CN110113201B - Monitoring data processing method and device and monitoring system - Google Patents
Monitoring data processing method and device and monitoring system Download PDFInfo
- Publication number
- CN110113201B CN110113201B CN201910359270.4A CN201910359270A CN110113201B CN 110113201 B CN110113201 B CN 110113201B CN 201910359270 A CN201910359270 A CN 201910359270A CN 110113201 B CN110113201 B CN 110113201B
- Authority
- CN
- China
- Prior art keywords
- monitored
- data
- alarm condition
- busy state
- busy
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
- H04L41/064—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis involving time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
- H04L67/025—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP] for remote control or remote monitoring of applications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Health & Medical Sciences (AREA)
- Computing Systems (AREA)
- General Health & Medical Sciences (AREA)
- Medical Informatics (AREA)
- Debugging And Monitoring (AREA)
Abstract
The application relates to the technical field of cloud monitoring, and particularly provides a monitoring data processing method, a monitoring data processing device and a monitoring system, wherein the monitoring data processing method comprises the following steps: acquiring data to be monitored; when the data to be monitored meets an alarm condition, sending alarm information; and adjusting the alarm condition according to the acquired time of the data to be monitored. The monitoring data processing method, the monitoring data processing device and the monitoring system can improve the alarm accuracy of the monitoring system.
Description
Technical Field
The application relates to the technical field of cloud monitoring, and particularly provides a monitoring data processing method, a monitoring data processing device and a monitoring system.
Background
The monitoring system can be applied to the fields of industrial production, traditional internet, mobile communication technology and the like, is used for monitoring the operation data of a certain service, and can send out an alarm message when the operation data meets an alarm condition. Typically, the corresponding warning condition is constant for one item of operational data. Because the service in some fields has a peak period and a valley period in one day, the alarm of the operation data is slow in the valley period, and the real fault cannot be alarmed; and the alarm in the peak period is too sensitive, and multiple alarms are generated, so that the normal operation of the service is influenced.
Disclosure of Invention
The application provides a monitoring data processing method, a monitoring data processing device and a monitoring system, which are used for solving the problem of inaccurate alarm in the related technology.
An embodiment of a first aspect of the present application provides a monitoring data processing method, including:
acquiring data to be monitored;
when the data to be monitored meets an alarm condition, sending alarm information;
and adjusting the alarm condition according to the acquired time of the data to be monitored.
The method for adjusting the alarm condition according to the time when the data to be monitored is acquired includes:
dividing the service operation time into at least two time intervals according to the busy degree of the service corresponding to the data to be monitored, wherein each time interval corresponds to a target alarm condition;
determining a time interval in which the acquired time of the data to be monitored falls;
and modifying the alarm condition into a target alarm condition corresponding to the falling time interval.
In the method, the busy level of the traffic corresponding to the data to be monitored includes: idle state, general busy state, and busy state.
The method as described above, further comprising:
and adjusting the alarm condition according to the duration of the busy state of the business corresponding to the data to be monitored.
The method for adjusting the alarm condition according to the duration of the busy state of the service corresponding to the data to be monitored comprises the following steps:
and if the duration of the business corresponding to the data to be monitored in the busy state exceeds the corresponding time interval, modifying the alarm condition into a target alarm condition corresponding to the busy state.
The method described above, adjusting the alarm condition according to the duration of the busy state of the service corresponding to the data to be monitored, further includes:
and if the duration of the business corresponding to the data to be monitored in the busy state is less than the corresponding time interval, modifying the alarm condition into a target alarm condition corresponding to a general busy state or an idle state.
The method as described above, further comprising:
and if the fact that the event which can change the business busy degree corresponding to the data to be monitored is triggered is identified, adjusting the alarm condition according to the business busy degree corresponding to the data to be monitored.
An embodiment of a second aspect of the present application provides a monitoring data processing apparatus, including:
the data acquisition module to be monitored is used for acquiring data to be monitored;
the alarm information sending module is used for sending alarm information when the data to be monitored meets an alarm condition;
and the alarm condition adjusting module is used for adjusting the alarm condition according to the acquired time of the data to be monitored.
In an embodiment of a third aspect of the present application, a monitoring system includes:
a memory;
a processor; and
a computer program;
wherein the computer program is stored in the memory and configured to be executed by the processor to implement the method as described above.
A fourth aspect of the present application is directed to a computer-readable storage medium having a computer program stored thereon; the computer program is executed by a processor to implement the method as described above.
According to the technical scheme, the alarm condition is adjusted according to the time of the data to be monitored, whether the data to be monitored meet the alarm condition is determined according to the adjusted alarm condition, if the adjusted alarm condition is met, the alarm information is sent, at least two alarm conditions are set, and different alarm conditions are adopted according to different time periods, so that the accuracy of alarming of the monitoring system is higher.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and together with the description, serve to explain the principles of the application.
Fig. 1 is a flowchart of a monitoring data processing method according to an embodiment of the present application;
fig. 2 is a flowchart of a monitoring data processing method according to a second embodiment of the present application;
fig. 3 is a schematic structural diagram of a monitoring data processing apparatus according to a third embodiment of the present application;
fig. 4 is a schematic structural diagram of a monitoring system according to a fourth embodiment of the present application.
With the above figures, there are shown specific embodiments of the present application, which will be described in more detail below. These drawings and written description are not intended to limit the scope of the inventive concepts in any manner, but rather to illustrate the inventive concepts to those skilled in the art by reference to specific embodiments.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are some embodiments of the present application, but not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
Example one
The embodiment provides a monitoring data processing method, which can be applied to a plurality of fields, for example: industrial production, traditional internet, mobile communication, etc., the method may be performed by a processor in a monitoring system.
The method provided by the embodiment can be applied to an electronic terminal, and the electronic terminal can be a server, a smart phone, a tablet computer, a portable computer, a desktop computer and other terminal equipment with an operation function. The electronic terminal includes: a processor, a memory, a network interface, and a communication bus.
Wherein the memory includes at least one type of readable storage medium. The at least one type of readable storage medium may be a non-volatile storage medium such as a flash memory, a hard disk, a multimedia card, a card-type memory, and the like. In some embodiments, the readable storage medium may be an internal storage unit of the electronic terminal, such as a hard disk of the electronic terminal. In other embodiments, the readable storage medium may also be an external memory of the electronic terminal, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card), and the like, which are provided on the electronic terminal.
In this embodiment, the readable storage medium of the memory is generally used for storing the processing program installed in the electronic terminal and pre-stored upper threshold or lower threshold corresponding to the alarm condition. The memory may also be used to temporarily store data that has been output or is to be output.
The processor may be, in some embodiments, a Central Processing Unit (CPU), microprocessor or other data Processing chip for executing program code stored in memory or Processing data.
The network interface may optionally include a standard wired interface, a wireless interface (e.g., a WI-FI interface), typically used to establish a communication connection between the electronic terminal and other electronic terminals.
The communication bus is used to enable connection communication between these components.
Optionally, the electronic terminal may further include a user interface, which may include an input unit such as a Keyboard (Keyboard), a voice input device such as a microphone (microphone) or other device having a voice recognition function, a voice output device such as a speaker, a headset, or the like, and optionally may further include a standard wired interface, a wireless interface.
Optionally, the electronic terminal may further include a display, which may also be referred to as a display screen or a display unit. In some embodiments, the display device may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an Organic Light-Emitting Diode (OLED) touch device, or the like. The display is used for displaying information processed in the electronic terminal and for displaying a visualized user interface.
Optionally, the electronic terminal further comprises a touch sensor. The area provided by the touch sensor and used for a user to perform touch operation is called a touch area. Further, the touch sensor described herein may be a resistive touch sensor, a capacitive touch sensor, or the like. The touch sensor may include not only a contact type touch sensor but also a proximity type touch sensor. Further, the touch sensor may be a single sensor, or may be a plurality of sensors arranged in an array, for example.
In addition, the area of the display of the electronic terminal may be the same as or different from the area of the touch sensor. Optionally, a display is stacked with the touch sensor to form a touch display screen. The device detects touch operation triggered by a user based on the touch display screen.
Optionally, the electronic terminal may further include a Radio Frequency (RF) circuit, a sensor, an audio circuit, and the like, which are not described herein again.
Fig. 1 is a flowchart of a monitoring data processing method according to an embodiment of the present application. As shown in fig. 1, a memory, which is a kind of computer storage medium, may include therein an operating system, and a monitoring data processing program; the processor executes the monitoring data processing program stored in the memory and realizes the following steps:
The data to be monitored can be set according to the application field of the monitoring system and the service to be monitored. For example: the monitoring system is applied to the mobile internet, and is intended to monitor a certain application installed on a smart phone, for example, a certain takeout application, and the data to be monitored may specifically be the utilization rate of a Central Processing Unit (CPU), so that the monitoring system can know the change of the utilization rate of the CPU during the running period of the takeout application, and monitor and alarm the takeout application.
The monitoring system may be provided in an electronic terminal, for example: the method is arranged in the electronic terminal in a software mode, and the utilization rate of the CPU is acquired during the running of the takeout application program, and is monitored and alarmed. Or, the monitoring system can also be arranged at the server end, and acquires the utilization rate of the CPU through the mobile internet and monitors and alarms the utilization rate.
And 102, sending alarm information when the data to be monitored meets the alarm condition.
If the monitoring data is in the abnormal operation range, the alarm condition is considered to be met; and if the alarm is in the normal range, the alarm condition is not met.
For example: when the utilization rate of the CPU is more than or equal to 85%, the alarm condition is met, and alarm information can be sent out; and when the utilization rate of the CPU is less than 85%, the CPU is judged not to meet the alarm condition.
And 103, adjusting the alarm condition according to the acquired time of the data to be monitored.
Adjusting alarm conditions according to the time when the data to be monitored is acquired, for example: setting different alarm conditions at different time intervals in a natural day, recording the current time while acquiring data to be monitored, judging which time interval the current time is in one day, extracting the corresponding alarm condition in the time interval, and judging whether the monitored data meets the alarm condition.
For example: in a time period of 9; and if the CPU utilization rate is less than 95%, determining that the alarm condition is not met. If the CPU utilization rate is more than or equal to 50% in the rest time period of a natural day, the alarm information can be sent out if the alarm condition is met; and if the CPU utilization rate is less than 50%, determining that the alarm condition is not met.
According to the technical scheme provided by the embodiment, the alarm condition is adjusted according to the acquired time of the data to be monitored, whether the data to be monitored meets the alarm condition is determined according to the adjusted alarm condition, if the adjusted alarm condition is met, the alarm information is sent, namely, at least two alarm conditions are set, and different alarm conditions are adopted according to different time periods, so that the accuracy of alarming of the monitoring system is higher.
The CPU usage rate is only used as an example, and does not mean that the CPU usage rate is the only data to be monitored. The data to be monitored can also be memory occupancy rate or other data needing to be monitored.
Example two
The embodiment optimizes the monitoring data processing method based on the above embodiment, and particularly further optimizes the manner of adjusting the alarm condition.
Fig. 2 is a flowchart of a monitoring data processing method according to a second embodiment of the present application. As shown in fig. 2, the monitoring data processing method provided in this embodiment includes:
The data to be monitored can be set according to the application field of the monitoring system and the service to be monitored. For example: the monitoring system is applied to the mobile internet, and is intended to monitor a certain application installed on a smart phone, for example, a certain takeout application, and the data to be monitored may specifically be the utilization rate of a Central Processing Unit (CPU), so that the monitoring system can know the change of the utilization rate of the CPU during the running period of the takeout application, and monitor and alarm the takeout application.
The monitoring system may be provided in an electronic terminal, for example: the method is arranged in the electronic terminal in a software mode, and the utilization rate of the CPU is acquired during the running of the takeout application program, and is monitored and alarmed. Or, the monitoring system can also be arranged at the server end, and acquires the utilization rate of the CPU through the mobile internet and monitors and alarms the utilization rate.
And 102, sending alarm information when the data to be monitored meets the alarm condition.
If the monitoring data is in the abnormal operation range, the alarm condition is considered to be met; if the alarm is in the normal range, the alarm condition is not met.
For example: when the utilization rate of the CPU is more than or equal to 85%, the alarm condition is met, and alarm information can be sent out; and when the utilization rate of the CPU is less than 85%, the CPU is judged not to meet the alarm condition.
Step 103 in the first embodiment may be implemented in the following manner:
Each time interval corresponds to a target alarm condition.
The degree of busy can be considered by the frequency or amount of use of the traffic, and it can be determined whether the traffic is busy by the number of transmitted packets in a narrow sense.
In this step, the busy degree of the service can be divided into: the system comprises a busy state and an idle state, wherein the busy state corresponds to one time interval, and the idle state corresponds to the other time interval. Or, the busy degree of the traffic can be further divided into: busy, half busy and idle correspond to a time interval respectively.
For example: in the working time 9 of people, the use rate of the mailbox is high and the busy degree is high; and in the non-working time 18. Then two time intervals of 9-00 and 18-00-the next day 9 can be divided according to the busy level of mailbox usage.
Each time interval corresponds to one target alarm condition, the target alarm condition corresponding to 9-00 is 95%, and the target alarm condition corresponding to 18-00-the next day 9 is 50%.
For another example: at 10; at 13; at 20. Therefore, one natural day can be divided into three periods according to how busy the application is sold in a spot: 10-00, 13-20.
Each time interval corresponds to one target alarm condition, the target alarm condition corresponding to 10-00 is 95%, the target alarm condition corresponding to 13-00 is 85%, and the target alarm condition corresponding to 20.
And step 1032, determining a time interval in which the time of the data to be monitored is acquired.
Specifically, the time interval in which the data to be monitored is acquired is determined, and the degree of the current busy traffic can be obtained through the time interval.
And step 1033, modifying the alarm condition to a target alarm condition corresponding to the falling time interval.
Modifying alarm conditions according to the degree of busy traffic, and if the falling time interval corresponds to a busy state, adopting target alarm conditions corresponding to the busy state to perform alarm judgment on the data to be monitored; and if the falling time interval corresponds to the idle state, adopting the target alarm condition corresponding to the idle state to carry out alarm judgment on the data to be monitored.
Taking a point take-out application as an example of a monitoring service, if the time for acquiring the CPU utilization is 12. The alarm condition is modified to a target alarm condition corresponding to the time interval 10-00: the modification was 95%. Corresponding to that in the time interval 10.
Compared with the related art, in the time interval 10-13. If the alarm condition is fixedly set to 85% according to the related art, the monitoring system will frequently send out alarm information in this time interval, which causes interference to the normal operation of the service.
On the other hand, if the time at which the CPU utilization is acquired is 22. The alarm condition is modified to a target alarm condition corresponding to the time interval 20-the next day 10, namely: the modification was 50%. Corresponding to that in the time interval 20.
Compared with the related art, in the time interval 20-10 days, few people take out, the application program is in an idle period, the CPU utilization rate is usually less than 50%, and once the CPU utilization rate is more than 70%, the CPU is considered abnormal. If the alarm condition is fixedly set to 85% according to the related art, in this time interval, as long as the CPU utilization rate is lower than 85%, no alarm information is generated, and possible abnormal events may be missed.
By adopting the scheme provided by the embodiment, the business is divided into at least two time periods according to the busyness degree of the business, each time period corresponds to one target alarm condition, and the monitored data is judged and alarm processed by adopting the corresponding alarm conditions according to different time periods, so that more false alarms generated in the peak period of the business can be avoided, the alarm sensitivity in the valley period of the business can be improved, and omission can be avoided.
The busy level may be set according to the type of the service, for example, if the service type is a mailbox, the busy level may be set as: the busy state and the idle state are correspondingly divided into two time periods. If the service type is a takeaway application, the busy level may be set as: the idle state, the general busy state and the busy state are correspondingly divided into three time periods.
Furthermore, the alarm condition can be adjusted according to the duration of the busy state of the business corresponding to the data to be monitored. If the duration of the business in the busy state is longer than the normal duration, the data to be monitored can be processed according to the target alarm condition corresponding to the busy state. If the duration of the business in the busy state is short, which is equivalent to that the busy state is finished in advance, the data to be monitored can be processed according to the target alarm condition of the idle state.
Specifically, if the duration of the business in the busy state corresponding to the data to be monitored exceeds the corresponding time interval, the alarm condition is modified into the target alarm condition corresponding to the busy state.
For example: the set time period corresponding to the busy state is 10-00, and the adopted alarm condition is 95%. However, in actual operation, the traffic is at 13: and after 00, the alarm is still in a busy state, and if the alarm condition is modified to 85%, a false alarm phenomenon occurs. Therefore, after 13.
And if the duration of the business in the busy state corresponding to the data to be monitored is less than the corresponding time interval, which is equivalent to the early end, the alarm condition is modified into a target alarm condition corresponding to a general busy state or an idle state.
For example: the set time period corresponding to the busy state is 10-00, and the adopted alarm condition is 95%. However, in the actual operation process, the busy state is ended in advance at 12. Therefore, after the busy state is finished, the alarm condition is modified to a target alarm condition corresponding to a general busy state or an idle state, that is: 85% or 50%, the omission of critical fault data can be avoided.
And further, if an event which can change the business busy degree corresponding to the data to be monitored is identified to be triggered, adjusting the alarm condition according to the business busy degree corresponding to the data to be monitored.
An event capable of changing the busy degree of the corresponding service of the data to be monitored is triggered, and in a normal operation condition, only the busy degree of the service is changed, but the condition that the alarm is required does not exist.
For example: for the situation that the data to be monitored is the utilization rate of the CPU, an event that can change the busy degree of the traffic corresponding to the data to be monitored may be system update, and the utilization rate of the CPU is high in the process of system update, which is a normal phenomenon. After the electronic terminal starts system update, if the data to be monitored is processed according to the constant alarm condition in the related art, a false alarm may occur.
Therefore, in this embodiment, when it is recognized that the system update is started, the alarm condition is adjusted according to the busy level of the service, for example: when traffic is in a busy state, an alarm condition may be increased, such as to 98%; when the traffic is in an idle state, the alarm condition may be increased, such as to 60%.
The acquiring mode of the busy degree can be set according to historical data or experience, the monitoring system inspects the busy degree of the service in a period of time in advance, determines a change rule, and then determines the busy degree according to the change rule. The busy degree of the service can be determined through the transmitted data packets, and if the number of the data packets is large, the service is busy; if the number of the data packets is less, the service is idle.
The mailbox application program and the takeaway application program are only taken as two examples, and both the mailbox application program and the takeaway application program can apply the method provided by the embodiment, and of course, the method provided by the embodiment can be applied to not only the two application programs, but also other application programs in the electronic terminal, and can also monitor the running state of the electronic terminal. Those skilled in the art can directly apply the method provided in this embodiment or apply the method after adaptive modification according to the actual application scenario.
EXAMPLE III
Fig. 3 is a schematic structural diagram of a monitoring data processing apparatus according to a third embodiment of the present application. As shown in fig. 3, the present embodiment provides a monitoring data processing apparatus, including: a data to be monitored acquisition module 31, an alarm information sending module 32 and an alarm condition adjustment module 33.
The data to be monitored obtaining module 31 is configured to obtain data to be monitored. The alarm information sending module 32 is configured to send alarm information when the data to be monitored meets an alarm condition. The alarm condition adjusting module 33 is configured to adjust an alarm condition according to the acquired time of the data to be monitored, so that the newly acquired data to be monitored performs an alarm according to the adjusted alarm condition.
The data to be monitored can be set according to the application field of the monitoring system and the service to be monitored. For example: the monitoring system is applied to the mobile internet, and is intended to monitor a certain application program installed on the smart phone, for example, a certain takeout application program, and the data to be monitored can be the utilization rate of the CPU, so that the monitoring system can know the change condition of the utilization rate of the CPU during the running period of the takeout application program, and monitor and alarm the takeout application program.
The monitoring system may be provided in an electronic terminal, for example: the method is arranged in the electronic terminal in a software mode, and the utilization rate of the CPU is acquired during the running of the takeout application program, and is monitored and alarmed. Or, the monitoring system can also be arranged at the server end, and acquires the utilization rate of the CPU through the mobile internet and monitors and alarms the utilization rate.
According to the technical scheme provided by the embodiment, the alarm condition is adjusted according to the acquired time of the data to be monitored, whether the data to be monitored meets the adjusted alarm condition is determined according to the adjusted alarm condition, if the adjusted alarm condition is met, the alarm information is sent, namely, at least two alarm conditions are set, and different alarm conditions are adopted according to different time intervals, so that the alarm accuracy of the monitoring system is higher.
The alarm condition adjusting module 33 specifically includes: the device comprises a time interval dividing unit, a time interval determining unit and an alarm condition modifying unit. The time interval dividing unit is used for dividing the service operation time into at least two time intervals according to the busy degree of the service corresponding to the data to be monitored, and each time interval corresponds to one target alarm condition. The time interval determining unit is used for determining a time interval in which the time for acquiring the data to be monitored falls. And the alarm condition modifying unit modifies the alarm condition into a target alarm condition corresponding to the falling time interval.
The busy degree of the service corresponding to the data to be monitored comprises the following steps: idle state, general busy state, and busy state.
Further, the alarm condition adjusting module 33 is further configured to adjust the alarm condition according to the duration of the busy state of the service corresponding to the data to be monitored, and specifically, when the duration of the busy state of the service corresponding to the data to be monitored exceeds the corresponding time interval, modify the alarm condition into a target alarm condition corresponding to the busy state; and when the duration of the business in the busy state corresponding to the data to be monitored is less than the corresponding time interval, modifying the alarm condition into a target alarm condition corresponding to a general busy state or an idle state.
The alarm condition adjusting module 33 is further configured to adjust an alarm condition according to the busy level of the service corresponding to the data to be monitored when an event that can change the busy level of the service corresponding to the data to be monitored is triggered.
The monitoring data processing device can execute the method provided by any embodiment and has the same technical effect as the method.
Example four
Fig. 4 is a schematic structural diagram of a monitoring system according to a fourth embodiment of the present application. As shown in fig. 4, the present embodiment provides a monitoring system, including: memory, processor, and computer programs.
Wherein the computer program is stored in the memory and configured to be executed by the processor to implement the method as provided in any of the embodiments described above.
The monitoring system provided by this embodiment adjusts the alarm condition according to the time when the data to be monitored is acquired, determines whether the data to be monitored meets the adjusted alarm condition according to the adjusted alarm condition, and sends out the alarm information if the adjusted alarm condition is met, which is equivalent to setting at least two alarm conditions, and adopts different alarm conditions according to different time intervals, so that the accuracy of the alarm performed by the monitoring system is higher.
The present embodiment also provides a computer-readable storage medium, characterized in that a computer program is stored thereon; the computer program is executed by a processor to implement the method provided by any one of the above embodiments, and the technical effects of the method are the same.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
Finally, it should be noted that: the above embodiments are only used for illustrating the technical solutions of the present application, and not for limiting the same; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art will understand that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and these modifications or substitutions do not depart from the scope of the technical solutions of the embodiments of the present application.
Claims (7)
1. A method for processing monitored data, comprising:
acquiring data to be monitored;
when the data to be monitored meets an alarm condition, sending alarm information;
adjusting the alarm condition according to the acquired time of the data to be monitored;
dividing the service operation time into at least two time intervals according to the busy degree of the service corresponding to the data to be monitored, wherein each time interval corresponds to a target alarm condition; the busy degree of the traffic corresponding to the data to be monitored comprises the following steps: an idle state, a general busy state, and a busy state; adjusting the alarm condition according to the duration of the busy state of the business corresponding to the data to be monitored; the adjusting the alarm condition according to the duration that the service corresponding to the data to be monitored is in a busy state comprises the following steps:
if the duration of the business corresponding to the data to be monitored in the busy state exceeds the corresponding time interval, modifying the alarm condition into a target alarm condition corresponding to the busy state;
determining a time interval in which the acquired time of the data to be monitored falls;
and modifying the alarm condition into a target alarm condition corresponding to the falling time interval.
2. The method of claim 1, wherein the adjusting the alarm condition according to the duration of the busy state of the traffic corresponding to the data to be monitored further comprises:
and if the duration of the business corresponding to the data to be monitored in the busy state is less than the corresponding time interval, modifying the alarm condition into a target alarm condition corresponding to a general busy state or an idle state.
3. The method of claim 1, further comprising:
and if the fact that the event which can change the business busy degree corresponding to the data to be monitored is triggered is identified, adjusting the alarm condition according to the business busy degree corresponding to the data to be monitored.
4. A monitoring system, comprising:
a memory;
a processor; and
a computer program;
wherein the computer program is stored in the memory and configured to be executed by the processor to implement the steps of:
acquiring data to be monitored;
when the data to be monitored meets an alarm condition, sending alarm information;
adjusting the alarm condition according to the acquired time of the data to be monitored; the busy degree of the traffic corresponding to the data to be monitored comprises the following steps: an idle state, a general busy state, and a busy state; adjusting the alarm condition according to the duration of the busy state of the business corresponding to the data to be monitored; the adjusting the alarm condition according to the duration that the service corresponding to the data to be monitored is in a busy state comprises the following steps:
if the duration of the business corresponding to the data to be monitored in the busy state exceeds the corresponding time interval, modifying the alarm condition into a target alarm condition corresponding to the busy state;
dividing the service operation time into at least two time intervals according to the busyness degree of the service corresponding to the data to be monitored, wherein each time interval corresponds to a target alarm condition;
determining a time interval in which the acquired time of the data to be monitored falls;
and modifying the alarm condition into a target alarm condition corresponding to the falling time interval.
5. A monitoring system according to claim 4, wherein the processor executes to implement the method of any of claims 2-3.
6. A monitoring data processing apparatus, characterized by comprising:
the data acquisition module to be monitored is used for acquiring data to be monitored;
the alarm information sending module is used for sending alarm information when the data to be monitored meets an alarm condition;
the alarm condition adjusting module is used for adjusting the alarm condition according to the acquired time of the data to be monitored; the busy degree of the traffic corresponding to the data to be monitored comprises the following steps: an idle state, a general busy state, and a busy state; adjusting the alarm condition according to the duration of the busy state of the business corresponding to the data to be monitored; the adjusting of the alarm condition according to the duration time of the business in the busy state corresponding to the data to be monitored comprises the following steps:
and if the duration of the business corresponding to the data to be monitored in the busy state exceeds the corresponding time interval, modifying the alarm condition into a target alarm condition corresponding to the busy state.
7. A computer-readable storage medium, having stored thereon a computer program; the computer program is executed by a processor to implement the method of any one of claims 1-3.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910359270.4A CN110113201B (en) | 2019-04-30 | 2019-04-30 | Monitoring data processing method and device and monitoring system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910359270.4A CN110113201B (en) | 2019-04-30 | 2019-04-30 | Monitoring data processing method and device and monitoring system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN110113201A CN110113201A (en) | 2019-08-09 |
| CN110113201B true CN110113201B (en) | 2022-12-23 |
Family
ID=67487709
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910359270.4A Active CN110113201B (en) | 2019-04-30 | 2019-04-30 | Monitoring data processing method and device and monitoring system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110113201B (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2021056537A1 (en) * | 2019-09-29 | 2021-04-01 | 深圳迈瑞生物医疗电子股份有限公司 | Adaptive alarm system, method and apparatus, and internet of things system |
| CN111917599B (en) * | 2020-06-03 | 2021-10-08 | 烽火通信科技股份有限公司 | Management system and method for cloud platform host state |
| CN115442215A (en) * | 2022-09-08 | 2022-12-06 | 平安付科技服务有限公司 | Processing method, device, equipment and medium for storage cluster monitoring data |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106161058A (en) * | 2015-04-02 | 2016-11-23 | 腾讯科技（深圳）有限公司 | A kind of alarm stage division and device |
| WO2017167021A1 (en) * | 2016-03-28 | 2017-10-05 | 阿里巴巴集团控股有限公司 | Abnormality monitoring method and device |
| CN109688188A (en) * | 2018-09-07 | 2019-04-26 | 平安科技（深圳）有限公司 | Monitoring alarm method, apparatus, equipment and computer readable storage medium |
-
2019
- 2019-04-30 CN CN201910359270.4A patent/CN110113201B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106161058A (en) * | 2015-04-02 | 2016-11-23 | 腾讯科技（深圳）有限公司 | A kind of alarm stage division and device |
| WO2017167021A1 (en) * | 2016-03-28 | 2017-10-05 | 阿里巴巴集团控股有限公司 | Abnormality monitoring method and device |
| CN109688188A (en) * | 2018-09-07 | 2019-04-26 | 平安科技（深圳）有限公司 | Monitoring alarm method, apparatus, equipment and computer readable storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN110113201A (en) | 2019-08-09 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110113201B (en) | Monitoring data processing method and device and monitoring system | |
| CN108845910B (en) | Monitoring method, device and storage medium of large-scale micro-service system | |
| CN111447150A (en) | Access request current limiting method, server and storage medium | |
| US20150153810A1 (en) | Dynamic battery management | |
| CN108038130B (en) | Automatic false user cleaning method, device, equipment and storage medium | |
| KR20190075861A (en) | Detection method, device, server and storage medium of DoS / DDoS attack | |
| US20140269339A1 (en) | System for analysing network traffic and a method thereof | |
| KR20170113614A (en) | Information processing method, terminal and computer readable storage medium | |
| CN108445475B (en) | Data processing method and device and related medium product | |
| CN107526637B (en) | Application processing method and device, mobile terminal and storage medium | |
| CN110399405A (en) | Log alarming method, apparatus, system and storage medium | |
| WO2021077375A1 (en) | Communication frequency adjustment method and apparatus, and electronic device and storage medium | |
| US11394730B2 (en) | Activity detection based on time difference metrics | |
| CN106294364B (en) | Method and device for realizing web crawler to capture webpage | |
| CN110674149A (en) | Service data processing method and device, computer equipment and storage medium | |
| CN107797924B (en) | SQL script abnormity detection method and terminal thereof | |
| US20120331473A1 (en) | Electronic device and task managing method | |
| CN115118636B (en) | Method and device for determining network jitter state, electronic equipment and storage medium | |
| CN111049679A (en) | Server warning method and system | |
| CN106651968B (en) | Game abnormity detection method and device | |
| CN116071123A (en) | Commodity data processing method, commodity data processing system, electronic equipment and storage medium | |
| KR102464688B1 (en) | Method and apparatus for detrmining event level of monitoring result | |
| EP3756356A1 (en) | Providing activity notifications regarding digital content | |
| CN114285844A (en) | Method and device for intelligently fusing server interface, electronic equipment and storage medium | |
| CN111431764B (en) | Node determining method, device, system and medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |