CN109542722A - Anomaly analysis processing method, device and storage medium - Google Patents
Anomaly analysis processing method, device and storage medium Download PDFInfo
- Publication number
- CN109542722A CN109542722A CN201811326287.1A CN201811326287A CN109542722A CN 109542722 A CN109542722 A CN 109542722A CN 201811326287 A CN201811326287 A CN 201811326287A CN 109542722 A CN109542722 A CN 109542722A
- Authority
- CN
- China
- Prior art keywords
- processing scheme
- text
- key feature
- indication information
- processing
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3051—Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/34—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
- G06F11/3466—Performance evaluation by tracing or monitoring
- G06F11/3476—Data logging
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q10/00—Administration; Management
- G06Q10/20—Administration of product repair or maintenance
Abstract
The present invention provides a kind of anomaly analysis processing method, device and storage medium, by obtaining the real-time monitor control index of system, judge whether monitor control index meets pre-set level collection condition, the corresponding indication information of collection monitoring index if meeting, comprehensive analysis is carried out to indication information, after determining the processing scheme for solving system exception, the processing scheme is executed.The above method realizes intelligent anomaly analysis processing, and the degree that the system that reduces manually participates in is greatly saved the time that system solves abnormal problem, reduces the operations risks of system.
Description
Technical field
The present invention relates to O&M technical field more particularly to a kind of anomaly analysis processing methods, device and storage medium.
Background technique
Along with the scale of IT, diversification, the fault identification of IT system and in time processing become most important.Current
The process that the O&M of IT system and monitoring are based primarily upon " problem definition-index monitoring-triggering alarm " is realized.Majority of case
Under, troubleshooting still needs a large amount of manual intervention.
The problem of traditional processing method is mainly for infrastructure level (such as host, network, virtualized environment), then tie
Manual intervention is closed to solve failure problems, it is fine to complete effect.But for the software application for possessing increasingly complex Technical Architecture
For system, then biggish challenge is faced.Traditional processing method is difficult to rapidly analyze problem, and provides accurately
Solution, and it is higher to the Capability Requirement of system manager.
Summary of the invention
Anomaly analysis processing method, device and storage medium provided by the invention are realized to the automatic of system exception problem
Analysis and processing, are not necessarily to operation maintenance personnel manual intervention, and the time that system solves abnormal problem is greatly saved.
The first aspect of the present invention provides a kind of anomaly analysis processing method, comprising:
The real-time monitor control index of acquisition system；
Judge whether the monitor control index meets pre-set level collection condition, it is corresponding that the monitor control index is collected if meeting
Indication information；
Comprehensive analysis is carried out to the indication information, determines the processing scheme for solving the system exception；
Execute the processing scheme.
In one possible implementation, the indication information includes log information；It is described to the indication information into
Row comprehensive analysis determines the processing scheme for solving the system exception, comprising:
Semantic analysis is carried out to the log information, extracts the first key feature text；
Technique classification is determined according to the first key feature text；
The second key feature text is determined in alternative question feature database according to the technique classification；
The determining processing scheme for solving the system exception, comprising:
The processing for solving the system exception is determined in alternative processing scheme library according to the second key feature text
Scheme.
In one possible implementation, described to determine second in alternative question feature database according to the technique classification
Key feature text, comprising:
Third key feature text corresponding with the technique classification is extracted in the alternative question feature database；
Calculate the text similarity of the first key feature text Yu the third key feature text；
The text similarity is more than or equal to the third key feature text of pre-set text similarity as described in
Second key feature text.
In one possible implementation, the text similarity is more than or equal to pre-set text similarity if it does not exist
The third key feature text, alternatively, there are the thirds that the text similarity is more than or equal to pre-set text similarity
Corresponding processing scheme is not present in key feature text but the alternative processing scheme；
The determining processing scheme for solving the system exception, comprising:
Prompt operation maintenance personnel determines the processing scheme of the system exception according to the first key feature text.
In one possible implementation, the prompt operation maintenance personnel determines institute according to the first key feature text
After the processing scheme for stating system exception, further includes:
The processing scheme that operation maintenance personnel determines is stored in the alternative processing scheme library；
Correspondingly, the corresponding indication information of the first key feature text is stored in the alternative question feature database
In.
In one possible implementation, the method also includes:
The processing scheme that the operation maintenance personnel determines is extracted from the alternative processing scheme library, and, from described alternative
The corresponding indication information of the first key feature text is extracted in problem characteristic library；
The processing scheme and the corresponding indication information of the first key feature text that the operation maintenance personnel is determined are defeated
Enter and is trained into machine learning model, the machine learning model after being trained；The machine learning model is for providing
Analysis method.
In one possible implementation, described that comprehensive analysis is carried out to the indication information, it determines and solves the system
The processing scheme for exception of uniting, comprising:
According to the analysis method that the machine learning model provides, comprehensive analysis is carried out to the indication information, determines solution
The processing scheme of the certainly described system exception.
The second aspect of the present invention provides a kind of anomaly analysis processing unit, comprising:
Module is obtained, for obtaining the real-time monitor control index of system；
Judgment module, for judging whether the monitor control index meets pre-set level collection condition, information is received if meeting
Collect module, for collecting the corresponding indication information of the monitor control index；
Information analysis module, for carrying out comprehensive analysis to the indication information, scheme determining module is solved for determining
The processing scheme of the system exception；
Execution module, for executing the processing scheme.
The third aspect of the present invention provides a kind of anomaly analysis processing unit, comprising:
Memory；
Processor；And
Computer program；
Wherein, the computer program stores in the memory, and is configured as being executed by the processor with reality
Now such as the described in any item anomaly analysis processing methods of first aspect present invention.
The fourth aspect of the present invention provides a kind of computer readable storage medium, is stored thereon with computer program, described
Computer program is executed by processor to realize such as the described in any item anomaly analysis processing methods of first aspect present invention.
The embodiment of the present invention provides a kind of anomaly analysis processing method, device and storage medium, real-time by obtaining system
Monitor control index, judge whether monitor control index meets pre-set level collection condition, if meet if the corresponding finger of collection monitoring index
Information is marked, comprehensive analysis is carried out to indication information, after determining the processing scheme for solving system exception, executes the processing scheme.
The above method realizes intelligent anomaly analysis processing, and system solution is greatly saved in the degree that the system that reduces manually participates in
The time of abnormal problem reduces the operations risks of system.
Detailed description of the invention
The drawings herein are incorporated into the specification and forms part of this specification, and shows and meets implementation of the invention
Example, and be used to explain the principle of the present invention together with specification.
Fig. 1 is the application scenarios schematic diagram for the anomaly analysis processing method that one embodiment of the invention provides；
Fig. 2 is the flow diagram for the anomaly analysis processing method that one embodiment of the invention provides；
Fig. 3 be another embodiment of the present invention provides anomaly analysis processing method flow diagram；
Fig. 4 is the structural schematic diagram for the anomaly analysis processing unit that one embodiment of the invention provides；
Fig. 5 be another embodiment of the present invention provides anomaly analysis processing unit structural schematic diagram；
Fig. 6 is the hardware structural diagram for the anomaly analysis processing unit that one embodiment of the invention provides.
Through the above attached drawings, it has been shown that the specific embodiment of the present invention will be hereinafter described in more detail.These attached drawings
It is not intended to limit the scope of the inventive concept in any manner with verbal description, but is by referring to specific embodiments
Those skilled in the art illustrate idea of the invention.
Specific embodiment
Example embodiments are described in detail here, and the example is illustrated in the accompanying drawings.Following description is related to
When attached drawing, unless otherwise indicated, the same numbers in different drawings indicate the same or similar elements.Following exemplary embodiment
Described in embodiment do not represent all embodiments consistented with the present invention.On the contrary, they be only with it is such as appended
The example of device and method being described in detail in claims, some aspects of the invention are consistent.
Term " includes " and " having " and their any deformations in description and claims of this specification, it is intended that
It is to cover and non-exclusive includes.Such as the process, method, system, product or equipment for containing a series of steps or units do not have
It is defined in listed step or unit, but optionally further comprising the step of not listing or unit, or optionally also wrap
Include the other step or units intrinsic for these process, methods, product or equipment.
"and/or" in the present invention describes the incidence relation of affiliated partner, indicates may exist three kinds of relationships, for example, A
And/or B, can indicate: individualism A exists simultaneously A and B, these three situations of individualism B.Before character "/" typicallys represent
Affiliated partner is a kind of relationship of "or" afterwards.
" embodiment " or " another embodiment " mentioned in the whole text in specification of the invention means related with embodiment
A particular feature, structure, or characteristic include at least one embodiment of the application.Therefore, occur everywhere in the whole instruction
" in one embodiment " or " in the present embodiment " not necessarily refer to identical embodiment.It should be noted that not conflicting
In the case of, the feature in embodiment and embodiment in the present invention can be combined with each other.
Anomaly analysis processing method and processing device provided in an embodiment of the present invention, can automatically analyze the exception of system to be monitored
Problem, and the solution of processing abnormal problem is provided, it realizes intelligent anomaly analysis processing, reduces what system manually participated in
Degree is greatly saved the time that system solves abnormal problem, reduces system operation risk to be monitored.
Fig. 1 is the application scenarios schematic diagram for the anomaly analysis processing method that one embodiment of the invention provides, as shown in Figure 1,
Anomaly analysis processing method provided in this embodiment is applied to anomaly analysis processing unit, the device can by software and/or
Hardware realization.
Anomaly analysis processing unit is connect with system to be monitored, external system respectively, and anomaly analysis processing unit is from wait supervise
Examining system obtains real-time monitoring data, determines system with the presence or absence of exception, if it is abnormal to judge that system exists according to monitoring data
When, then Exception Type and the corresponding processing scheme of the Exception Type further are determined according to monitoring data, and execute processing side
Case is to eliminate system exception.
It should be pointed out that the anomaly analysis processing unit of the present embodiment is connect by internet with external system, obtain
The shared thundering observed data processing scheme corresponding with thundering observed data of external system, and the exception monitoring number that will acquire
According in the alternative question feature database for being stored in anomaly analysis processing unit, meanwhile, the thundering observed data that will acquire is corresponding
Processing scheme is stored in the alternative processing scheme library of anomaly analysis processing unit, so that anomaly analysis processing unit is according to wait supervise
The Real-time Monitoring Data of examining system carries out comprehensive analysis, realizes the exception for carrying out system automatically when system to be monitored occurs abnormal
Analysis and processing.
The external system of the present embodiment includes log server, APM monitoring system etc..
Anomaly analysis processing method provided by the invention is described in detail with specifically embodiment below.This is several below
A specific embodiment can be combined with each other, may be no longer superfluous in some embodiments for the same or similar concept or process
It states.
Fig. 2 is the flow diagram for the anomaly analysis processing method that one embodiment of the invention provides, as shown in Fig. 2, this reality
The anomaly analysis processing method for applying example offer includes the following steps:
S201, the real-time monitor control index of system is obtained；
In the present embodiment, anomaly analysis processing unit obtains every monitor control index of system to be monitored in real time, wherein prison
Control index includes but is not limited to cpu busy percentage, memory usage, the read-write number per second of disk, database connection number, caching life
Middle rate.
S202, judge whether monitor control index meets pre-set level collection condition, collection monitoring index is corresponding if meeting
Indication information；
Anomaly analysis processing unit determines whether to trigger the corresponding finger of collection monitoring index according to pre-set level collection condition
Mark information.Specifically, judging whether the index value of monitor control index falls in pre-set level capture range, if so, collection monitoring
The corresponding indication information of index.Wherein, monitor control index can be one, be also possible to multiple, not make specifically to this present embodiment
It limits.
If monitor control index is one, judge whether the index value of the monitor control index falls in pre-set level capture range, example
Such as judge whether the index value of monitor control index is more than or equal to first threshold, or, if it is less than or equal to second threshold, alternatively, being
It is no to fall between first threshold and second threshold.
If monitor control index be it is multiple, judge whether the index value of each monitor control index falls in respective pre-set level and collect model
In enclosing, when multiple monitor control indexes while meeting respective pre-set level collection condition, then collect the corresponding finger of multiple monitor control indexes
Mark information.
The indication information of the present embodiment includes log information, and specifically, the indication information of collection includes monitor control index pair
Access log, abnormal log, memory image, thread snapshot for answering etc., are not especially limited this present embodiment.
S203, comprehensive analysis is carried out to indication information, determines the processing scheme for solving system exception；
In the present embodiment, anomaly analysis processing unit uses method of semantic differential and similarity calculating method, in combination with
The content of alternative question feature database and alternative processing scheme library carries out comprehensive analysis to the indication information being collected into, determines and solve
The processing method of system exception.
The indication information of the present embodiment includes log information, and specific analytic process is as follows:
Semantic analysis is carried out to log information, extracts the first key feature text；
Technique classification is determined according to the first key feature text；Wherein, technique classification includes but is not limited to JAVA class .Net
Class, Python class, C/C++ class.
The second key feature text is determined in alternative question feature database according to technique classification；Specifically,
Third key feature text corresponding with technique classification is extracted in alternative question feature database；
Calculate the text similarity of the first key feature text Yu third key feature text；
Text similarity is more than or equal to the third key feature text of pre-set text similarity as the second key feature
Text.Wherein,
The history indication information of alternative question feature database storage system, and/or, the index letter collected from other external systems
Breath.Specifically, alternative question feature database includes technique classification, key feature text, the corresponding processing scheme of key feature text
Mark.
It is appreciated that the second key feature text of the present embodiment is literary with the first key feature in alternative question feature database
This higher feature text of text similarity.
After determining the second key feature text corresponding with the indication information of current monitor index, at anomaly analysis
Device is managed according to the second key feature text, the processing scheme for solving system exception is determined in alternative processing scheme library.Its
In,
Alternative processing scheme inventory puts processing scheme corresponding with the history indication information of system, and/or, from other outside
The corresponding processing scheme of indication information that system is collected.
Specifically, alternative processing scheme library includes key feature Text Flag, processing scheme mark, processing order (foot
Originally), rollback order (script), log information for the treatment of process etc..
The present embodiment has been expanded different by collecting indication information and the corresponding processing scheme of indication information from external system
Data in normal analysis processing device in alternative question feature database and alternative processing scheme library, increase anomaly analysis processing unit
Automatically analyze the ability with processing system abnormal problem.
It should be pointed out that monitor control index of the anomaly analysis processing unit according to system to be monitored, according to preset collection
Period grabs indication information relevant to the monitor control index of system to be monitored from external system and external system refers to for this
Mark the processing scheme that information uses.
The alternative question feature database of the present embodiment and alternative processing scheme library are the databases of self-propagation, can pass through engineering
The ability of the characteristics of practising, the data in database is made increasingly to meet system to be monitored, analysis processing abnormal problem is more and more quasi-
Really, the degree efficiently, intelligently, manually participated in can gradually decrease.
S204, processing scheme is executed.
Specifically, anomaly analysis processing unit obtains the processing scheme of determining solution system exception, the processing side is executed
The corresponding processing order of case, meanwhile, record executes the execution journal (log information of i.e. above-mentioned treatment process) of the processing order.
Anomaly analysis processing method provided in an embodiment of the present invention judges to supervise by obtaining the real-time monitor control index of system
Whether control index meets pre-set level collection condition, the corresponding indication information of collection monitoring index if meeting, to indication information
Comprehensive analysis is carried out, after determining the processing scheme for solving system exception, executes the processing scheme.The above method realizes intelligence
Change anomaly analysis processing, the time that system solves abnormal problem is greatly saved in the degree that the system that reduces manually participates in, and reduces
The operations risks of system.
Anomaly analysis processing method shown in above-described embodiment is the alternative question feature database in anomaly analysis processing unit
It is middle to there is history indication information similar with the key feature text of current criteria information, and in the standby of anomaly analysis processing unit
Select automated analysis treatment process when processing scheme corresponding there are the history indication information in processing scheme library, the above process
It does not need manually to participate in, realizes intelligent anomaly analysis processing, the time that system solves abnormal problem is greatly saved.
However, the alternative question feature database of anomaly analysis processing unit and alternative processing scheme library are a self-propagations
Database, there are exception handling devices can not determine matched problem characteristic and processing side according to the current indication information of system
The case where case, following implementations are illustrated the anomaly analysis processing method for the situation.
Anomaly analysis processing method provided in this embodiment is described in detail with reference to the accompanying drawing.
Fig. 3 be another embodiment of the present invention provides anomaly analysis processing method flow diagram, as shown in figure 3, this
The anomaly analysis processing method that embodiment provides includes the following steps:
S301, the real-time monitor control index of system is obtained；
S302, judge whether monitor control index meets pre-set level collection condition, collection monitoring index is corresponding if meeting
Indication information；
With the S201 and S202 of above-described embodiment, implementing principle and technical effect are same as above the S301 and S302 of the present embodiment
Embodiment is stated, for details, reference can be made to above-described embodiments, and details are not described herein again.
S303, indication information progress comprehensive analysis is prompted to transport if the corresponding processing scheme of indication information can not be determined
Dimension personnel determine the processing scheme of system exception；
The present embodiment is to the comprehensive analysis process of indication information with the S203 of above-described embodiment, and for details, reference can be made to above-mentioned implementations
Example, details are not described herein again.
In some embodiments, pass through alternative question feature database and alternative processing scheme library in anomaly analysis processing unit,
It can not determine the corresponding recommendation process scheme of indication information, specifically:
A kind of possible situation, the finger in the first key feature text and alternative question feature database in current criteria information
The text similarity for marking the second key feature text of information is respectively less than pre-set text similarity, that is to say, that text is not present
Similarity is more than or equal to the third key feature text of pre-set text similarity.At this point, inevitable in alternative processing scheme library do not deposit
In corresponding processing scheme.
Alternatively possible situation, exists in alternative question feature database and the first key feature text in current criteria information
This text similarity is more than or equal to the third key feature text of pre-set text similarity, but is not present in alternative processing scheme
The corresponding processing scheme of third key feature text.
When there is any of the above-described situation, operation maintenance personnel is prompted to determine system exception according to the first key feature text
Processing scheme.Specifically, operation maintenance personnel can be determined from alternative processing scheme library it is relevant to the first key feature text
Processing scheme rule of thumb can also voluntarily formulate processing scheme.
S304, processing scheme is executed；
S305, the processing scheme that operation maintenance personnel determines is stored in alternative processing scheme library, indication information is stored in
In alternative question feature database.
The alternative question feature database of the present embodiment and alternative processing scheme library are the databases of self-propagation, can pass through engineering
The ability of the characteristics of practising, the data in database is made increasingly to meet system to be monitored, analysis processing abnormal problem is more and more quasi-
Really, the degree efficiently, intelligently, manually participated in can gradually decrease.
The S304 and S305 of the present embodiment may be performed simultaneously, and can also sequentially execute, and the execution sequence of the present embodiment is only
As an example, the present embodiment is not construed as limiting specific execution sequence.
Anomaly analysis processing method provided in this embodiment judges that monitoring refers to by obtaining the real-time monitor control index of system
Whether mark meets pre-set level collection condition, and the corresponding indication information of collection monitoring index if meeting carries out indication information
Comprehensive analysis prompts operation maintenance personnel to determine the processing side of system exception if the corresponding processing scheme of indication information can not be determined
Case.It is artificial to participate in solving the problems, such as system exception, it is ensured that system when the above process realizes the failure of intelligent recommendation processing scheme
Normal operation and stability.
Optionally, on the basis of above-mentioned each embodiment, anomaly analysis processing method provided in this embodiment further includes
Following steps:
The processing scheme that operation maintenance personnel determines is extracted from alternative processing scheme library, and, from alternative question feature database
Extract the corresponding indication information of the first key feature text；
Processing scheme and the corresponding indication information of the first key feature text that operation maintenance personnel determines are input to machine
It is trained in learning model, the machine learning model after being trained.
According to the analysis method that machine learning model provides, comprehensive analysis is carried out to indication information, determines that solution system is different
Normal processing scheme.
Present embodiment illustrates the machine learning model in anomaly analysis processing unit, which is used for basis
Indication information provides specific analysis method, major function are as follows:
1) machine learning is executed, constantly improve the accuracy of machine learning model, the training set of machine learning model is main
For existing alternative processing scheme library, alternative question feature database, the correlated characteristic text being collected into from external system, problem point
Class and processing scheme.
2) semantic analysis is provided for information analysis, specifically includes extraction, similarity analysis and the problem of key feature this paper
And the sorting algorithm of processing scheme.
By the above process, anomaly analysis processing unit obtains specific analysis method by built-in machine learning model
And similarity calculating method, comprehensive analysis is carried out to indication information, so that it is determined that solving the processing scheme of system exception, is improved
The accuracy of anomaly analysis processing unit solution abnormal problem.
Below with reference to a specific example, anomaly analysis processing method provided by the above embodiment is illustrated.
1, delay machine failure occurs for certain application program in system to be monitored；
2, anomaly analysis processing unit is monitored the refreshing of system testing page, and discovery continuously without response, triggers log letter
Breath is collected；
3, comprehensive analysis is carried out without the log information of response time section to application program, wherein the log information in this example
It is as follows:
SEVERE:Servlet.service()for servlet jsp threw exception
java.lang.OutOfMemoryError:PermGen space
SEVERE:An exception or error occurred in the container during the
request processing
java.lang.OutOfMemoryError:PermGen space
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable run
SEVERE:Caught exception(java.lang.OutOfMemoryError:PermGen space)
executing org.apache.jk.common.ChannelSocket$SocketConnection@4af41d,
terminating thread
It is most that semantic analysis, the first key feature text of extraction, such as extraction frequency of occurrence are carried out to above-mentioned log information
Sentence, obtain the first key feature text: java.lang.OutOfMemoryError:PermGen space.
Determine that corresponding technique classification is JAVA class according to the first key feature text；
Determine that the second key feature text is specifically alternatively being asked in alternative question feature database according to technique classification
It inscribes and extracts third key feature text corresponding with JAVA class in feature database, calculate the first key feature text and third is crucial special
The text similarity for sheet of soliciting articles.Table 1 is the information list of the third key feature text in this example.
Third key feature text using text similarity more than or equal to 0.9 is as the second key feature text:
java.lang.OutOfMemoryError:PermGen space over。
It is corresponding that the second key feature text is searched in alternative processing scheme library according to the second determining key feature text
Processing scheme, using the program as the corresponding processing scheme of the first key feature text in this example.The processing scheme is corresponding
Processing order (processing script) is that java virtual machine start-up parameter Permsize increases 1G, and the upper limit is no more than JAVA heap size
1/2nd, restart application server.
4, processing scheme is executed.
Table 1
It is automatically confirmed that if can not be executed in step 3, notifies the artificial determination for carrying out problem and processing scheme, and will confirm that
Problem afterwards is stored in alternative question feature database, and the processing scheme after determination is stored in alternative processing scheme library.
The embodiment of the present invention also provides a kind of anomaly analysis processing unit, and shown in Figure 4, the embodiment of the present invention is only to scheme
It is illustrated for 4, is not offered as that present invention is limited only to this.
Fig. 4 is the structural schematic diagram for the anomaly analysis processing unit that one embodiment of the invention provides, as shown in figure 4, this reality
Applying the anomaly analysis processing unit 40 that example provides includes:
Module 41 is obtained, for obtaining the real-time monitor control index of system；
Judgment module 42, for judging whether the monitor control index meets pre-set level collection condition, the information if meeting
Collection module 43, for collecting the corresponding indication information of the monitor control index；
Information analysis module 44, for carrying out comprehensive analysis to the indication information；
Scheme determining module 45, for determining the processing scheme for solving the system exception；
Execution module 46, for executing the processing scheme.
Anomaly analysis processing unit provided in an embodiment of the present invention include obtain module, judgment module, information collection module,
Information analysis module, scheme determining module and execution module.Wherein, module is obtained to refer to for obtaining system and monitoring in real time
Mark, judgment module is for judging whether monitor control index meets pre-set level collection condition, and information collection module is used for if meeting
The corresponding indication information of collection monitoring index, information analysis module are used to carry out comprehensive analysis to indication information, and scheme determines mould
Block solves the processing scheme of system exception for determining, execution module is for executing the processing scheme.Above-mentioned apparatus realizes intelligence
Anomaly analysis processing can be changed, the time that system solves abnormal problem is greatly saved in the degree that the system that reduces manually participates in, drop
The low operations risks of system.
Optionally, the indication information includes log information；The information analysis module 44, is specifically used for:
Semantic analysis is carried out to the log information, extracts the first key feature text；
Technique classification is determined according to the first key feature text；
The second key feature text is determined in alternative question feature database according to the technique classification；
The scheme determining module 45, is specifically used for:
The processing for solving the system exception is determined in alternative processing scheme library according to the second key feature text
Scheme.
Optionally, the information analysis module 44, is specifically used for:
Third key feature text corresponding with the technique classification is extracted in the alternative question feature database；
Calculate the text similarity of the first key feature text Yu the third key feature text；
The text similarity is more than or equal to the third key feature text of pre-set text similarity as described in
Second key feature text.
Fig. 5 be another embodiment of the present invention provides anomaly analysis processing unit structural schematic diagram, device shown in Fig. 4
On the basis of, the text similarity is more than or equal to the third key feature text of pre-set text similarity if it does not exist,
Alternatively, there are the text similarities to be more than or equal to the third key feature text of pre-set text similarity but described alternative
Corresponding processing scheme, anomaly analysis processing unit 40 provided in this embodiment are not present in processing scheme, further includes: prompt mould
Block 47, extraction module 48 and model training module 49, as shown in Figure 5.
The cue module 47, for prompting operation maintenance personnel to determine that the system is different according to the first key feature text
Normal processing scheme.
Optionally, the prompt operation maintenance personnel determines the processing of the system exception according to the first key feature text
After scheme, the execution module 46 is also used to:
The processing scheme that operation maintenance personnel determines is stored in the alternative processing scheme library；
Correspondingly, the corresponding indication information of the first key feature text is stored in the alternative question feature database
In.
Optionally, the extraction module 48, is used for:
The processing scheme that the operation maintenance personnel determines is extracted from the alternative processing scheme library, and, from described alternative
The corresponding indication information of the first key feature text is extracted in problem characteristic library；
The model training module 49, processing scheme and the first crucial spy for determining the operation maintenance personnel
This corresponding indication information of soliciting articles is input in machine learning model and is trained, the machine learning model after being trained；Institute
Machine learning model is stated for providing analysis method.
Optionally, the scheme determining module 45, is specifically used for:
According to the analysis method that the machine learning model provides, comprehensive analysis is carried out to the indication information, determines solution
The processing scheme of the certainly described system exception.
Anomaly analysis processing unit provided in this embodiment, can execute the technical solution of above method embodiment, in fact
Existing principle is similar with technical effect, and details are not described herein again.
The embodiment of the present invention also provides a kind of anomaly analysis processing unit, and shown in Figure 6, the embodiment of the present invention is only to scheme
It is illustrated for 6, is not offered as that present invention is limited only to this.
Fig. 6 is the hardware structural diagram for the anomaly analysis processing unit that one embodiment of the invention provides, as shown in fig. 6,
Anomaly analysis processing unit 60 provided in this embodiment includes:
Memory 61；
Processor 62；And
Computer program；
Wherein, computer program is stored in memory 61, and is configured as being executed by processor 62 to realize as aforementioned
The technical solution of any one embodiment of the method, it is similar that the realization principle and technical effect are similar, and details are not described herein again.
Optionally, memory 61 can also be integrated with processor 62 either independent.
When device except memory 61 is independently of processor 62, anomaly analysis processing unit 60 further include:
Bus 63, for connecting memory 61 and processor 62.
The embodiment of the present invention also provides a kind of computer readable storage medium, is stored thereon with computer program, computer
Program is executed by processor 62 to realize each step performed by anomaly analysis processing unit 60 in embodiment of the method as above.
It should be understood that above-mentioned processor can be central processing unit (English: Central Processing Unit, letter
Claim: CPU), can also be other general processors, digital signal processor (English: Digital Signal Processor,
Referred to as: DSP), specific integrated circuit (English: Application Specific Integrated Circuit, referred to as:
ASIC) etc..General processor can be microprocessor or the processor is also possible to any conventional processor etc..In conjunction with hair
The step of bright disclosed method, can be embodied directly in hardware processor and execute completion, or with hardware in processor and soft
Part block combiner executes completion.
Memory may include high speed RAM memory, it is also possible to and it further include non-volatile memories NVM, for example, at least one
Magnetic disk storage can also be USB flash disk, mobile hard disk, read-only memory, disk or CD etc..
Bus can be industry standard architecture (Industry Standard Architecture, ISA) bus, outer
Portion's apparatus interconnection (Peripheral Component, PCI) bus or extended industry-standard architecture (Extended
Industry Standard Architecture, EISA) bus etc..Bus can be divided into address bus, data/address bus, control
Bus etc..For convenient for indicating, the bus in illustrations does not limit only a bus or a type of bus.
Above-mentioned storage medium can be by any kind of volatibility or non-volatile memory device or their combination
It realizes, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable
Read-only memory (EPROM), programmable read only memory (PROM), read-only memory (ROM), magnetic memory, flash memory,
Disk or CD.Storage medium can be any usable medium that general or specialized computer can access.
A kind of illustrative storage medium is coupled to processor, believes to enable a processor to read from the storage medium
Breath, and information can be written to the storage medium.Certainly, storage medium is also possible to the component part of processor.It processor and deposits
Storage media can be located at specific integrated circuit (Application Specific Integrated Circuits, referred to as:
ASIC in).Certainly, pocessor and storage media can also be used as discrete assembly and be present in electronic equipment or main control device.
Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present invention., rather than its limitations；To the greatest extent
Pipe present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that: its according to
So be possible to modify the technical solutions described in the foregoing embodiments, or to some or all of the technical features into
Row equivalent replacement；And these are modified or replaceed, various embodiments of the present invention technology that it does not separate the essence of the corresponding technical solution
The range of scheme.
Claims (10)
1. a kind of anomaly analysis processing method characterized by comprising
The real-time monitor control index of acquisition system；
Judge whether the monitor control index meets pre-set level collection condition, collects the corresponding finger of the monitor control index if meeting
Mark information；
Comprehensive analysis is carried out to the indication information, determines the processing scheme for solving the system exception；
Execute the processing scheme.
2. the method according to claim 1, wherein the indication information includes log information；It is described to described
Indication information carries out comprehensive analysis, determines the processing scheme for solving the system exception, comprising:
Semantic analysis is carried out to the log information, extracts the first key feature text；
Technique classification is determined according to the first key feature text；
The second key feature text is determined in alternative question feature database according to the technique classification；
The processing scheme for solving the system exception is determined in alternative processing scheme library according to the second key feature text.
3. according to the method described in claim 2, it is characterized in that, it is described according to the technique classification in alternative question feature database
Middle the second key feature of determination text, comprising:
Third key feature text corresponding with the technique classification is extracted in the alternative question feature database；
Calculate the text similarity of the first key feature text Yu the third key feature text；
The text similarity is more than or equal to the third key feature text of pre-set text similarity as described second
Key feature text.
4. according to the method described in claim 3, it is characterized in that, the text similarity is more than or equal to default text if it does not exist
The third key feature text of this similarity, alternatively, there are the text similarities to be more than or equal to pre-set text similarity
The third key feature text but the alternative processing scheme in be not present corresponding processing scheme；
The determining processing scheme for solving the system exception, comprising:
Prompt operation maintenance personnel determines the processing scheme of the system exception according to the first key feature text.
5. according to the method described in claim 4, it is characterized in that, the prompt operation maintenance personnel is according to first key feature
Text determines after the processing scheme of the system exception, further includes:
The processing scheme that operation maintenance personnel determines is stored in the alternative processing scheme library；
Correspondingly, the corresponding indication information of the first key feature text is stored in the alternative question feature database.
6. according to the method described in claim 5, it is characterized in that, the method also includes:
The processing scheme that the operation maintenance personnel determines is extracted from the alternative processing scheme library, and, from the alternative question
The corresponding indication information of the first key feature text is extracted in feature database；
Processing scheme and the corresponding indication information of the first key feature text that the operation maintenance personnel determines are input to
It is trained in machine learning model, the machine learning model after being trained；The machine learning model is for providing analysis
Method.
7. according to the method described in claim 6, it is characterized in that, described carry out comprehensive analysis, determination to the indication information
Solve the processing scheme of the system exception, comprising:
According to the analysis method that the machine learning model provides, comprehensive analysis is carried out to the indication information, determines and solves institute
State the processing scheme of system exception.
8. a kind of anomaly analysis processing unit characterized by comprising
Module is obtained, for obtaining the real-time monitor control index of system；
Judgment module, for judging whether the monitor control index meets pre-set level collection condition, information collects mould if meeting
Block, for collecting the corresponding indication information of the monitor control index；
Information analysis module, for carrying out comprehensive analysis, scheme determining module, for determining described in solution to the indication information
The processing scheme of system exception；
Execution module, for executing the processing scheme.
9. a kind of anomaly analysis processing unit characterized by comprising
Memory；
Processor；And
Computer program；
Wherein, the computer program stores in the memory, and is configured as being executed by the processor to realize such as
The described in any item anomaly analysis processing methods of claim 1~7.
10. a kind of computer readable storage medium, which is characterized in that be stored thereon with computer program, the computer program
It is executed by processor to realize anomaly analysis processing method as described in any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811326287.1A CN109542722A (en) | 2018-11-08 | 2018-11-08 | Anomaly analysis processing method, device and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811326287.1A CN109542722A (en) | 2018-11-08 | 2018-11-08 | Anomaly analysis processing method, device and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN109542722A true CN109542722A (en) | 2019-03-29 |
Family
ID=65845434
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811326287.1A Pending CN109542722A (en) | 2018-11-08 | 2018-11-08 | Anomaly analysis processing method, device and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109542722A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112035322A (en) * | 2020-09-01 | 2020-12-04 | 中国银行股份有限公司 | JVM monitoring method and device |
| CN114118879A (en) * | 2022-01-25 | 2022-03-01 | 浙江裕腾百诺环保科技股份有限公司 | Method, system, server and storage medium for recommending environment protection management and control measures |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20050283498A1 (en) * | 2004-06-22 | 2005-12-22 | Taiwan Semiconductor Manufacturing Company, Ltd. | System and method to build, retrieve and track information in a knowledge database for trouble shooting purposes |
| CN106201757A (en) * | 2016-07-12 | 2016-12-07 | 网易（杭州）网络有限公司 | A kind of abnormality eliminating method and device |
| CN106709057A (en) * | 2017-01-09 | 2017-05-24 | 郑州云海信息技术有限公司 | Distributed cluster visualized database |
| CN107301229A (en) * | 2017-06-22 | 2017-10-27 | 美味不用等（上海）信息科技股份有限公司 | Feedback assigning method and system based on semantic analysis |
-
2018
- 2018-11-08 CN CN201811326287.1A patent/CN109542722A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20050283498A1 (en) * | 2004-06-22 | 2005-12-22 | Taiwan Semiconductor Manufacturing Company, Ltd. | System and method to build, retrieve and track information in a knowledge database for trouble shooting purposes |
| CN106201757A (en) * | 2016-07-12 | 2016-12-07 | 网易（杭州）网络有限公司 | A kind of abnormality eliminating method and device |
| CN106709057A (en) * | 2017-01-09 | 2017-05-24 | 郑州云海信息技术有限公司 | Distributed cluster visualized database |
| CN107301229A (en) * | 2017-06-22 | 2017-10-27 | 美味不用等（上海）信息科技股份有限公司 | Feedback assigning method and system based on semantic analysis |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112035322A (en) * | 2020-09-01 | 2020-12-04 | 中国银行股份有限公司 | JVM monitoring method and device |
| CN112035322B (en) * | 2020-09-01 | 2023-08-22 | 中国银行股份有限公司 | JVM monitoring method and device |
| CN114118879A (en) * | 2022-01-25 | 2022-03-01 | 浙江裕腾百诺环保科技股份有限公司 | Method, system, server and storage medium for recommending environment protection management and control measures |
| CN114118879B (en) * | 2022-01-25 | 2022-04-29 | 浙江裕腾百诺环保科技股份有限公司 | Method, system, server and storage medium for recommending environment protection management and control measures |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10805151B2 (en) | Method, apparatus, and storage medium for diagnosing failure based on a service monitoring indicator of a server by clustering servers with similar degrees of abnormal fluctuation | |
| US8601319B2 (en) | Method and apparatus for cause analysis involving configuration changes | |
| US20150121136A1 (en) | System and method for automatically managing fault events of data center | |
| CN110164501B (en) | Hard disk detection method, device, storage medium and equipment | |
| US20150356489A1 (en) | Behavior-Based Evaluation Of Crowd Worker Quality | |
| CN110442712B (en) | Risk determination method, risk determination device, server and text examination system | |
| CN107016298B (en) | Webpage tampering monitoring method and device | |
| CN109472608A (en) | Business confirmation method and terminal device based on Emotion identification | |
| CN110490237B (en) | Data processing method and device, storage medium and electronic equipment | |
| CN107015961A (en) | A kind of text similarity comparison method | |
| CN109542722A (en) | Anomaly analysis processing method, device and storage medium | |
| CN115660262A (en) | Intelligent engineering quality inspection method, system and medium based on database application | |
| CN114118295A (en) | Anomaly detection model training method, anomaly detection device and medium | |
| Weyuker et al. | We're finding most of the bugs, but what are we missing? | |
| CN113282920A (en) | Log abnormity detection method and device, computer equipment and storage medium | |
| CN112365269A (en) | Risk detection method, apparatus, device and storage medium | |
| CN112882797A (en) | Container safety detection method based on machine learning | |
| CN107402883B (en) | A kind of data test treating method and apparatus | |
| US20230396816A1 (en) | Live streaming moderating method and apparatus, server, and storage medium | |
| CN115269288A (en) | Fault determination method, device, equipment and storage medium | |
| CN112257768B (en) | Method and device for identifying illegal financial pictures and computer storage medium | |
| CN113709223A (en) | Method and device for monitoring platform abnormity, electronic equipment and readable storage medium | |
| CN111835566A (en) | System fault management method, device and system | |
| CN112463486A (en) | Disk quality inspection method, system, terminal and storage medium | |
| CN115033668B (en) | Story venation construction method and device, electronic equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20190329 |