CN107391344A - A kind of event-monitoring method, platform and system - Google Patents

A kind of event-monitoring method, platform and system Download PDF

Info

Publication number
CN107391344A
CN107391344A CN201710628097.4A CN201710628097A CN107391344A CN 107391344 A CN107391344 A CN 107391344A CN 201710628097 A CN201710628097 A CN 201710628097A CN 107391344 A CN107391344 A CN 107391344A
Authority
CN
China
Prior art keywords
event
monitor
monitoring
argument
type
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201710628097.4A
Other languages
Chinese (zh)
Inventor
刘璧怡
周恒钊
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Zhengzhou Yunhai Information Technology Co Ltd
Original Assignee
Zhengzhou Yunhai Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Zhengzhou Yunhai Information Technology Co Ltd filed Critical Zhengzhou Yunhai Information Technology Co Ltd
Priority to CN201710628097.4A priority Critical patent/CN107391344A/en
Publication of CN107391344A publication Critical patent/CN107391344A/en
Pending legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
    • G06F11/3006—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
    • G06F11/3024—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system component is a central processing unit [CPU]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
    • G06F11/3034—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system component is a storage system, e.g. DASD based or network based
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
    • G06F11/3037—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system component is a memory, e.g. virtual memory, cache
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3051—Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3065—Monitoring arrangements determined by the means or processing involved in reporting the monitored data
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/10—File systems; File servers
    • G06F16/17—Details of further file system functions
    • G06F16/1734—Details of monitoring file system events, e.g. by the use of hooks, filter drivers, logs

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Quality & Reliability (AREA)
  • Mathematical Physics (AREA)
  • Data Mining & Analysis (AREA)
  • Databases & Information Systems (AREA)
  • Debugging And Monitoring (AREA)

Abstract

The invention provides a kind of event-monitoring method, platform and system, wherein, this method includes：The corresponding relation of event type and monitoring rules is pre-set, receives at least one monitor event that external user is sent, wherein, each described monitor event includes：Event type and event argument；It is performed both by for monitor event each described：According to the corresponding relation, target monitoring rule corresponding to the event type that current monitor event includes is determined；The event argument included according to the regular and described current monitor event of the target monitoring, is monitored to server.Scheme provided by the invention can be monitored to different types of event.

Description

A kind of event-monitoring method, platform and system
Technical field
The present invention relates to field of computer technology, more particularly to a kind of event-monitoring method, platform and system.
Background technology
With the arrival in big data epoch, the physical arrangement and logical construction of server become to become increasingly complex.Therefore, when During a certain component failure, usually faulty components can not be positioned in time.In order to solve the problem, it is necessary to server The event occurred in running is monitored, and to find failure problems in time, ensures effective operation of system.
Existing event-monitoring is to be based on Inotify instruments, and Inotify is a kind of change notification mechanism of file system, The events such as the file increase in system, deletion can be monitored.
But existing method can only be monitored to the event of filesystem class.
The content of the invention
The embodiments of the invention provide a kind of event-monitoring method, platform and system, and different types of event can be entered Row monitoring.
In a first aspect, the embodiments of the invention provide a kind of event-monitoring method, pre-set event type and advised with monitoring Corresponding relation then, in addition to：
At least one monitor event that external user is sent is received, wherein, each described monitor event includes：Event Type and event argument；
It is performed both by for monitor event each described：According to the corresponding relation, determine that current monitor event includes Event type corresponding to target monitoring rule；The thing included according to the regular and described current monitor event of the target monitoring Part parameter, is monitored to server.
Preferably,
When the event type that the monitor event includes is any one in document creation, file deletion and file modification When, the event argument that the monitor event includes is file identification, monitors any one in duration and event frequency It is or a variety of；
When the event type that the monitor event includes is to appoint in file establishment, file deletion and file modification When anticipating a kind of, the event argument that the monitor event includes is folder identifier, monitored in duration and event frequency Any one or more；
When the event type that the monitor event includes be file system utilization rate, CPU usage, memory usage and In virtual memory utilization rate any one when, when event argument that the monitor event includes is utilization rate threshold value, monitoring continues Between and event frequency in any one or more；
It is any in the event type that the monitor event includes is process creation, process terminates to terminate with process exception When a kind of, the event argument that the monitor event includes is process identification (PID), monitored in duration and event frequency arbitrarily It is one or more；
When the event type that the monitor event includes is the page wait time, event that the monitor event includes Parameter is any one or more in time threshold, monitoring duration and event frequency；
When the event type that the monitor event includes is internal memory loading error quantity, what the monitor event included Event argument is any one or more in amount threshold, monitoring duration and event frequency；
When the event type that the monitor event includes is that CPU is interrupted or CPU is dispatched, what the monitor event included Event argument is any one or more in monitoring duration and event frequency.
Preferably,
Each described monitor event further comprises：Event handling script；
In the event argument included according to the regular and described current monitor event of the target monitoring, to server After being monitored, further comprise：
When monitoring the server generation current monitor event, included using the current monitor event The event handling script processing current monitor event.
Preferably,
In the event argument included according to the regular and described current monitor event of the target monitoring, to server After being monitored, further comprise：
When monitoring the server generation current monitor event, event is generated according to the current monitor event Generation information, the event occurrence information is fed back into the user.
Preferably,
Further comprise：Pre-set event argument form；
Described according to the corresponding relation, target monitoring corresponding to the event type that current monitor event includes is determined Before rule, further comprise：
Judge whether the form for the event argument that the current monitor event includes is identical with the event argument form, If it is, execution is described according to the corresponding relation, determine that target corresponding to the event type that current monitor event includes is supervised Regulatory control then, otherwise, prompts the user to resend the current monitor event.
Second aspect, the embodiments of the invention provide a kind of event-monitoring platform, including：
Setting unit, for setting the corresponding relation of event type and monitoring rules；
Receiving unit, for receiving at least one monitor event of external user transmission, wherein, each described monitoring thing Part includes：Event type and event argument；
Monitoring unit, each described monitor event for being received for the receiving unit are performed both by：According to institute The corresponding relation of setting unit setting is stated, determines that target monitoring corresponding to the event type that current monitor event includes is advised Then；The event argument included according to the regular and described current monitor event of the target monitoring, is monitored to server.
Preferably,
When the event type that the monitor event includes is any one in document creation, file deletion and file modification When, the event argument that the monitor event includes is file identification, monitors any one in duration and event frequency It is or a variety of；
When the event type that the monitor event includes is to appoint in file establishment, file deletion and file modification When anticipating a kind of, the event argument that the monitor event includes is folder identifier, monitored in duration and event frequency Any one or more；
When the event type that the monitor event includes be file system utilization rate, CPU usage, memory usage and In virtual memory utilization rate any one when, when event argument that the monitor event includes is utilization rate threshold value, monitoring continues Between and event frequency in any one or more；
It is any in the event type that the monitor event includes is process creation, process terminates to terminate with process exception When a kind of, the event argument that the monitor event includes is process identification (PID), monitored in duration and event frequency arbitrarily It is one or more；
When the event type that the monitor event includes is the page wait time, event that the monitor event includes Parameter is any one or more in time threshold, monitoring duration and event frequency；
When the event type that the monitor event includes is internal memory loading error quantity, what the monitor event included Event argument is any one or more in amount threshold, monitoring duration and event frequency；
When the event type that the monitor event includes is that CPU is interrupted or CPU is dispatched, what the monitor event included Event argument is any one or more in monitoring duration and event frequency.
Preferably,
Each described monitor event further comprises：Event handling script；
Further comprise：Processing unit, for the current prison to occur when the monitoring unit monitors the server During control event, the event handling script included using the current monitor event handles the current monitor event.
Preferably,
Further comprise：Communication unit, for the current prison to occur when the monitoring unit monitors the server During control event, event occurrence information is generated according to the current monitor event, the event occurrence information is fed back into the use Family；
Preferably,
The setting unit, it is further used for setting event argument form；
Further comprise：Judging unit, wrap in the current monitor event received for judging the receiving unit Whether the form of the event argument included is identical with the event argument form that the setting unit is set, if it is, triggering institute Monitoring unit is stated, otherwise, prompts the user to resend the current monitor event.
The third aspect, the embodiments of the invention provide a kind of event monitoring system, including：Described in any of the above-described embodiment Event-monitoring platform and at least one server.
The embodiments of the invention provide a kind of event-monitoring method, platform and system, wherein, this method is by pre-setting Event type and monitoring rules corresponding relation, determine target monitoring corresponding to the event type that each monitor event includes Rule, and server is monitored using the target monitoring rule.For different event types, this method provides different Monitoring rules, compared with existing method can only be monitored to the event of filesystem class, this method can be simultaneously to file system The different event types such as system class, internal memory class, process class are monitored, and are more widely applied.
Brief description of the drawings
In order to illustrate more clearly about the embodiment of the present invention or technical scheme of the prior art, below will be to embodiment or existing There is the required accompanying drawing used in technology description to be briefly described, it should be apparent that, drawings in the following description are the present invention Some embodiments, for those of ordinary skill in the art, on the premise of not paying creative work, can also basis These accompanying drawings obtain other accompanying drawings.
Fig. 1 is a kind of flow chart for event-monitoring method that one embodiment of the invention provides；
Fig. 2 is a kind of structural representation for event-monitoring platform that one embodiment of the invention provides；
Fig. 3 is a kind of structural representation for event-monitoring platform that another embodiment of the present invention provides；
Fig. 4 is a kind of structural representation for event-monitoring platform that another embodiment of the invention provides；
Fig. 5 is a kind of structural representation for event-monitoring platform that further embodiment of the present invention provides；
Fig. 6 is a kind of structural representation for event monitoring system that one embodiment of the invention provides；
Fig. 7 is a kind of flow chart for event-monitoring method that another embodiment of the present invention provides.
Embodiment
To make the purpose, technical scheme and advantage of the embodiment of the present invention clearer, below in conjunction with the embodiment of the present invention In accompanying drawing, the technical scheme in the embodiment of the present invention is clearly and completely described, it is clear that described embodiment is Part of the embodiment of the present invention, rather than whole embodiments, based on the embodiment in the present invention, those of ordinary skill in the art The every other embodiment obtained on the premise of creative work is not made, belongs to the scope of protection of the invention.
As shown in figure 1, the embodiments of the invention provide a kind of event-monitoring method, this method may comprise steps of：
Step 101：The corresponding relation of event type and monitoring rules is set；
Step 102：At least one monitor event that external user is sent is received, wherein, each monitor event includes： Event type and event argument；
Step 103：It is performed both by for each monitor event：According to corresponding relation, determine that current monitor event includes Event type corresponding to target monitoring rule；The event argument included according to target monitoring rule and current monitor event, Server is monitored.
In the embodiment of the present invention shown in Fig. 1, this method passes through the event type pre-set and pair of monitoring rules It should be related to, determine target monitoring rule corresponding to the event type that each monitor event includes, and advise using the target monitoring Then server is monitored.For different event types, this method provides different monitoring rules, can only with existing method The event of filesystem class is monitored and compared, this method can be simultaneously to differences such as filesystem class, internal memory class, process classes Event type be monitored, be more widely applied.
In one embodiment of the invention, in order to realize monitoring demand of the user to different event type, when monitoring thing The event type that part includes be document creation, file delete and file modification in any one when, the monitor event includes Event argument for file identification, monitoring the duration and event frequency in any one or more；
It is any one in the event type that monitor event includes is deleted for file establishment, file and file is changed During kind, the event argument that the monitor event includes is folder identifier, monitored in duration and event frequency arbitrarily It is one or more；
When the event type that monitor event includes is file system utilization rate, CPU usage, memory usage and virtual In memory usage any one when, event argument that the monitor event includes is utilization rate threshold value, the monitoring duration and Any one or more in event frequency；
When the event type that monitor event includes be process creation, process terminate and process exception terminate in any one When, the event argument that the monitor event includes is process identification (PID), monitors any one in duration and event frequency It is or a variety of；
When the event type that monitor event includes is the page wait time, event argument that the monitor event includes For any one or more in time threshold, monitoring duration and event frequency；
When the event type that monitor event includes is internal memory loading error quantity, event that the monitor event includes Parameter is any one or more in amount threshold, monitoring duration and event frequency；
When the event type that monitor event includes is that CPU is interrupted or CPU is dispatched, event that the monitor event includes Parameter is any one or more in monitoring duration and event frequency.
This method provides the monitoring method to a variety of event types, and event type can include：File system event, internal memory Event, process event, CPU events, wherein, CPU events are divided into CPU usage, CPU is interrupted, CPU scheduling, and internal memory event is divided into Memory usage, page wait time, file system event is divided into document creation, file is deleted, file content is changed, file Modification, file delete, file create, file system utilization rate monitoring, process event is divided into process creation, process terminate/ Abnormal end, internal memory load small error number, internal memory loads big error number, virtual memory utilization rate etc..
Wherein, file identification can include store path, the file name of file, or even reference number of a document etc., for distinguishing Different monitored object, for example, when file identification is A, then need to be monitored the file A in server, when file A is created When building, delete or changing, monitor event occurs, and this method can prompt user by different approach.Folder identifier, enter Journey mark is similar with file identification effect, and here is omitted.
Monitor the duration limit monitoring duration, for example, when event type be file modification, file identification A, The duration is monitored when being 2h, then persistently the file A in monitoring server in 2h, if change.
Event frequency is used for during representing monitoring, the frequency of monitor event, when user's incoming event occurs During number, this method can add up the frequency of monitor event, when the frequency of monitor event reaches event frequency When, this method can prompt user.When user is not provided with event frequency, monitor event occurs each time, all promptings are used Family.
Utilization rate threshold value is used for the monitoring range for determining utilization rate, for example, event type is CPU usage, makes accordingly When with rate threshold value being 50%-60%, when the CPU usage for monitoring server is in 50%-60%, it is determined that monitor event Occur, prompt user.Threshold range except being set using rate,
The maximum of CPU usage or minimum value can also be only set to be monitored.The work of time threshold and amount threshold With similar with utilization rate threshold value, here is omitted.
Table 1
It should be noted that event type can include all events occurred in server, it is not limited to above-mentioned thing Part type, also, typically divide event type according to the monitoring rules of event.
User can select or input each monitor event by interactive interface.For example, user selects thing in interactive interface Part type is CPU usage, and it is 80%-90% to input utilization rate threshold value.
In a practical application scene, user can utilize table 1, and this method is realized by program.
In an embodiment of the invention, in order to realize the processing to monitor event, in each monitor event further Including：Event handling script；
In the event argument included according to target monitoring rule and current monitor event, it is monitored to server Afterwards, further comprise：
When monitoring server current monitor event occurring, the event handling script that is included using current monitor event Handle current monitor event.
Wherein, event handling script includes：Any one or more in executable program, bash scripts, Python scripts.
In practical application scene, the fortune of each component of server can be obtained by being monitored to the event in server Row state.In the present embodiment, the running status of server can be adjusted by event handling script.For example, event Type is CPU usage, and utilization rate threshold value is 85%-90%, when CPU usage reaches 85%-90%, determines that CPU is used Rate is too high, then needs to reduce CPU usage by deleting the operations such as inactive file, then should be included in event handling script a series of The method for reducing CPU usage.
In one embodiment of the invention, in order that user obtains monitored results in time, according to target monitoring rule The event argument included with current monitor event, after being monitored to server, further comprise：
When monitoring server generation current monitor event, event occurrence information is generated according to current monitor event, will Event occurrence information feeds back to user.
Wherein, the content of event occurrence information is related to event type, for example, for file modification event, event occurs It can include in information：Change user's mark, filemodetime of file etc.；For example, for CPU usage time, event Generation information can include：Current CPU usage.
In one embodiment of the invention, in order to ensure the validity of the monitor event of user's input, avoid invalid defeated Enter, this method also includes：Pre-set event argument form；
According to corresponding relation, target monitoring rule corresponding to the event type that current monitor event includes is determined Before, further comprise：
Judge whether the form for the event argument that current monitor event includes is identical with event argument form, if it is, Perform according to corresponding relation, determine target monitoring rule corresponding to the event type that current monitor event includes, otherwise, prompt User resends current monitor event.
Wherein, different event arguments corresponds to different event argument forms.For example, it is 0- to be set using rate threshold range 100%, when user's input 110%, input as illegal input；For example, the event of setting frequency is numeral, when user is defeated When entering Chinese character, input as illegal input.
As shown in Fig. 2 the embodiments of the invention provide a kind of event-monitoring platform, including：
Setting unit 201, for setting the corresponding relation of event type and monitoring rules；
Receiving unit 202, for receiving at least one monitor event of external user transmission, wherein, each monitoring thing Part includes：Event type and event argument；
Monitoring unit 203, each monitor event for being received for receiving unit 202 are performed both by：According to setting The corresponding relation that unit 201 is set, determine target monitoring rule corresponding to the event type that current monitor event includes；According to The event argument that target monitoring rule and current monitor event include, is monitored to server.
In one embodiment of the invention, when the event type that monitor event includes is document creation, file deletion With in file modification any one when, event argument that the monitor event includes is file identification, monitoring duration and thing Any one or more in part frequency；
It is any one in the event type that monitor event includes is deleted for file establishment, file and file is changed During kind, the event argument that the monitor event includes is folder identifier, monitored in duration and event frequency arbitrarily It is one or more；
When the event type that monitor event includes is file system utilization rate, CPU usage, memory usage and virtual In memory usage any one when, event argument that the monitor event includes is utilization rate threshold value, the monitoring duration and Any one or more in event frequency；
When the event type that monitor event includes be process creation, process terminate and process exception terminate in any one When, the event argument that the monitor event includes is process identification (PID), monitors any one in duration and event frequency It is or a variety of；
When the event type that monitor event includes is the page wait time, event argument that the monitor event includes For any one or more in time threshold, monitoring duration and event frequency；
When the event type that monitor event includes is internal memory loading error quantity, event that the monitor event includes Parameter is any one or more in amount threshold, monitoring duration and event frequency；
When the event type that monitor event includes is that CPU is interrupted or CPU is dispatched, event that the monitor event includes Parameter is any one or more in monitoring duration and event frequency.
In one embodiment of the invention, each monitor event further comprises：Event handling script；
As shown in figure 3, the event-monitoring platform also includes：Processing unit 204, for monitoring clothes when monitoring unit 203 During device generation current monitor event of being engaged in, the event handling script included using current monitor event handles current monitor event.
As shown in figure 4, in one embodiment of the invention, the event-monitoring platform also includes：Communication unit 205, use In when monitoring unit 203 monitors server generation current monitor event, event is generated according to current monitor event and believed Breath, feeds back to user by event occurrence information；
In one embodiment of the invention, setting unit 201, it is additionally operable to set event argument form；
As shown in figure 5, the event-monitoring platform also includes：Judging unit 206, for judging that receiving unit 202 receives The form of event argument that includes of current monitor event it is whether identical with the event argument form that setting unit 201 is set, If it is, triggering monitoring unit 203, otherwise, prompts user to resend current monitor event.
The contents such as the information exchange between each unit, implementation procedure in said apparatus, due to implementing with the inventive method Example is based on same design, and particular content can be found in the narration in the inventive method embodiment, and here is omitted.
As shown in fig. 6, the embodiments of the invention provide a kind of event monitoring system, including：The thing of any of the above-described embodiment Part monitor supervision platform 601 and at least one server 602.
Wherein, when multiple servers be present, user can by adding server identification in the monitor event of transmission, For determining server corresponding to different monitoring event.
Such as Fig. 7, the embodiment of the present invention by event-monitoring platform and a server group into event monitoring system exemplified by, it is right Event-monitoring method is described in detail, and this method includes：
Step 701：The corresponding relation of event type and monitoring rules is set, event argument form is set.
Table 2
Event type Monitoring rules Event argument form
File modification A1 A2
File creates B1 B2
CPU usage C1 C2
Process terminates D1 D2
In the present embodiment, only illustrated by taking four kinds of event types in table 2 as an example.
Step 702：At least one monitor event that external user is sent is received, wherein, each monitor event includes： Event type, event argument and event handling script.
Two monitor events of user's input are as shown in table 3.
Table 3
Step 703：It is performed both by for each monitor event：Judge the lattice for the event argument that current monitor event includes Whether formula is identical with event argument form, if it is, performing step 704, otherwise, performs step 708.
Using event argument form A2, C2 corresponding to file modification and CPU usage, the content of user's input is sentenced It is disconnected.
Step 704：According to corresponding relation, determine that target monitoring corresponding to the event type that current monitor event includes is advised Then.
According to table 2, determine that target monitoring rule is A1, C1 corresponding to file modification and CPU usage.
Step 705：The event argument included according to target monitoring rule and current monitor event, is supervised to server Control.
Using the file A in target monitoring rule A1, C1 monitoring server whether change and server in CPU usage Whether 80%-95% is reached, wherein, file modification monitoring duration 1h, CPU usage monitoring duration 2h.
Step 706：When monitoring server current monitor event occurring, the event that is included using current monitor event Handle script processing current monitor event.
When monitoring the generation of file modification event, using event handling script A3 processing, used when monitoring CPU When rate occurs, event handling script C3 processing is utilized.
Step 707：Event occurrence information is generated according to current monitor event, event occurrence information is fed back into user, eventually Only current process.
Event occurrence information Q is generated according to file modification, event occurrence information P is generated according to CPU usage, event is sent out Raw information Q, P is sent to user.Event occurrence information Q includes changing file A user's mark, modification time etc..
Step 708：Prompting user resends current monitor event.
When the event argument of user's input is illegal, user is prompted to re-start input.
The embodiments of the invention provide a kind of computer-readable recording medium, including execute instruction, when the computing device of storage control During execute instruction, the method for storage control execution any of the above-described.
The embodiments of the invention provide a kind of storage control, including：Processor, memory and bus；
Memory is used to store execute instruction, and processor is connected with memory by bus, when storage control is run, The execute instruction of computing device memory storage, so that the method that storage control performs any of the above-described.
To sum up, each embodiment of the present invention at least has the effect that：
1st, in embodiments of the present invention, this method is by the event type pre-set and the corresponding relation of monitoring rules, Target monitoring rule corresponding to the event type that each monitor event includes is determined, and using the target monitoring rule to service Device is monitored.For different event types, this method provides different monitoring rules, can only be to file system with existing method The event of system class, which is monitored, to be compared, the event class that this method can be simultaneously different to filesystem class, internal memory class, process class etc. Type is monitored, and is more widely applied.
2nd, in embodiments of the present invention, the event type that can be monitored can at least include：CPU usage, CPU interrupt, CPU is dispatched, memory usage, page wait time, and document creation, file are deleted, file content is changed, file is changed, text Part folder is deleted, file creates, the monitoring of file system utilization rate, and process creation, process terminate/and abnormal end, internal memory loading be small Error number, internal memory load big error number, virtual memory utilization rate etc., can be to each component in server by this method State be monitored, in real time grasp server running status, be easy in time adjustment server operation.
3rd, in embodiments of the present invention, by the customized event processing script in event argument, different monitoring is handled Event, and then adjust the running status of server.
4th, in embodiments of the present invention, can be taken in time to user feedback according to event occurrence information, event frequency The state of business device, so that user makes corresponding processing according to prompt message.
It should be noted that herein, such as first and second etc relational terms are used merely to an entity Or operation makes a distinction with another entity or operation, and not necessarily require or imply and exist between these entities or operation Any this actual relation or order.Moreover, term " comprising ", "comprising" or its any other variant be intended to it is non- It is exclusive to include, so that process, method, article or equipment including a series of elements not only include those key elements, But also the other element including being not expressly set out, or also include solid by this process, method, article or equipment Some key elements.In the absence of more restrictions, by sentence " including the key element that a 〃 〃 " is limited, it is not excluded that Other identical factor in the process including the key element, method, article or equipment also be present.
One of ordinary skill in the art will appreciate that：Realizing all or part of step of above method embodiment can pass through Programmed instruction related hardware is completed, and foregoing program can be stored in computer-readable storage medium, the program Upon execution, the step of execution includes above method embodiment；And foregoing storage medium includes：ROM, RAM, magnetic disc or light Disk etc. is various can be with the medium of store program codes.
It is last it should be noted that：Presently preferred embodiments of the present invention is the foregoing is only, is merely to illustrate the skill of the present invention Art scheme, is not intended to limit the scope of the present invention.Any modification for being made within the spirit and principles of the invention, Equivalent substitution, improvement etc., are all contained in protection scope of the present invention.

Claims (10)

  1. A kind of 1. event-monitoring method, it is characterised in that pre-set the corresponding relation of event type and monitoring rules, also wrap Include：
    At least one monitor event that external user is sent is received, wherein, each described monitor event includes：Event type And event argument；
    It is performed both by for monitor event each described：According to the corresponding relation, the thing that current monitor event includes is determined Target monitoring rule corresponding to part type；The event included according to the regular and described current monitor event of the target monitoring is joined Number, is monitored to server.
  2. 2. event-monitoring method according to claim 1, it is characterised in that
    When the event type that the monitor event includes be document creation, file delete and file modification in any one when, The event argument that the monitor event includes is any one in file identification, monitoring duration and event frequency or more Kind；
    It is any one in the event type that the monitor event includes is deleted for file establishment, file and file is changed During kind, the event argument that the monitor event includes is folder identifier, monitored in duration and event frequency arbitrarily It is one or more；
    When the event type that the monitor event includes is file system utilization rate, CPU usage, memory usage and virtual In memory usage any one when, event argument that the monitor event includes is utilization rate threshold value, the monitoring duration and Any one or more in event frequency；
    When the event type that the monitor event includes be process creation, process terminate and process exception terminate in any one When, the event argument that the monitor event includes is process identification (PID), monitors any one in duration and event frequency It is or a variety of；
    When the event type that the monitor event includes is the page wait time, event argument that the monitor event includes For any one or more in time threshold, monitoring duration and event frequency；
    When the event type that the monitor event includes is internal memory loading error quantity, event that the monitor event includes Parameter is any one or more in amount threshold, monitoring duration and event frequency；
    When the event type that the monitor event includes is that CPU is interrupted or CPU is dispatched, event that the monitor event includes Parameter is any one or more in monitoring duration and event frequency.
  3. 3. event-monitoring method according to claim 1, it is characterised in that
    Each described monitor event further comprises：Event handling script；
    In the event argument included according to the regular and described current monitor event of the target monitoring, server is carried out After monitoring, further comprise：
    When monitoring the server current monitor event occurring, the event that is included using the current monitor event Handle script and handle the current monitor event.
  4. 4. event-monitoring method according to claim 1, it is characterised in that
    In the event argument included according to the regular and described current monitor event of the target monitoring, server is carried out After monitoring, further comprise：
    When monitoring the server generation current monitor event, event is generated according to the current monitor event Information, the event occurrence information is fed back into the user.
  5. 5. according to any described event-monitoring method in claim 1-4, it is characterised in that further comprise：Pre-set Event argument form；
    Described according to the corresponding relation, target monitoring rule corresponding to the event type that current monitor event includes is determined Before, further comprise：
    Judge whether the form for the event argument that the current monitor event includes is identical with the event argument form, if It is that execution is described according to the corresponding relation, determines that target monitoring corresponding to the event type that current monitor event includes is advised Then, otherwise, the user is prompted to resend the current monitor event.
  6. A kind of 6. event-monitoring platform, it is characterised in that including：
    Setting unit, for setting the corresponding relation of event type and monitoring rules；
    Receiving unit, for receiving at least one monitor event of external user transmission, wherein, in each described monitor event Including：Event type and event argument；
    Monitoring unit, each described monitor event for being received for the receiving unit are performed both by：Set according to described The corresponding relation of unit setting is put, determines target monitoring rule corresponding to the event type that current monitor event includes； The event argument included according to the regular and described current monitor event of the target monitoring, is monitored to server.
  7. 7. event-monitoring platform according to claim 6, it is characterised in that
    When the event type that the monitor event includes be document creation, file delete and file modification in any one when, The event argument that the monitor event includes is any one in file identification, monitoring duration and event frequency or more Kind；
    It is any one in the event type that the monitor event includes is deleted for file establishment, file and file is changed During kind, the event argument that the monitor event includes is folder identifier, monitored in duration and event frequency arbitrarily It is one or more；
    When the event type that the monitor event includes is file system utilization rate, CPU usage, memory usage and virtual In memory usage any one when, event argument that the monitor event includes is utilization rate threshold value, the monitoring duration and Any one or more in event frequency；
    When the event type that the monitor event includes be process creation, process terminate and process exception terminate in any one When, the event argument that the monitor event includes is process identification (PID), monitors any one in duration and event frequency It is or a variety of；
    When the event type that the monitor event includes is the page wait time, event argument that the monitor event includes For any one or more in time threshold, monitoring duration and event frequency；
    When the event type that the monitor event includes is internal memory loading error quantity, event that the monitor event includes Parameter is any one or more in amount threshold, monitoring duration and event frequency；
    When the event type that the monitor event includes is that CPU is interrupted or CPU is dispatched, event that the monitor event includes Parameter is any one or more in monitoring duration and event frequency.
  8. 8. event-monitoring platform according to claim 6, it is characterised in that
    Each described monitor event further comprises：Event handling script；
    Further comprise：Processing unit, for the current monitor thing to occur when the monitoring unit monitors the server During part, the event handling script included using the current monitor event handles the current monitor event.
  9. 9. according to any described event-monitoring platform in claim 6-8, it is characterised in that
    Further comprise：Communication unit, for the current monitor thing to occur when the monitoring unit monitors the server During part, event occurrence information is generated according to the current monitor event, the event occurrence information is fed back into the user；
    And/or
    The setting unit, it is further used for setting event argument form；
    Further comprise：Judging unit, for judging that the current monitor event that the receiving unit receives includes Whether the form of event argument is identical with the event argument form that the setting unit is set, if it is, triggering the prison Unit is controlled, otherwise, prompts the user to resend the current monitor event.
  10. A kind of 10. event monitoring system, it is characterised in that including：Any described event-monitoring platforms of claim 6-9 and extremely A few server.
CN201710628097.4A 2017-07-28 2017-07-28 A kind of event-monitoring method, platform and system Pending CN107391344A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710628097.4A CN107391344A (en) 2017-07-28 2017-07-28 A kind of event-monitoring method, platform and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710628097.4A CN107391344A (en) 2017-07-28 2017-07-28 A kind of event-monitoring method, platform and system

Publications (1)

Publication Number Publication Date
CN107391344A true CN107391344A (en) 2017-11-24

Family

ID=60342163

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710628097.4A Pending CN107391344A (en) 2017-07-28 2017-07-28 A kind of event-monitoring method, platform and system

Country Status (1)

Country Link
CN (1) CN107391344A (en)

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108062689A (en) * 2017-12-22 2018-05-22 深圳市英威腾电气股份有限公司 A kind of method, apparatus, equipment and the readable storage medium storing program for executing of monitoring trade information
CN108228430A (en) * 2017-12-13 2018-06-29 山东浪潮云服务信息科技有限公司 A kind of server monitoring method and device
CN108365989A (en) * 2018-01-26 2018-08-03 北京奇虎科技有限公司 Event-handling method and device
CN108845920A (en) * 2018-05-24 2018-11-20 北京奇安信科技有限公司 A kind of method and system that performance test resource is automatically-monitored
CN108845916A (en) * 2018-07-03 2018-11-20 中国联合网络通信集团有限公司 Platform monitoring and alarm method, device, equipment and computer readable storage medium
CN110032491A (en) * 2019-03-01 2019-07-19 西安电子科技大学 A kind of microprocessor monitors method and system
CN111722983A (en) * 2020-06-19 2020-09-29 中国银行股份有限公司 Configurable event operation control method and system

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2016093887A1 (en) * 2014-12-12 2016-06-16 Hewlett Packard Enterprise Development Lp Cloud service tuning
CN106936860A (en) * 2015-12-29 2017-07-07 研祥智能科技股份有限公司 A kind of monitoring system and method based on terminal device

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2016093887A1 (en) * 2014-12-12 2016-06-16 Hewlett Packard Enterprise Development Lp Cloud service tuning
CN106936860A (en) * 2015-12-29 2017-07-07 研祥智能科技股份有限公司 A kind of monitoring system and method based on terminal device

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108228430A (en) * 2017-12-13 2018-06-29 山东浪潮云服务信息科技有限公司 A kind of server monitoring method and device
CN108062689A (en) * 2017-12-22 2018-05-22 深圳市英威腾电气股份有限公司 A kind of method, apparatus, equipment and the readable storage medium storing program for executing of monitoring trade information
CN108062689B (en) * 2017-12-22 2022-05-17 深圳市英威腾电气股份有限公司 Method, device and equipment for monitoring industry information and readable storage medium
CN108365989A (en) * 2018-01-26 2018-08-03 北京奇虎科技有限公司 Event-handling method and device
CN108845920A (en) * 2018-05-24 2018-11-20 北京奇安信科技有限公司 A kind of method and system that performance test resource is automatically-monitored
CN108845916A (en) * 2018-07-03 2018-11-20 中国联合网络通信集团有限公司 Platform monitoring and alarm method, device, equipment and computer readable storage medium
CN110032491A (en) * 2019-03-01 2019-07-19 西安电子科技大学 A kind of microprocessor monitors method and system
CN111722983A (en) * 2020-06-19 2020-09-29 中国银行股份有限公司 Configurable event operation control method and system
CN111722983B (en) * 2020-06-19 2024-03-15 中国银行股份有限公司 Configurable event operation control method and system

Similar Documents

Publication Publication Date Title
CN107391344A (en) A kind of event-monitoring method, platform and system
US11526342B2 (en) Cancel and rollback update stack requests
US8843676B2 (en) Optimizing an operating system I/O operation that pertains to a specific program and file
US8707386B2 (en) Policy processing system, method, and program
US20090177929A1 (en) Method and apparatus for adaptive declarative monitoring
US9158606B2 (en) Failure repetition avoidance in data processing
JP2011053995A (en) Data processing control method and computer system
CN102081554A (en) Cloud computing operating system as well as kernel control system and method thereof
CN106940699A (en) A kind of synchronization processing method of internal storage data, device, server and system
CN110417614B (en) Cloud server self-checking method, device, equipment and computer readable storage medium
CN105468522A (en) Linux system CPU load control-based software pressure test method
Wang et al. Design of a maximally permissive liveness‐enforcing supervisor with reduced complexity for automated manufacturing systems
CN108287769A (en) A kind of information processing method and device
CN104901833B (en) A kind of method and device for the equipment that notes abnormalities
CN104246693A (en) Information processing device and method for protecting data in a call stack
US8468386B2 (en) Detecting and recovering from process failures
EP3399413B1 (en) Component logical threads quantity adjustment method and device
CN105635231A (en) Calling method and apparatus of distributed system
US20110258478A1 (en) Facade for business risk minimization in change administration via risk estimation and mistake identification by ticket analysis
CN113672471A (en) Software monitoring method, device, equipment and storage medium
US20220021696A1 (en) Minimizing Production Disruption Through A Scan Rule Engine
CN112559084B (en) Method, apparatus, device, storage medium and program product for administering services
CN114513468B (en) Method, device, equipment, storage medium and product for protecting flow in Sentinel
CN110457018A (en) A kind of data management system and its management method based on Hadoop
CN105260193A (en) Self healing frame and healing method of large software

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20171124

RJ01 Rejection of invention patent application after publication