CN104468193B - A kind of method for finding to be monitored operation system based on component - Google Patents
A kind of method for finding to be monitored operation system based on component Download PDFInfo
- Publication number
- CN104468193B CN104468193B CN201410632606.7A CN201410632606A CN104468193B CN 104468193 B CN104468193 B CN 104468193B CN 201410632606 A CN201410632606 A CN 201410632606A CN 104468193 B CN104468193 B CN 104468193B
- Authority
- CN
- China
- Prior art keywords
- component
- operation system
- address
- monitoring
- correlation model
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The present invention relates to areas of information technology more particularly to monitoring O＆M field, specifically a kind of method for finding to be monitored operation system based on component, show component including correlation model configuration component, modeling engine component and monitoring model, described correlation model configuration component is mainly responsible for the various assemblies of supporting business system from macroscopically being classified and configuration item is concluded, and providing bottom resource for component discovery technique supports；Modeling engine component is to find that algorithm finds each component of business application system and is associated automatically with component；Monitoring model shows mainly to carry out unifying externally to show to the topology monitoring model associated.The present invention is not only able to find operation system bottom hardware, form corresponding topological structure, the software layer effect that its bottom hardware plays between operation system can also be found, it is vertical to operation system from top to bottom, comprehensively monitoring is carried out from software to hardware, greatly improves monitoring intuitive and accuracy.
Description
[technical field]
It is specifically a kind of to find to calculate by component the present invention relates to areas of information technology more particularly to monitoring O＆M field
The method that method finds operation system topological structure to be monitored it automatically.
[background technology]
With the development of Internet technology, the operation system of all trades and professions is all excessive from C/S to B/S frameworks at this stage.It is right
For B/S operation systems, server delay machine, middleware program are exited, database is hung extremely, and business load is excessive, hardware system
The different failure of the different aspects such as failure can all cause operation system can not normal work directly affect the normal operation of enterprise.For
Ensure the daily operation of enterprise, people's generally use monitoring system obtains the real-time performance information of each system component and come at this stage
Judge the running situation of operation system, and set corresponding warning strategies to enter operation system according to the running situation of system
Row regular maintenance.
Under normal circumstances, the reason for influenceing operation system is complicated, and particularly one overall operation system of composition is past
Past is multiple different software and hardware components combinations, but at this stage, the monitoring to traditional business system is mainly opened up by network
The hardware device that algorithm finds data center is flutterred, this method unilateral can only be monitored in the single dimension of hardware device aspect, its
Monitored results be often it is isolated, relation that can not be between directviewing description operation system part software, nextport hardware component NextPort and they between
Association, once breaking down, can not intuitively obtain the real Producing reason of problem.
[content of the invention]
The present invention is in order to which the monitoring mode for isolating conventional monitoring systems integrally associates, and is analyzed from more fully dimension
Operation system failure cause, operation more finely, intuitively to business application system are assessed and analyzed.
To achieve these goals, a kind of method for finding to be monitored operation system based on component is designed, including is closed
Gang mould type configuration component, modeling engine component and monitoring model show component, and described correlation model configuration component is mainly born
Blame to the various assemblies of supporting business system from macroscopically being classified and configuration item is concluded, most bottom is provided for component discovery technique
Layer resource support；Modeling engine component is to find that algorithm finds each component of business application system and carried out automatically with component
Association；Monitoring model shows mainly to carry out unifying externally to show to the topology monitoring model associated, described specific method
It is as follows：
A. in correlation model configuration component, the basic configuration information of correlation model configuration component is recorded；
B. incoming traffic system ip address and configuration file bibliographic structure, by modeling engine component, with the operation system
IP address is the IP address and port numbers of each component of parameter auto-associating；
C. component node structures detection bag is built, detection bag is sent into LAN using UDP modes finds according to component
Algorithm is detected, and obtains the linked list of the ip addresses of whole operation system associated component, service type and positional distance；
D. after the completion of detecting, each component is associated according to position, forms topological structure；
E. after obtaining IP address linked list, using generalized routing protocol with scanning all IP in ip address lists
Location, and operating system situation all in IP address equipment is obtained, operating system keyword is extracted, and according to keyword model pair
Its resource type is divided, and the corresponding relation of IP address and resource type can be obtained after resource type division；
F. the resource type according to representated by IP address, the monitor control index of all kinds of resources is configured, it is more by multiple resources type
The correlation model that individual monitor control index combines；
G. the monitor control index configured to correlation model carries out rule setting, and during actual monitored, is drawn by model
The associated monitoring index that the acquisition engine included in component extracts resource in correlation model is held up, according to its reality in engine is handled
Monitoring rules carry out processing calculating to index and form Comprehensive State Graph；
H. in monitoring model shows component, correlation model is showed using the mode of topological diagram, while the model
Final monitoring situation will intuitively be identified in topological diagram.
Described component finds that algorithm is as follows：
In calculating network, each networking component is communicated by IP address, while each Component service of operation system is come
Say, each corresponding unique port of service, while be in tree structure between component and component in operation system, will not produce
Loop；
Under the premise of more than, we can regard an operation system inter-module relation as one comprising X node
Finite aggregate, it is unknown that X represents operation system component, understands in addition, in a tree-like incidence relation of operation system；
A. the component that offering customers service is most region be directly facing in this operation system is that have and only have in the incidence relation
The root node of one；
B. X is worked as>When 1, remaining node can be divided into N number of disjoint finite aggregate T1, T2... ... TN, each of which combination T
Itself it is the root node of a sub- topological structure again；
C. any one component nodes has corresponding serve port information, can be with positioning component software by port information
Layer process, so as to obtain specific software service information.
Described component finds that algorithm comprises the following steps that：
A. using operation system as root node from its over there；
B. adjust the distance and found for 1 IP address main frame, judge whether its IP address is operation system component；
C. if operation system component then inquires about its operation system particular content by port numbers and records its position pass
System；
D. if it is not, then continuing to find using the node as root node；
E. after complete network environment of traversal, the incidence relation between operation system, component will be obtained.
The present invention is compared with the existing technology：The component used in the present invention is found in algorithm and conventional monitoring systems automatically
The Network Topology Algorithm used is compared, and is not only able to find operation system bottom hardware, is formed corresponding topological structure,
The software layer effect that its bottom hardware plays between operation system can also be found, and can intuitively show industry using tree structure
Association situation between system bottom resource of being engaged in, it is vertical to operation system from top to bottom, carry out integrating prison from software to hardware
Control, greatly improve monitoring intuitive and accuracy.
[brief description of the drawings]
Fig. 1 is the schematic diagram of the method for the present invention；
The component that Fig. 2 is the present invention finds monitoring business network system realization flow chart；
Fig. 3 is correlation model configuration component classification schematic diagram in the present invention；
Specify Figure of abstract of the Fig. 1 as the present invention.
[embodiment]
The invention will be further described below in conjunction with the accompanying drawings, for the structure and principle of this device people professional to this
It is very clear.It should be appreciated that the specific embodiments described herein are merely illustrative of the present invention, it is not used to limit this
Invention.
It is a primary object of the present invention to solve the above problems, by component discovery technique, by the institute of supporting business system
There is component and incidence relation of software and hardware is vertically associated in the form of tree topology between it, and to overall operation situation
It is monitored and carrys out true cause caused by the running situation directly perceived for obtaining business application system and analysis failure.
Technical essential：
The invention mainly comprises three components：
Correlation model configuration component, modeling engine component and monitoring model show component.
Wherein correlation model configuration component is mainly responsible for the various assemblies of supporting business system from macroscopically classifying
Concluded with configuration item, the support of bottom resource is provided for component discovery technique；Modeling engine component is to find algorithm with component
The automatic each component for finding business application system is simultaneously associated；Monitoring model shows the topology monitoring mainly to having associated
Model carries out unification and externally showed.
Method：
1st, in correlation model configuration component, the basic configuration information of correlation model configuration component is recorded.
2nd, incoming traffic system ip address and configuration file bibliographic structure, by modeling engine component, with the operation system
IP address is the IP address and port numbers of each component of parameter auto-associating.
3rd, component node structures detection bag is built, detection bag is sent into LAN using UDP modes finds according to component
Algorithm is detected, and obtains the linked list of the ip addresses of whole operation system associated component, service type and positional distance.
3rd, after the completion of detecting, each component is associated according to position, forms topological structure.
4th, after obtaining IP address linked list, using generalized routing protocol with scanning all IP in ip address lists
Location, and operating system situation all in IP address equipment is obtained, operating system keyword is extracted, and according to keyword model pair
Its resource type is divided.The corresponding relation of IP address and resource type can be obtained after resource type division.
5th, the resource type according to representated by IP address, the monitor control index of all kinds of resources is configured, it is more by multiple resources type
The correlation model that individual monitor control index combines.
6th, the monitor control index configured to correlation model carries out rule setting, and during actual monitored, is drawn by model
The associated monitoring index that the acquisition engine included in component extracts resource in correlation model is held up, according to its reality in engine is handled
Monitoring rules carry out processing calculating to index and form Comprehensive State Graph.
7th, in monitoring model shows component, correlation model is showed using the mode of topological diagram, while the model
Final monitoring situation will intuitively be identified in topological diagram.
The component used in the present invention finds that the premise of algorithm is based on logical knowledge, in calculating network, each networking component automatically
Communicated by IP address, while for each Component service of operation system, each corresponding unique port of service.Simultaneously
Between component and component it is in tree structure in operation system, loop will not be produced.
Under the premise of more than, regard an operation system inter-module relation as a finite aggregate for including X node.(X
It is unknown to represent operation system component) understand in addition, in a tree-like incidence relation of operation system：
1) component that offering customers service is most region be directly facing in this operation system is that have and only have in the incidence relation
The root node of one.
2) X is worked as>When 1, remaining node can be divided into N number of disjoint finite aggregate T1, T2 ... ... TN, each of which combination T
Itself it is the root node of a sub- topological structure again.
3) any one component nodes has corresponding serve port information, can be with positioning component software by port information
Layer process, so as to obtain specific software service information.
The arthmetic statement is as follows：
1st, using operation system as root node from its over there
2nd, adjust the distance and found for 1 IP address main frame, judge whether its IP address is operation system component
3rd, if operation system component then inquires about its operation system particular content by port numbers and records its position pass
System
4th, if it is not, then continuing to find using the node as root node
5th, after complete network environment of traversal, the incidence relation between operation system, component will be obtained.
Node type structures
In correlation model configuration component, the related all resources of business application system are selected from CMDB manually, and select
The monitor control index of related resource is selected, the relevance configured between resource forms correlation model.The correlation model is with the side of topological diagram
Formula identifies.
After the completion of mark, the threshold rule of the correlation model index of correlation is configured in modeling engine component, treats regular life
After effect, by handling engine COMPREHENSIVE CALCULATING rule warning information after the completion of by acquisition engine, monitor control index is gathered, then will alarm
Presentation of information via component exhibiting to being shown on topological diagram.
1st, in correlation model configuration component, the basic configuration information of correlation model configuration component is recorded.
The classification of correlation model configuration component is substantially as shown in Figure 3：
The corresponding resource type of correlation model configuration component classification
2nd, incoming traffic system ip address and configuration file bibliographic structure, by modeling engine component, with the operation system
IP address is the IP address and port numbers of each component of parameter auto-associating.
Component liaison form is described in table 2 below：
| Field name | Type | Example value |
| Component IP | IPADDR | xxx.xxx.xxx.xxx |
| Port numbers | Integer | 8080 |
| Resource type | Character type | Middleware |
3rd, component node structures detection bag is built, detection bag is sent into LAN using UDP modes finds according to component
Algorithm is detected, and obtains the linked list of the ip addresses of whole operation system associated component, service type and positional distance.
Component liaison is listed as follows shown in table 3：
| Field name | Type | Example value |
| IP address | IPADDR | xxx.xxx.xxx.xxx |
| Service type | Character type | Weblogic |
| Distance | Integer | 1 |
4th, after obtaining IP address linked list, using generalized routing protocol with scanning all ip in ip address lists
Location, and operating system situation all in IP address equipment is obtained, operating system keyword is extracted, and according to keyword model pair
Its resource type is divided.
Keyword model is as follows：
5th, in correlation model configuration component, according to the resource type representated by ip addresses, the monitoring of all kinds of resources is configured
Index, the correlation model combined by the multiple monitor control indexs of multiple resources type.
Correlation model is as follows：
6th, in modeling engine component, the monitor control index configured to correlation model carries out rule setting, and in actual prison
During control, the associated monitoring index of resource in correlation model is extracted by the acquisition engine included in modeling engine component, is being located
Processing calculating is carried out to index according to its actual monitoring rules in reason engine and forms Comprehensive State Graph.
Comprehensive state graph structure and example are as follows
7th, in monitoring model shows component, correlation model is showed using the mode of topological diagram, while the model
Final monitoring situation will intuitively be identified in topological diagram.
Claims (3)
- A kind of 1. method for finding to be monitored operation system based on component, it is characterised in that the component that described method uses Show component, described correlation model configuration component including correlation model configuration component, modeling engine component and monitoring model It is main to be responsible for putting forward the various assemblies of supporting business system for component discovery technique from macroscopically being classified and configuration item is concluded Supported for bottom resource；Modeling engine component is to find that algorithm finds that each component of operation system is gone forward side by side automatically with component Row association；Monitoring model shows mainly to carry out unifying externally to show to the topology monitoring model associated, described method tool Body is as follows：A. in correlation model configuration component, the basic configuration information of correlation model configuration component is recorded；B. incoming traffic system ip address and configuration file bibliographic structure, by modeling engine component, with operation system IP Location is the IP address and port numbers of each component of parameter auto-associating；C. component node structures detection bag is built, will detect bag using UDP modes is sent to LAN according to component discovery algorithm Detected, obtain the linked list of the IP address of whole operation system associated component, service type and positional distance；D. after the completion of detecting, each component is associated according to position, forms topological structure；E. after the linked list for obtaining IP address, service type and positional distance, using generalized routing protocol with scanning IP All IP address in the list of location, and operating system situation all in IP address equipment is obtained, operating system keyword is extracted, And its resource type is divided according to keyword model, it can obtain IP address and resource type after resource type division Corresponding relation；F. the resource type according to representated by IP address, the monitor control index of all kinds of resources is configured, by multiple resources type and multiple Monitor control index combination forms correlation model；G. the monitor control index configured to correlation model carries out rule setting, and during actual monitored, by modeling engine group The acquisition engine included in part extracts the associated monitoring index of resource in correlation model, according to its actual monitored in engine is handled Rule carries out processing calculating to index and forms Comprehensive State Graph；H. in monitoring model shows component, correlation model is showed using the mode of topological diagram, while the model is final Monitoring situation will intuitively be identified in topological diagram.
- A kind of 2. method for finding to be monitored operation system based on component as claimed in claim 1, it is characterised in that institute The component stated finds that algorithm is as follows：In calculating network, each networking component is communicated by IP address, while for each Component service of operation system, often The individual corresponding unique port of service, while be in tree structure between component and component in operation system, loop will not be produced；Under the premise of more than, regard an operation system inter-module relation as a finite aggregate for including X node, X is represented Operation system component is unknown, understands in addition, in a tree-like incidence relation of operation system：A. the component that offering customers service is most region be directly facing in this operation system is one and only one in the incidence relation Root node；B. X is worked as>When 1, remaining node can be divided into N number of disjoint finite aggregate T1, T2... ... TN, each of which finite aggregate T sheets Body is the root node of a sub- topological structure again；C. any one component nodes has corresponding serve port information, can be entered by port information with positioning component software layer Journey, so as to obtain specific software service information.
- A kind of 3. method for finding to be monitored operation system based on component as claimed in claim 1 or 2, it is characterised in that Described component finds that algorithm comprises the following steps that：A. using operation system as root node from its over there；B. adjust the distance and found for 1 IP address main frame, judge whether its IP address is operation system component；C. if operation system component then inquires about its operation system particular content by port numbers and records its position relationship；D. if it is not, then continuing to find using the node as root node；E. after complete network environment of traversal, the incidence relation between operation system, component will be obtained.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410632606.7A CN104468193B (en) | 2014-11-11 | 2014-11-11 | A kind of method for finding to be monitored operation system based on component |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410632606.7A CN104468193B (en) | 2014-11-11 | 2014-11-11 | A kind of method for finding to be monitored operation system based on component |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104468193A CN104468193A (en) | 2015-03-25 |
| CN104468193B true CN104468193B (en) | 2018-03-30 |
Family
ID=52913604
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410632606.7A Active CN104468193B (en) | 2014-11-11 | 2014-11-11 | A kind of method for finding to be monitored operation system based on component |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104468193B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105227405B (en) * | 2015-10-16 | 2018-12-04 | 中国工商银行股份有限公司 | monitoring method and system |
| CN106230636A (en) * | 2016-08-05 | 2016-12-14 | 成都酉辰科技有限公司 | Radio monitoring net whole network equipment monitoring system |
| CN106375120B (en) * | 2016-08-31 | 2019-07-23 | 杭州东方通信软件技术有限公司 | A kind of IT infrastructure rapid topology method and device |
| CN109218063B (en) * | 2017-07-07 | 2022-05-20 | 中兴通讯股份有限公司 | Method and device for displaying network topology |
| CN108363785A (en) * | 2018-02-12 | 2018-08-03 | 平安科技（深圳）有限公司 | Data relationship methods of exhibiting, device, computer equipment and storage medium |
| CN109918116B (en) * | 2019-03-12 | 2022-05-27 | 中国工商银行股份有限公司 | Operation and maintenance object supporting method and system |
| CN110837453B (en) * | 2019-11-01 | 2023-09-01 | 山东中创软件商用中间件股份有限公司 | Method and related device for monitoring document exchange platform |
| CN113312337A (en) * | 2021-06-24 | 2021-08-27 | 中国农业银行股份有限公司 | Construction method and device of application configuration model |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102752142A (en) * | 2012-07-05 | 2012-10-24 | 深圳市易聆科信息技术有限公司 | Monitoring method and system based on multidimensional modeled information system |
| CN103166794A (en) * | 2013-02-22 | 2013-06-19 | 中国人民解放军91655部队 | Information security management method with integration security control function |
| CN103532780A (en) * | 2013-10-11 | 2014-01-22 | 北京有度致远信息科技股份有限公司 | Operation and maintenance monitoring integral system and integral monitoring method used in IT (information technology) field |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CA2824938C (en) * | 2013-03-25 | 2022-10-04 | Sandvine Incorporated Ulc | System and method for subscriber aware network monitoring |
-
2014
- 2014-11-11 CN CN201410632606.7A patent/CN104468193B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102752142A (en) * | 2012-07-05 | 2012-10-24 | 深圳市易聆科信息技术有限公司 | Monitoring method and system based on multidimensional modeled information system |
| CN103166794A (en) * | 2013-02-22 | 2013-06-19 | 中国人民解放军91655部队 | Information security management method with integration security control function |
| CN103532780A (en) * | 2013-10-11 | 2014-01-22 | 北京有度致远信息科技股份有限公司 | Operation and maintenance monitoring integral system and integral monitoring method used in IT (information technology) field |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104468193A (en) | 2015-03-25 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104468193B (en) | A kind of method for finding to be monitored operation system based on component | |
| WO2022083576A1 (en) | Analysis method and apparatus for operating data of network function virtualization device | |
| CN109644141A (en) | Method and system for visual network | |
| WO2017101301A1 (en) | Data information processing method and device | |
| CN109376532A (en) | Power network security monitoring method and system based on the analysis of ELK log collection | |
| CN106375120B (en) | A kind of IT infrastructure rapid topology method and device | |
| US20140189086A1 (en) | Comparing node states to detect anomalies | |
| CN108200111B (en) | Resource configuration information updating method and device and resource interface equipment | |
| CN102752142B (en) | A kind of method for supervising of the information system based on Conceptual Modeling and supervisory control system | |
| CN107958337A (en) | A kind of information resources visualize mobile management system | |
| US10257060B2 (en) | Rendering application log data in conjunction with system monitoring | |
| CN107612787A (en) | A kind of cloud hostdown detection method for cloud platform of being increased income based on Openstack | |
| CN104615658A (en) | Method for confirming user identity | |
| CN113542074B (en) | Method and system for visually managing east-west network flow of kubernets cluster | |
| CN102427445A (en) | Safe auditing method of IT simulation infrastructure offline compliance | |
| CN103795707A (en) | Enterprise network security automation testing system and method | |
| CN103049365B (en) | Information and application resource running state monitoring and evaluation method | |
| CN103744897A (en) | Associated search method and associated search system for fault information, and network management system | |
| CN104852887A (en) | Network flow tracing system and method based on OpenFlow technology | |
| CN103944763A (en) | Network-assistant management system and method of electrical power system | |
| US20220329488A1 (en) | Automated generation of standard network device configurations | |
| CN108810053A (en) | Internet of things application processing method and internet of things application system | |
| CN107360271B (en) | Method, system and equipment for acquiring network equipment information and automatically segmenting IP address | |
| CN104852816A (en) | Intrusion detection system (IDS) intelligent warning method | |
| CN109670599A (en) | A kind of SDN application and identification method based on deep learning |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |