CN113312200A - Event processing method and device, computer equipment and storage medium - Google Patents
Event processing method and device, computer equipment and storage medium Download PDFInfo
- Publication number
- CN113312200A CN113312200A CN202110608613.3A CN202110608613A CN113312200A CN 113312200 A CN113312200 A CN 113312200A CN 202110608613 A CN202110608613 A CN 202110608613A CN 113312200 A CN113312200 A CN 113312200A
- Authority
- CN
- China
- Prior art keywords
- fault
- target
- alarm
- alarms
- event
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/0703—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
- G06F11/079—Root cause analysis, i.e. error or fault diagnosis
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/0703—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
- G06F11/0793—Remedial or corrective actions
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Quality & Reliability (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Health & Medical Sciences (AREA)
- Biomedical Technology (AREA)
- Debugging And Monitoring (AREA)
Abstract
The application provides an event processing method, an event processing device, computer equipment and a storage medium, wherein each fault alarm which is sent by monitoring a civil aviation system by at least one technical platform is analyzed and integrated, and at least one target fault alarm is determined; one target fault alarm corresponds to one target event; inquiring a preset corresponding relation between events and fault processing methods, and respectively obtaining a target fault processing method corresponding to each target event; and triggering an automatic fault recovery script program for executing the target fault processing method indication, and automatically processing the fault in the civil aviation system of the target fault alarm indication corresponding to the target fault processing method. The method and the device effectively improve the accuracy and efficiency of fault processing based on analysis and integration of fault alarming of at least one technical platform and automatic processing of fault alarming.
Description
Technical Field
The present invention relates to the field of computer processing technologies, and in particular, to an event processing method and apparatus, a computer device, and a storage medium.
Background
With the increase of user demands, the number of services in the civil aviation system is more and more, the service complexity is higher and more, and in order to ensure the normal operation of the civil aviation system, when the civil aviation system breaks down, quick positioning and repairing of the fault are urgently needed to be realized.
In the prior art, a plurality of technical platforms are used for monitoring a civil aviation system, the same alarm event caused by the same fault reason often exists among the technical platforms, misleading effect is generated on operation and maintenance personnel in an event processing process under the condition, the fault processing time of the operation and maintenance personnel is prolonged, and the fault processing efficiency is influenced.
Moreover, after receiving the fault alarm, the operation and maintenance personnel need to manually log in the background system to check and analyze the log, and the mode that the operation and maintenance personnel judge the fault reason and restore the operation according to the experience of the operation and maintenance personnel is affected by the subjective consciousness of the operation and maintenance personnel, so that the misoperation and the judgment fault wind direction of the operation and maintenance personnel often exist, and the fault processing accuracy is affected.
Disclosure of Invention
In view of the above, to solve the above problems, the present invention provides an event processing method, an event processing apparatus, a computer device, and a storage medium, so as to improve accuracy and efficiency of fault processing, and the technical solution is as follows:
an event processing method, comprising:
analyzing and integrating each fault alarm monitored and sent by at least one technical platform to the civil aviation system, and determining at least one target fault alarm; one target fault alarm corresponds to one target event;
inquiring a preset corresponding relation between events and fault processing methods, and respectively acquiring a target fault processing method corresponding to each target event;
and triggering an automatic fault recovery script program for executing the target fault processing method indication, and automatically processing the fault in the civil aviation system of the target fault alarm indication corresponding to the target fault processing method.
Preferably, the analyzing and integrating each fault alarm which is sent by at least one technical platform for monitoring the civil aviation system to determine at least one target fault alarm includes:
receiving each fault alarm which is sent by at least one technical platform for monitoring the civil aviation system;
determining at least one of the received fault alarms indicating the same fault;
and if the at least one fault alarm comprises fault alarms from different technical platforms, integrating the at least one fault alarm into a target fault alarm.
Preferably, a process of determining whether two fault alarms indicate the same fault is also included, the process including:
determining whether the time difference between the alarm occurrence times of the two fault alarms does not exceed a preset target time length;
if the time difference does not exceed the target duration, judging whether the keyword matching degree of the two fault alarms exceeds a preset target keyword matching degree;
if the keyword matching degree of the two fault alarms exceeds the target keyword matching degree, determining that the two fault alarms indicate the same fault;
and if the time difference between the alarm occurrence times of the two fault alarms exceeds the target time length or the keyword matching degree of the two fault alarms exceeds the target keyword matching degree, determining that the two fault alarms do not indicate the same fault.
Preferably, the target failure handling method comprises an automated failure recovery script program and a method statement,
the triggering execution of the automatic fault recovery script program indicated by the target fault processing method to automatically process the fault in the civil aviation system indicated by the target fault alarm corresponding to the target fault processing method comprises the following steps:
determining a most recent undetermined fault recovery step in the sequence of fault recovery steps indicated by the method statement;
if the currently determined fault recovery step does not indicate an automatic fault recovery script program, displaying the currently determined fault recovery step;
responding to the execution completion operation of the currently determined fault recovery step, and returning to execute the step of determining the latest undetermined fault recovery step in the fault recovery step sequence indicated by the method statement;
and if the current determined fault recovery step indicates an automatic fault recovery script program, triggering and executing the automatic fault recovery script program.
Preferably, the method further comprises the following steps:
and generating and storing a fault recovery record of the target fault alarm.
An event processing apparatus comprising:
the analysis and integration unit is used for analyzing and integrating each fault alarm which is sent by monitoring the civil aviation system by at least one technical platform and determining at least one target fault alarm; one target fault alarm corresponds to one target event;
the target fault processing method acquisition unit is used for inquiring the corresponding relation between preset events and fault processing methods and respectively acquiring a target fault processing method corresponding to each target event;
and the event processing unit is used for triggering an automatic fault recovery script program for executing the target fault processing method indication, and automatically processing the fault in the civil aviation system of the target fault alarm indication corresponding to the target fault processing method.
Preferably, the analysis integration unit comprises:
the system comprises a fault alarm receiving unit, a fault alarm processing unit and a fault alarm processing unit, wherein the fault alarm receiving unit is used for receiving each fault alarm which is sent by at least one technical platform for monitoring the civil aviation system;
a failure alarm determination unit for determining at least one failure alarm indicating the same failure among the received failure alarms;
and the analysis integration subunit is used for integrating the at least one fault alarm into a target fault alarm if the at least one fault alarm comprises fault alarms from different technical platforms.
Preferably, the apparatus further comprises a judging unit, and the judging unit comprises:
the time length determining unit is used for determining whether the time difference between the alarm occurrence times of the two fault alarms does not exceed the preset target time length;
the judging subunit is used for judging whether the keyword matching degrees of the two fault alarms exceed the preset target keyword matching degree or not if the time difference does not exceed the target time length;
the first determining unit is used for determining that the two fault alarms indicate the same fault if the keyword matching degree of the two fault alarms exceeds the target keyword matching degree;
and the second determining unit is used for determining that the two fault alarms do not indicate the same fault if the time difference between the alarm occurrence times of the two fault alarms exceeds the target time length or the keyword matching degree of the two fault alarms exceeds the target keyword matching degree.
An electronic device, comprising: a processor and a memory; the processor is used for calling and executing the program stored in the memory; the memory is used for storing programs, and the programs are used for realizing the event processing method.
A computer-readable storage medium, having stored thereon a computer program which, when loaded and executed by a processor, carries out the steps of the event processing method.
The embodiment of the application provides an event processing method, an event processing device, computer equipment and a storage medium, wherein each fault alarm which is sent by monitoring a civil aviation system by at least one technical platform is analyzed and integrated, and at least one target fault alarm is determined; one target fault alarm corresponds to one target event; inquiring a preset corresponding relation between events and fault processing methods, and respectively obtaining a target fault processing method corresponding to each target event; and triggering an automatic fault recovery script program for executing the target fault processing method indication, and automatically processing the fault in the civil aviation system of the target fault alarm indication corresponding to the target fault processing method. The method and the device effectively improve the accuracy and efficiency of fault processing based on analysis and integration of fault alarming of at least one technical platform and automatic processing of fault alarming.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the provided drawings without creative efforts.
FIG. 1 is a schematic structural diagram of an information system event processing apparatus constructed based on the ITIL theory;
fig. 2 is a schematic diagram of an event processing method provided by an ITIL scientific theory according to an embodiment of the present application;
fig. 3 is a flowchart of an event processing method according to an embodiment of the present application;
fig. 4 is a flowchart of a method for analyzing and integrating fault alarms sent by at least one technical platform to monitor a civil aviation system and determining at least one target fault alarm according to the embodiment of the present application;
FIG. 5 is a flow chart of a method for determining whether two fault alarms indicate the same fault according to an embodiment of the present application;
fig. 6 is a schematic structural diagram of an event processing apparatus according to an embodiment of the present application;
fig. 7 is a block diagram of a hardware structure of a computer device to which an event processing method according to an embodiment of the present application is applied.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Because the civil aviation system has the characteristics of large quantity, complex service and the like at the present stage, the aims of quickly positioning and repairing the fault are not realized when the system breaks down. The existing fault processing mode still remains that operation and maintenance personnel receive a fault alarm and then manually log in a background system to check and analyze the log, and the operation and maintenance personnel judge the fault reason according to the experience of the operation and maintenance personnel and perform recovery operation, so that the risk of misoperation and judgment fault of the operation and maintenance personnel exists.
Firstly, event processing entries are unified, the problem that energy of operation and maintenance personnel is consumed due to the fact that event processing sources are not unified is solved, and event processing efficiency is improved; secondly, the method and the device realize the automatic processing of the whole process from the occurrence of the event to the completion of the processing, and completely get rid of the experience of operation and maintenance personnel in the event processing process, so that the event processing process has higher safety and timeliness, and the operation and maintenance personnel only check the result of the event processing after the event processing is completed, thereby saving manpower and material resources and reducing the personnel cost of enterprises.
At present, a unified entry is not provided in a method for processing an event, when an operation and maintenance worker needs to monitor a plurality of technical platforms when processing the event, the same alarm event caused by the same fault reason exists among the plurality of technical platforms, the alarm method can generate misleading effect on the operation and maintenance worker in the event processing process, can prolong the fault processing time of the operation and maintenance worker, and simultaneously can determine whether the operation and maintenance worker can accurately locate the fault occurrence reason and solve the problem. In conclusion, the application adopts the scientific guiding theory of ITIL, combines the service development direction and the characteristics of the information system, constructs a set of event processing method based on the information system microservice main-flow architecture and the Python development language, unifies the event processing entries, eliminates the event alarm caused by the same fault reason, and improves the working efficiency and the production system safety.
The existing fault processing method is to subjectively judge how to process the currently occurring alarm event only by the working experience of operation and maintenance personnel, the processing process is completely manual, the processing method is too backward, the event processing result has great uncertainty, and great risk exists. Firstly, the event processing method excessively depends on the experience and the personal quality of operation and maintenance personnel, the risk is extremely high, irreparable serious consequences can be caused to the production safety plan of a company no matter the operation and maintenance personnel are subjective or non-subjective, the client complaints are more likely to be caused, and extremely bad influence is caused to the company; secondly, the manual processing mode cannot meet the increasing requirements of the processing capacity of the business system of the company, the manual processing mode cannot keep up with the development of the times in the aspects of production safety and fault recovery timeliness, and the requirement of the company on fault recovery within the specified time cannot be completely met. Based on the information system fault event processing automation scientific theory, the invention constructs a set of full-process automation processing device from the generation of the information system fault to the processing and the recovery, improves the fault processing efficiency and precision, avoids the fault processing risk and ensures the safety of the production system.
In order to make the aforementioned objects, features and advantages of the present invention comprehensible, embodiments accompanied with figures are described in further detail below.
Fig. 1 provides an information system event processing device constructed based on the ITIL theory, which mainly comprises four modules, namely a fault analysis module, an event management module, a knowledge base module and an automatic fault repair module.
Illustratively, at least one technical platform comprises a production command platform, a monitoring system and the like, and both the production command platform and the monitoring system are used for monitoring the civil aviation system.
The above is only the preferred content of the technical platform provided in the embodiment of the present application, and the specific content of the technical platform may be set by a person skilled in the art according to his own needs, which is not limited herein.
A fault analysis module: the production command platform and the monitoring system are the only input ports for alarming, the fault analysis module analyzes and integrates the same fault alarm after receiving the alarm through kafka, and then outputs an accurate fault alarm (the accurate fault alarm output through kafka can be called as a target fault alarm) to the event management module through kafka. Because the monitoring system has the problem of low failure alarm accuracy in the current stage, the failure alarm of the monitoring system and the failure alarm of the production command platform need to be combined into a whole by the failure analysis module, so that the failure alarm accuracy can be improved, and the workload of operation and maintenance personnel can be reduced.
An event management module: an event management module suitable for an enterprise is designed based on the scientific theory of ITIL, the module mainly receives target fault alarms from a fault analysis module, the target fault alarms are automatically converted into an event (for convenience of distinguishing, the event converted from each target fault alarm can be called a target event respectively), and operation and maintenance personnel can check the event state in the module to track the alarm processing condition.
And the knowledge base module records the detailed method for processing the target event and an automatic fault recovery script program. When an event occurs, the event management module can precisely match out the only processing method of the fault alarm recorded in the knowledge base according to the fault alarm ID, wherein the processing method comprises method description, historical fault recovery record, automatic script content and the like.
And the automatic fault repairing module is mainly responsible for script execution and scheduling. When the knowledge base module locates a specific solution of the fault, the solution ID (the solution ID comprises an automatic fault recovery script program ID) is transmitted to an automatic fault recovery module, the automatic fault recovery script program is scheduled by the automatic fault recovery module to realize the recovery of the fault, and the recovery is returned to the knowledge base module for recording after the recovery is finished.
Fig. 2 is a schematic diagram of an event processing method provided based on ITIL scientific theory in the embodiment of the present application.
As shown in fig. 2, the event processing method includes the following steps:
step 1, receiving fault alarms of a production command platform and a monitoring system through a fault analysis module, analyzing and integrating the received fault alarms, and endowing each target fault alarm output by the fault analysis module with an alarm ID and a processing method ID;
and 2, transmitting the target fault alarm to an event management module through the kafka message queue.
And 3, establishing an event record by the event management module, wherein the record can track the condition of the target fault alarm in the full life cycle.
And 4, the event management module acquires a processing method ID in the target fault alarm, and the event management module accurately matches the processing method ID with a fault processing method in the knowledge base module to make a leading condition for the next step of fault accurate processing.
And 5, after the fault processing method in the knowledge base module is accurately matched, transmitting the automatic fault recovery script program information in the fault processing method into the automatic fault repairing module.
For example, an automated failover script program may also be referred to as an automated process script program.
And 6, executing the automatic fault recovery script program in sequence according to the execution sequence of the scheduling program.
And 7, returning the execution result to the knowledge base module and the event management module.
And 8, displaying the detailed information of the processing result by the event management module.
An event processing method provided by the embodiment of the present application is described in detail below with reference to specific examples.
The fault alarm of the production command platform is as follows:
[ China civil aviation information ] company general duty: 21:56 the XXXXXXXX airport reports are received successively, the departure system is disconnected, and the relevant department is asked to process the information. (20200525-22:01)
The fault alarm format of the monitoring system is as follows:
[ China civil aviation information ] monitoring system reports: 56 host computer of departure system, IP: 192.168.1.1, please deal with the related department. (20200525-21:58), automatically processing the identification code: 10000001
The fault analysis module comprises two functions: firstly, receiving fault alarms of a production command platform and a monitoring system, and separately storing the alarms from two different sources in a database. Because the alarm information analysis and the integration in later stage need be carried out, so need carry out keyword segmentation to each information content when saving alarm information, just so can make the later stage compare according to the keyword and judge whether belong to the warning of same trouble, just can correct integration failure alarm at last. The key words of the alarm information mainly comprise: departure system, time of occurrence, etc. Secondly, analysis and integration of fault alarms. After the production command platform and the monitoring alarm are respectively stored in different tables of a database, comparing the occurrence time and keywords of the data in the two tables, wherein the integration of the alarm has two conditions and needs to be met simultaneously, and firstly, the keywords of the alarm information in the two tables need to be accurately matched, for example, the alarm information comprises the keywords of a departure system; secondly, the production command platform and the monitoring alarm need to be generated within 3 minutes, so that the two systems can be ensured to alarm against the same fault. In conclusion, the fault analysis module can filter invalid alarms from a single source under double verification, improve the alarm accuracy of integrated analysis and lay a good foundation for the accuracy of automatic fault repair.
When the monitoring system sends out a fault alarm, a corresponding processing number of a knowledge base is given to each fault alarm, the number is the only identification code of the automatic fault repairing module, after the fault analysis module integrates the alarm sent out by the monitoring system, the number is stored in the integrated fault alarm information and is transmitted to the kafka queue along with the fault information, and therefore the event management module can continuously transmit the identification code to the knowledge base module. Therefore, identification codes are critical to automated fault repair.
After the integrated alarm information is transmitted to the event management module, the event management module uses an automatic event creating program to create an event message and track the state and the processing details of the event. The event management module is a centralized display platform for the whole automatic fault processing process.
After the alarm information is transmitted to the knowledge base module through the kafka interface by the event management module, the knowledge base module is accurately matched according to the input fault unique identification code, the information of the automatic script program to be executed is inquired, the information is transmitted to the automatic fault repairing module, and after the information is received by the automatic scheduling program in the module, the repairing script is started, so that the fault automatic repairing is completed.
After the automatic repair is completed, repair result information needs to be transmitted to the event management module, and operation and maintenance personnel can check the result information of fault repair at the first time.
In order to understand an event processing method provided in the embodiment of the present application, the event processing method provided in the embodiment of the present application will be further described in detail with reference to a flowchart of the event processing method shown in fig. 3.
As shown in fig. 3, the method includes:
s301, analyzing and integrating each fault alarm which is sent by monitoring the civil aviation system by at least one technical platform, and determining at least one target fault alarm; one target fault alarm corresponds to one target event;
fig. 4 is a flowchart of a method for analyzing and integrating fault alarms sent by at least one technical platform to monitor a civil aviation system and determining at least one target fault alarm according to the embodiment of the present application.
As shown in fig. 4, the method includes:
s401, receiving fault alarms sent by at least one technical platform for monitoring a civil aviation system;
illustratively, the at least one technology platform includes at least one production conductor platform, at least one monitoring system, and the like. The above is only the preferable content of the at least one technical platform provided in the embodiments of the present application, and the specific content of the at least one technical platform may be set by a person skilled in the art according to his own needs, which is not limited herein.
According to the embodiment of the application, each technical platform in at least one technical platform monitors the civil aviation system, and corresponding fault alarm is generated under the condition that the civil aviation system breaks down.
S402, determining at least one fault alarm indicating the same fault in the received fault alarms;
according to the embodiment of the application, all fault alarms sent by monitoring the civil aviation system by at least one technical platform can be received, and all fault alarms indicating the same fault in all the received fault alarms are divided into a fault alarm set. For each set of fault alarms, each fault alarm in the set of fault alarms may be considered to be at least one fault alarm indicating the same fault.
S403, if the at least one fault alarm comprises fault alarms from different technical platforms, integrating the at least one fault alarm into a target fault alarm.
According to the embodiment of the application, whether each fault alarm in the fault alarm set is from the same technical platform or not is judged for each fault alarm set, if the fault alarms in the fault alarm set are not from one technical platform, at least two technical platforms send out the fault alarms for the same fault, the authenticity of the fault indicated by the fault alarm set is considered to be high, and at the moment, the fault alarms in the fault alarm set are integrated into one target fault alarm.
Further, for a fault alarm set, if each fault alarm in the fault alarm set is from the same technical platform, it is considered that the authenticity of a fault possibly indicated by the fault alarm set is low, and in this case, a target alarm corresponding to the fault alarm set may not be generated.
S302, inquiring a preset corresponding relation between events and fault processing methods, and respectively obtaining a target fault processing method corresponding to each target event;
illustratively, the correspondence between the event and the failure handling method is preset. For each target event, querying a preset corresponding relationship between the event and a fault handling method, and obtaining the fault handling method corresponding to the target event, where the fault handling method corresponding to the target event may be referred to as a target fault handling method.
S303, triggering an automatic fault recovery script program for executing the target fault processing method indication, and automatically processing the fault in the civil aviation system of the target fault alarm indication corresponding to the target fault processing method.
Exemplary failure handling methods include method statements, historical failure recovery records, automated failure recovery script programs, and the like. The above is only the preferred content of the fault handling method provided in the embodiment of the present application, and regarding the specific content of the fault handling method, a person skilled in the art may set the fault handling method according to his own needs, which is not limited herein.
According to the embodiment of the application, after the target fault processing method corresponding to the target event is determined, the ID of the automatic fault recovery script program in the target fault processing method can be obtained, so that the automatic fault recovery module is triggered to execute the automatic fault recovery script program corresponding to the ID of the automatic fault recovery script program, and the automatic recovery of the fault indicated by the target event in the civil aviation system is achieved.
The embodiment of the application triggers an automatic fault recovery script program for executing the target fault processing method indication, and automatically processes the fault in the civil aviation system of the target fault alarm indication corresponding to the target fault processing method, and the method comprises the following steps: determining a most recent undetermined fault recovery step in the sequence of fault recovery steps indicated by the method statement; if the currently determined fault recovery step does not indicate an automatic fault recovery script program, displaying the currently determined fault recovery step; responding to the execution completion operation of the currently determined fault recovery step, and returning to execute the step of determining the latest undetermined fault recovery step in the fault recovery step sequence indicated by the narrative of the method; and if the current determined fault recovery step indicates an automatic fault recovery script program, triggering and executing the automatic fault recovery script program.
Illustratively, the method statement includes a sequence of failure recovery steps consisting of at least one failure recovery step ordered in sequence. Correspondingly, a first fault recovery step in the fault recovery step sequence can be determined, and if the first fault recovery step does not indicate an automatic fault recovery script program, the first fault recovery step is displayed; determining a second failover step from the sequence of failover steps in response to the completion of the execution of the first failover step, and if the second failover step indicates an automated failover script program, triggering execution of the automated failover script program indicated by the second failover step; in response to the completion of the execution of the second failure recovery step, a third failure recovery step … is determined from the sequence of failure recovery steps, and so on, and will not be described herein.
For example, if the fault recovery step does not indicate an automated fault recovery script, it may be that the fault recovery step is considered to be completed after the fault recovery step is shown to be completed; or, the fault recovery step is shown, and after receiving the operation instructed by the user to complete the fault recovery step in response to the execution of the fault recovery step, the execution of the fault recovery step is considered to be complete.
The above are only some preferred manners for completing the execution of the failure recovery step provided in the embodiment of the present application, and different manners for determining the completion of the execution may be different for different failure recovery steps, which is not limited herein.
Further, the event processing method provided by the embodiment of the application can also generate and store a fault recovery record of target fault alarm.
The embodiment of the application provides an event processing method, which comprises the steps of analyzing and integrating fault alarms of monitoring and sending a civil aviation system by at least one technical platform, and determining at least one target fault alarm; one target fault alarm corresponds to one target event; inquiring a preset corresponding relation between events and fault processing methods, and respectively obtaining a target fault processing method corresponding to each target event; and triggering an automatic fault recovery script program for executing the target fault processing method indication, and automatically processing the fault in the civil aviation system of the target fault alarm indication corresponding to the target fault processing method. The method and the device effectively improve the accuracy and efficiency of fault processing based on analysis and integration of fault alarming of at least one technical platform and automatic processing of fault alarming.
A method for determining whether two fault alarms indicate the same fault according to the embodiment of the present application is described in detail below with reference to fig. 5.
As shown in fig. 5, the method includes:
s501, determining whether the time difference between the alarm occurrence times of the two fault alarms does not exceed a preset target time length; if the time difference does not exceed the target duration, executing step S502; if the time difference exceeds the target duration, executing step S504;
for example, the target time period may be 1 minute, 2 minutes, 3 minutes, etc., and the above is only a preferred content of the target time period provided in the embodiments of the present application, and a person skilled in the art may set the specific content of the target time period according to his or her own needs, which is not limited herein.
S502, judging whether the keyword matching degree of the two fault alarms exceeds the preset target keyword matching degree; if the matching degree of the keywords of the two fault alarms exceeds the matching degree of the target keywords, executing the step S503; if the matching degree of the keywords of the two fault alarms does not exceed the matching degree of the target keywords, executing step S504;
exemplarily, taking two fault alarms for determining the keyword matching degree as a first fault alarm and a second fault alarm respectively as an example, performing keyword segmentation on the first fault alarm to obtain a first keyword set of the first fault alarm, and performing keyword segmentation on the second fault alarm to obtain a second keyword set of the second fault alarm; the method comprises the steps of determining the number of repeated keywords in a first keyword set and a second keyword set (for the convenience of distinguishing, the number can be called as a first number), determining the total number of the keywords in the first keyword set and the second keyword set (for the convenience of distinguishing, the number can be called as a second number), and dividing the first number by the second number to obtain the keyword matching degree of a first fault alarm and a second fault alarm.
The total number of keywords in the first keyword set and the second keyword set may be calculated in the following manner: determining repeated keywords in the first keyword set and the second keyword set, deleting the determined keywords from the first keyword set, determining the number of the remaining keywords in the first keyword set and the number of the keywords in the second keyword set, and taking the sum of the number of the remaining keywords in the first keyword set and the number of the keywords in the second keyword set as the total number of the keywords in the first keyword set and the second keyword set.
S503, determining that the two fault alarm indications have the same fault;
s504, it is determined that the two fault alarms do not indicate the same fault.
The event processing method provided by the application fills the gap of automatic fault recovery of the current civil aviation open system; the automatic processing of the whole process from the generation to the recovery of the fault reduces the risk caused by the manual fault recovery of operation and maintenance personnel; the fault alarm information after the integration and analysis can be fed back to the monitoring system in a reverse direction, so that the monitoring system is helped to improve the fault alarm accuracy; the workload of operation and maintenance personnel is reduced, and the working efficiency of the operation and maintenance personnel is improved. The application emphasizes how to realize full-process automatic processing in the process of generating and closing faults, and belongs to innovation in the field of automatic operation and maintenance of civil aviation open systems.
Fig. 6 is a schematic structural diagram of an event processing apparatus according to an embodiment of the present application.
As shown in fig. 6, the apparatus includes:
the analysis and integration unit 601 is used for analyzing and integrating all fault alarms which are sent by monitoring the civil aviation system by at least one technical platform, and determining at least one target fault alarm; one target fault alarm corresponds to one target event;
a target fault handling method obtaining unit 602, configured to query a preset correspondence between events and fault handling methods, and obtain a target fault handling method corresponding to each target event;
and the event processing unit 603 is configured to trigger an automatic fault recovery script program for executing the target fault processing method indication, and automatically process the fault in the civil aviation system indicated by the target fault alarm corresponding to the target fault processing method.
For example, the analysis integration unit may be regarded as a unit in the fault analysis module, the target fault processing method acquisition unit may be regarded as a unit in the event management module, and the event processing unit may be regarded as a unit in the event management module, where the event processing unit is configured to trigger the automatic fault recovery module to execute an automatic fault recovery script program indicated by the target fault processing method, so as to implement automatic recovery of a fault in the civil aviation system.
In the embodiment of the present application, preferably, the analysis integration unit includes:
the system comprises a fault alarm receiving unit, a fault alarm processing unit and a fault alarm processing unit, wherein the fault alarm receiving unit is used for receiving each fault alarm which is sent by at least one technical platform for monitoring the civil aviation system;
a failure alarm determination unit for determining at least one failure alarm indicating the same failure among the received failure alarms;
and the analysis integration subunit is used for integrating at least one fault alarm into a target fault alarm if the at least one fault alarm comprises fault alarms from different technical platforms.
Further, an event processing apparatus provided in an embodiment of the present application further includes a determining unit, where the determining unit includes:
the time length determining unit is used for determining whether the time difference between the alarm occurrence times of the two fault alarms does not exceed the preset target time length;
the judging subunit is used for judging whether the keyword matching degrees of the two fault alarms exceed the preset target keyword matching degree or not if the time difference does not exceed the target time length;
the first determining unit is used for determining that the two fault alarms indicate the same fault if the keyword matching degree of the two fault alarms exceeds the target keyword matching degree;
and the second determining unit is used for determining that the two fault alarms do not indicate the same fault if the time difference between the alarm occurrence times of the two fault alarms exceeds the target time length or the keyword matching degree of the two fault alarms exceeds the target keyword matching degree.
In this embodiment, preferably, the target failure processing method includes an automated failure recovery script program and a method description, and the event processing unit includes:
a failure recovery step determination unit for determining a latest undetermined failure recovery step in the sequence of failure recovery steps indicated by the method statement;
the fault recovery step display unit is used for displaying the currently determined fault recovery step if the currently determined fault recovery step does not indicate an automatic fault recovery script program;
a return execution unit, configured to return to execute the step of "determining the latest undetermined failure recovery step in the failure recovery step sequence indicated by the method description" in response to an execution completion operation of the currently determined failure recovery step;
and the event processing subunit is used for triggering and executing the automatic fault recovery script program if the current determined fault recovery step indicates the automatic fault recovery script program.
Further, the event processing apparatus provided by the embodiment of the present application further includes a failure recovery record generating unit, where the failure recovery record generating unit is configured to generate and store a failure recovery record of the target failure alarm.
A method for determining a vehicle function control intention provided in an embodiment of the present application is applied to an electronic device, and as shown in fig. 7, is a structural diagram of an implementation manner of the electronic device provided in the embodiment of the present application, where the computer device includes:
a memory 701 for storing a program;
a processor 702 configured to execute a program, the program specifically configured to:
analyzing and integrating each fault alarm monitored and sent by at least one technical platform to the civil aviation system, and determining at least one target fault alarm; one target fault alarm corresponds to one target event;
inquiring a preset corresponding relation between events and fault processing methods, and respectively obtaining a target fault processing method corresponding to each target event;
and triggering an automatic fault recovery script program for executing the target fault processing method indication, and automatically processing the fault in the civil aviation system of the target fault alarm indication corresponding to the target fault processing method.
The processor 702 may be a central processing unit CPU or an Application Specific Integrated Circuit (ASIC).
The control device may further comprise a communication interface 703 and a communication bus 704, wherein the memory 701, the processor 702 and the communication interface 703 are in communication with each other via the communication bus 704.
The embodiment of the present application further provides a readable storage medium, where a computer program is stored, and the computer program is loaded and executed by a processor to implement the steps of the event processing method, where a specific implementation process may refer to descriptions of corresponding parts in the foregoing embodiment, and details are not described in this embodiment.
The embodiment of the application provides an event processing method, an event processing device, computer equipment and a storage medium, wherein each fault alarm which is sent by monitoring a civil aviation system by at least one technical platform is analyzed and integrated, and at least one target fault alarm is determined; one target fault alarm corresponds to one target event; inquiring a preset corresponding relation between events and fault processing methods, and respectively obtaining a target fault processing method corresponding to each target event; and triggering an automatic fault recovery script program for executing the target fault processing method indication, and automatically processing the fault in the civil aviation system of the target fault alarm indication corresponding to the target fault processing method. The method and the device effectively improve the accuracy and efficiency of fault processing based on analysis and integration of fault alarming of at least one technical platform and automatic processing of fault alarming.
The event processing method, the event processing apparatus, the computer device, and the storage medium provided by the present invention are described in detail above, and a specific example is applied in the present disclosure to explain the principle and the implementation of the present invention, and the description of the above embodiment is only used to help understanding the method and the core idea of the present invention; meanwhile, for a person skilled in the art, according to the idea of the present invention, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present invention.
It should be noted that, in the present specification, the embodiments are all described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments may be referred to each other. The device disclosed by the embodiment corresponds to the method disclosed by the embodiment, so that the description is simple, and the relevant points can be referred to the method part for description.
It is further noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include or include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
The previous description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.
Claims (10)
1. An event processing method, comprising:
analyzing and integrating each fault alarm monitored and sent by at least one technical platform to the civil aviation system, and determining at least one target fault alarm; one target fault alarm corresponds to one target event;
inquiring a preset corresponding relation between events and fault processing methods, and respectively acquiring a target fault processing method corresponding to each target event;
and triggering an automatic fault recovery script program for executing the target fault processing method indication, and automatically processing the fault in the civil aviation system of the target fault alarm indication corresponding to the target fault processing method.
2. The method of claim 1, wherein analyzing and integrating the fault alarms sent by at least one platform for monitoring the civil aviation system to determine at least one target fault alarm comprises:
receiving each fault alarm which is sent by at least one technical platform for monitoring the civil aviation system;
determining at least one of the received fault alarms indicating the same fault;
and if the at least one fault alarm comprises fault alarms from different technical platforms, integrating the at least one fault alarm into a target fault alarm.
3. The method of claim 1, further comprising a process of determining whether two fault alarms indicate the same fault, the process comprising:
determining whether the time difference between the alarm occurrence times of the two fault alarms does not exceed a preset target time length;
if the time difference does not exceed the target duration, judging whether the keyword matching degree of the two fault alarms exceeds a preset target keyword matching degree;
if the keyword matching degree of the two fault alarms exceeds the target keyword matching degree, determining that the two fault alarms indicate the same fault;
and if the time difference between the alarm occurrence times of the two fault alarms exceeds the target time length or the keyword matching degree of the two fault alarms exceeds the target keyword matching degree, determining that the two fault alarms do not indicate the same fault.
4. The method of claim 1, wherein the target failure handling method comprises an automated failure recovery script program and method narrative,
the triggering execution of the automatic fault recovery script program indicated by the target fault processing method to automatically process the fault in the civil aviation system indicated by the target fault alarm corresponding to the target fault processing method comprises the following steps:
determining a most recent undetermined fault recovery step in the sequence of fault recovery steps indicated by the method statement;
if the currently determined fault recovery step does not indicate an automatic fault recovery script program, displaying the currently determined fault recovery step;
responding to the execution completion operation of the currently determined fault recovery step, and returning to execute the step of determining the latest undetermined fault recovery step in the fault recovery step sequence indicated by the method statement;
and if the current determined fault recovery step indicates an automatic fault recovery script program, triggering and executing the automatic fault recovery script program.
5. The method of claim 1, further comprising:
and generating and storing a fault recovery record of the target fault alarm.
6. An event processing apparatus, comprising:
the analysis and integration unit is used for analyzing and integrating each fault alarm which is sent by monitoring the civil aviation system by at least one technical platform and determining at least one target fault alarm; one target fault alarm corresponds to one target event;
the target fault processing method acquisition unit is used for inquiring the corresponding relation between preset events and fault processing methods and respectively acquiring a target fault processing method corresponding to each target event;
and the event processing unit is used for triggering an automatic fault recovery script program for executing the target fault processing method indication, and automatically processing the fault in the civil aviation system of the target fault alarm indication corresponding to the target fault processing method.
7. The apparatus of claim 6, wherein the analysis integration unit comprises:
the system comprises a fault alarm receiving unit, a fault alarm processing unit and a fault alarm processing unit, wherein the fault alarm receiving unit is used for receiving each fault alarm which is sent by at least one technical platform for monitoring the civil aviation system;
a failure alarm determination unit for determining at least one failure alarm indicating the same failure among the received failure alarms;
and the analysis integration subunit is used for integrating the at least one fault alarm into a target fault alarm if the at least one fault alarm comprises fault alarms from different technical platforms.
8. The apparatus of claim 6, further comprising a determining unit, the determining unit comprising:
the time length determining unit is used for determining whether the time difference between the alarm occurrence times of the two fault alarms does not exceed the preset target time length;
the judging subunit is used for judging whether the keyword matching degrees of the two fault alarms exceed the preset target keyword matching degree or not if the time difference does not exceed the target time length;
the first determining unit is used for determining that the two fault alarms indicate the same fault if the keyword matching degree of the two fault alarms exceeds the target keyword matching degree;
and the second determining unit is used for determining that the two fault alarms do not indicate the same fault if the time difference between the alarm occurrence times of the two fault alarms exceeds the target time length or the keyword matching degree of the two fault alarms exceeds the target keyword matching degree.
9. An electronic device, comprising: a processor and a memory; the processor is used for calling and executing the program stored in the memory; the memory for storing a program for implementing the event processing method according to any one of claims 1 to 5.
10. A computer-readable storage medium, having stored thereon a computer program which, when loaded and executed by a processor, carries out the steps of the event processing method according to any one of claims 1 to 5.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110608613.3A CN113312200A (en) | 2021-06-01 | 2021-06-01 | Event processing method and device, computer equipment and storage medium |
| PCT/CN2022/088134 WO2022252860A1 (en) | 2021-06-01 | 2022-04-21 | Event processing method and apparatus, and computer device and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110608613.3A CN113312200A (en) | 2021-06-01 | 2021-06-01 | Event processing method and device, computer equipment and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN113312200A true CN113312200A (en) | 2021-08-27 |
Family
ID=77376794
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110608613.3A Pending CN113312200A (en) | 2021-06-01 | 2021-06-01 | Event processing method and device, computer equipment and storage medium |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN113312200A (en) |
| WO (1) | WO2022252860A1 (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2022252860A1 (en) * | 2021-06-01 | 2022-12-08 | 中国民航信息网络股份有限公司 | Event processing method and apparatus, and computer device and storage medium |
| CN115695142A (en) * | 2022-10-25 | 2023-02-03 | 浪潮通信信息系统有限公司 | Network operation and maintenance oriented event monitoring method and device |
| CN117527527A (en) * | 2024-01-08 | 2024-02-06 | 天津市天河计算机技术有限公司 | Multi-source alarm processing method and system |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108989132A (en) * | 2018-08-24 | 2018-12-11 | 深圳前海微众银行股份有限公司 | Fault warning processing method, system and computer readable storage medium |
| JP2019009726A (en) * | 2017-06-28 | 2019-01-17 | 株式会社日立製作所 | Fault separating method and administrative server |
| CN109374053A (en) * | 2018-11-13 | 2019-02-22 | 深圳市中广控信息科技有限公司 | A kind of Internet of Things computer lab management platform based on event-driven response |
| CN111082966A (en) * | 2019-11-01 | 2020-04-28 | 平安科技（深圳）有限公司 | Positioning method and device based on batch alarm events, electronic equipment and medium |
| CN111814999A (en) * | 2020-07-08 | 2020-10-23 | 上海燕汐软件信息科技有限公司 | Fault work order generation method, device and equipment |
Family Cites Families (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2003114811A (en) * | 2001-10-05 | 2003-04-18 | Nec Corp | Method and system for automatic failure recovery and apparatus and program therefor |
| CN109358602A (en) * | 2018-10-23 | 2019-02-19 | 山东中创软件商用中间件股份有限公司 | A kind of failure analysis methods, device and relevant device |
| CN110164101B (en) * | 2019-04-09 | 2021-05-11 | 烽台科技（北京）有限公司 | Alarm information processing method and equipment |
| CN111181767A (en) * | 2019-12-10 | 2020-05-19 | 中国航空工业集团公司成都飞机设计研究所 | Monitoring and fault self-healing system and method for complex system |
| CN113312200A (en) * | 2021-06-01 | 2021-08-27 | 中国民航信息网络股份有限公司 | Event processing method and device, computer equipment and storage medium |
-
2021
- 2021-06-01 CN CN202110608613.3A patent/CN113312200A/en active Pending
-
2022
- 2022-04-21 WO PCT/CN2022/088134 patent/WO2022252860A1/en active Application Filing
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2019009726A (en) * | 2017-06-28 | 2019-01-17 | 株式会社日立製作所 | Fault separating method and administrative server |
| CN108989132A (en) * | 2018-08-24 | 2018-12-11 | 深圳前海微众银行股份有限公司 | Fault warning processing method, system and computer readable storage medium |
| CN109374053A (en) * | 2018-11-13 | 2019-02-22 | 深圳市中广控信息科技有限公司 | A kind of Internet of Things computer lab management platform based on event-driven response |
| CN111082966A (en) * | 2019-11-01 | 2020-04-28 | 平安科技（深圳）有限公司 | Positioning method and device based on batch alarm events, electronic equipment and medium |
| CN111814999A (en) * | 2020-07-08 | 2020-10-23 | 上海燕汐软件信息科技有限公司 | Fault work order generation method, device and equipment |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2022252860A1 (en) * | 2021-06-01 | 2022-12-08 | 中国民航信息网络股份有限公司 | Event processing method and apparatus, and computer device and storage medium |
| CN115695142A (en) * | 2022-10-25 | 2023-02-03 | 浪潮通信信息系统有限公司 | Network operation and maintenance oriented event monitoring method and device |
| CN117527527A (en) * | 2024-01-08 | 2024-02-06 | 天津市天河计算机技术有限公司 | Multi-source alarm processing method and system |
| CN117527527B (en) * | 2024-01-08 | 2024-03-19 | 天津市天河计算机技术有限公司 | Multi-source alarm processing method and system |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2022252860A1 (en) | 2022-12-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110782370B (en) | Comprehensive operation and maintenance management platform for power dispatching data network | |
| CN113312200A (en) | Event processing method and device, computer equipment and storage medium | |
| CN111209131A (en) | Method and system for determining fault of heterogeneous system based on machine learning | |
| CN110505102B (en) | Power information communication fusion monitoring and service standardization management platform system and method | |
| CN112162878A (en) | Database fault discovery method and device, electronic equipment and storage medium | |
| CN110232006B (en) | Equipment alarm method and related device | |
| CN111897671A (en) | Failure recovery method, computer device, and storage medium | |
| WO2016188100A1 (en) | Information system fault scenario information collection method and system | |
| CN108107292B (en) | Service data monitoring system and method of electric energy quality on-line monitoring system | |
| CN111143185A (en) | Log-based fault analysis method and device | |
| WO2024098986A1 (en) | Relay protection apparatus defect detection method and system based on intelligent oscillograph | |
| CN116560893B (en) | Computer application program operation data fault processing system | |
| CN117422434A (en) | Wisdom fortune dimension dispatch platform | |
| CN110888782B (en) | Device processing method, system, electronic device and computer readable storage medium | |
| CN112286762A (en) | System information analysis method and device based on cloud environment, electronic equipment and medium | |
| CN114500316B (en) | Method and system for inspecting equipment of Internet of things | |
| CN114387123B (en) | Data acquisition management method | |
| KR101288535B1 (en) | Method for monitoring communication system and apparatus therefor | |
| CN113438248B (en) | Network IP address self-checking management system convenient for master station | |
| KR20100003597A (en) | Method and system for monitoring integration performance | |
| CN112446619B (en) | Power distribution network rush-repair processing method and device | |
| CN115903720A (en) | Fault diagnosis system and method for rail transit, and storage medium | |
| CN111835566A (en) | System fault management method, device and system | |
| CN111932706B (en) | Informationized inspection method and device, storage medium and electronic equipment | |
| CN117421153B (en) | Automatic testing system and method for railway wagon fault image recognition model |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |