CN113419887A - Method and device for processing abnormal online transaction of host - Google Patents
Method and device for processing abnormal online transaction of host Download PDFInfo
- Publication number
- CN113419887A CN113419887A CN202110700921.9A CN202110700921A CN113419887A CN 113419887 A CN113419887 A CN 113419887A CN 202110700921 A CN202110700921 A CN 202110700921A CN 113419887 A CN113419887 A CN 113419887A
- Authority
- CN
- China
- Prior art keywords
- information
- abnormal
- transaction
- host
- target file
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 230000002159 abnormal effect Effects 0.000 title claims abstract description 98
- 238000000034 method Methods 0.000 title claims abstract description 53
- 238000012545 processing Methods 0.000 title claims abstract description 27
- 238000012423 maintenance Methods 0.000 claims abstract description 38
- 238000003745 diagnosis Methods 0.000 claims abstract description 27
- 238000003860 storage Methods 0.000 claims abstract description 19
- 230000004044 response Effects 0.000 claims abstract description 9
- 238000004590 computer program Methods 0.000 claims description 22
- 238000005192 partition Methods 0.000 claims description 13
- 230000001960 triggered effect Effects 0.000 claims description 8
- 238000003672 processing method Methods 0.000 abstract description 9
- 238000010926 purge Methods 0.000 description 21
- 230000005856 abnormality Effects 0.000 description 16
- 238000010586 diagram Methods 0.000 description 11
- 230000015654 memory Effects 0.000 description 10
- 230000006870 function Effects 0.000 description 8
- 238000004891 communication Methods 0.000 description 7
- 230000008569 process Effects 0.000 description 7
- 238000004458 analytical method Methods 0.000 description 5
- WXBXVVIUZANZAU-CMDGGOBGSA-N trans-2-decenoic acid Chemical compound CCCCCCC\C=C\C(O)=O WXBXVVIUZANZAU-CMDGGOBGSA-N 0.000 description 5
- 238000004519 manufacturing process Methods 0.000 description 3
- 230000003287 optical effect Effects 0.000 description 3
- 238000013515 script Methods 0.000 description 3
- 230000009471 action Effects 0.000 description 2
- 230000036541 health Effects 0.000 description 2
- 230000003993 interaction Effects 0.000 description 2
- 230000008531 maintenance mechanism Effects 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000008520 organization Effects 0.000 description 2
- 102000004137 Lysophosphatidic Acid Receptors Human genes 0.000 description 1
- 108090000642 Lysophosphatidic Acid Receptors Proteins 0.000 description 1
- 230000008901 benefit Effects 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 239000000835 fiber Substances 0.000 description 1
- 230000010365 information processing Effects 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 238000004806 packaging method and process Methods 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 238000000638 solvent extraction Methods 0.000 description 1
- 239000000758 substrate Substances 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/0703—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
- G06F11/079—Root cause analysis, i.e. error or fault diagnosis
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Quality & Reliability (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Health & Medical Sciences (AREA)
- Biomedical Technology (AREA)
- Debugging And Monitoring (AREA)
Abstract
The disclosure provides a processing method for online transaction exception of a host, which can be applied to the technical field of information security. The method comprises the following steps: triggering a main program to submit diagnosis operation in response to the host online transaction abnormal alarm information; executing the diagnosis operation backtracking scanning on-line log according to the alarm information, and outputting a target file; determining abnormal information according to first preset identification information and the target file; pushing the abnormal information to operation and maintenance personnel; the alarm information comprises time information of abnormal affairs, the target file comprises first preset identification information and transaction codes corresponding to the first preset identification information, and the abnormal information comprises abnormal transaction codes and frequency of the abnormal transaction codes. The disclosure also provides a device, equipment, storage medium and program product for processing the abnormal online transaction of the host.
Description
Technical Field
The present disclosure relates to the field of information security technologies, and in particular, to a method, an apparatus, a device, a medium, and a program product for processing a host online transaction exception.
Background
At present, a large-scale host system is still an important component of large-scale bank production business, and when the host online transaction (such as transaction) is abnormal due to jitter of a disk operating system, large transaction processing capacity and long database response time, the host online overall performance business is possibly influenced, so that the abnormality needs to be diagnosed as soon as possible, and the reason and the influence degree of the abnormality need to be determined.
In one example, when the online transaction of the host is abnormal, the on-duty operation and maintenance personnel positions according to the time point of the problem, waits for the online performance data at the time point of the problem to be written into the specified host file, and then executes the report operation to acquire the abnormal online transaction information from the corresponding host file, however, because the task of writing the online performance data into the specified host file by the host is executed regularly, the online performance data cannot be intervened and controlled manually and effectively, when the online transaction is abnormal, the subsequent operation can be performed only after the corresponding host file is generated, so that the timeliness is relatively poor, and the detailed reason and the influence degree of the abnormal online transaction cannot be obtained in time.
Disclosure of Invention
In view of the foregoing, the present disclosure provides a method, apparatus, device, medium, and program product for processing a host online transaction exception that improve efficiency of processing the online transaction exception.
According to a first aspect of the present disclosure, there is provided a method for handling a host online transaction exception, including: triggering a main program to submit diagnosis operation in response to the host online transaction abnormal alarm information;
executing the diagnosis operation backtracking scanning on-line log according to the alarm information, and outputting a target file;
determining abnormal information according to first preset identification information and the target file;
pushing the abnormal information to operation and maintenance personnel;
the alarm information comprises time information of abnormal affairs, the target file comprises first preset identification information and transaction codes corresponding to the first preset identification information, and the abnormal information comprises abnormal transaction codes and frequency of the abnormal transaction codes.
According to an embodiment of the present disclosure, the executing the diagnostic operation backtracking scanning online log according to the alarm information and outputting a target file includes:
determining time information of abnormal affairs according to the alarm information;
executing the diagnosis operation, and performing backtracking scanning by taking the time information as a scanning starting point;
and outputting the scanned result to generate a target file.
According to an embodiment of the present disclosure, the host is provided with a plurality of logical partitions, and the performing the diagnostic operation to perform the backtracking scan using the time information as a scan start point includes:
determining an online address space to be scanned according to a preset online list of each logic partition;
and performing backtracking scanning on the online address space to be scanned by taking the time information as a scanning starting point.
According to an embodiment of the present disclosure, the determining abnormal information according to the first preset identification information and the target file includes:
counting the content of the target file according to the first preset identification information;
and determining abnormal information according to the statistical result.
According to an embodiment of the present disclosure, the counting the content of the target file according to the first preset identification information includes:
counting the content of the target file by taking the first preset identification information as an index;
and acquiring a transaction code corresponding to the first preset identification information, and counting the frequency of the transaction code.
According to an embodiment of the present disclosure, the pushing the abnormal information to an operation and maintenance person includes:
sending the abnormal information to an operation and maintenance platform system in a preset format;
and the operation and maintenance platform system translates the abnormal information into Chinese and pushes the Chinese to the operation and maintenance personnel in the form of short messages and mails.
According to the embodiment of the disclosure, before the main program is triggered to submit the diagnosis operation, the abnormal online transaction of the main machine is determined according to the second preset identification information.
A second aspect of the present disclosure provides a device for processing a host online transaction exception, including: the trigger module is used for responding to the host online transaction abnormal alarm information and triggering the main program to submit the diagnosis operation;
the output module is used for executing the backtracking scanning online log of the diagnosis operation according to the alarm information and outputting a target file;
the determining module is used for determining abnormal information according to first preset identification information and the target file; and
the pushing module is used for pushing the abnormal information to operation and maintenance personnel;
the alarm information comprises time information of abnormal affairs, the target file comprises first preset identification information and transaction codes corresponding to the first preset identification information, and the abnormal information comprises abnormal transaction codes and frequency of the abnormal transaction codes.
A third aspect of the present disclosure provides an electronic device, comprising: one or more processors; and the memory is used for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors are enabled to execute the processing method of the host online transaction exception.
A fourth aspect of the present disclosure also provides a computer-readable storage medium having stored thereon executable instructions, which when executed by a processor, cause the processor to perform the above-mentioned method for handling a host online transaction exception.
The fifth aspect of the present disclosure also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the computer program implements the method for processing the host online transaction exception.
According to the embodiment of the disclosure, a main program is triggered to submit diagnosis operation by responding to the abnormal alarm information of the online transaction of the host; executing the diagnosis operation backtracking scanning on-line log according to the alarm information, and outputting a target file; determining abnormal information according to first preset identification information and the target file; and the abnormal information is pushed to operation and maintenance personnel, so that the timeliness of analysis and processing of the abnormal information of the online transaction is improved, and the abnormal information can be quickly determined.
Drawings
The foregoing and other objects, features and advantages of the disclosure will be apparent from the following description of embodiments of the disclosure, which proceeds with reference to the accompanying drawings, in which:
FIG. 1 is a diagram schematically illustrating an application scenario of a host online transaction exception handling method and apparatus according to an embodiment of the present disclosure;
FIG. 2 schematically illustrates a system architecture of a method and apparatus for handling a host online transaction exception according to an embodiment of the present disclosure;
FIG. 3 schematically illustrates a flow chart of a method of handling a host online transaction exception according to an embodiment of the present disclosure;
FIG. 4 schematically illustrates a flow chart of another method of handling a host online transaction exception, in accordance with an embodiment of the present disclosure;
FIG. 5 schematically illustrates a comparison of an embodiment of the present disclosure with a conventional operation and maintenance mode;
FIG. 6 is a block diagram schematically illustrating an apparatus for handling a host online transaction exception according to an embodiment of the present disclosure; and
FIG. 7 schematically illustrates a block diagram of an electronic device adapted to implement a method of handling a host online transaction exception, according to an embodiment of the present disclosure.
Detailed Description
Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. It should be understood that the description is illustrative only and is not intended to limit the scope of the present disclosure. In the following detailed description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the embodiments of the disclosure. It may be evident, however, that one or more embodiments may be practiced without these specific details. Moreover, in the following description, descriptions of well-known structures and techniques are omitted so as to not unnecessarily obscure the concepts of the present disclosure.
The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the disclosure. The terms "comprises," "comprising," and the like, as used herein, specify the presence of stated features, steps, operations, and/or components, but do not preclude the presence or addition of one or more other features, steps, operations, or components.
All terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. It is noted that the terms used herein should be interpreted as having a meaning that is consistent with the context of this specification and should not be interpreted in an idealized or overly formal sense.
Where a convention analogous to "at least one of A, B and C, etc." is used, in general such a construction is intended in the sense one having skill in the art would understand the convention (e.g., "a system having at least one of A, B and C" would include but not be limited to systems that have a alone, B alone, C alone, a and B together, a and C together, B and C together, and/or A, B, C together, etc.).
To better understand the embodiments of the disclosure, terms and terms appearing in the embodiments of the disclosure are first explained.
The JES2 system (Job Entry Subsystem, JES2) is the lowest and most basic Subsystem that constitutes the Z/OS operating system of a mainframe. It is mainly used for receiving operation, analyzing operation content, controlling operation execution, controlling operation output, etc.
The SDSF System (System Display and Search Facility, SDSF) is a subsystem on which the host computer compares, but is not required. The method is mainly used for providing system information for users and helping the users to monitor, manage and control the Z/OS operating system.
A client Information processing System, CICS (client Information Control System), is a product deployed on a mainframe for providing online transaction processing and transaction management for applications.
AOR (Application organization Region, AOR) is a type of host CICS online that is generally used to handle specific needs of a transaction.
The intelligent operation and maintenance Platform IMMP (intellectual Management system of Mainframe Platform, IMMP) has the functions of real-time display of the current situation of the production environment, storage of technical knowledge and the like.
PURGE is similar to the word "clear" in its English meaning, that is, when an online transaction (e.g., a transaction) is abnormal, it is forced to be interrupted and cleared from the online transaction after being automatically detected by an online health mechanism preconfigured by the system.
The system comprises Logical Partitions (LPARs) (logical partitioning), 8 independent logical partitions of a host environment, wherein loads of the logical partitions are relatively balanced, the logical partitions are connected through a network, and names of the logical partitions are PP1A-PP1H or PP2A-PP2H in sequence.
An independent System deployed in an SA (System Automation, SA) host environment has functions of automatically calling a script deployed by the System, automatically sending a command according to System alarm information and submitting an operation.
At present, a large-scale host system is an important component of large-scale bank production business, and when an online transaction (for example, a transaction) of a host is abnormal due to jitter of a disk operating system, large transaction processing capacity and long database response time, the online transaction of the host is very likely to affect the overall performance business of the online host, so that the abnormality needs to be diagnosed as soon as possible, and the reason and the influence degree of the abnormality need to be determined.
In one example, when the online transaction of the host is abnormal, the on-duty operation and maintenance personnel positions according to the time point of the problem, waits for the online performance data at the time point of the problem to be written into the specified host file, and then executes the report operation to acquire the abnormal online transaction information from the corresponding host file, however, because the task of writing the online performance data into the specified host file by the host is executed regularly, the online performance data cannot be intervened and controlled manually and effectively, when the online transaction is abnormal, the subsequent operation can be performed only after the corresponding host file is generated, so that the timeliness is relatively poor, and the detailed reason and the influence degree of the abnormal online transaction cannot be obtained in time.
Based on the above technical problem, an embodiment of the present disclosure provides a method for processing a host online transaction exception, including: triggering a main program to submit diagnosis operation in response to the host online transaction abnormal alarm information;
executing the diagnosis operation backtracking scanning on-line log according to the alarm information, and outputting a target file; determining abnormal information according to first preset identification information and the target file; pushing the abnormal information to operation and maintenance personnel; the alarm information comprises time information of abnormal affairs, the target file comprises first preset identification information and transaction codes corresponding to the first preset identification information, and the abnormal information comprises abnormal transaction codes and frequency of the abnormal transaction codes.
Fig. 1 schematically illustrates an application scenario diagram of a host online transaction exception handling method and apparatus according to an embodiment of the present disclosure. Fig. 2 schematically illustrates a system architecture of a method and apparatus for handling a host online transaction exception according to an embodiment of the present disclosure. It should be noted that fig. 1 and 2 are only examples of application scenarios and system architectures to which the embodiments of the present disclosure may be applied to help those skilled in the art understand the technical content of the present disclosure, but do not mean that the embodiments of the present disclosure may not be applied to other devices, systems, environments or scenarios. It should be noted that the method and the apparatus for processing the host online transaction exception provided by the embodiment of the present disclosure may be applied to the information security in the financial field, and may also be applied to any field other than the financial field.
As shown in fig. 1, a scenario 100 to which the host online transaction exception handling method according to the embodiment of the present disclosure may be applied includes a host online system 101, an online address space 102, and an operation and maintenance mechanism 103, where when an online transaction exception occurs in the host system, a diagnostic operation is invoked to scan a transaction code in the online address space 102, and a statistical result is sent to the operation and maintenance mechanism 103. The operation and maintenance organization 103 may be, for example, an operation and maintenance management department, and further analyzes the reason for the online transaction anomaly according to the scanning result, and proposes a solution. This application scenario is intended to aid those skilled in the art in understanding the technical content of the present disclosure, but does not imply that embodiments of the present disclosure may not be used in other scenarios.
As shown in fig. 2, the system architecture 110 may include terminal devices 111, 112, 113, a network 114, and a server 115. Network 114 is the medium used to provide communication links between terminal devices 111, 112, 113 and server 115. The network 114 may include various connection types, such as wired, wireless communication links, or fiber optic cables, among others.
The user may use the terminal devices 111, 112, 113 to interact with the server 115 over the network 114 to receive or send messages or the like. Various messaging client applications, such as shopping-like applications, web browser applications, search-like applications, instant messaging tools, mailbox clients, social platform software, etc. (examples only) may be installed on the terminal devices 111, 112, 113.
The terminal devices 111, 112, 113 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop portable computers, desktop computers, and the like. The terminal device can implement the processing method of the host online transaction exception of the embodiment of the disclosure by sending or receiving the control instruction.
The server 115 may be a server providing various services, such as a background management server (for example only) providing support for websites browsed by users using the terminal devices 111, 112, 113. The background management server may analyze and otherwise process the received data such as the user request, and feed back a processing result (for example, information or data obtained or generated according to the user request) to the terminal device.
It should be noted that the method for handling the host online transaction exception provided by the embodiment of the present disclosure may be generally executed by the server 115. Accordingly, the device for handling the host online transaction exception provided by the embodiment of the present disclosure may be generally disposed in the server 115. The method for processing the abnormal host online transaction provided by the embodiment of the present disclosure may also be executed by a server or a server cluster that is different from the server 115 and is capable of communicating with the terminal devices 111, 112, 113 and/or the server 115. Correspondingly, the processing device for the host online transaction exception provided by the embodiment of the present disclosure may also be disposed in a server or a server cluster different from the server 115 and capable of communicating with the terminal devices 111, 112, 113 and/or the server 115.
It should be understood that the number of terminal devices, networks, and servers in fig. 2 is merely illustrative. There may be any number of terminal devices, networks, and servers, as desired for implementation.
The following describes in detail a method for handling a host online transaction exception according to the disclosed embodiment with reference to fig. 3 to 5 based on the application scenario described in fig. 1.
FIG. 3 schematically shows a flow chart of a method for handling a host online transaction exception according to an embodiment of the present disclosure.
As shown in fig. 3, the processing method for processing a host online transaction exception according to this embodiment includes operations S210 to S240, and an execution subject of the processing method may be a background system or a server, or may be an apparatus or a device for executing the method. In this embodiment, a background system is taken as an execution subject for explanation.
In operation S210, in response to the host online transaction abnormality warning information, the main program is triggered to submit the diagnostic job.
When the online transaction (such as online transaction) of the host computer is abnormal, namely the online transaction is PURGE, the system can automatically generate alarm information, automatically trigger the main program to be linked with the JES2 and the SDSF system, call the SA address space to directly submit the diagnosis operation SURCHPUR, call the automatic scripts deployed on the two systems by the diagnosis operation, execute the diagnosis and analysis commands of the online transaction abnormality, and realize the diagnosis and analysis of the online transaction abnormality.
In operation S220, the diagnostic job is performed to backtrack and scan the online log according to the alarm information, and a target file is output.
According to the embodiment of the disclosure, the alarm information includes time information of occurrence of an abnormal transaction, and the target file includes first preset identification information and a transaction code corresponding to the first preset identification information.
In an example, a time point of occurrence of a transaction anomaly is determined according to alarm information, the time point is taken as a scanning starting point, all online address spaces are subjected to backtracking scanning, a scanned log containing transaction code information is taken as a scanning starting point, and is output to a target file, because a fixed message "AC 2036" appears in the log when a transaction PURGE occurs on line, and each time a transaction PURGE occurs, one piece of AC2036 information corresponds to one of the log, and the message also contains a transaction code of the occurrence of the PURGE, the message "AC 2036" can be taken as first preset identification information to represent the message as transaction anomaly information, in the embodiment of the disclosure, the message "AC 2036" is only taken as a preferred example and is not taken as a special limitation, and the first preset identification information can also be any preset identification information.
In operation S230, abnormality information is determined according to the first preset identification information and the target file.
According to an embodiment of the present disclosure, the exception information includes an exception transaction code and a frequency of the exception transaction code.
In one example, the target file contains a plurality of transaction code information, transaction exception information needs to be screened out from the transaction code information, and each item of "AC 2036" corresponds to one piece of transaction exception information, so that exception information can be determined according to the first preset identification information and the target file, where the exception information includes all transaction codes where PURGE occurs during the whole exception period and the frequency of occurrence of PURGE for each transaction code.
In operation S240, the abnormal information is pushed to the operation and maintenance personnel.
In an example, the abnormal information obtained in operation S230 is sent to the IMMP operation and maintenance platform in a fixed format through the SA system, and the IMMP is sent to the host operation and maintenance personnel in a short message and mail push manner, so that the operation and maintenance personnel can further determine the cause of the fault according to the abnormal information to make a solution.
According to the embodiment of the disclosure, when the online transaction is abnormal, the main program is automatically triggered to generate the diagnosis operation, the diagnosis operation is executed according to the alarm information, the online log is backtracked and scanned, the target file is output, the abnormal information is further determined according to the first preset identification information and the target file, the abnormal information is sent to operation and maintenance personnel, the timeliness of analyzing and processing online transaction abnormity is improved, the automation degree is high, the online system, the SA system and the intelligent operation and maintenance platform are utilized to perform scanning, counting and information pushing in the whole process, and excessive manual intervention is not needed.
FIG. 4 is a flow chart that schematically illustrates another method of handling a host online transaction exception, in accordance with an embodiment of the present disclosure.
As shown in fig. 4, the processing method for processing a host online transaction exception according to this embodiment includes operations S310 to S380, and an execution subject of the processing method may be a background system or a server, or may be an apparatus or a device for executing the method. In this embodiment, a background system is taken as an execution subject for explanation.
In operation S310, in response to the host online transaction abnormality warning information, the main program is triggered to submit the diagnostic job.
According to the embodiment of the disclosure, the abnormal online transaction of the host is determined according to the second preset identification information.
In one example, the online log includes various transaction codes for representing different transaction states, when a transaction is automatically detected by an online health mechanism preconfigured by the system due to an abnormality, the transaction is forcibly interrupted and is cleared from the online transaction, this process is that the online transaction is PURGE, when the online transaction is PURGE, second preset identification information appears in the online log, the second preset identification information is "DFHDU 0205" code information, the information represents that the online transaction is abnormal at this time, when the system recognizes the second preset identification information, a host online transaction abnormality alarm message is sent, a main program is triggered to submit a diagnosis job PURGE jca-PURGE jch, and the job further determines which transactions are PURGE.
In operation S320, time information of occurrence of an abnormality of the transaction is determined according to the alarm information.
In operation S330, a diagnostic operation is performed to perform a backtracking scan using the time information as a scan start point.
According to the embodiment of the disclosure, a host is provided with a plurality of logical partitions, and an online address space to be scanned is determined according to a preset online list of each logical partition; and carrying out backtracking scanning on the online address space to be scanned by taking the time information as a scanning starting point.
In one example, time information of the transaction occurrence abnormality may be determined according to the alarm information of operation S320, and the online log is backtracked and scanned by using the time information as a scanning start point, and a backtracking scanning process will be described below.
In the embodiment, the host is provided with 8 logic partitions LPARs, the load among the logic partitions is relatively balanced, and when online transaction abnormity occurs and is PURGE is generated, the online log scanning job PURGEJCA-PURGEJCH is submitted on the 8 LPARs of the host at the same time. According to the time point provided in the alarm information of the transaction PURGE, recording and taking the time point of occurrence of online transaction abnormity as a scanning starting point, presetting an online list of each LPAR in the system, and performing trace-back scanning on all online address spaces set in the preset list INCICASCA-INCICSH, wherein the number of lines of trace-back scanning is 10000 lines in consideration of the scanning efficiency, the integrity and the timeliness of the execution of the whole automatic flow, which needs to be explained that 10000 lines are only preferred embodiments, and 10000 lines of trace-back scanning can acquire abnormal transaction codes as much as possible on the premise of ensuring the scanning efficiency and the processing speed.
In operation S340, the scanned result is output to generate a target file.
In one example, the scanned log content containing the transaction code information is output as a result to a sysam. srchpurg. log folder, each file in the folder is named directly by a corresponding online address space name, and 8 target files are generated correspondingly by corresponding 8 LPARs.
In operation S350, the content of the target file is counted according to the first preset identification information.
According to the embodiment of the disclosure, counting the content of the target file by taking the first preset identification information as an index; and acquiring a transaction code corresponding to the first preset identification information, and counting the frequency of the transaction code.
In an example, the output target file is counted, specifically, since a fixed message "AC 2036" appears in the log when the transaction PURGE occurs online, and when each transaction PURGE occurs, one piece of AC2036 message corresponds to one piece of the log, and the message also contains the transaction code of the PURGE, the script counts the AC2036 by using "AC 2036" as an index, obtains the transaction code in each piece of AC2036 message at the same time, and performs superposition after the counting is completed, to obtain the transaction codes of all the PURGEs occurring during the whole abnormal period, and the frequency of the PURGEs occurring in each transaction code, where "AC 2036" is the first preset identification message.
In operation S360, abnormality information is determined according to the statistical result.
According to the embodiment of the disclosure, the exception information includes all transaction codes where the PURGE occurs during the whole exception period and the frequency of occurrence of the PURGE for each transaction code.
The abnormal information may be determined according to the statistical result in operation S350.
In operation S370, the exception information is sent to the operation and maintenance platform system in a preset format.
In one example, an SA39TESTWTO command is sent by the SA, a message with a predetermined format of CI0033I as a header and a format of "CI 0033I" TOTAL "TRANS" ARE used for "ARE sent", wherein TOTAL is a digital variable, the frequency statistics in operation S360 ARE recorded, and the second TRANS is a character variable, and the transaction codes counted in operation S360 ARE recorded. The abnormal information is sent to the IMMP operation and maintenance platform system in a preset format by the method.
In operation S380, the operation and maintenance platform system translates the abnormal information into chinese and pushes the chinese information to the operation and maintenance staff in the form of short message and mail.
In one example, the IMMP translates the received abnormal information into a chinese language, and informs the operation and maintenance staff of the translated abnormal information in a short message and email push manner. The operation and maintenance personnel can further determine the reason of the online transaction abnormity according to the abnormity information and make a corresponding solution.
According to the processing method for the online transaction abnormity of the host, provided by the embodiment of the disclosure, the time information of the abnormity of the transaction is determined according to the alarm information, the diagnosis operation is executed, and the time information is taken as the scanning starting point for backtracking scanning; outputting the scanned result to generate a target file; counting the content of the target file according to the first preset identification information; and determining abnormal information according to the statistical result, and sending the abnormal information to operation and maintenance personnel through the operation and maintenance platform system in a short message and mail mode, so that the speed and the automation degree of analyzing and processing the online transaction abnormity are improved.
Fig. 5 schematically shows a comparison diagram of the embodiment of the present disclosure and a conventional operation and maintenance mode, as shown in fig. 5, compared with the number of interactions between a user and a system, and a reference example is a whole flow of diagnostic analysis when an abnormal event occurs in a primary host online transaction.
In the conventional operation and maintenance mode, in operation S401, after the timing task of writing the online performance data into the specified host file by the system is completed, the user manually submits the job. In operation S402, the user checks a job output result after the job returns. In operation S403, the user selects and counts all the abnormal transaction lists and abnormal transaction counts according to the output result.
In the embodiment provided by the present disclosure, in operation S411, when an abnormality occurs in the online transaction, the main program is automatically triggered to link with the JES2 and the SDSF system, and the SA address space is called to directly submit the diagnosis job. In operation S412, the program generates and automatically submits a job to JES2, the SDSF system. The operation comprises a diagnosis and analysis command for online transaction abnormity. In operation S413, the user checks the result provided by the program to return, and the system automatically pushes the result as an email and a short message. In the whole process, the total number of interaction is 1, and the result of each step does not need to be confirmed manually in the process.
Based on the processing method of the host online transaction exception, the disclosure also provides a processing device of the host online transaction exception. The apparatus will be described in detail below with reference to fig. 6.
Fig. 6 is a block diagram schematically illustrating a structure of a device for handling a host online transaction exception according to an embodiment of the present disclosure.
As shown in fig. 6, the apparatus 500 for handling a host online transaction exception of this embodiment includes a triggering module 510, an outputting module 520, a determining module 530, and a pushing module 540.
The triggering module 510 is configured to trigger the main program to submit the diagnostic job in response to the host online transaction abnormality alarm information. In an embodiment, the triggering module 510 may be configured to perform the operation S210 described above, which is not described herein again.
The output module 520 is configured to perform backtracking and scanning of the online log according to the alarm information, and output a target file. In an embodiment, the output module 520 may be configured to perform the operation S220 described above, which is not described herein again.
The determining module 530 is configured to determine the abnormal information according to the first preset identification information and the target file. In an embodiment, the determining module 530 may be configured to perform the operation S230 described above, which is not described herein again.
The pushing module 540 is used for pushing the abnormal information to the operation and maintenance personnel. In an embodiment, the pushing module 540 may be configured to perform the operation S240 described above, and is not described herein again.
According to an embodiment of the present disclosure, any plurality of the triggering module 510, the outputting module 520, the determining module 530, and the pushing module 540 may be combined into one module to be implemented, or any one of them may be split into a plurality of modules. Alternatively, at least part of the functionality of one or more of these modules may be combined with at least part of the functionality of the other modules and implemented in one module. According to an embodiment of the present disclosure, at least one of the triggering module 510, the outputting module 520, the determining module 530 and the pushing module 540 may be implemented at least partially as a hardware circuit, such as a Field Programmable Gate Array (FPGA), a Programmable Logic Array (PLA), a system on a chip, a system on a substrate, a system on a package, an Application Specific Integrated Circuit (ASIC), or may be implemented in hardware or firmware in any other reasonable manner of integrating or packaging a circuit, or in any one of three implementations of software, hardware and firmware, or in any suitable combination of any of them. Alternatively, at least one of the triggering module 510, the outputting module 520, the determining module 530 and the pushing module 540 may be at least partially implemented as a computer program module, which when executed may perform the corresponding functions.
FIG. 7 schematically illustrates a block diagram of an electronic device adapted to implement a method of handling a host online transaction exception, according to an embodiment of the present disclosure.
As shown in fig. 7, an electronic apparatus 900 according to an embodiment of the present disclosure includes a processor 901 which can perform various appropriate actions and processes in accordance with a program stored in a Read Only Memory (ROM)902 or a program loaded from a storage portion 908 into a Random Access Memory (RAM) 903. Processor 901 may comprise, for example, a general purpose microprocessor (e.g., a CPU), an instruction set processor and/or associated chipset, and/or a special purpose microprocessor (e.g., an Application Specific Integrated Circuit (ASIC)), among others. The processor 901 may also include on-board memory for caching purposes. The processor 901 may comprise a single processing unit or a plurality of processing units for performing the different actions of the method flows according to embodiments of the present disclosure.
In the RAM 903, various programs and data necessary for the operation of the electronic apparatus 900 are stored. The processor 901, the ROM 902, and the RAM 903 are connected to each other through a bus 904. The processor 901 performs various operations of the method flows according to the embodiments of the present disclosure by executing programs in the ROM 902 and/or the RAM 903. Note that the program may also be stored in one or more memories other than the ROM 902 and the RAM 903. The processor 901 may also perform various operations of the method flows according to embodiments of the present disclosure by executing programs stored in the one or more memories.
The present disclosure also provides a computer-readable storage medium, which may be contained in the apparatus/device/system described in the above embodiments; or may exist separately and not be assembled into the device/apparatus/system. The computer-readable storage medium carries one or more programs which, when executed, implement the method according to an embodiment of the disclosure.
According to embodiments of the present disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium, which may include, for example but is not limited to: a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the present disclosure, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. For example, according to embodiments of the present disclosure, a computer-readable storage medium may include the ROM 902 and/or the RAM 903 described above and/or one or more memories other than the ROM 902 and the RAM 903.
Embodiments of the present disclosure also include a computer program product comprising a computer program containing program code for performing the method illustrated in the flow chart. When the computer program product runs in a computer system, the program code is used for causing the computer system to realize the item recommendation method provided by the embodiment of the disclosure.
The computer program performs the above-described functions defined in the system/apparatus of the embodiments of the present disclosure when executed by the processor 901. The systems, apparatuses, modules, units, etc. described above may be implemented by computer program modules according to embodiments of the present disclosure.
In one embodiment, the computer program may be hosted on a tangible storage medium such as an optical storage device, a magnetic storage device, or the like. In another embodiment, the computer program may also be transmitted, distributed in the form of a signal on a network medium, and downloaded and installed through the communication section 909 and/or installed from the removable medium 911. The computer program containing program code may be transmitted using any suitable network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the foregoing.
In such an embodiment, the computer program may be downloaded and installed from a network through the communication section 909, and/or installed from the removable medium 911. The computer program, when executed by the processor 901, performs the above-described functions defined in the system of the embodiment of the present disclosure. The systems, devices, apparatuses, modules, units, etc. described above may be implemented by computer program modules according to embodiments of the present disclosure.
In accordance with embodiments of the present disclosure, program code for executing computer programs provided by embodiments of the present disclosure may be written in any combination of one or more programming languages, and in particular, these computer programs may be implemented using high level procedural and/or object oriented programming languages, and/or assembly/machine languages. The programming language includes, but is not limited to, programming languages such as Java, C + +, python, the "C" language, or the like. The program code may execute entirely on the user computing device, partly on the user device, partly on a remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user computing device through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computing device (e.g., through the internet using an internet service provider).
The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams or flowchart illustration, and combinations of blocks in the block diagrams or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
Those skilled in the art will appreciate that various combinations and/or combinations of features recited in the various embodiments and/or claims of the present disclosure can be made, even if such combinations or combinations are not expressly recited in the present disclosure. In particular, various combinations and/or combinations of the features recited in the various embodiments and/or claims of the present disclosure may be made without departing from the spirit or teaching of the present disclosure. All such combinations and/or associations are within the scope of the present disclosure.
The embodiments of the present disclosure have been described above. However, these examples are for illustrative purposes only and are not intended to limit the scope of the present disclosure. Although the embodiments are described separately above, this does not mean that the measures in the embodiments cannot be used in advantageous combination. The scope of the disclosure is defined by the appended claims and equivalents thereof. Various alternatives and modifications can be devised by those skilled in the art without departing from the scope of the present disclosure, and such alternatives and modifications are intended to be within the scope of the present disclosure.
Claims (11)
1. A method for processing a host online transaction exception comprises the following steps:
triggering a main program to submit diagnosis operation in response to the host online transaction abnormal alarm information;
executing the diagnosis operation backtracking scanning on-line log according to the alarm information, and outputting a target file;
determining abnormal information according to first preset identification information and the target file;
pushing the abnormal information to operation and maintenance personnel;
the alarm information comprises time information of abnormal affairs, the target file comprises first preset identification information and transaction codes corresponding to the first preset identification information, and the abnormal information comprises abnormal transaction codes and frequency of the abnormal transaction codes.
2. The method of claim 1, wherein the performing the diagnostic job backtracking scan online log according to the alarm information, outputting a target file, comprises:
determining time information of abnormal affairs according to the alarm information;
executing the diagnosis operation, and performing backtracking scanning by taking the time information as a scanning starting point;
and outputting the scanned result to generate a target file.
3. The method of claim 2, wherein a host is provided with a plurality of logical partitions, and the performing the diagnostic operation to perform a backtracking scan with the time information as a scan start point comprises:
determining an online address space to be scanned according to a preset online list of each logic partition;
and performing backtracking scanning on the online address space to be scanned by taking the time information as a scanning starting point.
4. The method according to claim 1, wherein the determining the abnormal information according to the first preset identification information and the target file comprises:
counting the content of the target file according to the first preset identification information;
and determining abnormal information according to the statistical result.
5. The method according to claim 4, wherein the counting the content of the target file according to the first preset identification information includes:
counting the content of the target file by taking the first preset identification information as an index;
and acquiring a transaction code corresponding to the first preset identification information, and counting the frequency of the transaction code.
6. The method of claim 5, wherein the pushing the anomaly information to operation and maintenance personnel comprises:
sending the abnormal information to an operation and maintenance platform system in a preset format;
and the operation and maintenance platform system translates the abnormal information into Chinese and pushes the Chinese to the operation and maintenance personnel in the form of short messages and mails.
7. The method of any one of claims 1 to 6, wherein the host online transaction exception is determined based on the second predetermined identification information before the main program is triggered to submit the diagnostic job.
8. A host online transaction exception handling apparatus, comprising:
the trigger module is used for responding to the host online transaction abnormal alarm information and triggering the main program to submit the diagnosis operation;
the output module is used for executing the backtracking scanning online log of the diagnosis operation according to the alarm information and outputting a target file;
the determining module is used for determining abnormal information according to first preset identification information and the target file; and
the pushing module is used for pushing the abnormal information to operation and maintenance personnel;
the alarm information comprises time information of abnormal affairs, the target file comprises first preset identification information and transaction codes corresponding to the first preset identification information, and the abnormal information comprises abnormal transaction codes and frequency of the abnormal transaction codes.
9. An electronic device, comprising:
one or more processors;
a storage device for storing one or more programs,
wherein the one or more programs, when executed by the one or more processors, cause the one or more processors to perform the method of any of claims 1-7.
10. A computer readable storage medium having stored thereon executable instructions which, when executed by a processor, cause the processor to perform the method of any one of claims 1 to 7.
11. A computer program product comprising a computer program which, when executed by a processor, implements a method according to any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110700921.9A CN113419887A (en) | 2021-06-23 | 2021-06-23 | Method and device for processing abnormal online transaction of host |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110700921.9A CN113419887A (en) | 2021-06-23 | 2021-06-23 | Method and device for processing abnormal online transaction of host |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN113419887A true CN113419887A (en) | 2021-09-21 |
Family
ID=77716477
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110700921.9A Pending CN113419887A (en) | 2021-06-23 | 2021-06-23 | Method and device for processing abnormal online transaction of host |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113419887A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114118327A (en) * | 2021-12-03 | 2022-03-01 | 中国建设银行股份有限公司 | Method, apparatus, device and medium for determining moving direction of article |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108124252A (en) * | 2017-12-29 | 2018-06-05 | 深圳市金立通信设备有限公司 | A kind of method, terminal and computer readable storage medium for obtaining information |
| CN110471824A (en) * | 2019-08-19 | 2019-11-19 | 中国工商银行股份有限公司 | Monitoring method, device, system, electronic equipment and computer readable storage medium |
| CN112433876A (en) * | 2020-11-23 | 2021-03-02 | 中国建设银行股份有限公司 | Method and device for processing job error information and storage medium |
-
2021
- 2021-06-23 CN CN202110700921.9A patent/CN113419887A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108124252A (en) * | 2017-12-29 | 2018-06-05 | 深圳市金立通信设备有限公司 | A kind of method, terminal and computer readable storage medium for obtaining information |
| CN110471824A (en) * | 2019-08-19 | 2019-11-19 | 中国工商银行股份有限公司 | Monitoring method, device, system, electronic equipment and computer readable storage medium |
| CN112433876A (en) * | 2020-11-23 | 2021-03-02 | 中国建设银行股份有限公司 | Method and device for processing job error information and storage medium |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114118327A (en) * | 2021-12-03 | 2022-03-01 | 中国建设银行股份有限公司 | Method, apparatus, device and medium for determining moving direction of article |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11449379B2 (en) | Root cause and predictive analyses for technical issues of a computing environment | |
| US10771492B2 (en) | Enterprise graph method of threat detection | |
| US20150281035A1 (en) | Monitoring of Node.JS Applications | |
| US11546380B2 (en) | System and method for creation and implementation of data processing workflows using a distributed computational graph | |
| US11221907B1 (en) | Centralized software issue triage system | |
| CN110851471A (en) | Distributed log data processing method, device and system | |
| CN113900834A (en) | Data processing method, device, equipment and storage medium based on Internet of things technology | |
| CN115357761A (en) | Link tracking method and device, electronic equipment and storage medium | |
| CN113419887A (en) | Method and device for processing abnormal online transaction of host | |
| CN113362173A (en) | Anti-duplication mechanism verification method, anti-duplication mechanism verification system, electronic equipment and storage medium | |
| CN113191889A (en) | Wind control configuration method, configuration system, electronic device and readable storage medium | |
| CN116302561A (en) | State control method, device, equipment and storage medium for application instance | |
| CN114240392A (en) | Information processing method, task approval method, and information processing apparatus | |
| US9858549B2 (en) | Business transaction resource usage tracking | |
| CN113342619A (en) | Log monitoring method and system, electronic device and readable medium | |
| CN112818204A (en) | Service processing method, device, equipment and storage medium | |
| CN115499292B (en) | Alarm method, device, equipment and storage medium | |
| CN115801764A (en) | File transmission method, device, equipment and storage medium | |
| CN116975200A (en) | Method, device, equipment and medium for controlling working state of server | |
| CN113590425A (en) | Data processing method, apparatus, device, medium, and program product | |
| CN114938341A (en) | Environment detection method and device, electronic equipment and storage medium | |
| CN114756441A (en) | Method, device, equipment and medium for processing logs of host system | |
| CN117667573A (en) | Cluster operation and maintenance method and device based on AI language model | |
| CN114138611A (en) | Diagnosis method and system for service operation log | |
| CN114760233A (en) | Service processing method and device, electronic equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |