CN116909720A - Intelligent inspection monitoring method, device, equipment and medium - Google Patents
Intelligent inspection monitoring method, device, equipment and medium Download PDFInfo
- Publication number
- CN116909720A CN116909720A CN202211477307.1A CN202211477307A CN116909720A CN 116909720 A CN116909720 A CN 116909720A CN 202211477307 A CN202211477307 A CN 202211477307A CN 116909720 A CN116909720 A CN 116909720A
- Authority
- CN
- China
- Prior art keywords
- inspection
- application
- host
- determining
- program
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000007689 inspection Methods 0.000 title claims abstract description 305
- 238000000034 method Methods 0.000 title claims abstract description 68
- 238000012544 monitoring process Methods 0.000 title claims abstract description 63
- 238000004590 computer program Methods 0.000 claims description 16
- 230000008569 process Effects 0.000 claims description 16
- 230000001932 seasonal effect Effects 0.000 claims description 13
- 238000012549 training Methods 0.000 claims description 12
- 238000012360 testing method Methods 0.000 claims description 10
- 238000012806 monitoring device Methods 0.000 claims description 5
- 230000000977 initiatory effect Effects 0.000 claims description 4
- 230000000737 periodic effect Effects 0.000 claims description 3
- 238000012423 maintenance Methods 0.000 description 9
- 238000007726 management method Methods 0.000 description 7
- 238000013515 script Methods 0.000 description 7
- 238000004891 communication Methods 0.000 description 6
- 230000006870 function Effects 0.000 description 6
- 238000004458 analytical method Methods 0.000 description 3
- 230000036541 health Effects 0.000 description 3
- 238000012795 verification Methods 0.000 description 3
- 230000002159 abnormal effect Effects 0.000 description 2
- 238000010276 construction Methods 0.000 description 2
- 238000013079 data visualisation Methods 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000001788 irregular Effects 0.000 description 2
- 230000007774 longterm Effects 0.000 description 2
- 230000003287 optical effect Effects 0.000 description 2
- 238000009877 rendering Methods 0.000 description 2
- 230000001360 synchronised effect Effects 0.000 description 2
- 206010063385 Intellectualisation Diseases 0.000 description 1
- 230000005856 abnormality Effects 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 238000006243 chemical reaction Methods 0.000 description 1
- 238000004140 cleaning Methods 0.000 description 1
- 238000007405 data analysis Methods 0.000 description 1
- 238000013523 data management Methods 0.000 description 1
- 238000013500 data storage Methods 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 230000001419 dependent effect Effects 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 238000003745 diagnosis Methods 0.000 description 1
- 238000000605 extraction Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000010354 integration Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012545 processing Methods 0.000 description 1
- 230000009467 reduction Effects 0.000 description 1
- 238000004904 shortening Methods 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
- 238000012800 visualization Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/50—Allocation of resources, e.g. of the central processing unit [CPU]
- G06F9/5005—Allocation of resources, e.g. of the central processing unit [CPU] to service a request
- G06F9/5027—Allocation of resources, e.g. of the central processing unit [CPU] to service a request the resource being a machine, e.g. CPUs, Servers, Terminals
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/30—Creation or generation of source code
- G06F8/31—Programming languages or programming paradigms
- G06F8/315—Object-oriented languages
Abstract
The application provides an intelligent patrol monitoring method, device, equipment and medium, comprising the following steps: when determining that the inspection type is system inspection or application inspection, generating an inspection ID; generating a patrol request from patrol contents corresponding to the patrol ID, and sending the patrol request to agent programs of all hosts of a support system through multithreading, wherein the agent programs are deployed on all the hosts; the agent program is used for carrying out system asynchronous inspection or application asynchronous inspection on each host of the supporting system. According to the application, by adopting an asynchronous inspection mode, the resource consumption is reduced, the convenience and the high efficiency are improved, the inspection duration of system inspection and application inspection can be greatly reduced, and the inspection efficiency of the support system is improved.
Description
Technical Field
The present application relates to the field of inspection technologies of service systems, and in particular, to an intelligent inspection monitoring method, apparatus, device, and medium.
Background
At present, the system inspection technology is relatively backward, and inspection and monitoring of an operating system, a database and an application system are realized by writing a script tool. The inspection and monitoring of the system is dependent on manual execution of script commands, and inspection and monitoring results cannot be stored.
The existing inspection and monitoring scripts are manually written and configured, the service monitoring manual maintenance threshold is complex, abundant experience is needed to beat the threshold, and unreasonable conditions exist in the inspection and alarm rule configuration of the monitoring threshold which is needed to manually and continuously maintain different monitoring items. Too high or too low threshold value is easy to cause alarm missing report and false report, and has great dependence on personnel experience; the static threshold is insensitive to local anomalies within the cycle. Monitoring of the newly added application module requires a set of script tools to be rewritten, and flexible expansion cannot be supported.
In the prior art, the inspection operation is carried out on the application system through a script command by means of a manual login operation system, and different target systems need to execute different script tools. Especially, the method is long in inspection time, consumes a large amount of manpower resources, is low in working efficiency and cannot cover various log hidden dangers in the face of huge application and massive logs.
Disclosure of Invention
The application provides an intelligent inspection monitoring method, device, equipment and medium, which are used for solving the defects that the existing inspection method is long in inspection time consumption and low in inspection efficiency when an application system is inspected through a script command, shortening the inspection time consumption and improving the inspection efficiency.
The application provides an intelligent patrol monitoring method, which comprises the following steps:
when determining that the inspection type is system inspection or application inspection, generating an inspection ID;
generating a patrol request from patrol contents corresponding to the patrol ID, and sending the patrol request to agent programs of all hosts of a support system through multithreading, wherein the agent programs are deployed on all the hosts;
the agent program is used for carrying out system asynchronous inspection or application asynchronous inspection on each host of the supporting system.
The intelligent patrol monitoring method provided by the application comprises the following steps:
when the inspection type is determined to be business inspection, historical data and real-time data are collected to serve as training data;
constructing a seasonal autoregressive comprehensive moving average model based on the training data;
determining the inspection threshold value of each business index based on the seasonal autoregressive comprehensive moving average model;
and carrying out service inspection on each host of the support system based on the inspection threshold.
According to the intelligent inspection monitoring method provided by the application, each host machine of the supporting system is subjected to system asynchronous inspection or application asynchronous inspection or service asynchronous inspection, and the method comprises the following steps:
determining a newly added host based on equipment addresses in all local area networks of a support system, and adding the newly added host to a system inspection range in the support system;
determining a new program based on all processes on a host of the support system, and adding the new program to an application inspection range;
determining a new interface based on the periodically scanned service interface data, and adding the new interface to a service inspection range;
the system inspection range is used for carrying out system asynchronous inspection on each host of the supporting system, the application inspection range is used for carrying out application asynchronous inspection on each host of the supporting system, and the service inspection range and the inspection threshold are used for carrying out service inspection on each host of the supporting system.
According to the intelligent patrol monitoring method provided by the application, the newly added host is determined based on the equipment addresses in all local area networks of the support system, and the method comprises the following steps:
initiating broadcasting through ARP protocol, supporting the device addresses of the hosts in all local area networks of the system;
making a difference set between the equipment address and the existing inspection address, and determining an address difference set;
and determining a newly added host based on the address difference set.
According to the intelligent patrol monitoring method provided by the application, based on all processes on the host of the supporting system, a new program is determined, which comprises the following steps:
acquiring an running application program by scanning all processes on a host of the support system;
determining the application type of the application program based on the application name of the application program;
acquiring a test request scheme from the routing information based on the application type, and determining application information and host information of the application program through the test request scheme;
and determining a new program based on the application information and the host information.
According to the intelligent patrol monitoring method provided by the application, based on the service interface data scanned regularly, a newly added interface is determined, which comprises the following steps:
acquiring service interface data of periodic scanning;
performing difference set operation on the service interface data and the current inspection interface to determine an interface difference set;
and determining a newly added interface based on the interface difference set.
The application also provides an intelligent patrol monitoring device, which comprises:
the inspection type determining module is used for generating an inspection ID when determining that the inspection type is system inspection or application inspection;
the inspection module is used for generating an inspection request from inspection content corresponding to the inspection ID, sending the inspection request to agent programs of all hosts of the support system through multithreading, and deploying the agent programs on all the hosts;
the agent program is used for carrying out system asynchronous inspection or application asynchronous inspection on each host of the supporting system.
The application also provides an electronic device, which comprises a memory, a processor and a computer program stored on the memory and capable of running on the processor, wherein the intelligent patrol monitoring method is realized by the processor when the processor executes the program.
The application also provides a non-transitory computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements an intelligent patrol monitoring method as described in any one of the above.
The application also provides a computer program product comprising a computer program which when executed by a processor implements the intelligent patrol monitoring method as described in any one of the above.
According to the intelligent inspection monitoring method, device, equipment and medium, the agent program based on go development is deployed on the host, the inspection request is sent to the agent program through the multithreading, the inspection of each host is initiated by the agent program, the asynchronous inspection and the asynchronous inspection of the application are realized for the system inspection and the application inspection, the asynchronous inspection mode is adopted, the resource consumption is reduced, the convenience and the high efficiency are improved, the inspection duration of the system inspection and the application inspection can be greatly reduced, and the inspection efficiency of the support system is improved.
Drawings
In order to more clearly illustrate the application or the technical solutions of the prior art, the following description will briefly explain the drawings used in the embodiments or the description of the prior art, and it is obvious that the drawings in the following description are some embodiments of the application, and other drawings can be obtained according to the drawings without inventive effort for a person skilled in the art.
FIG. 1 is a schematic flow chart of an intelligent patrol monitoring method provided by the application;
FIG. 2 is a schematic illustration of the type of inspection provided by the present application;
FIG. 3 is a second flow chart of the intelligent inspection monitoring method according to the present application;
FIG. 4 is a third flow chart of the intelligent patrol monitoring method according to the present application;
FIG. 5 is a flow chart of the intelligent patrol monitoring method provided by the application;
FIG. 6 is a fifth flow chart of the intelligent patrol monitoring method provided by the application;
FIG. 7 is a flowchart of the intelligent patrol monitoring method according to the present application;
fig. 8 is a schematic structural diagram of an electronic device provided by the present application.
Detailed Description
For the purpose of making the objects, technical solutions and advantages of the present application more apparent, the technical solutions of the present application will be clearly and completely described below with reference to the accompanying drawings, and it is apparent that the described embodiments are some embodiments of the present application, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the application without making any inventive effort, are intended to be within the scope of the application.
The intelligent patrol monitoring method of the present application is described below with reference to fig. 1 to 7.
Referring to fig. 1, the intelligent patrol monitoring method provided by the present application includes:
the intelligent inspection monitoring method is applied to an intelligent inspection monitoring platform, and the intelligent inspection monitoring platform has the functions of system inspection, application inspection and business inspection, and provides support for system monitoring indexes, system fault prediction, business data analysis and index abnormal positioning through data acquisition, intelligent analysis, automatic learning and system display based on intelligent learning and analysis of operation and maintenance data and system application data. The index thresholds of the business inspection at different periods are judged through the time sequence prediction mode, an automatic discovery function is provided, and configuration strategies and monitoring indexes can be increased on line for the newly added module, so that the comprehensiveness of the inspection range and the accuracy of the inspection result are effectively ensured. The method can provide powerful support for the operator support system, and realize the visualization of the application state and the system index of the support system, and the intellectualization of operation and maintenance management.
Referring to fig. 2, the intelligent inspection monitoring platform provided by the application specifically includes the following three different inspection operations.
The system inspection is used for monitoring the health condition of a system host, including the conditions of a CPU, a memory, a disk, a load and the like, and specifically includes the CPU utilization rate, the memory utilization rate, the IO utilization rate, the network connection number and the like. The application inspection is used for monitoring the application conditions of the system program, and relates to the application conditions of an independent program, a middleware, a database and the like. The service inspection is used for monitoring service conditions of the system, including interface success rate, order success rate, data flow direction and the like, wherein the data needs to be obtained from logs and databases, and the service conditions include service availability, service volume, service success rate, interface success rate and data flow direction.
Step 10, when the inspection type is determined to be system inspection or application inspection, an inspection ID is generated;
step 20, generating a patrol request from patrol contents corresponding to the patrol ID, and sending the patrol request to agent programs of all hosts of a support system through multithreading, wherein the agent programs are deployed on all the hosts;
the agent program is used for carrying out system asynchronous inspection or application asynchronous inspection on each host of the supporting system.
Compared with the existing synchronous inspection flow, the asynchronous inspection method adopted for the inspection monitoring of the support system can greatly save the resource consumption of the server side and improve the inspection efficiency.
The system and the application level inspection are the concrete embodiments of the asynchronous inspection, and the server initiates an inspection request to a agent program of the client through multithreading and submits an inspection task to a registration center.
And the agent program of the host initiates the local inspection, and after the inspection, the inspection result data (including cpu, memory, load, disk, application health condition and the like) is submitted to the registry. In the traditional synchronous inspection mode, the server initiates the inspection of the host, and the next host can be inspected after the current host inspection is waited. The improvement of the inspection efficiency is very limited even with the support of multithreading.
Asynchronous inspection is an efficient inspection mode, and a server side informs a client side of inspection, the client side responds successfully, and the inspection result is actively pushed to a registration center after the inspection is finished. When a large number of hosts and applications are subjected to inspection, traditional inspection time consumption=one host inspection time is often times (total amount of hosts/thread number), and asynchronous inspection time consumption=single host inspection time consumption. Moreover, the client agent program initiates the inspection, so that the inspection is not limited by the resources of the server, and all hosts can be inspected at the same time. Meanwhile, the agent program can realize quota limitation, and stability of the client service cannot be affected by patrol. The front end can confirm whether the inspection task exists currently through the registry, and if so, a timer is started to acquire the inspection progress from the registry. When avoiding many people to use simultaneously, initiate a plurality of inspection, can realize that many people can both look over the same progress of patrolling and examining when patrolling and examining.
Specifically, the server side generates an ID of the inspection and submits the task to registration, assembles the inspection content into a request message and pushes the request message to the agent program; step two: after the agent program receives the request of the server, the agent program directly responds successfully and starts the inspection task; after the agent program inspection is finished, the inspection result and the inspection ID are formed into a message and pushed to a registration center; after all the inspection tasks are finished, the server side can generate an inspection report according to inspection data of the registry, and the inspection task is set to be finished.
According to the intelligent inspection monitoring method, device, equipment and medium, the agent program based on go development is deployed on the host, the inspection request is sent to the agent program through the multithreading, the inspection of each host is initiated by the agent program, the asynchronous inspection and the asynchronous inspection of the application are realized for the system inspection and the application inspection, the asynchronous inspection mode is adopted, the resource consumption is reduced, the convenience and the high efficiency are improved, the inspection duration of the system inspection and the application inspection can be greatly reduced, and the inspection efficiency of the support system is improved.
In one embodiment, referring to fig. 3, the intelligent patrol monitoring method provided by the present application includes:
step 30, when the inspection type is determined to be business inspection, historical data and real-time data are collected and used as training data;
step 40, constructing a seasonal autoregressive comprehensive moving average model based on the training data;
step 50, determining the inspection threshold value of each business index based on the seasonal autoregressive comprehensive moving average model;
and step 60, performing service inspection on each host of the support system based on the inspection threshold.
When the support system is subjected to service inspection, the threshold value of the service index is predicted, and each index threshold value obtained through prediction can be used as an inspection threshold value to judge whether the inspection result is normal or not, wherein the inspection threshold value is used for carrying out service inspection on each host of the support system and judging whether the service inspection is normal or not. The time sequence of the business index is formed by superposing three types of changes, namely long-term trend (T), seasonal variation (S) and irregular fluctuation (I), and the calculation formula is as follows: xt=tt+st+it. Where Tt is a long-term trend of the time series of business indexes, st is seasonal variation of the time series of business indexes, and It is irregular variation of the time series of business indexes.
SARIMA (Seasonal Autoregressive Integrated Moving-Average, predictive of seasonal autoregressive moving Average) was therefore used. And (3) constructing a seasonal autoregressive comprehensive moving average model, namely a SARIMA model by collecting historical data and real-time data as training data.
For ease of understanding, an example of building a SARIMA model is presented as follows: the model prediction program inquires recent historical data from the elastic search, formats the inquired historical data, converts the format of the inquired historical data into two-dimensional data carrying row indexes and column indexes, takes the formatted data as training data, adopts auto-SARIMA to construct a SARIMA model according to the training data, and finally predicts the inspection threshold of each business index according to the training model and the data to be predicted to obtain the inspection threshold of each business index, wherein the inspection threshold is used for carrying out business inspection on each host of the support system.
According to the embodiment, the expansion of the inspection range is realized by adopting different automatic discoveries based on different inspection types, the inspection range can be accurately acquired, and the inspection accuracy is improved.
In one embodiment, referring to fig. 4, performing system asynchronous inspection or application asynchronous inspection or service asynchronous inspection on each host of the support system includes:
step 100, determining a newly added host based on equipment addresses in all local area networks of a support system, and adding the newly added host to a system inspection range in the support system;
step 200, determining a new program based on all processes on a host of the support system, and adding the new program to an application inspection range;
step 300, determining a new interface based on the periodically scanned service interface data, and adding the new interface to a service inspection range;
the system inspection range is used for carrying out system asynchronous inspection on each host of the supporting system, the application inspection range is used for carrying out application asynchronous inspection on each host of the supporting system, and the service inspection range and the inspection threshold are used for carrying out service inspection on each host of the supporting system.
And based on the system inspection range, performing system inspection on the support system, and determining the health condition of a host of the support system. And based on the application inspection range, carrying out application asynchronous inspection on each host of the support system, and determining the application condition of each host application of the support system. And carrying out service inspection on each host of the support system based on the service inspection range and the obtained inspection threshold value to determine service transaction conditions.
In this embodiment, based on the system inspection range, the system inspection range and the service inspection range updated in real time, each host of the support system is inspected, according to the newly added host, the system inspection range is updated in real time, according to the newly added program, the application inspection range is updated in real time, and according to the newly added service interface, the service inspection range is updated in real time, so that the real-time inspection update of each host of the support system is maintained, the timeliness and the comprehensiveness of inspection are improved, and the security of the support system is improved.
In one embodiment, referring to fig. 5, step 100, determining a new host based on the device addresses in all local area networks of the support system includes:
step 101, broadcasting is initiated through ARP protocol, and the equipment addresses of the hosts in all local area networks of the system are supported;
102, performing a difference set between the equipment address and the existing inspection address, and determining an address difference set;
and step 103, determining a newly added host based on the address difference set.
The proposal provides automatic discovery functions for three inspection types, including automatic discovery of a host, automatic discovery of an application and automatic discovery of a service interface, so as to expand the inspection range for each inspection type during inspection.
First, the application provides an automatic discovery function realized based on ARP protocol. The ARP protocol may obtain, by broadcasting, the device addresses of the hosts in all local area networks of the support system, where the device addresses include IP addresses, MAC addresses.
Specifically, a server initiates broadcasting through an ARP protocol to acquire a host address in a local area network; and performing difference set verification on the host address obtained by broadcasting and the existing inspection address to obtain a newly added host address. After finding a newly added host, the server queries a password library to obtain an encrypted account password, and adopts DES symmetric type decryption ciphertext passwords; and authenticating through the obtained password, if authentication is successful, deploying a agent program (an agent program developed based on go) on the newly added host, and if authentication is failed, adding the host address into a blacklist, and rejecting the access of the newly added host to the system.
According to the embodiment, the equipment addresses of the hosts in all local area networks of the support system are obtained through ARP protocol broadcasting, so that the real-time discovery function of the hosts is realized, the efficiency of discovering newly-added hosts is improved, and the inspection efficiency is further improved.
In one embodiment, referring to fig. 6, step 200, determining a new program based on all processes on the host of the support system includes:
step 201, acquiring an running application program by scanning all processes on a host computer of the support system;
step 202, determining the application type of the application program based on the application name of the application program;
step 203, acquiring a test request scheme from the routing information based on the application type, and determining application information and host information of the application program through the test request scheme;
step 204, determining a new program based on the application information and the host information.
In this embodiment, it is proposed that the application auto discovery is based on the implementation of the agent program on the host, which scans all processes on the host.
The specific process comprises the following steps: the agent program calls a system bottom layer interface to acquire the running program and a monitoring port; the agent program judges the application type according to the application name and whether to monitor the port; the agent program obtains a test request scheme from the routing information according to the application type, and requests the application program through the scheme; through the application of the test request, the agent program can assemble application information and host information into a message and push the message to the server; and the server analyzes the message pushed by the agent program, brings the application into the inspection return, and realizes automatic discovery of the application.
According to the embodiment, the agent program is realized on the basis of the agent program on the host, and the agent program scans all processes on the host to discover the newly-added program in real time, so that the host discovers the newly-added program in real time, the efficiency of discovering the newly-added program is improved, and the inspection efficiency is further improved.
In one embodiment, referring to fig. 7, step 300, determining a new interface based on periodically scanned service interface data includes:
step 301, acquiring service interface data scanned regularly;
step 302, performing difference set operation on the service interface data and the current inspection interface, and determining an interface difference set;
step 303, determining a new interface based on the interface difference set.
The service automatic discovery implementation principle is based on interface data acquisition, and performs interface difference set verification, and the implementation steps are as follows: the service end periodically scans service interface data, performs difference set operation on the interface data after duplication removal and the current inspection interface, and acquires a newly added interface; and bringing the newly added interface into a service inspection range.
According to the embodiment, the newly added service interface is found in real time through interface data acquisition and interface difference verification, so that the new service interface is found in real time, the efficiency of finding the new service interface is improved, and the inspection efficiency is further improved.
Further, the intelligent patrol monitoring platform further comprises a data visualization function. Data visualization can be performed in two presentation forms. The display method is characterized in that result data obtained through analysis of historical collected data are displayed, and the implementation principle is that a rear end interface is called through a front end, and then corresponding visual graphics are generated through rendering after the data are obtained.
The other is to dynamically display the data acquired in real time. The implementation flow is as follows: 1) Establishing a socket link, wherein the front end and the back end service establish the socket link; 2) Initiating a data request, informing a data type required by a rear end and an event of data pushing by a front end, and registering the request to a registration center; 3) The front end starts monitoring events; 4) The asynchronous thread initiates, and the back-end initiates the asynchronous thread to acquire data and push to related events. After each data push, the thread acquires the state of the request from the registry, and if the request state is exited, the thread also automatically exits; 5) And (3) graphic rendering, wherein the front end renders the back end return data in real time, and the graphic is dynamically displayed.
The intelligent inspection monitoring platform provided by the application is composed of a technical component layer, a service layer and a display layer. The technical component layer is constructed based on common tools of the Internet channel system, and comprises data acquisition, data storage, trend prediction, automatic discovery, system framework support, data display support and the like. The service layer is mainly based on intelligent operation and maintenance management and rule policy management, operation and maintenance basic data are collected through a unified interface, field cleaning, data integration, data conversion, missing value processing, feature extraction, data dimension reduction, data association division, rule configuration, flow configuration and the like are carried out on operation and maintenance data according to requirements of scene modeling on the data, and inspection states, index data and abnormal data are transmitted to the service layer through interfaces through learning management triggering of an intelligent inspection monitoring system. The display layer acquires the inspection result and display of the monitoring data through the unified API interface.
The technical component layer provides a learning component construction and management service oriented to an operation and maintenance scene, supports operation and maintenance scene modeling, monitoring rule configuration, index management, real-time data management, application resources, task scheduling and the like related in the using process, and monitors the operation state of the operation and maintenance learning component. Meanwhile, the system supports the whole process of abnormality detection and fault diagnosis management, and provides intelligent decision for the running state of the support system.
The intelligent patrol monitoring device provided by the application is described below, and the intelligent patrol monitoring device described below and the intelligent patrol monitoring method described above can be referred to correspondingly.
The inspection type determining module is used for generating an inspection ID when determining that the inspection type is system inspection or application inspection;
the inspection module is used for generating an inspection request from inspection content corresponding to the inspection ID, sending the inspection request to agent programs of all hosts of the support system through multithreading, and deploying the agent programs on all the hosts;
the agent program is used for carrying out system asynchronous inspection or application asynchronous inspection on each host of the supporting system.
Further, the intelligent patrol monitoring device further comprises:
the data acquisition module is used for acquiring historical data and real-time data as training data when the inspection type is determined to be business inspection;
the model construction module is used for constructing a seasonal autoregressive comprehensive moving average model based on the training data;
the inspection threshold determining module is used for determining the inspection threshold of each business index based on the seasonal autoregressive comprehensive moving average model;
and the service inspection module is used for carrying out service inspection on each host of the support system based on the inspection threshold.
Further, the inspection module is further configured to:
determining a newly added host based on equipment addresses in all local area networks of a support system, and adding the newly added host to a system inspection range in the support system;
determining a new program based on all processes on a host of the support system, and adding the new program to an application inspection range;
determining a new interface based on the periodically scanned service interface data, and adding the new interface to a service inspection range;
the system inspection range is used for carrying out system asynchronous inspection on each host of the supporting system, the application inspection range is used for carrying out application asynchronous inspection on each host of the supporting system, and the service inspection range and the inspection threshold are used for carrying out service inspection on each host of the supporting system.
Further, the inspection module is further configured to:
initiating broadcasting through ARP protocol, supporting the device addresses of the hosts in all local area networks of the system;
making a difference set between the equipment address and the existing inspection address, and determining an address difference set;
and determining a newly added host based on the address difference set.
Further, the inspection module is further configured to:
acquiring an running application program by scanning all processes on a host of the support system;
determining the application type of the application program based on the application name of the application program;
acquiring a test request scheme from the routing information based on the application type, and determining application information and host information of the application program through the test request scheme;
and determining a new program based on the application information and the host information.
Further, the inspection module is further configured to:
acquiring service interface data of periodic scanning;
performing difference set operation on the service interface data and the current inspection interface to determine an interface difference set;
and determining a newly added interface based on the interface difference set.
Fig. 8 illustrates a physical structure diagram of an electronic device, as shown in fig. 8, which may include: processor 810, communication interface (Communications Interface) 820, memory 830, and communication bus 840, wherein processor 810, communication interface 820, memory 830 accomplish communication with each other through communication bus 840. The processor 810 may invoke logic instructions in the memory 830 to perform an intelligent patrol monitoring method comprising: when determining that the inspection type is system inspection or application inspection, generating an inspection ID; generating a patrol request from patrol contents corresponding to the patrol ID, and sending the patrol request to agent programs of all hosts of a support system through multithreading, wherein the agent programs are deployed on all the hosts; the agent program is used for carrying out system asynchronous inspection or application asynchronous inspection on each host of the supporting system.
Further, the logic instructions in the memory 830 described above may be implemented in the form of software functional units and may be stored in a computer-readable storage medium when sold or used as a stand-alone product. Based on this understanding, the technical solution of the present application may be embodied essentially or in a part contributing to the prior art or in a part of the technical solution, in the form of a software product stored in a storage medium, comprising several instructions for causing a computer device (which may be a personal computer, a server, a network device, etc.) to perform all or part of the steps of the method according to the embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a random access Memory (RAM, random Access Memory), a magnetic disk, or an optical disk, or other various media capable of storing program codes.
In another aspect, the present application also provides a computer program product, where the computer program product includes a computer program, where the computer program can be stored on a non-transitory computer readable storage medium, and when the computer program is executed by a processor, the computer can execute the intelligent patrol monitoring method provided by the above methods, and the method includes: when determining that the inspection type is system inspection or application inspection, generating an inspection ID; generating a patrol request from patrol contents corresponding to the patrol ID, and sending the patrol request to agent programs of all hosts of a support system through multithreading, wherein the agent programs are deployed on all the hosts; the agent program is used for carrying out system asynchronous inspection or application asynchronous inspection on each host of the supporting system.
In yet another aspect, the present application further provides a non-transitory computer readable storage medium having stored thereon a computer program which, when executed by a processor, is implemented to perform the intelligent patrol monitoring method provided by the above methods, the method comprising: when determining that the inspection type is system inspection or application inspection, generating an inspection ID; generating a patrol request from patrol contents corresponding to the patrol ID, and sending the patrol request to agent programs of all hosts of a support system through multithreading, wherein the agent programs are deployed on all the hosts; the agent program is used for carrying out system asynchronous inspection or application asynchronous inspection on each host of the supporting system.
The apparatus embodiments described above are merely illustrative, wherein the elements illustrated as separate elements may or may not be physically separate, and the elements shown as elements may or may not be physical elements, may be located in one place, or may be distributed over a plurality of network elements. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment. Those of ordinary skill in the art will understand and implement the present application without undue burden.
From the above description of the embodiments, it will be apparent to those skilled in the art that the embodiments may be implemented by means of software plus necessary general hardware platforms, or of course may be implemented by means of hardware. Based on this understanding, the foregoing technical solution may be embodied essentially or in a part contributing to the prior art in the form of a software product, which may be stored in a computer readable storage medium, such as ROM/RAM, a magnetic disk, an optical disk, etc., including several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the method described in the respective embodiments or some parts of the embodiments.
Finally, it should be noted that: the above embodiments are only for illustrating the technical solution of the present application, and are not limiting; although the application has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical scheme described in the foregoing embodiments can be modified or some technical features thereof can be replaced by equivalents; such modifications and substitutions do not depart from the spirit and scope of the technical solutions of the embodiments of the present application.
Claims (10)
1. An intelligent patrol monitoring method is characterized by comprising the following steps:
when determining that the inspection type is system inspection or application inspection, generating an inspection ID;
generating a patrol request from patrol contents corresponding to the patrol ID, and sending the patrol request to agent programs of all hosts of a support system through multithreading, wherein the agent programs are deployed on all the hosts;
the agent program is used for carrying out system asynchronous inspection or application asynchronous inspection on each host of the supporting system.
2. The intelligent patrol monitoring method according to claim 1, comprising:
when the inspection type is determined to be business inspection, historical data and real-time data are collected to serve as training data;
constructing a seasonal autoregressive comprehensive moving average model based on the training data;
determining the inspection threshold value of each business index based on the seasonal autoregressive comprehensive moving average model;
and carrying out service inspection on each host of the support system based on the inspection threshold.
3. The intelligent patrol monitoring method according to claim 2, wherein performing system asynchronous patrol or application asynchronous patrol or service asynchronous patrol on each host of the support system comprises:
determining a newly added host based on equipment addresses in all local area networks of a support system, and adding the newly added host to a system inspection range in the support system;
determining a new program based on all processes on a host of the support system, and adding the new program to an application inspection range;
determining a new interface based on the periodically scanned service interface data, and adding the new interface to a service inspection range;
the system inspection range is used for carrying out system asynchronous inspection on each host of the supporting system, the application inspection range is used for carrying out application asynchronous inspection on each host of the supporting system, and the service inspection range and the inspection threshold are used for carrying out service inspection on each host of the supporting system.
4. The intelligent patrol monitoring method according to claim 3, wherein determining the newly added host based on the device addresses in all local area networks of the support system comprises:
initiating broadcasting through ARP protocol, supporting the device addresses of the hosts in all local area networks of the system;
making a difference set between the equipment address and the existing inspection address, and determining an address difference set;
and determining a newly added host based on the address difference set.
5. The intelligent patrol monitoring method according to claim 3, wherein determining a new program based on all processes on a host of the support system comprises:
acquiring an running application program by scanning all processes on a host of the support system;
determining the application type of the application program based on the application name of the application program;
acquiring a test request scheme from the routing information based on the application type, and determining application information and host information of the application program through the test request scheme;
and determining a new program based on the application information and the host information.
6. The intelligent patrol monitoring method according to claim 3, wherein determining a newly added interface based on periodically scanned service interface data comprises:
acquiring service interface data of periodic scanning;
performing difference set operation on the service interface data and the current inspection interface to determine an interface difference set;
and determining a newly added interface based on the interface difference set.
7. An intelligent patrol monitoring device, comprising:
the inspection type determining module is used for generating an inspection ID when determining that the inspection type is system inspection or application inspection;
the inspection module is used for generating an inspection request from inspection content corresponding to the inspection ID, sending the inspection request to agent programs of all hosts of the support system through multithreading, and deploying the agent programs on all the hosts;
the agent program is used for carrying out system asynchronous inspection or application asynchronous inspection on each host of the supporting system.
8. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor implements the intelligent patrol monitoring method according to any one of claims 1 to 6 when the program is executed by the processor.
9. A non-transitory computer readable storage medium having stored thereon a computer program, wherein the computer program when executed by a processor implements the intelligent patrol monitoring method according to any one of claims 1 to 6.
10. A computer program product comprising a computer program, characterized in that the computer program, when executed by a processor, implements the intelligent patrol monitoring method according to any one of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211477307.1A CN116909720A (en) | 2022-11-23 | 2022-11-23 | Intelligent inspection monitoring method, device, equipment and medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211477307.1A CN116909720A (en) | 2022-11-23 | 2022-11-23 | Intelligent inspection monitoring method, device, equipment and medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN116909720A true CN116909720A (en) | 2023-10-20 |
Family
ID=88365439
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211477307.1A Pending CN116909720A (en) | 2022-11-23 | 2022-11-23 | Intelligent inspection monitoring method, device, equipment and medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116909720A (en) |
-
2022
- 2022-11-23 CN CN202211477307.1A patent/CN116909720A/en active Pending
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106445781B (en) | The detection system of HPC large-scale parallel program exception based on message transmission | |
| CN103414916B (en) | Fault diagnosis system and method | |
| CN111092869A (en) | Security management and control method for terminal access to office network and authentication server | |
| CN110557304B (en) | Address detection method and device and computer readable storage medium | |
| CN111240806B (en) | Distributed container mirror image construction scheduling method | |
| CN110611603B (en) | Cluster network card monitoring method and device | |
| JP2009244948A (en) | Service processing status analyzing program, service processing status analyzing device, and service processing status analyzing method | |
| CN112437047A (en) | Remote server management method, system and related device | |
| CN108234150A (en) | For the data acquisition and processing (DAP) method and system of data center's monitoring system | |
| CN109257229A (en) | A kind of main/standby switching method and device | |
| CN110275793B (en) | Detection method and equipment for MongoDB data fragment cluster | |
| CN106911510B (en) | Usability monitoring system and method for network access system | |
| CN111181800A (en) | Test data processing method and device, electronic equipment and storage medium | |
| CN113472577A (en) | Cluster inspection method, device and system | |
| CN110569178B (en) | Interface early warning method and system based on big data platform | |
| CN110569238B (en) | Data management method, system, storage medium and server based on big data | |
| CN116909720A (en) | Intelligent inspection monitoring method, device, equipment and medium | |
| CN111130948A (en) | Network quality detection method and device | |
| CN114584573A (en) | Node machine information synchronization method based on long polling mechanism | |
| CN115190052A (en) | Long connection management method, system and control unit | |
| CN106855843B (en) | Performance analysis method and device of Web system | |
| CN113852984A (en) | Wireless terminal access monitoring system and method, electronic equipment and readable storage device | |
| CN113596170A (en) | Load balancing equipment-based shutdown processing method, device, medium and equipment | |
| CN111385361B (en) | Cloth inspecting machine communication method and device, electronic equipment and storage medium | |
| CN111901389B (en) | Data updating method, device, server and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |