CN110362545A - Log monitoring method, device, terminal and computer readable storage medium - Google Patents
Log monitoring method, device, terminal and computer readable storage medium Download PDFInfo
- Publication number
- CN110362545A CN110362545A CN201910448209.7A CN201910448209A CN110362545A CN 110362545 A CN110362545 A CN 110362545A CN 201910448209 A CN201910448209 A CN 201910448209A CN 110362545 A CN110362545 A CN 110362545A
- Authority
- CN
- China
- Prior art keywords
- keyword
- test
- exception
- log
- journal file
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/10—File systems; File servers
- G06F16/17—Details of further file system functions
- G06F16/1734—Details of monitoring file system events, e.g. by the use of hooks, filter drivers, logs
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/10—File systems; File servers
- G06F16/18—File system types
- G06F16/1805—Append-only file systems, e.g. using logs or journals to store data
- G06F16/1815—Journaling file systems
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Data Mining & Analysis (AREA)
- Databases & Information Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Debugging And Monitoring (AREA)
Abstract
The embodiment of the present invention provides a kind of log monitoring method, monitors journal file；Keyword recognition is carried out to the content in the journal file；Judge whether identified keyword matches with the test exception keyword in preset keyword library, wherein the test exception keyword in the preset keyword library is automatically updated every predetermined period；If it is determined that when the test exception keyword in the keyword identified and the preset keyword library matches, then occur alarm prompt be sent to it is default using responsible person.The embodiment of the present invention also provides a kind of log monitoring device, terminal and computer readable storage medium.The present embodiments relate to cloud monitoring field, the warning function to monitored log may be implemented, can timely find log exception, and pass through alarm notification, it would be possible to which the risk of appearance is preferably minimized, while improving the analysis ability to log.
Description
Technical field
The present invention relates to cloud monitoring field more particularly to a kind of log monitoring method, log monitoring device, terminal and meters
Calculation machine readable storage medium storing program for executing.
Background technique
This part intends to is that the embodiment for the embodiment of the present invention stated in claims and specific embodiment mentions
For background or context.Description herein recognizes it is the prior art not because not being included in this section.
In the information-intensive society of current high speed development, people's smart machines such as too busy to get away computer, with computer skill
The maturation of art can inevitably go out in actual moving process again although the application program for running on smart machine is more and more reliable
The situation of existing mistake.Therefore, engineers and technicians usually require through log system, the operating status of records application program and behaviour
Make content, in case engineers and technicians check, as the foundation of debugging communication equipment.Log system is recorded in the form of log and is answered
With the various operating statuses and operation information of program, journal file is generated, journal file is generally stored inside in local memory device.
The alarm of log system in the industry at present is usually then configuration querying keyword searches corresponding keyword, is reached
It is just alerted to threshold value.These tool methods have the drawback that not in time, cannot find the mistake that program is dished out at the first time
Accidentally；Not intuitive, log is all the text information of magnanimity；It is not easy to extend, the scope of application is only limitted to a small amount of host and journal file
Type.
Summary of the invention
In consideration of it, it is necessary to provide a kind of log monitoring method, log monitoring device, terminal and computer-readable storages
The warning function to monitored log may be implemented in medium, can timely find log exception, and by alarm notification, will
The risk being likely to occur is preferably minimized, while improving the analysis ability to log.
On the one hand the embodiment of the present invention provides a kind of log monitoring method, the log monitoring method includes:
Monitor journal file；
Keyword recognition is carried out to the content in the journal file；
Judge whether identified keyword matches with the test exception keyword in preset keyword library, wherein
Test exception keyword in the preset keyword library is automatically updated every predetermined period；
If it is determined that when the test exception keyword in the keyword identified and the preset keyword library matches, then
Generation alarm prompt is sent to default using responsible person.
Further, in above-mentioned log monitoring method provided in an embodiment of the present invention, described to the journal file
In content carry out keyword recognition before, the method also includes:
The journal file is parsed；
Specified structure is converted by the journal file after parsing.
Further, in above-mentioned log monitoring method provided in an embodiment of the present invention, in the preset keyword library
Abnormal keyword is tested to be divided with pre-set categories, the test exception keyword support in the pre-set categories increases, deletes,
Modification, the operation searched.
Further, in above-mentioned log monitoring method provided in an embodiment of the present invention, in the preset keyword library
The abnormal keyword of test automatically update every predetermined period
Test exception keyword to be selected is obtained from appointed website；
It detects whether in the preset keyword library with the presence or absence of the test exception keyword to be selected；
If testing result be it is no, the test exception keyword to be selected is added to the preset keyword library
In.
Further, it in above-mentioned log monitoring method provided in an embodiment of the present invention, is sent by the alarm prompt
Before default application responsible person, the method also includes:
Extract the test exception keyword in the journal file；
The exception information recorded in the journal file is confirmed according to the abnormal keyword of the test；
According to the incidence relation between pre-set exception information and application responsible person, the corresponding exception information is obtained
Apply responsible person.
Further, in above-mentioned log monitoring method provided in an embodiment of the present invention, the pre-set abnormal letter
Incidence relation between breath and application responsible person includes: that corresponding one application of the pre-set exception information is responsible for
People, a pre-set exception information correspond to several using responsible person and several described pre-set exceptions
Information corresponding one is applied responsible person.
Further, in above-mentioned log monitoring method provided in an embodiment of the present invention, the content packet of the alarm prompt
Include: alarm level, the abnormal keyword of the test, with the test exception associated exception information of keyword and the survey
Try contextual information of the abnormal keyword in the journal file.
Another further aspect of the embodiment of the present invention also provides a kind of log monitoring device, and the log monitoring device includes:
Module is monitored in log, for monitoring journal file；
Keyword recognition module, for carrying out keyword recognition to the content in the journal file；
Abnormal judgment module, for judge identified keyword whether in preset keyword library test extremely close
Key word matches, wherein the test exception keyword in the preset keyword library is automatically updated every predetermined period；
Alarm prompt module, for determining that the test in identified keyword and the preset keyword library is abnormal
When keyword matches, generation alarm prompt is sent to default using responsible person.
Another further aspect of the embodiment of the present invention also provides a kind of terminal, and the terminal includes processor, and the processor is used for
The step of realizing log monitoring method described in above-mentioned any one when executing the computer program stored in memory.
Another further aspect of the embodiment of the present invention also provides a kind of computer readable storage medium, the computer-readable upper storage
There is computer program, the computer program realizes log monitoring method described in above-mentioned any one when being executed by processor
Step.
The embodiment of the present invention provides a kind of log monitoring method, log monitoring device, terminal and computer-readable storage
Medium monitors journal file；Keyword recognition is carried out to the content in the journal file；Judging identified keyword is
The no test exception keyword with preset keyword library matches, wherein the test in the preset keyword library is closed extremely
Key word is automatically updated every predetermined period；If it is determined that the test in the keyword identified and the preset keyword library
When abnormal keyword matches, then occur alarm prompt be sent to it is default using responsible person.It, can be with one using the embodiment of the present invention
Determine to realize the warning function to monitored log in degree, can timely find log exception, and by alarm notification, it can
The risk that can occur is preferably minimized, while improving the analysis ability to log, and the embodiment of the present invention provides one kind about pre-
If the interactive interface of key word library, user directly can increase preset keyword library on interactive interface, delete, repair
The operation change, searched reduces operation difficulty.
Detailed description of the invention
Fig. 1 is the flow chart for the log monitoring method that first embodiment of the invention provides.
Fig. 2 is the structural schematic diagram of the terminal of an embodiment of the present invention.
Fig. 3 is the illustrative functional block diagram of terminal shown in Fig. 2.
Main element symbol description
| Terminal | 1 |
| Memory | 10 |
| Display screen | 20 |
| Processor | 30 |
| Log monitoring device | 100 |
| Module is monitored in log | 101 |
| Keyword recognition module | 103 |
| Abnormal judgment module | 105 |
| Alarm prompt module | 107 |
The embodiment of the present invention that the following detailed description will be further explained with reference to the above drawings.
Specific embodiment
In order to be more clearly understood that the above objects, features, and advantages of the embodiment of the present invention, with reference to the accompanying drawing and
The present invention will be described in detail for specific embodiment.It should be noted that in the absence of conflict, the embodiment party of the application
Feature in formula can be combined with each other.
Embodiment in the following description, numerous specific details are set forth in order to facilitate a full understanding of the present invention, described reality
The mode of applying is only some embodiments of the invention, rather than whole embodiments.Based on the embodiment in the present invention,
Every other embodiment obtained by those of ordinary skill in the art without making creative efforts belongs to this
The range of inventive embodiments protection.
Unless otherwise defined, all technical and scientific terms used herein and the technology for belonging to the embodiment of the present invention
The normally understood meaning of the technical staff in field is identical.Term as used herein in the specification of the present invention is intended merely to
The purpose of specific embodiment is described, it is not intended that in the limitation embodiment of the present invention.
Fig. 1 is the flow chart of the log monitoring method of first embodiment of the invention, and the log monitoring method can answer
For terminal, the terminal can be the intelligence such as smart phone, laptop, desk-top/tablet computer, smartwatch and set
It is standby.As shown in Figure 1, the log monitoring method may include steps of:
S101: journal file is monitored.
Journal file is usually to record information according to row, normal operation information, exception information including programming system
And fault message.Therefore, in one embodiment, the variation of journal file can be monitored by row, i.e., record in journal file
During new information, the new information of record is monitored in real time, to find the exception or failure of programming system appearance.Specifically
, a line log information in new write-in journal file is obtained and analyzed, keyword recognition is carried out to a line log information.
It is understood that due to generation journal file be random character string, for convenience to journal file into
Row subsequent processing, while engineers and technicians consult and enhance the readability of journal file for convenience, are monitoring log text
Before part, journal file can also be parsed, and convert the journal file after parsing to the format of specified structure.
The format of the specified structure may include: log content, log rank, log generation time, log sender, log correspondence
Application program etc..Wherein, the log rank successively may include DEBUG, INFO, WARN, ERROR, FATAL from low to high
Rank.
S102: keyword recognition is carried out to the content in journal file.
The keyword is the pre-set pass for indicating when destination application occurs abnormal during the test
The keyword of the exception information recorded in log.In the present embodiment, the content in journal file carries out crucial
It may include as follows that word, which knows method for distinguishing: by the way that real-time and/or (scheduled duration interval is usually the second according to scheduled duration interval
Grade, such as can choose is 2 seconds) keyword recognition is carried out to the content in journal file.It can set to one or simultaneously
Multiple journal files are monitored.After monitoring the scanning journal file, the log text of Current Scan can also be recorded
The line number or byte number of part, to avoid part scanned before scanning, can be connected as the starting point of scanning next time
The place of last scan continues to scan on, to further increase working efficiency.
S103: whether the identified keyword of judgement matches with the test exception keyword in preset keyword library,
Wherein, the test exception keyword in the preset keyword library is automatically updated every predetermined period, however, it is determined that is identified
When the test exception keyword in keyword and the preset keyword library out matches, then S104 is entered step.
In the present embodiment, the terminal can provide an interactive interface about preset keyword library, the friendship
The test exception keyword in preset keyword library on mutual interface can be divided with pre-set categories, for example, described default
Classification can be JAVA classification, ORACLE classification, Kafka classification etc..Test exception keyword in the pre-set categories can be with
It supports the operation such as increase, delete, modifying, searching.Test exception keyword in the preset keyword library is every predetermined period
It is automatically updated, the predetermined period can be that system operators are pre-set for example, the predetermined period can be
Five working days.It is understood that can also be detected whether by terminal there are predetermined registration operation (for example, detection at the end
It holds and whether there is clicking operation/detection on the predeterminable area of screen in the pre-determined distance apart from the terminal screen (for example, default
Distance is 15 centimetres) in, if the singlehanded operation/detection for making hook is made in the pre-determined distance apart from the terminal screen, is
It is no to export default voice messaging (for example, phonetic order of output " update abnormal keyword ") etc.), predetermined registration operation if it exists, then
Test exception keyword in the preset keyword library is automatically updated.Specifically, the preset keyword library can be with
It is connected with several appointed websites, test exception keyword to be selected is obtained from appointed website；Detect the preset keyword
It whether there is the test exception keyword to be selected in library；If detecting, there is no described to be selected in the preset keyword library
Test exception keyword, then the test exception keyword to be selected is added in preset keyword library.
In one embodiment, on the interactive interface in preset keyword library, there are JAVA classification, ORACLE classification,
These three classification of Kafka classification, for each classification, inside can all have several and test abnormal keyword.With JAVA
For classification, the tests exception keyword such as java.lang.Error, Exception may include under JAVA classification.Described pre-
If on the interactive interface of key word library, deletion label (for example, fork label) can be carried behind the abnormal keyword of each test,
User selects (selection mode can be with clicking operation) described deletion label that can delete the abnormal keyword of the corresponding test of the label,
Complete the delete operation that abnormal keyword is tested in preset keyword library.On the interactive interface in the preset keyword library, often
A test can also carry newly-built label (for example, button of display " newly-built label " printed words), user behind abnormal keyword
Keyword can be created in preset keyword library by clicking the newly-built label.For newly-built keyword, need to supplement simultaneously
The information such as the title of newly-built keyword, the founder for creating keyword, the system name for creating keyword and newly-built keyword.Together
Reason can also carry modification label behind the abnormal keyword of each test on the interactive interface in the preset keyword library
(for example, Edit button of display pencil shape), user can be modified in preset keyword library by clicking modification label
Keyword.On the interactive interface in the preset keyword library, seeking can also be carried behind the abnormal keyword of each test
Label (for example, seeking button of display magnifying glass shape), user can be by clicking seeking label, in preset keyword library
Middle seeking keyword.
S104: alarm prompt is sent to default using responsible person.
It is understood that different servers corresponds to different test macros, different test macros is all corresponding specified
It is default apply responsible person.It is described default to be able to solve alarm received by its corresponding test macro using responsible person and ask
Topic.In the present embodiment, the test exception keyword in identified keyword and the preset keyword library is being determined
After matching, alarm prompt is sent to it is default using responsible person before, can be the following steps are included: extracting the day
Test exception keyword in will file；The abnormal letter recorded in the journal file is confirmed according to the exception keyword of testing
Breath；According to the incidence relation between pre-set exception information and application responsible person, answering for the corresponding exception information is obtained
Use responsible person.Incidence relation between the pre-set exception information and application responsible person includes: one and described sets in advance
The corresponding application responsible person of the exception information set, a pre-set exception information correspond to several using responsible person
And several corresponding one of described pre-set exception informations apply responsible person.Wherein, for being preset described in one
Exception information correspond to several using for responsible person, the terminal can monitor it is current it is corresponding several using responsible person
Whether it is in idle condition, namely whether current corresponding several of monitoring apply responsible person not in processing exception information, it is excellent
The application responsible person that first selection is in idle condition handles exception information.When several are in idle condition simultaneously using responsible person
Or simultaneously in green state of hurrying, then exception information is randomly assigned to using responsible person, so as to save exception information processing
Time improves the efficiency of journal file anomaly analysis.Application corresponding for pre-set exception information described in several
For responsible person, it is preferred that several described pre-set exception informations belong to same field, corresponding application responsible person ratio
It is relatively good at this field, so that avoiding cannot due to being bad at the field using responsible person during exception information processing
Reach the inefficiency of accurate analysis part exception information or analysis journal file and since exception information excessively leads to technology people
The case where member misses key log file, being capable of more efficient, the accurate analysis for completing journal file.
The content of the alarm prompt includes but is not limited to: alarm level, the abnormal keyword of the test and the test
The abnormal associated exception information of keyword and the contextual information for testing abnormal keyword in the journal file.
It can quickly confirm that the test is abnormal crucial from the contextual information for testing abnormal keyword in the journal file
Position of the word in journal file, it is convenient default to modify management using responsible person.It can be abnormal according to the test identified
Alarm level A, B, C is arranged in the quantity of keyword, wherein A can indicate that alarm level is minimum, and the embodiment of the present invention does not do this
It limits.Alarm level is set, can allow preset and responsible person is applied more intuitively to understand the case where journal file is abnormal.It can be with
Understand, by alarm prompt be sent to it is default using responsible person while, can also be abnormal by exception information and triggering
Instruction is counted and is monitored, the reference frame as follow-up maintenance, accident analysis.It is negative that alarm prompt is sent to default application
The mode for blaming people includes but is not limited to the forms such as mail notification, short massage notice, Advise By Wire.
System language used in method provided in an embodiment of the present invention can for Python, Java, C++, Mysql or
Oracle etc., used database can be Postgresql, and application environment can be Linux environment, not make herein specific
It limits.
The embodiment of the present invention provides a kind of log monitoring method, monitors journal file；To the content in the journal file
Carry out keyword recognition；Judge identified keyword whether with the test exception keyword phase in preset keyword library
Match, wherein the test exception keyword in the preset keyword library is automatically updated every predetermined period；If it is determined that being known
Not Chu keyword and the preset keyword library in test exception keyword when matching, then alarm prompt occurs and is sent to
It is default to apply responsible person.Using the embodiment of the present invention, the warning function to monitored log can be realized to a certain extent, it can
Timely discovery log is abnormal, and passes through alarm notification, it would be possible to which the risk of appearance is preferably minimized, while being improved to log
Analysis ability, and the embodiment of the present invention provides a kind of interactive interface about preset keyword library, user can be in interactive interface
On directly preset keyword library is increased, deletes, modify, searching operation, reduce operation difficulty.
It is the detailed description for being provided for the embodiments of the invention method progress above.Stream shown according to different requirements,
The execution sequence of square can change in journey figure, and certain squares can be omitted.It is provided for the embodiments of the invention terminal below
It is described.
The embodiment of the present invention also provides a kind of terminal, including memory 10, processor 30 and is stored on memory 10 simultaneously
The computer program that can be run on processor 30, the processor 30 realize any of the above-described embodiment when executing described program
Described in log monitoring method the step of.
Fig. 2 is the structural schematic diagram of the terminal of an embodiment of the present invention, as shown in Fig. 2, terminal 1 includes memory 10,
Log monitoring device 100 is stored in memory 10.The terminal 1 can be mobile phone, tablet computer, personal digital assistant etc.
Terminal with application display function.The log monitoring device 100 can monitor journal file；To in the journal file
Content carries out keyword recognition；Judge identified keyword whether with the test exception keyword phase in preset keyword library
Matching, wherein the test exception keyword in the preset keyword library is automatically updated every predetermined period；If it is determined that institute
When test exception keyword in the keyword identified and the preset keyword library matches, then alarm prompt transmission occurs
Responsible person is applied to default.Using the embodiment of the present invention, the warning function to monitored log, energy can be realized to a certain extent
Enough timely discovery logs are abnormal, and pass through alarm notification, it would be possible to which the risk of appearance is preferably minimized, while being improved to log
Analysis ability, and the embodiment of the present invention provides a kind of interactive interface about preset keyword library, and user can be on interaction circle
The operation directly increased preset keyword library on face, delete, modify, searched reduces operation difficulty.
In present embodiment, terminal 1 can also include display screen 20 and processor 30.Memory 10, display screen 20 can be with
It is electrically connected respectively with processor 30.
The memory 10 can be different type storage equipment, for storing Various types of data.For example, it may be terminal
1 memory, memory, can also be the storage card that can be external in the terminal 1, as flash memory, SM card (Smart Media Card,
Smart media card), SD card (Secure Digital Card, safe digital card) etc..In addition, memory 10 may include high speed
Random access memory can also include nonvolatile memory, such as hard disk, memory, plug-in type hard disk, intelligent memory card
(Smart Media Card, SMC), secure digital (Secure Digital, SD) card, flash card (Flash Card), at least
One disk memory, flush memory device or other volatile solid-state parts.Memory 10 is used to store Various types of data,
For example, the types of applications program (Applications) installed in the terminal 1, be arranged using above-mentioned log monitoring method,
The information such as the data of acquisition.
Display screen 20 is installed on terminal 1, for showing information.
Processor 30 is used to execute all kinds of softwares installed in the log monitoring method and the terminal 1, such as grasps
Make system and application display software etc..Processor 30 including but not limited to processor (Central Processing Unit,
CPU), micro-control unit (Micro Controller Unit, MCU) etc. is for interpretive machine and processing computer software
In data device.
The log monitoring device 100 may include one or more module, and one or more of modules are deposited
Storage is in the memory 10 of terminal 1 and is configured to be held by one or more processors (present embodiment is a processor 30)
Row, to complete the embodiment of the present invention.For example, as shown in fig.3, the log monitoring device 100 may include that log is monitored
Module 101, keyword recognition module 103, abnormal judgment module 105, alarm prompt module 107.The embodiment of the present invention is so-called
Module can be the program segment for completing a specific function, the implementation procedure than program more suitable for description software in the processor.
It is understood that each embodiment in corresponding above-mentioned log monitoring method, terminal 1 may include institute in Fig. 3
Part or all in each functional module shown, the function of each module will introduced in detail below.More than it should be noted that
In each embodiment of log monitoring method identical noun related terms and its it is specific illustrate be readily applicable to
Under to the function introduction of each module.For the sake of saving space and avoiding repetition, details are not described herein again.
Module 101 is monitored in log can be used for monitoring journal file.
Keyword recognition module 103 can be used for carrying out keyword recognition to the content in the journal file.
Abnormal judgment module 105 can be used for judging identified keyword whether with the test in preset keyword library
Abnormal keyword matches, wherein the test exception keyword in the preset keyword library carries out automatic every predetermined period
It updates.
Alarm prompt module 107 can be used for determining the survey in identified keyword and the preset keyword library
When the abnormal keyword of examination matches, generation alarm prompt is sent to default using responsible person.
The embodiment of the present invention also provides a kind of computer readable storage medium, is stored thereon with computer program, the meter
The step of calculation machine program realizes the log monitoring method in any of the above-described embodiment when being executed by processor 30.
If the integrated module/unit of 100/ terminal of log monitoring device, 1/ computer equipment is with SFU software functional unit
Form realize and when sold or used as an independent product, can store in a computer readable storage medium.
Based on this understanding, the present invention realizes all or part of the process in above embodiment method, can also pass through computer
Program is completed to instruct relevant hardware, and the computer program can be stored in a computer readable storage medium, should
Computer program is when being executed by processor, it can be achieved that the step of above-mentioned each embodiment of the method.Wherein, the computer program
Including computer program code, the computer program code can be source code form, object identification code form, executable file
Or certain intermediate forms etc..The computer readable storage medium may include: that can carry the computer program code
Any entity or device, recording medium, USB flash disk, mobile hard disk, magnetic disk, CD, computer storage, read-only memory (ROM,
Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signal, telecommunications letter
Number and software distribution medium etc..
Alleged processor 30 can be central processing unit (Central Processing Unit, CPU), can also be
Other general processors, digital signal processor (Digital Signal Processor, DSP), specific integrated circuit
(Application Specific Integrated Circuit, ASIC), ready-made programmable gate array (Field-
Programmable Gate Array, FPGA) either other programmable logic device, discrete gate or transistor logic,
Discrete hardware components etc..General processor can be microprocessor or the processor is also possible to any conventional processor
Deng the processor 30 is the control centre of 100/ terminal 1 of log monitoring device, whole using various interfaces and connection
The various pieces of a 100/ terminal 1 of log monitoring device.
For the memory 10 for storing the computer program and/or module, the processor 30 is by operation or holds
The computer program and/or module that row is stored in the memory 10, and the data being stored in memory 10 are called, it is real
The various functions of existing 100/ terminal 1 of log monitoring device.The memory 10 can mainly include storing program area and storage
Data field, wherein storing program area can application program needed for storage program area, at least one function (for example sound plays
Function, image player function etc.) etc.；Storage data area, which can be stored, uses created data (such as audio number according to mobile phone
According to, phone directory etc.) etc..
In several specific embodiments provided by the present invention, it should be understood that disclosed terminal and method, it can be with
It realizes by another way.For example, system embodiment described above is only schematical, for example, the module
Division, only a kind of logical function partition, there may be another division manner in actual implementation.
It is obvious to a person skilled in the art that the embodiment of the present invention is not limited to the details of above-mentioned exemplary embodiment,
And without departing substantially from the spirit or essential attributes of the embodiment of the present invention, this hair can be realized in other specific forms
Bright embodiment.Therefore, in all respects, the present embodiments are to be considered as illustrative and not restrictive, this
The range of inventive embodiments is indicated by the appended claims rather than the foregoing description, it is intended that being equal for claim will be fallen in
All changes in the meaning and scope of important document are included in the embodiment of the present invention.It should not be by any attached drawing mark in claim
Note is construed as limiting the claims involved.Multiple units, module or the device stated in system, device or terminal claim
It can also be implemented through software or hardware by the same unit, module or device.
Embodiment of above is only to illustrate the technical solution of the embodiment of the present invention rather than limits, although referring to above preferable
The embodiment of the present invention is described in detail in embodiment, those skilled in the art should understand that, it can be to this hair
The technical solution of bright embodiment is modified or equivalent replacement should not all be detached from the embodiment of the present invention technical solution spirit and
Range.
Claims (10)
1. a kind of log monitoring method, which is characterized in that the log monitoring method includes:
Monitor journal file；
Keyword recognition is carried out to the content in the journal file；
Judge whether identified keyword matches with the test exception keyword in preset keyword library, wherein described
Test exception keyword in preset keyword library is automatically updated every predetermined period；
If it is determined that then occurring when the test exception keyword in the keyword identified and the preset keyword library matches
Alarm prompt is sent to default using responsible person.
2. log monitoring method according to claim 1, which is characterized in that in the content in the journal file
Before carrying out keyword recognition, the method also includes:
The journal file is parsed；
Specified structure is converted by the journal file after parsing.
3. log monitoring method according to claim 1, which is characterized in that the test in the preset keyword library is abnormal
Keyword is divided with pre-set categories, and the test exception keyword support in the pre-set categories increases, deletes, modifying, searching
The operation looked into.
4. log monitoring method according to claim 1, which is characterized in that the test in the preset keyword library is abnormal
Keyword automatically update every predetermined period
Test exception keyword to be selected is obtained from appointed website；
It detects in the preset keyword library with the presence or absence of the test exception keyword to be selected；
If testing result be it is no, the test exception keyword to be selected is added in the preset keyword library.
5. log monitoring method according to claim 1, which is characterized in that be sent in the generation alarm prompt default
Before responsible person, the method also includes:
Extract the test exception keyword in the journal file；
The exception information recorded in the journal file is confirmed according to the abnormal keyword of the test；
According to the incidence relation between pre-set exception information and application responsible person, answering for the corresponding exception information is obtained
Use responsible person.
6. log monitoring method according to claim 5, which is characterized in that the pre-set exception information and application
Incidence relation between responsible person includes: that corresponding one of the pre-set exception information applies responsible person, an institute
It states pre-set exception information and corresponds to several using responsible person and several described pre-set exception informations correspondences
One is applied responsible person.
7. log monitoring method according to claim 1, which is characterized in that the content of the alarm prompt includes: alarm
Rank, the abnormal keyword of the test, with the test exception associated exception information of keyword and the test extremely
Contextual information of the keyword in the journal file.
8. a kind of log monitoring device, which is characterized in that the log monitoring device includes:
Module is monitored in log, for monitoring journal file；
Keyword recognition module, for carrying out keyword recognition to the content in the journal file；
Abnormal judgment module, for judge identified keyword whether with the test exception keyword in preset keyword library
Match, wherein the test exception keyword in the preset keyword library is automatically updated every predetermined period；
Alarm prompt module, for determining that identified keyword and the test in the preset keyword library are extremely crucial
When word matches, generation alarm prompt is sent to default using responsible person.
9. a kind of terminal, which is characterized in that the terminal includes processor, and the processor is used to execute to store in memory
The step of log monitoring method as described in claim 1-7 any one is realized when computer program.
10. a kind of computer readable storage medium, it is described it is computer-readable on be stored with computer program, which is characterized in that institute
State the step of log monitoring method as described in claim 1-7 any one is realized when computer program is executed by processor.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910448209.7A CN110362545A (en) | 2019-05-27 | 2019-05-27 | Log monitoring method, device, terminal and computer readable storage medium |
| PCT/CN2019/103366 WO2020237877A1 (en) | 2019-05-27 | 2019-08-29 | Log monitoring method and apparatus, terminal, and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910448209.7A CN110362545A (en) | 2019-05-27 | 2019-05-27 | Log monitoring method, device, terminal and computer readable storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN110362545A true CN110362545A (en) | 2019-10-22 |
Family
ID=68215350
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910448209.7A Pending CN110362545A (en) | 2019-05-27 | 2019-05-27 | Log monitoring method, device, terminal and computer readable storage medium |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN110362545A (en) |
| WO (1) | WO2020237877A1 (en) |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111240923A (en) * | 2019-11-29 | 2020-06-05 | 惠州市德赛西威汽车电子股份有限公司 | Automatic test method and device for recurring problems of vehicle navigation system and storage medium |
| CN111711540A (en) * | 2020-06-16 | 2020-09-25 | 中国联合网络通信集团有限公司 | Method and device for identifying government and enterprise business alarm |
| CN111752835A (en) * | 2020-06-24 | 2020-10-09 | 百度在线网络技术（北京）有限公司 | Test assisting method, device, equipment and storage medium |
| CN112416797A (en) * | 2020-12-02 | 2021-02-26 | 未来汽车科技（深圳）有限公司 | Method and system for automatically alarming and maintaining site when embedded software runs abnormally |
| CN113111037A (en) * | 2021-04-30 | 2021-07-13 | 杭州远石科技有限公司 | Log audit warning method, device and storage medium |
| CN113535458A (en) * | 2021-09-17 | 2021-10-22 | 上海观安信息技术股份有限公司 | Abnormal false alarm processing method and device, storage medium and terminal |
| CN114077525A (en) * | 2020-08-17 | 2022-02-22 | 鸿富锦精密电子(天津)有限公司 | Abnormal log processing method and device, terminal equipment, cloud server and system |
| CN114143166A (en) * | 2021-11-12 | 2022-03-04 | 锐捷网络股份有限公司 | Electronic equipment copy-down test monitoring method and device, electronic equipment and storage medium |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101765084A (en) * | 2008-12-24 | 2010-06-30 | 中国移动通信集团天津有限公司 | Processing method for core network data and device thereof |
| CN103324565A (en) * | 2012-05-30 | 2013-09-25 | 北京神州泰岳软件股份有限公司 | Log monitoring method |
| CN104424094A (en) * | 2013-08-26 | 2015-03-18 | 腾讯科技（深圳）有限公司 | Method and device for obtaining abnormal information and intelligent terminal device |
| WO2016161381A1 (en) * | 2015-04-03 | 2016-10-06 | Oracle International Corporation | Method and system for implementing a log parser in a log analytics system |
| CN106202511A (en) * | 2016-07-21 | 2016-12-07 | 浪潮(北京)电子信息产业有限公司 | A kind of alarm method based on log analysis and system |
| CN108712294A (en) * | 2018-06-05 | 2018-10-26 | 陈艳 | A method of network equipment monitoring alarm is realized based on Syslog knowledge bases |
| CN109344374A (en) * | 2018-08-22 | 2019-02-15 | 中国平安人寿保险股份有限公司 | Report generation method and device, electronic equipment based on big data, storage medium |
| US20190079818A1 (en) * | 2017-09-08 | 2019-03-14 | Oracle International Corporation | Techniques for managing and analyzing log data |
| CN109634818A (en) * | 2018-10-24 | 2019-04-16 | 中国平安人寿保险股份有限公司 | Log analysis method, system, terminal and computer readable storage medium |
| CN109766323A (en) * | 2018-12-17 | 2019-05-17 | 深圳壹账通智能科技有限公司 | The full link monitoring method, apparatus of loan transaction, computer equipment and storage medium |
Family Cites Families (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104184622A (en) * | 2014-09-09 | 2014-12-03 | 福建星网视易信息系统有限公司 | Log information notification method and system |
| CN106209405B (en) * | 2015-05-06 | 2019-11-08 | 中国移动通信集团内蒙古有限公司 | Method for diagnosing faults and device |
| CN107301115B (en) * | 2017-06-26 | 2020-12-18 | 中国铁道科学研究院电子计算技术研究所 | Application program exception monitoring and recovery method and device |
| CN109388623A (en) * | 2018-11-02 | 2019-02-26 | 郑州云海信息技术有限公司 | A kind of method, system and the associated component of equipment fault detection |
| CN109614469A (en) * | 2018-12-03 | 2019-04-12 | 郑州云海信息技术有限公司 | A kind of log analysis method and device |
-
2019
- 2019-05-27 CN CN201910448209.7A patent/CN110362545A/en active Pending
- 2019-08-29 WO PCT/CN2019/103366 patent/WO2020237877A1/en active Application Filing
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101765084A (en) * | 2008-12-24 | 2010-06-30 | 中国移动通信集团天津有限公司 | Processing method for core network data and device thereof |
| CN103324565A (en) * | 2012-05-30 | 2013-09-25 | 北京神州泰岳软件股份有限公司 | Log monitoring method |
| CN104424094A (en) * | 2013-08-26 | 2015-03-18 | 腾讯科技（深圳）有限公司 | Method and device for obtaining abnormal information and intelligent terminal device |
| WO2016161381A1 (en) * | 2015-04-03 | 2016-10-06 | Oracle International Corporation | Method and system for implementing a log parser in a log analytics system |
| CN106202511A (en) * | 2016-07-21 | 2016-12-07 | 浪潮(北京)电子信息产业有限公司 | A kind of alarm method based on log analysis and system |
| US20190079818A1 (en) * | 2017-09-08 | 2019-03-14 | Oracle International Corporation | Techniques for managing and analyzing log data |
| CN108712294A (en) * | 2018-06-05 | 2018-10-26 | 陈艳 | A method of network equipment monitoring alarm is realized based on Syslog knowledge bases |
| CN109344374A (en) * | 2018-08-22 | 2019-02-15 | 中国平安人寿保险股份有限公司 | Report generation method and device, electronic equipment based on big data, storage medium |
| CN109634818A (en) * | 2018-10-24 | 2019-04-16 | 中国平安人寿保险股份有限公司 | Log analysis method, system, terminal and computer readable storage medium |
| CN109766323A (en) * | 2018-12-17 | 2019-05-17 | 深圳壹账通智能科技有限公司 | The full link monitoring method, apparatus of loan transaction, computer equipment and storage medium |
Non-Patent Citations (4)
| Title |
|---|
| 姚诸香等: "一个轻便型综合监控系统的开发", 《江西电力》 * |
| 孙厚清: "水泵房远程监测系统", 《中国新通信》 * |
| 杨荣: "跨平台传输网管告警短信系统的实现", 《电信技术》 * |
| 陆昀晔等: "电子邮件安全监管系统", 《计算机工程》 * |
Cited By (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111240923A (en) * | 2019-11-29 | 2020-06-05 | 惠州市德赛西威汽车电子股份有限公司 | Automatic test method and device for recurring problems of vehicle navigation system and storage medium |
| CN111711540A (en) * | 2020-06-16 | 2020-09-25 | 中国联合网络通信集团有限公司 | Method and device for identifying government and enterprise business alarm |
| CN111711540B (en) * | 2020-06-16 | 2022-06-17 | 中国联合网络通信集团有限公司 | Method and device for identifying government and enterprise business alarm |
| CN111752835A (en) * | 2020-06-24 | 2020-10-09 | 百度在线网络技术（北京）有限公司 | Test assisting method, device, equipment and storage medium |
| CN114077525A (en) * | 2020-08-17 | 2022-02-22 | 鸿富锦精密电子(天津)有限公司 | Abnormal log processing method and device, terminal equipment, cloud server and system |
| CN112416797A (en) * | 2020-12-02 | 2021-02-26 | 未来汽车科技（深圳）有限公司 | Method and system for automatically alarming and maintaining site when embedded software runs abnormally |
| CN113111037A (en) * | 2021-04-30 | 2021-07-13 | 杭州远石科技有限公司 | Log audit warning method, device and storage medium |
| CN113535458A (en) * | 2021-09-17 | 2021-10-22 | 上海观安信息技术股份有限公司 | Abnormal false alarm processing method and device, storage medium and terminal |
| CN114143166A (en) * | 2021-11-12 | 2022-03-04 | 锐捷网络股份有限公司 | Electronic equipment copy-down test monitoring method and device, electronic equipment and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2020237877A1 (en) | 2020-12-03 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110362545A (en) | Log monitoring method, device, terminal and computer readable storage medium | |
| CN106844217B (en) | Method and device for embedding point of applied control and readable storage medium | |
| CN107273280B (en) | Log processing method and device, electronic equipment and storage medium | |
| CN110334241A (en) | Quality detecting method, device, equipment and the computer readable storage medium of customer service recording | |
| US20170185971A1 (en) | Maintenance method for facility | |
| CN109614313A (en) | Automated testing method, device and computer readable storage medium | |
| CN109597398A (en) | Failure automatic processing method, device, equipment and the storage medium of household electrical appliance | |
| CN110502318A (en) | Event-handling method, event processing server, storage medium and device | |
| CN105140810B (en) | The soft pressing plate of intelligent substation whole station, which is thrown, moves back status check system and method | |
| CN107193714B (en) | Alarm display method and device | |
| CN104636240B (en) | A kind of acquisition methods and terminal of information report | |
| CN110688300A (en) | Compatibility testing method, device, equipment and storage medium | |
| CN104320793B (en) | A kind of Automated testing method of cell phone short messages and system | |
| CN111935066A (en) | Method, client and system for carrying out security level protection management | |
| CN110851324B (en) | Log-based routing inspection processing method and device, electronic equipment and storage medium | |
| US20220052976A1 (en) | Answer text processing methods and apparatuses, and key text determination methods | |
| CN112231568B (en) | Hotel label automatic configuration method and device, electronic equipment and storage medium | |
| CN109194689A (en) | Abnormal behaviour recognition methods, device, server and storage medium | |
| CN113011159A (en) | Artificial seat monitoring method and device, electronic equipment and storage medium | |
| CN116011753A (en) | Method and device for realizing direct dispatch monitoring reminding of fault worksheet based on RPA robot | |
| CN110287700A (en) | A kind of iOS application safety analytical method and device | |
| CN109634838A (en) | Position method, apparatus, storage medium and the electronic equipment of application failure | |
| CN116383061A (en) | Method and related device for testing basic platform interface of substation control system | |
| CN115481025A (en) | Script recording method and device for automatic test, computer equipment and medium | |
| CN111274143B (en) | Buried point test method, buried point test device, buried point test equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20191022 |
|
| RJ01 | Rejection of invention patent application after publication |