CN108270618A - Alert the method, apparatus and warning system of judgement - Google Patents

Alert the method, apparatus and warning system of judgement Download PDF

Info

Publication number
CN108270618A
CN108270618A CN201711493249.0A CN201711493249A CN108270618A CN 108270618 A CN108270618 A CN 108270618A CN 201711493249 A CN201711493249 A CN 201711493249A CN 108270618 A CN108270618 A CN 108270618A
Authority
CN
China
Prior art keywords
alarm regulation
alarm
monitoring data
time window
calculate node
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201711493249.0A
Other languages
Chinese (zh)
Other versions
CN108270618B (en
Inventor
李泽敏
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Cloud Computing Technologies Co Ltd
Original Assignee
Hangzhou Huawei Digital Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hangzhou Huawei Digital Technologies Co Ltd filed Critical Hangzhou Huawei Digital Technologies Co Ltd
Priority to CN201711493249.0A priority Critical patent/CN108270618B/en
Publication of CN108270618A publication Critical patent/CN108270618A/en
Application granted granted Critical
Publication of CN108270618B publication Critical patent/CN108270618B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3089—Monitoring arrangements determined by the means or processing involved in sensing the monitored data, e.g. interfaces, connectors, sensors, probes, agents
    • G06F11/3093—Configuration details thereof, e.g. installation, enabling, spatial arrangement of the probes
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

This application discloses a kind of method, apparatus and warning system for alerting judgement, are related to field of communication technology.This method is applied to warning system, and warning system includes server, monitored node and at least two calculate nodes, and each calculate node is stored with preset kind alarm regulation, and method includes：Calculate node obtains monitoring data corresponding with preset kind alarm regulation according to the preset kind alarm regulation of storage, and calculate node is any one calculate node in warning system；Calculate node carries out alarm judgement according to preset kind alarm regulation to monitoring data.

Description

Alert the method, apparatus and warning system of judgement
Technical field
This application involves field of communication technology more particularly to a kind of method, apparatus and warning system for alerting judgement.
Background technology
At present, in publicly-owned cloud platform, warning system is commonly used in the performance indicator data of the monitoring network equipment and is based on Monitored results carry out alarm judgement.Alerting the basic procedure judged is：Alarm regulation is configured for warning system in user, later, accuses Alert system collects the performance indicator data of monitored host, and judges whether performance indicator data meet alarm regulation, if meeting Alarm regulation, then warning system triggering alarm event, by the failure notification of monitored host to user.
In a kind of common warning system, server-side obtains and stores each performance indicator data, and then, server-side is led to It crosses and traverses each alarm regulation, the achievement data for meeting each alarm regulation is inquired from the achievement data of storage.It is as it can be seen that existing In technology, server-side need to traverse a fairly large number of alarm regulation, expend longer time, it is impossible to notify event of failure in time To user, the promptness of Breakdown Maintenance is reduced.
Invention content
Embodiments herein provides a kind of alarm determination method, device and warning system, can promote alarm judgement Efficiency.
In order to achieve the above object, embodiments herein provides following technical scheme：
In a first aspect, embodiments herein provides a kind of method for alerting judgement, this method is applied to warning system, accuses Alert system includes server, monitored node and at least two calculate nodes, and each calculate node is stored with preset kind alarm Rule, this method include：For any one calculate node in warning system, calculate node is accused according to the preset kind of storage Police's Rule monitoring data corresponding with preset kind alarm regulation, calculate node is according to preset kind alarm regulation to monitoring Data carry out alarm judgement.
With in the prior art, server usually obtains monitoring data, then traverses each alarm regulation and carry out alarm judgement, lead Cause alerts the less efficient of judgement and comparing, and in the alarm determination method that the application provides, each calculate node owns without storing Alarm regulation, but preset kind alarm regulation is only stored, such as：A certain type or certain in all types of alarm regulations The alarm regulation of type.The preset kind alarm regulation that calculate node is stored according to it later is only obtained and is accused with the preset kind Police regulations then corresponding monitoring data, and alarm judgement is carried out according to preset kind alarm regulation and monitoring data.Due to each Calculate node is only stored with part alarm regulation and monitoring data corresponding with the alarm regulation.It also means that, calculates section The alarm regulation of point processing and the quantity of monitoring data are reduced, so the time of calculate node alarm judgement can be shortened, So as to promote the efficiency of alarm judgement.
In a kind of possible design, alarm regulation includes：Time window be 0 alarm regulation, short time window alarm Rule and long-time window alarm regulation；Wherein, the time window length of long-time window alarm regulation is greater than or equal to default Length of window, the time window length of short time window alarm regulation are less than preset window length.
In a kind of possible design, calculate node is obtained according to the preset kind alarm regulation of storage and is accused with preset kind Then corresponding monitoring data specifically can be implemented as police regulations：If the alarm regulation that it is 0 that preset kind alarm regulation, which is time window, Then calculate node obtains real-time monitoring data；Alternatively, if preset kind alarm regulation is short time window alarm regulation, calculate Node obtains the monitoring data in the short time window corresponding period；Alternatively, if preset kind alarm regulation is long-time window Mouthful alarm regulation, then calculate node obtain the monitoring data in the long-time window corresponding period.As it can be seen that according to pre-stored The type of alarm regulation, each calculate node only obtain monitoring data corresponding with the alarm regulation being pre-stored, can reduce meter Operator node handles the quantity of data, promotes the efficiency of alarm judgement.
In a kind of possible design, preset kind alarm regulation includes at least one subexpression, each subexpression A corresponding monitor control index；Monitoring data includes monitor control index.Correspondingly, it is alerted in calculate node according to the preset kind of storage After Rule monitoring data corresponding with preset kind alarm regulation, following operation can also be performed：Calculate node according to Monitor control index and monitored node mark divide monitoring data, obtain at least one first monitoring data group；Wherein, often The monitor control index that the monitoring data of a first monitoring data group includes is identical and corresponding monitored node mark is identical.The reality In existing mode, it will identify after identical monitoring data is divided into one group, strengthen with identical monitor control index and monitored node Contact between associated monitoring data, convenient for follow-up calculate node according to the different grouping situation of monitor control index, determines respectively The value of each monitor control index.
In a kind of possible realization method, calculate node alerts monitoring data according to preset kind alarm regulation Judgement specifically can be implemented as：Calculate node determines the value of each monitor control index in monitoring data, according to each monitor control index Value determines the value of the corresponding subexpression of each monitor control index, further according to the corresponding subexpression of each monitor control index respectively Value determines the value of preset kind alarm regulation；If it is determined that the value of preset kind alarm regulation is preset value, then calculate node carries out Alarm.
Illustratively, the value of the preset kind alarm regulation can be 0 or 1, be calculated when according to the realization method It when the value of preset kind alarm regulation is 1, is then alerted, when the value that preset kind alarm regulation is calculated is 0, then not Perform the action of alarm.
In a kind of possible design, in calculate node determines monitoring data after the value of each monitor control index, may be used also To perform following operation：Calculate node draws monitoring data according to the time for obtaining monitoring data and alarm regulation mark Point, obtain at least one second monitoring data group；The monitoring data corresponding acquisition time of second monitoring data group is identical and accuses Police regulations then identify identical.
In a kind of possible design, calculate node obtains preset kind alarm regulation from server.
Second aspect, the embodiment of the present application provide a kind of method for alerting judgement, and this method is applied to warning system, alarm System includes server, monitored node and at least two calculate nodes, and each calculate node is stored with preset kind alarm rule Then；This method includes：Server receives alarm regulation configuration-direct input by user, wherein, alarm regulation configuration-direct is used for Alarm regulation is configured；Server classifies to the alarm regulation of configuration, so that type of the calculate node according to alarm regulation Preset kind alarm regulation is obtained respectively.
With in the prior art, server usually obtains monitoring data, then traverses each alarm regulation and carry out alarm judgement, lead Cause alerts the less efficient of judgement and comparing, and in the alarm determination method that the application provides, each calculate node owns without storing Alarm regulation, but preset kind alarm regulation is only stored, such as：A certain type or certain in all types of alarm regulations The alarm regulation of type.The preset kind alarm regulation that calculate node is stored according to it later is only obtained and is accused with the preset kind Police regulations then corresponding monitoring data, and alarm judgement is carried out according to preset kind alarm regulation and monitoring data.Due to each Calculate node is only stored with part alarm regulation and monitoring data corresponding with the alarm regulation.It also means that, calculates section The alarm regulation of point processing and the quantity of monitoring data are reduced, so the time of calculate node alarm judgement can be shortened, So as to promote the efficiency of alarm judgement.
In a kind of possible design, the type of alarm regulation includes the alarm regulation that time window is 0, short time window Alarm regulation and long-time window alarm regulation；Wherein, the time window length of long-time window alarm regulation is greater than or equal to Preset window length, the time window length of short time window alarm regulation are less than preset window length.
In a kind of possible design, the window in type and alarm regulation that server passes through subfunction in alarm regulation Function judges the type of alarm regulation.Wherein, by the method for the judgement alarm regulation type, server to alarm regulation into Row classification, so as to which calculate node can obtain preset kind alarm regulation according to the classification of alarm regulation.Such as：Server will classify Alarm regulation afterwards is handed down to Hadoop distributed file systems (Hadoop Distributed File System, HDFS) collection Group, then different types of alarm regulation is handed down to calculate node by HDFS clusters, so as to which each calculate node only handles it Corresponding preset kind alarm regulation, and monitoring data corresponding with the preset kind alarm regulation is only obtained, reduce meter Operator node handles the data volume of data so that the efficiency for alerting judgement is promoted.
The third aspect provides a kind of alarm decision maker, which is applied to warning system, and the warning system includes clothes Business device, monitored node and at least two calculate nodes, each calculate node are stored with preset kind alarm regulation, described device Include as calculate node：Communication unit is accused for being obtained according to the preset kind alarm regulation of storage with the preset kind Then corresponding monitoring data, the calculate node are any one calculate node in the warning system to police regulations；Processing unit, For carrying out alarm judgement to the monitoring data according to the preset kind alarm regulation.
In a kind of possible design, the alarm regulation includes：Alarm regulation, the short time window that time window is 0 Alarm regulation and long-time window alarm regulation；Wherein, the time window length of long-time window alarm regulation is greater than or equal to Preset window length, the time window length of short time window alarm regulation are less than preset window length.
In a kind of possible design, communication unit, if it is 0 that be additionally operable to the preset kind alarm regulation, which be time window, Alarm regulation, then obtain real-time monitoring data；If alternatively, the preset kind alarm regulation is short time window alarm rule Then, then the monitoring data obtained in the short time window corresponding period；If alternatively, preset kind alarm rule It is then long-time window alarm regulation, then obtains the monitoring data in the long-time window corresponding period.
In a kind of possible design, the preset kind alarm regulation includes at least one subexpression, each sublist A monitor control index is corresponded to up to formula；The monitoring data includes monitor control index；The processing unit, for according to monitor control index and Monitored node mark divides the monitoring data, obtains at least one first monitoring data group；Wherein, each first The monitor control index that the monitoring data of monitoring data group includes is identical and corresponding monitored node mark is identical.
In a kind of possible design, the processing unit is additionally operable to determine each monitor control index in the monitoring data Value；According to the value of each monitor control index, the value of the corresponding subexpression of each monitor control index is determined respectively；According to each monitoring The value of the corresponding subexpression of index determines the value of the preset kind alarm regulation；If it is determined that the preset kind alarm regulation Value for preset value, then alerted.
In a kind of possible design, the processing unit was additionally operable to according to the time and announcement for obtaining the monitoring data Police regulations, which then identify, divides the monitoring data, obtains at least one second monitoring data group；Second monitoring data The monitoring data corresponding acquisition time of group is identical and alarm regulation mark is identical.
In a kind of possible design, the communication unit is additionally operable to obtain the preset kind announcement from the server Police regulations are then.
Fourth aspect provides a kind of alarm decision maker, applied to warning system, the warning system include server, Monitored node and at least two calculate nodes；Described device includes as server：Communication unit, for receiving user's input Alarm regulation configuration-direct, the alarm regulation configuration-direct is for being configured alarm regulation；Processing unit, for configuration Alarm regulation is classified, so that calculate node obtains preset kind alarm regulation respectively according to the type of alarm regulation.
In a kind of possible design, the type of the alarm regulation includes alarm regulation, short time that time window is 0 Window alarm regulation and long-time window alarm regulation；Wherein, the time window length of long-time window alarm regulation be more than or Equal to preset window length, the time window length of short time window alarm regulation is less than preset window length.
5th aspect, provides a kind of calculate node, which includes：Processor, communication interface and memory；Its In, memory is for storing computer executed instructions, and when calculate node is run, processor performs the computer of memory storage Execute instruction, so that calculate node performs the alarm judgement side as described in first aspect and its any possible realization method Method.
6th aspect, provides a kind of server, which includes：Processor, communication interface and memory；Wherein, it deposits Reservoir is for storing computer executed instructions, and when server is run, the computer execution that processor performs memory storage refers to It enables, so that server performs the alarm determination method as described in second aspect and its any possible realization method.
7th aspect, provides a kind of computer readable storage medium, instruction is stored in computer readable storage medium, when Instruction in calculate node when running so that calculate node is performed as described in first aspect and its any possible realization method Alarm determination method.
Eighth aspect provides a kind of computer readable storage medium, instruction is stored in computer readable storage medium, when When instruction is run on the server so that server performs the announcement as described in second aspect and its any possible realization method Alert determination method.
9th aspect provides a kind of computer program product for including instruction, when it in calculate node when running so that Calculate node performs the alarm determination method as described in first aspect and its any possible realization method.
Tenth aspect provides a kind of computer program product for including instruction, when it runs on the server so that clothes Business device performs the alarm determination method as described in second aspect and its any possible realization method.
The advantageous effect of the above-mentioned third aspect to the tenth aspect can refer to corresponding first aspect and second aspect, herein not It repeats again.
Description of the drawings
Fig. 1 is the schematic diagram of warning system provided by the embodiments of the present application；
Fig. 2 is the structure diagram of the network equipment provided by the embodiments of the present application；
Fig. 3 is the illustrative diagram of time window provided by the embodiments of the present application；
Fig. 4 is the flow diagram of alarm determination method provided by the embodiments of the present application；
Fig. 5 is the flow diagram of alarm determination method provided by the embodiments of the present application；
Fig. 6 is the structure diagram of calculate node provided by the embodiments of the present application；
Fig. 7 is the structure diagram of server provided by the embodiments of the present application.
Specific embodiment
Alarm determination method provided by the embodiments of the present application, device and warning system are carried out in detail below in conjunction with the accompanying drawings Description.
The terms "and/or", only a kind of incidence relation for describing affiliated partner, expression may have three kinds of passes System, for example, A and/or B, can represent：Individualism A exists simultaneously A and B, these three situations of individualism B.
Term " first " and " second " in the description of the present application and attached drawing etc. be for distinguish different objects or Person is for different disposal of the difference to same target rather than the particular order for description object.
In addition, the term " comprising " and " having " being previously mentioned in the description of the present application and their any deformation, it is intended that It is to cover non-exclusive include.Such as process, method, system, product or the equipment for containing series of steps or unit do not have The step of having listed or unit are defined in, but optionally further includes the step of other are not listed or unit or optionally It further includes for the intrinsic other steps of these processes, method, product or equipment or unit.
It should be noted that in the embodiment of the present application, " illustrative " or " such as " etc. words for representing to make example, example Card or explanation.Be described as in the embodiment of the present application " illustrative " or " such as " any embodiment or designing scheme should It is interpreted than other embodiments or designing scheme more preferably or more advantage.Specifically, " illustrative " or " example are used Such as " word is intended to that related notion is presented in specific ways.
With the rapid development of communication service, in the network environments such as LAN or data center network, the network of operation Equipment is increasing, and the business that the network equipment provides is increasingly abundanter, and then the network equipment need to consume more resource, this can lead The performance for causing the network equipment is unstable.In order to ensure the smooth performance of the network equipment, the performance indicator of the network equipment need to be carried out It monitors and is adjusted in real time according to monitored results.Based on this, presently, there are a kind of warning systems, pacify on the monitored network equipment Equipped with agent software, agent software collects the indices data of the monitored network equipment, and achievement data is reported to service End, server-side store each achievement data, and then, server-side is by traversing each alarm regulation, from the achievement data of storage Inquiry meets the achievement data of each alarm regulation.But server-side need to traverse a fairly large number of alarm regulation, expend longer Time, it is impossible to event of failure is notified in time to user, reduces the promptness of Breakdown Maintenance.
To solve the above-mentioned problems, the embodiment of the present application provides a kind of method, apparatus and warning system for alerting judgement.Its In, alarm determination method provided by the embodiments of the present application, device and warning system, can be applied to LAN, data center and Across in the network environments such as districts and cities.Wherein, LAN can be enterprise's LAN or be deployed in Internet bar, Waiting Lounge etc. Public LAN in region.
As shown in Figure 1, warning system 10 includes：Server 11, HDFS clusters 12, the first calculate node 13, second calculate Node 14, third calculate node 15, kafka clusters 16 and multiple monitored nodes 17.
Wherein, server 11 is used to receive the alarm regulation configuration-direct of user, and according to alarm regulation configuration-direct solution The corresponding alarm regulation of the instruction is analysed, and is classified to alarm regulation, and then the announcement of respective type can be obtained by calculate node Police regulations are then.The server 11 can be physical equipment or the virtual server realized based on virtualization technology.In Fig. 1 Illustrate only the server of physical form.
HDFS clusters 12 are used for the alarm regulation that storage server issues, which is used to manage file including at least one Distributed physical equipment and/or distributed virtual machine.Fig. 1 illustrates only the HDFS clusters of physical form.
Kafka clusters 16 are used to collect the monitoring data of monitored node 17, wherein in kafka clusters, collection monitoring number According to function can be implemented as running software in a physical device, Fig. 1 shows the physical equipment in kafka clusters；Quilt Monitoring node is the node of monitor control index to be collected, and can be software, virtual machine, or physical machine.
Monitored node 17 includes the business device of offer internet business, for storage device of storage file etc., example Property, monitored node 17 can be software, virtual machine, or physical equipment.
Calculate node is used to obtain alarm regulation from HDFS clusters, and obtain from kafka clusters according to alarm regulation Then the corresponding monitoring data of alarm regulation carries out alarm judgement according to alarm regulation to the monitoring data of acquisition.Wherein, it calculates Node can be implemented as running software in a physical device, and the physical equipment where calculate node is shown in Fig. 1.
Wherein, the first calculate node 13 is stored with instantaneous rule, for carrying out alarm judgement according to instantaneous rule.Second meter Operator node 14 is stored with window rules, for carrying out alarm judgement according to window rules.Third calculate node 15 is stored with caching Rule, for carrying out alarm judgement according to caching rule.Since instantaneous rule is mainly used for carrying out alarm judgement to real time data, In order to realize the function, above-mentioned first calculate node is based on stream process technological frame, wherein, stream process technology can be Storm, The technologies such as Spark.Since in stream process technology, a large amount of stream data is decomposed into multiple short and small batching datas, then Batch processing is carried out to each short and small batching data, so as to ensure the real-time processing of monitoring data, so that every The alarm judgement of million grades of monitoring datas is supported in a period.
It should be noted that in the embodiment of the present application, instantaneous rule can be described as the alarm regulation that time window is 0, window again Mouth rule can be described as short time window alarm regulation again, and caching is regular and can be described as long-time window alarm regulation, to these three The detailed description of alarm regulation refers to hereinafter.
It should be noted that Fig. 1 is illustrated for setting three calculate nodes, it is to be understood that warning system In the calculate node of three or more can also be set.For example, four calculate nodes of setting, wherein, calculate node 1 and calculate node The instantaneous rule of 2 storages, calculate node 3 are stored with window rules, and calculate node 4 is stored with caching rule.Two can also only be set A calculate node, for example, setting calculate node 5 and calculate node 6, wherein calculate node 5 are stored with instantaneous rule and window rule Then, calculate node 6 is stored with caching rule.Specifically the quantity of setting calculate node can be determined according to actual scene, the application Embodiment is limited not to this.
Fig. 2 is a kind of composition schematic diagram of the network equipment provided by the embodiments of the present application, which can be such as Fig. 1 Shown calculate node or server etc..As shown in Fig. 2, the network equipment can include at least one processor 21, communication interface 22, Memory 23 and bus 24.
Each component parts of the network equipment is specifically introduced with reference to Fig. 2：
Processor 21 is the control centre of the network equipment, can be a processor or multiple processing elements It is referred to as.In concrete implementation, as a kind of embodiment, processor 21 can include one or more central processing unit (Central Processing Unit, CPU), such as CPU0 shown in Fig. 2 and CPU1.Processor 21 can also be special Integrated circuit (Application Specific Integrated Circuit, ASIC) is arranged to implement this Shen Please embodiment one or more integrated circuits, such as：One or more digital signal processor (Digital Signal Processor, DSP) or, one or more field programmable gate array (Field Programmable Gate Array, FPGA) the integrated circuit set of composition.
Wherein, by taking processor 21 is one or more CPU as an example, processor 21 can be stored in net by running or performing Software program in memory 23 in network equipment and the data being stored in memory 23 are called, perform the network equipment Various functions.
In the concrete realization, as a kind of embodiment, the network equipment can include multiple processors, such as shown in Fig. 2 2 processors 21.Each in these processors can be a single core processor (single-CPU) or one A multi-core processor (multi-CPU).Here processor can refer to one or more equipment, circuit, and/or for handling number According to the process cores of (such as computer program instructions).
In the embodiment of the present application, when the network equipment is calculate node, processor 21 is mainly used for obtaining preset kind Alarm regulation, and the corresponding monitoring data of preset kind alarm regulation is obtained according to preset kind alarm regulation, so as to according to pre- If type alarm regulation alerts monitoring data.When the network equipment is server, processor 21 is mainly used for alarm Rule is classified, and different types of alarm regulation is handed down to different calculate nodes.Such as：Processor 21 directly will not The alarm regulation of same type is issued to corresponding calculate node.For another example：Sorted alarm regulation is handed down to by processor 21 Then alarm regulation is handed down to corresponding calculate node or by calculate node from HDFS collection by HDFS clusters by HDFS clusters The alarm regulation of respective type is obtained in group so that each node only obtains the alarm regulation of preset kind, and only handle Monitoring data corresponding with preset kind alarm regulation reduces the data processing amount of calculate node, promotes the calculating of calculate node Efficiency, and then promote the efficiency of alarm judgement.
Memory 23 can be read-only memory (Read-Only Memory, ROM) or can store static information and instruction Other kinds of static storage device, random access memory (Random Access Memory, RAM) or letter can be stored Breath and the other kinds of dynamic memory or Electrically Erasable Programmable Read-Only Memory (Electrically of instruction Erasable Programmable Read-Only Memory, EEPROM), CD-ROM (Compact Disc Read- Only Memory, CD-ROM) or other optical disc storages, optical disc storage (including compression optical disc, laser disc, optical disc, digital universal Optical disc, Blu-ray Disc etc.), magnetic disk storage medium or other magnetic storage apparatus or can be used in carrying or store with referring to Enable or data structure form desired program code simultaneously can by any other medium of computer access, but not limited to this. Memory 23 can be individually present, and be connected by bus 24 with processor 21.Memory 23 can also collect with processor 21 Into together.
Wherein, memory 23 can include program storage area, for the program instruction of storage execution application scheme, and by Processor 21 performs to control.In addition, memory 23 can also include data storage area, for the dependency number of buffer network equipment According to and perform it is provided by the embodiments of the present application alarm determination method during generate intermediate data.
Communication interface 22, for other equipment or communication, such as Ethernet, wireless access network (Radio Access Network, RAN), WLAN (Wireless Local Area Networks, WLAN) etc..Communication interface 22, which can include receiving unit, realizes that receive capabilities and transmitting element realize sending function.It communicates in the embodiment of the present application Interface is mainly used for receiving and dispatching alarm regulation and/or monitoring data etc..
Bus 24 can be that industry standard architecture (Industry Standard Architecture, ISA) is total Line, external equipment interconnection (Peripheral Component Interconnect, PCI) bus or extension Industry Standard Architecture Structure (Extended Industry Standard Architecture, EISA) bus etc..It is total that the bus can be divided into address Line, data/address bus, controlling bus etc..It for ease of representing, is only represented in Fig. 2 with a thick line, it is not intended that only one total Line or a type of bus.
Device structure shown in Figure 2 does not form the restriction to the network equipment, can include more more or less than illustrating Component either combine certain components or different components arrangement.
The embodiment of the present application provides a kind of method for alerting judgement, can be applied to system architecture shown in FIG. 1 and Fig. 2 institutes The network equipment shown.Before method provided by the embodiments of the present application is introduced, first the term in the embodiment of the present application is introduced：
In the embodiment of the present application, time window refers to the time window in stream process technology.Stream process technology can be The technologies such as Storm, Spark.In stream process technology, time window operation refers to whithin a period of time, obtaining this time Interior data, and predetermined registration operation is carried out to the data in the period.Time window length is time segment length, if time window is long It is 0 to spend, then obtains the data (obtaining current real time data) when the previous moment, if time window length is N minutes, Obtain the data in N minutes.For example, the time window in the embodiment of the present application is shown such as Fig. 3.It suppose there is moment 1 to the moment 8, in Fig. 3, the time window length of time window 1 is 2, and correspondingly, the window operation of time window 1 is obtains 2 moment Data, that is, obtain the data at moment 1 and moment 2；The time window length of time window 2 is 3, correspondingly, time window 2 Window operation is the data for obtaining 3 moment, that is, obtains the data at moment 4, moment 5 and moment 6；The time window of time window 3 Mouth length is 0, and correspondingly, the window operation of time window 3 is to obtain the data at current time (to obtain current real-time number According to), that is, obtain the moment 8 data.
Alarm regulation is specifically as follows the rule of instruction monitor control index.For example, alarm regulation can be instruction monitoring node This monitor control index of 1 CPU usage, and regulation CPU usage is more than the rule alerted during threshold value.It is appreciated that It is that under the instruction of alarm regulation, corresponding monitoring data can be obtained, and whether judge the monitor control index value in monitoring data Reach the threshold value indicated in alarm regulation.For example, if alarm regulation is the CPU usage of instruction monitoring node 1, and make in CPU It is alerted when being more than 80% with rate, then calculate node, can under the instruction of alarm regulation after the alarm regulation is configured with With the CPU usage of monitoring node 1, if the CPU usage of node 1 reaches 80%, calculate node is alerted, to prompt to use The CPU usage of family node 1 is excessively high so that user in time safeguards node 1 according to alarm prompt.
Alarm regulation is set for user according to historical statistical data, for example, historical statistical data is shown, works as CPU usage During more than 80%, the runnability of the network equipment is remarkably decreased, then can set alarm regulation, and alarm regulation is used to monitor network The CPU usage of equipment.Before calculate node carries out alarm judgement using alarm regulation, need first to obtain alarm regulation.Referring to Fig. 4, the process that calculate node obtains preset kind alarm regulation include：
S401, server receive alarm regulation configuration-direct generation alarm regulation input by user, and alarm regulation configuration refers to It enables that alarm regulation is configured.
Wherein, S401 can by input equipment, (such as touch screen, mouse combination display screen show in Fig. 2 by server Go out) it receives alarm regulation configuration-direct input by user and corresponding alarm regulation is generated by processor.
Optionally, user inputs alarm regulation configuration by the user interface (User Interface, UI) of server and refers to It enables.Illustratively, the alarm regulation of following form is configured by inputting alarm regulation configuration-direct in user.
Wherein, item_key is monitor control index to be monitored, and monitor control index is system.cpu.load, i.e. system herein Cpu load；Item_value is the concrete numerical value of the numerical value, i.e. system CPU load of monitor control index to be monitored；Last is seeks prison The subfunction of index last look is controlled, item_value.last is the last look for seeking system CPU load；alarm_instance_id It is identified for alarm regulation；" Processor load is too high " is the content of alarm notification, i.e., when the value of monitor control index When reaching threshold value, display alarm notice " processor load is excessively high "；AgentSN is the title ba109c36 of monitored node.
Above-mentioned alarm regulation represents：The last look of the cpu load of the node of entitled ba109c36 need to be monitored, when its numerical value During more than 5, triggering alarm, and alarm prompt " processor load is excessively high " is provided, to prompt user excessively high to processor load Situation makes maintenance or adjustment.
User can input alarm rule by clicking the button (button) of configuration alarm regulation in the UI of server Then configuration-direct can also input alarm regulation configuration-direct by modes such as order lines, and user can also be by other means Alarm regulation configuration-direct is inputted, specific embodiment can determine that the embodiment of the present application is unlimited to this according to practical application scene System.
S402, server classify to the alarm regulation of configuration.
Wherein, the processor 21 that S402 can be as shown in Figure 2 in server performs.
Optionally, alarm regulation includes alarm regulation, short time window alarm regulation and the long-time window that time window is 0 Mouth alarm regulation, the time window length of long-time window alarm regulation are greater than or equal to preset window length, short time window The time window length of alarm regulation is less than preset window length.
The alarm regulation that above-mentioned meaning time window is 0 can be the alarm regulation for needing in real time, instantaneously to calculate, so, when Between window be 0 alarm regulation can be described as instantaneous rule again.Illustratively, if alarm regulation 1 is " CPU of monitoring node 1 is used The last look of rate when the last look of CPU usage is more than 80%, is alerted ", in alarm regulation 1, monitoring CPU is needed to make With the last look of rate, that is, the value (i.e. the real time value of CPU usage) at the current time of monitoring CPU utilization rate is needed, so, alarm Rule 1 is the alarm regulation (instantaneous rule) that time window is 0.It is assumed that current time is the moment 8 shown in Fig. 3, then alerting Under the instruction of rule 1, as the first calculate node in Fig. 1 can obtain the moment 8 by 3 corresponding window operation of time window The instantaneous value of CPU usage, and alarm judgement is carried out to the instantaneous value of acquisition according to alarm regulation 1.
It is assumed that preset window length is 10 minutes, short time window alarm regulation (also known as window rules) is long for time window Alarm regulation of the degree less than 10 minutes, wherein, the corresponding time window length of short time window alarm regulation is shorter, can claim again For window rules.Long-time window alarm regulation is greater than or equal to the alarm regulation of 10 minutes for time window length.Wherein, it is long The corresponding time window length of time window alarm regulation is larger, accordingly, it is desirable to which the monitoring data amount obtained is more, can adopt Corresponding monitoring data is stored with plug-in caching technology, so, long-time window alarm regulation can be described as caching rule again.It is assumed that Alarm regulation is " average flow rate of detection node 1 in 5 minutes ", which needs detection node 1 in a certain period of time Monitoring data, and the period detected in 5 minutes, to be less than preset window length (10 minutes) within 5 minutes, so, the alarm Rule is short time window alarm regulation (window rules).Similarly, it is greater than or equal to 10 minutes when the period of detection, alarm rule It is accordingly then long-time window alarm regulation (caching rule).
Optionally, server can be by whether there is window letter in the type and alarm regulation of subfunction in alarm regulation Count the type to judge alarm regulation.
For example.last is the subfunction for seeking last look, if there are .last in alarm regulation, alarm regulation is time window Mouth is 0 alarm regulation.Window function WindowSize is the subfunction for characterizing time window length, if existing in alarm regulation The subfunction, then alarm regulation is short time window alarm regulation or long-time window alarm regulation.Which kind of is particularly belonged to accuse Police regulations then, need the design parameter of combined window function, for example, " WindowSize ":600, i.e. time length of window is 600 seconds, Since 600 seconds equal to preset window length (10 minutes), so, which is long-time window alarm regulation.
S403, calculate node obtain preset kind alarm regulation from server.
Specifically, calculate node obtains preset kind alarm regulation and can be implemented as：
S403a, server are to the sorted alarm regulation of HDFS collection pocket transmissions.
Wherein, the communication interface 22 that S403a can be in the server as described in Fig. 2 performs.
Optionally, after server receives newer alarm regulation configuration-direct input by user, by newer announcement Police regulations are then sent to HDFS clusters.Wherein, server can first store newer alarm regulation into database, then, will Newer alarm regulation is sent to HDFS clusters, so that the HDFS cluster synchronizations newer alarm regulation.
As alternatively possible embodiment, alarm regulation request is initiated from HDFS to server.Specifically, Ke Yi Timer in HDFS clusters is set, and timing length is set for timer, when reaching timing length, timers trigger HDFS clusters Above-mentioned database is detected, if there are newer alarm regulations, HDFS clusters in database to obtain newer alarm regulation.Example Property, timing length is set as 10 seconds, and HDFS clusters were performed every 10 seconds whether there is newer announcement in one-time detection database The operation of police regulations then.Specific timing length can determine that the embodiment of the present application is limited not to this according to actual implementation scene.
Optionally, after HDFS clusters obtain newer alarm regulation, alarm regulation is stored according to the type of alarm regulation. Specifically, HDFS clusters store the alarm regulation that time window is 0 to the first memory space, and the file name stored can be with For alarmRule_0；Short time window alarm regulation is stored to the second memory space, and the file name stored can be alarmRule_time_short；Long-time window alarm regulation is stored to third memory space, and the file name stored Can be alarmRule_time_long.
S403b, calculate node obtain preset kind alarm regulation from HDFS clusters.
Wherein, the communication interface 22 that S403b can be in the calculate node as described in Fig. 2 performs.
In a kind of possible realization method, the storage address of preset kind alarm regulation is stored in calculate node, and According to the storage address of the preset kind alarm regulation of storage, preset kind alarm regulation is obtained from HDFS clusters.It is assumed that when Between window be 0 alarm regulation be stored in the first memory space in HDFS clusters, which corresponds to and first deposits Store up address；Short time window alarm regulation is stored in the second memory space in HDFS clusters, which corresponds to Second storage address；Long-time window alarm regulation is stored in the third memory space in HDFS clusters, and third storage is empty Between correspond to third storage address.Illustratively, the first storage address is stored in the first calculate node, so as to which the first calculate node can To read newer instantaneous rule from the first memory space of HDFS clusters.Similarly, is stored in the second calculate node Two storage address, and newer window rules are read from the second memory space, third storage is stored in third calculate node Address, and newer caching rule is read from third memory space.Wherein, calculate node obtains alarm rule from HDFS clusters Concrete mode then can be：Timer is provided in calculate node, and timing length is set for timer, when reaching timing It is long, timers trigger calculate node so that calculate node checks the alarm regulation in HDFS clusters, if existing more in HDFS clusters New alarm regulation, then calculate node the newer alarm regulation is obtained from HDFS clusters.Illustratively, timing length is set It it is 10 seconds, calculate node performed the operation that whether there is newer alarm regulation in one-time detection HDFS clusters every 10 seconds.Tool Body timing length can determine that the embodiment of the present application is limited not to this according to actual implementation scene.
It is above-mentioned to obtain preset kind alarm to calculate node by taking calculate node stores a kind of preset kind alarm regulation as an example The mode of rule illustrates, and in addition to this, in the embodiment of the present application, can also store multiple alarms in calculate node respectively The corresponding storage address of rule.For example, instantaneous rule storage corresponding with window rules is stored in calculate node 1 respectively Location.
In alternatively possible realization method, the alarm regulation that calculate node is obtained in HDFS clusters can be implemented as： HDFS clusters pass through HDFS clusters and calculate node after the newer alarm regulation in getting server or database Between alarm regulation sync cap, send newer alarm regulation to calculate node.
It should be noted that in addition to above-mentioned elder generation by HDFS clusters obtains sorted alarm regulation from server, then by Calculate node is obtained from HDFS clusters outside the mode of preset kind alarm regulation, and calculate node can also be obtained directly from server Take preset kind alarm regulation.
Optionally, if there are newer alarm regulation in server, server according to the newer alarm regulation class The newer alarm regulation is handed down to corresponding calculate node by type.Match for example, user inputs alarm regulation by server UI It puts instruction and newer alarm regulation is configured for server, which is instantaneous rule, then server issues instantaneous rule To corresponding calculate node, that is, it is handed down to the first calculate node.
In alternatively possible realization method, calculate node obtains preset kind alarm regulation also directly from server It can be implemented as：Timer in calculate node can be set, and timing length is set for timer, when reaching timing length, Timers trigger calculate node detects the alarm regulation in above-mentioned server, if there are newer alarm regulation in server, and And newer alarm regulation is the corresponding preset kind alarm regulation of the calculate node, then calculate node obtains newer alarm rule Then.Illustratively, timing length is set as 10 seconds, and calculate node was performed in one-time detection server every 10 seconds with the presence or absence of more The operation of new alarm regulation.Specific timing length can determine that the embodiment of the present application does not carry out this according to actual implementation scene Limitation.
It is understood that through S401 to S403, corresponding preset kind alarm regulation is stored in calculate node.Specifically Ground is stored with instantaneous rule in the first calculate node, window rules is stored in the second calculate node, are deposited in third calculate node Contain caching rule.
It is understood that after corresponding preset kind alarm regulation is stored in calculate node, calculate node can To carry out alarm judgement according to preset kind alarm regulation.Correspondingly, it is right in another realization method of the embodiment of the present application The idiographic flow that calculate node carries out alarm judgement illustrates, as shown in figure 5, this method includes：
S501, calculate node obtain prison corresponding with preset kind alarm regulation according to the preset kind alarm regulation of storage Data are controlled, calculate node is any one calculate node in warning system.
Wherein, the communication interface 22 that S501 can be in the calculate node as described in Fig. 2 performs.
Specifically, calculate node obtains and preset kind alarm regulation pair according to preset kind alarm regulation from Kafka The monitoring data answered.The alarm regulation (instantaneous rule) that it is 0 that if preset kind alarm regulation, which is time window, i.e., calculate node is First calculate node, then since alarm regulation instruction need to monitor the default monitor control index at the current time of node, for example, needing to monitor The cpu load value at current time, the calculate node obtain real-time monitoring data according to alarm regulation.If preset kind alarm rule It is then short time window alarm regulation (window rules), then calculate node obtains the monitoring in the short time window corresponding period Data, and store the monitoring data in the short time window corresponding period.If preset kind alarm regulation is long-time window Alarm regulation, then obtain the monitoring data in the long-time window corresponding period, and by the long-time window corresponding period In interior supervising data storage to remote date transmission (Remote Dictionary Server, Redis) database.
Wherein, for short time window alarm regulation, since time window is short, need the monitoring data amount obtained smaller, So can the monitoring data of acquisition be stored in memory, accelerate the processing speed of monitoring data；Long-time window is alerted and is advised Then, it since time window is longer, needs to obtain a large amount of monitoring data, so being stored in monitoring data using caching technology plug-in Redis databases in, to promote the processing speed of monitoring data in big data quantity scene.
With short time window calculation node, i.e. illustrate this step (i.e. for the second calculate node acquisition monitoring data S501), after by S401 to S403, the second calculate node is stored with preset kind alarm regulation, i.e. short time window is accused Then, the preset kind alarm regulation is " average flow rate of monitoring node 1 in 5 minutes, if flow is more than 50KB, carries out to police regulations Alarm ", then the second calculate node is according to the monitoring data of the preset kind alarm regulation collector node 1.
S502, calculate node carry out alarm judgement according to preset kind alarm regulation to monitoring data.
Specifically, S502 can be implemented as：
S502a, calculate node determine the value of each monitor control index in monitoring data.
Wherein, the processor 21 that S502a can be in the calculate node as described in Fig. 2 performs.
Wherein, at least one monitor control index is included in monitoring data.Monitor control index can be that the performance of monitored node refers to Mark, for example, monitor control index can be the last look of the cpu load of monitored node, the last look of CPU usage, when default Between in section cpu load mean value, mean value of CPU usage etc. in preset time period.
In general, monitor control index is different in the corresponding monitoring data of different type alarm regulation.For example, instantaneous rule is " last look of the CPU usage of monitoring node 1 when the last look of CPU usage is more than 80%, is alerted ", then basis The instantaneous rule need to obtain the monitor control index of monitored node, wherein, monitor control index is the last look of CPU usage.Window is advised It is then " mean value of monitoring node 1 CPU usage in 5 minutes when the mean value of CPU usage is more than 80%, is alerted ", Then according to the window rules, the monitor control index of monitored node need to be obtained, wherein, monitor control index is：CPU is used in 5 minutes The mean value of rate.Caching rule is the " mean value of the monitoring CPU usage in 1 hour of node 1, when the mean value of CPU usage is more than When 80%, alerted ", then according to caching rule, the monitor control index of monitored node need to be obtained, wherein, monitor control index is： The mean value of CPU usage in 1 hour.
It is assumed that the monitoring data obtained is
First, for the form of unified monitoring data, acquired monitoring data need to be pre-processed, it is assumed that pretreatment Monitoring data afterwards is as follows：
Wherein, monitoring data is pre-processed, so as to which the mode of unified monitoring data format can refer to the prior art, the application is real Example is applied no longer to repeat this.
Later, calculate node divides monitoring data according to monitor control index and monitored node mark, obtains at least One the first monitoring data group, wherein, the monitor control index that the monitoring data of each first monitoring data group includes is identical and right The monitored node mark answered is identical.With reference to the example above, two monitoring datas of above-mentioned acquisition can be represented as following shape Formula：
Such as above-mentioned monitoring data, the monitor control index that first monitoring data item_data1 is included is The monitored node of system.cpu.load (i.e. cpu load), item_data1 are identified as f49aaa48, Article 2 monitoring number According to the monitor control index of item_data2 for system.cpu.usage (i.e. CPU usage), the monitored node of item_data2 Mark is also f49aaa48.It, in the embodiment of the present application, will since the monitor control index of item_data1 and item_data2 is different Item_data1 and item_data2 is divided into the first different monitoring data groups.Optionally, after grouping, item_data1 and The data format of item_data2 is as follows：
(system.cpu.load@f49aaa48,item_data1)
(system.cpu.usage@f49aaa48,item_data2)
As it can be seen that after grouping, a monitoring data, i.e. item_data1, the first monitoring are included in the first monitoring data group 1 A monitoring data, i.e. item_data2 are included in data group 2.It is understood that it is grouped by above-mentioned monitoring data After division, the data with identical monitor control index can be divided into same group, stepped up the contact between data.
As alternatively possible realization method, monitoring data can also be grouped according to service fields, In, the range of nodes of service fields characterization is nodes whole in a cluster, so as to by each node in a cluster Monitoring data is associated, and is judged with the alarm realized between host.
After monitoring data is carried out above-mentioned division operation, it need to determine each to monitor in each first monitoring data group The value of the corresponding pre-set level of data.With reference to the example above, the first monitoring data group 1 includes monitoring data item_data1, the Comprising monitoring data item_data2 in one monitoring data group 2, then need to determine monitor control index in item_data1 The value of system.cpu.usage in the value (i.e. the value of system CPU load) and item_data2 of system.cpu.load (i.e. the value of system CPU utilization rate).Specifically, calculate node reads monitor control index system.cpu.load in item_data1 Corresponding item_value is 16.0, i.e. the value of default monitor control index in first monitoring data item_data1 is 16.0, The corresponding item_value of monitor control index system.cpu.usage are 10.0, i.e. Article 2 monitoring data in item_data2 The value of monitor control index in item_data2 is 10.0.
S502b, calculate node determine the corresponding subexpression of each monitor control index respectively according to the value of each monitor control index Value.
Wherein, the processor 21 that S502b can be in the calculate node as described in Fig. 2 performs.
Alarm regulation includes several subexpressions, and each subexpression corresponds to a monitor control index, and monitoring data includes prison Control index.
For example, alarm regulation is as follows：
"expression":" { item_key=system.cpu.load:item_value.last}>10&&{item_ Key=system.cpu.usage:item_value.last}<20"
The meaning of the alarm regulation is：When the last look of system CPU load is more than 10, and system CPU utilization rate is newest Value is less than 20, is alerted.
Then above-mentioned alarm regulation can be analyzed to following three part：
(1) function001={ item_key=system.cpu.load:item_value.last}
(2) function002={ item_key=system.cpu.usage:item_value.last}
(3) expression=function001>10&&function002<20
It is function001 to enable subexpression 1>10, subexpression 1 is related with the last look of cpu load, i.e. subexpression 1 corresponding monitor control index is the last look of cpu load.Subexpression 2 is function002<20, subexpression 2 and CPU is used The last look of rate is related, i.e., 2 corresponding monitor control index of subexpression is the last look of CPU usage.
Have confirmed the monitor control index system.cpu.load's in monitoring data item_data1 in above-mentioned S502a Last look (i.e. the last look of system CPU load) is 16.0, illustrates to determine its corresponding sublist according to the value of monitor control index below Up to the method for formula value.
Specifically, the value of monitor control index (16.0) is substituted into 1 (i.e. function001 of subexpression>10, wherein, Function001={ item_key=system.cpu.load:Item_value.last }), due to 16.0>10, so sub The value of expression formula 1 is 1 (i.e. subexpression 1 is true), similarly, monitor control index system.cpu.usage's in item_data2 Be worth is 10.0,10.0<20, then the value of subexpression 2 is also 1 (i.e. subexpression 2 is also true).
Optionally, following steps can also be performed after each monitor control index value in monitoring data is determined：
Calculate node according to obtain monitoring data time and alarm regulation mark monitoring data is divided, obtain to A few second monitoring data group；The monitoring data corresponding acquisition time of second monitoring data group is identical and alarm regulation identifies It is identical.
I.e. to item_data1 and item_data2：
Wherein, corresponding timestamp when " timestamp " is obtains monitoring data, " alarm_instance_id " is accuses Police regulations then identify.
By the monitoring data of above-mentioned item_data1 and item_data2, the timestamp of item_data1 (1501758175000) it is identical with the timestamp of item_data2, and item_data1 alarm regulation mark (466) with The alarm regulation mark of item_data2 is identical, then item_data1 and item_data2 can be divided into same second monitoring In data group, packet format is as follows：
(466@1501758175000,[{"alarm_instance_id":"466","functionid": Function001, " value ":"16","raw_data":item_data1,"timestamp":1501758175000," agentSN":"f49aaa48"},{"alarm_instance_id":"466","functionid":function002," value":"10","raw_data":item_data2,"timestamp":1501758175000,"agentSN":" f49aaa48"}])
S502c, calculate node determine preset kind alarm regulation according to the value of the corresponding subexpression of each monitor control index Value.
Wherein, the processor 21 that S502c can be in the calculate node as described in Fig. 2 performs.
With reference to the example above, expression=function001>10&&function002<20,
Subexpression 1 is function001>10th, subexpression 2 is function002<20, due to the value of subexpression 1 It is 1, the value of subexpression 2 is also 1, and the result that the logical AND of subexpression 1 and subexpression 2 operates remains as 1, that is, accuses The value of police regulations then is 1.
S502d, if it is determined that the value of preset kind alarm regulation for preset value, then calculate node is alerted.
Wherein, the processor 21 that S502d can be in the calculate node as described in Fig. 2 performs.
In the embodiment of the present application, preset value is usually 1, and characterization logic is true.
The value of preset kind alarm regulation can be 0 (characterization logic is false) or 1 (characterization logic is true), in general, when default class It when the value of type alarm regulation is 1 (i.e. logical truth), is then alerted, when the value that preset kind alarm regulation is calculated is 0 (i.e. Logical falsehood) when, then the action of alarm is not performed.With reference to the citing of above-mentioned S502d, subexpression is being determined：function001> During 10 value, due to the monitor control index value (i.e. the last look of cpu load) 16.0 of monitored node>10, illustrate that current CPU is born Load has been above 10, then is alerted.
With in the prior art, warning system usually first stores monitoring data, then traverses each alarm regulation, cause alarm sentence It is fixed it is less efficient compare, the alarm determination method that the application provides, each calculate node corresponds to a type of alarm regulation, Calculate node obtains the corresponding monitoring data of alarm regulation, and according to alarm regulation to monitoring according to its corresponding alarm regulation Data carry out alarm judgement.Since calculate node only obtains corresponding alarm regulation, correspondingly, only obtaining alarm rule Then corresponding monitoring data.It also means that, the alarm regulation of calculate node processing and the quantity of monitoring data are reduced, institute The time of calculate node alarm judgement can be shortened, so as to promote the efficiency of alarm judgement.
The embodiment of the present application can to the above-mentioned network equipment, (network equipment can be above-mentioned calculating according to above method example Node or server) division of function module or functional unit is carried out, for example, can correspond to each function divides each function Two or more functions can also be integrated in a processing module by module or functional unit.It is above-mentioned integrated The form that hardware had both may be used in module is realized, can also be realized in the form of software function module or functional unit.Its In, it is schematical, only a kind of division of logic function to the division of module or unit in the embodiment of the present application, it is practical real There can be other dividing mode now.
Fig. 6 shows a kind of possible structure diagram of alarm decision maker involved in above-described embodiment.Such as Fig. 6 Shown, which includes as calculate node 60：Storage unit 601, processing unit 602 and communication unit 603.
Wherein, storage unit 601, for storing preset kind alarm regulation and dependent instruction.Processing unit 602 is used In carrying out control management to the action of calculate node 60.For example, processing unit 602 is used to that calculate node 60 to be supported to perform in Fig. 5 Other steps of the S501 to S502 and/or for techniques described herein scheme.Communication unit 603, for supporting to calculate Node 60 communicates with the other equipment in warning system.For example, calculate node 60 is supported to perform S403b in Fig. 4.
It should be noted that when Fig. 2 is the structure diagram of calculate node, the storage unit 601 can be implemented as The memory of calculate node in Fig. 2.Processing unit 602 can be implemented as the processor of calculate node in Fig. 2, communication unit 603 can be implemented as the communication interface of calculate node in Fig. 2.
Such as Fig. 7, the embodiment of the present application also provides a kind of alarm decision maker, which includes as server 70：Storage Unit 701, processing unit 702 and communication unit 703.
Wherein, storage unit 701, for storing alarm regulation and dependent instruction.Processing unit 702, for service The action of device 70 carries out control management.For example, processing unit 702 be used for support server 70 perform Fig. 5 in S401, S402 and S403a and/or other steps for techniques described herein scheme.Communication unit 703, for support server 70 with Other equipment communication in warning system.For example, server 70 is supported to perform S403a in Fig. 4.
It should be noted that when Fig. 2 is the structure diagram of server, the storage unit 701 can be implemented as Fig. 2 In server memory.Processing unit 702 can be implemented as the processor of server in Fig. 2, and communication unit 703 can be real The now communication interface for server in Fig. 2.
Wherein, all related contents for each step that above method embodiment is related to can be quoted shown in Fig. 6, Fig. 7 The function description of corresponding function module in device, details are not described herein.
The embodiment of the present application also provides a kind of computer readable storage medium, and finger is stored in computer readable storage medium It enables, when calculate node performs the instruction, which performs in the method flow shown in above method embodiment and calculate section Each step that point performs.
The embodiment of the present application also provides a kind of computer readable storage medium, and finger is stored in computer readable storage medium It enables, when server performs the instruction, server performs in the method flow shown in server execution above method embodiment Each step.
Wherein, computer readable storage medium, such as electricity, magnetic, optical, electromagnetic, infrared ray can be but not limited to or partly led System, device or the device of body or arbitrary above combination.The more specific example of computer readable storage medium is (non-poor The list of act) include：Electrical connection, portable computer diskette with one or more conducting wires, hard disk, random access memory (Random Access Memory, RAM), read-only memory (Read-Only Memory, ROM), erasable type may be programmed read-only It is memory (Erasable Programmable Read Only Memory, EPROM), register, hard disk, optical fiber, portable Compact disc read-only memory (Compact Disc Read-Only Memory, CD-ROM), light storage device, magnetic memory Part or the computer readable storage medium of above-mentioned any appropriate combination or any other form well known in the art. A kind of illustrative storage medium is coupled to processor, so as to enable a processor to from the read information, and can be to Information is written in the storage medium.Certainly, storage medium can also be the component part of processor.Pocessor and storage media can be with In application-specific IC (Application Specific Integrated Circuit, ASIC).In the application In embodiment, computer readable storage medium can be any tangible medium for including or storing program, which can be referred to Enable the either device use or in connection of execution system, device.
The specific embodiment of the above, only the application, but the protection domain of the application is not limited thereto, it is any In the technical scope that those familiar with the art discloses in the application, change or replacement can be readily occurred in, should all be contained It covers within the protection domain of the application.Therefore, the protection domain of the application should be based on the protection scope of the described claims.

Claims (18)

1. a kind of alarm determination method, which is characterized in that the method is applied to warning system, and the warning system includes service Device, monitored node and at least two calculate nodes, each calculate node are stored with preset kind alarm regulation, the method packet It includes：
Calculate node obtains monitoring number corresponding with the preset kind alarm regulation according to the preset kind alarm regulation of storage According to the calculate node is any one calculate node in the warning system；
The calculate node carries out alarm judgement according to the preset kind alarm regulation to the monitoring data.
2. according to the method described in claim 1, it is characterized in that, the alarm regulation includes：The alarm that time window is 0 is advised Then, short time window alarm regulation and long-time window alarm regulation；Wherein, the time window of long-time window alarm regulation is long Degree is greater than or equal to preset window length, and the time window length of short time window alarm regulation is less than preset window length.
3. according to the method described in claim 2, it is characterized in that, the calculate node alerts rule according to the preset kind of storage Monitoring data corresponding with the preset kind alarm regulation is then obtained to include：
If the preset kind alarm regulation is the alarm regulation that time window is 0, the calculate node obtains real time monitoring Data；
Alternatively,
If the preset kind alarm regulation is short time window alarm regulation, the calculate node obtains the short time window Monitoring data in the mouth corresponding period；
Alternatively,
If the preset kind alarm regulation is long-time window alarm regulation, the calculate node obtains the long-time window Monitoring data in the mouth corresponding period.
4. according to claim 1-3 any one of them methods, which is characterized in that the preset kind alarm regulation is included at least One subexpression, each subexpression correspond to a monitor control index；The monitoring data includes monitor control index；
It is corresponding with the preset kind alarm regulation according to the acquisition of the preset kind alarm regulation of storage in the calculate node After monitoring data, the method further includes：
The calculate node divides the monitoring data according to monitor control index and monitored node mark, obtains at least one A first monitoring data group；Wherein, the monitor control index that the monitoring data of each first monitoring data group includes is identical and corresponding Monitored node mark it is identical.
5. according to the method described in claim 4, it is characterized in that, the calculate node is according to the preset kind alarm regulation Alarm judgement is carried out to the monitoring data to include：
The calculate node determines the value of each monitor control index in the monitoring data；
The calculate node determines the value of the corresponding subexpression of each monitor control index respectively according to the value of each monitor control index；
The calculate node determines the preset kind alarm regulation according to the value of the corresponding subexpression of each monitor control index Value；
If it is determined that the value of the preset kind alarm regulation is preset value, then the calculate node is alerted.
It is 6. according to the method described in claim 5, it is characterized in that, each in the calculate node determines the monitoring data After the value of monitor control index, the method further includes：
The calculate node draws the monitoring data according to the time for obtaining the monitoring data and alarm regulation mark Point, obtain at least one second monitoring data group；The monitoring data corresponding acquisition time of the second monitoring data group is identical And alarm regulation mark is identical.
7. method according to any one of claims 1 to 6, which is characterized in that the method further includes：
The calculate node obtains the preset kind alarm regulation from the server.
A kind of 8. method for alerting judgement, which is characterized in that the method is applied to warning system, and the warning system includes clothes Business device, monitored node and at least two calculate nodes；The method includes：
Server receives alarm regulation configuration-direct input by user, and the alarm regulation configuration-direct is advised for alarm to be configured Then；
The server classifies to the alarm regulation of configuration, so that type point of the calculate node according to alarm regulation It Huo Qu not preset kind alarm regulation.
9. according to the method described in claim 8, it is characterized in that, it is 0 that the type of the alarm regulation, which includes time window, Alarm regulation, short time window alarm regulation and long-time window alarm regulation；Wherein, the time of long-time window alarm regulation Length of window is greater than or equal to preset window length, and the time window length of short time window alarm regulation is long less than preset window Degree.
10. a kind of alarm decision maker, which is characterized in that applied to warning system, the warning system includes server, supervised Node and at least two calculate nodes are controlled, each calculate node is stored with preset kind alarm regulation, and described device is as calculating Node includes：
Communication unit, for obtaining prison corresponding with the preset kind alarm regulation according to the preset kind alarm regulation of storage Data are controlled, the calculate node is any one calculate node in the warning system；
Processing unit, the monitoring data for being obtained according to the preset kind alarm regulation to the communication unit alert Judgement.
11. device according to claim 10, which is characterized in that the alarm regulation includes：Time window is 0 alarm Rule, short time window alarm regulation and long-time window alarm regulation；Wherein, the time window of long-time window alarm regulation Length is greater than or equal to preset window length, and the time window length of short time window alarm regulation is less than preset window length.
12. according to the devices described in claim 11, which is characterized in that
Communication unit if it is the alarm regulation that time window is 0 to be additionally operable to the preset kind alarm regulation, obtains prison in real time Control data；It is if described to obtain the short time window alternatively, the preset kind alarm regulation is short time window alarm regulation Monitoring data in the mouth corresponding period；If alternatively, the preset kind alarm regulation be long-time window alarm regulation, Obtain the monitoring data in the long-time window corresponding period.
13. according to claim 10-12 any one of them devices, which is characterized in that
The preset kind alarm regulation includes at least one subexpression, and each subexpression corresponds to a monitor control index；Institute It states monitoring data and includes monitor control index；
The processing unit, for the monitoring data obtained according to monitor control index and monitored node mark to the communication unit It is divided, obtains at least one first monitoring data group；Wherein, the monitoring data of each first monitoring data group includes Monitor control index is identical and corresponding monitored node mark is identical.
14. device according to claim 13, which is characterized in that
The processing unit is additionally operable to determine the value of each monitor control index in the monitoring data；According to each monitor control index Value determines the value of the corresponding subexpression of each monitor control index respectively；According to the value of the corresponding subexpression of each monitor control index Determine the value of the preset kind alarm regulation；If it is determined that the value of the preset kind alarm regulation is preset value, then accused It is alert.
15. device according to claim 14, which is characterized in that
The processing unit is additionally operable to identify to the monitoring data according to the time and alarm regulation that obtain the monitoring data It is divided, obtains at least one second monitoring data group；During the corresponding acquisition of the monitoring data of the second monitoring data group Between identical and alarm regulation mark it is identical.
16. according to claim 10 to 15 any one of them device, which is characterized in that
The communication unit is additionally operable to obtain the preset kind alarm regulation from the server.
17. a kind of device for alerting judgement, which is characterized in that applied to warning system, the warning system includes server, quilt Monitor node and at least two calculate nodes；Described device includes as server：
Input unit, for receiving alarm regulation configuration-direct input by user, the alarm regulation configuration-direct is used to be configured Alarm regulation；
Processing unit is classified for the alarm regulation to configuration, so that class of the calculate node according to alarm regulation Type obtains preset kind alarm regulation respectively.
18. device according to claim 17, which is characterized in that it is 0 that the type of the alarm regulation, which includes time window, Alarm regulation, short time window alarm regulation and long-time window alarm regulation；Wherein, long-time window alarm regulation when Between length of window be greater than or equal to preset window length, the time window length of short time window alarm regulation is less than preset window Length.
CN201711493249.0A 2017-12-30 2017-12-30 Alarm determination method, device and alarm system Active CN108270618B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201711493249.0A CN108270618B (en) 2017-12-30 2017-12-30 Alarm determination method, device and alarm system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201711493249.0A CN108270618B (en) 2017-12-30 2017-12-30 Alarm determination method, device and alarm system

Publications (2)

Publication Number Publication Date
CN108270618A true CN108270618A (en) 2018-07-10
CN108270618B CN108270618B (en) 2021-07-16

Family

ID=62772930

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201711493249.0A Active CN108270618B (en) 2017-12-30 2017-12-30 Alarm determination method, device and alarm system

Country Status (1)

Country Link
CN (1) CN108270618B (en)

Cited By (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109165137A (en) * 2018-07-27 2019-01-08 曙光信息产业(北京)有限公司 data analysis and alarm method and system
CN109167682A (en) * 2018-08-14 2019-01-08 国电南瑞科技股份有限公司 The long-range retrieval method of the warning information of power automatic system and device
CN109597736A (en) * 2018-12-03 2019-04-09 郑州云海信息技术有限公司 A kind of monitoring method, device, equipment and medium
CN109739877A (en) * 2018-11-21 2019-05-10 比亚迪股份有限公司 Database Systems and data managing method
CN110661665A (en) * 2019-09-29 2020-01-07 高新兴科技集团股份有限公司 Alarm method based on Internet of things cloud platform, computer storage medium and equipment
CN111092748A (en) * 2019-11-14 2020-05-01 远景智能国际私人投资有限公司 Alarm rule setting method, device, equipment and storage medium for Internet of things equipment
CN111258798A (en) * 2020-01-14 2020-06-09 平安壹钱包电子商务有限公司 Fault positioning method and device for monitoring data, computer equipment and storage medium
CN111508214A (en) * 2020-04-22 2020-08-07 杭州电子科技大学 Alarm control method and control equipment
CN111813638A (en) * 2020-06-30 2020-10-23 厦门科灿信息技术有限公司 Alarm information processing method and device and terminal equipment
CN112054913A (en) * 2019-06-05 2020-12-08 厦门网宿有限公司 Data monitoring system and method
CN112699008A (en) * 2021-01-05 2021-04-23 上海中通吉网络技术有限公司 Method and engine for automatically processing alarm by matching multi-dimensional rules
CN113220530A (en) * 2021-05-14 2021-08-06 上海哔哩哔哩科技有限公司 Data quality monitoring method and platform
CN113297183A (en) * 2021-07-21 2021-08-24 国网汇通金财（北京）信息科技有限公司 Alarm analysis method and device for time window
CN114422339A (en) * 2022-03-29 2022-04-29 西安塔力科技有限公司 Automatic scheduling distributed data monitoring system and method
CN114500251A (en) * 2022-01-13 2022-05-13 深圳力维智联技术有限公司 System alarm monitoring method, device, equipment and readable storage medium
CN114650218A (en) * 2020-12-17 2022-06-21 中移(苏州)软件技术有限公司 Data acquisition method, equipment, system and storage medium
CN114666203A (en) * 2022-03-29 2022-06-24 浙江省能源集团有限公司 Rule processing method, apparatus, electronic device and medium
CN115080366A (en) * 2022-08-22 2022-09-20 深圳依时货拉拉科技有限公司 Alarm method, alarm device, computer equipment and storage medium
CN115134224A (en) * 2022-08-31 2022-09-30 杭州玳数科技有限公司 DAG graph monitoring method and system
CN115913886A (en) * 2022-11-15 2023-04-04 浪潮云信息技术股份公司 Alarm method and system based on sliding window in cloud native environment

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100229014A1 (en) * 2009-03-03 2010-09-09 1E Limited Monitoring a computer
CN103856339A (en) * 2012-12-04 2014-06-11 中国移动通信集团广西有限公司 Method and device for compressing alarm information
CN104020724A (en) * 2013-03-01 2014-09-03 中芯国际集成电路制造(上海)有限公司 Alarm monitoring method and device
CN104657792A (en) * 2015-03-06 2015-05-27 中电海康集团有限公司 Early warning method based on rule engine and intelligent prediction
CN105376100A (en) * 2015-12-09 2016-03-02 国云科技股份有限公司 Distributed alarm rule assessment method suitable for cloud platform resource monitoring
CN105827447A (en) * 2016-03-31 2016-08-03 乐视控股（北京）有限公司 Service alarm method and apparatus
CN105825641A (en) * 2016-03-31 2016-08-03 乐视控股（北京）有限公司 Service alarm method and apparatus
CN106961352A (en) * 2017-03-29 2017-07-18 努比亚技术有限公司 Monitoring system and monitoring method

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100229014A1 (en) * 2009-03-03 2010-09-09 1E Limited Monitoring a computer
CN103856339A (en) * 2012-12-04 2014-06-11 中国移动通信集团广西有限公司 Method and device for compressing alarm information
CN104020724A (en) * 2013-03-01 2014-09-03 中芯国际集成电路制造(上海)有限公司 Alarm monitoring method and device
CN104657792A (en) * 2015-03-06 2015-05-27 中电海康集团有限公司 Early warning method based on rule engine and intelligent prediction
CN105376100A (en) * 2015-12-09 2016-03-02 国云科技股份有限公司 Distributed alarm rule assessment method suitable for cloud platform resource monitoring
CN105827447A (en) * 2016-03-31 2016-08-03 乐视控股（北京）有限公司 Service alarm method and apparatus
CN105825641A (en) * 2016-03-31 2016-08-03 乐视控股（北京）有限公司 Service alarm method and apparatus
CN106961352A (en) * 2017-03-29 2017-07-18 努比亚技术有限公司 Monitoring system and monitoring method

Cited By (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109165137A (en) * 2018-07-27 2019-01-08 曙光信息产业(北京)有限公司 data analysis and alarm method and system
CN109167682B (en) * 2018-08-14 2021-06-04 国电南瑞科技股份有限公司 Method and device for remotely retrieving alarm information of power automation system
CN109167682A (en) * 2018-08-14 2019-01-08 国电南瑞科技股份有限公司 The long-range retrieval method of the warning information of power automatic system and device
CN109739877A (en) * 2018-11-21 2019-05-10 比亚迪股份有限公司 Database Systems and data managing method
CN109597736A (en) * 2018-12-03 2019-04-09 郑州云海信息技术有限公司 A kind of monitoring method, device, equipment and medium
CN112054913A (en) * 2019-06-05 2020-12-08 厦门网宿有限公司 Data monitoring system and method
CN110661665A (en) * 2019-09-29 2020-01-07 高新兴科技集团股份有限公司 Alarm method based on Internet of things cloud platform, computer storage medium and equipment
CN110661665B (en) * 2019-09-29 2023-05-30 高新兴科技集团股份有限公司 Alarming method based on Internet of things cloud platform, computer storage medium and equipment
CN111092748A (en) * 2019-11-14 2020-05-01 远景智能国际私人投资有限公司 Alarm rule setting method, device, equipment and storage medium for Internet of things equipment
CN111092748B (en) * 2019-11-14 2023-01-10 远景智能国际私人投资有限公司 Alarm rule setting method, device, equipment and storage medium for Internet of things equipment
CN111258798A (en) * 2020-01-14 2020-06-09 平安壹钱包电子商务有限公司 Fault positioning method and device for monitoring data, computer equipment and storage medium
CN111508214B (en) * 2020-04-22 2022-04-22 杭州电子科技大学 Alarm control method and control equipment
CN111508214A (en) * 2020-04-22 2020-08-07 杭州电子科技大学 Alarm control method and control equipment
CN111813638B (en) * 2020-06-30 2022-10-14 厦门科灿信息技术有限公司 Alarm information processing method and device and terminal equipment
CN111813638A (en) * 2020-06-30 2020-10-23 厦门科灿信息技术有限公司 Alarm information processing method and device and terminal equipment
CN114650218B (en) * 2020-12-17 2023-12-12 中移(苏州)软件技术有限公司 Data acquisition method, device, system and storage medium
CN114650218A (en) * 2020-12-17 2022-06-21 中移(苏州)软件技术有限公司 Data acquisition method, equipment, system and storage medium
CN112699008A (en) * 2021-01-05 2021-04-23 上海中通吉网络技术有限公司 Method and engine for automatically processing alarm by matching multi-dimensional rules
CN113220530A (en) * 2021-05-14 2021-08-06 上海哔哩哔哩科技有限公司 Data quality monitoring method and platform
CN113220530B (en) * 2021-05-14 2022-07-19 上海哔哩哔哩科技有限公司 Data quality monitoring method and platform
CN113297183A (en) * 2021-07-21 2021-08-24 国网汇通金财（北京）信息科技有限公司 Alarm analysis method and device for time window
CN114500251A (en) * 2022-01-13 2022-05-13 深圳力维智联技术有限公司 System alarm monitoring method, device, equipment and readable storage medium
CN114666203A (en) * 2022-03-29 2022-06-24 浙江省能源集团有限公司 Rule processing method, apparatus, electronic device and medium
CN114422339A (en) * 2022-03-29 2022-04-29 西安塔力科技有限公司 Automatic scheduling distributed data monitoring system and method
CN115080366B (en) * 2022-08-22 2022-11-15 深圳依时货拉拉科技有限公司 Alarm method, alarm device, computer equipment and storage medium
CN115080366A (en) * 2022-08-22 2022-09-20 深圳依时货拉拉科技有限公司 Alarm method, alarm device, computer equipment and storage medium
CN115134224A (en) * 2022-08-31 2022-09-30 杭州玳数科技有限公司 DAG graph monitoring method and system
CN115913886A (en) * 2022-11-15 2023-04-04 浪潮云信息技术股份公司 Alarm method and system based on sliding window in cloud native environment

Also Published As

Publication number Publication date
CN108270618B (en) 2021-07-16

Similar Documents

Publication Publication Date Title
CN108270618A (en) Alert the method, apparatus and warning system of judgement
US20170288974A1 (en) Graph-based fusing of heterogeneous alerts
CN108197261A (en) A kind of wisdom traffic operating system
CN104731690B (en) Adaptive metrology collection, storage and warning threshold
CN107666410A (en) Network Safety Analysis system
CN104881352A (en) System resource monitoring device based on mobile terminal
CN111953541B (en) Alarm information processing method, device, computer equipment and storage medium
EP3376731B1 (en) Rule-based information exchange in internet of things
CN111310139B (en) Behavior data identification method and device and storage medium
WO2020192677A1 (en) Knowledge-base information sensing method and system for operations and maintenance of data center
US20170288979A1 (en) Blue print graphs for fusing of heterogeneous alerts
CN111782900B (en) Abnormal service detection method and device, electronic equipment and storage medium
EP3204848B1 (en) Real-time reporting based on instrumentation of software
CN106254137A (en) The alarm root-cause analysis system and method for supervisory systems
CN112181704A (en) Big data task processing method and device, electronic equipment and storage medium
CN114327964A (en) Method, device, equipment and storage medium for processing fault reasons of service system
CN109819128A (en) A kind of quality detecting method and device of telephonograph
CN112948223A (en) Method and device for monitoring operation condition
JP6201079B2 (en) Monitoring system and monitoring method
CN110389876B (en) Method, device and equipment for supervising basic resource capacity and storage medium
WO2017176676A1 (en) Graph-based fusing of heterogeneous alerts
CN107590672A (en) Recommendation method and device based on Maslow&#39;s hierarchy of needs
JP5922811B1 (en) Log information classification device, log information classification method, and program
CN113094597B (en) Thousand-person and thousand-face portal processing method and device based on machine learning and related equipment
CN114661562A (en) Data warning method, device, equipment and medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
TA01 Transfer of patent application right

Effective date of registration: 20200422

Address after: 518129 Bantian HUAWEI headquarters office building, Longgang District, Guangdong, Shenzhen

Applicant after: HUAWEI TECHNOLOGIES Co.,Ltd.

Address before: 301, A building, room 3, building 301, foreshore Road, No. 310052, Binjiang District, Zhejiang, Hangzhou

Applicant before: Huawei Technologies Co.,Ltd.

TA01 Transfer of patent application right
GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right

Effective date of registration: 20220217

Address after: 550025 Huawei cloud data center, jiaoxinggong Road, Qianzhong Avenue, Gui'an New District, Guiyang City, Guizhou Province

Patentee after: Huawei Cloud Computing Technology Co.,Ltd.

Address before: 518129 Bantian HUAWEI headquarters office building, Longgang District, Guangdong, Shenzhen

Patentee before: HUAWEI TECHNOLOGIES Co.,Ltd.

TR01 Transfer of patent right