CN110768828A - Alarm processing method and system - Google Patents
Alarm processing method and system Download PDFInfo
- Publication number
- CN110768828A CN110768828A CN201911006671.8A CN201911006671A CN110768828A CN 110768828 A CN110768828 A CN 110768828A CN 201911006671 A CN201911006671 A CN 201911006671A CN 110768828 A CN110768828 A CN 110768828A
- Authority
- CN
- China
- Prior art keywords
- alarm
- messages
- processing
- message
- notified
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0604—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Alarm Systems (AREA)
Abstract
The embodiment of the invention provides an alarm processing method and an alarm processing system, wherein the method comprises the following steps: receiving alarm messages sent by each alarm system, and determining alarm subjects to which the alarm messages belong; carrying out noise reduction processing on the alarm message with the determined alarm theme; carrying out grade division processing on the alarm message after the noise reduction processing; according to the on-duty time corresponding to the on-duty personnel, the alarm time of the alarm message and the alarm level, allocating account of the on-duty personnel to be notified and notification mode for the alarm messages with different alarm levels; sending the alarm messages with different alarm levels to the corresponding allocated watch-on account to be notified by using the corresponding allocated notification mode, wherein the alarm messages with different alarm levels comprise: the alarm subject and the alarm level to which the alarm message belongs. The embodiment of the invention can avoid the trouble caused by unreasonable alarm messages such as indiscriminate, untimely, bombing and the like which are notified to relevant personnel in the prior art, thereby accelerating the efficiency of troubleshooting.
Description
Technical Field
The invention relates to the technical field of computers and intelligent operation and maintenance, in particular to an alarm processing method and system.
Background
In the current operation and maintenance system, because the production scale is getting larger and larger, more and more node instances and services are needed to be monitored by the operation and maintenance monitoring system, and when a certain node in the cluster fails and cannot be served, and an alarm is generated, normal service of other nodes in the cluster is often caused, so that other nodes also generate alarm information, and thus an alarm storm is generated.
The multifaceted, redundant and coupled alarm results in the phenomenon that the fault of some core layers can cause large-area alarm. At present, in the prior art, for a large number of alarm messages sent by each alarm system, a conventional operation and maintenance system usually sends unprocessed alarm messages to an account of a related person in a form of short messages when receiving the alarm messages.
However, because the conventional operation and maintenance system lacks processing of a large number of alarm messages sent by each alarm system, and the notifications of the alarm messages are often relatively single, the related personnel accounts will receive the large number of alarm messages, which causes great trouble to the related personnel using the related personnel accounts, and the related personnel will consume a large amount of energy but cannot grasp the main problem in the alarm message in a short time, and cannot assist the operation and maintenance personnel to solve the problem in the alarm message as soon as possible.
Disclosure of Invention
Aiming at the problems in the prior art, the embodiment of the invention provides an alarm processing method and an alarm processing system.
The embodiment of the invention provides an alarm processing method, which comprises the following steps:
receiving alarm messages sent by each alarm system, and determining alarm subjects to which the alarm messages belong;
carrying out noise reduction processing on the alarm message with the determined alarm theme;
carrying out grade division processing on the alarm messages after the noise reduction processing, and determining the alarm grade of each alarm message after the noise reduction processing;
according to the alarm time and the alarm level of the alarm message and the duty time corresponding to the duty personnel, allocating duty personnel accounts to be notified and notification modes for the alarm messages with different alarm levels;
sending the alarm messages with different alarm levels to the corresponding allocated watch-on account to be notified by using the corresponding allocated notification mode, wherein the alarm messages with different alarm levels comprise: the alarm subject and the alarm level to which the alarm message belongs.
Optionally, the performing noise reduction processing on the alarm message with the determined alarm topic includes:
and merging the alarm messages according to the service system to which the alarm target object belongs, the alarm classification and the alarm condition in a preset time period.
Optionally, after allocating an account of the attendant to be notified and a notification mode for the alarm messages of different alarm levels according to the on-duty time corresponding to the attendant and the alarm time of the alarm message, the method further includes:
and storing the alarm messages after the alarm grade division processing into a database by using a preset dump mode.
Optionally, after sending the alarm messages with different alarm levels to the corresponding allocated on-duty staff account to be notified by using the corresponding allocated notification manner, the method further includes:
monitoring the account of the person on duty to be notified allocated to the alarm messages with different alarm levels in real time, and carrying out alarm state after alarm processing operation on the received alarm messages;
and if the alarm processing operation is not processed in a first preset time period or the processing time of the alarm processing operation exceeds a second preset time period according to the alarm state, the alarm specification of the alarm message corresponding to the alarm processing operation is improved, and the alarm message corresponding to the alarm processing operation is sent to an administrator account by using a corresponding notification mode.
Optionally, the method further comprises:
and recording the account of the person on duty to be notified and the alarm processing operation performed on the received alarm message in real time as historical backtracking data.
An embodiment of the present invention provides an alarm processing system, including:
the receiving module is used for receiving the alarm messages sent by each alarm system and determining the alarm subjects to which the alarm messages belong;
the noise reduction module is used for carrying out noise reduction processing on the alarm message with the determined alarm theme;
the dividing module is used for carrying out grade dividing processing on the alarm messages after the noise reduction processing and determining the alarm grade of each alarm message after the noise reduction processing;
the allocation module is used for allocating the account of the attendant to be notified and the notification mode for the alarm messages with different alarm levels according to the alarm time and the alarm level of the alarm message and the attendant time corresponding to the attendant;
the first sending module is used for sending the alarm messages with different alarm levels to the corresponding allocated watch-dog account to be notified by using the corresponding allocated notification mode, wherein the alarm messages with different alarm levels comprise: the alarm subject and the alarm level to which the alarm message belongs.
Optionally, the noise reduction module is specifically used for
And merging the alarm messages of the determined alarm subjects according to the service system to which the alarm target object belongs, the alarm classification and the alarm condition in the preset time period.
Optionally, the system further comprises:
the monitoring module is used for monitoring the account of the person on duty to be notified, which is distributed for the alarm messages with different alarm levels, in real time and carrying out alarm state after alarm processing operation on the received alarm messages;
and the second sending module is used for promoting the alarm specification of the alarm message corresponding to the alarm processing operation if the alarm processing operation is not processed within the preset first time period or the alarm processing operation is processed within the preset second time period according to the alarm state, and sending the alarm message corresponding to the alarm processing operation to the administrator account by using a corresponding notification mode.
An embodiment of the present invention provides an electronic device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and when the processor executes the computer program, the steps of the method are implemented.
Embodiments of the present invention provide a non-transitory computer-readable storage medium, on which a computer program is stored, which, when executed by a processor, implements the steps of the method as described above.
The alarm processing method and system provided by the embodiment of the invention determine the alarm subject to which the alarm message belongs by receiving the alarm messages sent by each alarm system, sequentially perform noise reduction processing and grade division processing on the alarm messages with the determined alarm subject, allocate the account of the person on duty to be notified and a notification mode for the alarm messages with different alarm grades, the account of the person on duty to be notified and the notification mode according to the time on duty corresponding to the person on duty and the alarm time of the alarm message, and send the alarm messages with different alarm grades to the account of the person on duty to be notified by using the notification mode correspondingly allocated, wherein the alarm messages with different alarm grades comprise: the alarm theme and the alarm grade to which the alarm message belongs, therefore, reasonable and effective notification is carried out through a series of actions such as noise reduction, grade division, notification scheduling and the like, and troubles caused by unreasonable alarm message notifications such as indiscriminate, untimely, bombing and the like to related personnel can be avoided, so that the efficiency of troubleshooting is improved.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and those skilled in the art can also obtain other drawings according to the drawings without creative efforts.
Fig. 1 is a schematic flowchart of an alarm processing method according to an embodiment of the present invention;
fig. 2 is a schematic structural diagram of an alarm processing system according to an embodiment of the present invention;
fig. 3 is a schematic physical structure diagram of an electronic device according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Fig. 1 shows a schematic flowchart of an alarm processing method according to an embodiment of the present invention, and as shown in fig. 1, the alarm processing method according to the embodiment includes:
s1, receiving the alarm information sent by each alarm system, and determining the alarm subject to which the alarm information belongs.
It should be noted that the execution subject of the alarm processing method in this embodiment is a server.
It can be understood that, based on the alarm topic to which the alarm message belongs, it can be known which aspect the problem of the alarm in the alarm message belongs to, so that after the processed alarm message is subsequently sent to the account of the person on duty to be notified, the account of the person on duty to be notified can perform alarm processing operation on the received alarm message based on the alarm topic, thereby accelerating the efficiency of troubleshooting the problem.
And S2, performing noise reduction processing on the alarm message with the determined alarm subject.
In a specific application, the embodiment may combine the alarm messages with the determined alarm subjects according to the service system to which the target object of the alarm belongs, the alarm classification, and the alarm condition in the preset time period, so as to implement noise reduction processing on the alarm messages with the determined alarm subjects.
It can be understood that there may be a large number of redundant alarm messages (for example, a large-area alarm may be caused by a fault in some core layers) in the received alarm messages sent by each alarm system, and therefore, performing noise reduction on the alarm message with the determined alarm topic can remove redundancy and screen out a truly effective alarm message, so that after the processed alarm message is subsequently sent to an account of an attendant to be notified, the energy consumed by the relevant person using the account of the attendant to be notified is reduced, and the efficiency of troubleshooting is accelerated.
And S3, carrying out grade division processing on the alarm messages after the noise reduction processing, and determining the alarm grade of each alarm message after the noise reduction processing.
In a specific application, for example, the alarm level may include: important alarms and secondary alarms, etc., in this embodiment, an alarm ranking rule may be preset according to an actual situation (for example, a field to which an alarm subject belongs, etc.), and according to the alarm ranking rule, it may be distinguished which alarm messages are important alarms and which alarm messages are secondary alarms.
It can be understood that, when facing a large amount of multi-face alarm messages, the related processing personnel certainly do not want to be inundated by a large amount of alarm information which is not particularly concerned, therefore, the embodiment can perform the grading processing on the alarm messages after the noise reduction processing, distinguish which alarm messages are important alarms and which alarm messages are secondary alarms, and then can immediately send the alarm messages with different alarm grades to the related personnel accounts in an effective way.
And S4, distributing the account of the attendant to be notified and the notification mode for the alarm messages with different alarm levels according to the alarm time and the alarm level of the alarm message and the attendant time corresponding to the attendant.
In a specific application, the notification manner in this embodiment may include: e-mail (Email), Short Message Service (SMS), wechat, etc., which are not limited by the embodiment.
It can be understood that, in a specific application, the embodiment may match the alarm time of the alarm message with the duty time corresponding to the operator on duty, obtain all the operator accounts matched with the alarm time of the alarm message after the alarm level division processing, select the operator account corresponding to the alarm level of the alarm message after the alarm level division processing from all the matched operator accounts, serve as the operator account to be notified, and determine the notification mode corresponding to the alarm level of the alarm message after the alarm level division processing. Therefore, the alarm messages with different alarm levels can be sent to the to-be-notified attendant account in an effective manner in the follow-up process, the to-be-notified attendant account only receives the alarm message with the concerned alarm level, the energy consumed by the related personnel using the to-be-notified attendant account can be greatly reduced, and the problem troubleshooting efficiency is improved.
S5, sending the alarm messages with different alarm levels to the corresponding allocated watch-on account to be notified by using the corresponding allocated notification mode, wherein the alarm messages with different alarm levels comprise: the alarm subject and the alarm level to which the alarm message belongs.
It can be understood that, in the embodiment, the account of the attendant to be notified may only receive the alarm message of the corresponding alarm level, and may obtain the alarm level of the received alarm message, and perform an alarm processing operation on the received alarm message based on the alarm topic to which the received alarm message belongs, so as to speed up the efficiency of troubleshooting.
It can be understood that, in this embodiment, after receiving the alarm messages sent by each alarm system, the alarm subject to which the alarm message belongs is determined, the noise reduction processing is performed on the alarm messages with the determined alarm subject, the ranking processing is performed on the alarm messages after the noise reduction processing, the alarm level of each alarm message after the noise reduction processing is determined, the alarm messages with different alarm levels, the duty account to be notified and the notification mode are allocated for the alarm messages with different alarm levels according to the alarm time and the alarm level of the alarm message and the duty time corresponding to the duty person, the alarm messages with different alarm levels are sent to the duty account to be notified by using the notification mode correspondingly allocated, the redundancy can be removed by the noise reduction processing for a large number of, redundant and multi-surface alarm messages, the truly effective alarm message is screened out, the alarm level of each alarm message after the noise reduction processing is determined by the ranking processing, the method distinguishes which alarm messages are important alarms and which alarm messages are secondary alarms, and sends the alarm messages with different alarm levels to the related personnel accounts in an effective way, so that the to-be-notified attendant account only receives the alarm messages with the concerned alarm levels, thereby greatly reducing the energy consumed by the related personnel using the to-be-notified attendant account and accelerating the efficiency of troubleshooting.
The alarm processing method provided in this embodiment determines an alarm topic to which the alarm message belongs by receiving the alarm messages sent by each alarm system, sequentially performs noise reduction processing and level division processing on the alarm messages of the determined alarm topic, allocates an account of an on-duty person to be notified and a notification mode for the alarm messages of different alarm levels, the account of the on-duty person to be notified and the notification mode according to the on-duty time corresponding to the on-duty person and the alarm time of the alarm message, and sends the alarm messages of different alarm levels to the account of the on-duty person to be notified by using the notification mode that is correspondingly allocated, where the alarm messages of different alarm levels include: the alarm theme and the alarm grade to which the alarm message belongs, therefore, reasonable and effective notification is carried out through a series of measures of noise reduction, grade division, notification dispatching distribution and the like, bang-bombing notification of people who do not belong to time and people regardless of the alarm severity can be avoided, trouble caused by unreasonable alarm message notification such as indiscriminate, time-inappropriate, bang-bombing and the like to related people is avoided, and the efficiency of troubleshooting is improved.
Further, on the basis of the foregoing embodiment, after the step S4, the method according to this embodiment may further include:
and storing the alarm messages after the alarm grade division processing into a database by using a preset dump mode.
In a specific application, the embodiment may provide multiple dump modes such as a database, a file, an Application Program Interface (API), an Email (Email), a Short Message Service (SMS), a WeChat, and the like, and the embodiment does not limit the dump modes.
It can be understood that, in the embodiment, the preset dump manner is used to store the alarm messages after the alarm level division processing into the database, and then the alarm messages stored in the database may be read for alarm analysis and the like.
Further, on the basis of the foregoing embodiment, after the step S5, the method according to this embodiment may further include:
monitoring the account of the person on duty to be notified allocated to the alarm messages with different alarm levels in real time, and carrying out alarm state after alarm processing operation on the received alarm messages;
and if the alarm processing operation is not processed in a first preset time period or the processing time of the alarm processing operation exceeds a second preset time period according to the alarm state, the alarm specification of the alarm message corresponding to the alarm processing operation is improved, and the alarm message corresponding to the alarm processing operation is sent to an administrator account by using a corresponding notification mode.
In a specific application, the preset first time period may be specifically set according to an actual situation, and the preset first time period is not limited in this embodiment, for example, the preset first time period may be set to 1 minute, 5 minutes, or half an hour.
In a specific application, the preset second time period may be specifically set according to an actual situation, and the preset second time period is not limited in this embodiment, for example, the preset second time period may be set to be 2 minutes, 5 minutes, half an hour, or 1 hour.
It can be understood that, in this embodiment, the progress of processing is observed in real time after the alarm message is notified, and once the condition that the alarm message is not processed after overdue or not processed in time is found, the alarm specification of the current alarm message is promoted, and the current alarm message is notified to the next-level administrator account, so that the administrator account can perform the timely alarm processing operation on the current alarm message in time.
Further, on the basis of the foregoing embodiment, the method according to this embodiment may further include:
recording the account of the person on duty to be notified allocated to the alarm messages with different alarm levels and the alarm processing operation performed on the received alarm messages in real time as historical backtracking data.
It can be understood that, in this embodiment, the duty account to be notified allocated to the alarm message with different alarm levels and each alarm processing operation performed on the received alarm message are recorded in real time as the historical backtracking data, and the alarm processing operation may include an artificial triggering operation and a non-artificial operation caused by the artificial triggering operation, so as to provide a backtracking function for the alarm afterwards.
According to the alarm processing method provided by the embodiment, reasonable and effective notification is carried out through a series of measures such as noise reduction, grade division, allocation notification scheduling and the like, so that bombing type notification of bees at untimely time, no personnel is divided, no matter the alarm severity degree, and troubles caused by unreasonable alarm information such as indiscriminate time, bombing type and the like to relevant personnel are avoided, so that the problem troubleshooting efficiency is improved; storing the alarm messages after alarm level division processing into a database by using a preset dump mode, and subsequently reading the alarm messages stored in the database for alarm analysis; the method comprises the steps of observing the progress condition of processing in real time after an alarm message is notified, and once the condition that the alarm message is not processed after overdue or is not processed in time is found, promoting the alarm specification of the current alarm message and notifying the current alarm message to a next-level manager account so that the manager account can timely perform alarm processing operation on the current alarm message; by recording the alarm processing operation of each step in real time, the function of backtracking the alarm after the fact is provided.
Fig. 2 shows a schematic structural diagram of an alarm processing system according to an embodiment of the present invention, and as shown in fig. 2, the alarm processing system according to the embodiment includes: a receiving module 21, a noise reduction module 22, a dividing module 23, an allocation module 24 and a first transmitting module 25; wherein:
the receiving module 21 is configured to receive an alarm message sent by each alarm system, and determine an alarm topic to which the alarm message belongs;
the noise reduction module 22 is configured to perform noise reduction processing on the alarm message with the determined alarm topic;
the dividing module 23 is configured to perform level division processing on the alarm messages subjected to the noise reduction processing, and determine an alarm level of each alarm message subjected to the noise reduction processing;
the allocation module 24 is configured to allocate the account of the attendant to be notified and the notification mode for the alarm messages with different alarm levels according to the alarm time and the alarm level of the alarm message and the attendant time corresponding to the attendant;
the first sending module 25 is configured to send alarm messages with different alarm levels to a corresponding allocated on-duty account to be notified in a corresponding allocated notification manner, where the alarm messages with different alarm levels include: the alarm subject and the alarm level to which the alarm message belongs.
Specifically, the receiving module 21 receives an alarm message sent by each alarm system, and determines an alarm subject to which the alarm message belongs; the noise reduction module 22 performs noise reduction processing on the alarm message with the determined alarm theme; the dividing module 23 performs level division processing on the alarm messages after the noise reduction processing, and determines the alarm level of each alarm message after the noise reduction processing; the allocation module 24 allocates the account of the attendant to be notified and the notification mode for the alarm messages with different alarm levels according to the alarm time and the alarm level of the alarm message and the attendant time corresponding to the attendant; the first sending module 25 sends the alarm messages with different alarm levels to the corresponding allocated account of the person on duty to be notified in the corresponding allocated notification manner, where the alarm messages with different alarm levels include: the alarm subject and the alarm level to which the alarm message belongs.
In a specific application, the alarm processing system according to this embodiment may be deployed in a micro-service manner, so that the alarm processing system according to this embodiment has the characteristics of stateless and high throughput, and can process a large amount of alarm messages at the same time.
It can be understood that, based on the alarm topic to which the alarm message belongs, it can be known which aspect the problem of the alarm in the alarm message belongs to, so that after the processed alarm message is subsequently sent to the account of the person on duty to be notified, the account of the person on duty to be notified can perform alarm processing operation on the received alarm message based on the alarm topic, thereby accelerating the efficiency of troubleshooting the problem.
In a specific application, the denoising module 22 according to this embodiment may merge the alarm messages with the determined alarm topic according to the service system to which the alarm target object belongs, the alarm classification, and the alarm condition in the preset time period, so as to implement denoising processing on the alarm messages with the determined alarm topic.
It can be understood that there may be a large amount of redundant alarm messages in the received alarm messages sent by each alarm system (for example, a phenomenon that a fault in some core layers may cause a large-area alarm), and therefore, the noise reduction module performs noise reduction on the alarm messages with the determined alarm subjects, can remove redundancy, and screens out truly effective alarm messages, so that after the processed alarm messages are subsequently sent to the account of the person on duty to be notified, the efforts of the relevant persons using the account of the person on duty to be notified are reduced, and the efficiency of troubleshooting is accelerated.
In a specific application, for example, the alarm level may include: important alarms and secondary alarms, etc., in this embodiment, an alarm ranking rule may be preset according to an actual situation (for example, a field to which an alarm subject belongs, etc.), and according to the alarm ranking rule, it may be distinguished which alarm messages are important alarms and which alarm messages are secondary alarms.
It can be understood that, when facing a large amount of multi-surface alarm messages, the related processing personnel certainly do not want to be inundated by a large amount of alarm information which is not particularly concerned, therefore, the classification module of this embodiment performs the classification processing on the alarm messages after the noise reduction processing, can distinguish which alarm messages are important alarms and which alarm messages are secondary alarms, and can subsequently send the alarm messages of different alarm levels to the related personnel accounts in an effective manner.
In a specific application, the notification manner in this embodiment may include: e-mail (Email), Short Message Service (SMS), wechat, etc., which are not limited by the embodiment.
It can be understood that, in a specific application, the allocation module 24 of this embodiment may match the alarm time of the alarm message with the duty time corresponding to the operator on duty, obtain all the operator accounts matched with the alarm time of the alarm message after the alarm level division processing, select the operator account corresponding to the alarm level of the alarm message after the alarm level division processing from all the matched operator accounts, serve as the operator account to be notified, and determine the notification manner corresponding to the alarm level of the alarm message after the alarm level division processing. Therefore, the alarm messages with different alarm levels can be sent to the to-be-notified attendant account in an effective manner in the follow-up process, the to-be-notified attendant account only receives the alarm message with the concerned alarm level, the energy consumed by the related personnel using the to-be-notified attendant account can be greatly reduced, and the problem troubleshooting efficiency is improved.
It can be understood that, in the embodiment, the account of the attendant to be notified may only receive the alarm message of the corresponding alarm level, and may obtain the alarm level of the received alarm message, and perform an alarm processing operation on the received alarm message based on the alarm topic to which the received alarm message belongs, so as to speed up the efficiency of troubleshooting.
It can be understood that, in the system of this embodiment, after receiving the alarm messages sent by each alarm system, the alarm subject to which the alarm message belongs is determined, the noise reduction processing is performed on the alarm messages with the determined alarm subject, the ranking processing is performed on the alarm messages after the noise reduction processing, the alarm level of each alarm message after the noise reduction processing is determined, according to the alarm time and the alarm level of the alarm message and the duty time corresponding to the duty person, the alarm messages with different alarm levels, the duty person account to be notified and the notification mode are allocated, the alarm messages with different alarm levels are sent to the duty person account to be notified by using the notification mode correspondingly allocated, the redundancy can be removed by the noise reduction processing for a large number of, redundant and multi-surface alarm messages, the real effective alarm message is screened out, the alarm level of each alarm message after the noise reduction processing is determined by the ranking processing, the method distinguishes which alarm messages are important alarms and which alarm messages are secondary alarms, and sends the alarm messages with different alarm levels to the related personnel accounts in an effective way, so that the to-be-notified attendant account only receives the alarm messages with the concerned alarm levels, thereby greatly reducing the energy consumed by the related personnel using the to-be-notified attendant account and accelerating the efficiency of troubleshooting.
The alarm processing system provided by the embodiment carries out reasonable and effective notification through a series of measures such as noise reduction, grade division, allocation notification scheduling and the like, can avoid bombing notification of a honeycomb regardless of alarm severity and avoid troubles caused by unreasonable alarm messages such as indiscriminate, inappropriate, bombing and the like to related personnel, and thus, the efficiency of troubleshooting is improved.
Further, on the basis of the above embodiment, the system according to this embodiment may further include:
and the dump module is used for storing the alarm messages after the alarm grade division processing into a database by using a preset dump mode.
In a specific application, the embodiment may provide multiple dump modes such as a database, a file, an Application Program Interface (API), an Email (Email), a Short Message Service (SMS), a WeChat, and the like, and the embodiment does not limit the dump modes.
It can be understood that, in the embodiment, the preset dump manner is used to store the alarm messages after the alarm level division processing into the database, and then the alarm messages stored in the database may be read for alarm analysis and the like.
Further, on the basis of the above embodiment, the system according to this embodiment may further include:
the monitoring module is used for monitoring the account of the person on duty to be notified, which is distributed for the alarm messages with different alarm levels, in real time and carrying out alarm state after alarm processing operation on the received alarm messages;
and the second sending module is used for promoting the alarm specification of the alarm message corresponding to the alarm processing operation if the alarm processing operation is not processed within the preset first time period or the alarm processing operation is processed within the preset second time period according to the alarm state, and sending the alarm message corresponding to the alarm processing operation to the administrator account by using a corresponding notification mode.
In a specific application, the preset first time period may be specifically set according to an actual situation, and the preset first time period is not limited in this embodiment, for example, the preset first time period may be set to 1 minute, 5 minutes, or half an hour.
In a specific application, the preset second time period may be specifically set according to an actual situation, and the preset second time period is not limited in this embodiment, for example, the preset second time period may be set to be 2 minutes, 5 minutes, half an hour, or 1 hour.
It can be understood that, in this embodiment, the progress of processing is observed in real time after the alarm message is notified, and once the condition that the alarm message is not processed after overdue or not processed in time is found, the alarm specification of the current alarm message is promoted, and the current alarm message is notified to the next-level administrator account, so that the administrator account can perform the timely alarm processing operation on the current alarm message in time.
Further, on the basis of the above embodiment, the system according to this embodiment may further include:
and the recording module is used for recording the account of the person on duty to be notified distributed to the alarm messages with different alarm levels and the alarm processing operation performed on the received alarm messages in real time as historical backtracking data.
It can be understood that, in this embodiment, the duty account to be notified allocated to the alarm message with different alarm levels and each alarm processing operation performed on the received alarm message are recorded in real time as the historical backtracking data, and the alarm processing operation may include an artificial triggering operation and a non-artificial operation caused by the artificial triggering operation, so as to provide a backtracking function for the alarm afterwards.
The alarm processing system provided by the embodiment carries out reasonable and effective notification through a series of measures such as noise reduction, grade division, allocation notification scheduling and the like, can avoid bombing notification of a honeycomb regardless of alarm severity and avoid troubles to relevant personnel caused by unreasonable alarm messages such as indiscriminate, inappropriate time, bombing and the like, so as to accelerate the efficiency of troubleshooting; storing the alarm messages after alarm level division processing into a database by using a preset dump mode, and subsequently reading the alarm messages stored in the database for alarm analysis; the method comprises the steps of observing the progress condition of processing in real time after an alarm message is notified, and once the condition that the alarm message is not processed after overdue or is not processed in time is found, promoting the alarm specification of the current alarm message and notifying the current alarm message to a next-level manager account so that the manager account can timely perform alarm processing operation on the current alarm message; by recording the alarm processing operation of each step in real time, the function of backtracking the alarm after the fact is provided.
The alarm processing system provided by the embodiment of the present invention may be used to implement the technical solutions of the foregoing method embodiments, and the implementation principles and technical effects thereof are similar and will not be described herein again.
Fig. 3 is a schematic physical structure diagram of an electronic device according to an embodiment of the present invention, as shown in fig. 3, the electronic device may include a memory 302, a processor 301, a bus 303, and a computer program stored in the memory 302 and executable on the processor 301, where the processor 301 and the memory 302 communicate with each other through the bus 303. The processor 301, when executing the computer program, implements the steps of the above method, for example, including: receiving alarm messages sent by each alarm system, and determining alarm subjects to which the alarm messages belong; carrying out noise reduction processing on the alarm message with the determined alarm theme; carrying out grade division processing on the alarm messages after the noise reduction processing, and determining the alarm grade of each alarm message after the noise reduction processing; according to the alarm time and the alarm level of the alarm message and the duty time corresponding to the duty personnel, allocating duty personnel accounts to be notified and notification modes for the alarm messages with different alarm levels; sending the alarm messages with different alarm levels to the corresponding allocated watch-on account to be notified by using the corresponding allocated notification mode, wherein the alarm messages with different alarm levels comprise: the alarm subject and the alarm level to which the alarm message belongs.
An embodiment of the present invention provides a non-transitory computer-readable storage medium, on which a computer program is stored, and the computer program, when executed by a processor, implements the steps of the above method, for example, including: receiving alarm messages sent by each alarm system, and determining alarm subjects to which the alarm messages belong; carrying out noise reduction processing on the alarm message with the determined alarm theme; carrying out grade division processing on the alarm messages after the noise reduction processing, and determining the alarm grade of each alarm message after the noise reduction processing; according to the alarm time and the alarm level of the alarm message and the duty time corresponding to the duty personnel, allocating duty personnel accounts to be notified and notification modes for the alarm messages with different alarm levels; sending the alarm messages with different alarm levels to the corresponding allocated watch-on account to be notified by using the corresponding allocated notification mode, wherein the alarm messages with different alarm levels comprise: the alarm subject and the alarm level to which the alarm message belongs.
The above-described embodiments of the apparatus are merely illustrative, and the units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the present embodiment. One of ordinary skill in the art can understand and implement it without inventive effort.
Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware. With this understanding in mind, the above-described technical solutions may be embodied in the form of a software product, which can be stored in a computer-readable storage medium such as ROM/RAM, magnetic disk, optical disk, etc., and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods described in the embodiments or some parts of the embodiments.
Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.
Claims (10)
1. An alarm processing method, comprising:
receiving alarm messages sent by each alarm system, and determining alarm subjects to which the alarm messages belong;
carrying out noise reduction processing on the alarm message with the determined alarm theme;
carrying out grade division processing on the alarm messages after the noise reduction processing, and determining the alarm grade of each alarm message after the noise reduction processing;
according to the alarm time and the alarm level of the alarm message and the duty time corresponding to the duty personnel, allocating duty personnel accounts to be notified and notification modes for the alarm messages with different alarm levels;
sending the alarm messages with different alarm levels to the corresponding allocated watch-on account to be notified by using the corresponding allocated notification mode, wherein the alarm messages with different alarm levels comprise: the alarm subject and the alarm level to which the alarm message belongs.
2. The alarm processing method according to claim 1, wherein the performing noise reduction processing on the alarm message with the determined alarm topic comprises:
and merging the alarm messages of the determined alarm subjects according to the service system to which the alarm target object belongs, the alarm classification and the alarm condition in the preset time period.
3. The alarm processing method according to claim 1, wherein after the alarm messages with different alarm levels, the account of the attendant to be notified and the notification mode are allocated according to the on-duty time corresponding to the attendant and the alarm time of the alarm message, the method further comprises:
and storing the alarm messages after the alarm grade division processing into a database by using a preset dump mode.
4. The alarm processing method according to claim 1, wherein after sending the alarm messages of different alarm levels to the corresponding allocated watch-dog account to be notified by using the corresponding allocated notification manner, the method further comprises:
monitoring the account of the person on duty to be notified allocated to the alarm messages with different alarm levels in real time, and carrying out alarm state after alarm processing operation on the received alarm messages;
and if the alarm processing operation is not processed in a first preset time period or the processing time of the alarm processing operation exceeds a second preset time period according to the alarm state, the alarm specification of the alarm message corresponding to the alarm processing operation is improved, and the alarm message corresponding to the alarm processing operation is sent to an administrator account by using a corresponding notification mode.
5. The alert processing method according to claim 1, wherein the method further comprises:
recording the account of the person on duty to be notified allocated to the alarm messages with different alarm levels and the alarm processing operation performed on the received alarm messages in real time as historical backtracking data.
6. An alarm processing system, comprising:
the receiving module is used for receiving the alarm messages sent by each alarm system and determining the alarm subjects to which the alarm messages belong;
the noise reduction module is used for carrying out noise reduction processing on the alarm message with the determined alarm theme;
the dividing module is used for carrying out grade dividing processing on the alarm messages after the noise reduction processing and determining the alarm grade of each alarm message after the noise reduction processing;
the allocation module is used for allocating the account of the attendant to be notified and the notification mode for the alarm messages with different alarm levels according to the alarm time and the alarm level of the alarm message and the attendant time corresponding to the attendant;
the first sending module is used for sending the alarm messages with different alarm levels to the corresponding allocated watch-dog account to be notified by using the corresponding allocated notification mode, wherein the alarm messages with different alarm levels comprise: the alarm subject and the alarm level to which the alarm message belongs.
7. The alarm processing system of claim 6, wherein the noise reduction module is specifically configured to
And merging the alarm messages of the determined alarm subjects according to the service system to which the alarm target object belongs, the alarm classification and the alarm condition in the preset time period.
8. The alarm processing system of claim 6, wherein the system further comprises:
the monitoring module is used for monitoring the account of the person on duty to be notified, which is distributed for the alarm messages with different alarm levels, in real time and carrying out alarm state after alarm processing operation on the received alarm messages;
and the second sending module is used for promoting the alarm specification of the alarm message corresponding to the alarm processing operation if the alarm processing operation is not processed within the preset first time period or the alarm processing operation is processed within the preset second time period according to the alarm state, and sending the alarm message corresponding to the alarm processing operation to the administrator account by using a corresponding notification mode.
9. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the steps of the method according to any of claims 1 to 5 are implemented when the computer program is executed by the processor.
10. A non-transitory computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the steps of the method according to any one of claims 1 to 5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911006671.8A CN110768828A (en) | 2019-10-22 | 2019-10-22 | Alarm processing method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911006671.8A CN110768828A (en) | 2019-10-22 | 2019-10-22 | Alarm processing method and system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN110768828A true CN110768828A (en) | 2020-02-07 |
Family
ID=69332526
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911006671.8A Pending CN110768828A (en) | 2019-10-22 | 2019-10-22 | Alarm processing method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110768828A (en) |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111309565A (en) * | 2020-05-14 | 2020-06-19 | 北京必示科技有限公司 | Alarm processing method and device, electronic equipment and computer readable storage medium |
| CN113920682A (en) * | 2021-09-09 | 2022-01-11 | 天维尔信息科技股份有限公司 | Fire alarm reporting method, device and system and fire alarm acquisition terminal |
| CN114401314A (en) * | 2021-12-30 | 2022-04-26 | 苏州中科先进技术研究院有限公司 | Data information commanding and scheduling method and system based on Internet |
| CN114882681A (en) * | 2022-05-18 | 2022-08-09 | 成都商汤科技有限公司 | Work order processing method and device, electronic equipment and storage medium |
| CN114978867A (en) * | 2022-06-15 | 2022-08-30 | 中国电信股份有限公司 | Alarm notification method, device, equipment and storage medium |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102196373A (en) * | 2010-03-04 | 2011-09-21 | 新奥特（北京）视频技术有限公司 | Short message alarm system and short message alarm method |
| CN102625349A (en) * | 2012-03-09 | 2012-08-01 | 浪潮通信信息系统有限公司 | Method for processing data under alarm storm |
| WO2016049796A1 (en) * | 2014-09-29 | 2016-04-07 | 华为技术有限公司 | Method and device for alarm processing |
| CN105553750A (en) * | 2016-02-29 | 2016-05-04 | 北京英诺威尔科技股份有限公司 | Configurable warning forward-shifting method |
| CN106991033A (en) * | 2017-04-01 | 2017-07-28 | 北京蓝海讯通科技股份有限公司 | Notify method, device, server and the readable storage medium storing program for executing of alarm information |
| CN107067676A (en) * | 2017-03-09 | 2017-08-18 | 广东中安金狮科创有限公司 | Alarm event intelligently pushing processing method and processing device |
| CN107196804A (en) * | 2017-06-01 | 2017-09-22 | 国网山东省电力公司信息通信公司 | Power system terminal communication access network Centralized Alarm Monitoring system and method |
| CN109257200A (en) * | 2017-07-14 | 2019-01-22 | 北京京东尚科信息技术有限公司 | The method and apparatus of big data platform monitoring |
-
2019
- 2019-10-22 CN CN201911006671.8A patent/CN110768828A/en active Pending
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102196373A (en) * | 2010-03-04 | 2011-09-21 | 新奥特（北京）视频技术有限公司 | Short message alarm system and short message alarm method |
| CN102625349A (en) * | 2012-03-09 | 2012-08-01 | 浪潮通信信息系统有限公司 | Method for processing data under alarm storm |
| WO2016049796A1 (en) * | 2014-09-29 | 2016-04-07 | 华为技术有限公司 | Method and device for alarm processing |
| CN105553750A (en) * | 2016-02-29 | 2016-05-04 | 北京英诺威尔科技股份有限公司 | Configurable warning forward-shifting method |
| CN107067676A (en) * | 2017-03-09 | 2017-08-18 | 广东中安金狮科创有限公司 | Alarm event intelligently pushing processing method and processing device |
| CN106991033A (en) * | 2017-04-01 | 2017-07-28 | 北京蓝海讯通科技股份有限公司 | Notify method, device, server and the readable storage medium storing program for executing of alarm information |
| CN107196804A (en) * | 2017-06-01 | 2017-09-22 | 国网山东省电力公司信息通信公司 | Power system terminal communication access network Centralized Alarm Monitoring system and method |
| CN109257200A (en) * | 2017-07-14 | 2019-01-22 | 北京京东尚科信息技术有限公司 | The method and apparatus of big data platform monitoring |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111309565A (en) * | 2020-05-14 | 2020-06-19 | 北京必示科技有限公司 | Alarm processing method and device, electronic equipment and computer readable storage medium |
| CN113920682A (en) * | 2021-09-09 | 2022-01-11 | 天维尔信息科技股份有限公司 | Fire alarm reporting method, device and system and fire alarm acquisition terminal |
| CN114401314A (en) * | 2021-12-30 | 2022-04-26 | 苏州中科先进技术研究院有限公司 | Data information commanding and scheduling method and system based on Internet |
| CN114882681A (en) * | 2022-05-18 | 2022-08-09 | 成都商汤科技有限公司 | Work order processing method and device, electronic equipment and storage medium |
| CN114978867A (en) * | 2022-06-15 | 2022-08-30 | 中国电信股份有限公司 | Alarm notification method, device, equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110768828A (en) | Alarm processing method and system | |
| CN107515796B (en) | Equipment abnormity monitoring processing method and device | |
| CN109257200B (en) | Method and device for monitoring big data platform | |
| US9070121B2 (en) | Approach for prioritizing network alerts | |
| US10687306B2 (en) | Intelligent throttling and notifications management for monitoring and incident management systems | |
| CN111901422B (en) | Method, system and device for managing nodes in cluster | |
| EP1973070A1 (en) | A method and system for automatic event monitoring and notification | |
| CN111258737A (en) | Resource scheduling method and device and filtering type scheduler | |
| CN112286770A (en) | Alarm notification method, device, computer equipment and storage medium | |
| CN110933172A (en) | Remote monitoring system and method based on cloud computing | |
| CN111324644A (en) | Method and device for monitoring database connection storm under large-scale micro-service architecture | |
| CN110659898A (en) | Data control method, device and storage medium | |
| CN112910733A (en) | Full link monitoring system and method based on big data | |
| CN116795643A (en) | Alarm management method | |
| CN107911229A (en) | Based reminding method, device, electronic equipment and the storage medium that operating status changes | |
| CN113760634A (en) | Data processing method and device | |
| CN111352746A (en) | Message flow limiting method and storage medium | |
| CN111628903A (en) | Monitoring method and monitoring system for transaction system running state | |
| CN109995841B (en) | Grain supervisory system | |
| CN114783121B (en) | Fault processing method, device and equipment of self-service equipment and readable storage medium | |
| CN111245708B (en) | Mail processing method and device | |
| CN117112121A (en) | Distributed task processing system, method, apparatus and computer program product | |
| EP3745650A1 (en) | Method and device for notifying event | |
| CN112004161A (en) | Processing method and device of address resources, terminal equipment and storage medium | |
| CN114338536B (en) | Scheduling method, device, equipment and medium based on block chain |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20200207 |