Summary of the invention
Purpose of the present invention provides a kind of expandable dynamic network supervisory control system and method for supervising thereof at above-mentioned the deficiencies in the prior art design just, its objective is by improving extensibility, the compatibility of monitoring unit, improves monitoring efficiency.For this reason, technical solution of the present invention provides a kind of expandable dynamic network supervisory control system and the method for supervising that is applicable to this system.This system and method adopts expandable type dynamic monitoring unit framework structure and monitoring flow process to solve above problem.
The objective of the invention is to realize by following measure:
The described expandable dynamic network supervisory control system of the technology of the present invention, the server-side processes device that comprises the centralized monitor of forming jointly by serviced component and component application server and component proxy server, and constitute centralized monitoring system jointly with control desk and equipment, it is characterized in that: comprise a dynamic monitoring unit at serviced component, the dynamic monitoring unit comprises:
(1) data maintenance manager A is used for generating the monitor task object from database or file, and for Monitoring Manager B provides calling interface, it also carries out the operation of object generation and storage to the monitor data result of Monitoring Manager B in addition; It constitutes:
Monitor task memory module: be used to receive the monitor task that Monitoring Manager B creates, it carried out the legitimacy verification, and store in database or the file;
Supervising data storage module: be used to receive the monitoring of tools data that Monitoring Manager B collects, be assembled into the monitor data model, and store in database or the file with certain form;
(2) Monitoring Manager B is used for the Memory Allocation of the generation of monitor task, the monitoring detector storing, call and be complementary with monitor task and calls; It constitutes:
Monitor task administration module: be connected in the monitor task memory module, according to using the monitoring request, for monitored object is set up monitor task, and add in the monitor task scheduler module, be responsible for receiving the monitor data that monitoring thread is gathered, carry out returning to Monitoring Manager B after the necessary processing, Monitoring Manager is done further processing;
Monitoring and scheduling module: be connected in supervising data storage module and monitor task administration module, be responsible for monitor task basic-level support is provided, regularly or periodically automatically perform desired task.
(3) C of monitoring detector factory: be used for resolving monitoring configuration file, the configuration of initialization watch-dog, upgrade the watch-dog state automatically, and provide suitable calling interface for Monitoring Manager according to the system monitoring demand; It constitutes:
Watch-dog interface module: be connected in monitoring and scheduling module and equipment, the interface service of watch-dog is provided for Monitoring Manager B;
The monitoring detector Registering modules: be connected in the watch-dog interface module, its effect is by the monitoring detector factory C module of monitoring configuration file with monitoring detector type drawing-in system, and is responsible for creating the standard interface of variety classes watch-dog;
Monitoring detector administration module: be connected in watch-dog interface module and monitoring detector Registering modules, adopt open-ended mode to organize relevant monitoring detector, and provide default interface for monitoring detector.The placement model here adopts nested Hash sheet form.
Be applicable to the method for supervising of above-mentioned expandable dynamic network supervisory control system, it is characterized in that: steps of the method are:
(1) starts the server-side processes device of the centralized monitor comprise that serviced component, component application server, component proxy server and control desk are formed, and finish the initialization procedure of centralized monitoring system jointly with control desk and equipment;
(2) the dynamic monitoring unit is loaded by the component application server, and initialization;
(3) the Monitoring Manager B in the dynamic monitoring unit, the C of monitoring detector factory and data maintenance manager A are loaded in turn, and the storage allocation unit also carries out initialization;
(4) C of monitoring detector factory reads in the monitoring configuration file, and the storage allocation unit carries out document analysis, converts the internal storage structure that system itself can handle to, and generates monitoring detector internal storage structure and relevant interface;
(5) monitoring detector is loaded in the monitoring and scheduling device, carries out monitor task;
(6) monitoring detector returns monitor data and successively is uploaded to top-level module, and according to monitored results processings that perform an analysis, and generating run instructs by Monitoring Manager B.As generate operations such as alarm event, monitor data persistence.
This programme has been broken away from monitor mode and the man-to-man Synergistic method of monitored object, but adopts the mode of multi-to-multi, and promptly same monitored object can run under the multiple monitor mode simultaneously, for the centralized monitor server provides monitor data; In addition, same monitor mode also can provide monitor service for multiple monitored object simultaneously; For the monitor mode that native system does not adopt as yet, can be by user's Adjustment System configuration voluntarily, the corresponding monitoring detector of exploitation, system's meeting automatic loading configuration file and detector also carried out monitor procedure.
The core of technical solution of the present invention is above-mentioned expandable type, dynamic monitoring unit framework and its monitoring operation method, can realize that various monitoring detectors are by demand dynamic load, plug and play, make and concentrate safety management system monitor network device node on a large scale, higher monitoring treatment effeciency is provided, supports the monitoring demand of multiple software and hardware.
This expandable type, dynamic monitoring unit are parts of concentrating safety management system, and the dynamic monitoring unit generally is placed in one, with its collaborative work.It carries out centralized management by the predefine interface to various device node in the network.
The life cycle of dynamic monitoring unit is to start with system service to generate, and after using the arrival of monitoring demand, the dynamic monitoring unit is activated by wait state, and monitor service is provided.
Embodiment
Below in conjunction with accompanying drawing and example example technical solution of the present invention is described in further detail:
Shown in accompanying drawing 1, it has been described when implementing technical solution of the present invention, the inter-process environment of dynamic monitoring unit 1 and centralized monitoring system combination.Wherein, dynamic monitoring unit 1 and other modules such as incident collecting unit, the alert analysis unit, report generation unit etc. constitutes the serviced component 11 of centralized monitoring system together, these serviced components 11 and component application server (McomServer) 12, component proxy server (McomProxy) 13 has been formed the server-side processes environment of centralized monitor jointly, but component application server 12 is based on the expansion service framework of JMX technology, component proxy server 13 is made up of one group of MBean, accept unified management and the scheduling of McomServer, by articulamentum such as HttpAdaptor, connection adaptor such as RMIAdaptor and external request are carried out alternately.Server-side processes environment and control desk (ManageUI) 14, equipment 9 have together constituted whole centralized monitoring system.Control desk 14 is a kind of human-computer interaction interfaces, in order to receive user's operational order, and carrying out the transmission of data and instruction with server end, equipment 9 generally is made of monitored equipment such as main frame, fire compartment wall, router, switch, IDS, gateway and the network storage equipment etc.Wherein, the server-side processes environment receives the monitoring request and the initialization monitoring processing environment of control desk 14, carries out monitoring process to equipment end.
Shown in accompanying drawing 2, it has been described when implementing technical solution of the present invention, the structural representation of dynamic monitoring unit 1.Dynamic monitoring unit 1 comprises as one in the serviced component 11:
(1) data maintenance manager A is used for generating the monitor task object from database or file, and for Monitoring Manager B provides calling interface, it also carries out the operation of object generation and storage to the monitor data result of Monitoring Manager B in addition; It constitutes:
Monitor task memory module 2: be used to receive the monitor task that Monitoring Manager B creates, it carried out the legitimacy verification, and store in database or the file;
Supervising data storage module 3: be used to receive the monitoring of tools data that Monitoring Manager B collects, be assembled into the monitor data model, and store in database or the file with certain form;
(2) Monitoring Manager B is used for the Memory Allocation of the generation of monitor task, the monitoring detector storing, call and be complementary with monitor task and calls; It constitutes:
Monitor task administration module 4: be connected in monitor task memory module 2, according to using the monitoring request, for monitored object is set up monitor task, and add in the monitoring and scheduling module 5, be responsible for receiving the monitor data that monitoring thread is gathered, carry out returning to Monitoring Manager B after the necessary processing, Monitoring Manager is done further processing;
Monitoring and scheduling module 5: be connected in supervising data storage module 3 and monitor task administration module 4, be responsible for monitor task basic-level support is provided, regularly or periodically automatically perform desired task.
(3) C of monitoring detector factory: be used for resolving monitoring configuration file, the configuration of initialization watch-dog, upgrade the watch-dog state automatically, and provide suitable calling interface for Monitoring Manager B according to the system monitoring demand; It constitutes:
Watch-dog interface module 6: be connected in monitoring and scheduling module 5 and equipment 9, the interface service of watch-dog is provided for Monitoring Manager;
Monitoring detector Registering modules 7: be connected in watch-dog interface module 6, its effect is by the monitoring detector factory module of monitoring configuration file with monitoring detector type drawing-in system, and is responsible for creating the standard interface of variety classes watch-dog;
Monitoring detector administration module 8: be connected in watch-dog interface module 6 and monitoring detector Registering modules 7, adopt open-ended mode to organize relevant monitoring detector, and provide default interface for monitoring detector.
In addition, also need to be provided with monitoring request module 10 in the outside of dynamic monitoring unit 1, monitoring request module 10 belongs to the external environment condition of monitor service, belongs to client part, is used for initiating the monitoring request to dynamic monitoring unit 1; Equipment 9 also belongs to the external environment condition of monitor service, belongs to the monitored device part, receives monitored instruction, and feeds back self state, performance parameter.
Shown in accompanying drawing 3, it has been described when implementing technical solution of the present invention, the residing outside running environment of server-side processes environment.Dynamic monitoring unit 1 is positioned at the MComServer of server end.Dotted portion has illustrated the concrete structure of server end among the figure: the bottom is a hardware device, needs to install Java Virtual Machine on operating system, and it does not have too much requirement to operating system, supports most of operating systems at present.The top operation Secfox Manage Server of virtual machine, this is a kind of application service hypervisor of conformance with standard JMX framework, under this Service Management environment, load dynamic monitoring unit 1, the operation monitoring service, monitoring configuration file and expanding monitoring detector in this service and the unit cooperatively interact, and reach the purpose of dynamic load, flexible expansion.For monitored device can be work station, server, safety means, the network equipment, memory device and other device types, and they have constituted unified centralized monitor exterior arrangement with monitoring server.
Monitoring detector Registering modules 7 after the employed watch-dog type of resolution system and the configuration thereof, manages this configuration by monitoring detector administration module 8 is unified from the monitoring configuration file, creates the watch-dog object, and with Hash sheet form managing internal memory layout.Watch-dog interface module 6 is called by demand the watch-dog object in the monitoring detector administration module with unified standard interface.
The description form of monitoring configuration file Monitor.xml is as follows:
<config Name=" Monitor " Text=" monitoring of tools " CategoryID=" 0 " 〉
<category Name=" Resource " Text=" host performance monitoring "
CategoryID=″1″>
<monitor Name=" CPUUtilization " Text=" host CPU utilance "
CategoryID=″101″EventCategory=″PFM″
EventType=″Performance.cpuThreshold″>
<protocol?Name=″snmp″vendor=″″
oid=″1.3.6.1.2.1.25.3.3.1.2″index=″″displaycolumn=″″
nodetype=″multiplenode″resulttype=″1″caculatetype=″″
resultunit=″%″timeavg=″″defaultinterval=″300″description=″
Use the cpu busy percentage of SNMP method monitoring objective main frame "/
……
</monitor>
……
</category>
……
</config>
The division rule of Xml file is as follows:
) the category label is used to state the classification of monitored object, as " host performance monitoring ", " interface flow monitoring ", " application service monitoring " etc., Name is a class name, and Text is that classification is described, and CategoryID is a classification logotype;
2) the monitor label is used to state the type of monitored object, and as " host CPU utilance ", " memory usage " etc., Name is a type name, Text is a type specification, CategoryID is a type identification, and EventCategory is a kind of event, and EventType is an event type;
3) can allow a plurality of monitor in a category label, can have a plurality of concrete monitoring type in promptly a kind of big monitoring classification;
4) the protocol label is used to state monitor mode or monitoring protocol, as " SNMP ", " ICMP ", " Telnet " etc.Vendor is a protocol version, and oid is an object identity, and labels such as index, displaycolumn, nodetype, resulttype, calculatetype are then represented planting some indispensable parameters of monitor mode;
5) different protocol can have different attributes, and a monitor can have multiple monitor mode, promptly comprises a plurality of protocol, can expand according to the actual requirements.
Shown in accompanying drawing 4~6, it has been described when implementing technical solution of the present invention, constitutes above-mentioned dynamic network supervisory control system and the expandable dynamic network method for supervising that is applicable to above-mentioned expandable dynamic network supervisory control system, steps of the method are:
(1) starts the server-side processes device of the centralized monitor comprise that serviced component 11, component application server 12, component proxy server 13 and control desk 14 are formed, and finish the initialization procedure of centralized monitoring system jointly with control desk 14 and equipment 9;
(2) dynamic monitoring unit 1 is loaded by the component application server, and initialization;
(3) the Monitoring Manager B in the dynamic monitoring unit 1, the C of monitoring detector factory and data maintenance manager A are loaded in turn, and the storage allocation unit also carries out initialization;
(4) C of monitoring detector factory reads in the monitoring configuration file, and the storage allocation unit carries out document analysis, converts the internal storage structure that system itself can handle to, and generates monitoring detector internal storage structure and watch-dog interface module 6;
(5) monitoring detector is loaded in the monitoring and scheduling module 5, carries out monitor task;
(6) monitoring detector returns monitor data and successively is uploaded to top-level module, and according to monitored results processings that perform an analysis, and generating run instructs by Monitoring Manager B.
Fig. 4 is a concrete operations flow process of having described monitor task administration module 4 inside.When beginning, will create monitor task administration module 4 after the system monitoring system start-up, and be loaded as the system monitoring service, the monitor task manager is further created monitoring and scheduling module 5.Because monitor task can be used some configuration informations (as the configuration of main frame), be used to set up the environment of monitoring, generally speaking, these information change are not frequent, but monitor task may frequently use, all to read these information efficiencies from database or file lower at every turn, so consider such information is left in some global variables, provides visit to these information with static method.Therefore, next monitor task administration module 4 is created the global access object that needs, construct monitor configuration surroundings after, monitor task administration module 4 can be from the tabulation of monitor task memory module 2 monitor tasks, and task is loaded in the monitoring and scheduling module 5.
Fig. 5 has described the concrete operations flow process of monitoring and scheduling module 5 inside.Monitoring and scheduling module 5 is registered to the Timer object with the monitor task that monitor task administration module 4 distributes, and add in the monitor task tabulation, next be responsible for the traffic control of monitor task by Timer, it can start and stop the execution of monitor task at the fixed time.Monitoring and scheduling module 5 is sent to supervising data storage module 3 as required with monitor data under the effect of monitor task administration module 4, realizes the persistence of monitor data with the form of database file.