CN110502404A - A kind of early-warning processing method and relevant device for administering platform based on data - Google Patents

A kind of early-warning processing method and relevant device for administering platform based on data Download PDF

Info

Publication number
CN110502404A
CN110502404A CN201910660102.9A CN201910660102A CN110502404A CN 110502404 A CN110502404 A CN 110502404A CN 201910660102 A CN201910660102 A CN 201910660102A CN 110502404 A CN110502404 A CN 110502404A
Authority
CN
China
Prior art keywords
early warning
data
platform
warning event
early
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201910660102.9A
Other languages
Chinese (zh)
Other versions
CN110502404B (en
Inventor
李诗诗
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Ping An Technology Shenzhen Co Ltd
Original Assignee
Ping An Technology Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ping An Technology Shenzhen Co Ltd filed Critical Ping An Technology Shenzhen Co Ltd
Priority to CN201910660102.9A priority Critical patent/CN110502404B/en
Publication of CN110502404A publication Critical patent/CN110502404A/en
Application granted granted Critical
Publication of CN110502404B publication Critical patent/CN110502404B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/32Monitoring with visual or acoustical indication of the functioning of the machine
    • G06F11/324Display of status information
    • G06F11/327Alarm or error message display

Abstract

The present invention relates to pedestal O&M fields, specifically disclose a kind of early-warning processing method and relevant device that platform is administered based on data, which comprises execute data and administer the Regular Task of platform, and detect the implementing result that the data administer platform Regular Task;When the implementing result that the data administer platform Regular Task is to execute failure, early warning event is generated;Mission failure relevant information associated with the early warning event is generated, and sends warning information corresponding with early warning event.The reason of present invention executes failure by detailed record rule solves the problems, such as to provide foundation, reduces the time of processing problem, improve efficiency to be subsequent.

Description

A kind of early-warning processing method and relevant device for administering platform based on data
Technical field
This application involves pedestal O&M field, in particular to a kind of early-warning processing method and phase that platform is administered based on data Close equipment.
Background technique
Current data administer platform can be carried out for all historical datas and incremental data the monitoring of the quality of data with It administers, guarantees the integrality of data, consistency, timeliness and accuracy.Simultaneously to flow chart of data processing and each service link It is monitored and notes abnormalities in time, processing is abnormal, finds the problem, tracking problem solves the problems, such as.And to the whole quality of data Data Quality Analysis report is provided with service link.
It includes the monitoring and warning page in platform that data, which are administered, for showing early warning letter to user when rule executes failure Breath, the interior monitoring rules configured of platform all can be executed periodically daily, and rule, which executes failure, will trigger an early warning event, still The early warning event only sends the notice that mail carries out early warning in page prompts or only, and above-mentioned prompt and mail notification is not The reason of including specific tasks failure, thus cause platform that can not record problem Producing reason, carries out early warning event in user Without according to that can follow when processing, the processing time of user, inefficiency are increased.
Summary of the invention
The purpose of the application is to provide a kind of early warning processing for administering platform based on data in view of the deficiencies of the prior art Method and relevant device, the reason of executing failure by detailed record rule, solve the problems, such as to provide foundation to be subsequent, at reduction It the time of reason problem, improves efficiency.
In order to achieve the above objectives, the technical solution of the application provides a kind of early-warning processing method that platform is administered based on data And relevant device.
This application discloses a kind of early-warning processing methods that platform is administered based on data, comprising the following steps:
It executes data and administers the Regular Task of platform, and detect the implementing result that the data administer platform Regular Task;
When the implementing result that the data administer platform Regular Task is to execute failure, early warning event is generated;
Mission failure relevant information associated with the early warning event is generated, and sends early warning corresponding with early warning event Information.
Preferably, described generate mission failure relevant information associated with the early warning event, and send and early warning thing After the corresponding warning information of part, comprising:
The early warning event is handled according to the mission failure relevant information associated with the early warning event, and works as institute After stating early warning event handling, the corresponding warning information of the early warning event is deleted.
Preferably, the data that execute administer the Regular Task of platform, and detects the data and administer platform Regular Task Implementing result, comprising:
Obtain the multinomial Regular Task that data administer platform;
Timing executes the multinomial Regular Task that the data administer platform;
Detect the implementing result that the data administer each single item Regular Task in the multinomial Regular Task of platform.
Preferably, the implementing result for administering platform Regular Task when the data is when executing failure, to generate early warning Event, comprising:
When the Regular Task that the data administer platform is that the multinomial and described data are administered in platform Regular Task at least The implementing result of one Regular Task is to generate early warning thing corresponding with the Regular Task for executing failure when executing failure Part.
Preferably, described generate mission failure relevant information associated with the early warning event, and send and early warning thing After the corresponding warning information of part, comprising:
When the early warning event is processed, according to mission failure relevant information described in the early warning event query;
The early warning event is handled according to the mission failure relevant information inquired.
Preferably, described generate mission failure relevant information associated with the early warning event, and send and early warning thing After the corresponding warning information of part, comprising:
When the early warning event is delayed by processing, the overdue time limit is set and carries out timing, and prolongs described in deletion with described When the corresponding warning information of processing early warning event;
After the overdue time limit is overtime, warning information corresponding with the delay disposal early warning event is sent again.
Preferably, described generate mission failure relevant information associated with the early warning event, and send and early warning thing After the corresponding warning information of part, comprising:
When multiple early warning events are processed, the mission failure relevant information of the multiple early warning event is inquired;
The mission failure relevant information of the multiple early warning event is compared;
When the mission failure correlated information match, early warning thing corresponding to the matched mission failure relevant information Part carries out batch processing.
Disclosed herein as well is a kind of prewarning processing unit for administering platform based on data, described device includes:
Rule execution module: being arranged to carry out data and administer the Regular Task of platform, and detects the data and administer platform The implementing result of Regular Task;
Early warning event generation module: it is set as when the implementing result that the data administer platform Regular Task being to execute failure When, generate early warning event;
Early warning event processing module: being set as generating mission failure relevant information associated with the early warning event, and Send warning information corresponding with early warning event.
Disclosed herein as well is a kind of computer equipment, the computer equipment includes memory and processor, described to deposit Computer-readable instruction is stored in reservoir to be made when the computer-readable instruction is executed by one or more processors Obtain the step of one or more processors execute early-warning processing method described above.
Disclosed herein as well is a kind of storage medium, the storage medium can be read and write by processor, and the storage medium is deposited Computer instruction is contained, when the computer-readable instruction is executed by one or more processors, so that one or more processing Device executes the step of early-warning processing method described above.
The beneficial effect of the application is: the reason of the application executes failure by detailed record rule, is subsequent solution Problem provides foundation, reduces the time of processing problem, improves efficiency, and the failure rule caused for very same reason carries out batch Processing, improves the efficiency of event handling.
Detailed description of the invention
Fig. 1 is a kind of flow diagram of early-warning processing method that platform is administered based on data of the embodiment of the present application;
Fig. 2 is a kind of flow diagram of early-warning processing method that platform is administered based on data of the embodiment of the present application;
Fig. 3 is a kind of flow diagram of early-warning processing method that platform is administered based on data of the embodiment of the present application;
Fig. 4 is a kind of flow diagram of early-warning processing method that platform is administered based on data of the embodiment of the present application;
Fig. 5 is a kind of flow diagram of early-warning processing method that platform is administered based on data of the embodiment of the present application;
Fig. 6 is a kind of prewarning processing unit structural schematic diagram that platform is administered based on data of the embodiment of the present application.
Specific embodiment
It is with reference to the accompanying drawings and embodiments, right in order to which the objects, technical solutions and advantages of the application are more clearly understood The application is further elaborated.It should be appreciated that specific embodiment described herein is only used to explain the application, and It is not used in restriction the application.
Those skilled in the art of the present technique are appreciated that unless expressly stated, singular " one " used herein, " one It is a ", " described " and "the" may also comprise plural form.It is to be further understood that being arranged used in the description of the present application Diction " comprising " refer to that there are the feature, integer, step, operation, element and/or component, but it is not excluded that in the presence of or addition Other one or more features, integer, step, operation, element, component and/or their group.
The a kind of of the embodiment of the present application administers the early-warning processing method process of platform as shown in Figure 1, this implementation based on data Example the following steps are included:
Step s101 executes data and administers the Regular Task of platform, and detects the data and administer platform Regular Task Implementing result;
Specifically, it is all historical datas and incremental data the progress data matter for data lake that the data, which administer platform, The monitoring and improvement of amount guarantee integrality, consistency, timeliness and the accuracy of data.Data processing to data lake simultaneously Process and each service link are monitored and note abnormalities in time, and processing is abnormal, finds the problem, and tracking problem solves the problems, such as, And Data Quality Analysis report is provided to the whole quality of data and service link.
Specifically, the Regular Task is the rule that the data are administered with the monitoring of platform and is formulated, the regular lattice Formula includes logical data expression formula, such as A > B;Logical operation, example can also be carried out by logical operator by multiple expression formulas Such as A>B&&B<C&&C>E;But an expression formula is not supported while carrying out multiple logical operations, such as A>B<C.
Specifically, it includes constant, regularization term, operator and mathematical function that the expression formula of the rule, which is constituted,.Wherein, often Amount refers to digital constant, such as 124.5, also support scientific notation, such as 1.25E9;Regularization term includes some aggregate functions, than Such as SUM, COUNT, AVG and MAX, but the result that these aggregate functions are provided only to regularization term uses;The use of regularization term Format are as follows: [regularization term number], such as [C00001]==1, it writes guarantee that regularization term only returns to the column of a line one in this way, otherwise can throw It is abnormal out;Regularization term can be with using format are as follows: [aggregate function (regularization term number) alias], such as [AVG (C00001.VAL1)]>1000;Operator includes arithmetical operation, comparison operation and logical operation;Wherein arithmetical operation includes Addition subtraction multiplication and division etc.;Comparison operation includes being equal to, being less than and be greater than etc.;Logical operation include with and and or wait;Mathematical function Including some common functions, such as SIN function, cosine function and power function.
Specifically, can be administered in data corresponding by above-mentioned rule configuration on platform after above-mentioned rule determines Monitoring rules task, it is either multinomial that the monitoring rules task of the configuration can be one, if being configured with multinomial monitoring rule Then task is it is necessary to will execute this multinomial monitoring rules task.
Specifically, can be administered in data corresponding by above-mentioned rule configuration on platform after above-mentioned rule determines Monitoring rules task can execute corresponding monitoring rules task, the data after monitoring rules task configures Administering the monitoring rules task configured in platform can execute automatically in timing daily, can also be taking human as execution.
It is another one is running succeeded specifically, two kinds of implementing results can be generated after monitoring rules task execution It is to execute failure, corresponding early warning event can be generated when monitoring rules execute failure, and the work that operation personnel is daily These early warning events are exactly checked, and early warning event are handled, and record problem information, therefore when monitoring rules task is held After row, data are administered platform needs and are detected to the implementing result of the monitoring rules task, if having only carried out one Monitoring rules task, then only needing the implementing result to this monitoring rules task to detect, if performed multinomial Monitoring rules task, then needing to carry out the implementing result of each single item monitoring rules task in this multinomial monitoring rules task Detection.
Step s102 generates early warning thing when the implementing result that the data administer platform Regular Task is to execute failure Part;
Specifically, can be generated corresponding when the implementing result that the data administer platform Regular Task is to execute failure Early warning event;The early warning event includes state, event id, service link, regularization term, pre-warning content, warning level and early warning The information such as time.
Specifically, can be generated when the implementing result that the data administer a Regular Task of platform is to execute failure One or more early warning event, wherein a plurality of early warning event can be shown in the form of early warning list of thing, convenient for the early warning Event is inquired according to field information, can also carry out batch processing to the early warning event.
Specifically, the regularization term information in the early warning event includes the regular details of triggering early warning, regularization term meeting is clicked There is details button, can be checked into details page after clicking details button;Wherein, details page include execute record, The information such as related early warning event and dependency rule item;The execution record information includes dependent Rule, executive plan, implementing result And the field informations such as type are executed, information is recorded by the execution, it can be seen that the history of this monitoring rules executes record; The dependency rule item information includes the fields such as regularization term ID, regularization term title, regularization term content, target type and monitoring objective Information passes through the dependency rule item information, it can be seen that regularization term details, entrance can be jumped by clicking every rule item record Regularization term safeguards the page;The correlation early warning event includes the fields such as event id, service link, pre-warning content and early warning event letter Breath passes through the related early warning event information, it can be seen that all early warning events of this rule triggering, clicking every record can To jump to the early warning page.
Step s103 generates mission failure relevant information associated with the early warning event, and sends and early warning event Corresponding warning information.
Specifically, can also be generated and the early warning event when after the data administer and generate early warning event on platform Associated mission failure relevant information, the mission failure relevant information include failure cause and Question Classification, the failure Why the reason of reason includes the failure of monitoring rules task execution, i.e., can generate early warning event, for example, passing through monitoring rules " R01172 macroscopic view domestic achievement data compare ", regular expression are " [C01775]==[C01776] ", when executing above-mentioned rule After then, if there is early warning event triggers, then being directed to triggered early warning event, macroscopical domestic achievement data can be illustrated The reason of comparing failure;Described problem classification refers to that early warning event belongs to the classification of which problem, such as which belongs to Service link;The mission failure relevant information and early warning event correspond;It, can when handling a plurality of early warning event The mission failure relevant information of a plurality of early warning event is compared, if the mission failure correlated information match, that This several early warning events of mission failure correlated information match can carry out batch processing.
Specifically, can be sent and the early warning event pair when after the data administer and generate early warning event on platform The warning information answered;Wherein the warning information can be is shown by the page, can also be sent by mail;Such as pass through the page It has been shown that, can prompt user to have early warning event by exclamation mark or other alarming signs on the page;If it is passing through Mail notification once there is the generation of early warning event, and is wanted then can administer setting mailbox on platform in data in advance receives address It can obtain the email address when sending warning information and be sent.
Specifically, the warning information may include the information of one or more of early warning events, advised when executing monitoring Then after task, an only early warning event, then can only include the information of an early warning event when sending warning information, It may include the information of above-mentioned a plurality of early warning event if there is a plurality of early warning event, in the warning information sent.
Specifically, the early warning event can have several different processing after handling the early warning event State, such as ignore, delay process and processed;Wherein, ignore state to be directed to report by mistake, illustrate the early warning event sheet Body is not the abnormal time;Delay process state is directed to the early warning event of time-triggered protocol to be delayed, when to the early warning thing It, can be with the time of input time delay processing when part carries out delay process;Processed state is directed to processed successful early warning thing Part.
In the present embodiment, the reason of failing, is executed by record rule detailed when generating early warning event, is subsequent Solve the problems, such as provide foundation, reduce processing problem time, improve efficiency.
In one embodiment, the step s103 generates letter related to the associated mission failure of early warning event Breath, and after transmission warning information corresponding with early warning event, comprising:
The early warning event is handled according to the mission failure relevant information associated with the early warning event, and works as institute After stating early warning event handling, the corresponding warning information of the early warning event is deleted.
Specifically, early warning page can be entered when seeing warning information on the early warning page or receiving early warning mail Early warning list of thing is checked in face, when handling the early warning event in the early warning list of thing, can be checked and be wanted The corresponding mission failure relevant information of the early warning event of processing, and according to related to the associated mission failure of early warning event Early warning event described in information processing.
Specifically, before to early warning event handling, the state of the early warning event can be it is untreated, when to early warning event After being disposed, the early warning event can have several different processing statuses, such as ignore, delay process and processed Deng;Wherein, ignore state to be directed to report by mistake, illustrate that the early warning event is not the abnormal time;Delay process state It is directed to the early warning event of time-triggered protocol to be delayed, it, can be with input time delay when carrying out delay process to the early warning event The time of processing;Processed state is directed to processed successful early warning event;By sentencing to early warning event handling state It is disconnected, if it is ignore, delay process or it is processed when, then the corresponding warning information of the early warning event can be deleted.
In the present embodiment, by the identification to early warning event handling state, the warning information is deleted, Ke Yiti The treatment effeciency of high operation personnel.
Fig. 2 is a kind of early-warning processing method flow diagram that platform is administered based on data of the embodiment of the present application, is such as schemed Shown, the step s101 executes data and administers the Regular Task of platform, and detects the data and administer platform Regular Task Implementing result, comprising:
Step s201 obtains the multinomial Regular Task that data administer platform;
Specifically, can be administered on platform in data through the above-mentioned corresponding monitoring of rule configuration after rule determines Regular Task, it is either multinomial that the monitoring rules task of the configuration can be one, appoints if being configured with multinomial monitoring rules Business is it is necessary to execute this multinomial monitoring rules task.
Step s202 periodically executes the multinomial Regular Task that the data administer platform;
Specifically, being configured with multinomial monitoring rules task if administered on platform in data it is necessary to this multinomial monitoring rule Then task will execute, and the data are administered the monitoring rules task configured in platform and timing can be executed automatically daily, that is, exist Data, which are administered on platform, can preset a time, arrived this time point daily and can execute the multinomial monitoring rule automatically Then task.
Step s203 detects the execution knot that the data administer each single item Regular Task in the multinomial Regular Task of platform Fruit.
It is another one is running succeeded specifically, two kinds of implementing results can be generated after monitoring rules task execution It is to execute failure, corresponding early warning event can be generated when monitoring rules execute failure, and the work that operation personnel is daily These early warning events are exactly checked, and early warning event are handled, and record problem information, therefore when monitoring rules task is held After row, data are administered platform needs and are detected to the implementing result of the monitoring rules task, if having only carried out one Monitoring rules task, then only needing the implementing result to this monitoring rules task to detect, if performed multinomial Monitoring rules task, then needing to carry out the implementing result of each single item monitoring rules task in this multinomial monitoring rules task Detection.
In the present embodiment, by the automatic execution and result detection to Regular Task, operation personnel's workload can be mitigated, Improve working efficiency.
In one embodiment, the step s102, when the implementing result that the data administer platform Regular Task is to hold When row failure, early warning event is generated, comprising:
When the Regular Task that the data administer platform is that the multinomial and described data are administered in platform Regular Task at least The implementing result of one Regular Task is to generate early warning thing corresponding with the Regular Task for executing failure when executing failure Part.
Specifically, not having any early warning event when the data administer the monitoring rules task execution success of platform It generates, but and if wherein at least has a monitoring rules when the monitoring rules task that the data administer platform has multinomial The implementing result of task is just to have the generation of early warning event when executing failure, wherein a monitoring rules task execution failure When, one or more early warning event can be generated.
In the present embodiment, by executing state recognition early warning event to Regular Task, the knowledge to early warning event can be improved Other efficiency.
Fig. 3 is a kind of early-warning processing method flow diagram that platform is administered based on data of the embodiment of the present application, is such as schemed Shown, the step s103 generates mission failure relevant information associated with the early warning event, and sends and early warning event After corresponding warning information, comprising:
Step s301, when the early warning event is processed, according to the correlation of mission failure described in the early warning event query Information;
Specifically, after the mission failure relevant information generates, it will be associated with the early warning event, such as Each early warning event can all be linked to the corresponding page in early warning list of thing, the corresponding page show with it is described The relevant mission failure relevant information of early warning event, therefore when the early warning event is processed, it can be according to the early warning thing Part inquires the mission failure relevant information.
Step s302 handles the early warning event according to the mission failure relevant information inquired.
Specifically, the mission failure relevant information includes failure cause and Question Classification, the failure cause includes prison Regulatory control then task execution fail the reason of, i.e., why can generate early warning event, for example, pass through monitoring rules " R01172 macroscopic view state Interior achievement data compares ", regular expression is " [C01775]==[C01776] ", after executing above-mentioned rule, if there is The triggering of early warning event can illustrate the original that macroscopical domestic achievement data compares failure then being directed to triggered early warning event Cause;Described problem classification refers to that early warning event belongs to the classification of which problem, such as belongs to which service link;It is described Mission failure relevant information and early warning event correspond;It, can be to described a plurality of pre- when handling a plurality of early warning event The mission failure relevant information of alert event is compared, if the mission failure correlated information match, mission failure phase This several early warning events for closing information matches can carry out batch processing.
In the present embodiment, early warning event is handled by mission failure relevant information, treatment effeciency can be improved.
Fig. 4 is a kind of early-warning processing method flow diagram that platform is administered based on data of the embodiment of the present application, is such as schemed Shown, the step s103 generates mission failure relevant information associated with the early warning event, and sends and early warning event After corresponding warning information, comprising:
Step s401 is arranged the overdue time limit and carries out timing when the early warning event is delayed by processing, and described in deletion Warning information corresponding with the delay process early warning event;
Specifically, when the early warning event is delayed by processing, can the early warning event setting to the delay process exceed Time limit phase, and start timing, after the early warning event is delayed by processing, the processing status of the early warning event of the delay process It will be changed to delay process by untreated, at this moment can delete the early warning letter corresponding with the delay process early warning event Breath.
Step s402 is sent corresponding pre- with the delay disposal early warning event again after the overdue time limit is overtime Alert information.
Specifically, after the overdue time limit is overtime, such as the overdue time limit being arranged originally is on December 31st, 2018, It is so just overtime to this day on December 31st, 2018, it at this moment can send again corresponding with the delay disposal early warning event Warning information.
In the present embodiment, by carrying out delay process to early warning event, the flexibility ratio of processing can be improved.
Fig. 5 is a kind of early-warning processing method flow diagram that platform is administered based on data of the embodiment of the present application, is such as schemed Shown, the step s103 generates mission failure relevant information associated with the early warning event, and sends and early warning event After corresponding warning information, comprising:
Step s501 inquires the mission failure correlation letter of the multiple early warning event when multiple early warning events are processed Breath;
Specifically, may include a plurality of early warning event in early warning list of thing, at preparation is to multiple early warning events When reason, the mission failure relevant information of the multiple early warning event can be first looked at, to obtain the multiple early warning event Failure cause and Question Classification.
Step s502 is compared when by the mission failure relevant information of the multiple early warning event;
Specifically, after getting the mission failure relevant information of the multiple early warning event, by the multiple early warning thing Failure cause and Question Classification in part mission failure relevant information are compared, i.e., the failure cause of the multiple early warning event It is whether identical, such as whether being all as caused by same rule;Whether Question Classification is identical, such as whether belonging to same service node Deng.
Step s503, when the mission failure correlated information match, to the matched mission failure relevant information pair The early warning event answered carries out batch processing.
Specifically, when being compared by the mission failure relevant information to the multiple early warning event, if wherein had The mission failure relevant information of early warning event has exact matching, then the early warning of mission failure relevant information exact matching Event can carry out batch processing.
In the present embodiment, by the comparison to early warning event mission failure relevant information, early warning event is carried out at batch Reason, can be improved treatment effeciency.
A kind of prewarning processing unit structure for administering platform based on data of the embodiment of the present application is as shown in Figure 6, comprising:
Rule execution module 601, early warning event generation module 602 and early warning event processing module 603;Wherein, regular Execution module 601 is connected with early warning event generation module 602, early warning event generation module 602 and early warning event processing module 603 It is connected;Rule execution module 601 is arranged to carry out data and administers the Regular Task of platform, and detects the data and administer platform rule The then implementing result of task;Early warning event generation module 602 is set as administering the execution knot of platform Regular Task when the data Fruit is when executing failure, to generate early warning event;Early warning event processing module 603 is set as generating associated with the early warning event Mission failure relevant information, and send corresponding with early warning event warning information.
The embodiment of the present application also discloses a kind of computer equipment, and the computer equipment includes memory and processor, Computer-readable instruction is stored in the memory, the computer-readable instruction is executed by one or more processors When, so that one or more processors execute the step in early-warning processing method described in the various embodiments described above.
The embodiment of the present application also discloses a kind of storage medium, and the storage medium can be read and write by processor, the storage Device is stored with computer-readable instruction, when the computer-readable instruction is executed by one or more processors so that one or Multiple processors execute the step in early-warning processing method described in the various embodiments described above.
Those of ordinary skill in the art will appreciate that realizing all or part of the process in above-described embodiment method, being can be with Relevant hardware is instructed to complete by computer program, which can be stored in a computer-readable storage and be situated between In matter, the program is when being executed, it may include such as the process of the embodiment of above-mentioned each method.Wherein, storage medium above-mentioned can be The non-volatile memory mediums such as magnetic disk, CD, read-only memory (Read-Only Memory, ROM) or random storage note Recall body (Random Access Memory, RAM) etc..
Each technical characteristic of embodiment described above can be combined arbitrarily, for simplicity of description, not to above-mentioned reality It applies all possible combination of each technical characteristic in example to be all described, as long as however, the combination of these technical characteristics is not deposited In contradiction, all should be considered as described in this specification.
The several embodiments of the application above described embodiment only expresses, the description thereof is more specific and detailed, but simultaneously The limitation to the application the scope of the patents therefore cannot be interpreted as.It should be pointed out that for those of ordinary skill in the art For, without departing from the concept of this application, various modifications and improvements can be made, these belong to the guarantor of the application Protect range.Therefore, the scope of protection shall be subject to the appended claims for the application patent.

Claims (10)

1. a kind of early-warning processing method for administering platform based on data, which comprises the following steps:
It executes data and administers the Regular Task of platform, and detect the implementing result that the data administer platform Regular Task;
When the implementing result that the data administer platform Regular Task is to execute failure, early warning event is generated;
Mission failure relevant information associated with the early warning event is generated, and sends early warning letter corresponding with early warning event Breath.
2. the early-warning processing method of platform is administered based on data as described in claim 1, which is characterized in that the generation and institute The associated mission failure relevant information of early warning event is stated, and after transmission warning information corresponding with early warning event, comprising:
The early warning event is handled according to the mission failure relevant information associated with the early warning event, and when described pre- After alert event handling, the corresponding warning information of the early warning event is deleted.
3. the early-warning processing method of platform is administered based on data as described in claim 1, which is characterized in that the execution data The Regular Task of platform is administered, and detects the implementing result that the data administer platform Regular Task, comprising:
Obtain the multinomial Regular Task that data administer platform;
Timing executes the multinomial Regular Task that the data administer platform;
Detect the implementing result that the data administer each single item Regular Task in the multinomial Regular Task of platform.
4. the early-warning processing method of platform is administered based on data as described in claim 1, which is characterized in that described to work as the number It is when executing failure, to generate early warning event according to the implementing result for administering platform Regular Task, comprising:
When the Regular Task that the data administer platform is that the multinomial and described data administer in platform Regular Task at least one The implementing result of Regular Task is to generate early warning event corresponding with the Regular Task for executing failure when executing failure.
5. the early-warning processing method of platform is administered based on data as described in claim 1, which is characterized in that the generation and institute The associated mission failure relevant information of early warning event is stated, and after transmission warning information corresponding with early warning event, comprising:
When the early warning event is processed, according to mission failure relevant information described in the early warning event query;
The early warning event is handled according to the mission failure relevant information inquired.
6. the early-warning processing method of platform is administered based on data as described in claim 1, which is characterized in that the generation and institute The associated mission failure relevant information of early warning event is stated, and after transmission warning information corresponding with early warning event, comprising:
When the early warning event is delayed by processing, the overdue time limit is set and carries out timing, and deletes at the described and delay Manage the corresponding warning information of early warning event;
After the overdue time limit is overtime, warning information corresponding with the delay disposal early warning event is sent again.
7. the early-warning processing method of platform is administered based on data as described in claim 1, which is characterized in that the generation and institute The associated mission failure relevant information of early warning event is stated, and after transmission warning information corresponding with early warning event, comprising:
When multiple early warning events are processed, the mission failure relevant information of the multiple early warning event is inquired;
The mission failure relevant information of the multiple early warning event is compared;
When the mission failure correlated information match, to the corresponding early warning event of the matched mission failure relevant information into Row batch processing.
8. a kind of prewarning processing unit for administering platform based on data, which is characterized in that described device includes:
Rule execution module: being arranged to carry out data and administer the Regular Task of platform, and detects the data and administer platform rule The implementing result of task;
Early warning event generation module: being set as when the data administer the implementing result of platform Regular Task to execute failure, Generate early warning event;
Early warning event processing module: it is set as generating mission failure relevant information associated with the early warning event, and sends Warning information corresponding with early warning event.
9. a kind of computer equipment, which is characterized in that the computer equipment includes memory and processor, in the memory It is stored with computer-readable instruction, when the computer-readable instruction is executed by one or more processors, so that one Or multiple processors are executed as described in any one of claims 1 to 7 the step of early-warning processing method.
10. a kind of storage medium, which is characterized in that the storage medium can be read and write by processor, and the storage medium is stored with Computer instruction, when the computer-readable instruction is executed by one or more processors, so that one or more processors are held Row is as described in any one of claims 1 to 7 the step of early-warning processing method.
CN201910660102.9A 2019-07-22 2019-07-22 Early warning processing method based on data management platform and related equipment Active CN110502404B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910660102.9A CN110502404B (en) 2019-07-22 2019-07-22 Early warning processing method based on data management platform and related equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910660102.9A CN110502404B (en) 2019-07-22 2019-07-22 Early warning processing method based on data management platform and related equipment

Publications (2)

Publication Number Publication Date
CN110502404A true CN110502404A (en) 2019-11-26
CN110502404B CN110502404B (en) 2022-05-31

Family

ID=68586702

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910660102.9A Active CN110502404B (en) 2019-07-22 2019-07-22 Early warning processing method based on data management platform and related equipment

Country Status (1)

Country Link
CN (1) CN110502404B (en)

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2005316728A (en) * 2004-04-28 2005-11-10 Mitsubishi Electric Corp Fault analysis device, method, and program
CN101958804A (en) * 2010-09-20 2011-01-26 中兴通讯股份有限公司 Method for promoting warning processing efficiency, server and system
CN102428447A (en) * 2009-09-30 2012-04-25 株式会社日立制作所 Method, device and system for displaying analysis result of essential cause analysis of failure
CN104112056A (en) * 2013-04-18 2014-10-22 腾讯科技(深圳)有限公司 Method and system for detecting data processing faults
CN104991814A (en) * 2015-06-19 2015-10-21 北京奇虎科技有限公司 Task execution result acquiring method and system
CN106603317A (en) * 2017-02-20 2017-04-26 山东浪潮商用系统有限公司 Alarm monitoring strategy analysis method based on data mining technology
CN107357713A (en) * 2017-07-20 2017-11-17 郑州云海信息技术有限公司 A kind of incident management display methods and system
CN107562601A (en) * 2017-09-12 2018-01-09 郑州云海信息技术有限公司 A kind of alarm method and device
CN109783322A (en) * 2018-11-22 2019-05-21 远光软件股份有限公司 A kind of monitoring analysis system and its method of enterprise information system operating status

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2005316728A (en) * 2004-04-28 2005-11-10 Mitsubishi Electric Corp Fault analysis device, method, and program
CN102428447A (en) * 2009-09-30 2012-04-25 株式会社日立制作所 Method, device and system for displaying analysis result of essential cause analysis of failure
CN101958804A (en) * 2010-09-20 2011-01-26 中兴通讯股份有限公司 Method for promoting warning processing efficiency, server and system
CN104112056A (en) * 2013-04-18 2014-10-22 腾讯科技(深圳)有限公司 Method and system for detecting data processing faults
CN104991814A (en) * 2015-06-19 2015-10-21 北京奇虎科技有限公司 Task execution result acquiring method and system
CN106603317A (en) * 2017-02-20 2017-04-26 山东浪潮商用系统有限公司 Alarm monitoring strategy analysis method based on data mining technology
CN107357713A (en) * 2017-07-20 2017-11-17 郑州云海信息技术有限公司 A kind of incident management display methods and system
CN107562601A (en) * 2017-09-12 2018-01-09 郑州云海信息技术有限公司 A kind of alarm method and device
CN109783322A (en) * 2018-11-22 2019-05-21 远光软件股份有限公司 A kind of monitoring analysis system and its method of enterprise information system operating status

Also Published As

Publication number Publication date
CN110502404B (en) 2022-05-31

Similar Documents

Publication Publication Date Title
US11288231B2 (en) Reproducing datasets generated by alert-triggering search queries
US20190052660A1 (en) Enterprise policy tracking with security incident integration
US8839419B2 (en) Distributive security investigation
US10192050B2 (en) Methods, systems, apparatus, and storage media for use in detecting anomalous behavior and/or in preventing data loss
US10862906B2 (en) Playbook based data collection to identify cyber security threats
EP3104287B1 (en) Systems and methods for indexing and aggregating data records
CN107004089A (en) Malware detection method and its system
AU2017421179A1 (en) Autonomic incident triage prioritization by performance modifier and temporal decay parameters
CN102207951A (en) Systems and/or methods for distributed data archiving
US20140215624A1 (en) Method and System for Analysis of Security Events in a Managed Computer Network
CN110659307A (en) Event stream correlation analysis method and system
US20180278644A1 (en) Information processing device, information processing method, and computer-readable recording medium
CN107426231A (en) A kind of method and device for identifying user behavior
EP3479270A1 (en) Incident response analytic maps
CN113377559A (en) Big data based exception handling method, device, equipment and storage medium
EP3232358B1 (en) Correlation-based detection of exploit activity
CN109782982A (en) A kind of processing method and terminal reading log
Gołębiowska et al. Cybersecurity of business intelligence analytics based on the processing of large sets of information with the use of sentiment analysis and Big Data
US11269706B2 (en) System and method for alarm correlation and aggregation in IT monitoring
CN110502404A (en) A kind of early-warning processing method and relevant device for administering platform based on data
CN113760666A (en) System exception processing method, device and storage medium
CN108229183A (en) A kind of business datum monitoring method and its monitoring device
US20200067985A1 (en) Systems and methods of interactive and intelligent cyber-security
CN109783310A (en) The Dynamic and Multi dimensional method for safety monitoring and its monitoring device of information technoloy equipment
CN113691524A (en) Alarm information processing method, system, electronic equipment and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant