CN104216822A - Abnormal information processing method and device - Google Patents
Abnormal information processing method and device Download PDFInfo
- Publication number
- CN104216822A CN104216822A CN201410496033.XA CN201410496033A CN104216822A CN 104216822 A CN104216822 A CN 104216822A CN 201410496033 A CN201410496033 A CN 201410496033A CN 104216822 A CN104216822 A CN 104216822A
- Authority
- CN
- China
- Prior art keywords
- abnormal information
- time
- abnormal
- output condition
- recorded
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 230000002159 abnormal effect Effects 0.000 title claims abstract description 586
- 230000010365 information processing Effects 0.000 title abstract 2
- 238000003672 processing method Methods 0.000 title abstract 2
- 238000000034 method Methods 0.000 claims description 42
- 230000008569 process Effects 0.000 description 15
- 230000008901 benefit Effects 0.000 description 3
- 230000008859 change Effects 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 3
- 230000004048 modification Effects 0.000 description 3
- 238000012986 modification Methods 0.000 description 3
- 238000004590 computer program Methods 0.000 description 2
- 230000006870 function Effects 0.000 description 1
- 230000007774 longterm Effects 0.000 description 1
- 230000009897 systematic effect Effects 0.000 description 1
- 239000002699 waste material Substances 0.000 description 1
Landscapes
- Alarm Systems (AREA)
Abstract
The invention provides an abnormal information processing method and device, and is used for reducing log space occupied by abnormal information and improving log receiving efficiency. When the abnormal information is received, receiving time is added into an abnormal information list by aiming at the abnormal information recorded in the abnormal information list, the abnormal information which is not recorded in the abnormal information list is added into the abnormal information list, the abnormal information receiving time is added, according to the time of each piece of recorded abnormal information, whether the abnormal information satisfies an output condition or not is judged, and the abnormal information which satisfies the output condition is recorded into a log. Since the abnormal information of the same content in the embodiment of the invention is combined into one piece of information, only the abnormal time receiving time is continuously recorded, the abnormal information is recorded to the log when the abnormal information satisfies the output condition, so that large log space is saved, and efficiency for the log to receive other pieces of abnormal information is improved.
Description
Technical field
The present invention relates to technical field of data processing, particularly relate to a kind of disposal route and device of abnormal information.
Background technology
May be there is various abnormal information in program, these abnormal informations can be captured usually, and are persisted in daily record, so that the later stage is to the treatment and analysis of exception in the process run.
Prior art, when recording exceptional information, is generally that abnormal just record this abnormal information in daily record often occurs once, also can arranges the abnormal rank of this abnormal information simultaneously.When therefore adopting the method, a large amount of time of occurrence will be preserved in daily record different, but the abnormal information that content is identical with abnormal rank.
Adopt the method during recording exceptional information, will the identical abnormal information of a large amount of content to be there will be in log space in daily record, thus affect log space and receive other abnormal informations.In addition, owing to being arrange abnormal rank according to abnormal information in prior art, therefore the abnormal rank of identical abnormal information is all identical, and the frequency that identical abnormal information may occur in the different time periods is not identical, the processing sequence needed is not identical yet, but its processing sequence is not set for often kind of situation in prior art, thus the treatment effeciency of impact to abnormal information.Such as, program is when frequent operation database, the situation that DataBase combining time-out is abnormal may be there is, within the time period that it connects 1 minute, this has occurred 10 times extremely, and within certain time period of continuous 100 days, this exception may occur 100 times, a kind of abnormal conditions supposing to occur before clearly needing priority processing.But in the prior art above-mentioned two situations are not distinguished, the mode recording the identical abnormal information of 10 contents in the inherent log space of other 1 minute also unusual waste log space.
Summary of the invention
In view of the above problems, propose the present invention to provide and can reduce taking of log space, improve disposal route and the device of a kind of abnormal information of abnormal information receiving efficiency.
Embodiments provide a kind of disposal route of abnormal information, the method comprises:
According to the abnormal information received, judge whether this abnormal information is recorded in abnormal information list;
When this abnormal information is recorded in abnormal information list, for this abnormal information recorded in abnormal information list, record receives the time of this abnormal information, otherwise, this abnormal information is recorded in abnormal information list, and record receives the time of this abnormal information;
According to each time receiving described abnormal information of recording in abnormal information list, judge whether this abnormal information meets output condition;
When this abnormal information meets output condition, this abnormal information is recorded in daily record.
Further, in order to accurately determine the abnormal rank of each abnormal information, process abnormal information according to abnormal rank, described method also comprises in embodiments of the present invention:
According to the output condition that described abnormal information meets, and the abnormal rank that this output condition each is corresponding, in daily record, record the abnormal rank of this abnormal information.
Further, in order to accurately determine whether each abnormal information meets output condition, improve the accuracy that abnormal information exports, described abnormal information meets output condition and comprises:
According to each time for this abnormal information record in described abnormal information list, determine the number of times that this abnormal information occurs and the time span that this abnormal information occurs, according to the described number of times determined and time span, determine the frequency that described abnormal information occurs, when the described frequency of occurrences is greater than the frequency threshold of setting, determine that described abnormal information meets output condition; Or
According to each time for this abnormal information record in described abnormal information list, determine the number of times that this abnormal information occurs, when the number of times of described appearance is greater than the frequency threshold value of setting, determine that described abnormal information meets output condition; Or
According to each time for this abnormal information record in described abnormal information list, determine the time span that described abnormal information occurs, when the time span of described appearance is greater than the time threshold of setting, determine that this abnormal information meets output condition.
Further, in order to save daily record internal memory, described abnormal information list is kept in internal memory.
Further, in order to save the space of abnormal information list, ensure the accuracy that abnormal information exports, describedly this abnormal information be recorded to after in daily record, described method also comprises:
Each time of described abnormal information and correspondence thereof is deleted in described abnormal information list.
Embodiments provide the treating apparatus that a kind of abnormal information arrives, described device comprises:
First judge module, for according to the abnormal information received, judges whether this abnormal information is recorded in abnormal information list;
Logging modle, for when the first judge module judges that this abnormal information is recorded in abnormal information list, for this abnormal information recorded in abnormal information list, record receives the time of this abnormal information, otherwise, this abnormal information is recorded in abnormal information list, and record receives the time of this abnormal information;
Abnormal information list, for recording each abnormal information and receiving each time of this abnormal information;
Second judge module, for according to each time receiving described abnormal information of recording in abnormal information list, judges whether this abnormal information meets output condition;
Output module, for when the second judge module judges that this abnormal information meets output condition, is recorded to this abnormal information in daily record.
Further, in order to accurately determine the abnormal rank of each abnormal information, according to abnormal rank, abnormal information is processed, described output module, output condition also for meeting according to described abnormal information, and the abnormal rank that each output condition is corresponding, in daily record, record the abnormal rank of this abnormal information.
Further, in order to accurately determine whether each abnormal information meets output condition, improve the accuracy that abnormal information exports, described second judge module, specifically for according to each time for this abnormal information record in described abnormal information list, determine the number of times that this abnormal information occurs and the time span that this abnormal information occurs, according to the described number of times determined and time span, determine the frequency that described abnormal information occurs, when the described frequency of occurrences is greater than the frequency threshold of setting, determine that described abnormal information meets output condition; Or
According to each time for this abnormal information record in described abnormal information list, determine the number of times that this abnormal information occurs, when the number of times of described appearance is greater than the frequency threshold value of setting, determine that described abnormal information meets output condition; Or
According to each time for this abnormal information record in described abnormal information list, determine the time span that described abnormal information occurs, when the time span of described appearance is greater than the time threshold of setting, determine that this abnormal information meets output condition.
Further, in order to save the space of abnormal information list, ensure the accuracy that abnormal information exports, described device also comprises:
Removing module, for abnormal information being recorded to after in daily record when output module, deletes each time of described abnormal information and correspondence thereof in described abnormal information list.
Embodiments provide a kind of disposal route and device of abnormal information, the method is when receiving abnormal information, for the abnormal information be recorded in abnormal information list, the time of reception is added in abnormal information list, the abnormal information be not recorded in abnormal information list is added in abnormal information list, and add the time receiving this abnormal information, according to each time receiving this abnormal information of record, judge whether this abnormal information meets output condition, the abnormal information meeting output condition is recorded in daily record.Owing in embodiments of the present invention the abnormal information of identical content being merged into one, only constantly record receives the time of this abnormal information, and when it meets output condition, just this abnormal information is recorded to daily record, therefore in a large number save log space, improve the efficiency that daily record receives other abnormal informations.
Above-mentioned explanation is only the general introduction of technical solution of the present invention, in order to technological means of the present invention can be better understood, and can be implemented according to the content of instructions, and can become apparent, below especially exemplified by the specific embodiment of the present invention to allow above and other objects of the present invention, feature and advantage.
Accompanying drawing explanation
By reading hereafter detailed description of the preferred embodiment, various other advantage and benefit will become cheer and bright for those of ordinary skill in the art.Accompanying drawing only for illustrating the object of preferred implementation, and does not think limitation of the present invention.And in whole accompanying drawing, represent identical parts by identical reference symbol.In the accompanying drawings:
The processing procedure of a kind of abnormal information that Fig. 1 provides for the embodiment of the present invention;
The processing procedure of a kind of abnormal information that Fig. 2 provides for the embodiment of the present invention one;
The processing procedure of a kind of abnormal information that Fig. 3 provides for the embodiment of the present invention two;
The treating apparatus structural representation of a kind of abnormal information that Fig. 4 provides for the embodiment of the present invention.
Embodiment
In order to effectively save log space, improving the efficiency that daily record receives abnormal information, embodiments providing a kind of disposal route and device of abnormal information.
Below with reference to accompanying drawings exemplary embodiment of the present disclosure is described in more detail.Although show exemplary embodiment of the present disclosure in accompanying drawing, however should be appreciated that can realize the disclosure in a variety of manners and not should limit by the embodiment set forth here.On the contrary, provide these embodiments to be in order to more thoroughly the disclosure can be understood, and complete for the scope of the present disclosure can be conveyed to those skilled in the art.
Below in conjunction with explanation accompanying drawing, the embodiment of the present invention is described.
The processing procedure of a kind of abnormal information that Fig. 1 provides for the embodiment of the present invention, this process comprises the following steps:
S101: receive abnormal information.
S102: judging whether this abnormal information is recorded in abnormal information list, when judged result is for being, carrying out step S103, otherwise, carry out step S104.
Judge whether abnormal information is recorded in abnormal information list, namely judge that whether the abnormal information received is identical with the abnormal information of preserving in abnormal information list, when identical, think that this abnormal information is kept in abnormal information list, in order to reduce data volume, only can preserve the identification information of abnormal information in this abnormal information list, relatively time, also only can compare the identification information of abnormal information.
In embodiments of the present invention in order to effectively save log space, when receiving abnormal information, the relevant information of this abnormal information is recorded in abnormal information list, when this abnormal information meets output condition, Cai this abnormal information is recorded in daily record.
S103: for this abnormal information recorded in abnormal information list, record receives the time of this abnormal information, carries out step S105 afterwards.
S104: this abnormal information is recorded in abnormal information list, and record receives the time of this abnormal information.
Concrete, a corresponding record is only had for every bar abnormal information in embodiments of the present invention in abnormal information list, but can for every bar abnormal information, according to the time receiving this abnormal information, in abnormal information list, record receives each time of this abnormal information.Therefore in abnormal information list, record abnormal information, and receive each time of this abnormal information.
S105: according to each time receiving described abnormal information of recording in abnormal information list, judging whether this abnormal information meets output condition, when judged result is for being, carrying out step S106, otherwise, carry out step S107.
The time of reception of abnormal information is added to after in abnormal information list, according to each time of this abnormal information recorded in abnormal information list, can determine whether this abnormal information meets output condition, when this abnormal information meets output condition, this abnormal information is recorded in daily record.
S106: this abnormal information is recorded in daily record.
S107: this abnormal information is kept in abnormal information list.
In embodiments of the present invention in order to save log space, this abnormal information list can be kept in internal memory, when the abnormal information in abnormal information list meets output condition, Cai this abnormal information be recorded in daily record.
In addition, in order to save the storage space of abnormal information list, ensureing to be recorded to the accuracy that abnormal information exports this abnormal information after in daily record, described abnormal information and each time corresponding to this abnormal information can be deleted in abnormal information list.
Owing in embodiments of the present invention the abnormal information of identical content being merged into one, only constantly record receives the time of this abnormal information, and when it meets output condition, just this abnormal information is recorded in daily record, therefore in a large number save log space, improve the efficiency that log space receives other abnormal informations.
The output condition of multiple abnormal information can be set in embodiments of the present invention, the frequency that such as can occur according to abnormal information, or the number of times that abnormal information occurs, or the time span etc. that abnormal information occurs determines whether in daily record, record this abnormal information.
Concrete, in embodiments of the present invention in order to accurately determine whether each abnormal information meets output condition, improve the accuracy that abnormal information exports, described abnormal information meets output condition and comprises:
According to each time for this abnormal information record in described abnormal information list, determine the number of times that this abnormal information occurs and the time span that this abnormal information occurs, according to the described number of times determined and time span, determine the frequency that described abnormal information occurs, when the frequency of described appearance is greater than the frequency threshold of setting, determine that described abnormal information meets output condition; Or
According to each time for this abnormal information record in described abnormal information list, determine the number of times that this abnormal information occurs, when the number of times of described appearance is greater than the frequency threshold value of setting, determine that described abnormal information meets output condition; Or
According to each time for this abnormal information record in described abnormal information list, determine the time span that described abnormal information occurs, when the time span of described appearance is greater than the time threshold of setting, determine that this abnormal information meets output condition.
Judging that this abnormal information is the need of when being recorded in daily record, judges according to above-mentioned condition, as long as meet above-mentioned arbitrary output condition, abnormal information can be recorded in daily record.
The processing procedure of a kind of abnormal information that Fig. 2 provides for the embodiment of the present invention one, this process comprises the following steps:
S201: receive abnormal information.
S202: judging whether this abnormal information is recorded in abnormal information list, when judged result is for being, carrying out step S203, otherwise, carry out step S204.
S203: for this abnormal information recorded in abnormal information list, record receives the time of this abnormal information, carries out step S205 afterwards.
S204: this abnormal information is recorded in abnormal information list, and record receives the time of this abnormal information.
S205: according to each time receiving described abnormal information of recording in abnormal information list, determine the number of times that this abnormal information occurs, judge whether the number of times of this appearance is greater than the frequency threshold value of setting, when judged result is for being, carry out step S209, otherwise, carry out step S206.
S206: according to each time receiving described abnormal information of recording in abnormal information list, determine the difference of earliest time that this abnormal information occurs and time the latest, using the time span that this difference occurs as abnormal information, judge whether the time span of described appearance is greater than the time threshold of setting, when judged result is for being, carry out step S209, otherwise, carry out step S207.
S207: the number of times occurred according to the abnormal information determined, and the time span that described abnormal information occurs, determine the frequency that described abnormal information occurs, judge whether the frequency of described appearance is greater than the frequency threshold of setting, when judged result is for being, carry out step S209, otherwise, carry out step S208.
The order of above-mentioned steps S205, S206 and S207 can be exchanged, namely also can first according to the frequency occurred, judge whether this abnormal information meets output condition, also first can judge whether this abnormal information meets output condition according to the number of times occurred, as long as carry out judging for above-mentioned three kinds of situations, as long as and abnormal information meets wherein any one output condition, this abnormal information can be recorded in daily record.
S208: this abnormal information is kept in abnormal information list.
S209: this abnormal information is recorded in daily record, and the relevant information of this abnormal information is deleted in abnormal information list.
The relevant information of this abnormal information comprises the identification information of abnormal information, and the information such as time at every turn receiving this abnormal information.
Concrete, in embodiments of the present invention when receiving abnormal information, first judge whether this abnormal information has been recorded in abnormal information list, when having recorded this abnormal information in abnormal information list, when namely there is an abnormal information identical with this abnormal information in abnormal information list, according to the time receiving this abnormal information, the time receiving this abnormal information is recorded in abnormal information list, record for this abnormal information in now abnormal information list: the identification information of abnormal information, receive the time of this abnormal information for the first time, second time receives the time of this abnormal information, receive the time of this abnormal information for the N time, N is the number of times receiving this abnormal information altogether.When not recording this abnormal information in abnormal information list, when namely there is not the abnormal information identical with this abnormal information in abnormal information list, this abnormal information is recorded in abnormal information list, and the time receiving this abnormal information is recorded in abnormal information list, record for this abnormal information in now abnormal information list: the identification information of abnormal information, receive the time of this abnormal information for the first time.
Judge whether this abnormal information meets output condition for this abnormal information, can according to each time for this abnormal information record in abnormal information list, determine the number of times that this abnormal information occurs, namely statistics have recorded several time for this abnormal information altogether, the number of times that this abnormal information occurs can be determined, judge whether the number of times of this appearance is greater than the frequency threshold value of setting, when the number of times of this appearance is greater than the frequency threshold value of setting, determine that this abnormal information meets output condition, this abnormal information is recorded in daily record, and in abnormal information list, delete each time of this abnormal information and correspondence thereof, when the number of times of this appearance is not more than the frequency threshold value of setting, determine that this abnormal information does not meet this output condition, this abnormal information is continued to be kept in abnormal information list.
In above-mentioned output condition judges, mainly judge that whether the number of times that this abnormal information occurs is abundant, namely judge whether its number of times occurred is greater than the frequency threshold value of setting, thus determine whether this abnormal information to be recorded in daily record.
When this abnormal information does not meet above-mentioned output condition, can again according to each time for this abnormal information record in abnormal information list, determine that the difference of earliest time and time the latest appears in this abnormal information, namely the time span that this abnormal information occurs is determined, judge whether the time span of this appearance is greater than the time threshold of setting, when the time span of this appearance is greater than the time threshold of setting, then determine that this abnormal information meets output condition, this abnormal information is recorded in daily record, and in abnormal information list, delete each time of reception of this abnormal information and correspondence thereof, when the time span of this appearance is not more than the time threshold of setting, then determine that this abnormal information does not meet output condition, this abnormal information is continued to be kept in abnormal information list.
In above-mentioned output condition judges, mainly judge whether to need to process the abnormal information meeting certain hour condition, after abnormal information is present in certain hour length, need to process this abnormal information, to process exception in time.
When this abnormal information does not meet above-mentioned output condition, according to each time for this abnormal information record in abnormal information list, determine the number of times that this abnormal information occurs, and the time span that this abnormal information occurs, according to the business of the number of times determined and time span, determine the frequency that this abnormal information occurs, judge whether the frequency of this appearance is greater than the frequency threshold of setting, when the frequency of this appearance is greater than the frequency threshold of setting, determine that this abnormal information meets output condition, this abnormal information is recorded in daily record, and in abnormal information list, delete each time of this abnormal information and correspondence thereof, otherwise, determine that this abnormal information does not meet output condition, this abnormal information is continued to be kept in abnormal information list.
In the judgement of above-mentioned output condition, whether the main frequency judging that abnormal information occurs meets the condition of setting, when the frequency that abnormal information occurs is greater than the frequency threshold of setting, thinks that this abnormal information is urgent problem, need this abnormal information to be recorded in daily record.
In order to can for the priority of abnormal information, process in time abnormal information, the method also comprises in embodiments of the present invention:
According to the output condition that described abnormal information meets, and the abnormal rank that each output condition is corresponding, in daily record, record the abnormal rank of this abnormal information.
According to the description of above-described embodiment, when judging whether abnormal information meets output condition, judging according to different output conditions, this abnormal information can be recorded in daily record as long as meet any one output condition.Therefore abnormal rank can be set for often kind of output condition in embodiments of the present invention, when a certain abnormal information meets this output condition, then abnormal rank corresponding to this output condition this abnormal information given, and in daily record, record the abnormal rank of this abnormal information.
Such as, in the deterministic process of above-mentioned output condition, when the frequency that abnormal information occurs is higher, illustrate in current interval, this abnormal information frequently occurs, needs to solve this in time extremely, therefore can arrange abnormal rank for this output condition, such as its abnormal rank is L1, is the abnormal rank that priority is the highest.When the abnormal number of times occurred is higher, this abnormal information long-term existence is also described to a certain extent, needs to process this abnormal information, therefore abnormal rank can be set for this output condition, such as its abnormal rank is the priority of priority lower than L1 of L2, L2.When abnormal information occurs that earliest time is greater than the time threshold of setting with the difference of time the latest, can think that this abnormal information has been present in for a long time, need to process this abnormal information, therefore abnormal rank can be set for this output condition, such as its abnormal rank is the priority of priority lower than L2 of L3, L3.
Other priority orders can certainly be set, as long as arrange corresponding abnormal rank for different output conditions, when abnormal information meets corresponding output condition, give this abnormal information by abnormal rank corresponding for this output condition, and be recorded in daily record.
The processing procedure of a kind of abnormal information that Fig. 3 provides for the embodiment of the present invention two, abnormal rank corresponding to each output condition is described as example with above-mentioned, and this process comprises the following steps:
S301: receive abnormal information.
S302: judging whether this abnormal information is recorded in abnormal information list, when judged result is for being, carrying out step S303, otherwise, carry out step S304.
S303: for this abnormal information recorded in abnormal information list, record receives the time of this abnormal information, carries out step S305 afterwards.
S304: this abnormal information is recorded in abnormal information list, and record receives the time of this abnormal information.
S305: according to each time receiving described abnormal information of recording in abnormal information list, determine the number of times that this abnormal information occurs, judge whether the number of times of this appearance is greater than the frequency threshold value of setting, when judged result is for being, carry out step S309, and abnormal rank L2 corresponding for this output condition is recorded in daily record, otherwise, carry out step S306.
S306: according to each time receiving described abnormal information of recording in abnormal information list, determine the difference of earliest time that this abnormal information occurs and time the latest, using the time span that this difference occurs as abnormal information, judge whether the time span of described appearance is greater than the time threshold of setting, when judged result is for being, carry out step S309, and abnormal rank L3 corresponding for this output condition is recorded in daily record, otherwise, carry out step S307.
S307: the number of times occurred according to the abnormal information determined, and the time span that described abnormal information occurs, determine the frequency that described abnormal information occurs, judge whether the frequency of described appearance is greater than the frequency threshold of setting, when judged result is for being, carry out step S309, and abnormal rank L1 corresponding for this output condition is recorded in daily record, otherwise, carry out step S308.
S308: this abnormal information is kept in abnormal information list.
S309: this abnormal information is recorded in daily record, and each time of deleting this abnormal information and correspondence thereof in abnormal information list.
The order of above-mentioned steps S305, S306 and S307 can be exchanged, namely also can first according to the frequency occurred, judge whether this abnormal information meets output condition, also first can judge whether this abnormal information meets output condition according to the number of times occurred, as long as carry out judging for above-mentioned three kinds of situations, as long as and abnormal information meets wherein any one output condition, this abnormal information can be recorded in daily record.
Owing to being provided with priority corresponding to often kind of output condition in embodiments of the present invention, in order to the abnormal information that priority processing priority is higher, can first judge for the output condition that priority is higher in embodiments of the present invention, the such as order L1>L2>L3 of above-described embodiment medium priority, therefore when judging for each output condition, first can carry out the judgement of step S307, carry out the judgement of step S305 afterwards, subsequently carry out the judgement of step S306, this embodiment can ensure that the abnormal information meeting the higher output condition of priority can be processed timely, thus improve stability to a certain extent.
Owing in embodiments of the present invention the abnormal information of identical content being merged into one, only constantly record receives the time of this abnormal information, and when it meets output condition, just this abnormal information is recorded to daily record, therefore in a large number save log space, improve the efficiency that log space receives other abnormal informations.In addition, due in embodiments of the present invention according to abnormal information meet output condition, determine the abnormal rank of abnormal information, therefore abnormal rank that also may be corresponding different in the abnormal information that the different time periods is identical, thus the processing mode needing different abnormal rank corresponding, for different abnormal informations provides corresponding processing mode, improve the dirigibility of process.
Fig. 4 embodiments provides the treating apparatus structural representation that a kind of abnormal information arrives, and described device comprises:
First judge module 41, for according to the abnormal information received, judges whether this abnormal information is recorded in abnormal information list;
Logging modle 42, for when the first judge module judges that this abnormal information is recorded in abnormal information list, for this abnormal information recorded in abnormal information list, record receives the time of this abnormal information, otherwise, this abnormal information is recorded in abnormal information list, and record receives the time of this abnormal information;
Abnormal information list 43, for recording each abnormal information and receiving each time of this abnormal information;
Second judge module 44, for each time receiving described abnormal information according to abnormal information list summary record, judges whether this abnormal information meets output condition;
Output module 45, for when the second judge module judges that this abnormal information meets output condition, is recorded to this abnormal information in daily record.
Further, in order to accurately determine the abnormal rank of each abnormal information, according to abnormal rank, abnormal information is processed, described output module 44, output condition also for meeting according to described abnormal information, and the abnormal rank that this output condition each is corresponding, in daily record, record the abnormal rank of this abnormal information.
Further, in order to accurately determine whether each abnormal information meets output condition, improve the accuracy that abnormal information exports, described second judge module 43, specifically for according to each time for this abnormal information record in described abnormal information list, determine the number of times that this abnormal information occurs and the time span that this abnormal information occurs, according to the described number of times determined and time span, determine the frequency that described abnormal information occurs, when the described frequency of occurrences is greater than the frequency threshold of setting, determine that described abnormal information meets output condition; Or
According to each time for this abnormal information record in described abnormal information list, determine the number of times that this abnormal information occurs, when the number of times of described appearance is greater than the frequency threshold value of setting, determine that described abnormal information meets output condition; Or
According to each time for this abnormal information record in described abnormal information list, determine the time span that described abnormal information occurs, when the time span of described appearance is greater than the time threshold of setting, determine that this abnormal information meets output condition.
Further, in order to save the space of abnormal information list, ensure the accuracy that abnormal information exports, described device also comprises:
Removing module 46, for abnormal information being recorded to after in daily record when output module, deletes each time of described abnormal information and correspondence thereof in described abnormal information list.
Embodiments provide a kind of disposal route and device of abnormal information, the method is when receiving abnormal information, for the abnormal information be recorded in abnormal information list, the time of reception is added in abnormal information list, the abnormal information be not recorded in abnormal information list is added in abnormal information list, and add the time receiving this abnormal information, according to each time receiving this abnormal information of record, judge whether this abnormal information meets output condition, the abnormal information meeting output condition is recorded in daily record.Owing in embodiments of the present invention the abnormal information of identical content being merged into one, only constantly record receives the time of this abnormal information, and when it meets output condition, just this abnormal information is recorded to daily record, therefore in a large number save log space, improve the efficiency that daily record receives other abnormal informations.
Intrinsic not relevant to any certain computer, virtual system or miscellaneous equipment with display at this algorithm provided.Various general-purpose system also can with use based on together with this teaching.According to description above, the structure constructed required by this type systematic is apparent.In addition, the present invention is not also for any certain programmed language.It should be understood that and various programming language can be utilized to realize content of the present invention described here, and the description done language-specific is above to disclose preferred forms of the present invention.
In instructions provided herein, describe a large amount of detail.But can understand, embodiments of the invention can be put into practice when not having these details.In some instances, be not shown specifically known method, structure and technology, so that not fuzzy understanding of this description.
Similarly, be to be understood that, in order to simplify the disclosure and to help to understand in each inventive aspect one or more, in the description above to exemplary embodiment of the present invention, each feature of the present invention is grouped together in single embodiment, figure or the description to it sometimes.But, the method for the disclosure should be construed to the following intention of reflection: namely the present invention for required protection requires feature more more than the feature clearly recorded in each claim.Or rather, as claims below reflect, all features of disclosed single embodiment before inventive aspect is to be less than.Therefore, the claims following embodiment are incorporated to this embodiment thus clearly, and wherein each claim itself is as independent embodiment of the present invention.
Those skilled in the art are appreciated that and adaptively can change the module in the equipment in embodiment and they are arranged in one or more equipment different from this embodiment.Module in embodiment or unit or assembly can be combined into a module or unit or assembly, and multiple submodule or subelement or sub-component can be put them in addition.Except at least some in such feature and/or process or unit be mutually repel except, any combination can be adopted to combine all processes of all features disclosed in this instructions (comprising adjoint claim, summary and accompanying drawing) and so disclosed any method or equipment or unit.Unless expressly stated otherwise, each feature disclosed in this instructions (comprising adjoint claim, summary and accompanying drawing) can by providing identical, alternative features that is equivalent or similar object replaces.
In addition, those skilled in the art can understand, although embodiments more described herein to comprise in other embodiment some included feature instead of further feature, the combination of the feature of different embodiment means and to be within scope of the present invention and to form different embodiments.Such as, in the following claims, the one of any of embodiment required for protection can use with arbitrary array mode.
All parts embodiment of the present invention with hardware implementing, or can realize with the software module run on one or more processor, or realizes with their combination.It will be understood by those of skill in the art that the some or all functions that microprocessor or digital signal processor (DSP) can be used in practice to realize according to the some or all parts in the treating apparatus of the abnormal information of the embodiment of the present invention.The present invention can also be embodied as part or all equipment for performing method as described herein or device program (such as, computer program and computer program).Realizing program of the present invention and can store on a computer-readable medium like this, or the form of one or more signal can be had.Such signal can be downloaded from internet website and obtain, or provides on carrier signal, or provides with any other form.
The present invention will be described instead of limit the invention to it should be noted above-described embodiment, and those skilled in the art can design alternative embodiment when not departing from the scope of claims.In the claims, any reference symbol between bracket should be configured to limitations on claims.Word " comprises " not to be got rid of existence and does not arrange element in the claims or step.Word "a" or "an" before being positioned at element is not got rid of and be there is multiple such element.The present invention can by means of including the hardware of some different elements and realizing by means of the computing machine of suitably programming.In the unit claim listing some devices, several in these devices can be carry out imbody by same hardware branch.Word first, second and third-class use do not represent any order.Can be title by these word explanations.
Obviously, those skilled in the art can carry out various change and modification to the present invention and not depart from the spirit and scope of the present invention.Like this, if these amendments of the present invention and modification belong within the scope of the claims in the present invention and equivalent technologies thereof, then the present invention is also intended to comprise these change and modification.
Claims (10)
1. a disposal route for abnormal information, is characterized in that, the method comprises:
According to the abnormal information received, judge whether this abnormal information is recorded in abnormal information list;
When this abnormal information is recorded in abnormal information list, for this abnormal information recorded in abnormal information list, record receives the time of this abnormal information, otherwise, this abnormal information is recorded in abnormal information list, and record receives the time of this abnormal information;
According to each time receiving described abnormal information of recording in abnormal information list, judge whether this abnormal information meets output condition;
When this abnormal information meets output condition, this abnormal information is recorded in daily record.
2. the method for claim 1, is characterized in that, described method also comprises:
According to the output condition that described abnormal information meets, and the abnormal rank that each output condition is corresponding, in daily record, record the abnormal rank of this abnormal information.
3. method as claimed in claim 1 or 2, it is characterized in that, described abnormal information meets output condition and comprises:
According to each time for this abnormal information record in described abnormal information list, determine the number of times that this abnormal information occurs and the time span that this abnormal information occurs, according to the described number of times determined and time span, determine the frequency that described abnormal information occurs, when the frequency of described appearance is greater than the frequency threshold of setting, determine that described abnormal information meets output condition; Or
According to each time for this abnormal information record in described abnormal information list, determine the number of times that this abnormal information occurs, when the number of times of described appearance is greater than the frequency threshold value of setting, determine that described abnormal information meets output condition; Or
According to each time for this abnormal information record in described abnormal information list, determine the time span that described abnormal information occurs, when the time span of described appearance is greater than the time threshold of setting, determine that this abnormal information meets output condition.
4. the method for claim 1, is characterized in that, described method also comprises:
When described abnormal information does not meet output condition, described abnormal information is kept in abnormal information list.
5. the method for claim 1, is characterized in that, described abnormal information list is kept in internal memory.
6. the method for claim 1, is characterized in that, describedly this abnormal information is recorded to after in daily record, and described method also comprises:
Each time of described abnormal information and correspondence thereof is deleted in described abnormal information list.
7. the treating apparatus that arrives of abnormal information, it is characterized in that, described device comprises:
First judge module, for according to the abnormal information received, judges whether this abnormal information is recorded in abnormal information list;
Logging modle, for when the first judge module judges that this abnormal information is recorded in abnormal information list, for this abnormal information recorded in abnormal information list, record receives the time of this abnormal information, otherwise, this abnormal information is recorded in abnormal information list, and record receives the time of this abnormal information;
Abnormal information list, for recording each abnormal information and receiving each time of this abnormal information;
Second judge module, for according to each time receiving described abnormal information of recording in abnormal information list, judges whether this abnormal information meets output condition;
Output module, for when the second judge module judges that this abnormal information meets output condition, is recorded to this abnormal information in daily record.
8. device as claimed in claim 7, is characterized in that, described output module, and the output condition also for meeting according to described abnormal information, and the abnormal rank that each output condition is corresponding, record the abnormal rank of this abnormal information in daily record.
9. device as claimed in claim 7 or 8, it is characterized in that, described second judge module, specifically for according to each time for this abnormal information record in described abnormal information list, determine the number of times that this abnormal information occurs and the time span that this abnormal information occurs, according to the described number of times determined and time span, determine the frequency that described abnormal information occurs, when the described frequency of occurrences is greater than the frequency threshold of setting, determine that described abnormal information meets output condition; Or
According to each time for this abnormal information record in described abnormal information list, determine the number of times that this abnormal information occurs, when the number of times of described appearance is greater than the frequency threshold value of setting, determine that described abnormal information meets output condition; Or
According to each time for this abnormal information record in described abnormal information list, determine the time span that described abnormal information occurs, when the time span of described appearance is greater than the time threshold of setting, determine that this abnormal information meets output condition.
10. device as claimed in claim 7, it is characterized in that, described device also comprises:
Removing module, for abnormal information being recorded to after in daily record when output module, deletes each time of described abnormal information and correspondence thereof in described abnormal information list.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410496033.XA CN104216822B (en) | 2014-09-24 | 2014-09-24 | A kind of processing method and processing device of abnormal information |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410496033.XA CN104216822B (en) | 2014-09-24 | 2014-09-24 | A kind of processing method and processing device of abnormal information |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104216822A true CN104216822A (en) | 2014-12-17 |
| CN104216822B CN104216822B (en) | 2018-03-30 |
Family
ID=52098338
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410496033.XA Active CN104216822B (en) | 2014-09-24 | 2014-09-24 | A kind of processing method and processing device of abnormal information |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104216822B (en) |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106095914A (en) * | 2016-06-07 | 2016-11-09 | 四川长虹电器股份有限公司 | Unified error blog management method |
| CN106557415A (en) * | 2015-09-28 | 2017-04-05 | 北京国双科技有限公司 | The processing method and processing device of program operation exception |
| CN107392682A (en) * | 2017-09-13 | 2017-11-24 | 沈阳东知科技有限公司 | A kind of customer information processing system and processing method by all kinds of means |
| CN107888424A (en) * | 2017-11-27 | 2018-04-06 | 凌云天博光电科技股份有限公司 | Warning information recognition methods and device, NMS |
| CN108710562A (en) * | 2018-05-10 | 2018-10-26 | 深圳市腾讯网络信息技术有限公司 | Merging method, device and the equipment of exception record |
| CN112685277A (en) * | 2020-12-31 | 2021-04-20 | 海光信息技术股份有限公司 | Warning information checking method and device, electronic equipment and readable storage medium |
| CN113157480A (en) * | 2021-04-23 | 2021-07-23 | Oppo广东移动通信有限公司 | Error information processing method, device, storage medium and terminal |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102981943B (en) * | 2012-10-29 | 2016-05-11 | 新浪技术（中国）有限公司 | The method and system of monitoring application daily record |
| CN103942210B (en) * | 2013-01-21 | 2018-05-04 | 中国移动通信集团上海有限公司 | Processing method, device and the system of massive logs information |
| CN103761262A (en) * | 2013-12-31 | 2014-04-30 | 深圳英飞拓科技股份有限公司 | Repetition log control method based on syslogd |
-
2014
- 2014-09-24 CN CN201410496033.XA patent/CN104216822B/en active Active
Cited By (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106557415A (en) * | 2015-09-28 | 2017-04-05 | 北京国双科技有限公司 | The processing method and processing device of program operation exception |
| CN106557415B (en) * | 2015-09-28 | 2019-05-03 | 北京国双科技有限公司 | The processing method and processing device that program is operating abnormally |
| CN106095914A (en) * | 2016-06-07 | 2016-11-09 | 四川长虹电器股份有限公司 | Unified error blog management method |
| CN107392682A (en) * | 2017-09-13 | 2017-11-24 | 沈阳东知科技有限公司 | A kind of customer information processing system and processing method by all kinds of means |
| CN107888424A (en) * | 2017-11-27 | 2018-04-06 | 凌云天博光电科技股份有限公司 | Warning information recognition methods and device, NMS |
| CN108710562A (en) * | 2018-05-10 | 2018-10-26 | 深圳市腾讯网络信息技术有限公司 | Merging method, device and the equipment of exception record |
| CN112685277A (en) * | 2020-12-31 | 2021-04-20 | 海光信息技术股份有限公司 | Warning information checking method and device, electronic equipment and readable storage medium |
| CN112685277B (en) * | 2020-12-31 | 2023-01-24 | 海光信息技术股份有限公司 | Warning information checking method and device, electronic equipment and readable storage medium |
| CN113157480A (en) * | 2021-04-23 | 2021-07-23 | Oppo广东移动通信有限公司 | Error information processing method, device, storage medium and terminal |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104216822B (en) | 2018-03-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104216822A (en) | Abnormal information processing method and device | |
| CN102129425B (en) | The access method of big object set table and device in data warehouse | |
| CN105183669A (en) | Data storage method and device | |
| CN103744628A (en) | SSTable file storage method and device | |
| CN104063458A (en) | Method and device for providing corresponding solution for terminal fault problem | |
| CN103077241A (en) | Method for loading data in parallel after splitting files | |
| CN105447167A (en) | Processing method and apparatus for node cache data in distributed system | |
| CN109299205B (en) | Method and device for warehousing spatial data used by planning industry | |
| CN105095391A (en) | Device and method for identifying organization name by word segmentation program | |
| EP3335380B1 (en) | Method and system for transaction diagnostics | |
| CN113010116A (en) | Data processing method and device, terminal equipment and readable storage medium | |
| CN114896641A (en) | Data verification method and device, electronic equipment and computer readable storage medium | |
| CN104599433A (en) | Indicator data monitoring method, device and server | |
| CN112783749A (en) | Static code scanning optimization method and device, electronic equipment and storage medium | |
| CN103678314A (en) | Mass data processing system, equipment and method based on association rule extraction | |
| CN109710626B (en) | Data warehousing management method and device, electronic equipment and storage medium | |
| CN104090924A (en) | Method and device for cleaning up privacy data | |
| CN111898759A (en) | Knowledge base updating method and device, electronic equipment and readable storage medium | |
| CN105553767A (en) | Website backdoor file detection method and device | |
| US20160019525A1 (en) | Classify mobile payment as records | |
| CN105224583A (en) | The method for cleaning of journal file and device | |
| CN105488166A (en) | Index establishing method and device | |
| CN112612865A (en) | Document storage method and device based on elastic search | |
| CN113821193A (en) | Information generation method and device and storage medium | |
| CN104462484A (en) | Data processing method, data processor and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| CP02 | Change in the address of a patent holder | ||
| CP02 | Change in the address of a patent holder |
Address after: 100083 No. 401, 4th Floor, Haitai Building, 229 North Fourth Ring Road, Haidian District, Beijing Patentee after: BEIJING GRIDSUM TECHNOLOGY Co.,Ltd. Address before: 100086 Cuigong Hotel, 76 Zhichun Road, Shuangyushu District, Haidian District, Beijing Patentee before: BEIJING GRIDSUM TECHNOLOGY Co.,Ltd. |
|
| PE01 | Entry into force of the registration of the contract for pledge of patent right | ||
| PE01 | Entry into force of the registration of the contract for pledge of patent right |
Denomination of invention: Abnormal information processing method and device Effective date of registration: 20190531 Granted publication date: 20180330 Pledgee: Shenzhen Black Horse World Investment Consulting Co.,Ltd. Pledgor: BEIJING GRIDSUM TECHNOLOGY Co.,Ltd. Registration number: 2019990000503 |
|
| PP01 | Preservation of patent right | ||
| PP01 | Preservation of patent right |
Effective date of registration: 20240604 Granted publication date: 20180330 |