CN108572907A

CN108572907A - A kind of alarm method, device, electronic equipment and computer readable storage medium

Info

Publication number: CN108572907A
Application number: CN201810071131.7A
Authority: CN
Inventors: 蔡志强
Original assignee: Beijing Jin Bo Xunrui Network Technology Co Ltd; Beijing Kingsoft Cloud Network Technology Co Ltd; Beijing Kingsoft Cloud Technology Co Ltd
Current assignee: Beijing Jin Bo Xunrui Network Technology Co Ltd; Beijing Kingsoft Cloud Network Technology Co Ltd; Beijing Kingsoft Cloud Technology Co Ltd
Priority date: 2018-01-25
Filing date: 2018-01-25
Publication date: 2018-09-25
Anticipated expiration: 2038-01-25
Also published as: CN108572907B

Abstract

An embodiment of the present invention provides a kind of alarm method, device, electronic equipment and computer readable storage medium, alarm method includes：Obtain destination request mark, wherein destination request is identified as the corresponding request mark of alarm of the default alarm form of currently transmitted first, and an alarm is corresponding with a request mark；The incidence relation that recording needle identifies destination request, wherein include request mark in each incidence relation；Judge whether the number of the incidence relation currently recorded is more than preset alarm quantity threshold value；If it does, number based on the incidence relation currently recorded and being directed to the second default preset alarm template of alarm form, the target alarms of the second default alarm form are generated, wherein the first default alarm form is different from the second default alarm form；Target alarms are sent to pre-set first and receive object.Using the embodiment of the present invention, great service exception can be alerted.

Description

A kind of alarm method, device, electronic equipment and computer readable storage medium

Technical field

The present invention relates to field of computer technology, more particularly to a kind of alarm method, device, electronic equipment and calculating Machine readable storage medium storing program for executing.

Background technology

In order to provide more quality services, the normal operation for ensureing each business is needed.Further, business is needed Alarm is generated using auto-alarming technology so that operation maintenance personnel can be positioned according to alarm to abnormal, be examined when occurring abnormal It is disconnected, and complete corresponding attended operation.

Auto-alarming technology includes the mail alarm skill based on ELK (Elasticsearch Logstash Kibana) Art, Elasticsearch are a search servers for being based on Lucene (full-text search engine), provide a distribution The full-text search engine of multi-user capability；Logstash is the log collection processing frame of a lightweight, it may be convenient to Dispersion, diversified log collection is got up, and carries out customized processing；Kibana be an analysis increased income with it is visual Change platform, designs for being used together with Elasticsearch.Logstash collects FileBeat (journal file supports Fortune tool) daily record that sends, from the daily record error message that is recorded of extraction daily record and time, by the error message of extraction and when Between be sent to Elasticsearch, Kibana obtains information from Elasticsearch, is alerted and is advised according to pre-set mail Then, the alarm of mail he is generated, and sends the alarm.But above-mentioned alarm mode is sent primary for an error message Mail alerts, and cannot be alerted to great service exception.

Invention content

The embodiment of the present invention is designed to provide a kind of alarm method, device, electronic equipment and computer-readable storage Medium alerts great service exception with realizing.Specific technical solution is as follows：

In a first aspect, in order to achieve the above object, the embodiment of the invention discloses a kind of alarm method, method includes：

Obtain destination request mark, wherein destination request is identified as the alarm of the default alarm form of currently transmitted first Corresponding request mark, an alarm are corresponding with a request mark；

The incidence relation that recording needle identifies destination request, wherein include request mark in each incidence relation；

Judge whether the number of the incidence relation currently recorded is more than preset alarm quantity threshold value；

If the number of the incidence relation currently recorded is more than preset alarm quantity threshold value, based on currently being recorded Incidence relation number and be directed to the second default preset alarm template of alarm form, generate the second default alarm form Target alarms, wherein the first default alarm form is different from the second default alarm form；

Target alarms are sent to pre-set first and receive object.

Optionally, each incidence relation also records the storage time having for the request identification record in the incidence relation；

In the case where judging that the number of current all incidence relations is more than preset alarm quantity threshold value, method Further include：

Judge that association of the storage time before the object time whether is recorded in the incidence relation currently recorded closes System, wherein the object time is the difference of current time and preset time threshold；

If there is no incidence relation of the storage time before the object time, execute based on the association currently recorded The number of relationship and be directed to the second default preset alarm template of alarm form, generate the second default alarm form target accuse Alert step；

If there is incidence relation of the storage time before the object time, storage time is deleted before the object time Incidence relation；After deleting incidence relation of the storage time before the object time, the number of the incidence relation recorded is still In the case of alarm quantity threshold value, executes the number based on the incidence relation currently recorded and preset for second and accused The step of preset alarm template of alert form, the target alarms of the second default alarm form of generation.

Optionally, each incidence relation also records the alarm time having for the request identification record in the incidence relation Number；

Judge to whether there is in the incidence relation of storage time in the target time period and has alerted number more than default alarm The incidence relation of frequency threshold value, wherein target time section is the period based on determined by object time and current time；

It is more than the default incidence relation for alerting frequency threshold value if there is no number has been alerted, executes and be based on currently being remembered The number of the incidence relation of record and be directed to the second default preset alarm template of alarm form, generate the second default alarm form Target alarms the step of；

It is more than the default incidence relation for alerting frequency threshold value if there is number has been alerted, deletion has alerted number and has been more than The incidence relation of default alarm frequency threshold value；After deletion has alerted incidence relation of the number more than default alarm frequency threshold value, In the case that the number of the incidence relation recorded is still greater than alarm quantity threshold value, executes and closed based on the association currently recorded The number of system and be directed to the second default preset alarm template of alarm form, generate the second default alarm form target alarms The step of.

Optionally, after receiving object determined by being sent to target alarms, method further includes：

For each incidence relation of current record, the number of alarm recorded in the incidence relation is increased into present count Magnitude.

Optionally, the alarm corresponding destination request mark for obtaining the first currently transmitted presets the step of it Before, method further includes：

Obtain target journaling, wherein target journaling is the error log of the preset style, and target journaling includes target service Mark；

According to the correspondence between the service identification and preset alarm form pre-established, determining and target service Identify the alarm form with correspondence；Wherein it is determined that alarm form include the first default alarm form；

Based on target journaling and for the first pre- alarm preset alarm template of form, the announcement of the first presets is generated It is alert；

Determine that the second of the alarm of the first generated default alarm form receives object；

The alarm of generated first default alarm form is sent to the second reception object.

Optionally, in the case where identified alarm form also includes that third presets alarm form, method is also wrapped It includes：

The preset alarm template of alarm form is preset based on target journaling and for third, generates the default alarm shape of third The alarm of formula；

Determine that generated third presets the third reception object of the alarm of alarm form；

The alarm that the third generated is preset to alarm form is sent to third reception object.

Optionally, the step of obtaining target journaling, including：

Obtain the error log currently generated；

Judge whether service identification included in obtained error log is preset non-alarm business mark；

If not being preset non-alarm business mark, using currently obtained error log as target journaling.

Optionally, the service identification for including in the daily record for judging currently to be generated is not preset non-alarm business mark In the case of knowledge, obtain target journaling the step of, further include：

Judge whether the corresponding request of currently obtained error log is illegal request, wherein a daily record and one Request corresponds to；

If not being illegal request, execute using currently obtained error log as the step of target journaling.

Optionally, according to the correspondence between the service identification and preset alarm form pre-established, determining and mesh Marking service identification has the alarm form of correspondence, including：

According to the incidence relation between the service identification and the grade of service pre-established, target service grade is determined, In, target service grade is the grade of service for having incidence relation with target identification；

According to the correspondence between the grade of service pre-established and alarm form, determining has pair with target service The alarm form that should be related to.

Second aspect, in order to achieve the above object, the embodiment of the present invention additionally provide a kind of alarm device, and device includes：

Acquisition module, for obtaining destination request mark, wherein it is default that destination request is identified as currently transmitted first The corresponding request mark of alarm of alarm form；One alarm is corresponding with a request mark；

Logging modle, the incidence relation that destination request is identified for recording needle, wherein wrapped in each incidence relation It is identified containing request；

Whether the number of the first judgment module, the incidence relation for judging currently to be recorded is more than preset alarm number Measure threshold value；

First generation module, the judging result for being included in the first judgment module are more than in the case of, based on currently being remembered The number of the incidence relation of record and be directed to the second default preset alarm template of alarm form, generate the second default alarm form Target alarms, wherein the first default alarm form is different from the second default alarm form；

First delivery module receives object for target alarms to be sent to pre-set first.

Device further includes：

Second judgment module, for the judging result of the first judgment module be more than in the case of, judgement currently remembered Whether storage time incidence relation object time before is recorded in the incidence relation of record, wherein the object time is current The difference of time and preset time threshold；

First generation module, be additionally operable to the judging result of the second judgment module be there is no in the case of, based on current The number of the incidence relation recorded and it is directed to the second default preset alarm template of alarm form, generates the second default alarm The target alarms of form；；After deleting incidence relation of the storage time before the object time, the incidence relation that is recorded In the case that number is still greater than alarm quantity threshold value, the default alarm of number and second based on the incidence relation currently recorded The preset alarm template of form generates the target alarms of the second default alarm form；

First removing module is additionally operable in the presence of the judging result of the second judgment module is, when deleting storage Between incidence relation before the object time.

Device further includes：

Third judgment module has been accused for judging to whether there is in the incidence relation of storage time in the target time period Alert number is more than the incidence relation of default alarm frequency threshold value, wherein target time section is to be based on object time and current time The identified period；

First generation module, be additionally operable to the judging result of third judgment module be there is no in the case of, based on current The number of the incidence relation recorded and it is directed to the second default preset alarm template of alarm form, generates the second default alarm The target alarms of form；Number has been alerted more than pre- deleting incidence relation or deletion of the storage time before the object time If after the incidence relation for alerting frequency threshold value, the number of the incidence relation currently recorded is also greater than alarm quantity threshold value In the case of, number based on the incidence relation currently recorded and it is directed to the second default preset alarm template of alarm form, it is raw At the target alarms of the second default alarm form；

Second removing module is additionally operable in the presence of the judging result of third judgment module is, deletion has alerted Number is more than the incidence relation of default alarm frequency threshold value.

Optionally, device further includes：

Increase module, for each incidence relation for current record, by the alarm recorded in the incidence relation time Number increases present count magnitude.

Optionally, device further includes：

Module is obtained, for obtaining target journaling, wherein target journaling is the error log of the preset style, target journaling It is identified including target service；

First determining module, for according to the corresponding pass between the service identification pre-established and preset alarm form System determines and alarm form of the target service mark with correspondence；Wherein it is determined that alarm form include first pre- If the form of alarm；

Second generation module, for based on target journaling and for the first pre- alarm preset alarm template of form, generating The alarm of first presets；

Second determining module, for determining that the second of alarm of the first generated default alarm form receives object；

Second delivery module, for the alarm of the generated first default alarm form to be sent to the second reception object.

Optionally, device further includes：

Third generation module is based in the case where identified alarm form also includes that third presets alarm form Target journaling and alarm form preset alarm template is preset for third, generates the alarm that third presets alarm form；

Third determining module, for determining that generated third presets the third reception object of the alarm of alarm form；

Third delivery module, the alarm for the third generated to be preset to alarm form are sent to third and receive object.

Optionally, module is obtained, is specifically used for：

Obtain the error log currently generated；

If not, using currently obtained error log as target journaling.

Optionally, module is obtained, is additionally operable to：

The case where the service identification that the daily record for judging currently to be generated includes is not preset non-alarm business mark Under, judge whether the corresponding request of currently obtained error log is illegal request, wherein a daily record and a request It is corresponding；

If not, executing using currently obtained error log as the step of target journaling.

Optionally, the first determining module is specifically used for：

The third aspect, in order to achieve the above object, the embodiment of the present invention additionally provide a kind of electronic equipment, including processing Device and memory, wherein

Memory, for storing computer program；

Processor when for executing the program stored on memory, realizes the alarm method of first aspect.

Fourth aspect, in order to achieve the above object, the embodiment of the present invention additionally provide a kind of computer-readable storage medium Matter is stored with computer program in computer readable storage medium, first aspect is realized when computer program is executed by processor Alarm method.

5th aspect, an embodiment of the present invention provides a kind of computer program products including instruction, when it is in computer When upper operation so that computer executes the alarm method of first aspect.

6th aspect, an embodiment of the present invention provides a kind of computer programs, when run on a computer so that Computer executes the alarm method of first aspect.

A kind of alarm method, device, electronic equipment and computer readable storage medium provided in an embodiment of the present invention, when When the alarm of first default alarm form reaches preset alarm quantity threshold value, illustrate to be likely to occur great business different Often, the alarm for sending the second default alarm form at this time, can enable the first reception object know that there may be great business Abnormal information, therefore, it is possible to great service exception alarm.Certainly, it implements any of the products of the present invention or method must not It is certain to need while reaching above all advantages.

Description of the drawings

In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, below will to embodiment or Attached drawing needed to be used in the description of the prior art is briefly described, it should be apparent that, the accompanying drawings in the following description is only Some embodiments of the present invention, for those of ordinary skill in the art, without creative efforts, also It can be obtain other attached drawings according to these attached drawings.

Fig. 1 is the first flow diagram of alarm method provided in an embodiment of the present invention；

Fig. 2 is second of flow diagram of alarm method provided in an embodiment of the present invention；

Fig. 3 is the third flow diagram of alarm method provided in an embodiment of the present invention；

Fig. 4 is the 4th kind of flow diagram of alarm method provided in an embodiment of the present invention；

Fig. 5 is the 5th kind of flow diagram of alarm method provided in an embodiment of the present invention；

Fig. 6 is the structural schematic diagram of alarm device provided in an embodiment of the present invention；

Fig. 7 is the structural schematic diagram of electronic equipment provided in an embodiment of the present invention.

Specific implementation mode

Following will be combined with the drawings in the embodiments of the present invention, and technical solution in the embodiment of the present invention carries out clear, complete Site preparation describes, it is clear that described embodiments are only a part of the embodiments of the present invention, instead of all the embodiments.It is based on Embodiment in the present invention, it is obtained by those of ordinary skill in the art without making creative efforts it is all its His embodiment, shall fall within the protection scope of the present invention.

In order to solve the problems in the existing technology, an embodiment of the present invention provides a kind of alarm method, device, electricity Sub- equipment and computer readable storage medium.

Fig. 1 is the first flow diagram of alarm method provided in an embodiment of the present invention；Method includes：

S101：Obtain destination request mark, wherein destination request is identified as the default alarm form of currently transmitted first Alarm corresponding request mark, an alarm asks mark corresponding with one.

In embodiments of the present invention, the alarm type of the first default alarm form can be email type, or short Believe type；It can also be message informing type, can also be warning by telephone, it is of course also possible to be other types.Alarm form It is to be codetermined by alarm type and alarm template, alarm type is different, but the identical two alarm forms of alarm template are not Same alarm form；Alarm type is identical, but the different two alarm forms of alarm template are different alarm form.Alarm Template is for the template set by the content to be sent, and the alarm template of each default alarm form is pre-set.

The alarm of one the first default alarm form is corresponding with an error log, and error log is to record wrong letter The daily record of the information of breath, also record has request to identify in error log.Request mark mentioned here is the corresponding request of alarm Mark, the mark of the corresponding request of alarm of the first currently transmitted default alarm form is referred to as destination request mark. Request mark may include at least one of word, number, letter, character and symbol.Request mark can generate to ask It is generated when asking.It is asked for one, generates a request mark, different requests, corresponding different request mark.

After the alarm for sending a first default alarm form, the corresponding request mark of the alarm is obtained, it is acquired Request mark is exactly destination request mark.The specific mode for obtaining destination request mark can be from the first default alarm form It alerts and is obtained in corresponding daily record, can also be obtained from the alarm of the first default alarm form, it can also be by other means It obtains.

S102：The incidence relation that recording needle identifies destination request, wherein include request in each incidence relation Mark.

One incidence relation with one request mark it is corresponding, you can be interpreted as different incidence relation in record ask Ask mark also different.

S103：Judge whether the number of the incidence relation currently recorded is more than preset alarm quantity threshold value, if greatly In, execute S104, if it is less than or be equal to, then terminate.

Incidence relation can be recorded in a queue, and the element stored in queue is exactly incidence relation, and each association is closed System contains a request mark.Specifically, this queue can be a bounded queue, so that the association recorded The quantity of relationship unconfined will not increase, and ensure the quantity of recorded incidence relation in controlled range.Currently recorded Incidence relation number can scan this queue length determine.The number of the incidence relation currently recorded be exactly when The number of preceding recorded request mark.

Alarm quantity threshold value can be rule of thumb arranged, when great service exception can also occur according to previous root Corresponding alarm total amount setting.

The number of the incidence relation currently recorded reflects the quantity of the alarm of the first default alarm form of transmission. If the number of the incidence relation recorded is more than preset alarm quantity threshold value, illustrate to send first whithin a period of time The alarm of default alarm form is relatively more, it is possible to great service exception occurs, be alerted at this time.

When judge recorded incidence relation number be less than or equal to preset alarm quantity threshold value, illustrate one Generated alarm is fewer in the section time, alerts the bright possibility very little for great service exception occur of saving your breath, then need not send out Send the alarm of the second default alarm form.

S104：Number based on the incidence relation currently recorded and it is directed to the second default preset alarm of alarm form Template generates the target alarms of the second default alarm form, wherein the first default alarm form and the second default alarm form It is different.

First default alarm form and the second default alarm form difference can refer to the first default alarm form and second The alarm type of default alarm form is different, may also mean that the corresponding alarm template of the first default alarm form with second in advance If the corresponding alarm template of alarm form is different, can also the first default alarm form and the second default alarm form alarm Type is different, but corresponding alarm template is identical；Can in the form of the first default alarm with the alarm of the second default alarm form Type is identical, but corresponding alarm template is different.

It is contained in the alarm of the second default alarm form for the second default preset alarm template of alarm form Hold, can also include other information specifically, containing the number of the incidence relation currently recorded.By set template In information replace with current record incidence relation number and other specifying informations, just generate target alarms.It is exemplary , set template is：It in XX minutes, has alerted XXX times, it may occur however that great service exception is please located in time Reason；The number of the incidence relation currently recorded is 120 times, also obtains this 120 times alarms and is generated within 5 minutes, The target alarms then generated are：In 5 minutes, it has alerted 120 times, it may occur however that great service exception, it please be timely Processing.

In embodiments of the present invention, the tool-class for realizing the alarm for the first default alarm form that sends, in the tool-class Defined in the corresponding alarm template of the first default alarm form, in reception object of alarm of the first default alarm form etc. Hold, illustratively, Mail (mail) the Appender classes realized and meet self-demand can be defined in Java code.Its In, Java is an Object-Oriented Programming Language, not only absorbs the various advantages of C Plus Plus, has also abandoned in C++ and be difficult to The concepts such as the more successions, the pointer that understand, therefore Java language has powerful and easy to use two features.Appender is negative Duty define daily record output destination, it can be console (Console Appender), file (File Appender), JMS (Java Message Service, Java Message Service) server (JMS log (daily record) Appender), with Email The form of (E-mail address) sends (SMTP (Simple Mail Transfer Protocol, simple mail transmission association View) Appender) etc..Appender is a class provided in log4j, and log4j is an open source code of Apache Project, by using log4j, the destination that we can control log information conveying is console, file, GUI (Graphical User Interface, graphic user interface) component etc..Apache is that the world uses the web to rank the first Server software may operate on nearly all widely used computer platform, since its is cross-platform and safety is wide General use is one of most popular web server end software.

S105：Target alarms are sent to pre-set first and receive object.

First reception object refers to the object that will receive target alarms.First reception object can be an object, also may be used To be multiple objects, the specific first number for receiving reception object included in object is pre-set.When second pre- If the corresponding alarm type of the form of alarm is email type, then the first reception object is mailbox, can be business illustratively The mailbox of operation maintenance personnel；When the corresponding alarm type of the second default alarm form is short message type or phone type, then first It is phone number to receive object, illustratively, can be predetermined the personnel's for needing to be handled abnormal business Phone number；When the corresponding alarm type of the second default alarm form is message informing type, then first to receive object be advance The account of determining reception staff, illustratively, the second default alarm form are specially the message informing applied, and first receives Object is predetermined the account of reception staff in this application.

Target alarms are being generated, and after the first reception object is determined, target alarms are sent to the first reception pair As so that the first corresponding reception staff of reception object can be known in time is likely to occur great service exception this announcement It is alert, the business on line can be checked according to this alarm, it is determined whether exception occur, if there is exception, to going out Now abnormal business is safeguarded so that business can restore normal operation as early as possible.

In embodiments of the present invention, it when the alarm of the first default alarm form reaches preset alarm quantity threshold value, says It is bright to be likely to occur great service exception, the alarm of the second default alarm form is sent at this time, can make the first reception pair As that can know there may be the information of great service exception, therefore, it is possible to great service exception alarm.

Fig. 2 is second of flow diagram of alarm method provided in an embodiment of the present invention, and method includes：

S201：Obtain destination request mark, wherein destination request is identified as the default alarm form of currently transmitted first Alarm corresponding request mark；One alarm is corresponding with a request mark.

S202：The incidence relation that recording needle identifies destination request, wherein include request in each incidence relation Mark.

S203：Judge whether the number of the incidence relation currently recorded is more than preset alarm quantity threshold value, if greatly In, execute S204, if it is less than or be equal to, terminate.

S204：Judge the pass that there are storage times before the object time whether is remembered in the incidence relation currently recorded Connection relationship, if it does not, S207 is executed, if it does, executing S205；Wherein, when the object time is current time and is default Between threshold value difference.

In embodiments of the present invention, each incidence relation also records the request identification record having in the incidence relation Storage time.

Storage time for request identification record can be time when sending request mark, can also be record The time of request mark, it can also be the timestamp corresponding time recorded in daily record.One request mark is deposited with one Store up time correspondence.

In embodiments of the present invention, the storage time of record can be compared with the object time, if there is storage Time is more than the incidence relation of object time, then S205 is executed, if it does not, if the incidence relation currently recorded is It is recorded within this period of object time to current time, illustrates that a large amount of announcement occurs in a short time in business on line It is alert, in fact it could happen that great service exception needs the alarm for sending the second default alarm form at this time.

Current time can be current system time, can also be currently obtained time, when currently obtained Between can be present clock time, can also other servers system time.Preset time threshold can be rule of thumb The time threshold of setting can also be and time threshold is arranged according to the moving law before business, it is, of course, also possible to pass through it He is arranged mode.Illustratively, current time is 1 day 9 January in 2017:05, advance time threshold is 5 minutes, then when target Between be 1 day 9 January in 2017:00.

When incidence relation stores in the queue, because of the property of queue itself, incidence relation is the priority according to record It is tactic, it can scan from back to front, when scanning to storage time is more than the incidence relation of object time, you can stop Scanning, because the incidence relation recorded before the incidence relation is the incidence relation that storage time is more than the object time, this When can since the incidence relation until queue head of the queue incidence relation, be determined as incidence relation to be deleted.

S205：Delete incidence relation of the storage time before the object time.

In the S204 the step of, during judging whether incidence relation of the storage time before the object time, Incidence relation of the storage time before the object time is determined, identified incidence relation can be deleted.When deleting storage Between incidence relation before the object time, influence that can be to avoid the incidence relation stored before for a long time to judging result, The accumulation of the number of the incidence relation of record is also avoided, and the wrong report occurred, because tired with the incidence relation recorded Product can cause one incidence relation of every record that will send the alarm of a second default alarm form if do not deleted, from And generate wrong report.

S206：Judge whether the number of the incidence relation currently recorded is more than preset alarm quantity threshold value, if greatly In, execute S207, if it is less than or be equal to, then terminate.

After having deleted incidence relation of the storage time before the object time, the pass for judging to be recorded at this time again is needed Whether the number of connection relationship is more than preset alarm quantity threshold value, if it is less than or be equal to, illustrate generated in a short time Alarm is few, and business occurs that great abnormal possibility is small, then will not carry out the alarm of the second default alarm form, but wait Pending S201.

S207：Number based on the incidence relation currently recorded and it is directed to the second default preset alarm of alarm form Template generates the target alarms of the second default alarm form, wherein the first default alarm form and the second default alarm form It is different.

S208：Target alarms are sent to pre-set first and receive object.

In embodiments of the present invention, when in a period of time, for the number for the incidence relation that the period is recorded It more than preset alarm quantity threshold value, represents and is possible to great service exception occurred, for this case, send the The alarm of two presets can in time alert great service exception, and the alarm ratio of the big service exception of counterweight It is relatively accurate.

Fig. 3 is the third flow diagram of alarm method provided in an embodiment of the present invention, and method includes：

S301：Obtain destination request mark, wherein destination request is identified as the default alarm form of currently transmitted first Alarm corresponding request mark；One alarm is corresponding with a request mark.

S302：The incidence relation that recording needle identifies destination request, wherein include request in each incidence relation Mark.

S303：Judge whether the number of the incidence relation currently recorded is more than preset alarm quantity threshold value, if greatly In, execute S304, if it is less than or be equal to, then terminate.

S304：Judge the pass that there are storage times before the object time whether is remembered in the incidence relation currently recorded Connection relationship, if it does not, S306 is executed, if it does, executing S305；Wherein, when the object time is current time and is default Between threshold value difference.

S305：Delete incidence relation of the storage time before the object time.

It should be noted that S301-S305 is identical as S201-S205 respectively, herein without repeating.

S306：Judge to whether there is in the incidence relation of storage time in the target time period and has alerted number more than pre- If alerting the incidence relation of frequency threshold value, if it does, executing S307；If it does, in the case where being not carried out S305, hold Row S309 executes S308 in the case where performing S305；Wherein, target time section is to be based on object time and current time The identified period.

In embodiments of the present invention, each incidence relation also records the request identification record having in the incidence relation Alarm number.Each incidence relation is that storage asks mark, storage time and alerted the association pass between number three System.Illustratively, incidence relation has recorded the storage time of request mark A, request mark A, for request mark A records Number is alerted.

Since the number of alarm for request identification record be to be based on being calculated recording request mark to currently, hair The number of the alarm of the second default alarm form is sent to determine.When a request corresponding incidence relation of mark will be recorded, this When for the request identification record the number of alarm be initial value, illustratively, can be 0, or 1.

Target time section refers to the period terminated to current time since the object time, when mentioned here current Between current time used when referring to the determining object time.Illustratively, current time is 1 day 9 January in 2017:05, mesh The mark time is 1 day 9 January in 2017:00, then target time section is 1 day 9 January in 2017:1 day 9 January of 00-2017:05.

Judge to whether there is in the incidence relation of storage time in the target time period and has alerted number more than default alarm The incidence relation of frequency threshold value exactly judges in incidence relation of the storage time in predetermined target time section, if It is more than the default incidence relation for alerting frequency threshold value in the presence of number has been alerted.Illustratively, it can be determined that on January 1st, 2017 9:1 day 9 January of 00-2017:The incidence relation recorded in 05 this period, if exist and alerted number more than 5 times Incidence relation.If it is present execute S307, if it does not, and be not carried out S305 before, illustrate recorded pass The number of connection relationship does not change, still above preset alarm quantity threshold value, time of the alarm occurred in the target time period Number alreadys exceed preset alarm quantity threshold value, needs the alarm for sending the second default alarm form；If it does not, and S305 is performed before, then the number of the incidence relation recorded is changed, and needs to execute S308.

S307：It deletes and has alerted the incidence relation that number is more than default alarm frequency threshold value.

During judgement, it has been determined that alerted the incidence relation that number is more than default alarm frequency threshold value, deleted Except these identified incidence relations.The number of the incidence relation recorded can be reduced in this way, and then is possible to reduce and be directed to One great service exception sends the alarm number of the second default alarm form, can save resource, can also be by reducing weight The alarm number that the same great service exception sends the second default alarm form is sent in recurrence, improves user experience.

S308：Judge whether the number of the incidence relation currently recorded is more than preset alarm quantity threshold value, if greatly In execution S309.

During above-mentioned, the number of recorded incidence relation is caused to change if deleting incidence relation, S308 is executed needed for then, specifically, deleting incidence relation of the storage time before the object time, and there is no accused In the case that alert number is more than the incidence relation of preset alarm frequency threshold value, S308 is executed；There is no storage times in mesh The incidence relation before the time is marked, and deletes and has alerted the case where number is more than the incidence relation of default alarm frequency threshold value Under, execute S308；Incidence relation of the storage time before the object time is being deleted, and is being deleted and has been alerted number and be more than In the case of the incidence relation of default alarm frequency threshold value, S308 is executed.

S309：Number based on the incidence relation currently recorded and it is directed to the second default preset alarm of alarm form Template generates the target alarms of the second default alarm form.

S310：Target alarms are sent to pre-set first and receive object.

In embodiments of the present invention, after target alarms to be sent to pre-set first reception object, for next time It when executing S306, can obtain correct as a result, it is desirable to be directed to each incidence relation of current record, it will be in the incidence relation The number of alarm of record increases present count magnitude.Particularly, after sending the alarm of a second default alarm form, needle To each incidence relation of current record, the number of alarm recorded in the incidence relation is increased into present count magnitude.Present count Magnitude is positive number, for example, can be 1, or 2, can also be other numerical value.Illustratively, current for request mark It is 2 times to know the numbers of alarm that are recorded of A, in the alarm for having sent one the one the second default alarm form, is then directed to and asks The number of alarm that mark A is recorded increases by 1 time on the basis of 2 times, i.e., the alarm number recorded to request mark A It is 3 times.

In embodiments of the present invention, when the number of the incidence relation recorded in target time section is more than preset alarm Amount threshold represents and is possible to great service exception occurred, for this case, sends the announcement of the second presets It is alert, great service exception can be alerted in time.

Fig. 4 is the 4th kind of flow diagram of alarm method provided in an embodiment of the present invention, and method includes：

S401：Obtain target journaling, wherein target journaling is the error log of the preset style, and target journaling includes target Service identification.

In web services, when to a request processing completion or because asking processing procedure appearance is abnormal can not handle request When, it can generate daily record.In embodiments of the present invention, daily record can be obtained from itself, can also be obtained from other servers Daily record.

Daily record can be divided into access log and error log, and error log is the daily record that web services are accessed with error, i.e., It can be understood as having recorded the daily record of service exception.In the embodiment of the present invention, target journaling is error log, i.e., to wrong day The mistake occurred in will is alerted, and therefore, it is necessary to be screened to the daily record currently generated, is filtered out access log, is kept away The generation for the case where exempting to generate alarm for access log, and then avoiding wrong report caused by due to generating alarm access log.

The preset style mentioned here is the pattern of the information recorded in daily record, it is therefore an objective to which daily record is standardized.Example Property, the pattern of daily record can be as follows：

Timestamp is timestamp, and Request (request)-id (identity) is above-mentioned described request mark, Account (account) id is the account for sending the user that request identifies corresponding request, and Region refers to region, refers to processing Region where the corresponding server of the request.ServerIp refer to server ip (Internet Protocol, network it Between the agreement that interconnects) address, Parameters refers to parameter, and this refers to the parameter list of request, ErrMsg refers to wrong heap Stack information, above-mentioned xxx and xxxx, which refer to the content in these places, to be become according to actual conditions.

Service identification can refer to specific Business Name recorded in daily record, and illustrative Business Name can be RunInstances (running example).

In embodiments of the present invention, journal format can be json (JavaScript Object Notation, JavaScript object markup language) format, or XML (Extensible Markup Language, expansible mark Remember language) format.

In embodiments of the present invention, the filtering rule of error log has been pre-defined, specifically, can be in configuration file Defined in filtering rule, finally in code realize error log filtering, reduce the generation of the number of wrong report.Filtering rule Non- alarm business can be filtered out and identify corresponding error log, specific filter type can be：

Obtain the error log currently generated；

If not, using currently obtained error log as target journaling.

There are many business, the exception of some business that can generate prodigious shadow to the normal operation of web services in web services It rings, the exception of some business hardly has an impact the normal operation of web services, can run these to web services The corresponding service identification of the very small business of influence, as non-alarm business identify.Judge the error log currently generated Entrained service identification is the service identification in non-alarm business mark, if not, illustrating that the error log is corresponding When service exception, bigger influence can be generated to web services normal operation, then using the error log as target journaling, such as Fruit is no, when illustrating the corresponding service exception of the error log, web services normal operation is had an impact it is smaller, in order to save Resource also reduces the number of the alarm for the first default alarm form that sends and the alarm of the second default alarm form, can not Using the error log as target journaling.

Web services not only have the access of normal users, the also access of disabled user, disabled user may be in the short time The number for accessing web services is very more, produces a large amount of illegal request, can increase the access pressure of web services in this way, When web services have service exception, it is also possible to will produce alarm and the second default alarm shape of a large amount of first default alarm form The alarm of formula, not only causes pressure to web services, also will produce a large amount of wrong report, the operation maintenance personnel of web services can be given true The fixed workload that great service exception whether occurs.

For these reasons, it can also be arranged in filtering rule and filter out the corresponding error log of illegal request, specifically Filtering rule can be：It is not preset non-alarm business mark in the service identification that the daily record for judging currently to be generated includes In the case of knowledge, judge whether the corresponding request of currently obtained error log is illegal request, wherein daily record with One request corresponds to；

Judge whether request is illegal request, can be judged by the accountid recorded in daily record, judging should Whether accountid is accountid in user's white list, if so, illustrate that the request is legitimate request, if it is not, Then the request is illegal request, and certainly, specific judgment mode is not limited in above-mentioned judgment mode.Judging the request For legitimate request when, using the error log as target journaling, in the case where judging the request for illegal request, in order to subtract The pressure of few web services also for the number for reducing wrong report, and then is reduced because wrong report gives operation maintenance personnel increased workload, no Using the error log as target journaling.

S402：According to the correspondence between the service identification and preset alarm form pre-established, determining and target Service identification has the alarm form of correspondence；Wherein it is determined that alarm form include the first default alarm form.

In embodiments of the present invention, identical alarm form can be set for different business, difference can also be set Alarm form.Provided with the corresponding alarm form of business, that is, establish the corresponding pass between service identification and alarm form System determines specifically, the correspondence between each business and alarm form can be established from the correspondence established Include the correspondence of target service mark, the alarm form in identified correspondence is exactly target service mark pair The alarm form answered.

It should be noted that it is directed to each service identification, it is default comprising first in the corresponding alarm form of the service identification Alarm form can also include other alarm forms certainly.

In an embodiment of the invention, according between the service identification and preset alarm form pre-established Correspondence, determine with target service mark with correspondence alarm form, including：

In embodiments of the present invention, business is classified, and then is determined which is relatively important business, which It is relatively unessential business, for example, can be according to the significance level of business, by the different grade of delineation of activities.Business Significance level can exception occur according to business to determine the influence degree of online service, can also be according to business What visit capacity determined, the visit capacity of business is more, it is believed that the business is more important.

Each grade of service includes at least one service identification, after obtaining service identification, according to what is pre-established Incidence relation between service identification and the grade of service determines the corresponding target service grade of identified service identification, true After the grade of service that sets the goal, according to the correspondence between the grade of service pre-established and alarm form, determining and target The grade of service has the alarm form of correspondence.

In embodiments of the present invention, important business corresponding grade grade more corresponding than unessential business is high, for not Different alarm forms is arranged in the same grade of service, for example, being the second default announcement for the alarm form that important business is arranged Alert form and third preset alarm form, and the alarm form for common business setting is the second default alarm form.

Alarm form is determined according to the grade of service in this way, the significance level of business can be embodied, is targetedly directed to not With the grade of service, different alarm forms is set, so as to so that operation maintenance personnel knows that the important service on line is abnormal, with Just operation maintenance personnel in time safeguards the important service being abnormal, and reduces the user experience generated by the service exception The generation of the situation of difference.

S403：Based on target journaling and for the first pre- alarm preset alarm template of form, the first default alarm is generated The alarm of form.

Be for the alarm template set by the first default alarm form it is pre-defined, can be with the pattern phase of daily record Seemingly, specifically, can be defined to alarm template inside the Util classes of alarm.Util is the abbreviation of utiliy, is meant It is multiduty, it mainly houses random number in this packet of the packet of tool property and generates class, property file reads class, timer class Etc. classes.

It is obtained from target journaling for required information in the alarm template set by the first default alarm form, it will Acquired information is added to the corresponding position of the alarm template, just generates the alarm of the first default alarm form.It is exemplary , the alarm of the first default alarm form generated is as follows：

Service line title：openapi

Business：refunds

Menace level：Seriously, it needs to follow up at once

Time：2017-11-09 10:42:29

Server ip：10.69.42.35:8100

RequestId：req-2d0eb7d3-3a26-4405-ab4c-b476a143085e

AccountId：73400984

Region：cn-beijing-6

Exception information：2017-11-09 10:42:29,517ERROR [RunInstanceEndEventTypeCommand:82][http-bio-8100-exec-349] {catRootMessageId =ecs-api-ac1f2013-419498-15766, spanId=req-2d0eb7d3-3a26-4405-ab4c- B476a143085e001, traceId=req-2d0eb7d3-3a26-4405-ab4c-b476a143085e }:{" sla.source":" openapi","RequestId":"req-2d0eb7d3-3a26-4405-ab4c- b476a143085e","Action":"re funds","Describe":"","AccountId":"73400984"," Region":"cn-beijing-6","Parameters ":"","ServerIp":"10.69.42.35:8100"," Time":"2017-11-09 10:42:29","ErrMsg":" be switched on successfully, withhold unsuccessfully, please handle as early as possible " }.

Menace level in the alarm of first default alarm form of above-mentioned generation is related to the grade of service, the grade of service Height, menace level is also high, and the grade of service is low, and menace level is also low.Time is that timestamp in target journaling is converted into the time and obtains It arrives, exception information contains the error stack information in target journaling.

S404：Determine that the second of the alarm of the first generated default alarm form receives object.

Second reception object can be the reception object of the preset first default alarm form, can also be according in advance Incidence relation between the service identification and reception object of foundation, will be with reception pair of the target service mark with incidence relation As receiving object as second.Mentioned here second receives object can be identical as the first reception object, can also be different. Illustratively, the first reception object can be the phone number of the phone number and O＆M supervisor B of operation maintenance personnel A, and second connects Receive the phone number that object can be operation maintenance personnel A.

S405：The alarm of generated first default alarm form is sent to the second reception object.

It should be noted that S405 is similar to the principle of above-mentioned S310, herein without repeating.

In the prior art, there is also the mail warning technology based on Zabbix, which is mainly based upon a series of Trigger is alerted, and the following aspects is generally comprised in the trigger (trigger) that alarm is related to：

(1) basic status of server：Disk size, memory size, cpu (Central Processing Unit, in Central processor) load；

(2) infrastructure service state：Web (world wide web, global wide area network) server (nginx, apache) State, the state (MySQL, Oracle, nosql etc.) of database；

(3) application server state：The availability and load condition of application server.

Zabbix described above is the monitoring of offer distributed system and network monitoring work(based on web interface The solution of increasing income of the enterprise-level of energy.Above-mentioned described nginx is a high performance HTTP (HyperText Transfer Protocol, hypertext transfer protocol)) and Reverse Proxy and an IMAP (Internet Mail Access Protocol, Internet Mail Access Protocol)/POP3 (Post Office Protocol-Version 3, Post Office Protocol,Version 3)/smtp server.Above-mentioned described MySQL is Relational DBMS, and Oracle is first A relational database management system of Gu Wen companies；Nosql is the database of non-relational.

The major defect of the above-mentioned mail warning technology based on Zabbix be can only monitoring server performance indicator and answer With the internal servers index such as program web container, monitoring alarm can not be accomplished for the internal interface of web services.And it is of the invention Embodiment is monitored by the internal interface (i.e. business) to web services, when business processing asks to occur abnormal, in time Send the alarm of the first default alarm form.

S406：Obtain destination request mark, wherein destination request is identified as the default alarm form of currently transmitted first Alarm corresponding request mark；One alarm is corresponding with a request mark.

S407：The incidence relation that recording needle identifies destination request, wherein include request in each incidence relation Mark.

S408：Judge whether the number of the incidence relation currently recorded is more than preset alarm quantity threshold value, if greatly In, S409 is executed, otherwise, end.

S409：Number based on the incidence relation currently recorded and it is directed to the second default preset alarm of alarm form Template generates the target alarms of the second default alarm form, wherein the first default alarm form and the second default alarm form It is different.

S410：Target alarms are sent to pre-set first and receive object.

S406-S410 is identical as above-mentioned S101-S105 respectively, herein without repeating.

In embodiments of the present invention, when business alerts, the alarm can be directed to and send the first default alarm form Alarm, when accumulate recorded incidence relation number be more than preset alarm quantity threshold value, represent be possible to occurred Great service exception sends the alarm of the second presets, can be carried out to great service exception for this case Alarm.

Fig. 5 is the 5th kind of flow diagram of alarm method provided in an embodiment of the present invention, and method includes：

S501：Obtain target journaling, wherein target journaling is the error log of the preset style, and target journaling includes target Service identification.

S502：According to the correspondence between the service identification and preset alarm form pre-established, determining and target Service identification has the alarm form of correspondence；Wherein it is determined that alarm form include the first default alarm form.

S503：Based on target journaling and for the first pre- alarm preset alarm template of form, the first default alarm is generated The alarm of form.

S504：Determine that the second of the alarm of the first generated default alarm form receives object.

S505：The alarm of generated first default alarm form is sent to the second reception object.

S506：In the case where identified alarm form also includes that third presets alarm form, it is based on target journaling The preset alarm template of alarm form is preset with for third, generates the alarm that third presets alarm form.

Can be root for the type number of form is alerted included in alarm form determined by a service identification It is determined according to the grade of service.Illustratively, the corresponding grade of service of service identification is important service, then is directed to the service identification Identified alarm form can be that the first default alarm form and third preset corresponding business of alarm form service identification etc. Grade is general service, then it can be the first default alarm form to be directed to alarm form determined by the service identification, wherein the One default alarm form can be that mail alerts, and it can be short message alarm that third, which presets alarm form,.

It generates the mode of the alarm of the default alarm form of third and generates the alarm mode phase of the second default alarm form Seemingly, too late herein to be repeated.

It should be noted that the first default alarm form and the corresponding alarm type of the default alarm form of third are different, one As for, third preset alarm form compared to the first default alarm form, it is easier to the personnel of being received are had found.It is exemplary , the alarm type of the first default alarm form is mail alarm, and the alarm type that third presets alarm form is that short message is accused Alert, under normal circumstances, short message is easier to be received personnel and notice than mail.

S507：Determine that generated third presets the third reception object of the alarm of alarm form.

The method of determination that third receives object can be identical as the second reception method of determination of object, herein without superfluous It states.Third mentioned here receives object can be identical as the first reception object, can also be different from the first reception object, tool Body is the determination according to advance setting.If pre-setting the reception object that third presets the alarm of alarm form Be exactly the first default alarm form reception object it is identical, then third receive object be exactly the first reception object, if set in advance The reception object difference identical as the first default reception object of alarm form for the alarm that third presets alarm form is set, then It is different from the second reception object that third receives object.

S508：The alarm that the third generated is preset to alarm form is sent to third reception object.

In embodiments of the present invention, related with service identification for the alarm form of business, it is further with business etc. Grade is related, and the alarm of alarm form, the default alarm shape of the high use first of the grade of service are preset in the low use of the grade of service first Formula alerts and third presets alarm form alarm, is directed to the alarm that important business carries out two kinds of forms in this way so that O＆M people Member can pay attention to this alarm, and then be safeguarded in time to the business, avoid influence of the business failure to web services.

S509：Obtain destination request mark, wherein destination request is identified as the default alarm form of currently transmitted first Alarm corresponding request mark；One alarm is corresponding with a request mark.

S510：The incidence relation that recording needle identifies destination request, wherein include request in each incidence relation Mark.

S511：Judge whether the number of the incidence relation currently recorded is more than preset alarm quantity threshold value, if greatly In, S512 is executed, otherwise, end.

S512：Based on the number of the second default alarm form corresponding alarm template and the incidence relation currently recorded, Generate the target alarms of the second default alarm form, wherein the first default alarm form is different from the second default alarm form.

S513：Target alarms are sent to pre-set first and receive object.

In embodiments of the present invention, alarm form is determined according to service identification, for the exception of some business, both carried out The alarm of first default alarm form, and carry out the alarm that third presets alarm form so that reception staff can be much sooner The information of service exception is known on ground, and then handles in time abnormal, when the number for accumulating recorded incidence relation is more than Preset alarm quantity threshold value represents and is possible to great service exception occurred, and for this case, it is pre- to send second If the alarm of form, great service exception can be alerted.

Fig. 6 is the structural schematic diagram of alarm device provided in an embodiment of the present invention, which includes：

Acquisition module 601, for obtaining destination request mark, wherein it is pre- that destination request is identified as currently transmitted first If the corresponding request mark of the alarm of the form of alarm；One alarm is corresponding with a request mark；

Logging modle 602, the incidence relation that destination request is identified for recording needle, wherein in each incidence relation It include request mark；

Whether the number of the first judgment module 603, the incidence relation for judging currently to be recorded is more than preset alarm Amount threshold；

First generation module 604, the judging result for being included in the first judgment module 601 are more than in the case of, based on working as The number of preceding recorded incidence relation and it is directed to the second default preset alarm template of alarm form, generates second and default accuse The target alarms of alert form, wherein the first default alarm form is different from the second default alarm form；

First delivery module 605 receives object for target alarms to be sent to pre-set first.

In embodiments of the present invention, the number of the incidence relation currently recorded is more than preset alarm quantity threshold value, generation Table is possible to great service exception occurred, for this case, sends the alarm of the second presets, can be with counterweight Big service exception is perceived.

In an embodiment of the invention, each incidence relation also records the request having in the incidence relation The storage time of identification record；

Returning apparatus can also include：

First generation module 604, be additionally operable to the judging result of the second judgment module be there is no in the case of, be based on The number of the incidence relation currently recorded and it is directed to the second default preset alarm template of alarm form, it is default to generate second The target alarms of alarm form；；After deleting incidence relation of the storage time before the object time, the association recorded is closed In the case that the number of system is still greater than alarm quantity threshold value, number and second based on the incidence relation currently recorded are default The preset alarm template of alarm form generates the target alarms of the second default alarm form；

In an embodiment of the invention, each incidence relation also records the request having in the incidence relation The alarm number of identification record；

The device can also include：

First generation module 604, be additionally operable to the judging result of third judgment module be there is no in the case of, be based on The number of the incidence relation currently recorded and it is directed to the second default preset alarm template of alarm form, it is default to generate second The target alarms of alarm form；It is deleting incidence relation of the storage time before the object time or is deleting that have alerted number big After the incidence relation of default alarm frequency threshold value, the number of the incidence relation currently recorded is also greater than alarm quantity threshold In the case of value, number based on the incidence relation currently recorded and it is directed to the second default preset alarm mould of alarm form Plate generates the target alarms of the second default alarm form；

In an embodiment of the invention, which can also include：

In an embodiment of the invention, module is obtained, is specifically used for：

Obtain the error log currently generated；

If not, using currently obtained error log as target journaling.

In an embodiment of the invention, module is obtained, is additionally operable to：

In an embodiment of the invention, the first determining module is specifically used for：

The embodiment of the present invention additionally provides a kind of electronic equipment, as shown in fig. 7, comprises processor 701 and memory 702,

Memory 702, for storing computer program；

Processor 701 when for executing the program stored on memory 702, realizes following steps：

Obtain destination request mark, wherein destination request is identified as the alarm of the default alarm form of currently transmitted first Corresponding request mark；One alarm is corresponding with a request mark；

If it does, number based on the incidence relation currently recorded and preset for the second default alarm form Alarm template generates the target alarms of the second default alarm form, wherein the first default alarm form and the second default alarm Form is different；

Target alarms are sent to pre-set first and receive object.

Memory may include random access memory (Random Access Memory, RAM), can also include non- Volatile memory (Non-Volatile Memory, NVM), for example, at least a magnetic disk storage.Optionally, memory is also It can be at least one storage device for being located remotely from aforementioned processor.

Above-mentioned processor can be general processor, including central processing unit (Central Processing Unit, CPU), network processing unit (Network Processor, NP) etc.；It can also be digital signal processor (Digital Signal Processing, DSP), application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), field programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic Device, discrete gate or transistor logic, discrete hardware components.

In another embodiment of the present invention, a kind of computer readable storage medium, computer-readable storage are additionally provided Dielectric memory contains computer program, and alarm side any in above-described embodiment is realized when computer program is executed by processor Method.

In another embodiment of the present invention, a kind of computer program product including instruction is additionally provided, when it is being counted When being run on calculation machine so that computer executes alarm method any in above-described embodiment.

In another embodiment of the present invention, a kind of computer program is additionally provided, when run on a computer, So that computer executes alarm method any in above-described embodiment.

It should be noted that herein, relational terms such as first and second and the like are used merely to a reality Body or operation are distinguished with another entity or operation, without necessarily requiring or implying between these entities or operation There are any actual relationship or orders.Moreover, the terms "include", "comprise" or its any other variant are intended to Cover non-exclusive inclusion, so that the process, method, article or equipment including a series of elements includes not only that A little elements, but also include other elements that are not explicitly listed, or further include for this process, method, article or The intrinsic element of equipment.In the absence of more restrictions, the element limited by sentence "including a ...", not There is also other identical elements in the process, method, article or apparatus that includes the element for exclusion.

Each embodiment in this specification is all made of relevant mode and describes, identical similar between each embodiment Just to refer each other for part, and each embodiment focuses on the differences from other embodiments.Especially for dress Set/electronic equipment/computer readable storage medium/computer program product/computer program embodiments for, due to its base Originally it is similar to embodiment of the method, so description is fairly simple, the relevent part can refer to the partial explaination of embodiments of method.

The foregoing is merely illustrative of the preferred embodiments of the present invention, is not intended to limit the scope of the present invention.It is all Any modification, equivalent replacement, improvement and so within the spirit and principles in the present invention are all contained in the protection model of the present invention In enclosing.

Claims

1. a kind of alarm method, which is characterized in that the method includes：

Obtain destination request mark, wherein the destination request is identified as the alarm of the default alarm form of currently transmitted first Corresponding request mark, an alarm are corresponding with a request mark；

The incidence relation that recording needle identifies the destination request, wherein include request mark in each incidence relation；

If the number of the incidence relation currently recorded is more than preset alarm quantity threshold value, based on the association currently recorded The number of relationship and it is directed to the second default preset alarm template of alarm form, generates the target of the second default alarm form Alarm, wherein the first default alarm form is different from the described second default alarm form；

The target alarms are sent to pre-set first and receive object.

2. according to the method described in claim 1, it is characterized in that, each incidence relation also records has in the incidence relation Request identification record storage time；

In the case where judging that the number of current all incidence relations is more than preset alarm quantity threshold value, the method is also Including：

Judge whether record incidence relation of the storage time before the object time in the incidence relation currently recorded, In, the object time is the difference of current time and preset time threshold；

If there is no incidence relation of the storage time before the object time, execute based on the incidence relation currently recorded Number and it is directed to the second default preset alarm template of alarm form, generates the target alarms of the second default alarm form Step；

If there is incidence relation of the storage time before the object time, storage time is deleted before the object time Incidence relation；After deleting incidence relation of the storage time before the object time, the number of the incidence relation recorded In the case of the alarm quantity threshold value, executes the number based on the incidence relation currently recorded and be directed to second in advance If the step of alerting the preset alarm template of form, generating the target alarms of the second default alarm form.

3. according to the method described in claim 2, it is characterized in that, each incidence relation also records has for the association The alarm number of request identification record in relationship；

Judge to whether there is in the incidence relation of storage time in the target time period and has alerted number more than default alarm number The incidence relation of threshold value, wherein when the target time section is based on determined by the object time and the current time Between section；

It is more than the default incidence relation for alerting frequency threshold value if there is no number has been alerted, executes based on the pass currently recorded The number of connection relationship and it is directed to the second default preset alarm template of alarm form, generates the mesh of the second default alarm form The step of mark alarm；

It is more than the default incidence relation for alerting frequency threshold value if there is number has been alerted, deletion has alerted number and has been more than default accuse The incidence relation of alert frequency threshold value；After deletion has alerted incidence relation of the number more than default alarm frequency threshold value, recorded Incidence relation number still greater than the alarm quantity threshold value in the case of, execute based on the incidence relation currently recorded Number and it is directed to the second default preset alarm template of alarm form, generates the target alarms of the second default alarm form Step.

4. according to the method described in claim 3, it is characterized in that, the target alarms are sent to identified connect described After receiving object, the method further includes：

5. according to claim 1-4 any one of them methods, which is characterized in that obtain currently transmitted first default described Before the step of corresponding destination request of alarm of form identifies, the method further includes：

Obtain target journaling, wherein the target journaling is the error log of the preset style, and the target journaling includes target industry Business mark；

According to the correspondence between the service identification and preset alarm form pre-established, determine and the target service mark Know the alarm form with correspondence；Wherein it is determined that alarm form include the described first default alarm form；

Based on the target journaling and for the described first pre- alarm preset alarm template of form, the first presets are generated Alarm；

The alarm of generated first default alarm form is sent to described second and receives object.

6. according to the method described in claim 5, it is characterized in that, also including the default announcement of third in identified alarm form In the case of alert form, the method further includes：

The preset alarm template of alarm form is preset based on the target journaling and for the third, generates the default alarm of third The alarm of form；

The alarm that the third generated is preset to alarm form is sent to the third reception object.

7. according to the method described in claim 5, it is characterized in that, the step of the acquisition target journaling, including：

Obtain the error log currently generated；

8. the method according to the description of claim 7 is characterized in that the business mark for including in the daily record for judging currently to be generated Know in the case of not being preset non-alarm business mark, the step of the acquisition target journaling, further includes：

Judge whether the corresponding request of currently obtained error log is illegal request, wherein a daily record and a request It is corresponding；

9. according to the method described in claim 5, it is characterized in that, service identification and preset announcement that the basis pre-establishes Correspondence between alert form determines the alarm form for having correspondence with target service mark, including：

According to the incidence relation between the service identification and the grade of service pre-established, target service grade is determined, wherein described Target service grade is the grade of service for having incidence relation with the target identification；

According to the correspondence between the grade of service pre-established and alarm form, determine with the target service with corresponding The alarm form of relationship.

10. a kind of alarm device, which is characterized in that described device includes：

Acquisition module, for obtaining destination request mark, wherein the destination request is identified as the default announcement of currently transmitted first The corresponding request mark of alarm of alert form；One alarm is corresponding with a request mark；

Logging modle, the incidence relation that the destination request is identified for recording needle, wherein include in each incidence relation There is request to identify；

Whether the number of the first judgment module, the incidence relation for judging currently to be recorded is more than preset alarm quantity threshold Value；

First generation module, the judging result for being included in first judgment module are more than in the case of, based on currently being remembered The number of the incidence relation of record and it is directed to the second default preset alarm template of alarm form, generates the described second default alarm shape The target alarms of formula, wherein the first default alarm form is different from the described second default alarm form；

First delivery module receives object for the target alarms to be sent to pre-set first.

11. device according to claim 10, which is characterized in that each incidence relation, which also records, to be had for the incidence relation In request identification record storage time；

Described device further includes：

Second judgment module, for the judging result of first judgment module be more than in the case of, judgement currently remembered Whether storage time incidence relation object time before is recorded in the incidence relation of record, wherein the object time is The difference of current time and preset time threshold；

First generation module, be additionally operable to the judging result of second judgment module be there is no in the case of, be based on The number of the incidence relation currently recorded and it is directed to the second default preset alarm template of alarm form, it is pre- to generate described second If the target alarms of the form of alarm；After deleting incidence relation of the storage time before the object time, the pass that is recorded In the case that the number of connection relationship is still greater than the alarm quantity threshold value, the number based on the incidence relation currently recorded and The two default preset alarm template of alarm form generate the target alarms of the second default alarm form；

First removing module is additionally operable in the presence of the judging result of second judgment module is, when deleting storage Between incidence relation before the object time.

12. according to the devices described in claim 11, which is characterized in that each incidence relation, which also records, to be had for the incidence relation In request identification record alarm number；

Described device further includes：

Third judgment module has alerted number for judging to whether there is in the incidence relation of storage time in the target time period More than the incidence relation of default alarm frequency threshold value, wherein the target time section is based on the object time and described to work as Period determined by the preceding time；

First generation module, be additionally operable to the judging result of the third judgment module be there is no in the case of, be based on The number of the incidence relation currently recorded and it is directed to the second default preset alarm template of alarm form, it is pre- to generate described second If the target alarms of the form of alarm；It has been alerted time deleting incidence relation of the storage time before the object time or delete Number is more than after the incidence relation of default alarm frequency threshold value, and the number of the incidence relation currently recorded is also greater than the alarm In the case of amount threshold, number based on the incidence relation currently recorded and it is directed to the second default preset announcement of alarm form Alert template, generates the target alarms of the second default alarm form；

Second removing module is additionally operable in the presence of the judging result of the third judgment module is, deletion has alerted Number is more than the incidence relation of default alarm frequency threshold value.

13. device according to claim 12, which is characterized in that described device further includes：

Increase module, for each incidence relation for current record, the number of alarm recorded in the incidence relation is increased Add present count magnitude.

14. according to claim 10-13 any one of them devices, which is characterized in that described device further includes：

Module is obtained, for obtaining target journaling, wherein the target journaling is the error log of the preset style, the target Daily record includes target service mark；

First determining module, for the correspondence between the basis service identification pre-established and preset alarm form, really The fixed alarm form with target service mark with correspondence；Wherein it is determined that alarm form include described first Default alarm form；

Second generation module, for alerting the preset alarm template of form in advance based on the target journaling and for described first, Generate the alarm of the first presets；

Second delivery module receives object for the alarm of the generated first default alarm form to be sent to described second.

15. device according to claim 14, which is characterized in that described device further includes：

Third generation module, in the case where identified alarm form also includes that third presets alarm form, based on described Target journaling and alarm form preset alarm template is preset for the third, generates the alarm that third presets alarm form；

Third delivery module, the alarm for the third generated to be preset to alarm form are sent to the third and receive object.

16. device according to claim 15, which is characterized in that the acquisition module is specifically used for：

Obtain the error log currently generated；

If not, using currently obtained error log as target journaling.

17. device according to claim 16, which is characterized in that the acquisition module is additionally operable to：

In the case where the service identification that the daily record for judging currently to be generated includes is not preset non-alarm business mark, sentence Whether disconnected currently obtained error log is corresponding asks to be illegal request, wherein a daily record is corresponding with a request；

18. device according to claim 14, which is characterized in that first determining module is specifically used for：

19. a kind of electronic equipment, which is characterized in that including processor and memory, wherein

Memory, for storing computer program；

Processor when for executing the program stored on memory, realizes any method and steps of claim 1-9.

20. a kind of computer readable storage medium, which is characterized in that be stored with computer in the computer readable storage medium Program realizes claim 1-9 any method and steps when the computer program is executed by processor.