CN108427608B

CN108427608B - Event warning method and event warning device

Info

Publication number: CN108427608B
Application number: CN201710081445.0A
Authority: CN
Inventors: 程雄; 郑礼雄; 崔长远
Original assignee: Tencent Technology Shenzhen Co Ltd
Current assignee: Tencent Technology Shenzhen Co Ltd
Priority date: 2017-02-15
Filing date: 2017-02-15
Publication date: 2020-12-01
Anticipated expiration: 2037-02-15
Also published as: CN108427608A

Abstract

The invention provides an event warning method, which comprises the steps of receiving abnormal event generation information, recording event numbers and event occurrence time of corresponding abnormal events according to the abnormal event generation information; searching an event occurrence time sequence and an alarm occurrence time sequence of the abnormal event according to the event number of the abnormal event; acquiring the minimum event interval time of the abnormal event according to the event occurrence time sequence; acquiring the latest alarm time and the alarm occurrence frequency of the abnormal event according to the alarm occurrence time sequence; and performing event alarm operation corresponding to the abnormal event according to the event occurrence time, the latest alarm time, the alarm occurrence times and the minimum event interval time. The invention also provides an event warning device, and the event warning method and the event warning device can automatically adjust the abnormal event warning interval time, thereby improving the usability and the effectiveness of the event warning device.

Description

Event warning method and event warning device

Technical Field

The present invention relates to the field of data processing, and in particular, to an event alarm method and an event alarm apparatus.

Background

Various abnormal events may occur in the data processing system during data processing, such as hard disk failure, process crash or service failure. When the data processing system has the above abnormal event, it generally sends an event alarm prompt message to the system maintenance staff, so that the system maintenance staff can process the abnormal event in time.

However, if an abnormal event cannot be handled in time, a large number of repeated event alarms may be generated within a certain time, thereby causing interference to system maintenance personnel. Therefore, the event alarm of the abnormal event is generally subjected to mask filtering according to a certain rule. Because the existing shielding and filtering rules are all set manually, under the condition that the types of the abnormal events are very many, system maintenance personnel need to spend a great deal of energy to set the shielding and filtering rules, so that the existing event warning device of the data processing system cannot give consideration to usability and effectiveness.

Disclosure of Invention

The embodiment of the invention provides an event warning method and an event warning device which can improve the usability and the effectiveness; the method and the device aim to solve the technical problems of poor usability or low effectiveness of the conventional event warning method and the conventional event warning device.

The embodiment of the invention provides an event warning method, which comprises the following steps:

receiving abnormal event generation information, and recording the event number and the event occurrence time of the corresponding abnormal event according to the abnormal event generation information;

searching an event occurrence time sequence and an alarm occurrence time sequence of the abnormal event according to the event number of the abnormal event;

acquiring the minimum event interval time of the abnormal event according to the event occurrence time sequence; acquiring the latest alarm time and the alarm occurrence frequency of the abnormal event according to the alarm occurrence time sequence; and

and performing event alarm operation corresponding to the abnormal event according to the event occurrence time, the latest alarm time, the alarm occurrence times and the minimum event interval time.

An embodiment of the present invention further provides an event alert device, which includes:

the abnormal event recording module is used for receiving the abnormal event generation information and recording the event number and the event occurrence time of the corresponding abnormal event according to the abnormal event generation information;

the abnormal event sequence searching module is used for searching the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event according to the event number of the abnormal event;

the abnormal event parameter acquisition module is used for acquiring the minimum event interval time of the abnormal event according to the event occurrence time sequence; acquiring the latest alarm time and the alarm occurrence frequency of the abnormal event according to the alarm occurrence time sequence; and

and the event alarm module is used for carrying out event alarm operation corresponding to the abnormal event according to the event occurrence time, the latest alarm time, the alarm occurrence times and the minimum event interval time.

Compared with the prior art, the event warning method and the event warning device can automatically adjust the abnormal event warning interval time, thereby improving the usability and effectiveness of the event warning device; the technical problems that the existing event warning method and the event warning device are poor in usability or low in effectiveness are solved.

Drawings

FIG. 1 is a flow chart of a first embodiment of an event alert method of the present invention;

FIG. 2 is a flow chart of a second embodiment of the event alert method of the present invention;

FIG. 3 is a schematic structural diagram of a first embodiment of an event alert device according to the present invention;

FIG. 4 is a schematic structural diagram of an event alert module according to a first embodiment of the event alert device of the present invention;

FIG. 5 is a schematic structural diagram of a second embodiment of the event warning device of the present invention;

FIG. 6 is a schematic structural diagram of an event alert module according to a second embodiment of the event alert device of the present invention;

FIG. 7a is a diagram illustrating an abnormal event according to an embodiment of the event alert method and the event alert apparatus of the present invention;

FIG. 7b is a flowchart illustrating the processing of an abnormal event according to an embodiment of the event alert method and the event alert apparatus of the present invention;

fig. 8 is a schematic view of a working environment structure of an electronic device in which the event alert device of the present invention is located.

Detailed Description

Referring to the drawings, wherein like reference numbers refer to like elements, the principles of the present invention are illustrated as being implemented in a suitable computing environment. The following description is based on illustrated embodiments of the invention and should not be taken as limiting the invention with regard to other embodiments that are not detailed herein.

In the description that follows, embodiments of the invention are described with reference to steps and symbols of operations performed by one or more computers, unless otherwise indicated. It will thus be appreciated that those steps and operations, which are referred to herein several times as being computer-executed, include being manipulated by a computer processing unit in the form of electronic signals representing data in a structured form. This manipulation transforms the data or maintains it at locations in the computer's memory system, which may reconfigure or otherwise alter the computer's operation in a manner well known to those skilled in the art. The data maintains a data structure that is a physical location of the memory that has particular characteristics defined by the data format. However, while the principles of the invention have been described in language specific to above, it is not intended to be limited to the specific details shown, since one skilled in the art will recognize that various steps and operations described below may be implemented in hardware.

The event alert apparatus and event alert method of the present invention may be provided in a variety of electronic devices (data processing systems) that perform data processing operations including, but not limited to, wearable devices, personal computers, server computers, hand-held or laptop devices, mobile devices (such as mobile phones, Personal Digital Assistants (PDAs), media players, and the like), multiprocessor systems, consumer electronics, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices. The electronic equipment of the invention automatically adjusts the alarm interval time of the abnormal event in the data processing process, and correspondingly prolongs the alarm interval time of the abnormal event when the occurrence frequency of the abnormal event is higher and the user does not process the abnormal event, thereby improving the usability and the effectiveness of the event alarm device; the technical problems that the existing event warning method and the event warning device are poor in usability or low in effectiveness are solved.

Referring to fig. 1, fig. 1 is a flowchart illustrating an event alert method according to a first embodiment of the present invention. The event alert method of the present embodiment may be implemented by using the electronic device, and the event alert method includes:

step S101, receiving abnormal event generation information, and recording the event number and the event occurrence time of the corresponding abnormal event according to the abnormal event generation information;

step S102, searching an event occurrence time sequence and an alarm occurrence time sequence of the abnormal event according to the event number of the abnormal event;

step S103, acquiring the minimum event interval time of the abnormal event according to the event occurrence time sequence; acquiring the latest alarm time and the alarm occurrence frequency of the abnormal event according to the alarm occurrence time sequence;

and step S104, performing event alarm operation corresponding to the abnormal event according to the event occurrence time, the latest alarm time, the alarm occurrence frequency and the minimum event interval time.

The following describes in detail the specific flow of each step of the event alert method according to this embodiment.

In step S101, the event alert device receives abnormal event generation information, where the abnormal event generation information is information that prompts a data processing system corresponding to a user to generate an abnormal event during data processing, and the abnormal event may be a hard disk failure, a dead process, or a service failure.

And then the event alarm device records the event number and the event occurrence time of the corresponding abnormal event according to the abnormal event generation information. The event number is a unique number of the abnormal event and is used for distinguishing the type of the abnormal event. The event occurrence time is the occurrence time of the abnormal event. Subsequently, the process goes to step S102.

In step S102, the event alert device searches for an event occurrence time series and an alert occurrence time series of the abnormal event according to the event number of the abnormal event acquired in step S101.

The event occurrence time sequence here is a sequence of occurrence times of a plurality of abnormal events of the same type; if the abnormal event a occurs at 1 point, 2 points, 4 points, and 5 points, respectively, the event occurrence time sequence of the abnormal event a may be [1, 2, 4, and 5 ].

The alarm occurrence time series here is a series of operation times of event alarm operations corresponding to a plurality of abnormal events of the same type. If the abnormal event A occurs at 1 point, 2 points, 4 points and 5 points respectively, but the abnormal event at 1 point, 2 points and 5 points performs an event alarm operation, namely, notifies the user of the generation of the abnormal event A. The alarm occurrence time series of the abnormal event a may be [1, 2, 5], and since the 4-point abnormal event a does not perform the corresponding event alarm operation, it is not recorded in the alarm occurrence time series.

Of course, if the abnormal event occurs for the first time, the event alarm operation corresponding to the abnormal event can be directly performed; and creates an event occurrence time series and an alarm occurrence time series of the abnormal event. If the number of times of the abnormal event is more than one, the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event can be searched. Subsequently, the process goes to step S103.

In step S103, the event alert device acquires the minimum event interval time of the abnormal event according to the event occurrence time series acquired in step S102.

The minimum event interval time refers to the minimum interval time of adjacent events in the event occurrence time sequence, so that the abnormal event alarm interval time can be automatically adjusted subsequently according to the minimum event interval time, the adjustment amplitude of the abnormal event alarm interval is more consistent with the occurrence frequency of the corresponding abnormal event, and the excessive or insufficient adjustment amount is avoided.

Subsequently, the event alert device acquires the latest alert time and the number of times of alert occurrence of the abnormal event according to the alert occurrence time series acquired in step S102. The latest alarm time here refers to the operation time of the latest abnormal event alarm operation.

The alarm occurrence frequency refers to the alarm operation frequency of the abnormal event, so that the alarm interval time of the abnormal event can be automatically adjusted subsequently according to the alarm operation frequency of the abnormal event. The greater the number of alarm operations, the higher the occurrence frequency of the abnormal event, and because the user does not process the abnormal event, the importance of the abnormal event is judged to be poor, and the alarm interval time of the abnormal event can be correspondingly increased. Subsequently, the process goes to step S104.

In step S104, the event alert device performs an event alert operation corresponding to the abnormal event according to the event occurrence time acquired in step S101, the latest alert time, the alert occurrence frequency, and the minimum event interval time acquired in step S103. The method specifically comprises the following steps:

firstly, the event warning device acquires the current warning interval time of an abnormal event according to the event occurrence time and the latest warning time; the current alarm interval time may be t_now-e_mWherein t is_nowAs the time of occurrence of the event, e_mThe most recent alarm time.

Then the event alarm device generates the current alarm condition of the abnormal event according to the alarm occurrence frequency and the minimum event interval time; the current alarm condition may be: 2^(m-1)*t1_minWherein t1_minM is the minimum event interval time and the alarm occurrence frequency. The alarm interval time specified by the current alarm condition is increased along with the increase of the alarm occurrence frequency, so that the alarm operation of the abnormal event with poor importance can be partially ignored, and the harassment brought to the user by excessive alarm operation is avoided.

Then the event alarm device judges whether the current alarm interval time meets the current alarm condition, namely, the event alarm device judges t_now-e_mWhether or not it is greater than or equal to 2^(m-1)*t1_min。

Such as t_now-e_mGreater than or equal to 2^(m-1)*t1_minIf the current alarm interval time meets the current alarm condition, the event alarm device carries out event alarm operation corresponding to the abnormal event and carries out updating operation on the event occurrence time sequence of the abnormal event and the alarm occurrence time sequence;

such as t_now-e_mLess than 2^(m-1)*t1_minIf the current alarm interval time does not meet the current alarm condition, that is, it is determined that the alarm operation frequency of the current abnormal event is too high, so that the alarm operation is not performed on the abnormal event, but the event occurrence time sequence of the abnormal event needs to be updated. Since the minimum inter-event time in the updated time series of event occurrences may be different from the minimum inter-event time in the pre-updated time series of event occurrencesSo here also the minimum inter-event time may be updated.

Thus, the alarm operation process of the abnormal event of the event alarm method of the embodiment is completed.

The event alarm method of the embodiment can adjust the current alarm interval time in real time according to the times of the alarm operation, namely the greater the times of the alarm operation, the longer the current event alarm interval time, thereby improving the usability and the alarm effectiveness of the corresponding event alarm device.

Referring to fig. 2, fig. 2 is a flowchart illustrating an event alert method according to a second embodiment of the present invention. The event alert method of the present embodiment may be implemented by using the electronic device, and the event alert method includes:

step S201, receiving the abnormal event generation information, and recording the event number and the event occurrence time of the corresponding abnormal event according to the abnormal event generation information;

step S202, according to the event number of the abnormal event, searching the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event;

step S203, acquiring the minimum event interval time of the abnormal event according to the event occurrence time sequence; acquiring the latest alarm time and the alarm occurrence frequency of the abnormal event according to the alarm occurrence time sequence;

and step S204, performing time alarm operation corresponding to the abnormal event according to the event occurrence time, the latest alarm time, the alarm occurrence frequency, the minimum event interval time, the minimum alarm interval time and the maximum alarm interval time.

In step S201, the event alert device receives the abnormal event generation information, and then the event alert device records the event number and the event occurrence time corresponding to the abnormal event according to the abnormal event generation information. Subsequently, the process goes to step S202.

In step S202, the event alert device searches the event occurrence time series and the alert occurrence time series of the abnormal event according to the event number of the abnormal event acquired in step S201.

Of course, if the abnormal event occurs for the first time, the event alarm operation corresponding to the abnormal event can be directly performed; and creates an event occurrence time series and an alarm occurrence time series of the abnormal event. If the number of times of the abnormal event is more than one, the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event can be searched. Subsequently, the process goes to step S203.

In step S203, the event alert device obtains the minimum event interval time of the abnormal event according to the event occurrence time sequence obtained in step S202; according to the alarm occurrence time sequence obtained in step S202, the latest alarm time and the alarm occurrence frequency of the abnormal event are obtained. Subsequently, the process goes to step S204.

In step S204, the event alert device performs an event alert operation corresponding to the abnormal event according to the event occurrence time obtained in step S201, the latest alert time, the alert occurrence frequency, and the minimum event interval time obtained in step S203, and the preset minimum alert interval time and the preset maximum alert interval time. The method specifically comprises the following steps:

Then the event alarm device generates the current alarm condition of the abnormal event according to the alarm occurrence frequency, the minimum event interval time, the minimum alarm interval time and the maximum alarm interval time; the current alarm condition may be: min (max (2)^(m ^-1)*t1_min，t2_min)，t2_max) Wherein t1_minM is the number of alarm occurrences, t2, for the minimum event interval time_minTo minimize the alarm Interval time, t2_maxIs the maximum alarm interval time. The alarm interval time specified by the current alarm condition herein occurs with the alarmThe times are increased, so that the alarm operation of the abnormal event with poor importance can be partially ignored, and the harassment brought to the user by excessive alarm operation is avoided.

Then the event alarm device judges whether the current alarm interval time meets the current alarm condition, namely, the event alarm device judges t_now-e_mWhether it is greater than or equal to min (max (2)^(m-1)*t1_min，t2_min)，t2_max)。

Such as t_now-e_mGreater than or equal to min (max (2)^(m-1)*t1_min，t2_min)，t2_max) If the current alarm interval time meets the current alarm condition, the event alarm device carries out event alarm operation corresponding to the abnormal event and carries out updating operation on the event occurrence time sequence of the abnormal event and the alarm occurrence time sequence;

such as t_now-e_mLess than min (max (2)^(m-1)*t1_min，t2_min)，t2_max) If the current alarm interval time does not meet the current alarm condition, that is, it is determined that the alarm operation frequency of the current abnormal event is too high, so that the alarm operation is not performed on the abnormal event, but the event occurrence time sequence of the abnormal event needs to be updated. Since the minimum inter-event time in the updated time series of event occurrences may be different from the minimum inter-event time in the pre-updated time series of event occurrences, the minimum inter-event time may also be updated here.

The minimum alarm interval time is set so that the event alarm device does not generate an alarm interval time less than t2_minThe effectiveness of the alarm operation is enhanced by the continuous alarm operation; the maximum alarm interval time is set so that the abnormal event alarm interval time is not increased without limit due to the increase of the alarm occurrence frequency, for example, the current alarm interval time is greater than t2_maxThe event alarm device does not consider the alarm occurrence frequency, and inevitably carries out event alarm operation corresponding to the abnormal event, thereby further enhancing the effectiveness of the alarm operation.

Of course, the root can be also used separatelyGenerating a current alarm condition of the abnormal event according to the alarm occurrence frequency, the minimum event interval time and the minimum alarm interval time, wherein the current alarm condition can be as follows: max (2)^(m-1)*t1_min，t2_min). Then the event alarm device judges whether the current alarm interval time meets the current alarm condition, namely, the event alarm device judges t_now-e_mWhether it is greater than or equal to max (2)^(m-1)*t1_min，t2_min)。

Such as t_now-e_mGreater than or equal to max (2)^(m-1)*t1_min，t2_min) If the current alarm interval time meets the current alarm condition, the event alarm device carries out event alarm operation corresponding to the abnormal event and carries out updating operation on the event occurrence time sequence of the abnormal event and the alarm occurrence time sequence;

such as t_now-e_mLess than max (2)^(m-1)*t1_min，t2_min) If the current alarm interval time does not meet the current alarm condition, that is, it is determined that the alarm operation frequency of the current abnormal event is too high, so that the alarm operation is not performed on the abnormal event, but the event occurrence time sequence of the abnormal event needs to be updated.

In addition, the current alarm condition of the abnormal event may be generated according to the alarm occurrence frequency, the minimum event interval time, and the maximum alarm interval time, where the current alarm condition may be: min (2)^(m-1)*t1_min，t2_max). Then the event alarm device judges whether the current alarm interval time meets the current alarm condition, namely, the event alarm device judges t_now-e_mWhether or not min (2) is greater than or equal to^(m-1)*t1_min，t2_max)。

Such as t_now-e_mGreater than or equal to min (2)^(m-1)*t1_min，t2_max) If the current alarm interval time meets the current alarm condition, the event alarm device carries out event alarm operation corresponding to the abnormal event and carries out updating operation on the event occurrence time sequence of the abnormal event and the alarm occurrence time sequence;

such as t_now-e_mLess than min (2)^(m-1)*t1_min，t2_max) If the current alarm interval time does not meet the current alarm condition, that is, it is determined that the alarm operation frequency of the current abnormal event is too high, so that the alarm operation is not performed on the abnormal event, but the event occurrence time sequence of the abnormal event needs to be updated.

On the basis of the first embodiment, the event warning method of the embodiment avoids the generation of short and long warning interval time by setting the minimum warning interval time and the maximum warning interval time, and further improves the warning effectiveness of the event warning device.

Referring to fig. 3, fig. 3 is a schematic structural diagram of a first embodiment of the event warning device according to the present invention, which can be implemented by using the first embodiment of the event warning method, and the event warning device 30 of the present embodiment includes an abnormal event recording module 31, an abnormal event sequence searching module 32, an abnormal event parameter obtaining module 33, and an event warning module 34.

The abnormal event recording module 31 is configured to receive the abnormal event generation information, and record an event number and an event occurrence time of a corresponding abnormal event according to the abnormal event generation information. The abnormal event sequence searching module 32 is configured to search the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event according to the event number of the abnormal event. The abnormal event parameter obtaining module 33 is configured to obtain a minimum event interval time of the abnormal event according to the event occurrence time sequence; and according to the alarm occurrence time sequence, the latest alarm time and the alarm occurrence times of the abnormal event are obtained. The event alarm module 34 is configured to perform an event alarm operation corresponding to the abnormal event according to the event occurrence time, the latest alarm time, the alarm occurrence frequency, and the minimum event interval time.

Referring to fig. 4, fig. 4 is a schematic structural diagram of an event alert module according to a first embodiment of the event alert device of the present invention. The event alert module 34 includes a current alert interval time acquisition unit 41, a current alert condition generation unit 42, a judgment unit 43, an alert unit 44, and an update unit 45.

The current alarm interval time obtaining unit 41 is configured to obtain a current alarm interval time of the abnormal event according to the event occurrence time and the latest alarm time; the current alarm condition generating unit 42 is configured to generate a current alarm condition of the abnormal event according to the alarm occurrence frequency and the minimum event interval time; the judging unit 43 is configured to judge whether the current alarm interval time meets the current alarm condition; the alarm unit 44 is configured to perform an event alarm operation corresponding to the abnormal event; the updating unit 45 is configured to update the event occurrence time series and the alarm occurrence time series of the abnormal event.

When the event warning device 30 of the present embodiment is used, the abnormal event recording module 31 receives the abnormal event generation information, where the abnormal event generation information is information for prompting the data processing system corresponding to the user to generate an abnormal event during data processing, and the abnormal event may be a hard disk failure, a dead process, or a service failure.

Then, the abnormal event recording module 31 records the event number and the event occurrence time of the corresponding abnormal event according to the abnormal event generation information. The event number is a unique number of the abnormal event and is used for distinguishing the type of the abnormal event. The event occurrence time is the occurrence time of the abnormal event.

Then, the abnormal event sequence searching module 32 searches the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event according to the event number of the abnormal event acquired by the abnormal event recording module 31.

Of course, if the abnormal event occurs for the first time, the event alert module 34 may directly perform an event alert operation corresponding to the abnormal event; and the abnormal event sequence finding module 31 creates an event occurrence time sequence and an alarm occurrence time sequence of the abnormal event. If the number of times of occurrence of the abnormal event is greater than one, the abnormal event sequence searching module 31 may search the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event.

Then, the abnormal event parameter obtaining module 33 obtains the minimum event interval time of the abnormal event according to the event occurrence time sequence obtained by the abnormal event sequence searching module 32.

Then, the abnormal event parameter obtaining module 33 obtains the latest alarm time and the alarm occurrence frequency of the abnormal event according to the alarm occurrence time sequence obtained by the abnormal event sequence searching module 32. The latest alarm time here refers to the operation time of the latest abnormal event alarm operation.

The alarm occurrence frequency refers to the alarm operation frequency of the abnormal event, so that the alarm interval time of the abnormal event can be automatically adjusted subsequently according to the alarm operation frequency of the abnormal event. The greater the number of alarm operations, the higher the occurrence frequency of the abnormal event, and because the user does not process the abnormal event, the importance of the abnormal event is judged to be poor, and the alarm interval time of the abnormal event can be correspondingly increased.

The last event warning module 34 performs an event warning operation corresponding to the abnormal event according to the event occurrence time acquired by the abnormal event recording module 31, the latest warning time, the warning occurrence frequency, and the minimum event interval time acquired by the abnormal event parameter acquiring module 33. The method specifically comprises the following steps:

firstly, the current alarm interval time obtaining unit 41 of the event alarm module 34 obtains the current alarm interval time of the abnormal event according to the event occurrence time and the latest alarm time; the current alarm interval time may be t_now-e_mWherein t is_nowAs the time of occurrence of the event, e_mThe most recent alarm time.

Then the current alarm condition generating unit 42 of the event alarm module 34 generates the current alarm condition of the abnormal event according to the alarm occurrence frequency and the minimum event interval time; the current alarm condition may be: 2^(m-1)*t1_minWherein t1_minM is the minimum event interval time and the alarm occurrence frequency. The alarm interval time specified by the current alarm condition is increased along with the increase of the alarm occurrence frequency, so that the alarm operation of the abnormal event with poor importance can be partially ignored, and the harassment brought to the user by excessive alarm operation is avoided.

The determination unit 43 of the event alert module 34 then determines whether the current alert interval time satisfies the current alert condition, i.e., determines t_now-e_mWhether or not it is greater than or equal to 2^(m-1)*t1_min。

Such as t_now-e_mGreater than or equal to 2^(m-1)*t1_minIf the current alarm interval time meets the current alarm condition, the alarm unit 44 of the event alarm module 34 performs an event alarm operation corresponding to the abnormal event, and the update unit 45 of the event alarm module 34 performs an update operation on the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event;

such as t_now-e_mLess than 2^(m-1)*t1_minThen notify at presentThe alarm interval time does not satisfy the current alarm condition, that is, the alarm operation frequency of the current abnormal event is determined to be too high, so that the alarm operation is not performed on the abnormal event here, but the updating unit 45 needs to update the event occurrence time sequence of the abnormal event. Since the minimum inter-event time in the updated time series of event occurrences may be different from the minimum inter-event time in the pre-updated time series of event occurrences, the minimum inter-event time may also be updated here.

This completes the alarm operation process of the abnormal event of the event alarm device 30 of the present embodiment.

The event warning device of the embodiment can adjust the current warning interval time in real time according to the number of warning operations, namely, the larger the number of warning operations is, the longer the current event warning interval time is, thereby improving the usability and warning effectiveness of the corresponding event warning device.

Referring to fig. 5, fig. 5 is a schematic structural diagram of a second embodiment of an event alert device according to the present invention, the event alert device of the present embodiment can be implemented by using the second embodiment of the event alert method, and the event alert device 50 of the present embodiment includes an abnormal event recording module 51, an abnormal event sequence searching module 52, an abnormal event parameter obtaining module 53, and an event alert module 54.

The abnormal event recording module 51 is configured to receive the abnormal event generation information, and record an event number and an event occurrence time of a corresponding abnormal event according to the abnormal event generation information. The abnormal event sequence searching module 52 is configured to search the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event according to the event number of the abnormal event. The abnormal event parameter obtaining module 53 is configured to obtain a minimum event interval time of the abnormal event according to the event occurrence time sequence; and according to the alarm occurrence time sequence, the latest alarm time and the alarm occurrence times of the abnormal event are obtained. The event alarm module 54 is configured to perform a time alarm operation corresponding to the abnormal event according to the event occurrence time, the latest alarm time, the alarm occurrence frequency, the minimum event interval time, the minimum alarm interval time, and the maximum alarm interval time.

Referring to fig. 6, fig. 6 is a schematic structural diagram of an event alert module according to a second embodiment of the event alert device of the present invention. The event alert module 54 includes a current alert interval time acquisition unit 61, a current alert condition generation unit 62, a judgment unit 63, an alert unit 64, and an update unit 65.

The current alarm interval time acquiring unit 61 is configured to acquire a current alarm interval time of the abnormal event according to the event occurrence time and the latest alarm time; the current alarm condition generating unit 62 is configured to generate a current alarm condition of the abnormal event according to the alarm occurrence frequency, the minimum event interval time, the minimum alarm interval time, and the maximum alarm interval time; the judging unit 63 is configured to judge whether the current alarm interval time meets the current alarm condition; the alarm unit 64 is configured to perform an event alarm operation corresponding to the abnormal event; the updating unit 65 is used for updating the event occurrence time series and the alarm occurrence time series of the abnormal events.

When the event alert device 50 of the present embodiment is used, the abnormal event recording module 51 receives the abnormal event generation information, and then the abnormal event recording module 51 records the event number and the event occurrence time corresponding to the abnormal event according to the abnormal event generation information.

Then, the abnormal event sequence searching module 52 searches the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event according to the event number of the abnormal event acquired by the abnormal event recording module 51.

Of course, if the abnormal event occurs for the first time, the event alert module 54 may directly perform the event alert operation corresponding to the abnormal event; and the abnormal event sequence lookup module 52 creates an event occurrence time sequence and an alarm occurrence time sequence for the abnormal event. If the number of occurrences of the abnormal event is greater than one, the abnormal event sequence searching module 52 may search the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event.

Then, the abnormal event parameter obtaining module 53 obtains the minimum event interval time of the abnormal event according to the event occurrence time sequence obtained by the abnormal event sequence searching module 52; according to the alarm occurrence time sequence obtained by the abnormal event sequence searching module 52, the latest alarm time and the alarm occurrence frequency of the abnormal event are obtained.

The last event warning module 54 performs an event warning operation corresponding to the abnormal event according to the event occurrence time acquired by the abnormal event recording module 51, the latest warning time, the warning occurrence frequency, the minimum event interval time acquired by the abnormal event parameter acquiring module 53, and the preset minimum warning interval time and the preset maximum warning interval time. The method specifically comprises the following steps:

firstly, the current alarm interval time obtaining unit 61 of the event alarm module 54 obtains the current alarm interval time of the abnormal event according to the event occurrence time and the latest alarm time; the current alarm interval time may be t_now-e_mWherein t is_nowAs the time of occurrence of the event, e_mThe most recent alarm time.

Then the current alarm condition generating unit 62 of the event alarm module 54 generates the current alarm condition of the abnormal event according to the alarm occurrence frequency, the minimum event interval time, the minimum alarm interval time and the maximum alarm interval time; the current alarm condition may be: min (max (2)^(m-1)*t1_min，t2_min)，t2_max) Wherein t1_minM is the number of alarm occurrences, t2, for the minimum event interval time_minTo minimize the alarm Interval time, t2_maxIs the maximum alarm interval time. The alarm interval time specified by the current alarm condition is increased along with the increase of the alarm occurrence frequency, so that the alarm operation of the abnormal event with poor importance can be partially ignored, and the harassment brought to the user by excessive alarm operation is avoided.

Then the judging unit 63 of the event alarm module 54 judges whether the current alarm interval time satisfies the current alarm condition, i.e. judges t_now-e_mWhether it is greater than or equal to min (max (2)^(m-1)*t1_min，t2_min)，t2_max)。

Such as t_now-e_mGreater than or equal to min (max (2)^(m-1)*t1_min，t2_min)，t2_max) If the current alarm interval time meets the current alarm condition, the alarm unit 64 of the event alarm module 54 performs an event alarm operation corresponding to the abnormal event, and the update unit 65 of the event alarm module 54 performs an update operation on the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event;

such as t_now-e_mLess than min (max (2)^(m-1)*t1_min，t2_min)，t2_max) Then the current alarm interval time does not satisfy the current alarm condition, i.e. it is determined that the alarm operation frequency of the current abnormal event is too high, so the alarm operation is not performed on the abnormal event here, but the updating unit 65 of the event alarm module 54 needs to update the event occurrence time sequence of the abnormal event. Since the minimum inter-event time in the updated time series of event occurrences may be different from the minimum inter-event time in the pre-updated time series of event occurrences, the minimum inter-event time may also be updated here.

The minimum alarm interval time is set such that the event alert device 50 does not generate an alarm interval time less than t2_minThe effectiveness of the alarm operation is enhanced by the continuous alarm operation; the maximum alarm interval time is set so that the abnormal event alarm interval time is not increased without limit due to the increase of the alarm occurrence frequency, for example, the current alarm interval time is greater than t2_maxThe event warning device 50 does not consider the number of times of occurrence of the warning, and inevitably performs the event warning operation corresponding to the abnormal event, thereby further enhancing the effectiveness of the warning operation.

Of course, the current alarm condition generating unit 62 may also generate the current alarm condition of the abnormal event according to the alarm occurrence frequency, the minimum event interval time, and the minimum alarm interval time, where the current alarm condition may be: max (2)^(m-1)*t1_min，t2_min). Then the judging unit 63 judges whether the current alarm interval time satisfies the current alarm condition, i.e. judges t_now-e_mWhether it is greater than or equal to max (2)^(m-1)*t1_min，t2_min)。

Such as t_now-e_mGreater than or equal to max (2)^(m-1)*t1_min，t2_min) If the current alarm interval time meets the current alarm condition, the alarm unit 64 performs an event alarm operation corresponding to the abnormal event, and the update unit 65 performs an update operation on the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event;

such as t_now-e_mLess than max (2)^(m-1)*t1_min，t2_min) Then the current alarm interval time does not satisfy the current alarm condition, i.e. it is determined that the alarm operation frequency of the current abnormal event is too high, so the alarm operation is not performed on the abnormal event here, but the updating unit 65 needs to update the event occurrence time sequence of the abnormal event.

Here, the current alarm condition generating unit 62 may further generate a current alarm condition of the abnormal event according to the alarm occurrence frequency, the minimum event interval time, and the maximum alarm interval time, where the current alarm condition may be: min (2)^(m-1)*t1_min，t2_max). Then the judging unit 63 judges whether the current alarm interval time satisfies the current alarm condition, i.e. judges t_now-e_mWhether or not min (2) is greater than or equal to^(m-1)*t1_min，t2_max)。

Such as t_now-e_mGreater than or equal to min (2)^(m-1)*t1_min，t2_max) If the current alarm interval time meets the current alarm condition, the alarm unit 64 performs an event alarm operation corresponding to the abnormal event, and the update unit 65 performs an update operation on the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event;

such as t_now-e_mLess than min (2)^(m-1)*t1_min，t2_max) If the current alarm interval time does not meet the current alarm condition, it is determined that the alarm operation frequency of the current abnormal event is too high, and therefore the alarm operation is not performed on the abnormal event, but the abnormal event is updatedThe unit 65 needs to update the event occurrence time series of exceptional events.

This completes the alarm operation process of the abnormal event of the event alarm device 50 of the present embodiment.

On the basis of the first embodiment, the event warning device of the embodiment avoids the generation of short and long warning interval time by setting the minimum warning interval time and the maximum warning interval time, and further improves the warning effectiveness of the event warning device.

The following describes a specific working principle of the event alert method and the event alert device according to the present invention with a specific embodiment. Referring to fig. 7a and 7b, fig. 7a is a schematic diagram of an abnormal event according to an embodiment of the event warning method and the event warning device of the present invention, and fig. 7b is a flowchart of an abnormal event processing according to an embodiment of the event warning method and the event warning device of the present invention.

The event warning device in this embodiment is disposed in a data processing system, and is configured to perform a warning operation on an abnormal event of a data processing operation in the data processing system. In this embodiment, the event alarm device generates a first abnormal event a at 10:00, a second abnormal event a at 10:10, a third abnormal event a at 10:15, a fourth abnormal event a at 10:30, a fifth abnormal event a at 11:05, a sixth abnormal event a at 12:00, and a seventh abnormal event a at 12: 30. The process of processing the abnormal event by the event alarm device of the present embodiment includes:

step S701, setting the minimum alarm interval time t2 of the abnormal event A_minSet to 25 minutes, maximum alert interval time t2_maxSet at 1440 minutes, i.e., one day.

Step S702, when a first abnormal event A occurs at a rate of 10:00, the event alarm device records the event occurrence time of the first abnormal event A and carries out event alarm operation on the abnormal event A. The event alert device creates an event occurrence time series and an alert occurrence time series of the abnormal event a.

And step S703, when a second abnormal event A occurs in the step 10:10, the event alarm device records the event occurrence time of the second abnormal event A and updates the event occurrence time sequence of the abnormal event A.

At this time the latest alarm time e_m10:00, event occurrence time t_now10:10, minimum event interval time t1_minThe alarm occurrence time m is 1 at 10 minutes, so that the current alarm interval time of the abnormal event a is 10 minutes, and the current alarm condition of the abnormal event a is min (max (2)^(1-1)10,25), 1440) for 25 minutes. Because the current alarm interval time is less than the time corresponding to the current alarm condition and does not meet the current alarm condition, the event alarm operation is not carried out on the abnormal event A.

And step S704, when a third abnormal event A occurs in the steps 10:15, the event alarm device records the event occurrence time of the third abnormal event A and updates the event occurrence time sequence of the abnormal event A.

At this time the latest alarm time e_m10:00, event occurrence time t_now10:15, minimum event interval time t1_minThe number of alarm occurrences m is 1 at 5 minutes, so that the current alarm interval time of the abnormal event a is 15 minutes, and the current alarm condition of the abnormal event a is min (max (2)^(1-1)5, 25), 1440) for 25 minutes. Because the current alarm interval time is less than the time corresponding to the current alarm condition and does not meet the current alarm condition, the event alarm operation is not carried out on the abnormal event A.

And step S705, when the fourth abnormal event A occurs in the step 10:30, the event alarm device records the event occurrence time of the fourth abnormal event A and updates the event occurrence time sequence of the abnormal event A.

At this time the latest alarm time e_m10:00, event occurrence time t_now10:30, minimum event interval time t1_minThe number of alarm occurrences m is 1 at 5 minutes, so that the current alarm interval time of the abnormal event a is 30 minutes, and the current alarm condition of the abnormal event a is min (max (2)^(1-1)5, 25), 1440) for 25 minutes. Because the current alarm interval time is longer than the time corresponding to the current alarm condition, the requirement of meetingThe current alarm condition, and therefore the event alarm operation is performed here for the abnormal event a. And meanwhile, updating the alarm occurrence time sequence of the abnormal event A.

Step S706, 11:05, a fifth abnormal event A occurs, the event alarm device records the event occurrence time of the fifth abnormal event A, and updates the event occurrence time sequence of the abnormal event A.

At this time the latest alarm time e_m10:30, event occurrence time t_now11:05, minimum event Interval time t1_minThe number of alarm occurrences m is 2 at 5 minutes, so that the current alarm interval time of the abnormal event a is 35 minutes, and the current alarm condition of the abnormal event a is min (max (2)^(2-1)5, 25), 1440) for 25 minutes. Because the current alarm interval time is longer than the time corresponding to the current alarm condition and meets the current alarm condition, the event alarm operation is carried out on the abnormal event A. And meanwhile, updating the alarm occurrence time sequence of the abnormal event A.

And step S707, when a sixth abnormal event A occurs at 12:00, the event warning device records the event occurrence time of the sixth abnormal event A and updates the event occurrence time sequence of the abnormal event A.

At this time the latest alarm time e_m11:05, event occurrence time t_now12:00, minimum event Interval time t1_minThe number of alarm occurrences m is 3 at 5 minutes, so that the current alarm interval time of the abnormal event a is 55 minutes, and the current alarm condition of the abnormal event a is min (max (2)^(3-1)5, 25), 1440) for 25 minutes. Because the current alarm interval time is longer than the time corresponding to the current alarm condition and meets the current alarm condition, the event alarm operation is carried out on the abnormal event A. And meanwhile, updating the alarm occurrence time sequence of the abnormal event A.

In step S708, when the seventh abnormal event A occurs in the step 12:30, the event alarm device records the event occurrence time of the seventh abnormal event A and updates the event occurrence time sequence of the abnormal event A.

At this time the latest alarm time e_m12:00, eventTime of occurrence t_nowAt 13:30, minimum event Interval time t1_minThe number of alarm occurrences m is 4 at 5 minutes, so that the current alarm interval time of the abnormal event a is 30 minutes, and the current alarm condition of the abnormal event a is min (max (2)^(4-1)5, 25), 1440) for 40 minutes. Because the current alarm interval time is less than the time corresponding to the current alarm condition and does not meet the current alarm condition, the event alarm operation is not carried out on the abnormal event A.

The event occurrence time sequence of the finally generated abnormal event A is (10:00, 10:10, 10:15, 10:30, 11:05, 12:00, 12: 30); the alarm occurrence time sequence of the abnormal event A is (10:00, 10:30, 11:05, 12: 00). As can be seen from the specific embodiment, the event warning device sends out an event warning operation within half an hour of 10:10 to 10: 30; after the four event alarm operations occur, the event alarm device needs at least 40 minutes to send out the fifth event alarm operation, so that the alarm interval time of the corresponding abnormal event is longer as the number of the event alarm operations is increased, and the effectiveness of the alarm operation is enhanced.

However, no event alarm operation is performed on the abnormal event a within 1440 minutes, and no matter how many times the previous event alarm operation is performed, the event alarm operation must be issued for the next abnormal event, so as to avoid not performing the event alarm operation on the abnormal event a for a long time. When the alarm interval time is more than 1440 minutes, carrying out event alarm operation; and the alarm interval time is less than or equal to 1440 minutes, and the event alarm operation is not performed.

Thus, the event alarm method and the alarm operation process of the abnormal event of the event alarm device of the embodiment are completed.

The event warning method and the event warning device can automatically adjust the abnormal event warning interval time, thereby improving the usability and the effectiveness of the event warning device; the technical problems that the existing event warning method and the event warning device are poor in usability or low in effectiveness are solved.

As used herein, the terms "component," "module," "system," "interface," "process," and the like are generally intended to refer to a computer-related entity: hardware, a combination of hardware and software, or software in execution. For example, a component may be, but is not limited to being, a process running on a processor, an object, an executable, a thread of execution, a program, and/or a computer. By way of illustration, both an application running on a controller and the controller can be a component. One or more components can reside within a process and/or thread of execution and a component may be localized on one computer and/or distributed between two or more computers.

FIG. 8 and the following discussion provide a brief, general description of an operating environment of an electronic device in which the event alert device of the present invention may be implemented. The operating environment of FIG. 8 is only one example of a suitable operating environment and is not intended to suggest any limitation as to the scope of use or functionality of the operating environment. Example electronic devices 812 include, but are not limited to, wearable devices, head-mounted devices, medical health platforms, personal computers, server computers, hand-held or laptop devices, mobile devices (such as mobile phones, Personal Digital Assistants (PDAs), media players, and the like), multiprocessor systems, consumer electronics, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices, and the like.

Although not required, embodiments are described in the general context of "computer readable instructions" being executed by one or more electronic devices. Computer readable instructions may be distributed via computer readable media (discussed below). Computer readable instructions may be implemented as program modules, such as functions, objects, Application Programming Interfaces (APIs), data structures, etc. that perform particular tasks or implement particular abstract data types. Typically, the functionality of the computer readable instructions may be combined or distributed as desired in various environments.

FIG. 8 illustrates an example of an electronic device 812 that includes one or more embodiments of the event alert apparatus of the present invention. In one configuration, electronic device 812 includes at least one processing unit 816 and memory 818. Depending on the exact configuration and type of electronic device, memory 818 may be volatile (such as RAM), non-volatile (such as ROM, flash memory, etc.) or some combination of the two. This configuration is illustrated in fig. 8 by dashed line 814.

In other embodiments, electronic device 812 may include additional features and/or functionality. For example, device 812 may also include additional storage (e.g., removable and/or non-removable) including, but not limited to, magnetic storage, optical storage, and the like. Such additional storage is illustrated in fig. 8 by storage 820. In one embodiment, computer readable instructions to implement one or more embodiments provided herein may be in storage 820. Storage 820 may also store other computer readable instructions to implement an operating system, an application program, and the like. Computer readable instructions may be loaded in memory 818 for execution by processing unit 816, for example.

The term "computer readable media" as used herein includes computer storage media. Computer storage media includes volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions or other data. Memory 818 and storage 820 are examples of computer storage media. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, Digital Versatile Disks (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can accessed by electronic device 812. Any such computer storage media may be part of electronic device 812.

Electronic device 812 may also include communication connection 826 that allows electronic device 812 to communicate with other devices. Communication connection 826 may include, but is not limited to, a modem, a Network Interface Card (NIC), an integrated network interface, a radio frequency transmitter/receiver, an infrared port, a USB connection, or other interfaces for connecting electronic device 812 to other electronic devices. Communication connection 826 may include a wired connection or a wireless connection. Communication connection 826 may transmit and/or receive communication media.

The term "computer readable media" may include communication media. Communication media typically embodies computer readable instructions or other data in a "modulated data signal" such as a carrier wave or other transport mechanism and includes any information delivery media. The term "modulated data signal" may include signals that: one or more of the signal characteristics may be set or changed in such a manner as to encode information in the signal.

Electronic device 812 may include input device(s) 824 such as keyboard, mouse, pen, voice input device, touch input device, infrared camera, video input device, and/or any other input device. Output device(s) 822 such as one or more displays, speakers, printers, and/or any other output device may also be included in device 812. The input device 824 and the output device 822 may be connected to the electronic device 812 via a wired connection, wireless connection, or any combination thereof. In one embodiment, an input device or an output device from another electronic device may be used as input device 824 or output device 822 for electronic device 812.

Components of electronic device 812 may be connected by various interconnects, such as a bus. Such interconnects may include Peripheral Component Interconnect (PCI), such as PCI express, Universal Serial Bus (USB), firewire (IEEE1394), optical bus structures, and the like. In another embodiment, components of electronic device 812 may be interconnected by a network. For example, memory 818 may be comprised of multiple physical memory units located in different physical locations interconnected by a network.

Those skilled in the art will realize that storage devices utilized to store computer readable instructions may be distributed across a network. For example, an electronic device 830 accessible via network 828 may store computer readable instructions to implement one or more embodiments provided by the present invention. Electronic device 812 may access electronic device 830 and download a part or all of the computer readable instructions for execution. Alternatively, electronic device 812 may download pieces of the computer readable instructions, as needed, or some instructions may be executed at electronic device 812 and some at electronic device 830.

Various operations of embodiments are provided herein. In one embodiment, the one or more operations may constitute computer readable instructions stored on one or more computer readable media, which when executed by an electronic device, will cause the computing device to perform the operations. The order in which some or all of the operations are described should not be construed as to imply that these operations are necessarily order dependent. Those skilled in the art will appreciate alternative orderings having the benefit of this description. Moreover, it should be understood that not all operations are necessarily present in each embodiment provided herein.

Also, although the disclosure has been shown and described with respect to one or more implementations, equivalent alterations and modifications will occur to others skilled in the art based upon a reading and understanding of this specification and the annexed drawings. The present disclosure includes all such modifications and alterations, and is limited only by the scope of the appended claims. In particular regard to the various functions performed by the above described components (e.g., elements, resources, etc.), the terms used to describe such components are intended to correspond, unless otherwise indicated, to any component which performs the specified function of the described component (e.g., that is functionally equivalent), even though not structurally equivalent to the disclosed structure which performs the function in the herein illustrated exemplary implementations of the disclosure. In addition, while a particular feature of the disclosure may have been disclosed with respect to only one of several implementations, such feature may be combined with one or more other features of the other implementations as may be desired and advantageous for a given or particular application. Furthermore, to the extent that the terms "includes," has, "" contains, "or variants thereof are used in either the detailed description or the claims, such terms are intended to be inclusive in a manner similar to the term" comprising.

Each functional unit in the embodiments of the present invention may be integrated into one processing module, or each unit may exist alone physically, or two or more units are integrated into one module. The integrated module can be realized in a hardware mode, and can also be realized in a software functional module mode. The integrated module, if implemented in the form of a software functional module and sold or used as a stand-alone product, may also be stored in a computer readable storage medium. The storage medium mentioned above may be a read-only memory, a magnetic or optical disk, etc. Each apparatus or system described above may perform the method in the corresponding method embodiment.

In summary, although the present invention has been disclosed in the foregoing embodiments, the serial numbers before the embodiments, such as "first" and "second", are used for convenience of description only, and do not limit the sequence of the embodiments of the present invention. Furthermore, the above embodiments are not intended to limit the present invention, and those skilled in the art can make various changes and modifications without departing from the spirit and scope of the present invention, therefore, the scope of the present invention shall be limited by the appended claims.

Claims

1. An event alert method, comprising:

searching an event occurrence time sequence and an alarm occurrence time sequence of the abnormal event according to the event number of the abnormal event; the alarm occurrence time sequence is a sequence of operation time of event alarm operation corresponding to a plurality of abnormal events of the same type; the event occurrence time sequence is a sequence of the occurrence times of a plurality of abnormal events of the same type;

acquiring the minimum event interval time of the abnormal event according to the event occurrence time sequence; acquiring the latest alarm time and the alarm occurrence frequency of the abnormal event according to the alarm occurrence time sequence;

acquiring the current alarm interval time of the abnormal event according to the event occurrence time and the latest alarm time;

generating a current alarm condition of the abnormal event according to the alarm occurrence times and the minimum event interval time;

judging whether the current alarm interval time meets the current alarm condition;

if the current alarm interval time meets the current alarm condition, performing event alarm operation corresponding to the abnormal event, and updating the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event;

and if the current alarm interval time does not meet the current alarm condition, updating the event occurrence time sequence of the abnormal event.

2. The event alert method according to claim 1, wherein the step of finding the event occurrence time series and the alert occurrence time series of the abnormal event according to the event number of the abnormal event comprises:

and if the abnormal event occurs for the first time, directly performing event alarm operation corresponding to the abnormal event, and creating an event occurrence time sequence and an alarm occurrence time sequence of the abnormal event.

3. The event alert method according to claim 1,

the current alarm interval time of the abnormal event is as follows: t is t_now-e_mWherein t is_nowAs the time of occurrence of the event, e_mThe latest alarm time;

the current alarm condition of the abnormal event is as follows: 2^(m-1)*t1_minWherein t1_minThe minimum event interval time is m is the alarm occurrence frequency;

the step of judging whether the current alarm interval time meets the current alarm condition is as follows:

judging t_now-e_mWhether or not it is greater than or equal to 2^(m-1)*t1_min。

4. The event alert method according to claim 1, wherein the event alert method comprises:

and performing event alarm operation corresponding to the abnormal event according to the event occurrence time, the latest alarm time, the alarm occurrence times, the minimum event interval time, the minimum alarm interval time and the maximum alarm interval time.

5. The event alarm method according to claim 4, wherein the step of performing the event alarm operation corresponding to the abnormal event according to the event occurrence time, the latest alarm time, the alarm occurrence times, the minimum event interval time, the minimum alarm interval time, and the maximum alarm interval time comprises:

generating a current alarm condition of the abnormal event according to the alarm occurrence frequency, the minimum event interval time, the minimum alarm interval time and the maximum alarm interval time;

6. The event alert method according to claim 5,

the current alarm condition of the abnormal event is as follows: max (2)^(m-1)*t1_min，t2_min) Wherein t1_minM is the number of alarm occurrences, t2, for the minimum event interval time_minIs the minimum alarm interval time;

judging t_now-e_mWhether it is greater than or equal to max (2)^(m-1)*t1_min，t2_min)。

7. The event alert method according to claim 5,

the current alarm condition of the abnormal event is as follows: min (2)^(m-1)*t1_min，t2_max) Wherein t1_minM is the number of alarm occurrences, t2, for the minimum event interval time_maxThe maximum alarm interval time;

judging t_now-e_mWhether or not min (2) is greater than or equal to^(m-1)*t1_min，t2_max)。

8. The event alert method according to claim 5,

the current alarm condition of the abnormal event is as follows: min (max (2)^(m-1)*t1_min，t2_min)，t2_max) Wherein t1_minM is the number of alarm occurrences, t2, for the minimum event interval time_minTo minimize the alarm Interval time, t2_maxThe maximum alarm interval time;

judging t_now-e_mWhether it is greater than or equal to min (max (2)^(m-1)*t1_min，t2_min)，t2_max)。

9. An event alert device, comprising:

the abnormal event sequence searching module is used for searching the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event according to the event number of the abnormal event; the alarm occurrence time sequence is a sequence of operation time of event alarm operation corresponding to a plurality of abnormal events of the same type; the event occurrence time sequence is a sequence of the occurrence times of a plurality of abnormal events of the same type;

the event alarm module is used for carrying out event alarm operation corresponding to the abnormal event according to the event occurrence time, the latest alarm time, the alarm occurrence times and the minimum event interval time;

the event alert module includes:

a current alarm interval time obtaining unit, configured to obtain a current alarm interval time of the abnormal event according to the event occurrence time and the latest alarm time;

a current alarm condition generating unit, configured to generate a current alarm condition of the abnormal event according to the alarm occurrence frequency and the minimum event interval time;

the judging unit is used for judging whether the current alarm interval time meets the current alarm condition;

the alarm unit is used for carrying out event alarm operation corresponding to the abnormal event; and

and the updating unit is used for updating the event occurrence time sequence and the alarm occurrence time sequence of the abnormal event.

10. The event alert device according to claim 9,

if the abnormal event sequence searching module determines that the abnormal event occurs for the first time, the event alarming module directly performs an event alarming operation corresponding to the abnormal event, and meanwhile, the abnormal event sequence searching module creates an event occurrence time sequence and an alarm occurrence time sequence of the abnormal event.

11. The event alert device according to claim 9,

the current alarm condition of the abnormal event is as follows: 2^(m-1)*t1_minWherein t1_minM is the minimum event interval time, and m is the alarm occurrence frequency;

the judging unit is used for judging t_now-e_mWhether or not it is greater than or equal to 2^(m-1)*t1_min。

12. The event alarm device according to claim 9, wherein the event alarm module is configured to perform an event alarm operation corresponding to the abnormal event according to the event occurrence time, the latest alarm time, the alarm occurrence frequency, the minimum event interval time, the minimum alarm interval time, and the maximum alarm interval time.

13. The event alert device according to claim 12,

a current alarm condition generating unit, configured to generate a current alarm condition of the abnormal event according to the alarm occurrence frequency, the minimum event interval time, the minimum alarm interval time, and the maximum alarm interval time;

14. The event alert device according to claim 13,

15. The event alert device according to claim 13,

the above-mentionedThe current alarm interval time of the abnormal event is as follows: t is t_now-e_mWherein t is_nowAs the time of occurrence of the event, e_mThe latest alarm time;

16. The event alert device according to claim 13,

the judging unit is used for judging t_now-e_mWhether it is greater than or equal to min (max (2)^(m-1)*t1_min，t2_min)，t2_max)。

17. A storage medium having stored therein processor-executable instructions, the instructions being loaded by one or more processors to perform the event alert method of any of claims 1-8.