CN107124299A - Resource method for early warning and system based on resource topology - Google Patents
Resource method for early warning and system based on resource topology Download PDFInfo
- Publication number
- CN107124299A CN107124299A CN201710209719.XA CN201710209719A CN107124299A CN 107124299 A CN107124299 A CN 107124299A CN 201710209719 A CN201710209719 A CN 201710209719A CN 107124299 A CN107124299 A CN 107124299A
- Authority
- CN
- China
- Prior art keywords
- resource
- abnormal
- early warning
- warning information
- relation
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/14—Network analysis or design
- H04L41/147—Network analysis or design for predicting network behaviour
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The embodiments of the invention provide the resource method for early warning based on resource topology and system, applied to information alert technical field, this method includes：The warning information in network is obtained, the resource for determining warning information alarm is abnormal resource.Obtain resource topology relation, wherein, resource topology relation is the dependence between the resource in configuration management database, and by the resource in configuration management database, multi-layer arranges formed topological relation from the bottom to top, and in resource topology relation pelagical resources application lower resource.In resource topology relation, the upper resource of abnormal resource is chosen, correlated resources are used as.According to warning information, the warning information of correlated resources is generated.By the resource method for early warning based on resource topology of the present invention, realize and early warning is carried out to the risk that alarm may trigger.
Description
Technical field
The present invention relates to information alert technical field, resource method for early warning more particularly to based on resource topology and it is
System.
Background technology
Warning system be used for equipment and the abnormal conditions of service are alerted, and provide warning information check, handle and
Subscribe in function, the production environment for being widely used in all kinds of Internet firms.
Warning system is received by the incoming all kinds of original desired values of monitoring system, and these index Value Datas are by alarm
A series of computings and judgement of trigger, when meeting default alarm conditions, alarm triggered device is triggered, and will produce one
Alarm.This alarm finds the subscriber of alarm, finally eventually by inquiring about the subscription information for the subscriber for identifying the alarm
It is delivered to the short breath of subscriber, mail and produces a warning information.
In existing network environment, exist interrelated between various resources, the abnormal of resource simultaneously may
Cause the exception of other resources.But existing alarm system can only all be directed to the different of some monitored item in actual application environment
Often, an alarm is triggered, it is impossible to which early warning is carried out to the risk that alarm may trigger.
The content of the invention
The purpose of the embodiment of the present invention is to provide a kind of resource method for early warning and system based on resource topology, to realize
Early warning is carried out to the risk that alarm may trigger.Concrete technical scheme is as follows：
A kind of resource method for early warning based on resource topology, including：
The warning information in network is obtained, the resource for determining the warning information alarm is abnormal resource；
Resource topology relation is obtained, wherein, the resource topology relation is the money in the configuration management database
Dependence between source, by the resource in the configuration management database, multi-layer arranges formed topology pass from the bottom to top
System, and in the resource topology relation pelagical resources application lower resource；
In the resource topology relation, the upper resource of the abnormal resource is chosen, correlated resources are used as；
According to the warning information, the warning information of the correlated resources is generated.
Optionally, it is described according to the warning information, the warning information of the correlated resources is generated, including：
According to the severity level of the warning information, by predetermined early warning weights and default vigilance parameter, really
The fixed abnormal resource causes the relative risk that the correlated resources break down, wherein, the early warning weights are described for characterizing
Abnormal resource is to the influence degree of the correlated resources, and the vigilance parameter is for characterizing the severity level to the association money
The abnormal influence degree in source；
According to the relative risk, the warning information of the correlated resources is generated.
Optionally, in the severity level according to the warning information, by predetermined early warning weights and default
Vigilance parameter, before determining that the abnormal resource causes the relative risk that the correlated resources break down, methods described is also wrapped
Include：
According to the resource topology relation, the value of the early warning weights is set；
The monitoring system of the upper resource of the abnormal resource is obtained, the feedback made for the abnormal resource, wherein,
Whether the upper resource of the abnormal resource occurs exception in the feedback indicator preset time；
According to the feedback, the value of the early warning weights is adjusted.
Optionally, it is described according to the feedback, the value of the early warning weights is adjusted, including：
When the upper resource for being fed back to the abnormal resource in the preset time occurs abnormal, increase described different
The value of early warning weights between Chang Ziyuan upper resource and the abnormal resource.
Optionally, the default vigilance parameter, including：
The different severity levels of the warning information, correspond to corresponding vigilance parameter respectively, wherein, the severity level
Grade vigilance parameter positive correlation corresponding with the severity level.
Optionally, before the acquisition resource topology relation, methods described also includes：
Obtain the dependence between resources all in the configuration management database；
According to the dependence between resource all in the configuration management database, by the configuration management database
In all resource multi-layer is arranged from the bottom to top, set up the resource topology relation.
Optionally, before the acquisition resource topology relation, methods described also includes：
In the configuration management database, using the abnormal resource as starting point, recursive lookup applies the exception one by one
The resource of resource, until meeting default lookup stop condition；
The resource found and the abnormal resource are added in the resource topology relation.
Optionally, the lookup stop condition includes：
The resource of the resource found described in application, or the money that current lookup is arrived are not included in the configuration management database
Source is already present in the resource topology relation.
Optionally, before the acquisition resource topology relation, methods described also includes：
When dependence in the configuration management database between resource is changed, the change of generation mark
Change message；
According to the change message, the resource topology relation is updated.
A kind of resource early warning system based on resource topology, including：
Abnormal resource determining module, for obtaining the warning information in network, determines the resource of the warning information alarm
For abnormal resource；
Topological relation acquisition module, for obtaining resource topology relation, wherein, the resource topology relation is according to described
The dependence between resource in configuration management database, by the multilayer from the bottom to top of the resource in the configuration management database
The formed topological relation of level arrangement, and in the resource topology relation pelagical resources application lower resource；
Correlated resources choose module, in the resource topology relation, choosing the upper resource of the abnormal resource,
It is used as correlated resources；
Warning information generation module, for according to the warning information, generating the warning information of the correlated resources.
Optionally, the warning information generation module, including：
First computing submodule, for the severity level according to the warning information, passes through predetermined early warning weights
And default vigilance parameter, the relative risk that the abnormal resource causes the correlated resources to break down is determined, wherein, it is described pre-
Alert weights are used to characterize influence degree of the abnormal resource to the correlated resources, and the vigilance parameter is described tight for characterizing
The other influence degree abnormal to the correlated resources of heavy duty；
Second computing submodule, for according to the relative risk, generating the warning information of the correlated resources.
Optionally, the warning information generation module also includes：
Early warning weight setting submodule, for according to the resource topology relation, setting the value of the early warning weights；
Feed back acquisition submodule, the monitoring system of the upper resource for obtaining the abnormal resource, for described in upper strata
The feedback that abnormal resource is made, wherein, whether the upper resource of the abnormal resource occurs in the feedback indicator preset time
It is abnormal；
Early warning weighed value adjusting submodule, for according to the feedback, adjusting the value of the early warning weights.
Optionally, the early warning weighed value adjusting submodule, specifically for：
When the upper resource for being fed back to the abnormal resource in the preset time occurs abnormal, increase described different
The value of early warning weights between Chang Ziyuan upper resource and the abnormal resource.
Optionally, the default vigilance parameter in the first computing submodule, including：
The different severity levels of the warning information, correspond to corresponding vigilance parameter respectively, wherein, the severity level
Grade vigilance parameter positive correlation corresponding with the severity level.
Optionally, the resource early warning system based on resource topology, in addition to：
First enquiry module, for obtaining the dependence between resources all in the configuration management database；
First topological relation sets up module, for according to the dependence between resource all in the configuration management database
Relation, by resource all in the configuration management database, multi-layer is arranged from the bottom to top, sets up the resource topology relation.
Optionally, the resource early warning system based on resource topology, in addition to：
Second enquiry module, in the configuration management database, using the abnormal resource as starting point, recurrence one by one
The resource of the application abnormal resource is searched, until meeting default lookup stop condition；
Second topological relation sets up module, for by the resource found and the abnormal resource, being added to the resource
In topological relation.
Optionally, the lookup stop condition in second enquiry module includes：
The resource of the resource found described in application, or the money that current lookup is arrived are not included in the configuration management database
Source is already present in the resource topology relation.
Optionally, the resource early warning system based on resource topology, in addition to：
Message capturing module is changed, is changed for the dependence between the resource in the configuration management database
When, the change message of the generation mark change；
Topological relation update module, for according to the change message, updating the resource topology relation.
Resource method for early warning and system provided in an embodiment of the present invention based on resource topology, according to warning information, it is determined that
Abnormal resource, by resource topology relation, determines the upper resource of the corresponding abnormal resource of warning information, and believe according to alarm
Breath, generates the warning information of the upper resource of abnormal resource, realizes and carries out early warning to the risk that alarm may trigger.Certainly, it is real
Applying any product or method of the present invention must be not necessarily required to while reaching all the above advantage.
Brief description of the drawings
In order to illustrate more clearly about the embodiment of the present invention or technical scheme of the prior art, below will be to embodiment or existing
There is the accompanying drawing used required in technology description to be briefly described, it should be apparent that, drawings in the following description are only this
Some embodiments of invention, for those of ordinary skill in the art, on the premise of not paying creative work, can be with
Other accompanying drawings are obtained according to these accompanying drawings.
Fig. 1 is the schematic diagram of the resource method for early warning based on resource topology of the embodiment of the present invention；
Fig. 2 is the schematic diagram of the resource topology relation of the embodiment of the present invention；
Fig. 3 is the schematic diagram of the early warning weight setting of the embodiment of the present invention；
Fig. 4 is the schematic diagram of the early warning right value update of the embodiment of the present invention；
Fig. 5 is a kind of schematic diagram of the resource early warning system based on resource topology of the embodiment of the present invention；
Fig. 6 is the schematic diagram of the resource early warning system workflow based on resource topology of the embodiment of the present invention；
Fig. 7 is another schematic diagram of the resource early warning system based on resource topology of the embodiment of the present invention.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is carried out clear, complete
Site preparation is described, it is clear that described embodiment is only a part of embodiment of the invention, rather than whole embodiments.It is based on
Embodiment in the present invention, it is every other that those of ordinary skill in the art are obtained under the premise of creative work is not made
Embodiment, belongs to the scope of protection of the invention.
Warning system is used to alert equipment and the abnormal conditions of service, but existing alarm system all can only be for real
The exception of some monitored item in the application environment of border, triggers an alarm, it is impossible in various resources (equipment and service) mutually
In the network of association, early warning is carried out to the resource associated by abnormal resource.
Therefore the embodiments of the invention provide a kind of resource method for early warning based on resource topology, referring to Fig. 1, Fig. 1 is this
The schematic diagram of the resource method for early warning based on resource topology of inventive embodiments, including：
S101, obtains the warning information in network, and the resource for determining warning information alarm is abnormal resource.
When resource in network occurs abnormal, warning system can be triggered and produce warning information.According to the content of warning information,
The resource that warning information is alerted, i.e. abnormal resource can be determined.
In warning system, a Topic (topic) represents an alarm source, when the corresponding trigger conditions of Topic reach
Then, an Event (warning information) will be produced.Early warning system determines Event correspondence Topic, obtains abnormal in Topic
The Hostname (Hostname) of resource, so that it is determined that abnormal resource.
Early warning system can be a kind of equipment, including：Processor, memory, communication interface and bus；Processor, storage
Device and communication interface are connected by bus and complete mutual communication；Memory storage executable program code；Processor leads to
Cross and read in memory the executable program code that stores to run program corresponding with executable program code, for performing
Resource method for early warning based on resource topology.
Early warning system can also be a kind of application program for being applied to warning system or alerting subscriber, for operationally
Perform the resource method for early warning based on resource topology.
Early warning system can also be a kind of storage medium for being applied to warning system or alerting subscriber, can be held for storing
Line code, executable code is used to perform the resource method for early warning based on resource topology.
S102, obtain resource topology relation, wherein, resource topology relation in configuration management database resource it
Between dependence, by the resource in configuration management database, multi-layer arranges formed topological relation from the bottom to top, and
Resource topology relation pelagical resources application lower resource.
The dependence between resource is have recorded in resource topology relation, in resource topology relation, using abnormal resource
Resource A be abnormal resource upper resource, abnormal resource be resource A lower resource, meanwhile, if resource B application resource A,
Then resource B is resource A upper resource, and resource A is resource B lower resource.Resource topology relation is obtained, is follow-up early warning system
System determines that the upper resource of abnormal resource provides premise by query resource topological relation.Resource topology relation can be to carry
It is preceding foundation or being set up in real time after determination abnormal resource.At least one is applied in resource topology relation pelagical resources
Individual lower resource.For example, in resource topology relation as shown in Figure 2, Redis, ActiveMQ and Hadoop are located at orlop
Cluster level, APP1 and APP2 be located at the APP levels in intermediate layer, and Project1 is located at the project level of top.Wherein,
APP2 is Hadoop upper resource, and Hadoop is APP2 lower resource.
S103, in resource topology relation, chooses the upper resource of abnormal resource, is used as correlated resources.
In resource topology relation, the operation of upper resource application lower resource, i.e. upper resource relies on lower resource
Normal work, lower resource is alerted, then upper resource may be affected.Therefore it needs to be determined that using the abnormal resource
Upper resource, be used as the resource for treating early warning, i.e. correlated resources.
S104, according to warning information, generates the warning information of correlated resources.
Early warning system generates warning information, the upper resource of early warning abnormal resource according to warning information.For example, with reference to figure
2, when warning information alerts APP2, generation Project1 (project 1) warning information：The resource APP2 hairs of Project1 applications
Raw alarm, it is noted that investigation Project1.According to warning information, mark warning information in warning information, warning information is generated
Content, compared to only simple early warning upper resource, the content for identifying the warning information early warning of warning information is more accurate, convenient
Operation maintenance personnel analyzes abnormal source according to the warning information identified in warning information, to be made adjustment in time to upper resource,
Prevent that upper resource from delaying machine.
In embodiments of the present invention, according to warning information, abnormal resource is determined, by resource topology relation, it is determined that alarm
The upper resource of the corresponding abnormal resource of information, and according to warning information, the warning information of the upper resource of abnormal resource is generated,
Realize and early warning is carried out to the risk that alarm may trigger.
Optionally, according to warning information, the warning information of correlated resources is generated, including：
Step one, according to the severity level of warning information, by predetermined early warning weights and default vigilance parameter,
The relative risk that abnormal resource causes correlated resources to break down is determined, wherein, early warning weights are used to characterize abnormal resource to association
The influence degree of resource, vigilance parameter is used to characterize severity level to the abnormal influence degree of correlated resources.
Early warning system obtain warning information the corresponding vigilance parameter of severity level, according to early warning weights (abnormal resource with
The weight of topological link between the upper resource of abnormal resource), and vigilance parameter, it is determined that the risk of the upper resource of abnormal cluster
Rate.Its computational methods is：
Relative risk=vigilance parameter × (the early warning weights of the early warning weights ÷ greatest measures of current ink)
The early warning weights of current ink are the early warning weights between abnormal resource and the upper resource for treating early warning, greatest measure
Early warning weights are the maximum early warning weights between abnormal resource and its upper resource.Early warning weights identify lower resource to thereon
The influence degree of layer resource.The operation of one upper resource, may rely on the support of multiple lower resources, each lower resource
The abnormal influence to upper resource it is also incomplete same, in order to distinguish influence of the different lower resources to same upper resource,
The degree of accuracy of warning information is improved, early warning weights are added.
When vigilance parameter is 0, without early warning, for example when warning information severity level for Warning (warning) or
During Information (notice), vigilance parameter is 0, without the early warning of upper resource.Because when vigilance parameter is 0,
Abnormal resource remains able to operation, influence will not be produced on the normal operation of the upper resource of the abnormal resource, so need not be pre-
It is alert.When vigilance parameter is not 0, the warning information of upper resource is sent according to relative risk, it is abnormal when vigilance parameter is not 0
Resource may delay the situation of machine, can produce influence to the normal operation of the upper resource of the abnormal resource, it is therefore desirable to
Send warning information.According to vigilance parameter and early warning weights, the relative risk of correlated resources is calculated, the relative risk calculated is accurate,
The warning information of generation has convincingness.
Step 2, according to relative risk, generates the warning information of correlated resources.
Warning information identifies relative risk.Relative risk is higher, and the degree of the early warning of the warning information of corresponding correlated resources is got over
Seriously.Compared to simple generation warning information, according to the warning information early warning correlated resources of mark relative risk, early warning is more accurate.
By taking Fig. 4 as an example, when receiving the warning information of ActiveMQ Cluster (cluster) 1, in severity level
During for Disaster (disaster), then APP1 relative risk is：0.9 × (1/2)=45%, then APP2 relative risk be：0.9×
(2/2)=90%.According to relative risk, it will send the warning information on App1：The resource ActiveMQ that App1 is relied on
Disaster alarm XXX (mark of warning information, such as title or numbering) occurs for Cluster1, and the probability for having 45% is caused
App1 sends failure, it is noted that investigation.Send the warning information on App2：The resource ActiveMQ that App2 is relied on
Disaster alarm XXX occurs for Cluster1, causes App2 to send failure the probability for having 90%, it is noted that investigation.
In embodiments of the present invention, the specific generation method of warning information is given, by early warning weights and vigilance parameter,
Relative risk is determined, and then generates warning information, rationally, early warning effect is good for the warning information of generation.
Optionally, default vigilance parameter, including：
The different severity levels of warning information, correspond to corresponding vigilance parameter respectively, wherein, the grade of severity level with it is tight
The not corresponding vigilance parameter positive correlation of heavy duty.
The warning information is included in the vigilance parameter positive correlation corresponding with severity level of the grade of severity level, warning information
Severity level, when severity level is relatively low, it is abnormal smaller that the corresponding abnormal resource of warning information is produced, and remains able to fortune
OK, it is therefore smaller by being influenceed using the upper resource of the abnormal resource；But when severity level is higher, abnormal resource is produced
Exception it is larger, or even can not run, can thus cause large effect to the upper resource of the abnormal resource.It is optional
, when the severity level of warning information is Disaster, vigilance parameter is 0.9, when the severity level is High (height),
Vigilance parameter is 0.75, and when the severity level is Average (medium), vigilance parameter is 0.5, when the severity level is
During Warning and Information, vigilance parameter is 0.Wherein, the grade Disaster of warning information severity level>High>
Average>Warning>Information.When vigilance parameter is 0, without early warning, the i.e. severity level when warning information
During for Warning or Information, without the early warning of upper resource.The corresponding relation of vigilance parameter and severity level is such as
Shown in table 1.
Table 1
| Severity level | Vigilance parameter |
| Disaster | 0.9 |
| High | 0.75 |
| Average | 0.5 |
| Warning | 0 |
| Information | 0 |
In embodiments of the present invention, the specific establishing method of vigilance parameter is given, the severity level of warning information etc.
Level vigilance parameter positive correlation corresponding with severity level, vigilance parameter setting is reasonable, is to determine that relative risk is carried according to vigilance parameter
Supply to support.
Optionally, in the severity level according to warning information, predetermined early warning weights and default early warning system are passed through
Number, before determining that abnormal resource causes the relative risk that correlated resources break down, method also includes：
Step one, according to resource topology relation, the value of early warning weights is set.
Early warning weights identify influence degree of the lower resource to its upper resource.The operation of one upper resource, may
The support of multiple lower resources can be relied on, the abnormal influence to upper resource of each lower resource is also incomplete same, in order to
Influence of the different lower resources to same upper resource is distinguished, is improved in the degree of accuracy of warning information, the embodiment of the present invention in money
In the topological relation of source, early warning weights are added.In resource topology relation, the upper resource with dependence and lower floor are set
The value of early warning weights between resource.For example, under original state, the value of early warning weights is disposed as 1.
Step 2, the monitoring system of the upper resource of acquisition abnormal resource, the feedback made for abnormal resource, wherein,
Whether the upper resource of abnormal resource occurs exception in feedback indicator preset time.
Whether the upper resource for detecting abnormal resource by monitoring system occurs exception, and is made instead according to testing result
Whether the upper resource of abnormal resource sends exception in feedback, feedback indicator preset time.For example, being fed back to upper strata in preset time
Resource there occurs upper resource no exceptions in exception, or preset time.Obtain the feedback.Monitoring system is commonly used in network
System, the running situation for each resource in detecting system.The feedback of monitoring system is obtained, compared to utilizing early warning system
The running situation for detecting upper resource is gone more to facilitate, and the subsequent brew early warning weights that are fed back to obtained provide premise.
Step 3, according to feedback, adjusts the value of early warning weights.
According to feedback, judge whether the upper resource of abnormal resource occurs exception, and then adjust abnormal resource and upper strata money
The value of early warning weights between source.If the upper resource of abnormal resource there occurs exception, increase abnormal resource is with occurring the upper of exception
The value of early warning weights between layer resource.
In embodiments of the present invention, the specific method for determining early warning weights is given, according to feedback adjustment early warning weights
Value, early warning weights are accurate, to determine that relative risk provides support.
Optionally, according to feedback, the value of early warning weights is adjusted, including：
When the upper resource for being fed back to abnormal resource in preset time occurs abnormal, increase the upper resource of abnormal resource
The value of early warning weights between abnormal resource.
Preset time is the random time for meeting the embodiment of the present invention, causes upper resource according to because lower resource is abnormal
The reaction time for occurring exception is set.If upper resource there occurs exception in preset time, then it is assumed that upper resource by
The abnormal influence of abnormal resource.The value of preset time can not be too small, and this is the alarm that abnormal resource is therefore sent in warning system
After information, the upper resource of commonly used abnormal resource will can just produce exception after one section of reaction time, if preset time
Less than the value that the reaction time can not accurately adjust early warning weights；The value of preset time can not be too big, because upper strata is provided
Source also suffers from the influence of other lower resources in addition to abnormal resource, and upper resource self-operating may also occur different in addition
Often, if preset time is too big, the exception of upper resource caused by other reasonses may be attributed to abnormal resource and causes upper strata
The exception of resource, causes early warning weights inaccurate.For example, preset time is set as into 10 minutes.Referring to Fig. 3, under original state
Early warning weights between ActiveMQ Cluster1 and APP1 are the early warning power between 1, ActiveMQ Cluster1 and APP2
Value is also 1.After ActiveMQ Cluster1 warning information is produced, by 10 minutes, (now preset time was set as 10 points
Clock) after, APP1 is normally run, and exception occurs for APP2, then by the early warning weights increase between ActiveMQ Cluster1 and APP2
1.Early warning weights now are as shown in Figure 4.
In embodiments of the present invention, when the upper resource of abnormal resource occurs abnormal, the upper strata money of increase abnormal resource
The value of early warning weights between source and abnormal resource, the value to early warning weights is updated, fixed compared to being simply set to one
Value, the setting of the value of early warning weights is more reasonable, and warning information is more accurate.
If after preset time, the upper resource no exceptions of abnormal resource does not change the upper strata money of abnormal resource
Early warning weights between source and abnormal resource.If certainly after preset time, the exception of abnormal resource and to cause upper strata to provide
Source occurs abnormal, can also accordingly reduce the early warning weights between abnormal resource and its upper resource, but early warning weights value all the time
For positive number.
Optionally, according to feedback, the value of early warning weights is adjusted, including：
When being fed back to the upper resource no exceptions of abnormal resource in preset time, the upper strata money of abnormal resource is reduced
The value of early warning weights between source and abnormal resource, wherein, the value of early warning weights is positive number.
For example, the early warning weights under current state between ActiveMQ Cluster1 and APP1 are 10, work as generation
After ActiveMQ Cluster1 warning information, after 10 minutes (now preset time is set as 10 minutes), APP1 is still just
Often operation, then reduce 1, then now ActiveMQ Cluster1 by the early warning weights between ActiveMQ Cluster1 and APP1
Early warning weights between APP1 are 9.When the early warning weights between ActiveMQ Cluster1 and APP1 are reduced to 1, even if
After ActiveMQ Cluster1 warning information is produced, still normally run by 10 minutes APP1, ActiveMQ
Early warning weights between Cluster1 and APP1 also no longer reduce.
In embodiments of the present invention, when upper resource no exceptions in preset time of abnormal resource, reduce different
The value of early warning weights between Chang Ziyuan upper resource and abnormal resource, the value to early warning weights is updated, compared to letter
Set up and be set to a definite value, the setting of the value of early warning weights is more reasonable, and warning information is more accurate.
Before resource topology relation is obtained, it is thus necessary to determine that resource topology relation.The process of setting up of resource topology relation is
Meet the arbitrary process of the embodiment of the present invention.Can in advance it be set up according to the dependence between all resources, or
Set up one by one according to abnormal resource.
Optionally, in the resource method for early warning based on resource topology of the embodiment of the present invention, closed obtaining resource topology
Before system, this method also includes：
Step one, the dependence between resources all in configuration management database is obtained.
Step 2, according to the dependence between resource all in configuration management database, by configuration management database
In all resource multi-layer is arranged from the bottom to top, set up resource topology relation.
In resource topology relation, upper resource application lower resource relies on lower resource and run, it is generally the case that
Type identical resource can be distributed in same level.For example, in resource topology relation as shown in Figure 2, Redis,
ActiveMQ and Hadoop is located at undermost cluster level, and APP1 and APP2 are located at the APP levels in intermediate layer, Project1
In the project level of top.Hadoop upper resource be APP2 and Project1, ActiveMQ upper resource be APP1,
APP2 and Project1, Redis upper resource are APP1, APP2 and Project1.
In embodiments of the present invention, the method for building up of resource topology relation is given, is subsequently according to resource topology relation
Determine that the upper resource of abnormal resource provides technical support.
Optionally, in the resource method for early warning based on resource topology of the embodiment of the present invention, closed obtaining resource topology
Before system, this method also includes：
Step one, in configuration management database, using abnormal resource as starting point, recursive lookup application abnormal resource one by one
Resource, until meeting default lookup stop condition.
In configuration management database, the resource of application abnormal resource is searched, the abnormal application resource of one-level is used as.Then again
The resource of the abnormal application resource of application one-level is searched, two grades of abnormal application resources are used as.Continue to search for, until N grades of abnormal applications
Resource meets default lookup stop condition, wherein, N grades of abnormal application resources are the resource of the abnormal application resource of N-1 grades of application,
N is positive integer.
Step 2, the resource found and abnormal resource are added in resource topology relation.
In resource topology relation, the corresponding level of abnormal resource is found, and abnormal resource is added among the level,
For example, abnormal resource is added in APP levels if abnormal resource is APP.Then, the abnormal application resource of one-level is added to
The upper strata of abnormal resource, and the dependence between abnormal resource and the abnormal application resource of one-level is identified, then two grades of exceptions are applied
Resource is added to the upper strata of the abnormal application resource of one-level, and identifies between the abnormal application resource of one-level and two grades of abnormal application resources
Dependence.Until N grades of abnormal application resources are added into resource topology relation, and identify N-1 grades of abnormal application resources and N grades
Dependence between abnormal application resource.
In embodiments of the present invention, the resource for having dependence with abnormal resource is searched, is added in resource topology relation,
In the foundation and maintenance process of resource topology relation, efficiency high, and ensure that the accuracy of resource topology relation.
Optionally, searching stop condition includes：
Do not include the resource of resource that application is found in configuration management database, or current lookup to resource deposited
It is in resource topology relation.
When meeting without the abnormal application resources (resource that current lookup is arrived) of N grades of resource application, or meet N grade and abnormal apply
When resource is already present in resource topology relation, stop searching.
In embodiments of the present invention, the particular content for searching stop condition is given, the waste of calculation resources is prevented.
Optionally, before resource topology relation is obtained, method also includes：
Step one, when the dependence in configuration management database between resource is changed, generation mark change
Change message.
In configuration management database, the resource stored in monitoring resource topological relation, the dependence between these resources is closed
It is that when changing, generation identifies the change message of the change.For example, when APP1 upper resource is changed to by Project1
During Project2, change message is：“APP1：Project1 is changed to Project2 ".
Step 2, according to change message, updates resource topology relation.
According to the change of the dependence of change Message Record, CMDB is inquired about, resource topology relation is updated from bottom to top.Example
Such as, if change message is：“APP1：Project1 is changed to Project2 ", then in resource topology relation, by APP1 upper strata
Resource is deleted, and re-establishes APP1 upper resource Project2, while inquiring about CMDB, sets up resource topology pass step by step upwards
System, until meeting above-mentioned stop condition.
In embodiments of the present invention, according to change message, update resource topology relation, it is ensured that resource topology relation it is accurate
Property, so as to ensure that the accuracy of early warning.
The embodiments of the invention provide a kind of system for applying the above-mentioned resource method for early warning based on resource topology, referring to figure
5, Fig. 5 be a kind of schematic diagram of the early warning system based on resource topology of the embodiment of the present invention, including：
Resource topology maintenance module 501, for (Configuration Management Database to be configured from CMDB
Manage database) in extract topological relation between cluster, APP and other resources, it is ensured that the storage of resource topology relation and more
Newly.
As shown in fig. 6, resource topology maintenance module 501 determines abnormal resource by early warning analysis module 503, pass through inquiry
CMDB interface, searches the resource of application abnormal resource, by the resource found using abnormal resource as starting point, is closed according to relying on
System, composition structure topological relation, sets up the resource topology relation of multi-layer from the bottom to top, in the topological relation, upper strata upwards
Resource application lower resource.Meanwhile, resource topology maintenance module 501 subscribes to the change of dependence between resource in resource topology relation
More, when generation dependence is changed between the resource in the write-in resource topology relation in CMDB, message system can be produced
The modification information for the more mark that changes, resource topology maintenance module 501 obtains the modification information, to update resource topology relation.
Early warning weights maintenance module 502, receives the feedback of anomalous event, and root for obtaining in upper resource monitoring system
According to the early warning weights of resource in feedback adjustment resource topology relation.
Early warning weights maintenance module 502 is responsible for safeguarding the early warning weights of resource in resource topology relation, in warning system hair
Go out after alarm, if in preset time, abnormal, message system generation occurs for the upper resource that monitoring system detects abnormal information
Abnormal upper resource occurs for feedback, the feedback indicator.Early warning weights maintenance module 502 increases abnormal information according to the feedback
With occurring the early warning weights between abnormal upper resource.
Early warning analysis module 503, for receiving warning information, finds the association of this warning information from resource topology relation
Upper resource, and according to early warning weight computing and send warning information.
As shown in fig. 6, when resource in a network occurs abnormal, triggering warning system, warning information is generated.Early warning analysis
Module 503 analyzes the warning information, it is determined that occurring abnormal abnormal resource, according to the severity level of warning information, determines early warning
Coefficient.Early warning analysis module 503 obtains resource topology relation, and the upper resource of abnormal resource is searched in resource topology relation
(resource of application abnormal resource), and abnormal resource and the early warning weights of upper resource are obtained, weighed according to vigilance parameter and early warning
The probability that value calculates upper resource occurrence risk is relative risk.Early warning analysis module 503 generates upper resource according to relative risk
Warning information.
In embodiments of the present invention, by the menace level and early warning weights of warning information, determine that warning information is corresponding
The relative risk of the upper resource of abnormal resource, according to relative risk early warning upper resource, can be provided to the abnormal upper strata that may trigger
Source failure carries out early warning.
Referring to Fig. 7, Fig. 7 is another schematic diagram of the resource early warning system based on resource topology of the embodiment of the present invention,
Including：
Abnormal resource determining module 701, for obtaining the warning information in network, the resource for determining warning information alarm is
Abnormal resource.
Topological relation acquisition module 702, for obtaining resource topology relation, wherein, resource topology relation is according to configuration
The dependence between the resource in database is managed, multi-layer arranges institute from the bottom to top by the resource in configuration management database
The topological relation of formation, and in resource topology relation pelagical resources application lower resource.
Correlated resources choose module 703, in resource topology relation, choosing the upper resource of abnormal resource, as
Correlated resources.
Warning information generation module 704, for according to warning information, generating the warning information of correlated resources.
In embodiments of the present invention, according to warning information, abnormal resource is determined, by resource topology relation, it is determined that alarm
The upper resource of the corresponding abnormal resource of information, and according to warning information, the warning information of the upper resource of abnormal resource is generated,
Realize and early warning is carried out to the risk that alarm may trigger.
It should be noted that the system of the embodiment of the present invention is to apply the above-mentioned resource method for early warning based on resource topology
System, then all embodiments of the above-mentioned resource method for early warning based on resource topology are applied to the system, and can reach phase
Same or similar beneficial effect.
Optionally, warning information generation module 704, including：
First computing submodule, for the severity level according to warning information, by predetermined early warning weights and in advance
If vigilance parameter, determine the relative risk that abnormal resource causes correlated resources to break down, wherein, early warning weights be used for characterize it is different
Chang Ziyuan is to the influence degree of correlated resources, and vigilance parameter is for characterizing severity level to the abnormal influence degree of correlated resources.
Second computing submodule, for according to relative risk, generating the warning information of correlated resources.
In embodiments of the present invention, the specific generation method of warning information is given, by early warning weights and vigilance parameter,
Relative risk is determined, and then generates warning information, rationally, early warning effect is good for the warning information of generation.
Optionally, warning information generation module 704, in addition to：
Early warning weight setting submodule, for according to resource topology relation, setting the value of early warning weights.
Feed back acquisition submodule, the monitoring system of the upper resource for obtaining abnormal resource, for abnormal resource in upper strata
The feedback made, wherein, whether the upper resource of abnormal resource occurs exception in feedback indicator preset time.
Early warning weighed value adjusting submodule, for according to feedback, adjusting the value of early warning weights.
In embodiments of the present invention, the specific method for determining early warning weights is given, according to feedback adjustment early warning weights
Value, early warning weights are accurate, to determine that relative risk provides support.
Optionally, early warning weighed value adjusting submodule, specifically for：
When the upper resource for being fed back to abnormal resource in preset time occurs abnormal, increase the upper resource of abnormal resource
The value of early warning weights between abnormal resource.
In embodiments of the present invention, when the upper resource of abnormal resource occurs abnormal, the upper strata money of increase abnormal resource
The value of early warning weights between source and abnormal resource, the value to early warning weights is updated, fixed compared to being simply set to one
Value, the setting of the value of early warning weights is more reasonable.
Optionally, the default vigilance parameter in the first computing submodule, including：
The different severity levels of warning information, correspond to corresponding vigilance parameter respectively, wherein, the grade of severity level with it is tight
The not corresponding vigilance parameter positive correlation of heavy duty.
In embodiments of the present invention, the specific establishing method of vigilance parameter is given, the severity level of warning information etc.
Level vigilance parameter positive correlation corresponding with severity level, vigilance parameter setting is reasonable, is to determine that relative risk is carried according to vigilance parameter
Supply to support.
Optionally, the resource early warning system based on resource topology in the embodiment of the present invention, in addition to：
First enquiry module, for obtaining the dependence between resources all in configuration management database.
First topological relation sets up module, for being closed according to the dependence between resource all in configuration management database
System, by resource all in configuration management database, multi-layer is arranged from the bottom to top, sets up resource topology relation.
In embodiments of the present invention, the method for building up of resource topology relation is given, is subsequently according to resource topology relation
Determine that the upper resource of abnormal resource provides technical support.
Optionally, the resource early warning system based on resource topology in the embodiment of the present invention, in addition to：
Second enquiry module, in configuration management database, using abnormal resource as starting point, recursive lookup application one by one
The resource of abnormal resource, until meeting default lookup stop condition.
Second topological relation sets up module, for by the resource found and abnormal resource, being added to resource topology relation
In.
In embodiments of the present invention, the resource for having dependence with abnormal resource is searched, is added in resource topology relation,
In the foundation and maintenance process of resource topology relation, efficiency high, and ensure that the accuracy of resource topology relation.
Optionally, the lookup stop condition in the second enquiry module includes：
Do not include the resource of resource that application is found in configuration management database, or current lookup to resource deposited
It is in resource topology relation.
In embodiments of the present invention, the particular content for searching stop condition is given, the waste of calculation resources is prevented.
Optionally, the resource early warning system based on resource topology in the embodiment of the present invention, in addition to：
Message capturing module is changed, when being changed for the dependence between the resource in configuration management database,
The change message of generation mark change.
Topological relation update module, for according to change message, updating resource topology relation.
In embodiments of the present invention, according to change message, update resource topology relation, it is ensured that resource topology relation it is accurate
Property, so as to ensure that the accuracy of early warning.
It should be noted that herein, such as first and second or the like relational terms are used merely to a reality
Body or operation make a distinction with another entity or operation, and not necessarily require or imply these entities or deposited between operating
In any this actual relation or order.Moreover, term " comprising ", "comprising" or its any other variant are intended to
Nonexcludability is included, so that process, method, article or equipment including a series of key elements not only will including those
Element, but also other key elements including being not expressly set out, or also include being this process, method, article or equipment
Intrinsic key element.In the absence of more restrictions, the key element limited by sentence "including a ...", it is not excluded that
Also there is other identical element in process, method, article or equipment including the key element.
Each embodiment in this specification is described by the way of related, identical similar portion between each embodiment
Divide mutually referring to what each embodiment was stressed is the difference with other embodiment.It is real especially for system
Apply for example, because it is substantially similar to embodiment of the method, so description is fairly simple, related part is referring to embodiment of the method
Part explanation.
The foregoing is merely illustrative of the preferred embodiments of the present invention, is not intended to limit the scope of the present invention.It is all
Any modification, equivalent substitution and improvements made within the spirit and principles in the present invention etc., are all contained in protection scope of the present invention
It is interior.
Claims (18)
1. a kind of resource method for early warning based on resource topology, it is characterised in that including：
The warning information in network is obtained, the resource for determining the warning information alarm is abnormal resource；
Obtain resource topology relation, wherein, the resource topology relation in the configuration management database resource it
Between dependence, by the resource in the configuration management database, multi-layer arranges formed topological relation from the bottom to top,
And in the resource topology relation pelagical resources application lower resource；
In the resource topology relation, the upper resource of the abnormal resource is chosen, correlated resources are used as；
According to the warning information, the warning information of the correlated resources is generated.
2. according to the method described in claim 1, it is characterised in that described according to the warning information, generate the association money
The warning information in source, including：
According to the severity level of the warning information, by predetermined early warning weights and default vigilance parameter, institute is determined
The relative risk that abnormal resource causes the correlated resources to break down is stated, wherein, the early warning weights are used to characterize the exception
Resource is to the influence degrees of the correlated resources, and the vigilance parameter is used to characterizing the severity level different to the correlated resources
Normal influence degree；
According to the relative risk, the warning information of the correlated resources is generated.
3. method according to claim 2, it is characterised in that in the severity level according to the warning information, leads to
Predetermined early warning weights and default vigilance parameter are crossed, determines that the abnormal resource causes the correlated resources to break down
Relative risk before, methods described also includes：
According to the resource topology relation, the value of the early warning weights is set；
The monitoring system of the upper resource of the abnormal resource is obtained, the feedback made for the abnormal resource, wherein, it is described
Whether the upper resource of the abnormal resource occurs exception in feedback indicator preset time；
According to the feedback, the value of the early warning weights is adjusted.
4. method according to claim 3, it is characterised in that described according to the feedback, adjusts the early warning weights
Value, including：
When the upper resource for being fed back to the abnormal resource in the preset time occurs abnormal, increase the abnormal money
The value of early warning weights between the upper resource in source and the abnormal resource.
5. method according to claim 2, it is characterised in that the default vigilance parameter, including：
The different severity levels of the warning information, correspond to corresponding vigilance parameter respectively, wherein, the grade of the severity level
Vigilance parameter positive correlation corresponding with the severity level.
6. method according to claim 1 or 2, it is characterised in that before the acquisition resource topology relation, the side
Method also includes：
Obtain the dependence between resources all in the configuration management database；
According to the dependence between resource all in the configuration management database, by institute in the configuration management database
Multi-layer is arranged some resources from the bottom to top, sets up the resource topology relation.
7. method according to claim 1 or 2, it is characterised in that before the acquisition resource topology relation, the side
Method also includes：
In the configuration management database, using the abnormal resource as starting point, recursive lookup applies the abnormal resource one by one
Resource, until meet default lookup stop condition；
The resource found and the abnormal resource are added in the resource topology relation.
8. method according to claim 7, it is characterised in that the lookup stop condition includes：
Do not include the resource of the resource found described in application in the configuration management database, or the resource that current lookup is arrived is
Through being present in the resource topology relation.
9. method according to claim 1 or 2, it is characterised in that before the acquisition resource topology relation, the side
Method also includes：
When dependence in the configuration management database between resource is changed, the change of the generation mark change
Message；
According to the change message, the resource topology relation is updated.
10. a kind of resource early warning system based on resource topology, it is characterised in that including：
Abnormal resource determining module, for obtaining the warning information in network, the resource for determining the warning information alarm is different
Chang Ziyuan；
Topological relation acquisition module, for obtaining resource topology relation, wherein, the resource topology relation is according to the configuration
The dependence between the resource in database is managed, multi-layer is arranged from the bottom to top by the resource in the configuration management database
The formed topological relation of row, and in the resource topology relation pelagical resources application lower resource；
Correlated resources choose module, in the resource topology relation, choosing the upper resource of the abnormal resource, as
Correlated resources；
Warning information generation module, for according to the warning information, generating the warning information of the correlated resources.
11. system according to claim 10, it is characterised in that the warning information generation module, including：
First computing submodule, for the severity level according to the warning information, by predetermined early warning weights and in advance
If vigilance parameter, determine the relative risk that the abnormal resource causes the correlated resources to break down, wherein, early warning power
It is worth the influence degree for characterizing the abnormal resource to the correlated resources, the vigilance parameter is used to characterize the serious level
The other influence degree abnormal to the correlated resources；
Second computing submodule, for according to the relative risk, generating the warning information of the correlated resources.
12. system according to claim 11, it is characterised in that the warning information generation module also includes：
Early warning weight setting submodule, for according to the resource topology relation, setting the value of the early warning weights；
Feed back acquisition submodule, the monitoring system of the upper resource for obtaining the abnormal resource, for the exception in upper strata
The feedback that resource is made, wherein, whether the upper resource of the abnormal resource occurs exception in the feedback indicator preset time；
Early warning weighed value adjusting submodule, for according to the feedback, adjusting the value of the early warning weights.
13. system according to claim 12, it is characterised in that the early warning weighed value adjusting submodule, specifically for：
When the upper resource for being fed back to the abnormal resource in the preset time occurs abnormal, increase the abnormal money
The value of early warning weights between the upper resource in source and the abnormal resource.
14. system according to claim 11, it is characterised in that the default early warning system in the first computing submodule
Number, including：
The different severity levels of the warning information, correspond to corresponding vigilance parameter respectively, wherein, the grade of the severity level
Vigilance parameter positive correlation corresponding with the severity level.
15. the system according to claim 10 or 11, it is characterised in that the resource early warning system based on resource topology
System, in addition to：
First enquiry module, for obtaining the dependence between resources all in the configuration management database；
First topological relation sets up module, for being closed according to the dependence between resource all in the configuration management database
System, by resource all in the configuration management database, multi-layer is arranged from the bottom to top, sets up the resource topology relation.
16. the system according to claim 10 or 11, it is characterised in that the resource early warning system based on resource topology
System, in addition to：
Second enquiry module, in the configuration management database, using the abnormal resource as starting point, recursive lookup one by one
Using the resource of the abnormal resource, until meeting default lookup stop condition；
Second topological relation sets up module, for by the resource found and the abnormal resource, being added to the resource topology
In relation.
17. system according to claim 16, it is characterised in that the lookup stop condition bag in second enquiry module
Include：
Do not include the resource of the resource found described in application in the configuration management database, or the resource that current lookup is arrived is
Through being present in the resource topology relation.
18. the system according to claim 10 or 11, it is characterised in that the resource early warning system based on resource topology
System, in addition to：
Message capturing module is changed, when being changed for the dependence between the resource in the configuration management database,
The change message of the generation mark change；
Topological relation update module, for according to the change message, updating the resource topology relation.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710209719.XA CN107124299A (en) | 2017-03-31 | 2017-03-31 | Resource method for early warning and system based on resource topology |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710209719.XA CN107124299A (en) | 2017-03-31 | 2017-03-31 | Resource method for early warning and system based on resource topology |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN107124299A true CN107124299A (en) | 2017-09-01 |
Family
ID=59724646
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710209719.XA Pending CN107124299A (en) | 2017-03-31 | 2017-03-31 | Resource method for early warning and system based on resource topology |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107124299A (en) |
Cited By (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107995012A (en) * | 2016-10-26 | 2018-05-04 | 北京国双科技有限公司 | The maintaining method and device of list |
| CN108712283A (en) * | 2018-05-10 | 2018-10-26 | 国网江西省电力有限公司信息通信分公司 | Fault early warning method based on resource associations relationship in information system and device |
| CN109510729A (en) * | 2018-12-25 | 2019-03-22 | 上海新炬网络技术有限公司 | A kind of implementation method based on CMDB and Netstat discovery applied topology relationship |
| CN109597746A (en) * | 2018-12-26 | 2019-04-09 | 荣科科技股份有限公司 | fault analysis method and device |
| CN109936477A (en) * | 2019-03-12 | 2019-06-25 | 北京百度网讯科技有限公司 | Method and apparatus for sending information |
| CN110086682A (en) * | 2019-05-22 | 2019-08-02 | 四川新网银行股份有限公司 | Service link call relation view and failure root based on TCP are because of localization method |
| CN110086643A (en) * | 2019-02-18 | 2019-08-02 | 咪咕文化科技有限公司 | Risk identification method, terminal and storage medium |
| CN110750366A (en) * | 2019-09-26 | 2020-02-04 | 浙江大搜车软件技术有限公司 | Message processing method and device, computer equipment and storage medium |
| CN111191937A (en) * | 2019-12-31 | 2020-05-22 | 深圳市计通智能技术有限公司 | Alarm hazard assessment method and system and terminal equipment |
| CN111258798A (en) * | 2020-01-14 | 2020-06-09 | 平安壹钱包电子商务有限公司 | Fault positioning method and device for monitoring data, computer equipment and storage medium |
| CN112306792A (en) * | 2019-08-01 | 2021-02-02 | 中移(苏州)软件技术有限公司 | Alarm information generation method and device and computer readable storage medium |
| US11374971B2 (en) * | 2018-08-24 | 2022-06-28 | Micro Focus Llc | Deception server deployment |
| CN115102834A (en) * | 2022-04-27 | 2022-09-23 | 浙江大学 | Change risk assessment method, equipment and storage medium |
| CN116303464A (en) * | 2023-03-22 | 2023-06-23 | 中国华能集团有限公司北京招标分公司 | IT asset information and alarm information association method |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2005117567A (en) * | 2003-10-10 | 2005-04-28 | Connect:Kk | Network alarm display device |
| CN103236948A (en) * | 2013-04-24 | 2013-08-07 | 中国电信股份有限公司重庆分公司 | Telecommunication network alarm method and system |
| CN104283889A (en) * | 2014-10-20 | 2015-01-14 | 国网重庆市电力公司电力科学研究院 | Electric power system interior APT attack detection and pre-warning system based on network architecture |
| CN104392391A (en) * | 2014-11-14 | 2015-03-04 | 国家电网公司 | Power grid running safety risk quantification method |
| CN106529696A (en) * | 2016-09-22 | 2017-03-22 | 国网山西省电力公司晋城供电公司 | Early warning method and early warning apparatus for equipment in power grid |
-
2017
- 2017-03-31 CN CN201710209719.XA patent/CN107124299A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2005117567A (en) * | 2003-10-10 | 2005-04-28 | Connect:Kk | Network alarm display device |
| CN103236948A (en) * | 2013-04-24 | 2013-08-07 | 中国电信股份有限公司重庆分公司 | Telecommunication network alarm method and system |
| CN104283889A (en) * | 2014-10-20 | 2015-01-14 | 国网重庆市电力公司电力科学研究院 | Electric power system interior APT attack detection and pre-warning system based on network architecture |
| CN104392391A (en) * | 2014-11-14 | 2015-03-04 | 国家电网公司 | Power grid running safety risk quantification method |
| CN106529696A (en) * | 2016-09-22 | 2017-03-22 | 国网山西省电力公司晋城供电公司 | Early warning method and early warning apparatus for equipment in power grid |
Cited By (22)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107995012B (en) * | 2016-10-26 | 2021-02-26 | 北京国双科技有限公司 | List maintenance method and device |
| CN107995012A (en) * | 2016-10-26 | 2018-05-04 | 北京国双科技有限公司 | The maintaining method and device of list |
| CN108712283A (en) * | 2018-05-10 | 2018-10-26 | 国网江西省电力有限公司信息通信分公司 | Fault early warning method based on resource associations relationship in information system and device |
| US11374971B2 (en) * | 2018-08-24 | 2022-06-28 | Micro Focus Llc | Deception server deployment |
| CN109510729A (en) * | 2018-12-25 | 2019-03-22 | 上海新炬网络技术有限公司 | A kind of implementation method based on CMDB and Netstat discovery applied topology relationship |
| CN109510729B (en) * | 2018-12-25 | 2021-05-11 | 上海新炬网络技术有限公司 | Implementation method for discovering application topological relation based on CMDB and Netstat |
| CN109597746A (en) * | 2018-12-26 | 2019-04-09 | 荣科科技股份有限公司 | fault analysis method and device |
| CN109597746B (en) * | 2018-12-26 | 2022-05-13 | 荣科科技股份有限公司 | Fault analysis method and device |
| CN110086643A (en) * | 2019-02-18 | 2019-08-02 | 咪咕文化科技有限公司 | Risk identification method, terminal and storage medium |
| CN110086643B (en) * | 2019-02-18 | 2022-03-11 | 咪咕文化科技有限公司 | Risk identification method, terminal and storage medium |
| CN109936477A (en) * | 2019-03-12 | 2019-06-25 | 北京百度网讯科技有限公司 | Method and apparatus for sending information |
| CN110086682B (en) * | 2019-05-22 | 2022-06-24 | 四川新网银行股份有限公司 | Service link calling relation view and fault root cause positioning method based on TCP |
| CN110086682A (en) * | 2019-05-22 | 2019-08-02 | 四川新网银行股份有限公司 | Service link call relation view and failure root based on TCP are because of localization method |
| CN112306792A (en) * | 2019-08-01 | 2021-02-02 | 中移(苏州)软件技术有限公司 | Alarm information generation method and device and computer readable storage medium |
| CN110750366A (en) * | 2019-09-26 | 2020-02-04 | 浙江大搜车软件技术有限公司 | Message processing method and device, computer equipment and storage medium |
| CN111191937A (en) * | 2019-12-31 | 2020-05-22 | 深圳市计通智能技术有限公司 | Alarm hazard assessment method and system and terminal equipment |
| CN111191937B (en) * | 2019-12-31 | 2023-12-29 | 深圳市计通智能技术有限公司 | Alarm hazard assessment method, system and terminal equipment |
| CN111258798A (en) * | 2020-01-14 | 2020-06-09 | 平安壹钱包电子商务有限公司 | Fault positioning method and device for monitoring data, computer equipment and storage medium |
| CN115102834A (en) * | 2022-04-27 | 2022-09-23 | 浙江大学 | Change risk assessment method, equipment and storage medium |
| WO2023207689A1 (en) * | 2022-04-27 | 2023-11-02 | 浙江大学 | Change risk assessment method and apparatus, and storage medium |
| CN115102834B (en) * | 2022-04-27 | 2024-04-16 | 浙江大学 | Change risk assessment method, device and storage medium |
| CN116303464A (en) * | 2023-03-22 | 2023-06-23 | 中国华能集团有限公司北京招标分公司 | IT asset information and alarm information association method |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107124299A (en) | Resource method for early warning and system based on resource topology | |
| US9601000B1 (en) | Data-driven alert prioritization | |
| CN110086649A (en) | Detection method, device, computer equipment and the storage medium of abnormal flow | |
| KR101600295B1 (en) | System for detecting abnomal behaviors using personalized the whole access period use behavior pattern analsis | |
| CN105659528B (en) | A kind of method and device for realizing fault location | |
| KR20170082937A (en) | System for detecting abnomal behaviors using personalized the whole access period use behavior second analysis | |
| CN105095056A (en) | Method for monitoring data in data warehouse | |
| CN109302421A (en) | Application system security prevention policies optimization method and device | |
| KR102088310B1 (en) | Risk Index Correction System Based on Attack Frequency, Asset Importance, and Severity | |
| CN104270277B (en) | Alarm information processing method and warning information processing device | |
| CN111917898B (en) | Resource scheduling policy adjusting method and device | |
| CN109686066A (en) | Alarm management system and method | |
| US8032432B2 (en) | System and method for tracking a billing cycle | |
| CN114996079A (en) | Operation and maintenance monitoring method and device, computer equipment and computer readable storage medium | |
| CN107357557A (en) | A kind of information updating method and device | |
| CN107800557A (en) | A kind of alarm monitoring method and device | |
| US9621582B1 (en) | Generating pharming alerts with reduced false positives | |
| CN113037549A (en) | Operation and maintenance environment warning method | |
| CN108023769A (en) | Internet of Things group barrier determines method and device | |
| CN105490835A (en) | Information monitoring method and device | |
| US6807416B2 (en) | Troubleshooting method and apparatus | |
| CN108809673A (en) | A kind of method and device of fault alarm | |
| CN105788194B (en) | A kind of alarming method by monitoring and device | |
| CN115016976B (en) | Root cause positioning method, device, equipment and storage medium | |
| CN106874423A (en) | search control method and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170901 |