CN106100913A - Error message alignment system and method - Google Patents
Error message alignment system and method Download PDFInfo
- Publication number
- CN106100913A CN106100913A CN201610726113.9A CN201610726113A CN106100913A CN 106100913 A CN106100913 A CN 106100913A CN 201610726113 A CN201610726113 A CN 201610726113A CN 106100913 A CN106100913 A CN 106100913A
- Authority
- CN
- China
- Prior art keywords
- server
- error
- mark
- error log
- current
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0677—Localisation of faults
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/069—Management of faults, events, alarms or notifications using logs of notifications; Post-processing of notifications
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Debugging And Monitoring (AREA)
Abstract
The invention provides a kind of error message alignment system and method, wherein system includes log processing device, the multiple servers being connected respectively with log processing device, each server is used for, periodically make a look up in respective journal file according to predefined error identification, obtain the error log set in each comfortable current period, the error log set in each comfortable current period is reported to log processing device；Log processing device is used for, according to request mark, the multirow error log in all error log set received is classified, obtain the multirow error log that each request mark is corresponding, according to the request server mark in the often row error log that current request mark is corresponding, current server mark and destination server mark, determine the error source server that current request is corresponding.Can be alleviated in prior art by the defect that by the way of manually carrying out mistake investigation, there is time length, efficiency is low, cost of labor is high by the present invention.
Description
Technical field
The present invention relates to computer and network architecture technology field, in particular to a kind of error message alignment system
And method.
Background technology
In a distributed system, the request that user is initiated by certain operation at front-end server will call multiple system,
The plurality of system arranges according to hierarchical relationship, and the most each system includes multiple server, when in invoked procedure, any one is
When any one server in system reports an error, front-end server will show error message.
Such as, user is after front-end server initiates request A, and A is by calling system A1, system A1 calling system in request
A2, system A2 calling system A3, complete to ask the process of A by the invoked procedure between system A1, system A2, system A3.System
System A1, system A2, system A3 all include multiple server, when any one the server report in system A1, system A2, system A3
Staggering the time, front-end server will show error message.
In prior art, the artificial mode searched generally is used to search the server reported an error in a distributed system, thus
Solving error problem.When human error's method of the prior art is particularly as follows: front-end server shows error message, in front end
Multiple servers of the ground floor system of server calls are searched the server that reports an error, after determining the server that reports an error, is reporting an error
Server determines concrete error log, and determines next layer system that this error log calls, at this next layer system
Multiple Server Relay continue lookup and report an error server, carry out according to this, until finding the server finally reported an error.Ideal situation
Under, the wrong investigation time of individual system is 15 minutes the soonest, and the mistake investigation of multi-layer system needs to be multiplied by system in 15 minutes
The time of level quantity.
As typical product places an order scene: front-end server calls API (Application Programming
Interface, application programming interface) layer, api layer calls form ordering system, and form ordering system calls product systems and calculates product
Price, if asked in stock, form ordering system continues to call inventory system.This process relates to the call chain of 4 layer systems, if gone out
Existing problem will produce the wrong investigation time of 1 hour, and the manual errors investigation time is long, and the cost of artificial investigation is high.
From the foregoing, it will be observed that in prior art, there is by the way of manually carrying out mistake investigation time length, efficiency low, artificial
The defect that cost is high.
Summary of the invention
In view of this, it is an object of the invention to provide a kind of error message alignment system and method, alleviate prior art
In by the way of manually carrying out mistake investigation, there is time length, efficiency is low, cost of labor is high defect.
First aspect, embodiments provides a kind of error message alignment system, and described system includes log processing
Device, the multiple servers being connected respectively with described log processing device, multiple described servers corresponding respective system respectively；
Each described server is respectively used to, and periodically looks in respective journal file according to predefined error identification
Look for, obtain the error log set in each comfortable current period, the described error log collection in each comfortable current period is closed
Report is to described log processing device；Wherein, each described error log set all includes multirow error log, often goes described mistake
Daily record all includes affiliated system banner, request mark, request server mark, current server mark, destination server mark
Knowing and correctness mark, described correctness is designated correct mark or described error identification；Described log processing device is used
In, receive the described error log set in each comfortable current period that each described server reports, according to described request mark
Know and the multirow error log in all described error log set received is classified, obtain each described request mark
Corresponding multirow error log, identify according to the request server often gone in described error log of current request mark correspondence,
Current server mark and destination server identify, and determine the error source server that current request is corresponding.
In conjunction with first aspect, embodiments provide the first possible embodiment of first aspect, wherein, described
Log processing device includes: search module, searches in described error log for corresponding often the going in described current request mark
Described request server is designated the error log of sky；Identifier acquisition module, for obtaining in the described error log found
Destination server mark, in corresponding often the going of described current request mark, described error log is searched described destination service
Device mark is as the error log of current server mark；Replicated blocks, for repeating the action of described identifier acquisition module, directly
Destination server mark is there is not in the error log that described destination server mark identifies as current server to find
Know；Error source server determines module, for determining the described error log that there is not destination server mark found
For the source error log that described current request is corresponding, the current server in the error log of described source is identified corresponding clothes
Business device is defined as the error source server that described current request is corresponding.
In conjunction with the first possible embodiment of first aspect, embodiments providing first aspect the second may
Embodiment, wherein, described error source server determines that module is additionally operable to, if described replicated blocks are in service each described
Described error log set in each leisure continuous predetermined number cycle that device reports all is searched less than by described destination service
The error log at described destination server mark place as the error log of current server mark, is then defined as by device mark
The source error log that described current request is corresponding, identifies corresponding service by the current server in the error log of described source
Device is defined as the error source server that described current request is corresponding.
In conjunction with the embodiment that first aspect the second is possible, the third may to embodiments provide first aspect
Embodiment, wherein, described log processing device also includes: front end erroneous servers determines module, for by described lookup
Module searches to described error log be defined as the front end error log that described current request is corresponding, by described front end mistake day
The server that in will, current server mark is corresponding is as front end erroneous servers corresponding to described current request.
In conjunction with the third possible embodiment of first aspect, embodiments providing first aspect the 4th kind may
Embodiment, wherein, described log processing device also includes: call chain determines module, is used for obtaining described mark and obtains mould
Each described error log that block and described replicated blocks find in search procedure, extracts in each described error log
The server that current server mark is corresponding, comes the multiple servers extracted, described front end erroneous servers, described mistake
Source server forms, according to call relation, the erroneous servers call chain that described current request is corresponding.
In conjunction with the third possible embodiment of first aspect, embodiments providing first aspect the 5th kind may
Embodiment, wherein, described log processing device also includes: number of times statistical module, for according to corresponding each of each request
System banner in the error log of individual described source determines the system that each described source error log is corresponding, and each is described next
The quantity of the source error log that the system that source error log is corresponding is comprised is corresponding as source error log each described
The errors number of system, and, the system banner in each described front end error log corresponding according to each request is true
The system that each described front end error log fixed is corresponding, the front end that system corresponding for each described front end error log is comprised
The quantity of error log is as the errors number of system corresponding to front end error log each described；Mark statistical module, is used for
Error identification corresponding record in source error log system corresponding for each described source error log comprised is each
The error identification that the system that individual described source error log is corresponding occurs, and, by corresponding for each described front end error log
Error identification corresponding record in the front end error log that system is comprised is the system that each described front end error log is corresponding
The error identification occurred；Information sending module, the director for the system corresponding to source error log each described sends
Error prompting information, and, the director to system corresponding to front end error log each described sends error prompting information, institute
State errors number that error prompting information includes that the systematic name of correspondence system, described system occur and described system occurs
Error identification.
In conjunction with the 5th kind of possible embodiment of first aspect, embodiments providing first aspect the 6th kind may
Embodiment, wherein, described information sending module specifically for: by current system occur error identification with previous send mistake
The error identification that during false alert information, current system occurs compares, it is judged that whether described current system new mistake mark occurs
Knowing, if occurring, then sending described error prompting information to the system principal that described current system is corresponding；If not occurring, it is judged that
Time interval between current time and previous transmission error prompting information moment, if described time interval exceedes Preset Time,
Then send described error prompting information to the system principal that described current system is corresponding.
Second aspect, embodiments provides a kind of error message localization method, and described method includes: each service
Device periodically makes a look up in respective journal file according to predefined error identification, obtains in each comfortable current period
Error log set, the described error log set in each comfortable current period is reported to log processing device；Wherein, respectively
Individual described error log set all includes multirow error log, described error log of often going all include affiliated system banner, please
Ask mark, request server mark, current server mark, destination server mark and correctness mark, described correctness
It is designated correct mark or described error identification；Described log processing device receives each leisure that each described server reports
Described error log set in current period, according to described request mark in all described error log set received
Multirow error log classify, obtain the multirow error log that each described request mark is corresponding, according to current request mark
Know the corresponding request server often gone in described error log mark, current server mark and destination server mark, really
Determine the error source server that current request is corresponding.
In conjunction with second aspect, embodiments provide second the first possible embodiment, wherein, according to working as
The request server often gone in described error log mark, current server mark and the destination server that front request mark is corresponding
Mark, determines the error source server that current request is corresponding, including: described current request mark corresponding often go described mistake
Daily record is searched described request server by mistake and is designated the error log of sky；Obtain the target in the described error log found
Server identification, in corresponding often the going to search in described error log and identified by described destination server of described current request mark
Error log as current server mark；Repeat the destination server mark in the described error log that described acquisition finds
Know, and described destination server is identified the action of the error log as current server mark, until looking into by described lookup
Destination server mark is there is not as the error log that current server identifies in that finds using described destination server mark；Really
Surely the described error log that there is not destination server mark found is the source error log that described current request is corresponding,
Current server in the error log of described source is identified corresponding server and is defined as the mistake that described current request is corresponding
Origin server.
In conjunction with the first possible embodiment of first aspect, embodiments providing first aspect the second may
Embodiment, wherein, according to the request server often gone in described error log mark corresponding to current request mark, current
Server identification and destination server mark, determine the error source server that current request is corresponding, also include: if in each institute
State the described error log set in each comfortable predetermined number cycle that server reports all is searched and take less than by described target
The error log at described destination server mark place as the error log of current server mark, is then determined by business device mark
For the source error log that described current request is corresponding, the current server in the error log of described source is identified corresponding clothes
Business device is defined as the error source server that described current request is corresponding.
Error message alignment system in the embodiment of the present invention and method, error log includes request mark, request clothes
Business device mark, current server mark and destination server mark, corresponding each user request of wherein request mark, request service
Device mark correspondence calls the server of current server, and the corresponding current server of current server mark, destination server identifies
The server that corresponding current server calls, definition mode based on this kind of error log, log processing device can be according to working as
Request server mark, current server mark and destination server mark in the often row error log that front request mark is corresponding
Know, determine the error source server that current request is corresponding, thus alleviate in prior art by manually carrying out mistake investigation
The defect that mode has time length, efficiency is low, cost of labor is high.
For making the above-mentioned purpose of the present invention, feature and advantage to become apparent, preferred embodiment cited below particularly, and coordinate
Appended accompanying drawing, is described in detail below.
Accompanying drawing explanation
In order to be illustrated more clearly that the technical scheme of the embodiment of the present invention, below by embodiment required use attached
Figure is briefly described, it will be appreciated that the following drawings illustrate only certain embodiments of the present invention, and it is right to be therefore not construed as
The restriction of scope, for those of ordinary skill in the art, on the premise of not paying creative work, it is also possible to according to this
A little accompanying drawings obtain other relevant accompanying drawings.
Fig. 1 shows the module composition schematic diagram of the error message alignment system that the embodiment of the present invention provided；
Fig. 2 shows the module composition schematic diagram of the log processing device that the embodiment of the present invention provided；
Fig. 3 shows the module composition schematic diagram of the error message localization method that the embodiment of the present invention provided.
Detailed description of the invention
For making the purpose of the embodiment of the present invention, technical scheme and advantage clearer, below in conjunction with the embodiment of the present invention
Middle accompanying drawing, is clearly and completely described the technical scheme in the embodiment of the present invention, it is clear that described embodiment is only
It is a part of embodiment of the present invention rather than whole embodiments.Generally real with the present invention illustrated described in accompanying drawing herein
The assembly executing example can be arranged with various different configurations and design.Therefore, below to the present invention's provided in the accompanying drawings
The detailed description of embodiment is not intended to limit the scope of claimed invention, but is merely representative of the selected reality of the present invention
Execute example.Based on embodiments of the invention, the institute that those skilled in the art are obtained on the premise of not making creative work
There are other embodiments, broadly fall into the scope of protection of the invention.
In view of in prior art, by the way of manually carrying out mistake investigation, have that time length, efficiency is low, cost of labor
High defect, the invention provides a kind of error message alignment system and method, is specifically described below by embodiment.
Fig. 1 shows the module composition schematic diagram of the error message alignment system that the embodiment of the present invention provided, such as Fig. 1 institute
Showing, this system includes log processing device 10, the multiple servers 20 being connected respectively with log processing device 10, multiple servers
The 20 corresponding respective systems of difference；
Each server 20 is respectively used to, and periodically enters in respective journal file according to predefined error identification
Row is searched, and obtains the error log set in each comfortable current period, is closed by the error log collection in each comfortable current period
Report is to log processing device 10；
Wherein, each error log set all includes multirow error log, and often row error log all includes affiliated system
Mark, request mark, request server mark, current server mark, destination server mark and correctness mark, this is just
Really property is designated correct mark or above-mentioned error identification；
Log processing device 10 is used for, and receives the error log collection in each comfortable current period that each server 20 reports
Close, according to above-mentioned request mark, the multirow error log in all error log set received is classified, obtain every
The multirow error log that individual request mark is corresponding, according to the request server in the often row error log that current request mark is corresponding
Mark, current server mark and destination server mark, determine the error source server that current request is corresponding.
As it is shown in figure 1, part server 20 belongs to system A, part server 20 belongs to system B, and part server 20 belongs to
In system C, multiple systems share a log processing device 10.Each server 20 respective journal file of timing scan, as
Each minute run-down journal file, this journal file includes multirow daily record, and often row daily record all defines according to following form:
[request mark] [date daily record rank] [request server mark] [current server mark] [destination server mark
Know] [correctness mark] system banner: service identifiers. method identifies；
Such as: [2876375639892834] [2008-08-01 09:37:22 024INFO] [10.0.1.23]
[10.0.1.51][10.0.1.59][315]trade:OrderServiceImpl.cre ateOrder(334)。
Wherein, request mark can be request ID (identification, status identifier), is used for identifying this daily record
The request of corresponding user, the date refers to that the date of formation of this daily record, daily record rank refer to the rank of this daily record, such as Debug
Or INFO, request server mark is request server IP (Internet Protocol, the network address), current server
Mark is current server IP, and destination server mark is destination server IP, and correctness identifies to be used for identifying this daily record and is
Correct daily record or error log, when this daily record is correct daily record, correctness is designated correct mark, such as 0, when this day
When will is error log, correctness is designated error identification, and such as 315, error identification pre-defines, and is used for representing this
The type of error of daily record, system banner can be the systematic name that this daily record is corresponding, and service identifiers can be this daily record pair
The service name answered, method mark can be the method name that this daily record is corresponding.
Wherein, request server refers to call the server of current server, and destination server refers to current service
The server that device calls, such as, server A is first server, and server A invoking server B, server B calls service
Device C, server C is last server, then, in the daily record of server A, request server is empty, and current server is A,
Destination server is B, and in the daily record of server B, request server is A, and current server is B, and destination server is C,
In the daily record of server C, request server is B, and current server is C, and destination server is empty.
Each server retrieves respective daily record, in the present embodiment, preferably each daily record in each server for convenience
Address unified, such as unification is :/opt/logs/ system name. date .log, the title of each daily record in each server is united
One, the Log Names of such as same system is daily split and is determined, such as: transaction system journal file address could be arranged to:
/opt/logs/trade.2016-08-01.log
/opt/logs/trade.2016-08-02.log
/opt/logs/trade.2016-08-03.log。
Server 20 is searched in journal file, the daily record including above-mentioned error identification is extracted as error log
Coming, the multirow error log composition error log set extracted, each server 20 is by the mistake in respective current period
Daily record set reports to log processing device 10.One preferred embodiment in, server 20 is also by each error log
Detailed error information reports to log processing device 10 with error log.
Log processing device 10 identifies all error logs received according to the request comprised in each row error log
Classify, obtain the multirow error log that each request mark is corresponding.Fig. 2 shows the daily record that the embodiment of the present invention is provided
The module composition schematic diagram of processing means 10, as in figure 2 it is shown, log processing device 10 includes searching module 101, mark obtains mould
Block 102, replicated blocks 103 and error source server determine module 104, and the function of modules is as follows:
Search module 101, search request server identification in the often row error log corresponding in current request mark
For empty error log；
Identifier acquisition module 102, for obtaining the destination server mark in the error log found, in current request
The often row error log that mark is corresponding is searched the error log this destination server mark identified as current server；
Replicated blocks 103, for the action of duplicate marking acquisition module 102, until find by this destination server
Identify the error log as current server mark and there is not destination server mark；
Error source server determines module 104, for determining the mistake that there is not destination server mark found
Daily record is the source error log that current request is corresponding, and the current server in this source error log is identified corresponding service
Device is defined as the error source server that current request is corresponding.
Specifically, owing to, in request processing procedure, the server of first response request does not has the request service of correspondence
, therefore there is not request server mark in the daily record of this server, therefore in the multirow mistake that current request mark is corresponding in device
In daily record, search request server identification is empty error log, and the server producing this error log is exactly that first response is asked
The server asked, referred to as front end erroneous servers, this error log is referred to as front end error log.
As in figure 2 it is shown, the log processing device 10 in the present embodiment also includes: front end erroneous servers determines module 105,
For the error log that lookup module 101 finds is defined as the front end error log that current request is corresponding, by front end mistake
The server that in daily record, current server mark is corresponding is as front end erroneous servers corresponding to current request.
After determining front end error log, owing in the error log of front end, record has destination server to identify, this target takes
The server of business device mark correspondence is exactly the server that front end erroneous servers calls, and therefore obtains in the error log found
Destination server mark, search in the often row error log that current request mark is corresponding using this destination server mark as
The error log of current server mark, thus obtain, with front end error log, there is the error log of call relation.
After getting the error log with front end error log with call relation, according to above-mentioned lookup method, continue
Destination server mark in the error log that continuous acquisition finds, and the often row error log in current request mark correspondence
The error log that this destination server mark is identified by middle lookup as current server, thus successively search and there is call relation
Daily record.
When the error log found does not exists destination server mark, illustrate that this error log is that last is adjusted
Daily record, server corresponding to this error log there occurs mistake when calling next server, causes next service
Device malloc failure malloc, thus error log does not has record object server identification.Therefore, there is not destination service by find
The error log of device mark is defined as the source error log that current request is corresponding, by the current service in this source error log
The server of device mark correspondence is defined as the error source server that current request is corresponding.
In the present embodiment, each mistake that acquisition identifier acquisition module 102 and replicated blocks 103 find in search procedure
Daily record by mistake, searches each daily record obtained, and above-mentioned front end error log by identifier acquisition module 102 and replicated blocks 103
With above-mentioned source error log is connected in series according to the call relation between each, it is possible to obtain the wrong day that current request is corresponding
Will call chain.
As in figure 2 it is shown, the log processing device 10 in the present embodiment also includes: call chain determines module 106, is used for obtaining
Each error log that identifier acquisition module 102 and replicated blocks 103 find in search procedure, extracts each error log
In server corresponding to current server mark, by the multiple servers extracted, front end erroneous servers, error source clothes
Business device forms, according to call relation, the erroneous servers call chain that current request is corresponding.
Specifically, each mistake day that acquisition identifier acquisition module 102 and replicated blocks 103 find in search procedure
Will, determines the server producing this each error log, will produce the server of this each error log, front end erroneous service
Device, error source server are connected in series according to call relation, the erroneous servers call chain that composition current request is corresponding.
In the present embodiment, error log includes request mark, request server mark, current server mark and target
Server identification, corresponding each user request of wherein request mark, request server mark correspondence calls the clothes of current server
Business device, the corresponding current server of current server mark, the server that the corresponding current server of destination server mark calls, base
In the definition mode of this kind of error log, log processing device 10 can be according to the often row error log of current request mark correspondence
In request server mark, current server mark and destination server mark, determine the error source that current request is corresponding
Server, thus alleviate and prior art has by the way of manually carrying out mistake investigation time length, efficiency is low, cost of labor
High defect.
In the present embodiment, identify according to the request server in each row error log, current server identifies and target clothes
Business device mark makes a look up in each row error log, it is possible to quickly obtain front end erroneous servers corresponding to each request, mistake
Origin server, and erroneous servers call chain by mistake, additionally it is possible to obtain front end error log corresponding to each request, source mistake
By mistake daily record and and error log call chain, thus be accurately positioned the server that error source is corresponding, reach fast and efficiently
The effect of Wrong localization server in a distributed system.
The system that the embodiment of the present invention is too much for service call level in Distributed Application, serviced by clustered deploy(ment),
The positioning time occurring to Wrong localization from mistake can be shortened, with prior art phase to realizing the quick location to daily record mistake
Ratio, the present embodiment has the advantage that error message location is quick, accurate, reduce hand labor.
Due to each server timing scan error log, by error log and the detailed error information of each error log
Report to log processing device 10, therefore presence server scanning error log and on give the correct time, current server have invoked next
Individual server, but next server does not the most generate the situation of daily record, that is, server A invoking server B, server B
Invoking server C, records wrong daily record in server B, wherein request server is A, and current server is B, destination service
Device is C, and server B is called successfully, however server timing scan error log and on give the correct time, server C does not the most give birth to
Become error log, at this moment exist for above-mentioned replicated blocks 103 search less than using destination server identify as current server mark
The error log known, namely search the error log generated less than server C.For this situation, the error source clothes in Fig. 2
Business device determines that module 104 is additionally operable to, if replicated blocks 103 are within each leisure continuous predetermined number cycle that each server reports
Error log set in all search less than using destination server mark as current server mark error log, then by mesh
The error log at mark server identification place is defined as the source error log that current request is corresponding, by the error log of source
The server of current server mark correspondence is defined as the error source server that current request is corresponding.
Specifically, the continuous predetermined number cycle can be 3 cycles, if replicated blocks 103 are within three continuous cycles
All search less than the error log that destination server mark is identified as current server, it is determined that source error log is mesh
The error log at mark server identification place, error source server is the server that source error log is corresponding.
Further, for the ease of notifying that system principal processes mistake in time, as in figure 2 it is shown, the day in the present embodiment
Will processing means 10 also includes:
Number of times statistical module 107, the system banner in each source error log corresponding according to each request is true
The system that each source error log fixed is corresponding, the source error log that system corresponding for each source error log is comprised
Quantity as the errors number of each source system corresponding to error log, and, for according to corresponding each of each request
System banner in the error log of individual front end determines the system that each front end error log is corresponding, by each front end error log pair
The quantity of the front end error log that the system answered is comprised is as the errors number of system corresponding to each front end error log；
Mark statistical module 108, for source error log system corresponding for each source error log comprised
In error identification corresponding record be the error identification that each source system corresponding to error log occurs, and, before each
Error identification corresponding record in the front end error log that the system that end error log is corresponding is comprised is each front end mistake day
The error identification of the system appearance that will is corresponding；
Information sending module 109, the director for the system corresponding to each source error log sends error prompting
Information, and, the director to system corresponding to each front end error log sends error prompting information, error prompting information bag
Include the error identification that the systematic name of correspondence system, the errors number of this system appearance and this system occur.Wherein system mark
Knowledge can be systematic name.
Specifically, number of times statistical module 107 adds up the errors number of system corresponding to each source error log, mistake time
Several quantity equal to error log of originating in system, and add up the errors number of system corresponding to each front end error log, wrong
Number of times is equal to the quantity of front end error log in system by mistake.
Mark statistical module 108 adds up the error identification that system corresponding to each source error log occurs, error identification
By the error identification occurred in the source error log that system is comprised, in like manner add up the system that each front end error log is corresponding
The error identification occurred, the error identification occurred in the front end error log that error identification is comprised by system.
Information sending module 109 sends error prompting letter to the director of each source system corresponding to error log respectively
Breath, and, the director to system corresponding to each front end error log sends error prompting information.Other preferred embodiment party
In formula, as a example by the director of each source system corresponding to error log, send note and mail, note to system principal
Including the errors number that the systematic name of correspondence system, this system occur, mail includes the systematic name of correspondence system, is somebody's turn to do
The error identification that the errors number of system appearance and this system occur, so that note plays reminding effect, mail plays in detail
Carefully inform effect.
After the director of system receives error prompting information, it is possible to inquire about concrete mistake in log processing device 10
Situation, thus solving error.
In some cases, every few minutes it is possible to report an error in distributed system, in the case of this kind, in order to avoid to system
Director to send the time interval of error prompting information too short, information sending module 109 specifically for:
The mistake mark that when error identification occurred by current system and previous transmission error prompting information, current system occurs
Knowledge compares, it is judged that whether current system new error identification occurs, if occurring, is then responsible for the system that current system is corresponding
People sends error prompting information；
If not occurring, it is judged that the time interval between current time and previous transmission error prompting information moment, if this time
Between interval exceed Preset Time, such as half an hour, then send error prompting information to the system principal that current system is corresponding.
Above-mentioned current system is the system that any one source error log is corresponding, or any one front end error log
Corresponding system.By the multilevel iudge process of information sending module 109, it is possible to ensure when certain system has new mistake appearance
Time, inform system principal in time, when certain system does not has new mistake to occur, interval Preset Time such as half an hour, is to being
System director sends error prompting information, the timely solving error of system for prompting director.
In the present embodiment, the director to each source system corresponding to error log sends error prompting information, it is possible to
The director being easy to system corresponding to each front end error log tackles the inquiry of user, it is achieved before user's query mistake
Solving error reason, timely respond to user's query, the director to system corresponding to each front end error log sends error prompting
Information, it is possible to make mistake quickly be solved.
Error message alignment system in corresponding diagram 1, the embodiment of the present invention additionally provides a kind of error message localization method,
As it is shown on figure 3, the method includes:
Step S301, each server is periodically carried out in respective journal file according to predefined error identification
Search, obtain the error log set in each comfortable current period, the error log set in each comfortable current period is reported
To log processing device；
Wherein, each error log set all includes multirow error log, and often row error log all includes affiliated system
Title, request mark, request server mark, current server mark, destination server mark and correctness mark, this is just
Really property is designated correct mark or above-mentioned error identification；
Step S302, log processing device receives the error log collection in each comfortable current period that each server reports
Close, according to request mark, the multirow error log in all error log set received is classified, obtain each asking
Seek the multirow error log that mark is corresponding, according to the request server mark in the often row error log that current request mark is corresponding
Know, current server identifies and destination server mark, determines the error source server that current request is corresponding.
In the present embodiment, error log includes request mark, request server mark, current server mark and target
Server identification, corresponding each user request of wherein request mark, request server mark correspondence calls the clothes of current server
Business device, the corresponding current server of current server mark, the server that the corresponding current server of destination server mark calls, base
In the definition mode of this kind of error log, log processing device 10 can be according to the often row error log of current request mark correspondence
In request server mark, current server mark and destination server mark, determine the error source that current request is corresponding
Server, thus alleviate and prior art has by the way of manually carrying out mistake investigation time length, efficiency is low, cost of labor
High defect.
In step S302, according to the request server mark in the often row error log that current request mark is corresponding, currently
Server identification and destination server mark, determine the error source server that current request is corresponding, including:
(1) in the often row error log that current request mark is corresponding, search request server identification is empty wrong day
Will；
(2) the destination server mark in the error log found is obtained, in the often row mistake that current request mark is corresponding
Daily record is searched error log destination server mark identified as current server by mistake；
(3) repeat the destination server mark obtaining in the error log found, and search destination server mark
Know the action of the error log identified as current server, until find identifies destination server as current service
There is not destination server mark in the error log of device mark；
(4) determine that the error log that there is not destination server mark found is source mistake corresponding to current request
Daily record, is defined as, by server corresponding for the current server mark in the error log of source, the error source that current request is corresponding
Server.
Wherein, according to the request server mark in the often row error log of current request mark correspondence, current server
Mark and destination server identify, and determine the error source server that current request is corresponding, also include:
If the error log set within each comfortable predetermined number cycle that each server reports all is searched less than inciting somebody to action
Destination server mark is as the error log of current server mark, then the error log that destination server identifies place is true
It is set to the source error log that current request is corresponding, by true for server corresponding for the current server mark in the error log of source
It is set to the error source server that current request is corresponding.
The device that the embodiment of the present invention is provided can be the specific hardware on equipment or the software being installed on equipment
Or firmware etc..The device that the embodiment of the present invention is provided, it realizes principle and the technique effect of generation and preceding method embodiment
Identical, for briefly describing, the not mentioned part of device embodiment part, refer to corresponding contents in preceding method embodiment.Belonging to
The technical staff in field is it can be understood that arrive, for convenience and simplicity of description, and system, device and unit described above
Specific works process, is all referred to the corresponding process in said method embodiment, does not repeats them here.
In embodiment provided by the present invention, it should be understood that disclosed apparatus and method, can be by other side
Formula realizes.Device embodiment described above is only that schematically such as, the division of described unit, the most only one are patrolled
Volume function divides, and actual can have other dividing mode when realizing, the most such as, multiple unit or assembly can in conjunction with or can
To be integrated into another system, or some features can be ignored, or does not performs.Another point, shown or discussed each other
Coupling direct-coupling or communication connection can be the INDIRECT COUPLING by some communication interfaces, device or unit or communication link
Connect, can be electrical, machinery or other form.
The described unit illustrated as separating component can be or may not be physically separate, shows as unit
The parts shown can be or may not be physical location, i.e. may be located at a place, or can also be distributed to multiple
On NE.Some or all of unit therein can be selected according to the actual needs to realize the mesh of the present embodiment scheme
's.
It addition, each functional unit in the embodiment that the present invention provides can be integrated in a processing unit, it is possible to
Being that unit is individually physically present, it is also possible to two or more unit are integrated in a unit.
If described function is using the form realization of SFU software functional unit and as independent production marketing or use, permissible
It is stored in a computer read/write memory medium.Based on such understanding, technical scheme is the most in other words
The part contributing prior art or the part of this technical scheme can embody with the form of software product, this meter
Calculation machine software product is stored in a storage medium, including some instructions with so that a computer equipment (can be individual
People's computer, server, or the network equipment etc.) perform all or part of step of method described in each embodiment of the present invention.
And aforesaid storage medium includes: USB flash disk, portable hard drive, read only memory (ROM, Read-Only Memory), random access memory are deposited
The various media that can store program code such as reservoir (RAM, Random Access Memory), magnetic disc or CD.
It should also be noted that similar label and letter represent similar terms, therefore, the most a certain Xiang Yi in following accompanying drawing
Individual accompanying drawing is defined, then need not it be defined further and explains in accompanying drawing subsequently, additionally, term " the
One ", " second ", " the 3rd " etc. are only used for distinguishing and describe, and it is not intended that instruction or hint relative importance.
It is last it is noted that the detailed description of the invention of embodiment described above, the only present invention, in order to the present invention to be described
Technical scheme, be not intended to limit, protection scope of the present invention is not limited thereto, although with reference to previous embodiment to this
Bright it is described in detail, it will be understood by those within the art that: any those familiar with the art
In the technical scope that the invention discloses, the technical scheme described in previous embodiment still can be modified or can be light by it
It is readily conceivable that change, or wherein portion of techniques feature is carried out equivalent；And these are revised, change or replace, do not make
The essence of appropriate technical solution departs from the spirit and scope of embodiment of the present invention technical scheme.All should contain the protection in the present invention
Within the scope of.Therefore, protection scope of the present invention should described be as the criterion with scope of the claims.
Claims (10)
1. an error message alignment system, it is characterised in that described system includes log processing device, with described log processing
Multiple servers that device connects respectively, multiple described servers corresponding respective system respectively；
Each described server is respectively used to, and periodically carries out in respective journal file according to predefined error identification
Search, obtain the error log set in each comfortable current period, by the described error log set in each comfortable current period
Report to described log processing device；
Wherein, each described error log set all includes multirow error log, and described error log of often going all includes affiliated
System banner, request mark, request server mark, current server mark, destination server mark and correctness mark,
Described correctness is designated correct mark or described error identification；
Described log processing device is used for, and receives the described mistake day in each comfortable current period that each described server reports
Will set, is carried out the multirow error log in all described error log set received point according to described request mark
Class, obtains the multirow error log that each described request mark is corresponding, according to current request mark corresponding often go described mistake
Request server mark, current server mark and destination server mark in daily record, determines the mistake that current request is corresponding
Origin server.
System the most according to claim 1, it is characterised in that described log processing device includes:
Search module, for corresponding often the going in described current request mark, described error log searches described request server
It is designated the error log of sky；
Identifier acquisition module, for obtaining the destination server mark in the described error log found, currently please described
Corresponding often the going of mark is asked described error log to be searched using described destination server mark as the mistake of current server mark
Daily record by mistake；
Replicated blocks, for repeating the action of described identifier acquisition module, until find identifies described destination server
There is not destination server mark in the error log as current server mark；
Error source server determines module, for determining the described error log that there is not destination server mark found
For the source error log that described current request is corresponding, the current server in the error log of described source is identified corresponding clothes
Business device is defined as the error source server that described current request is corresponding.
System the most according to claim 2, it is characterised in that described error source server determines that module is additionally operable to, if
The described error log set within each leisure continuous predetermined number cycle that server each described reports of the described replicated blocks
In all search less than using described destination server mark as current server mark error log, then by described destination service
The error log at device mark place is defined as the source error log that described current request is corresponding, by the error log of described source
Server corresponding to current server mark be defined as the error source server that described current request is corresponding.
System the most according to claim 3, it is characterised in that described log processing device also includes:
Front end erroneous servers determines module, for by described lookup module searches to described error log be defined as described working as
The front end error log that front request is corresponding, using server corresponding for current server mark in the error log of described front end as institute
State the front end erroneous servers that current request is corresponding.
System the most according to claim 4, it is characterised in that described log processing device also includes:
Call chain determines module, for obtaining described identifier acquisition module and described replicated blocks find in search procedure
Each described error log, extracts the server that the current server mark in each described error log is corresponding, will extract
Multiple servers, described front end erroneous servers, described error source server currently please according to call relation composition is described
Seek corresponding erroneous servers call chain.
System the most according to claim 4, it is characterised in that described log processing device also includes:
Number of times statistical module, the system banner in each described source error log corresponding according to each request determines respectively
The system that individual described source error log is corresponding, the source mistake that system corresponding for each described source error log is comprised
The quantity of daily record as the errors number of system corresponding to source error log each described, and, for asking according to each
The corresponding system banner in each described front end error log determines the system that each described front end error log is corresponding, will be each
The quantity of the front end error log that the system that individual described front end error log is corresponding is comprised is as front end mistake day each described
The errors number of the system that will is corresponding；
Mark statistical module, in source error log system corresponding for each described source error log comprised
Error identification corresponding record is the error identification that the system that each described source error log is corresponding occurs, and, by each institute
State the error identification corresponding record in the front end error log that system corresponding to front end error log is comprised be each described before
The error identification that the system that end error log is corresponding occurs；
Information sending module, the director for the system corresponding to source error log each described sends error prompting letter
Breath, and, the director to system corresponding to front end error log each described sends error prompting information, described error prompting
Information includes errors number that the systematic name of correspondence system, described system occur and the error identification that described system occurs.
System the most according to claim 6, it is characterised in that described information sending module specifically for:
The error identification that the error identification occurred by current system occurs with current system during previous transmission error prompting information enters
Row compares, it is judged that whether described current system new error identification occurs, if occurring, then to the system that described current system is corresponding
Director sends described error prompting information；
If not occurring, it is judged that the time interval between current time and previous transmission error prompting information moment, if the described time
Interval exceedes Preset Time, then send described error prompting information to the system principal that described current system is corresponding.
8. an error message localization method, it is characterised in that described method includes:
Each server periodically makes a look up in respective journal file according to predefined error identification, obtains each
Error log set in current period, reports to log processing by the described error log set in each comfortable current period
Device；
Wherein, each described error log set all includes multirow error log, and described error log of often going all includes affiliated
System banner, request mark, request server mark, current server mark, destination server mark and correctness mark,
Described correctness is designated correct mark or described error identification；
Described log processing device receives the described error log collection in each comfortable current period that each described server reports
Close, according to described request mark, the multirow error log in all described error log set received is classified,
To the multirow error log that each described request mark is corresponding, according to current request corresponding often the going in described error log of mark
Request server mark, current server mark and destination server mark, determine current request corresponding error source clothes
Business device.
Method the most according to claim 8, it is characterised in that according to corresponding often the going described mistake day of current request mark
Request server mark, current server mark and destination server mark in will, determines the mistake that current request is corresponding
Source server, including:
In corresponding often the going of described current request mark, described error log searches described request server and be designated the mistake of sky
Daily record by mistake；
Obtain the destination server mark in the described error log found, in the often row institute that described current request mark is corresponding
State and error log is searched the error log described destination server mark identified as current server；
Repeat the destination server mark in the described error log that described acquisition finds, and described lookup is by described target
The action of the error log that server identification identifies as current server, until find identifies described destination server
There is not destination server mark in the error log as current server mark；
Determine that the described error log that there is not destination server mark found is that source corresponding to described current request is wrong
Daily record by mistake, identifies the current server in the error log of described source corresponding server and is defined as described current request correspondence
Error source server.
Method the most according to claim 9, it is characterised in that according to current request mark corresponding often go described mistake
Request server mark, current server mark and destination server mark in daily record, determines the mistake that current request is corresponding
Origin server, also includes:
If the described error log set within each comfortable predetermined number cycle that server each described reports all is searched not
To the error log described destination server mark identified as current server, then described destination server is identified place
Error log be defined as the source error log that described current request is corresponding, by the current service in the error log of described source
The server of device mark correspondence is defined as the error source server that described current request is corresponding.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610726113.9A CN106100913A (en) | 2016-08-25 | 2016-08-25 | Error message alignment system and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610726113.9A CN106100913A (en) | 2016-08-25 | 2016-08-25 | Error message alignment system and method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106100913A true CN106100913A (en) | 2016-11-09 |
Family
ID=57225126
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610726113.9A Pending CN106100913A (en) | 2016-08-25 | 2016-08-25 | Error message alignment system and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106100913A (en) |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107168845A (en) * | 2017-03-31 | 2017-09-15 | 北京奇艺世纪科技有限公司 | A kind of Fault Locating Method and device |
| CN107465549A (en) * | 2017-08-18 | 2017-12-12 | 北京奇艺世纪科技有限公司 | A kind of distributed message processing method and system |
| CN109218041A (en) * | 2017-06-29 | 2019-01-15 | 北京京东尚科信息技术有限公司 | Request processing method and device for server system |
| CN109344130A (en) * | 2018-09-27 | 2019-02-15 | 郑州云海信息技术有限公司 | A kind of blog management method and device |
| CN110875832A (en) * | 2018-08-31 | 2020-03-10 | 北京京东尚科信息技术有限公司 | Abnormal service monitoring method, device and system and computer readable storage medium |
| CN110888790A (en) * | 2019-11-29 | 2020-03-17 | 杭州迪普科技股份有限公司 | Log management method and device, electronic equipment and storage medium |
| CN111143304A (en) * | 2019-11-20 | 2020-05-12 | 杭州端点网络科技有限公司 | Micro-service system abnormal log analysis method based on request link |
| CN112306817A (en) * | 2020-11-20 | 2021-02-02 | 张俊 | Big data based operation monitoring analysis system and method |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104462180A (en) * | 2013-09-24 | 2015-03-25 | 乐金信世股份有限公司 | Management system and method for a big data processing device |
| US20150281074A1 (en) * | 2014-03-28 | 2015-10-01 | Fujitsu Limited | Data transfer control device and data transfer control method |
| CN105207806A (en) * | 2015-08-20 | 2015-12-30 | 百度在线网络技术（北京）有限公司 | Monitoring method and apparatus of distributed service |
| CN105553739A (en) * | 2015-12-25 | 2016-05-04 | 瑞斯康达科技发展股份有限公司 | Method and device for tracking MAC addresses |
-
2016
- 2016-08-25 CN CN201610726113.9A patent/CN106100913A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104462180A (en) * | 2013-09-24 | 2015-03-25 | 乐金信世股份有限公司 | Management system and method for a big data processing device |
| US20150281074A1 (en) * | 2014-03-28 | 2015-10-01 | Fujitsu Limited | Data transfer control device and data transfer control method |
| CN105207806A (en) * | 2015-08-20 | 2015-12-30 | 百度在线网络技术（北京）有限公司 | Monitoring method and apparatus of distributed service |
| CN105553739A (en) * | 2015-12-25 | 2016-05-04 | 瑞斯康达科技发展股份有限公司 | Method and device for tracking MAC addresses |
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107168845A (en) * | 2017-03-31 | 2017-09-15 | 北京奇艺世纪科技有限公司 | A kind of Fault Locating Method and device |
| CN109218041A (en) * | 2017-06-29 | 2019-01-15 | 北京京东尚科信息技术有限公司 | Request processing method and device for server system |
| CN109218041B (en) * | 2017-06-29 | 2022-03-11 | 北京京东尚科信息技术有限公司 | Request processing method and device for server system |
| CN107465549A (en) * | 2017-08-18 | 2017-12-12 | 北京奇艺世纪科技有限公司 | A kind of distributed message processing method and system |
| CN107465549B (en) * | 2017-08-18 | 2021-03-02 | 北京奇艺世纪科技有限公司 | Distributed message processing method and system |
| CN110875832A (en) * | 2018-08-31 | 2020-03-10 | 北京京东尚科信息技术有限公司 | Abnormal service monitoring method, device and system and computer readable storage medium |
| CN109344130A (en) * | 2018-09-27 | 2019-02-15 | 郑州云海信息技术有限公司 | A kind of blog management method and device |
| CN111143304A (en) * | 2019-11-20 | 2020-05-12 | 杭州端点网络科技有限公司 | Micro-service system abnormal log analysis method based on request link |
| CN111143304B (en) * | 2019-11-20 | 2023-09-29 | 杭州端点网络科技有限公司 | Micro-service system exception log analysis method based on request link |
| CN110888790A (en) * | 2019-11-29 | 2020-03-17 | 杭州迪普科技股份有限公司 | Log management method and device, electronic equipment and storage medium |
| CN110888790B (en) * | 2019-11-29 | 2024-02-27 | 杭州迪普科技股份有限公司 | Log management method and device, electronic equipment and storage medium |
| CN112306817A (en) * | 2020-11-20 | 2021-02-02 | 张俊 | Big data based operation monitoring analysis system and method |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106100913A (en) | Error message alignment system and method | |
| TWI741505B (en) | Topology processing method, device and system | |
| CN109150572B (en) | Method, device and computer readable storage medium for realizing alarm association | |
| CN106886410B (en) | A kind of software version management system | |
| CN105718371B (en) | A kind of regression testing method, apparatus and system | |
| CN107577545A (en) | A kind of failed disk detection and restorative procedure and device | |
| CN105897507B (en) | The condition detection method and device of node device | |
| CN110275992B (en) | Emergency processing method, device, server and computer readable storage medium | |
| US20120047249A1 (en) | Method of determining equivalent subsets of agents to gather information for a fabric | |
| US20150169288A1 (en) | System operation tracing method on distributed system | |
| CN107193730A (en) | A kind of interface test method of automation | |
| CN111459631A (en) | Automatic batch processing method and system for server | |
| CN108733698A (en) | A kind of processing method and background service system of log information | |
| CN106095676A (en) | Method of testing that data report, Apparatus and system | |
| CN105989140A (en) | Data block processing method and equipment | |
| CN104468207A (en) | Terminal management method, device and system | |
| CN115660610A (en) | Decentralized cooperative office system and method | |
| CN101252477B (en) | Determining method and analyzing apparatus of network fault root | |
| CN103024425A (en) | New method of intelligent repair monitoring equipment combining fault detection and workflow | |
| CN108156061B (en) | esb monitoring service platform | |
| CN106155000B (en) | The processing method and processing device of the board warning information of semiconductor board | |
| CN106201735A (en) | Method for message transmission and system | |
| CN105335266B (en) | Method for determining the failure of tested equipment | |
| CN105025179A (en) | Method and system for monitoring service agents of call center | |
| CN110879779B (en) | Joint debugging test method and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| AD01 | Patent right deemed abandoned | ||
| AD01 | Patent right deemed abandoned |
Effective date of abandoning: 20191115 |