CN101984415A - Method and device for setting monitoring index threshold - Google Patents

Method and device for setting monitoring index threshold Download PDF

Info

Publication number
CN101984415A
CN101984415A CN2010105299420A CN201010529942A CN101984415A CN 101984415 A CN101984415 A CN 101984415A CN 2010105299420 A CN2010105299420 A CN 2010105299420A CN 201010529942 A CN201010529942 A CN 201010529942A CN 101984415 A CN101984415 A CN 101984415A
Authority
CN
China
Prior art keywords
control index
monitor control
response time
application system
discrete state
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN2010105299420A
Other languages
Chinese (zh)
Inventor
吴军庆
周亮
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to CN2010105299420A priority Critical patent/CN101984415A/en
Publication of CN101984415A publication Critical patent/CN101984415A/en
Pending legal-status Critical Current

Links

Images

Landscapes

  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

The embodiment of the invention discloses a method and device for setting the monitoring index threshold and the method and device are used to solve the problem of the prior art that the accuracy of the manually setting method of the monitoring index threshold is lower. The method comprises the following steps: collecting monitoring data from a database, wherein the monitoring data contain monitoring index value and application system response time value; determining the monitoring index discrete state corresponding to the monitoring index value and the association rule of application system response time discrete state corresponding to the application system response time value according to the monitoring index value and application system response time value; and setting the monitoring index threshold according to the association rule. By adopting the method of the invention, the accuracy of setting the monitoring index threshold can be increased.

Description

A kind of method and apparatus of setting the monitor control index threshold value
Technical field
The present invention relates to application system monitoring technique field, particularly a kind of method and apparatus of setting the monitor control index threshold value.
Background technology
Continuous development along with computer technology, a lot of enterprises all use the IT technology on a large scale in order to improve efficiency of operation, make enterprise core business more and more stronger to the dependence of IT system, available, stable, the efficient and safety of enterprise application system and IT system architecture all has fundamental influence to production, operation and the reputation of enterprise.
The IT system operation management solution that has the complete and numerous and complicated of category in the world, but on the application system health monitoring of being concerned about the most at the IT system managerial personnel, but do not have with strong points on the market and product complete function.Though many products can provide a large amount of monitoring index and data for the user, whether health is but very difficult how to analyze and to judge application system from the monitor control index of these numerous and complicated accurately, automatically.IT system managerial personnel wish to obtain most is one and judges substantially: whether whether application system healthy, available now.Therefore in the application system monitor procedure, find to cause the monitor control index value of the serious decline of application system performance how comprehensively, exactly, be a very important problem.
At present, judge that application system is whether healthy or deny that available common methods is: by artificial setting monitor control index threshold value (comprising threshold value of warning or alarm threshold), after just the O﹠M personnel determine the threshold value of some monitor control index according to the maintenance experience of oneself, for these monitor control indexs are set the monitor control index threshold value.When detected monitor control index value during greater than the monitor control index threshold value, illustrative system is in unhealthy condition, carries out early warning or alarm.
The artificial monitor control index threshold value of setting, the O﹠M personnel mainly rely on the maintenance experience of self, rely on the subjective judgement ability to determine the monitor control index threshold value, and the accuracy of therefore setting the monitor control index threshold value is lower.Simultaneously, for the higher coupling index threshold value of complexity (monitor control index by a plurality of combinations is provided with threshold value jointly) is set, not only manually-operated complexity height, the accuracy of setting the monitor control index threshold value is also on the low side.
In sum, the accuracy of artificial setting monitor control index threshold value is lower in the prior art.
Summary of the invention
The embodiment of the invention provides a kind of method and apparatus of setting the monitor control index threshold value, in order to solve the artificial lower problem of accuracy of setting the monitor control index threshold value in the prior art.
The invention process provides a kind of method of setting the monitor control index threshold value, comprising:
Gather many monitor datas from database, wherein every monitor data comprises monitor control index value and application system response time value;
According to the described monitor control index value of gathering, determine the monitor control index discrete state of described monitor control index value correspondence, according to the described application system response time value of gathering, determine the corresponding application system response time discrete state of described application system response time value, determine the correlation rule of described monitor control index discrete state and described application system response time discrete state;
Set the monitor control index threshold value according to described correlation rule.
The monitor control index discrete state of described definite monitor control index value correspondence comprises:
Described monitor control index value is mapped in a plurality of discrete states that set in advance, obtains the monitor control index discrete state of described monitor control index value correspondence;
The corresponding application system response time discrete state of described definite application system response time value comprises:
Described application system response time value is mapped in a plurality of discrete states that set in advance, obtains the monitor control index discrete state of described monitor control index value correspondence.
Adopt the K-means clustering algorithm that described monitor control index value carry out data discreteization.
By to described monitor control index discrete state and described system response time discrete state carry out association rule mining, determine the correlation rule of described monitor control index discrete state and application system response time discrete state.
Describedly determine that by association rule mining correlation rule comprises:
By the Apriori algorithm, concentrate definite support to be not less than the frequent item set of minimum support from the item of monitor control index discrete state and application system response time discrete state composition;
By the confidence level computational algorithm, from described definite frequent item set, determine that confidence level is not less than the frequent item set of minimum confidence level, obtains the correlation rule of described monitor control index discrete state and application system response time discrete state.
Described minimum support is 10%;
Described minimum confidence level is 85%.
Describedly from database, gather many monitor datas and comprise:
Choose monitor control index, and gather the monitor data of the monitor control index value that comprises the monitor control index correspondence of choosing.
A kind of device of setting the monitor control index threshold value comprises:
Acquisition module is used for gathering many monitor datas from database, and wherein every monitor data comprises monitor control index value and application system response time value;
The correlation rule module, be used for according to the described monitor control index value of gathering, determine the monitor control index discrete state of described monitor control index value correspondence, according to the described application system response time value of gathering, determine the corresponding application system response time discrete state of described application system response time value, determine the correlation rule of described monitor control index discrete state and described application system response time discrete state;
Threshold module is used for setting the monitor control index threshold value according to described correlation rule.
Described correlation rule module comprises:
First discrete block is used for described monitor control index value is mapped to a plurality of discrete states that set in advance, and obtains the monitor control index discrete state of described monitor control index value correspondence;
Second discrete block, be used for described application system response time value carry out data discreteization, described application system response time value is mapped in a plurality of discrete states that set in advance, obtains the corresponding application system response time discrete state of described application system response time value.
Described first discrete block also specifically is used for:
Adopt the K-means clustering algorithm that described monitor control index value carry out data discreteization.
Described correlation rule module also comprises:
Excavate module, be used for to described monitor control index discrete state and described system response time discrete state carry out association rule mining, determine the correlation rule of monitor control index discrete state and application system response time discrete state.
Described excavation module also specifically is used for:
By the Apriori algorithm, concentrate definite support to be not less than the frequent item set of minimum support from the item of monitor control index discrete state and application system response time discrete state composition;
By the confidence level computational algorithm, from described definite frequent item set, determine that confidence level is not less than the frequent item set of minimum confidence level, obtains the correlation rule of described monitor control index discrete state and application system response time discrete state.
Described acquisition module also specifically is used for:
Choose monitor control index, and gather the monitor data of the monitor control index value that comprises the monitor control index correspondence of choosing.
Set monitor control index threshold value field owing to the correlation rule technology can be applied to, can improve the accuracy of setting the monitor control index threshold value, further, the embodiment of the invention can be set the monitor control index threshold value by computer equipment, simplifies manually-operated.
Description of drawings
Fig. 1 is a method synoptic diagram of setting the monitor control index threshold value in the embodiment of the invention;
Fig. 2 is the process synoptic diagram that produces correlation rule in the embodiment of the invention;
Fig. 3 is a device synoptic diagram of setting the monitor control index threshold value in the embodiment of the invention.
Embodiment
The embodiment of the invention is the acquisition monitoring data from database, and wherein monitor data comprises monitor control index value and application system response time value; According to described monitor control index value and described application system response time value, determine the correlation rule of the application system response time discrete state that the monitor control index discrete state of described monitor control index value correspondence is corresponding with described application system response time value; Set the monitor control index threshold value according to described correlation rule.Owing to the correlation rule technology is applied to setting monitor control index threshold value field, can improves the accuracy of setting the monitor control index threshold value.In addition, the embodiment of the invention can be set the monitor control index threshold value by computer equipment, simplifies manually-operated.
Below in conjunction with Figure of description the present invention program is described in further detail.
Referring to Fig. 1, a kind of method of setting the monitor control index threshold value that the embodiment of the invention provides comprises the steps:
Step 101, gather many monitor datas from database, wherein every monitor data comprises monitor control index value and application system response time value.
Step 102, according to the described monitor control index value of gathering, determine the monitor control index discrete state of described monitor control index value correspondence, according to the described application system response time value of gathering, determine the corresponding application system response time discrete state of described application system response time value, determine the correlation rule of described monitor control index discrete state and described application system response time discrete state.
Step 103, set the monitor control index threshold value according to correlation rule.
In the step 101, every monitor data comprises monitor control index value and application system response time value, can be understood as: the corresponding monitor data of time point, at point at the same time, the concrete numerical value of the monitor control index of application system and the concrete numerical value of application system response time are called a monitor data.
Such as, comprise following data in the database:
Numbering CPU usage (%) Cpu temperature (℃) Memory usage (%) The application system response time (second)
1 10 33 26 0.5
2 15 38 35 1.0
3 30 44 56 1.5
4 82 89 68 3.0
5 95 25 81 20.5
Table 1
In the table 1, " CPU usage " of first trip, " cpu temperature " and " memory usage " are three monitor control indexs, and " application system response time " is the overall target of reflection application system overall performance.Numerical value in the 2nd~4 row is the monitor control index value, and the numerical value in the 5th row is application system response time value.Numbering 1~5 is appreciated that into 5 time points, the corresponding numbering of time point, the corresponding monitor data of each numbering.
General, the monitor control index value that exists in the database can be gathered, then in subsequent step, find out the monitor control index and the incidence relation of application system between the reaction time of monitor control index value correspondence, because the monitor control index value of gathering is many more, computing time, complexity was high more, therefore, in order to reduce complexity computing time of subsequent step, before the step 101, can also comprise: choose monitor control index.
Wherein, can choose influencing one or several monitor control index that application system performance plays a crucial role.Accordingly, in the step 101, gather the monitor data of the monitor control index value that comprises the monitor control index correspondence of choosing.
In order further to improve the accuracy that the embodiment of the invention is provided with monitor control index, reduce of the influence of indivedual transient error data to subsequent calculations, in the step 101, the quantity of acquisition monitoring data can be very big, such as the monitor data more than 100,000.
In the step 102, determine that the method for the monitor control index discrete state of monitor control index value correspondence comprises:
Described monitor control index value is mapped in a plurality of discrete states that set in advance, obtains the monitor control index discrete state of described monitor control index value correspondence.Just the monitor control index value carry out data discreteization.
Wherein, the monitor control index value is carried out data discreteization need adopt the discretize algorithm, in the present embodiment, adopt K-means (a kind of discretize algorithm) clustering algorithm, the monitor control index value is mapped between several discrete state areas.Such as: a monitor control index is " CPU usage ", sets in advance 5 discrete states, and through after the discretize, 5 discrete states are:
CPU usage is outstanding CPU usage less than 20%;
CPU usage is more than or equal to 20% and be good CPU usage less than 50%;
CPU usage is more than or equal to 50% and be medium CPU usage less than 60%;
CPU usage more than or equal to 60% and less than 80% be the difference CPU usage;
CPU usage more than or equal to 80% and smaller or equal to 100% be the difference CPU usage.
Continue to use the numerical example of CPU usage in the table 1, the discrete state of the CPU usage correspondence of numbering 1~5 is respectively: outstanding CPU usage, outstanding CPU usage, good CPU usage, difference CPU usage, difference CPU usage.
Make to use the same method, we also can set in advance the discrete state of other monitor control index correspondence, then the monitor control index value are mapped in the corresponding monitor control index discrete state.
The discrete state number that each monitor control index sets in advance can be different, set in advance the quantity of the discrete state of each monitor control index as required.Such as: a monitor control index sets in advance 5 discrete states, and another monitor control index sets in advance 4 discrete states.
In the step 102, determine that the method for the application system response time discrete state that application system response time value is corresponding comprises:
Application system response time value is mapped in a plurality of discrete states that set in advance, obtains the monitor control index discrete state of described monitor control index value correspondence.Just application system response time value carry out data discreteization.
Different with the monitor control index value is, carry out data discreteization to using system response time value, does not need to adopt the K-means clustering algorithm, generally according to people's perception application system response time value carry out data discreteization.Such as: we are provided with 3 discrete states for the application system response time:
The application system response time shows that less than 2 stopwatches application system is normal;
The application system response time was more than or equal to 2 seconds and show the application system early warning less than 4 stopwatches;
The application system response time is shown the application system alarm more than or equal to 4 stopwatches.
Continue to use the numerical example of application system response time in the table 1, the corresponding discrete state of numbering application system response time of 1~5 value is respectively: application system is normal, application system is normal, application system is normal, application system early warning, application system are alarmed.
Need to prove that give an example in the embodiment of the invention used numerical value and discrete state all are in order to set forth the present invention program, and are not used in qualification the present invention.
In the step 102, after with the monitor data discretize, obtain the monitor control index discrete state and system response time discrete state, then to the monitor control index discrete state and system response time discrete state carry out association rule mining, produce the correlation rule of monitor control index discrete state and application system response time discrete state.Correlation rule technology or association rule mining technology are widely used in the world technology.Association rule mining comprises two stages: frequent item set is searched with confidence level and is calculated.Frequent item set is searched and need be used frequent item set and search algorithm, and confidence level is calculated need use the confidence level computational algorithm, and this two classes algorithm industry all has ripe algorithm, does not repeat them here.
In the present embodiment, to collect the input of searching algorithm by the item that monitor control index discrete state and application system response time discrete state are formed as frequent item set, search item that algorithm forms from monitor control index discrete state and application system response time discrete state by frequent item set and concentrate and find out the item collection that support (or frequency of occurrences) is not less than default minimum support, be called frequent item set.In the present embodiment, frequent item set is searched algorithm and is adopted the Apriori algorithm, and through repeatedly experiment, (minsupport) is set at 10% with minimum support.
To search the frequent item set that obtains behind the algorithm through frequent item set, and by the confidence level computational algorithm, find out the frequent item set that confidence level is not less than minimum confidence level again, and eliminate frequent item set with a low credibility, the frequent item set that finally obtains can be determined correlation rule.Through repeatedly experiment, present embodiment is set at 85% with minimum confidence level minconfidence.
In order to understand the correlation rule production process more intuitively, can be referring to Fig. 2, synoptic diagram for the correlation rule production process, after data with all after discrete (the item collection of being made up of monitor control index discrete state and application system response time discrete state) are handled through correlation rule technology (comprise frequent item set search algorithm and confidence level computational algorithm), the correlation rule of generation monitor control index discrete state and application system response time discrete state.
Correlation rule be shape such as A=>D or A, B, the relation of C}=>D and so on, implication is: the A affairs cause the D affairs to take place when taking place; Or A, B, three affairs of C cause the D affairs to take place when taking place simultaneously.Such as: through association rule mining, we obtain { difference CPU usage }=>{ application system alarm }, perhaps { differ from CPU usage, high cpu temperature }=>{ application system alarm }.
In the step 103, set the monitor control index threshold value according to the correlation rule that step 102 obtains.Such as we obtain { difference CPU usage }=>{ application system alarm } after, know that from the example of front the utilization rate of CPU is more than or equal to 80% and smaller or equal to the 100% corresponding CPU usage that differs from.Therefore the alarm threshold of the utilization rate of CPU can be made as 80%.Utilize identical principle, can set the threshold value of warning of CPU usage, and the threshold value of setting other monitor control index, do not repeat them here.
Based on same inventive concept, the embodiment of the invention also provides a kind of device of setting the monitor control index threshold value, and the principle of device is similar with the method principle of setting the monitor control index threshold value, and therefore the enforcement that the example of device can reference method repeats part, repeats no more.
Referring to Fig. 3, a kind of device of setting the monitor control index threshold value provided by the invention comprises:
Acquisition module 301 is used for gathering many monitor datas from database, and wherein every monitor data comprises monitor control index value and application system response time value.
Correlation rule module 302, be used for determining the monitor control index discrete state of monitor control index value correspondence according to the monitor control index value that acquisition module 301 is gathered, the application system response time of gathering according to acquisition module 301 is worth, determine the application system response time discrete state that application system response time value is corresponding, determine the correlation rule of the application system response time discrete state that the monitor control index discrete state of monitor control index value correspondence is corresponding with application system response time value.
Threshold module 303 is used for setting the monitor control index threshold value according to the correlation rule that correlation rule module 302 produces.
Wherein, correlation rule module 302 comprises:
First discrete block 3021 is used for the monitor control index value that acquisition module 301 is gathered is mapped to a plurality of discrete states that set in advance, and obtains the monitor control index discrete state of monitor control index value correspondence.Just the monitor control index value carry out data discreteization.
Second discrete block 3022 is used for the application system response time value that acquisition module 301 is gathered is mapped to a plurality of discrete states that set in advance, the corresponding application system response time discrete state of the system response time value that is applied.Just application system response time value carry out data discreteization.
Wherein, first discrete block 3021 also specifically is used for: adopt the K-means clustering algorithm that the monitor control index value carry out data discreteization.
Correlation rule module 302 also comprises:
Excavate module 3023, the system response time discrete state that the monitor control index discrete state that first discrete block 3021 is obtained and second discrete block 3022 obtain is carried out association rule mining, determines the correlation rule of monitor control index discrete state and application system response time discrete state.
Wherein, excavating module 3023 also specifically is used for:
By the Apriori algorithm, concentrate definite support to be not less than the frequent item set of minimum support from the item of monitor control index discrete state and application system response time discrete state composition; By the confidence level computational algorithm, from described definite frequent item set, determine that confidence level is not less than the frequent item set of minimum confidence level, obtains the correlation rule of described monitor control index discrete state and application system response time discrete state.
Further, in order to reduce complexity computing time of correlation rule module, acquisition module 301 also specifically is used for:
Choose monitor control index, and gather the monitor data of the monitor control index value that comprises the monitor control index correspondence of choosing.
Those skilled in the art should understand that embodiments of the invention can be provided as method, system or computer program.Therefore, the present invention can adopt complete hardware embodiment, complete software implementation example or in conjunction with the form of the embodiment of software and hardware aspect.And the present invention can adopt the form that goes up the computer program of implementing in one or more computer-usable storage medium (including but not limited to magnetic disk memory, CD-ROM, optical memory etc.) that wherein include computer usable program code.
The present invention is that reference is described according to the process flow diagram and/or the block scheme of method, equipment (system) and the computer program of the embodiment of the invention.Should understand can be by the flow process in each flow process in computer program instructions realization flow figure and/or the block scheme and/or square frame and process flow diagram and/or the block scheme and/or the combination of square frame.Can provide these computer program instructions to the processor of multi-purpose computer, special purpose computer, Embedded Processor or other programmable data processing device to produce a machine, make the instruction of carrying out by the processor of computing machine or other programmable data processing device produce to be used for the device of the function that is implemented in flow process of process flow diagram or a plurality of flow process and/or square frame of block scheme or a plurality of square frame appointments.
These computer program instructions also can be stored in energy vectoring computer or the computer-readable memory of other programmable data processing device with ad hoc fashion work, make the instruction that is stored in this computer-readable memory produce the manufacture that comprises command device, this command device is implemented in the function of appointment in flow process of process flow diagram or a plurality of flow process and/or square frame of block scheme or a plurality of square frame.
These computer program instructions also can be loaded on computing machine or other programmable data processing device, make on computing machine or other programmable devices and to carry out the sequence of operations step producing computer implemented processing, thereby the instruction of carrying out on computing machine or other programmable devices is provided for being implemented in the step of the function of appointment in flow process of process flow diagram or a plurality of flow process and/or square frame of block scheme or a plurality of square frame.
Although described the preferred embodiments of the present invention, in a single day those skilled in the art get the basic creative notion of cicada, then can make other change and modification to these embodiment.So claims are intended to all changes and the modification that are interpreted as comprising preferred embodiment and fall into the scope of the invention.
From the foregoing description as can be seen: because the embodiment of the invention is passed through acquisition monitoring data from database, wherein monitor data comprises monitor control index value and application system response time value; According to described monitor control index value and described application system response time value, determine the correlation rule of the application system response time discrete state that the monitor control index discrete state of described monitor control index value correspondence is corresponding with described application system response time value; Set the monitor control index threshold value according to described correlation rule.Owing to the correlation rule technology is applied to setting monitor control index threshold value field, can improves the accuracy of setting the monitor control index threshold value.
Obviously, those skilled in the art can carry out various changes and modification to the present invention and not break away from the spirit and scope of the present invention.Like this, if of the present invention these are revised and modification belongs within the scope of claim of the present invention and equivalent technologies thereof, then the present invention also is intended to comprise these changes and modification interior.

Claims (13)

1. a method of setting the monitor control index threshold value is characterized in that, this method comprises:
Gather many monitor datas from database, wherein every monitor data comprises monitor control index value and application system response time value;
According to the described monitor control index value of gathering, determine the monitor control index discrete state of described monitor control index value correspondence, according to the described application system response time value of gathering, determine the corresponding application system response time discrete state of described application system response time value, determine the correlation rule of described monitor control index discrete state and described application system response time discrete state;
Set the monitor control index threshold value according to described correlation rule.
2. the method for claim 1 is characterized in that, the monitor control index discrete state of described definite monitor control index value correspondence comprises:
Described monitor control index value is mapped in a plurality of discrete states that set in advance, obtains the monitor control index discrete state of described monitor control index value correspondence;
The corresponding application system response time discrete state of described definite application system response time value comprises:
Described application system response time value is mapped in a plurality of discrete states that set in advance, obtains the monitor control index discrete state of described monitor control index value correspondence.
3. method as claimed in claim 2 is characterized in that, adopts the K-means clustering algorithm that described monitor control index value carry out data discreteization.
4. as the arbitrary described method of claim 1-3, it is characterized in that, by to described monitor control index discrete state and described system response time discrete state carry out association rule mining, determine the correlation rule of described monitor control index discrete state and application system response time discrete state.
5. method as claimed in claim 4 is characterized in that, describedly determines that by association rule mining correlation rule comprises:
By the Apriori algorithm, concentrate definite support to be not less than the frequent item set of minimum support from the item of monitor control index discrete state and application system response time discrete state composition;
By the confidence level computational algorithm, from described definite frequent item set, determine that confidence level is not less than the frequent item set of minimum confidence level, obtains the correlation rule of described monitor control index discrete state and application system response time discrete state.
6. method as claimed in claim 5 is characterized in that described minimum support is 10%;
Described minimum confidence level is 85%.
7. as the arbitrary described method of claim 1-3,5-6, it is characterized in that, describedly from database, gather many monitor datas and comprise:
Choose monitor control index, and gather the monitor data of the monitor control index value that comprises the monitor control index correspondence of choosing.
8. a device of setting the monitor control index threshold value is characterized in that, this device comprises:
Acquisition module is used for gathering many monitor datas from database, and wherein every monitor data comprises monitor control index value and application system response time value;
The correlation rule module, be used for according to the described monitor control index value of gathering, determine the monitor control index discrete state of described monitor control index value correspondence, according to the described application system response time value of gathering, determine the corresponding application system response time discrete state of described application system response time value, determine the correlation rule of described monitor control index discrete state and described application system response time discrete state;
Threshold module is used for setting the monitor control index threshold value according to described correlation rule.
9. device as claimed in claim 8 is characterized in that, described correlation rule module comprises:
First discrete block is used for described monitor control index value is mapped to a plurality of discrete states that set in advance, and obtains the monitor control index discrete state of described monitor control index value correspondence;
Second discrete block, be used for described application system response time value carry out data discreteization, described application system response time value is mapped in a plurality of discrete states that set in advance, obtains the corresponding application system response time discrete state of described application system response time value.
10. device as claimed in claim 9 is characterized in that, described first discrete block also specifically is used for:
Adopt the K-means clustering algorithm that described monitor control index value carry out data discreteization.
11., it is characterized in that described correlation rule module also comprises as the arbitrary described device of claim 8-10:
Excavate module, be used for to described monitor control index discrete state and described system response time discrete state carry out association rule mining, determine the correlation rule of monitor control index discrete state and application system response time discrete state.
12. device as claimed in claim 11 is characterized in that, described excavation module also specifically is used for:
By the Apriori algorithm, concentrate definite support to be not less than the frequent item set of minimum support from the item of monitor control index discrete state and application system response time discrete state composition;
By the confidence level computational algorithm, from described definite frequent item set, determine that confidence level is not less than the frequent item set of minimum confidence level, obtains the correlation rule of described monitor control index discrete state and application system response time discrete state.
13., it is characterized in that described acquisition module also specifically is used for as claim 8-10,12 arbitrary described devices:
Choose monitor control index, and gather the monitor data of the monitor control index value that comprises the monitor control index correspondence of choosing.
CN2010105299420A 2010-11-02 2010-11-02 Method and device for setting monitoring index threshold Pending CN101984415A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2010105299420A CN101984415A (en) 2010-11-02 2010-11-02 Method and device for setting monitoring index threshold

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2010105299420A CN101984415A (en) 2010-11-02 2010-11-02 Method and device for setting monitoring index threshold

Publications (1)

Publication Number Publication Date
CN101984415A true CN101984415A (en) 2011-03-09

Family

ID=43641584

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2010105299420A Pending CN101984415A (en) 2010-11-02 2010-11-02 Method and device for setting monitoring index threshold

Country Status (1)

Country Link
CN (1) CN101984415A (en)

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103412805A (en) * 2013-07-31 2013-11-27 交通银行股份有限公司 IT (information technology) fault source diagnosis method and IT fault source diagnosis system
CN103475544A (en) * 2013-09-18 2013-12-25 浪潮电子信息产业股份有限公司 Service monitoring method based on cloud resource monitoring platform
CN104486134A (en) * 2014-12-30 2015-04-01 北京奇虎科技有限公司 Method and device for monitoring file transmission backlog
CN105893209A (en) * 2016-03-31 2016-08-24 郑州悉知信息科技股份有限公司 Monitoring method, device and system
CN106452931A (en) * 2016-12-27 2017-02-22 中国建设银行股份有限公司 Monitoring index, domain value discovery method, domain value adjusting method and automatic monitoring system
CN106445788A (en) * 2016-09-30 2017-02-22 国家电网公司 Method and device for predicting operating state of information system
CN107888435A (en) * 2016-09-29 2018-04-06 杭州华为数字技术有限公司 The threshold setting method and device of a kind of alarm monitoring
CN109981325A (en) * 2017-12-28 2019-07-05 中移(苏州)软件技术有限公司 A kind of setting method of alarm threshold, calculates equipment and medium at device

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080198950A1 (en) * 2006-12-13 2008-08-21 Kabushiki Kaisha Toshiba Apparatus and method for detecting abnormal sign
CN101819411A (en) * 2010-03-17 2010-09-01 燕山大学 GPU-based equipment fault early-warning and diagnosis method for improving weighted association rules
CN101860822A (en) * 2010-06-11 2010-10-13 中兴通讯股份有限公司 Method and system for monitoring spam messages

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080198950A1 (en) * 2006-12-13 2008-08-21 Kabushiki Kaisha Toshiba Apparatus and method for detecting abnormal sign
CN101819411A (en) * 2010-03-17 2010-09-01 燕山大学 GPU-based equipment fault early-warning and diagnosis method for improving weighted association rules
CN101860822A (en) * 2010-06-11 2010-10-13 中兴通讯股份有限公司 Method and system for monitoring spam messages

Cited By (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103412805A (en) * 2013-07-31 2013-11-27 交通银行股份有限公司 IT (information technology) fault source diagnosis method and IT fault source diagnosis system
CN103475544A (en) * 2013-09-18 2013-12-25 浪潮电子信息产业股份有限公司 Service monitoring method based on cloud resource monitoring platform
CN104486134B (en) * 2014-12-30 2018-01-23 北京奇虎科技有限公司 A kind of file that monitors sends overstocked method and apparatus
CN104486134A (en) * 2014-12-30 2015-04-01 北京奇虎科技有限公司 Method and device for monitoring file transmission backlog
CN105893209A (en) * 2016-03-31 2016-08-24 郑州悉知信息科技股份有限公司 Monitoring method, device and system
CN105893209B (en) * 2016-03-31 2018-08-14 郑州悉知信息科技股份有限公司 A kind of monitoring method, apparatus and system
CN107888435A (en) * 2016-09-29 2018-04-06 杭州华为数字技术有限公司 The threshold setting method and device of a kind of alarm monitoring
CN107888435B (en) * 2016-09-29 2020-11-17 华为技术有限公司 Threshold setting method and device for alarm monitoring
CN106445788A (en) * 2016-09-30 2017-02-22 国家电网公司 Method and device for predicting operating state of information system
CN106452931A (en) * 2016-12-27 2017-02-22 中国建设银行股份有限公司 Monitoring index, domain value discovery method, domain value adjusting method and automatic monitoring system
CN106452931B (en) * 2016-12-27 2019-09-17 中国建设银行股份有限公司 Monitor control index and thresholding discovery method, thresholding method of adjustment and automatic monitored control system
CN109981325A (en) * 2017-12-28 2019-07-05 中移(苏州)软件技术有限公司 A kind of setting method of alarm threshold, calculates equipment and medium at device
CN109981325B (en) * 2017-12-28 2022-07-29 中移(苏州)软件技术有限公司 Alarm threshold setting method and device, computing equipment and medium

Similar Documents

Publication Publication Date Title
CN101984415A (en) Method and device for setting monitoring index threshold
CN112152830B (en) Intelligent fault root cause analysis method and system
Ren et al. On querying historical evolving graph sequences
CN105427193B (en) A kind of big data analysis device and method based on distributed time series data service
CN110245035A (en) A kind of link trace method and device
US20140379904A1 (en) Time series data processing device, time series data processing method, and computer-readable recording medium storing time series data processing program
CN108063699A (en) Network performance monitoring method, apparatus, electronic equipment, storage medium
US20150074146A1 (en) Method and system for discovering dynamic relations among entities
Fu et al. Digging deeper into cluster system logs for failure prediction and root cause diagnosis
US20060294220A1 (en) Diagnostics and resolution mining architecture
CN106600115A (en) Intelligent operation and maintenance analysis method for enterprise information system
CN110147387A (en) A kind of root cause analysis method, apparatus, equipment and storage medium
CN102945240A (en) Method and device for realizing association rule mining algorithm supporting distributed computation
CN103746831A (en) Alarm analysis method, device and system
CN105871634A (en) Method and application for detecting cluster anomalies and cluster managing system
CN101876932A (en) Method, system and device for monitoring internal storage database
CN105956016A (en) Associated information visualization processing system
CN115033463B (en) System exception type determining method, device, equipment and storage medium
CN102609501B (en) Data cleaning method based on real-time historical database
CN104778185A (en) Determination method for abnormal SQL (structured query language) statement and server
CN105827422A (en) Method and device for determining network element alarm correlation relation
CN114416685B (en) Log processing method, system and storage medium
CN111159165A (en) Electric power underground low-power-consumption edge computing system and method based on cloud platform
CN112415331A (en) Power grid secondary system fault diagnosis method based on multi-source fault information
CN114327964A (en) Method, device, equipment and storage medium for processing fault reasons of service system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C12 Rejection of a patent application after its publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20110309