The invention provides an abnormity monitoring scheme of a flow computing system based on an unsupervised learning method, belongs to the field of distributed real-time system abnormity monitoring, and specifically comprises a system behavior description module, an abnormity monitoring module constructed based on a small sample constraint condition, and an online adaptive abnormity monitoring module. The method comprises the following steps: firstly, converting an original event by utilizing an event processing technology to obtain a composite event; therefore, the event state data index and the physical state data index are obtained, the collected data indexes are fused through the time window technology to obtain the system behavior state index space, and behavior description of the stream computing system is achieved. Secondly, proposing an unsupervised statistical analysis method, constructing an exception monitoring model based on a small sample constraint condition, and realizingexception monitoring of unbalanced data of the stream computing system; and finally, providing an on-line adaptive abnormity monitoring model, automatically adjusting a network structure, updating aclustering center, and realizing on-line adaptive abnormity monitoring.