CN106034051A - Network monitoring data processing method and network monitoring data processing device - Google Patents

Network monitoring data processing method and network monitoring data processing device Download PDF

Info

Publication number
CN106034051A
CN106034051A CN201510108771.7A CN201510108771A CN106034051A CN 106034051 A CN106034051 A CN 106034051A CN 201510108771 A CN201510108771 A CN 201510108771A CN 106034051 A CN106034051 A CN 106034051A
Authority
CN
China
Prior art keywords
monitoring data
time window
information
warning information
access relation
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201510108771.7A
Other languages
Chinese (zh)
Other versions
CN106034051B (en
Inventor
梁定安
聂鑫
曹凤龙
黄兆鹏
霍特
杨波
陶凛然
赵子青
黄伟俊
黄浩宇
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Tencent Technology Shenzhen Co Ltd
Tencent Cloud Computing Beijing Co Ltd
Original Assignee
Tencent Technology Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Tencent Technology Shenzhen Co Ltd filed Critical Tencent Technology Shenzhen Co Ltd
Priority to CN201510108771.7A priority Critical patent/CN106034051B/en
Publication of CN106034051A publication Critical patent/CN106034051A/en
Application granted granted Critical
Publication of CN106034051B publication Critical patent/CN106034051B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention provides a network monitoring data processing method and a network monitoring data processing device. The method comprises: monitoring data including monitoring information and warning information as well as an access relation link are obtained; before the warning information is obtained, all monitoring data in a time window where a point in time of warning information generation is located are obtained; according to architecture layer information corresponding to all monitoring data in the time window, all monitoring data in the time window are associated to the access relation link; on the basis of the access relation link and monitoring types of all monitoring data in the time window, an association analysis is carried out on all monitoring data in the time window to obtain original warning information; and according to the original warning information and the access relation link, information convergence is carried out on the warning information in the time window, thereby obtaining the convergent warning information. According to the embodiment of the invention, warning data of an original isolated monitoring point can be reduced effectively; and the warning precision is improved and discovery time for a problem is shortened.

Description

Network monitoring data processing method and network monitoring data processing means
Technical field
The present invention relates to networking technology area, particularly to a kind of network monitoring data processing method and network prison Control data processing equipment.
Background technology
Increasingly extensive along with the constantly progressive of Internet technology and internet, applications, the internetworking to the Internet Can be monitored, with timely awareness network fault and fault is got rid of or to optimizing network performance, It has been an important content of internet communication.In current network monitoring scheme, relate generally to user side Monitoring, service end monitoring and access relation monitor three kinds.
The monitoring of user side is the monitoring technology of a kind of test network availability, such as by ping technology to purpose Domain name/IP address sends the packet of definable size, the time delay returned by the other side and TTL (Time To Live, life span) information analyzes connectedness and the time delay of network between user side self and the other side;Pass through Traceroute technology detection user side to service end the gateway of process and time delay, thus judge user side self Connectedness with bipartite network, it is possible to the result returned based on traceroute learns the link that fault occurs; By nslookup technology, the domain name of service end is resolved, it is thus achieved that this domain name all of IP (Internet Protocol, the agreement of interconnection between network) list and the DNS of self (Domain Name System, territory Name system) address, to judge the probability that address is kidnapped.
Service end monitoring is divided into automatic test and intermodule to call test two kinds.Automatic test is applied to WEB layer, is the black box protocol level test carrying out tested object, by constructing or simulating measurand Input, receives or verifies the output of measurand, test output result and the predictability of input relation.Mould Call between block test be based primarily upon WEB layer to logical layer, logical layer to logical layer, logical layer to data Layer this 3 kinds of scenes, utilize the service having call relation each other, embedding data in actively initiating call request equation Report API (Application Programming Interface, application programming interface), will call by The key messages such as the success rate of tune side's service, time delay, IP report, and realize the success called between monitoring module Rate or time delay are abnormal.
Access relation monitoring is the network foundation communicated based on IP based on the Internet or mobile Internet, by grabbing Taking the IP of service end-to-end and the access relation of port, this access relation have recorded annexation and the company of service Connect port, reflect whole the Internet or the topological connection relation of mobile Internet network request.
Network state can be monitored by these three monitor mode from a side, but accuracy is the lowest: User side monitoring and service end monitoring are all to pay close attention to monitored results, can only reflect whether test result conforms to Ask;The topological connection relation of whole network request process can be clearly fed back in access relation monitoring, but cannot The generation point of orientation problem from root.
Summary of the invention
Based on this, the purpose of the embodiment of the present invention is to provide a kind of network monitoring data processing method and network Monitoring data processing equipment, it can promote alarm accuracy.
For reaching above-mentioned purpose, the embodiment of the present invention by the following technical solutions:
A kind of network monitoring data processing method, including step:
Obtaining monitoring data and access relation link, described supervision packet includes monitoring information and warning information;
When getting warning information, obtain owning in the time point place time window that this warning information occurs Monitoring data;
According to the framework layer information that each monitoring data in described time window are corresponding, each by described time window Monitoring data association is to described access relation link;
Monitoring type according to each monitoring data in described access relation link, described time window is to time described Between each control data in window be associated analyzing, it is thus achieved that original alarm information;
According to described original alarm information, described access relation link, the warning information in described time window is entered Row information restrains, it is thus achieved that the warning information after convergence.
A kind of network monitoring data processing means, including:
Data acquisition module, is used for obtaining monitoring data and access relation link, and described supervision packet includes Monitoring information and warning information;
Time window monitoring data acquisition module, is used for when described data acquisition module gets warning information, Obtain all monitoring data in the time point place time window that this warning information occurs;
Relating module, for the framework layer information corresponding according to each monitoring data in described time window, by institute State each monitoring data association in time window to described access relation link;
Analyze module, for according to each prison monitoring data in described access relation link, described time window Each control data in described time window are associated analyzing by control type, it is thus achieved that original alarm information;
Convergence module, is used for according to described original alarm information, described access relation link described time window Interior warning information carries out information convergence, it is thus achieved that the warning information after convergence.
According to the scheme of the embodiment of the present invention as above, it is to obtain monitoring data from each monitoring system After, when receiving warning information, utilize choosing of access relation and time window, prison that will be originally isolated Control data associate, and combined with access relation is associated analyzing, it is thus achieved that original alarm information is also entered accordingly Row information restrains, and can effectively reduce the alarm data of original isolated control point, and can improve alarm Degree of accuracy, the discovery time of acceleration problem.
Accompanying drawing explanation
Fig. 1 is the working environment schematic diagram of the present invention program in an embodiment;
Fig. 2 is the composition structural representation of server in an embodiment;
Fig. 3 is the schematic flow sheet of the network monitoring data processing method in an embodiment;
Fig. 4 is the topological structure schematic diagram of the network access relation in a concrete example;
Fig. 5 is access relation link schematic diagram based on the topological structure shown in Fig. 4;
Fig. 6 is control point and the alarm point of each node in an example in the access relation link shown in Fig. 5 Schematic diagram;
Fig. 7 is the schematic diagram of the warning information in a time window of an access relation link;
Fig. 8 is the schematic diagram after the warning information convergence shown in Fig. 7;
Fig. 9 is the principle schematic of a concrete example neutral body monitoring scheme;
Figure 10 is the structural representation of the network monitoring data processing means in an embodiment.
Detailed description of the invention
For making the purpose of the present invention, technical scheme and advantage clearer, below in conjunction with accompanying drawing and enforcement Example, is described in further detail the present invention.Should be appreciated that detailed description of the invention described herein Only in order to explain the present invention, do not limit protection scope of the present invention.
Fig. 1 shows the working environment schematic diagram in one embodiment of the invention.Terminal 101, terminal 102, clothes It is mutual that business device 100 carries out information by network, such as between terminal 101 and terminal 102, terminal 101 with service Between device 100, to carry out information between terminal 102 and server 100 mutual.Wherein, terminal 101 and terminal 102 Between can be carried out by server 100 alternately, it is also possible to carried out by other server.Server 100 Information between terminal 101 and terminal 102 can be monitored alternately, simultaneously also to server 100 and terminal Information between 101, between server 100 and terminal 102 is monitored alternately, additionally, server 100 is also Can be the monitoring of terminal 101,102 offer user side, such as terminal 101 can send ping to server 100 Instructing with the connectedness between detecting terminal 101 and server 100 and time delay situation, server 100 returns to terminal The ping command response returned can be saved on this server 100, is analyzed network condition for follow-up. It addition, server 100 may be provided for other various possible monitor modes, the most above-mentioned background section The service end monitoring mentioned and access relation monitor.Embodiment of the present invention scheme refers to for server 100 The each treatment technology monitoring data obtained, the program can be embodied on this server 100, it is also possible to It is implemented on other equipment, as long as being obtained in that relevant monitoring data.
Applying as a example by above-mentioned server 100 by embodiment of the present invention scheme, Fig. 2 shows in an embodiment The structural representation of this server.As in figure 2 it is shown, this server include being connected by system bus processor, Supply module, storage medium, internal memory and communication interface.Wherein, the storage medium storage of server has operation System, data base and a kind of network monitoring data processing means, this device is used for realizing a kind of network monitoring number According to processing method.The communication interface of server for terminal 101,102 and other network equipments or server It is attached and communicates.
In conjunction with the schematic diagram shown in Fig. 1, Fig. 2, below to network monitoring data processing method and network monitoring number Illustrate according to each embodiment of processing means.
Fig. 3 shows the schematic flow sheet of the network monitoring data processing method in an embodiment.Such as Fig. 3 Shown in, the method in the present embodiment includes step:
Step S301: obtaining monitoring data and access relation link, described supervision packet includes monitoring information And warning information;
Step S302: when getting warning information, obtains the time point place time that this warning information occurs All monitoring data in window;
Step S303: according to the framework layer information that each monitoring data in described time window are corresponding, by time described Between each monitoring data association in window to described access relation link;
Step S304: according to each monitoring class monitoring data in described access relation link, described time window Each monitoring data in described time window are associated analyzing by type, it is thus achieved that original alarm information;
Step S305: according to described original alarm information, described access relation link in described time window Warning information carries out information convergence, it is thus achieved that the warning information after convergence.
According to the scheme of the embodiment of the present invention as above, it is to obtain monitoring data from each monitoring system After, when receiving warning information, utilize choosing of access relation and time window, prison that will be originally isolated Control data associate, and combined with access relation is associated analyzing, it is thus achieved that original alarm information is also entered accordingly Row information restrains, and can effectively reduce the alarm data of original isolated control point, and can improve alarm Degree of accuracy, the discovery time of acceleration problem.
Wherein, above-mentioned time window can be set based on being actually needed.In a concrete example, permissible Choosing time of described time point is time window in front and time at the time range of rear each timeslice.One The concrete duration scope of individual timeslice, can be set in conjunction with being actually needed.
Owing to when network monitoring, the type of each monitoring data can be different, and some warning information is base Cause in original alarm information, therefore, above-mentioned be associated analyze time, can be to use following each mode Any one of carry out:
According to monitoring data type, by described time window corresponding to current type monitoring data in, time Between preceding warning information be defined as original alarm information;
According to monitoring data type, by described time window corresponding to current type monitoring data in, position Warning information in the relational link bottom of each access relation link is defined as original alarm information;
According to the type of described monitoring data, by monitoring data corresponding to current type in described time window, It is positioned at relational link bottom and time preceding warning information is defined as original alarm information.
Network monitoring data processing method based on the embodiment of the present invention as above.Below in conjunction with therein Concrete example carries out illustrated in greater detail.In following exemplary illustration, first monitoring data and access are closed Tethers explains.
As it has been described above, current various network monitoring systems can be carried out for the Internet or mobile Internet Difference stresses direction, the monitoring of different monitoring type, thus obtains various monitoring data, and these monitor data Include monitoring information and warning information.For some of them monitoring type, may only monitor information And no alarm information, and for some monitoring type, existing monitoring information may have again warning information. The such as monitoring information of change daily record just only change, but these monitoring information are likely to be and certain of its place Certain warning information in individual time window is associated.Therefore, in the scheme of the embodiment of the present invention, prison Control information and warning information are required for paying close attention to.
In embodiment of the present invention scheme when realizing, first need to obtain monitoring from the monitoring system that each are different Data, supervision packet here has included monitoring information and warning information.Obtaining from variant monitoring system When taking monitoring data, different calling can be used from accordingly to monitor system based on the difference of each monitoring system System obtains.Meanwhile, need to obtain access relation link from corresponding monitoring system, access relation link reflects Whole the Internet or the topological connection relation of mobile Internet network request.
Based on this, Fig. 4 shows the topological structure schematic diagram of network access relation in a concrete example, It is an original access relation topological diagram.Based on this topological structure, the conversion to its relation that conducts interviews, The access relation link schematic diagram obtained is as it is shown in figure 5, it includes 3 access relation link: Yi Tiaobao Included WEB layer, logical layer 1, Cache1, data Layer 1, one include WEB layer, logical layer 2, Cache layer 1, data Layer 1, other one includes WEB layer, logical layer 1, Cache layer 2, data Layer 2.
In each access relation link, each node can be respectively only some control points and alarm point, To monitor accordingly, the control point of each node in each access relation link shown in Fig. 5 and alarm point Schematic diagram as shown in Figure 6.In shown in Fig. 6, solid black round dot represents original alarm point, soft dot Represent association other alarm, other such as square, rectangle, triangle, parallelogram, ellipse Shape represents different types of control point respectively, such as, can represent hard-disk capacity monitoring, process monitoring, return Code monitoring, intermodule call monitoring, other monitoring etc., certainly, based on actual monitored demand, it is also possible to Having the monitoring of other greater number types, this is not limited by the embodiment of the present invention.
After obtaining monitoring data from each monitoring system, when getting warning information, obtain this warning information All monitoring data in the time point place time window occurred, this time window is to exist the time of described time point Before and the time at the time range of rear each timeslice.As a example by a length of 5 minutes of timeslice, if should The time point that warning information occurs is 11:00, then selected time window is 10:55-11:05, if this alarm letter The time point that breath occurs is 11:02, then selected time window is 10:57-11:07.
After all monitoring data in time window in obtaining this time window, i.e. can be based on these monitoring data Corresponding framework layer information, by each monitoring data association in this time window to each access relation link.By It is all to report module (joint from single ip address in each monitoring data (including monitoring information and warning information) Point), and send after collecting in units of module, and on the Naming conventions of module, can with framework layer information, And framework layer information can therefore, it can realize the most easily with one_to_one corresponding to accessing on relational link Each monitoring data associate with access relation link.One of Article 1 access relation link shown in Fig. 6 The schematic diagram of the warning information in time window is not as it is shown in fig. 7, for the purpose of concise description, have in Fig. 7 Other kinds of monitoring information is shown.
Can see from Fig. 7, based on existing alarm logic, in this time window, 10 alarms can be sent altogether Information, but substantially, the root producing warning information is the original alarm that data Layer 1 produces, due to Interdependence effect between business, other 9 alarms are actually made in the relatedness of this original alarm With lower generation.Due to day by day strengthening and type of service increasing of business association, this due to The number of associated alarm produced by business association also can be huger, and current alarm logic does not only have These warning information are associated, and along with quantity huge, to the row of alarm problem of warning information Look into and also bring difficulty.
And based on the application scheme, all monitoring data associations in selected time window are closed to accessing Behind tethers road, can be based on this access relation link and the incidence relation of variant type service, to each visit Ask that the monitoring data on relational link are associated analyzing, find out original alarm information, shown in Fig. 7 Solid black round dot in data Layer 1 i.e. represents original alarm information.When being associated analyzing, simple one For Dian, for same type of business, following manner can be used to determine original alarm information:
One way in which, can be the type according to monitoring data, current by corresponding in described time window In the monitoring data of type, time preceding warning information be defined as original alarm information;
Another way, can be the type according to monitoring data, will correspond to current class in described time window In the monitoring data of type, the warning information of the relational link bottom that is positioned at each access relation link be defined as original Warning information;
Yet another approach, can be the type according to monitoring data, will correspond to current class in described time window In the monitoring data of type, it is positioned at relational link bottom and time preceding warning information is defined as original alarm letter Breath.
But, those skilled in the art know, based on known access relation link and each type of service Difference, the incidence relation between warning information and the monitoring information of variant type service may district Not, different kinds of business monitors data can be analyzed to use different association analysis modes, this This is not specifically limited by bright embodiment.
After association analysis goes out original alarm information, can based on this original alarm information in this time window its The warning information that this type of service in the access relation link at place is relevant carries out information convergence, it is thus achieved that convergence After warning information.Concrete then can be only to retain the original alarm information determined, and by association other Warning information proposes.The schematic diagram of the warning information after convergence as shown in Figure 8, as seen from Figure 8, to alarm After information convergence, only remain original alarm information, thus greatly reduce alarm amount, in conjunction with above-mentioned alarm Information associates with access relation link, such that it is able to promote the degree of accuracy of alarm energetically, accelerates alarm problem Discovery time.
By foregoing it is known that embodiment of the present invention scheme is actually based on what access relation was carried out Three-dimensional monitors, and accordingly, Fig. 9 shows the principle schematic of a concrete example neutral body monitoring scheme. Schematic diagram in conjunction with Fig. 9 is visible, and the application scheme is will to be originally dispersed in each framework layer by access relation Monitoring data according to regular hour window sequence integration, it is achieved that the association between individual monitoring data, thus Can be derived that monitoring alarm source the most accurately, it is achieved accurate associated alarm, reduce alarm amount, improve Alarm degree of accuracy.
Based on the thought identical with network monitoring data processing method as above, the embodiment of the present invention also carries For a kind of network monitoring data processing means.Figure 10 shows at the network monitoring data in an embodiment The structural representation of reason device.
As shown in Figure 10, the network monitoring data processing means in the present embodiment includes:
Data acquisition module 1001, is used for obtaining monitoring data and access relation link, described monitoring data Including monitoring information and warning information;
Time window monitoring data acquisition module 1002, for getting warning information at data acquisition module 1001 Time, obtain all monitoring data in the time point place time window that this warning information occurs;
Relating module 1003, for the framework layer information corresponding according to each monitoring data in described time window, By each monitoring data association in described time window to described access relation link;
Analyze module 1004, for according to respectively monitoring data in described access relation link, described time window Monitoring type be associated analyzing to each control data in described time window, it is thus achieved that original alarm information;
Convergence module 1005, is used for according to described original alarm information, described access relation link time described Between warning information in window carry out information convergence, it is thus achieved that the warning information after convergence.
According to the scheme of the embodiment of the present invention as above, it is to obtain monitoring data from each monitoring system After, when receiving warning information, utilize choosing of access relation and time window, prison that will be originally isolated Control data associate, and combined with access relation is associated analyzing, it is thus achieved that original alarm information is also entered accordingly Row information restrains, and can effectively reduce the alarm data of original isolated control point, and can improve alarm Degree of accuracy, the discovery time of acceleration problem.
Wherein, above-mentioned time window can be set based on being actually needed.In a concrete example, permissible Choosing time of described time point is time window in front and time at the time range of rear each timeslice.One The concrete time span of individual timeslice, can be set in conjunction with being actually needed, for example, it can be set to be 5 points Clock or other times.
Owing to when network monitoring, the type of each monitoring data can be different, and some warning information is base Cause in original alarm information, therefore, all monitoring data associations in selected time window are arrived After access relation link, can based on this access relation link and the incidence relation of variant type service, It is associated the monitoring data on each access relation link analyzing, finds out original alarm information.Therefore, Analysis module 1004 is when being associated analyzing, simply for a bit, for same type of business, permissible Use following each mode to determine original alarm information:
One way in which, analyzing module 1004 can be the type according to monitoring data, by described time window In corresponding to current type monitoring data in, time preceding warning information be defined as original alarm information;
Another way, analyzing module 1004 can be the type according to monitoring data, by described time window Corresponding in the monitoring data of current type, be positioned at each access relation link relational link bottom alarm letter Breath is defined as original alarm information;
Yet another approach, analyzing module 1004 can be the type according to monitoring data, by described time window Corresponding in the monitoring data of current type, be positioned at relational link bottom and time preceding warning information determines For original alarm information.
But, those skilled in the art know, based on known access relation link and each type of service Difference, the incidence relation between warning information and the monitoring information of variant type service may district Not, different kinds of business monitors data can be analyzed to use different association analysis modes, this This is not specifically limited by bright embodiment.
One of ordinary skill in the art will appreciate that all or part of flow process realizing in above-described embodiment method, Can be by computer program and complete to instruct relevant hardware, described program can be stored in a calculating In machine read/write memory medium, this program is upon execution, it may include such as the flow process of the embodiment of above-mentioned each method. Wherein, described storage medium can be magnetic disc, CD, read-only store-memory body (Read-Only Memory, Or random store-memory body (Random Access Memory, RAM) etc. ROM).
Each technical characteristic of embodiment described above can combine arbitrarily, for making description succinct, the most right The all possible combination of each technical characteristic in above-described embodiment is all described, but, if these skills There is not contradiction in the combination of art feature, is all considered to be the scope that this specification is recorded.
Embodiment described above only have expressed the several embodiments of the present invention, and it describes more concrete and detailed, But can not therefore be construed as limiting the scope of the patent.It should be pointed out that, for this area For those of ordinary skill, without departing from the inventive concept of the premise, it is also possible to make some deformation and change Entering, these broadly fall into protection scope of the present invention.Therefore, the protection domain of patent of the present invention should be with appended power Profit requires to be as the criterion.

Claims (10)

1. a network monitoring data processing method, it is characterised in that include step:
Obtaining monitoring data and access relation link, described supervision packet includes monitoring information and warning information;
When getting warning information, obtain owning in the time point place time window that this warning information occurs Monitoring data;
According to the framework layer information that each monitoring data in described time window are corresponding, each by described time window Monitoring data association is to described access relation link;
Monitoring type according to each monitoring data in described access relation link, described time window is to time described Between each monitoring data in window be associated analyzing, it is thus achieved that original alarm information;
According to described original alarm information, described access relation link, the warning information in described time window is entered Row information restrains, it is thus achieved that the warning information after convergence.
Network monitoring data processing method the most according to claim 1, it is characterised in that described time Window be the time of described time point in front and time at the time range of rear each timeslice.
Network monitoring data processing method the most according to claim 1 and 2, it is characterised in that described The mode of association analysis includes: according to the type of monitoring data, will correspond to current type in described time window Monitoring data in, time preceding warning information be defined as original alarm information.
Network monitoring data processing method the most according to claim 1 and 2, it is characterised in that described The mode of association analysis includes: according to the type of monitoring data, will correspond to current type in described time window Monitoring data in, the warning information of the relational link bottom that is positioned at each access relation link be defined as original announcement Alarming information.
Network monitoring data processing method the most according to claim 1 and 2, it is characterised in that described The mode of association analysis includes: according to the type of described monitoring data, current by corresponding in described time window In the monitoring data of type, it is positioned at relational link bottom and time preceding warning information is defined as original alarm Information.
6. a network monitoring data processing means, it is characterised in that including:
Data acquisition module, is used for obtaining monitoring data and access relation link, and described supervision packet includes Monitoring information and warning information;
Time window monitoring data acquisition module, is used for when described data acquisition module gets warning information, Obtain all monitoring data in the time point place time window that this warning information occurs;
Relating module, for the framework layer information corresponding according to each monitoring data in described time window, by institute State each monitoring data association in time window to described access relation link;
Analyze module, for according to each prison monitoring data in described access relation link, described time window Each control data in described time window are associated analyzing by control type, it is thus achieved that original alarm information;
Convergence module, is used for according to described original alarm information, described access relation link described time window Interior warning information carries out information convergence, it is thus achieved that the warning information after convergence.
Network monitoring data processing means the most according to claim 6, it is characterised in that described time Window be the time of described time point in front and time at the time range of rear each timeslice.
8. according to the network monitoring data processing means described in claim 6 or 7, it is characterised in that described Analyze module according to monitoring data type, by described time window corresponding to current type monitoring data in, Time, preceding warning information was defined as original alarm information.
9. according to the network monitoring data processing means described in claim 6 or 7, it is characterised in that described Analyze module according to monitoring data type, by described time window corresponding to current type monitoring data in, The warning information of the relational link bottom being positioned at each access relation link is defined as original alarm information.
10. according to the network monitoring data processing means described in claim 6 or 7, it is characterised in that institute State the type analyzing module according to monitoring data, the monitoring data of current type will be corresponded in described time window In, be positioned at relational link bottom and time preceding warning information is defined as original alarm information.
CN201510108771.7A 2015-03-12 2015-03-12 Network monitoring data processing method and network monitoring data processing unit Active CN106034051B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201510108771.7A CN106034051B (en) 2015-03-12 2015-03-12 Network monitoring data processing method and network monitoring data processing unit

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510108771.7A CN106034051B (en) 2015-03-12 2015-03-12 Network monitoring data processing method and network monitoring data processing unit

Publications (2)

Publication Number Publication Date
CN106034051A true CN106034051A (en) 2016-10-19
CN106034051B CN106034051B (en) 2019-03-12

Family

ID=57150256

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510108771.7A Active CN106034051B (en) 2015-03-12 2015-03-12 Network monitoring data processing method and network monitoring data processing unit

Country Status (1)

Country Link
CN (1) CN106034051B (en)

Cited By (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106921518A (en) * 2017-02-21 2017-07-04 腾讯科技(北京)有限公司 Monitoring view methods of exhibiting and device
CN107135098A (en) * 2017-04-18 2017-09-05 北京思特奇信息技术股份有限公司 A kind of availability monitor method and system of third party's network
CN107395461A (en) * 2017-08-29 2017-11-24 深信服科技股份有限公司 A kind of safe condition method for expressing and system based on access relation
CN108023741A (en) * 2016-10-31 2018-05-11 腾讯科技(深圳)有限公司 One kind monitoring resource using method and server
CN108880845A (en) * 2017-05-16 2018-11-23 腾讯科技(深圳)有限公司 A kind of method and relevant apparatus of information alert
CN109873878A (en) * 2019-04-01 2019-06-11 宁波奥克斯电气股份有限公司 The communication connecting method and device and electric terminal, storage medium of electric terminal
CN109951306A (en) * 2017-12-20 2019-06-28 中国移动通信集团湖北有限公司 Processing method, device, equipment and the medium of alarm
CN110912851A (en) * 2018-09-14 2020-03-24 阿里巴巴集团控股有限公司 Method, device and equipment for monitoring flow data
CN111404740A (en) * 2020-03-12 2020-07-10 中国铁塔股份有限公司 Fault analysis method and device, electronic equipment and computer readable storage medium
CN113835961A (en) * 2021-09-23 2021-12-24 中国联合网络通信集团有限公司 Alarm information monitoring method, device, server and storage medium
CN114338435A (en) * 2020-09-24 2022-04-12 腾讯科技(深圳)有限公司 Network change monitoring method and device, computer equipment and storage medium
CN118170616A (en) * 2024-05-13 2024-06-11 中移(苏州)软件技术有限公司 Alarm data processing method, device, electronic equipment and medium

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6707795B1 (en) * 1999-04-26 2004-03-16 Nortel Networks Limited Alarm correlation method and system
CN102387035A (en) * 2011-09-13 2012-03-21 瑞斯康达科技发展股份有限公司 Alarm processing method and alarm processing device
CN103152212A (en) * 2013-03-29 2013-06-12 华为技术有限公司 Alarm correlation analysis method, alarm correlation analysis device and network management system
CN103491555A (en) * 2012-06-13 2014-01-01 中国移动通信集团湖南有限公司 Method, equipment and system for positioning IP link fault based on service information
CN103973496A (en) * 2014-05-21 2014-08-06 华为技术有限公司 Fault diagnosis method and device

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6707795B1 (en) * 1999-04-26 2004-03-16 Nortel Networks Limited Alarm correlation method and system
CN102387035A (en) * 2011-09-13 2012-03-21 瑞斯康达科技发展股份有限公司 Alarm processing method and alarm processing device
CN103491555A (en) * 2012-06-13 2014-01-01 中国移动通信集团湖南有限公司 Method, equipment and system for positioning IP link fault based on service information
CN103152212A (en) * 2013-03-29 2013-06-12 华为技术有限公司 Alarm correlation analysis method, alarm correlation analysis device and network management system
CN103973496A (en) * 2014-05-21 2014-08-06 华为技术有限公司 Fault diagnosis method and device

Cited By (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108023741B (en) * 2016-10-31 2020-11-27 腾讯科技(深圳)有限公司 Monitoring resource use method and server
CN108023741A (en) * 2016-10-31 2018-05-11 腾讯科技(深圳)有限公司 One kind monitoring resource using method and server
CN106921518B (en) * 2017-02-21 2022-06-14 腾讯科技(北京)有限公司 Monitoring view display method and device
CN106921518A (en) * 2017-02-21 2017-07-04 腾讯科技(北京)有限公司 Monitoring view methods of exhibiting and device
CN107135098A (en) * 2017-04-18 2017-09-05 北京思特奇信息技术股份有限公司 A kind of availability monitor method and system of third party's network
CN107135098B (en) * 2017-04-18 2020-04-03 北京思特奇信息技术股份有限公司 Availability monitoring method and system for third-party network
CN108880845A (en) * 2017-05-16 2018-11-23 腾讯科技(深圳)有限公司 A kind of method and relevant apparatus of information alert
CN107395461A (en) * 2017-08-29 2017-11-24 深信服科技股份有限公司 A kind of safe condition method for expressing and system based on access relation
CN109951306A (en) * 2017-12-20 2019-06-28 中国移动通信集团湖北有限公司 Processing method, device, equipment and the medium of alarm
CN109951306B (en) * 2017-12-20 2022-04-01 中国移动通信集团湖北有限公司 Alarm processing method, device, equipment and medium
CN110912851B (en) * 2018-09-14 2022-04-12 阿里巴巴集团控股有限公司 Method, device and equipment for monitoring flow data
CN110912851A (en) * 2018-09-14 2020-03-24 阿里巴巴集团控股有限公司 Method, device and equipment for monitoring flow data
CN109873878B (en) * 2019-04-01 2021-08-24 宁波奥克斯电气股份有限公司 Communication connection method and device of electronic terminal, electronic terminal and storage medium
CN109873878A (en) * 2019-04-01 2019-06-11 宁波奥克斯电气股份有限公司 The communication connecting method and device and electric terminal, storage medium of electric terminal
CN111404740A (en) * 2020-03-12 2020-07-10 中国铁塔股份有限公司 Fault analysis method and device, electronic equipment and computer readable storage medium
CN114338435A (en) * 2020-09-24 2022-04-12 腾讯科技(深圳)有限公司 Network change monitoring method and device, computer equipment and storage medium
CN114338435B (en) * 2020-09-24 2024-02-09 腾讯科技(深圳)有限公司 Network change monitoring method, device, computer equipment and storage medium
CN113835961A (en) * 2021-09-23 2021-12-24 中国联合网络通信集团有限公司 Alarm information monitoring method, device, server and storage medium
CN113835961B (en) * 2021-09-23 2023-05-16 中国联合网络通信集团有限公司 Alarm information monitoring method, device, server and storage medium
CN118170616A (en) * 2024-05-13 2024-06-11 中移(苏州)软件技术有限公司 Alarm data processing method, device, electronic equipment and medium

Also Published As

Publication number Publication date
CN106034051B (en) 2019-03-12

Similar Documents

Publication Publication Date Title
CN106034051A (en) Network monitoring data processing method and network monitoring data processing device
US8634314B2 (en) Reporting statistics on the health of a sensor node in a sensor network
US8638680B2 (en) Applying policies to a sensor network
CN106411659A (en) Business data monitoring method and apparatus
CN106685676B (en) Node switching method and device
KR20080071575A (en) Method and management agent for event notifications correlation
CN112737800B (en) Service node fault positioning method, call chain generating method and server
CN113453229B (en) Remote wireless safety automatic test method, device and equipment
US9009533B2 (en) Home/building fault analysis system using resource connection map log and method thereof
CN103430482A (en) Network switching device for quantifying available service-level capacity of a network for projected network traffic
CN115038088B (en) Intelligent network security detection early warning system and method
CN117061257B (en) Network security assessment system
CN107306200B (en) Network fault early warning method and gateway for network fault early warning
CN110647417B (en) Energy internet abnormal data processing method, device and system
GB2477921A (en) Analysing a network using a network model with simulated changes
Novotny et al. Fault localization in MANET-hosted service-based systems
CN101252477B (en) Determining method and analyzing apparatus of network fault root
CN108248641A (en) A kind of urban track traffic data processing method and device
Rathore et al. Maintaining SmartX multi‐view visibility for OF@ TEIN+ distributed cloud‐native edge boxes
CN113395356B (en) Health monitoring method and system for data center
CN111162929B (en) Hierarchical management method and system
CN115102865A (en) Network security device topology management method and system
CN114745743A (en) Network analysis method and device based on knowledge graph
Luong Nguyen et al. Validation, verification and root-cause analysis
CN103873299B (en) The method and its device of a kind of equipment state polling

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20190812

Address after: 518000 Nanshan District science and technology zone, Guangdong, Zhejiang Province, science and technology in the Tencent Building on the 1st floor of the 35 layer

Co-patentee after: Tencent cloud computing (Beijing) limited liability company

Patentee after: Tencent Technology (Shenzhen) Co., Ltd.

Address before: Shenzhen Futian District City, Guangdong province 518000 Zhenxing Road, SEG Science Park 2 East Room 403

Patentee before: Tencent Technology (Shenzhen) Co., Ltd.