detailed block diagram of an alarm system for monitoring network devices in a virtualization platform of the present invention; DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0019] Hereinafter, the technical solutions in the embodiments of the present invention will be described clearly and completely with reference to the drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention and not all of the embodiments.

[0020] It should be understood that, as used in this specification and in the appended patent application, the terms "comprising" and "including" indicate the presence of stated features, wholes, steps, operations, components, and / or elements, but do not exclude the presence or addition of one or more other features, wholes, steps, operations, components, elements, and / or groups thereof.

[0021] It should also be understood that the terms used in the specification of the present invention are for the purpose of describing particular embodiments only, and are not intended to limit the present invention. As used in the specification of the present invention and the accompanying patent application, the singular forms "a," "one," and "said" are intended to include the plural forms unless the context clearly dictates otherwise.

[0022] It should be further understood that the term "and / or" as used herein and in the appended patent applications refers to and includes any and all possible combinations of one or more of the associated listed items.

[0023] The present invention provides an alarm system for monitoring network devices on a virtualization platform, which monitors network devices inside different users (e.g., different company line numbers, different factories), and unifies the response to the cloud server of the equipment repair manufacturer for management. When the cloud server receives an alarm event, it automatically arranges for an appropriate maintenance engineer to repair the network device to the client where the alarm event occurs. Referring to FIG. 1, an architecture diagram of an alarm system 10 for monitoring network devices on a virtualization platform of the present invention is shown. The alarm system 10 for monitoring network devices on a virtualization platform of the present invention includes at least one monitoring server 12 and one cloud server 16, where each monitoring server 12 is installed in a different client platform 14, respectively, and each client platform 14 may be a local network of a different company. The monitoring server 12 is used to monitor multiple network devices (not shown) of the client platform 14. The network devices include a server, a router, a switch, or a firewall. The monitoring server 12 is connected to the cloud server 16 via a Web server interface (WebAPI) 18.

[0024] Also, referring to FIG. 2, a detailed block diagram of an alarm system 10 for monitoring network devices in a virtualization platform of the present invention is shown. Each monitoring server 12 includes a status test module 122, a log management module 124, a status monitoring module 126, and a signal transmission module 128. The status test module 122, the log management module 124, and the status monitoring module 126 are connected to the signal transmission module 128, which is connected to the cloud server 16 via the web server interface 18. The status test module 122 is used to test whether the network devices 20 are still working. The test method is to periodically send a test signal to each network device 20, and if the network device 20 is still working, it will return a test response, but if any network device 20 does not return a test response, it indicates that the network device 20 is no longer working, for example, disconnected or stopped. The log management module 124 receives the logs transmitted from the network devices 20 and analyzes whether the logs contain an alarm event. Furthermore, the log management module 124 is set with a plurality of keywords, and searches whether the keywords are included in the logs returned from these network devices 20. If any of the logs includes the keyword, it indicates that an alarm event has occurred in the network device 20 that returned the log. The status monitoring module 126 receives status information of the network device and judges whether an abnormal status has occurred in the network device. Here, the status information may be a device list (including model, device name, IP address, serial number, version, product life cycle, etc.), the performance of computing resources such as a central processing unit, hard disk space, and memory, a hardware device failure, an unauthorized change of password, etc. The signal transmission module 128 transmits the information received and generated by the status test module 122, the log management module 124, and the status monitoring module 126 from the network devices.

[0025] The monitoring server 12 further includes a connection device 129 connected to the status test module 122, the log management module 124, the status monitoring module, and the network device 20. The connection device 129 transmits a test signal sent by the status test module 122 to the network device 20, receives a test response returned from the network device 20, and provides it to the status test module. The connection device 129 also receives logs and status information transmitted from the network device 20. The connection device 129 further includes an active receiving module 1292 and a passive receiving module 1294, and the active receiving module 1292 actively obtains status information from the network device 20 by a Simple Network Management Protocol (SNMP) and provides it to the status monitoring module 126. The passive receiving module 1294 passively receives logs transmitted from the network device 20 by a System Logging Protocol (Syslog) service and provides it to the log management module 124.

[0026] In some network device states, the device state is not only actively acquired by the state monitoring module 126, but also the log is passively sent to the log management module 124, and the functions of the log management module 124 and the state monitoring module 126 are partially overlapped. For example, assume that the network cable of a certain network device 20 is unplugged, the state monitoring module 126 finds that an abnormality has occurred in the device state of the network device 20 and issues an alarm. When analyzing the log, the log management module 124 also finds that the network device 20 contains an alarm event with no signal. In addition, the state test module 122 may determine that the network device 20 is not in operation because it did not receive a test response returned from the network device 20, and may issue an alarm. These alarm events and information indicating that an abnormal state of the network device has occurred are transmitted to the cloud server 16, and the cloud server 16 automatically issues a dispatch notification to the device maintenance personnel in charge of the alarm event.

[0027] Some client platforms 14 strictly manage information transmission to the outside in order to avoid confidential information leaking, and the monitoring server 12 cannot directly transmit the alarm to the cloud server 16 through network transmission, so in the present invention, the signal transmission module 128 first judges whether there is a security restriction in the network environment of the client platform 14, and if not, directly transmits the information received and generated by the log management module 124, the status test module 122 and the status monitoring module 126 from the network device 20 to the cloud server 16 through the network. However, if there is a security restriction, the information is transmitted to the cloud server 16 by email.

[0028] Furthermore, the multiple client platforms 14 are the same or different virtualization platforms, and the expansion of computing resources, which is a characteristic of virtualization, can adjust the system computing usage according to environmental conditions. The status monitoring module 126 judges whether the number of network devices 20 is expanded based on the status information of the network devices 20, and when the number of monitored objects is large, the computing resources of the monitoring server 12 can be relatively expanded, for example, more CPU resources (e.g., number of cores), memory or hard disk space capacity can be provided in a timely manner, and when the number of monitored objects is small, the computing resources of the hardware can be reduced. For example, since there were originally only seven network devices 20, the allocated computing resources were a 2-core CPU, 256GB hard disk space, and 4G memory. When the network devices 20 are expanded to 500, the status monitoring module 126 automatically adjusts the monitoring computing resources to an 8-core CPU, 2TB hard disk space, and 16G memory.

[0029] As described above, the alarm system for monitoring network devices on a virtualization platform according to the present invention actively acquires the device status of network devices using the SNMP protocol, and passively acquires the logs of network devices using the Syslog protocol, monitors whether an abnormal alarm event occurs in the network devices in all directions, returns an alarm to the cloud server, and dispatches workers to repair in real time. Furthermore, the present invention is deployed on the virtualization platforms of different clients, and can flexibly expand or reduce the hardware computing resources provided to the monitoring server according to the increase or decrease in the number of network devices to be monitored based on the characteristics of virtualization, and adjust the configuration of the hardware computing resources according to the environmental conditions.

[0030] The present invention is an alarm system for monitoring network devices that can actively acquire the device status of network devices and passively acquire logs, monitor in all directions whether an abnormality has occurred in the network device, send an alarm back to a cloud server, and dispatch a technician in real time to carry out repairs.

[0031] The above is merely a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Therefore, any equivalent changes or modifications made according to the features and spirit described in the scope of the present invention should be included in the scope of the present invention. [Explanation of symbols]

[0032] 10 Alarm system for monitoring network devices on virtualization platforms 12 Monitoring Server 122 State Test Module 124 Log Management Module 126 Condition Monitoring Module 128 Signal Transmission Module 129 Connection Device 1292 Active Receiver Module 1294 Passive Receiver Module 14 Client Platforms 16 Cloud Server 18 Web Server Interface 20 Network Devices

Claims

1. At least one monitoring server; A cloud server; The at least one monitoring server is installed in at least one client platform and monitors a plurality of network devices of the at least one client platform. The at least one monitoring server a log management module that receives logs transmitted by the plurality of network devices and analyzes whether the logs include an alarm event; a status test module for periodically transmitting a test signal to each of the network devices and determining whether each of the network devices is operational according to a test response returned by each of the network devices; a status monitoring module that receives status information of the plurality of network devices and determines whether an abnormality has occurred in each of the network devices; a signal transmission module connected to the log management module, the status test module, and the status monitoring module, for transmitting information received from and generated by the log management module, the status test module, and the status monitoring module from the plurality of network devices; An alarm system for monitoring network devices in a virtualization platform, characterized in that the cloud server is connected to the at least one monitoring server via the signal transmission module and receives and stores information transmitted by the signal transmission module.

2. A plurality of keywords are set in the log management module; 2. The alarm system for monitoring network devices in a virtualization platform as described in claim 1, wherein the log management module searches the log for whether it contains at least one of the plurality of keywords to determine whether the alarm event occurs.

3. 2. The alarm system for monitoring network devices in a virtualization platform as described in claim 1, wherein the monitoring server further includes a connection device connected to the log management module, the status test module, the status monitoring module and the plurality of network devices, for transmitting the test signal to the plurality of network devices and receiving the test response, log and status information transmitted from each of the network devices.

4. 4. The alarm system for monitoring network devices in a virtualization platform according to claim 3, wherein the connection device includes an active receiving module that acquires the status information from the plurality of network devices by Simple Network Management Protocol (SNMP) and provides the status information to the status monitoring module.

5. 4. The alarm system for monitoring network devices in a virtualization platform according to claim 3, wherein the connection device includes a passive receiving module that receives the logs transmitted by the plurality of network devices via a System Logging Protocol (Syslog) service and provides the logs to the log management module.

6. The alarm system for monitoring network devices in a virtualization platform according to claim 1 , wherein the signal transmission module in the at least one monitoring server is connected to the cloud server via a Web Server Interface (Web API).

7. 7. The alarm system for monitoring network devices in a virtualization platform according to claim 1 or 6, wherein the signal transmission module transmits the information received and generated by the log management module, the status test module and the status monitoring module from the plurality of network devices to the cloud server via email.

8. The alarm system for monitoring network devices on a virtualization platform according to claim 1 , wherein the number of the at least one client platform is multiple, and the multiple client platforms are the same or different virtualization platforms.

9. 2. An alarm system for monitoring network devices in a virtualization platform as described in claim 1, wherein the status monitoring module determines whether the number of the plurality of network devices has been expanded based on the status information of the plurality of network devices, and if the number of the plurality of network devices has been expanded, relatively expands the computing resources of the monitoring server.

10. 10. The alarm system for monitoring network devices in a virtualization platform as described in claim 9, wherein the computing resources of the monitoring server include at least one central processing unit core number, at least one memory, and at least one hard disk space capacity.

11. 2. The alarm system for monitoring network devices in a virtualization platform as described in claim 1, wherein the cloud server automatically sends a dispatch notification to a device maintenance person when the cloud server receives information indicating that the alarm event or an abnormal state of the plurality of network devices has occurred.

12. 2. An alarm system for monitoring network devices in a virtualization platform as described in claim 1, wherein the number of the at least one monitoring server and the number of the at least one client platform are both multiple, and the multiple monitoring servers are respectively installed on different ones of the multiple client platforms.

Images