CN115643172A - Abnormity detection method, abnormity detection device, terminal equipment and storage medium - Google Patents
Abnormity detection method, abnormity detection device, terminal equipment and storage medium Download PDFInfo
- Publication number
- CN115643172A CN115643172A CN202211083008.XA CN202211083008A CN115643172A CN 115643172 A CN115643172 A CN 115643172A CN 202211083008 A CN202211083008 A CN 202211083008A CN 115643172 A CN115643172 A CN 115643172A
- Authority
- CN
- China
- Prior art keywords
- task
- task configuration
- configuration parameter
- baseline
- item
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The application is applicable to the technical field of anomaly detection, and provides an anomaly detection method, an anomaly detection device, terminal equipment and a storage medium, wherein the anomaly detection method comprises the following steps: respectively acquiring task configuration parameter groups from a plurality of network devices; the network equipment is configured with tasks to be synchronously executed, the tasks to be synchronously executed correspond to a plurality of task configuration items, and the task configuration parameter group comprises task configuration parameters of each task configuration item; based on the task configuration items, performing data aggregation on the task configuration parameter groups to obtain a baseline configuration parameter set, wherein the baseline configuration parameter set comprises task configuration parameters meeting the quantity proportion requirements in each task configuration item; and determining abnormal detection information corresponding to the tasks to be synchronously executed based on the baseline configuration parameter set, wherein the abnormal detection information is used for indicating whether the tasks to be synchronously executed configured by each network device are configured abnormally. The method and the device can detect whether the configured tasks to be synchronously executed in each network device have wrong configuration.
Description
Technical Field
The present application relates to the field of anomaly detection technologies, and in particular, to an anomaly detection method and apparatus, a terminal device, and a storage medium.
Background
Enterprises often configure network devices to be synchronously tasked, for example, configuring a computer or a server to perform a preconfigured task (e.g., backup data or send mail) at a certain time point of a relatively fixed period (e.g., 3 am each day or a certain time point of each weekday). However, in the process of configuring the tasks to be synchronously executed, configuration errors may be caused due to user input errors and the like, so that the tasks to be synchronously executed in some or some network devices cannot be executed as expected. In summary, how to detect whether there is an error configuration in the task to be executed synchronously configured in each network device is an urgent technical problem to be solved.
Disclosure of Invention
The embodiment of the application provides an anomaly detection method, an anomaly detection device, terminal equipment and a storage medium, which can detect whether the configured tasks to be synchronously executed in each network equipment have wrong configuration.
In a first aspect, an embodiment of the present application provides an anomaly detection method, including:
respectively acquiring task configuration parameter groups from a plurality of network devices; configuring tasks to be synchronously executed in the plurality of network devices, wherein the tasks to be synchronously executed correspond to a plurality of task configuration items, and the task configuration parameter set comprises task configuration parameters of each task configuration item;
based on the task configuration items, performing data aggregation on the task configuration parameter sets to obtain a baseline configuration parameter set, wherein the baseline configuration parameter set comprises task configuration parameters meeting the quantity proportion requirement in each task configuration item;
and determining abnormal detection information corresponding to the tasks to be synchronously executed based on the baseline configuration parameter set, wherein the abnormal detection information is used for indicating whether the tasks to be synchronously executed configured by each network device are configured abnormally.
In a second aspect, an embodiment of the present application provides an abnormality detection apparatus, including:
the parameter group acquisition module is used for respectively acquiring task configuration parameter groups from a plurality of network devices; the network equipment is configured with tasks to be synchronously executed, the tasks to be synchronously executed correspond to a plurality of task configuration items, and the task configuration parameter group comprises task configuration parameters of each task configuration item;
the aggregation module is used for carrying out data aggregation on the task configuration parameter group based on the task configuration items to obtain a baseline configuration parameter set, and the baseline configuration parameter set comprises task configuration parameters meeting the quantity proportion requirements in each task configuration item;
and the information determining module is used for determining the abnormal detection information corresponding to the tasks to be synchronously executed based on the baseline configuration parameter set, wherein the abnormal detection information is used for indicating whether the tasks to be synchronously executed configured by each network device are configured abnormally.
In a third aspect, an embodiment of the present application provides a terminal device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, where the processor implements the abnormality detection method described in the first aspect when executing the computer program.
In a fourth aspect, the present application provides a computer-readable storage medium, where a computer program is stored, and when the computer program is executed by a processor, the computer program implements an anomaly detection method described in the first aspect.
In a fifth aspect, an embodiment of the present application provides a computer program product, which, when running on a terminal device, causes the terminal device to execute an anomaly detection method described in the first aspect.
Compared with the prior art, the embodiment of the application has the beneficial effects that: the method comprises the steps that task configuration parameter sets corresponding to tasks to be synchronously executed are respectively obtained from a plurality of network devices; the task to be synchronously executed corresponds to a plurality of task configuration items, and the task configuration parameter group comprises the task configuration parameters of each task configuration item; based on the task configuration items, performing data aggregation on the task configuration parameter sets to obtain a baseline configuration parameter set containing the task configuration parameters meeting the quantity proportion requirement in each task configuration item; and determining abnormal detection information which is used for indicating whether the task to be synchronously executed configured by each network device is configured abnormally or not and corresponds to the task to be synchronously executed based on the baseline configuration parameter set. The method and the device can detect whether the configured tasks to be synchronously executed in each network device have wrong configuration.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed to be used in the embodiments or the prior art descriptions will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present application, and it is obvious for those skilled in the art to obtain other drawings without creative efforts.
Fig. 1 is a schematic flowchart of an anomaly detection method according to an embodiment of the present application;
FIG. 2 is a schematic flow chart diagram illustrating a method for anomaly detection according to another embodiment of the present application;
fig. 3 is a schematic structural block diagram of an abnormality detection apparatus according to an embodiment of the present application;
fig. 4 is a schematic structural diagram of a terminal device according to an embodiment of the present application.
Detailed Description
In the following description, for purposes of explanation and not limitation, specific details are set forth, such as particular system structures, techniques, etc. in order to provide a thorough understanding of the embodiments of the present application. It will be apparent, however, to one skilled in the art that the present application may be practiced in other embodiments that depart from these specific details. In other instances, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the present application with unnecessary detail.
It will be understood that the terms "comprises" and/or "comprising," when used in this specification and the appended claims, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof.
It should also be understood that the term "and/or" as used in this specification and the appended claims refers to any and all possible combinations of one or more of the associated listed items and includes such combinations.
As used in this specification and the appended claims, the term "if" may be interpreted contextually as "when", "upon" or "in response to a determination" or "in response to a detection". Similarly, the phrase "if it is determined" or "if a [ described condition or event ] is detected" may be interpreted contextually to mean "upon determining" or "in response to determining" or "upon detecting [ described condition or event ]" or "in response to detecting [ described condition or event ]".
Furthermore, in the description of the present application and the appended claims, the terms "first," "second," "third," and the like are used for distinguishing between descriptions and not necessarily for describing or implying relative importance.
Reference throughout this specification to "one embodiment" or "some embodiments," or the like, means that a particular feature, structure, or characteristic described in connection with the embodiment is included in one or more embodiments of the present application. Thus, appearances of the phrases "in one embodiment," "in some embodiments," "in other embodiments," or the like, in various places throughout this specification are not necessarily all referring to the same embodiment, but rather "one or more but not all embodiments" unless specifically stated otherwise. The terms "comprising," "including," "having," and variations thereof mean "including, but not limited to," unless expressly specified otherwise.
The first embodiment is as follows:
referring to fig. 1, fig. 1 shows a schematic flow of an anomaly detection method according to an embodiment of the present application.
The tasks to be synchronously executed can refer to tasks executed at the same time and can also refer to planning tasks, the planning tasks are common functions of the system, and any script, program or document can be arranged to run at a certain most convenient time by utilizing the task planning functions. The task/scheduled task to be executed synchronously may be a data backup task executed at a certain time, or a mail sending task executed at a certain time.
Each network device may be configured with tasks to be executed synchronously, which are executed at different task execution times, and according to the application, a task configuration parameter group corresponding to the tasks to be executed synchronously, which are executed at the same task execution time, in each network device needs to be obtained. For example, if both the network device a and the network device B are configured with a first task that needs to be executed at a first time and a second task that needs to be executed at a second time, the present application may respectively obtain a task configuration parameter group corresponding to the first time and a task configuration parameter group corresponding to the second time from the network device a and the network device B, and then respectively execute step 102 based on the task configuration parameter group corresponding to the first time and the task configuration parameter group corresponding to the second time, that is, respectively aggregate the task configuration parameter group corresponding to the first time and the task configuration parameter group corresponding to the second time based on the task configuration items, so as to obtain a baseline configuration parameter set corresponding to the first time and a baseline configuration parameter set corresponding to the second time.
In an optional embodiment, the obtaining the task configuration parameter group from the plurality of network devices respectively includes: the method comprises the steps of obtaining task configuration time of at least one task to be synchronously executed in each network device, and obtaining task configuration parameter groups corresponding to the tasks to be synchronously executed at the same task execution time from the plurality of network devices respectively based on the task configuration time.
In another alternative embodiment, the obtaining the task configuration parameter group from the plurality of network devices respectively includes: the method comprises the steps of obtaining a task index and/or a task identifier of at least one task to be synchronously executed in each network device, and respectively obtaining task configuration parameter groups corresponding to the tasks to be synchronously executed at the same task execution time from a plurality of network devices based on the task index and/or the task identifier. It should be noted that the task indexes and/or task identifiers corresponding to the same to-be-synchronously-executed task executed at different task execution times are different.
Optionally, the plurality of task configuration items corresponding to the task to be synchronously executed may include a task execution time configuration item and a task execution instruction configuration item, or may include a task execution time configuration item, a task execution instruction configuration item, and an instruction parameter configuration item. The tasks to be synchronously executed are different, the corresponding task configuration items may be different, and each task configuration item corresponds to one task configuration parameter. For example, if the task to be synchronously executed is a data resetting task, the corresponding task configuration items include a task execution time configuration item and a task execution instruction configuration item, wherein task configuration parameters under the task execution instruction configuration item are used for indicating that data are reset; if the task to be synchronously executed is a data backup task, the corresponding task configuration items comprise a task execution time configuration item, a task execution instruction configuration item and an instruction parameter configuration item, wherein task configuration parameters under the task execution instruction configuration item are used for indicating data backup, and task configuration parameters under the instruction parameter configuration item are used for indicating where the data backup is carried out. It should be noted that there may be a plurality of instruction parameter configuration items corresponding to the tasks to be executed synchronously.
And 102, performing data aggregation on the task configuration parameter sets based on the task configuration items to obtain a baseline configuration parameter set, wherein the baseline configuration parameter set comprises task configuration parameters meeting the quantity proportion requirement in each task configuration item.
Generally, for tasks to be executed synchronously and configured in a plurality of network devices, the number of correctly configured tasks to be executed synchronously is the majority, and the number of abnormally configured tasks to be executed synchronously is the minority.
And 103, determining abnormal detection information corresponding to the tasks to be synchronously executed based on the baseline configuration parameter set, wherein the abnormal detection information is used for indicating whether the tasks to be synchronously executed configured by each network device are configured abnormally.
According to the method and the device, the base line configuration parameters contained in the base line configuration parameter set are task configuration parameters of task configuration items with correct configurations, and therefore abnormal detection information can be determined based on the base line configuration parameter set.
Optionally, determining, based on the baseline configuration parameter set, abnormality detection information corresponding to the task to be synchronously executed includes: comparing task configuration parameters in a task configuration parameter group corresponding to a task to be synchronously executed with baseline configuration parameters under corresponding task configuration items in a baseline configuration parameter set respectively; if the task configuration parameters in the task configuration parameter set are the same as the baseline configuration parameters under the corresponding task configuration items in the baseline configuration parameter set, generating first abnormal detection information, wherein the first abnormal detection information is used for indicating that the task configuration to be synchronously executed is correct; otherwise, second abnormal detection information is generated, and the second abnormal detection information is used for indicating that the task to be synchronously executed is abnormal in configuration.
Generating first anomaly detection information, including: acquiring a task identifier and a configuration correct identifier of a task to be synchronously executed; generating first abnormal detection information according to the task identifier and the configuration correct identifier; the configuration correct identifier may be a character, a symbol, a pattern, or the like that can represent that the task to be synchronously executed is configured correctly.
In an alternative embodiment, generating the second anomaly detection information includes: acquiring a task identifier of a task to be synchronously executed, an abnormal task configuration item, an abnormal task configuration parameter corresponding to the abnormal task configuration item, and a baseline configuration parameter corresponding to the abnormal task configuration item; and generating second abnormal detection information based on the task identifier, the abnormal task configuration item, the abnormal task configuration parameter and the baseline configuration parameter corresponding to the abnormal task configuration item. The second abnormal detection information is generated according to the mode, so that a user can know the situation of the configuration error more intuitively and conveniently, and the user can conveniently determine and eliminate the configuration error.
In another alternative embodiment, generating the second anomaly detection information includes: acquiring a task identifier and a configuration error identifier of a task to be synchronously executed; generating second abnormal detection information according to the task identifier and the configuration error identifier; the configuration error identifier may be an identifier, such as a character, a symbol, a pattern, and the like, that can represent a configuration error of the task to be synchronously executed.
Optionally, after generating the second abnormality detection information, the method includes: acquiring a device identifier of network equipment corresponding to a task to be synchronously executed; and sending the equipment identification and the second abnormity detection information to the user. Wherein the device identification comprises a device ID and/or a device location of the network device.
After the first anomaly detection information is generated, the device identifier and the first anomaly detection information may be sent to the user, or the device identifier and the first anomaly detection information may not be sent to the user.
The method comprises the steps that task configuration parameter sets corresponding to tasks to be synchronously executed are respectively obtained from a plurality of network devices; the task to be synchronously executed corresponds to a plurality of task configuration items, and the task configuration parameter group comprises the task configuration parameters of each task configuration item; based on the task configuration items, performing data aggregation on the task configuration parameter groups to obtain a baseline configuration parameter set containing the task configuration parameters meeting the quantity proportion requirements in each task configuration item; and determining abnormal detection information which is used for indicating whether the task to be synchronously executed configured by each network device is configured abnormally or not and corresponds to the task to be synchronously executed based on the baseline configuration parameter set. The method and the device can detect whether the configured tasks to be synchronously executed in each network device have wrong configuration.
It should be understood that, the sequence numbers of the steps in the foregoing embodiments do not imply an execution sequence, and the execution sequence of each process should be determined by its function and inherent logic, and should not constitute any limitation to the implementation process of the embodiments of the present application.
Example two:
referring to fig. 2, fig. 2 shows a schematic flow of an anomaly detection method according to another embodiment of the present application.
The relevant content in step 201 can be referred to the relevant description in step 101.
Optionally, based on the first task configuration item, selecting a target task configuration parameter group from the task configuration parameter groups, where the number of the target task configuration parameter groups is the same as the number of the target task configuration parameter groups in the task configuration parameter group, and the number of the target task configuration parameter groups is in accordance with a first duty ratio requirement, and the method includes: performing set division on the task configuration parameter sets with the same task configuration parameters under the first task configuration item to obtain at least one parameter set; and selecting the task configuration parameter group contained in the parameter group set which meets the first proportion requirement in the number proportion of all the task configuration parameter groups in the set as a target task configuration parameter group.
If the task configuration items corresponding to the tasks to be synchronously executed are two items, the first task configuration item is any one of the two task configuration items; and if the task configuration items corresponding to the tasks to be synchronously executed are N items, and N is an integer greater than 2, the first task configuration item is any N-1 item in the N task configuration items.
And the second task configuration item is a task configuration item except the first task configuration item in the task configuration items corresponding to the tasks to be synchronously executed. If the task configuration items corresponding to the tasks to be synchronously executed are two, the second task configuration item is the residual task configuration item in the two task configuration items, namely the task configuration item except the first task configuration item in the two task configuration items; and if the task configuration items corresponding to the tasks to be synchronously executed are N, the second task configuration item is the residual task configuration item in the N task configuration items, namely the task configuration item except the first task configuration item in the N task configuration items.
If each network device is configured with a plurality of tasks to be synchronously executed, a baseline configuration parameter set can be obtained based on each target task configuration parameter group, namely, each task to be synchronously executed corresponds to one baseline configuration parameter set, and the baseline configuration parameter set comprises task configuration parameters meeting the quantity proportion requirement in each task configuration item corresponding to the task to be synchronously executed; or a baseline configuration parameter set can be obtained based on all target task configuration parameter sets, that is, all target task configuration parameter sets correspond to a baseline configuration parameter set, and the baseline configuration parameter set includes task configuration parameters meeting the quantity ratio requirement in each task configuration item corresponding to each task to be synchronously executed.
The following illustrates the acquisition process of the baseline configuration parameter set:
taking a task to be synchronously executed as a data backup task as an example, the corresponding task configuration items comprise a task execution time configuration item, a task execution instruction configuration item and an instruction parameter configuration item, and if a first task configuration item is the task execution time configuration item and the task execution instruction configuration item, and a second task configuration item is the instruction parameter configuration item, the baseline configuration parameter set comprises:
aggregating task configuration parameter groups based on task configuration parameters under the task execution time configuration item and the task execution instruction configuration item, namely, performing set division on the task configuration parameter groups with the same task configuration parameters of the task execution time configuration item and the task execution instruction configuration item to obtain at least one parameter group set; and calculating the quantity ratio corresponding to each parameter set according to the quantity of the task configuration parameter sets contained in each parameter set and the quantity of all the task configuration parameter sets, determining the parameter set with the quantity ratio meeting the first ratio requirement to be a target parameter set, wherein the task configuration parameter set contained in the target parameter set is a target task configuration parameter set, and the task configuration parameters of a task execution time configuration item and a task execution instruction configuration item in the target task configuration parameter set are determined to be first target task configuration parameters.
Grouping the task configuration parameters of the instruction parameter configuration items in the target task configuration parameter group, namely grouping the task configuration parameters of the same instruction parameter configuration items into a group, and calculating the quantity ratio of the quantity of the task configuration parameters contained in each group to the quantity of the target task configuration parameter group, wherein the task configuration parameters contained in the group with the quantity ratio meeting the second ratio requirement are second target task configuration parameters.
A baseline configuration parameter set is obtained based on the first target task configuration parameter and the second target task configuration parameter.
The following exemplifies a process of configuring a plurality of tasks to be executed synchronously in each network device and obtaining a baseline configuration parameter set based on all target task configuration parameter sets:
for example, each network device is configured with a mail sending task and a data backup task that are executed at the same task execution time, and task configuration items corresponding to the mail sending task also include task execution time configuration items, task execution instruction configuration items, and instruction parameter configuration items, so that the baseline configuration parameter set includes task configuration parameters meeting the number proportion requirement in the task execution time configuration items, the task execution instruction configuration items, and the instruction parameter configuration items corresponding to the mail sending task, and task configuration parameters meeting the number proportion requirement in the task execution time configuration items, the task execution instruction configuration items, and the instruction parameter configuration items corresponding to the data backup task. The mail sending task and the data backup task are tasks to be synchronously executed, so that the task configuration parameters of the task execution time configuration item corresponding to the mail sending task are the same as the task configuration parameters of the task execution time configuration item corresponding to the data backup task.
It should be noted that the task configuration parameters of the task execution instruction configuration items corresponding to the mail sending task may be mail sending instructions, respectively, and the task configuration parameters of the corresponding instruction parameter configuration items may be mailboxes of recipients; the task configuration parameters of the task execution instruction configuration items corresponding to the data backup tasks may be data backup instructions, respectively, and the task configuration parameters of the corresponding instruction parameter configuration items may be backup addresses.
In an alternative embodiment, the baseline configuration parameter set may also be obtained as follows:
based on task configuration parameter groups obtained from a plurality of network devices and based on each task configuration item, aggregating the completely same task configuration parameter groups to obtain at least one aggregation set; determining an aggregation set, as a target aggregation set, wherein the quantity ratio of the task configuration parameter groups in the aggregation set in all the task configuration parameter groups meets the set ratio requirement; and acquiring a baseline configuration parameter set based on the task configuration parameter set contained in the target aggregation set.
The relevant content in step 205 can be referred to the relevant description in step 103.
If based on each target task configuration parameter set, a baseline configuration parameter set is obtained: based on each task configuration item, comparing task configuration parameters in a task configuration parameter set corresponding to the task to be synchronously executed with each baseline configuration parameter set; and if the task configuration parameters in the task configuration parameter group are completely the same as the baseline configuration parameters in any baseline configuration parameter set, generating first abnormal detection information, and otherwise, generating second abnormal detection information.
If all target task configuration parameter sets are based on, obtaining a baseline configuration parameter set: comparing task configuration parameters in a task configuration parameter group corresponding to a task to be synchronously executed with baseline configuration parameters under corresponding task configuration items in a baseline configuration parameter set respectively; and if each task configuration parameter in the task configuration parameter set is contained in the baseline configuration parameter set, generating first abnormal detection information, and otherwise, generating second abnormal detection information.
The method comprises the steps that task configuration parameter sets corresponding to tasks to be synchronously executed are respectively obtained from a plurality of network devices; determining a first target task configuration parameter based on the first task configuration item, determining a second target task configuration parameter based on the second task configuration item, and obtaining a baseline configuration parameter set containing the first target task configuration parameter and the second target task configuration parameter; and determining abnormal detection information corresponding to the task to be synchronously executed based on the baseline configuration parameter set. The method and the device can detect whether the configured tasks to be synchronously executed in each network device have wrong configuration, can automatically determine the baseline configuration parameter set according to the actual configuration condition of the tasks to be synchronously executed in each network device, do not need a user to manually provide the baseline configuration parameter set, realize the automatic detection of the abnormal configuration of the tasks to be synchronously executed, and improve the abnormal detection efficiency.
In addition, when the baseline configuration parameter set is obtained in the application, firstly, a target task configuration parameter set is obtained based on a first task configuration item, and the task configuration parameter of the first task configuration item in the target task configuration parameter set is determined to be a first target task configuration parameter; secondly, acquiring second target task configuration parameters which are the same in task configuration parameters under a second task configuration item and meet second ratio requirements in number ratio in the target task configuration parameter group based on the target task configuration parameter group; and finally, obtaining a baseline configuration parameter set comprising the first target task configuration parameter and the second target task configuration parameter. The process of obtaining the target task configuration parameter group based on the partial task configuration items is a process of screening the task configuration parameter group, so that a baseline configuration parameter set can be obtained based on the partial task configuration parameter group, comparison of each task configuration parameter in each task configuration parameter group is not needed, and the obtaining speed of the baseline configuration parameter set is improved.
EXAMPLE III
Referring to fig. 3, fig. 3 shows a schematic structure of an abnormality detection apparatus provided in the present application. For convenience of explanation, only portions related to the embodiments of the present application are shown in the drawings.
Referring to fig. 3, the apparatus includes a parameter group acquisition module 31, an aggregation module 32, and an information determination module 33; the specific functions of each module are as follows:
a parameter set obtaining module 31, configured to obtain task configuration parameter sets from a plurality of network devices respectively; the network equipment is configured with tasks to be synchronously executed, the tasks to be synchronously executed correspond to a plurality of task configuration items, and the task configuration parameter group comprises task configuration parameters of each task configuration item;
the aggregation module 32 is configured to perform data aggregation on the task configuration parameter sets based on the task configuration items to obtain a baseline configuration parameter set, where the baseline configuration parameter set includes task configuration parameters meeting the number proportion requirement in each task configuration item;
the information determining module 33 is configured to determine, based on the baseline configuration parameter set, exception detection information corresponding to the task to be synchronously executed, where the exception detection information is used to indicate whether the task to be synchronously executed configured for each network device is configured abnormally.
Optionally, the aggregation module 32 further includes a parameter set selecting unit, a parameter obtaining unit, and a set obtaining unit, where the functions of each unit are as follows:
the parameter group selecting unit is used for selecting a target task configuration parameter group which has the same task configuration parameters and the quantity ratio of the target task configuration parameter group in the task configuration parameter group meets the first ratio requirement based on the first task configuration item, and determining the task configuration parameters of the first task configuration item in the target task configuration parameter group as the first target task configuration parameters;
the parameter acquisition unit is used for acquiring a second target task configuration parameter which has the same task configuration parameter under a second task configuration item and has the quantity ratio meeting the second ratio requirement in the target task configuration parameter group based on the target task configuration parameter group;
the device comprises a set acquisition unit for acquiring a baseline configuration parameter set comprising a first target task configuration parameter and a second target task configuration parameter.
Optionally, the parameter set selecting unit is specifically configured to:
performing set division on the task configuration parameter sets with the same task configuration parameters under the first task configuration item to obtain at least one parameter set;
and selecting the task configuration parameter group contained in the parameter group set which meets the first proportion requirement in the number proportion of all the task configuration parameter groups in the set as a target task configuration parameter group.
Optionally, the information determining module 33 includes a comparing unit, a first generating unit and a second generating unit, where functions of the units are as follows:
a comparing unit, configured to compare task configuration parameters in the task configuration parameter set corresponding to the task to be executed synchronously with baseline configuration parameters under corresponding task configuration items in the baseline configuration parameter set, respectively;
a first generating unit, configured to generate first anomaly detection information when the task configuration parameters in the task configuration parameter set are the same as baseline configuration parameters in corresponding task configuration items in the baseline configuration parameter set, where the first anomaly detection information is used to indicate that the task to be synchronously executed is correctly configured;
a second generating unit, configured to generate second anomaly detection information when any one of the task configuration parameters in the task configuration parameter set is different from a baseline configuration parameter in a corresponding task configuration item in the baseline configuration parameter set, where the second anomaly detection information is used to indicate that the task configuration to be synchronously executed is abnormal.
Optionally, the first generating unit is specifically configured to:
acquiring a task identifier, an abnormal task configuration item, an abnormal task configuration parameter corresponding to the abnormal task configuration item and a baseline configuration parameter corresponding to the abnormal task configuration item of a task to be synchronously executed;
and generating second abnormal detection information based on the task identifier, the abnormal task configuration item, the abnormal task configuration parameter and the baseline configuration parameter corresponding to the abnormal task configuration item.
Optionally, the apparatus further includes a sending module, where the sending module is configured to obtain a device identifier of a network device corresponding to the task to be synchronously executed; and sending the equipment identification and the second abnormity detection information to the user.
Optionally, the device identification comprises a device ID and/or a device location of the network device.
The abnormality detection apparatus provided in the embodiment of the present application can be applied to the first method embodiment, and for details, refer to the description of the first method embodiment, and will not be described herein again.
Example four:
referring to fig. 4, fig. 4 shows a schematic structure of a terminal device according to an embodiment of the present application. The terminal device 4 of this embodiment includes: at least one processor 40 (only one is shown in fig. 4), a memory 41, and a computer program 42 stored in the memory 41 and executable on the at least one processor 40, wherein the processor 40 executes the computer program 42 to implement the steps of the anomaly detection method in one of the above embodiments.
The terminal device 4 may be a desktop computer, a notebook, a palm computer, a cloud server, or other computing devices. The terminal device may include, but is not limited to, a processor 40, a memory 41. Those skilled in the art will appreciate that fig. 4 is merely an example of the terminal device 4, and does not constitute a limitation of the terminal device 4, and may include more or less components than those shown, or combine some components, or different components, such as an input-output device, a network access device, and the like.
The Processor 40 may be a Central Processing Unit (CPU), and the Processor 40 may be other general purpose Processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field-Programmable Gate Array (FPGA) or other Programmable logic device, discrete Gate or transistor logic device, discrete hardware components, and the like. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
The memory 41 may in some embodiments be an internal storage unit of the terminal device 4, such as a hard disk or a memory of the terminal device 4. In other embodiments, the memory 41 may also be an external storage device of the terminal device 4, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card), or the like provided on the terminal device 4. Further, the memory 41 may also include both an internal storage unit and an external storage device of the terminal device 4. The memory 41 is used for storing an operating system, an application program, a BootLoader (BootLoader), data, and other programs, such as program codes of the computer program. The memory 41 may also be used to temporarily store data that has been output or is to be output.
It should be noted that, for the information interaction, execution process, and other contents between the above devices/units, the specific functions and technical effects thereof based on the same concept as those of the method embodiment of the present application can be specifically referred to the method embodiment portion, and are not described herein again.
It should be clear to those skilled in the art that, for convenience and simplicity of description, the foregoing division of the functional units and modules is only used for illustration, and in practical applications, the above function distribution may be performed by different functional units and modules as needed, that is, the internal structure of the apparatus may be divided into different functional units or modules to perform all or part of the above described functions. Each functional unit and module in the embodiments may be integrated in one processing unit, or each unit may exist alone physically, or two or more units are integrated in one unit, and the integrated unit may be implemented in a form of hardware, or in a form of software functional unit. In addition, specific names of the functional units and modules are only for convenience of distinguishing from each other, and are not used for limiting the protection scope of the present application. The specific working processes of the units and modules in the system may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
The embodiments of the present application further provide a computer-readable storage medium, where a computer program is stored, and when the computer program is executed by a processor, the computer program implements the steps in the above-mentioned method embodiments.
The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, all or part of the processes in the methods of the embodiments described above can be implemented by a computer program, which can be stored in a computer-readable storage medium and can implement the steps of the embodiments of the methods described above when the computer program is executed by a processor. Wherein the computer program comprises computer program code, which may be in the form of source code, object code, an executable file or some intermediate form, etc. The computer readable medium may include at least: any entity or apparatus capable of carrying computer program code to a terminal device, recording medium, computer Memory, read-Only Memory (ROM), random Access Memory (RAM), electrical carrier wave signals, telecommunications signals, and software distribution medium. Such as a usb-disk, a removable hard disk, a magnetic or optical disk, etc. In certain jurisdictions, computer-readable media may not be an electrical carrier signal or a telecommunications signal in accordance with legislative and patent practice.
In the above embodiments, the descriptions of the respective embodiments have respective emphasis, and reference may be made to the related descriptions of other embodiments for parts that are not described or illustrated in a certain embodiment.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the technical solution. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.
In the embodiments provided in the present application, it should be understood that the disclosed apparatus/terminal device and method may be implemented in other ways. For example, the above-described embodiments of the apparatus/terminal device are merely illustrative, and for example, the division of the modules or units is only one type of logical function division, and other division manners may be available in actual implementation, for example, multiple units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
The above-mentioned embodiments are only used for illustrating the technical solutions of the present application, and not for limiting the same; although the present application has been described in detail with reference to the foregoing embodiments, it should be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; such modifications and substitutions do not depart from the spirit and scope of the embodiments of the present application, and they should be construed as being included in the present application.
Claims (10)
1. An abnormality detection method characterized by comprising:
respectively acquiring task configuration parameter groups from a plurality of network devices; configuring tasks to be synchronously executed in a plurality of network devices, wherein the tasks to be synchronously executed correspond to a plurality of task configuration items, and the task configuration parameter set comprises task configuration parameters of each task configuration item;
based on the task configuration items, performing data aggregation on the task configuration parameter sets to obtain a baseline configuration parameter set, wherein the baseline configuration parameter set comprises task configuration parameters meeting the quantity ratio requirement in each task configuration item;
and determining abnormal detection information corresponding to the tasks to be synchronously executed based on the baseline configuration parameter set, wherein the abnormal detection information is used for indicating whether the tasks to be synchronously executed configured by each network device are configured abnormally.
2. The method of claim 1, wherein the aggregating data for the set of task configuration parameters based on the task configuration item to obtain a baseline set of configuration parameters comprises:
based on a first task configuration item, selecting a target task configuration parameter group which has the same task configuration parameters and the number ratio of the target task configuration parameter group in the task configuration parameter group meets a first ratio requirement from the task configuration parameter group, and determining the task configuration parameters of the first task configuration item in the target task configuration parameter group as first target task configuration parameters;
based on the target task configuration parameter group, acquiring a second target task configuration parameter which has the same task configuration parameter under a second task configuration item and the quantity ratio in the target task configuration parameter group meets the second ratio requirement;
obtaining the baseline configuration parameter set including the first target task configuration parameter and the second target task configuration parameter.
3. The method of claim 2, wherein the selecting a target task configuration parameter group from the task configuration parameter groups, which has the same task configuration parameters and the number of the target task configuration parameter groups in the task configuration parameter group is larger than a first percentage requirement, based on the first task configuration item, comprises:
performing set division on the task configuration parameter sets with the same task configuration parameters under the first task configuration item to obtain at least one parameter set;
selecting the task configuration parameter group contained in the parameter group set which meets a first proportion requirement in the number proportion of all the task configuration parameter groups in the set as the target task configuration parameter group.
4. The method of claim 1, wherein the determining the anomaly detection information corresponding to the task to be synchronously executed based on the baseline configuration parameter set comprises:
comparing task configuration parameters in the task configuration parameter group corresponding to the task to be synchronously executed with baseline configuration parameters under corresponding task configuration items in the baseline configuration parameter set respectively;
if the task configuration parameters in the task configuration parameter group are the same as the baseline configuration parameters under the corresponding task configuration items in the baseline configuration parameter set, generating first abnormal detection information, wherein the first abnormal detection information is used for indicating that the task to be synchronously executed is correctly configured;
otherwise, generating second abnormal detection information, wherein the second abnormal detection information is used for indicating that the task to be synchronously executed is abnormal in configuration.
5. The method of claim 4, wherein the generating second anomaly detection information comprises:
acquiring a task identifier, an abnormal task configuration item, an abnormal task configuration parameter corresponding to the abnormal task configuration item and a baseline configuration parameter corresponding to the abnormal task configuration item of the task to be synchronously executed;
and generating the second abnormal detection information based on the task identifier, the abnormal task configuration item, the abnormal task configuration parameter and a baseline configuration parameter corresponding to the abnormal task configuration item.
6. The method of claim 4, after said generating second anomaly detection information, comprising:
acquiring a device identifier of the network device corresponding to the task to be synchronously executed;
and sending the equipment identification and the second abnormity detection information to a user.
7. The method of claim 6, wherein the device identification comprises a device ID and/or a device location of the network device.
8. An abnormality detection device characterized by comprising:
the parameter group acquisition module is used for respectively acquiring task configuration parameter groups from a plurality of network devices; configuring tasks to be synchronously executed in a plurality of network devices, wherein the tasks to be synchronously executed correspond to a plurality of task configuration items, and the task configuration parameter set comprises task configuration parameters of each task configuration item;
the aggregation module is used for carrying out data aggregation on the task configuration parameter sets based on the task configuration items to obtain a baseline configuration parameter set, wherein the baseline configuration parameter set comprises task configuration parameters meeting the quantity proportion requirement in each task configuration item;
and the information determining module is used for determining abnormal detection information corresponding to the tasks to be synchronously executed based on the baseline configuration parameter set, wherein the abnormal detection information is used for indicating whether the tasks to be synchronously executed configured by each network device are configured abnormally.
9. A terminal device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that the processor implements the method according to any of claims 1 to 7 when executing the computer program.
10. A computer-readable storage medium, in which a computer program is stored which, when being executed by a processor, carries out the method according to any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211083008.XA CN115643172A (en) | 2022-09-06 | 2022-09-06 | Abnormity detection method, abnormity detection device, terminal equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211083008.XA CN115643172A (en) | 2022-09-06 | 2022-09-06 | Abnormity detection method, abnormity detection device, terminal equipment and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN115643172A true CN115643172A (en) | 2023-01-24 |
Family
ID=84940593
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211083008.XA Pending CN115643172A (en) | 2022-09-06 | 2022-09-06 | Abnormity detection method, abnormity detection device, terminal equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115643172A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115983646A (en) * | 2023-03-20 | 2023-04-18 | 章和技术(广州)有限公司 | Method for evaluating risk of network equipment of transformer substation and related equipment |
-
2022
- 2022-09-06 CN CN202211083008.XA patent/CN115643172A/en active Pending
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115983646A (en) * | 2023-03-20 | 2023-04-18 | 章和技术(广州)有限公司 | Method for evaluating risk of network equipment of transformer substation and related equipment |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109189669A (en) | Test method, electronic device and the readable storage medium storing program for executing of business scenario | |
| CN110633977A (en) | Payment exception processing method and device and terminal equipment | |
| CN109165156B (en) | Bar code testing method and device and terminal equipment | |
| CN111343267B (en) | Configuration management method and system | |
| CN111694677A (en) | Message queue management method, device, terminal and computer-readable storage medium | |
| CN111460232A (en) | Functional module searching method, device, terminal and computer readable storage medium | |
| CN113094087A (en) | Software configuration method, electronic device and storage medium | |
| CN115643172A (en) | Abnormity detection method, abnormity detection device, terminal equipment and storage medium | |
| CN111813377A (en) | Method and device for automatically generating application program | |
| CN108920601B (en) | Data matching method and device | |
| CN114139161A (en) | Method, device, electronic equipment and medium for batch vulnerability detection | |
| CN113132522A (en) | Test method, device, server and medium | |
| CN113434498A (en) | Method and device for monitoring data abnormity of database of power system and electronic equipment | |
| CN112380094A (en) | RPA service flow processing method and device | |
| CN108255549B (en) | Server program visual control method and device | |
| CN113094224A (en) | Server asset management method and device, computer equipment and storage medium | |
| CN114157662A (en) | Cloud platform parameter adaptation method and device, terminal equipment and storage medium | |
| CN113128848A (en) | Data quality monitoring method for full-service index, electronic equipment and storage medium | |
| CN110147379B (en) | Information acquisition method and device based on data lock and computer equipment | |
| CN107436788B (en) | Application program unloading method and device and terminal equipment | |
| CN112667513A (en) | Test method, test device, test equipment and storage medium | |
| CN111475291A (en) | Data processing method, system, server and medium | |
| CN113792014B (en) | Nuclear power station file management method and device, terminal equipment and storage medium | |
| CN117313856B (en) | Reliability test planning system and method | |
| CN112115046B (en) | Software fault positioning method, device and terminal |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |