CN110875841A - Alarm information pushing method and device and readable storage medium - Google Patents
Alarm information pushing method and device and readable storage medium Download PDFInfo
- Publication number
- CN110875841A CN110875841A CN201811024526.8A CN201811024526A CN110875841A CN 110875841 A CN110875841 A CN 110875841A CN 201811024526 A CN201811024526 A CN 201811024526A CN 110875841 A CN110875841 A CN 110875841A
- Authority
- CN
- China
- Prior art keywords
- event
- pushing
- current
- alarm information
- determining
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/50—Network services
- H04L67/55—Push-based network services
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Telephonic Communication Services (AREA)
Abstract
According to the alarm information pushing method, the alarm information pushing device and the readable storage medium, the current event is determined according to the received alarm data; determining an event level of the current event and an event occurrence frequency of the current event; and determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event. Therefore, the pushing mode of the alarm information corresponding to the current event to be pushed can be determined according to the event level and the event occurrence frequency of the current event in the alarm information to be pushed, and the pushing is carried out, so that the pushing efficiency and the pushing accuracy are effectively improved, and the problem that operation and maintenance personnel easily omit important alarm information is solved.
Description
Technical Field
The present invention relates to computer technologies, and in particular, to a method and an apparatus for pushing alarm information, and a readable storage medium.
Background
With the rapid development of computer technology, a large number of network systems of services available to users have appeared, which are distributed among various servers. With the rapid increase of the number of servers, the monitoring of the running state of the servers becomes an indispensable link.
Generally, when a server is monitored to have a problem, alarm information is sent to an operation and maintenance system so that operation and maintenance personnel can obtain the alarm information and process the alarm information in time. However, as the number of servers increases, the alarm information will also multiply, and the alarm information pushed to the operation and maintenance system will also multiply.
Therefore, how to improve the pushing accuracy and the pushing efficiency of the alarm information becomes a difficult problem under the condition that operation and maintenance personnel do not omit important alarm information.
Disclosure of Invention
The invention provides an alarm information pushing method, an alarm information pushing device and a readable storage medium, aiming at the technical problems that operation and maintenance personnel easily omit important alarm information and the pushing accuracy and the pushing efficiency of the alarm information are not high in the existing alarm information pushing method.
In one aspect, the present invention provides a method for pushing alarm information, including:
determining a current event according to the received alarm data;
determining an event level of the current event and an event occurrence frequency of the current event;
and determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event.
In an alternative embodiment, determining the event occurrence frequency of the current event includes:
and determining the occurrence frequency of the events of the current time in a preset time period according to the historical event record so as to obtain the occurrence frequency of the events.
In an optional implementation manner, the determining, according to the event level and the event occurrence frequency of the current event, a pushing manner of the alarm information and pushing the alarm information includes:
determining a plurality of candidate push modes corresponding to the event level, wherein each candidate push mode has a different push priority;
determining the current pushing priority of the current event according to the occurrence frequency of the event, and taking a candidate pushing mode corresponding to the current pushing priority as a pushing mode for pushing the alarm information of the current event;
and pushing the alarm information by adopting the pushing mode.
In an alternative embodiment, determining the event level of the current event includes:
determining the event level of the current event according to a pre-stored event hierarchy structure;
the event hierarchy is composed of a plurality of events, and the events are connected by adopting a tree structure.
In an optional implementation manner, after determining the event level of the current event and the event occurrence frequency of the current event, the method further includes:
determining an event service line where the event level of the current event is located according to a pre-stored event hierarchy structure;
determining an upstream event of the current event on the event service line, and judging whether event occurrence frequencies of all other events which are related to the upstream event and are at the event level of the current event meet a preset frequency condition or not;
if so, taking an upstream event of the current event on the event service line as a new current event, and executing a step of determining the event level of the new current event and the event occurrence frequency of the current event; wherein the event level of the upstream event is higher than the event level of the current event;
and if not, executing the steps of determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event, determining the pushing mode of the alarm information and pushing the alarm information.
In another aspect, the present invention provides an alarm information pushing apparatus, including:
the first processing unit is used for determining a current event according to the received alarm data;
a second processing unit, configured to determine an event level of the current event and an event occurrence frequency of the current event;
and the third processing unit is used for determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event.
In one optional implementation manner, the second processing unit is specifically configured to:
and determining the occurrence frequency of the events of the current time in a preset time period according to the historical event record so as to obtain the occurrence frequency of the events.
In an optional implementation manner, the third processing unit is specifically configured to:
determining a plurality of candidate push modes corresponding to the event level, wherein each candidate push mode has a different push priority;
determining the current pushing priority of the current event according to the occurrence frequency of the event, and taking a candidate pushing mode corresponding to the current pushing priority as a pushing mode for pushing the alarm information of the current event;
and pushing the alarm information by adopting the pushing mode.
In one optional implementation manner, the second processing unit is specifically configured to:
determining the event level of the current event according to a pre-stored event hierarchy structure;
the event hierarchy is composed of a plurality of events, and the events are connected by adopting a tree structure.
In an optional implementation manner, after the second processing unit determines the event level of the current event and the event occurrence frequency of the current event, the third processing unit is further configured to determine, according to a pre-stored event hierarchy structure, an event service line where the event level of the current event is located; determining an upstream event of the current event on the event service line, and judging whether event occurrence frequencies of all other events which are related to the upstream event and are at the event level of the current event meet a preset frequency condition or not; if so, taking an upstream event of the current event on the event service line as a new current event, so that the second processing unit executes a step of determining an event level of the new current event and an event occurrence frequency of the current event; wherein the event level of the upstream event is higher than the event level of the current event; and if not, the third processing unit executes the step of determining the pushing mode of the alarm information and pushing the alarm information.
In another aspect, the present invention further provides a device for pushing alarm information, including: a memory, a processor coupled to the memory, and a computer program stored on the memory and executable on the processor,
the processor, when executing the computer program, performs the method of any of the above.
In a final aspect, the invention provides a readable storage medium comprising a program which, when run on a terminal, causes the terminal to perform a method as claimed in any one of the above.
According to the alarm information pushing method, the alarm information pushing device and the readable storage medium, the current event is determined according to the received alarm data; determining an event level of the current event and an event occurrence frequency of the current event; and determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event. Therefore, the pushing mode of the alarm information corresponding to the current event to be pushed can be determined according to the event level and the event occurrence frequency of the current event in the alarm information to be pushed, and the pushing is carried out, so that the pushing efficiency and the pushing accuracy are effectively improved, and the problem that operation and maintenance personnel easily omit important alarm information is solved.
Drawings
With the foregoing drawings in mind, certain embodiments of the disclosure have been shown and described in more detail below. These drawings and written description are not intended to limit the scope of the disclosed concepts in any way, but rather to illustrate the concepts of the disclosure to those skilled in the art by reference to specific embodiments.
FIG. 1 is a schematic diagram of a network architecture on which the present invention is based;
fig. 2 is a schematic flow chart of a method for pushing alarm information according to an embodiment of the present invention;
fig. 3 is a schematic flow chart of a method for pushing alarm information according to a second embodiment of the present invention;
fig. 4 is a schematic structural diagram of an alarm information pushing device provided in a third embodiment of the present invention;
fig. 5 is a schematic hardware structure diagram of a warning information pushing device according to a fourth embodiment of the present invention.
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and together with the description, serve to explain the principles of the disclosure.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention.
With the rapid development of computer technology, a large number of network systems of services available to users have appeared, which are distributed among various servers. With the rapid increase of the number of servers, the monitoring of the running state of the servers becomes an indispensable link.
Generally, when the alarm system monitors that a server has a problem, alarm information is sent to the operation and maintenance system so that operation and maintenance personnel can obtain and timely process the alarm information. However, as the number of servers increases, the alarm information will also multiply, and the alarm information pushed to the operation and maintenance system will also multiply.
Therefore, how to improve the pushing accuracy and the pushing efficiency of the alarm information becomes a difficult problem under the condition that operation and maintenance personnel do not omit important alarm information.
The invention provides an alarm information pushing method, an alarm information pushing device and a readable storage medium, aiming at the technical problems that operation and maintenance personnel easily omit important alarm information and the pushing accuracy and the pushing efficiency of the alarm information are not high in the existing alarm information pushing method.
It should be noted that, for better explaining the present application, fig. 1 is a schematic diagram of a network architecture on which the present invention is based, and as shown in fig. 1, an execution subject of the alarm information pushing method provided by the present invention may specifically be a pushing apparatus 1 for alarm information, where the pushing apparatus 1 for alarm information may be implemented in a hardware and/or software manner. In addition, the alarm information pushing device 1 may be specifically integrated in a server cluster where the server 2 is located, and may be used in cooperation with the server 2 in the server cluster. When the pushing device of the alarm information needs to push the alarm information, the pushing device can be in communication connection with the operation and maintenance system 3 of the pushed information in various ways.
Fig. 2 is a flowchart illustrating a method for pushing alarm information according to an embodiment of the present invention.
As shown in fig. 2, the method for pushing alarm information includes:
And 102, determining the event level of the current event and the event occurrence frequency of the current event.
And 103, determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event.
In order to solve the above-mentioned technical problems that an operation and maintenance worker easily omits important alarm information and the pushing accuracy and the pushing efficiency of the alarm information are not high with the existing method for pushing alarm information, the first embodiment provides a method for pushing alarm information, which determines a pushing mode of the alarm information according to an event level and an event occurrence frequency of a current event, and pushes the alarm information according to the pushing mode. The push mode can include various modes, such as voice push by using a telephone, push of text information or picture information by using a short message, push of various information formats by using a chat application software line, and the like.
Firstly, the alarm information pushing device can determine a current event according to the received alarm data, wherein the alarm data can be sent to the pushing device by a monitoring end in a server cluster when monitoring that the server runs abnormally, or can be sent to the pushing device by the server when the server performs self-check and finds that the server runs abnormally. The alarm data may include an abnormal object identifier and an abnormal type, and a current event may be determined according to the abnormal object identifier and the abnormal type, where the current event may be, for example, a server connectivity abnormality, a service unavailability, a service line abnormality, and the like.
Subsequently, after determining a current event, an event level of the current event and an event frequency of occurrence of the current event may also be determined.
Optionally, the pushing device has an event hierarchy pre-stored therein, and the event level of the current event may be determined according to the event hierarchy. The event hierarchy structure is composed of a plurality of events, and the events are connected by adopting a tree structure. Since a large number of servers are erected in the server cluster, and each server has a certain hierarchical relationship, in the embodiment, the event hierarchical structure can correspond to the hierarchical relationship between the servers, that is, the central server is connected with a plurality of first-level servers, and each first-level server is connected with a plurality of second-level servers. Accordingly, operation and maintenance personnel can construct an event hierarchy according to the hierarchical relationship among the servers. For example, for a service based on a certain central server, when the bearer service is abnormal, the corresponding event hierarchy is the highest level, for a first-level server, the corresponding event hierarchy when the bearer service is abnormal is the middle level, and for a second-level server, the corresponding event hierarchy when the bearer service is abnormal is the low level. By way of further example, possible events for the secondary server include, but are not limited to, a service connectivity anomaly, possible events for the primary server include, but are not limited to, a service unavailability, and possible events for the central server include, but are not limited to, a traffic line anomaly. Thus, by utilizing a pre-stored event hierarchy, the event level of the current event may be determined.
Optionally, the event occurrence frequency of the current event is determined, and specifically, the event occurrence frequency may be obtained by determining the occurrence frequency of the current event within a preset time period according to a historical event record. Specifically, for each determined current event, the alarm information pushing method can record the occurrence time of the current event, and meanwhile, when the alarm information is pushed again, the pushing device can count the frequency of the current event occurring in the time period according to the preset time period so as to obtain the event occurrence frequency of the current event. Wherein, the time period can be set by operation and maintenance personnel.
And finally, determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event.
Specifically, the push device may determine a plurality of candidate push manners corresponding to the event level, wherein each candidate push manner has a different push priority; determining the current pushing priority of the current event according to the occurrence frequency of the event, and taking a candidate pushing mode corresponding to the current pushing priority as a pushing mode for pushing the alarm information of the current event; and pushing the alarm information by adopting the pushing mode.
Taking the current event as a service connection exception as an example:
first, it can be determined that the corresponding event level is low, and for the event with the low event level, it includes a plurality of candidate pushing manners, such as pushing by using chat application software, pushing by using short messages, and pushing by using phones, in order from low to high in the pushing priority. Where the push priority for chat application push is low and the push priority for push with phone push is high.
Determining the event occurrence frequency of the current event, determining the current pushing priority of the current event according to the event occurrence frequency, and taking a candidate pushing mode corresponding to the current pushing priority as a pushing mode for pushing the alarm information of the current event after determining the current pushing priority of the current event: if the current event appears once in a certain time period, namely the current push priority of the current event is low, the corresponding candidate push mode is the push of the chat application software; if the current event occurs twice within a certain time period, namely the current push priority of the current event is middle, the corresponding candidate push mode is short message push; the current event occurs ten times within a certain time period, that is, the current push priority of the current event is high, and the corresponding candidate push mode is telephone push. And finally, pushing the alarm information by adopting a determined pushing mode.
It should be noted that, if the event level of the current event is a medium level, if the current event is unavailable, the multiple candidate push modes corresponding to the current event are short message push and telephone push, that is, the candidate push mode with the push priority of medium and high; similarly, if the event level of the current event is high, if the current event is an abnormal service line, the plurality of candidate push manners corresponding to the current event are phone push, that is, the candidate push manners with high push priority.
In addition, it should be noted that when the push mode is determined, the determination conditions of the push modes are mutually exclusive, and once the telephone push is adopted, the short message push and the chat application software push cannot be adopted, so that the problem that the operation and maintenance personnel are bombarded with information due to repeated push of the same alarm information and miss other alarm information can be effectively avoided.
According to the alarm information pushing method provided by the embodiment of the invention, the current event is determined according to the received alarm data; determining an event level of the current event and an event occurrence frequency of the current event; and determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event. Therefore, the pushing mode of the alarm information corresponding to the current event to be pushed can be determined according to the event level and the event occurrence frequency of the current event in the alarm information to be pushed, and the pushing is carried out, so that the pushing efficiency and the pushing accuracy are effectively improved, and the problem that operation and maintenance personnel easily omit important alarm information is solved.
For further description of the alarm information pushing method provided by the present application, fig. 3 is a schematic flow diagram of an alarm information pushing method provided by a second embodiment of the present application.
As shown in fig. 3, the method for pushing alarm information includes:
if yes, go to step 205; if not, go to step 206.
Wherein the event level of the upstream event is higher than the event level of the current event.
And step 206, determining a pushing mode of the alarm information and pushing the alarm information of the current event according to the event level and the event occurrence frequency of the current event.
Similar to the embodiment, first, the pushing device of the alarm information may determine the current event according to the received alarm data, where the alarm data may be sent to the pushing device by a monitoring end in the server cluster when monitoring that the server is abnormally operated, or sent to the pushing device by the server when the server performs self-check and finds that the server is abnormally operated. The alarm data may include an abnormal object identifier and an abnormal type, and a current event may be determined according to the abnormal object identifier and the abnormal type, where the current event may be, for example, a server connectivity abnormality, a service unavailability, a service line abnormality, and the like.
Subsequently, after determining a current event, an event level of the current event and an event frequency of occurrence of the current event may also be determined.
Optionally, the pushing device has an event hierarchy pre-stored therein, and the event level of the current event may be determined according to the event hierarchy. The event hierarchy structure is composed of a plurality of events, and the events are connected by adopting a tree structure. Since a large number of servers are erected in the server cluster, and each server has a certain hierarchical relationship, in the embodiment, the event hierarchical structure can correspond to the hierarchical relationship between the servers, that is, the central server is connected with a plurality of first-level servers, and each first-level server is connected with a plurality of second-level servers. Accordingly, operation and maintenance personnel can construct an event hierarchy according to the hierarchical relationship among the servers. For example, for a service based on a certain central server, when the bearer service is abnormal, the corresponding event hierarchy is the highest level, for a first-level server, the corresponding event hierarchy when the bearer service is abnormal is the middle level, and for a second-level server, the corresponding event hierarchy when the bearer service is abnormal is the low level. By way of further example, possible events for the secondary server include, but are not limited to, a service connectivity anomaly, possible events for the primary server include, but are not limited to, a service unavailability, and possible events for the central server include, but are not limited to, a traffic line anomaly. Thus, by utilizing a pre-stored event hierarchy, the event level of the current event may be determined.
Optionally, the event occurrence frequency of the current event is determined, and specifically, the event occurrence frequency may be obtained by determining the occurrence frequency of the current event within a preset time period according to a historical event record. Specifically, for each determined current event, the alarm information pushing method can record the occurrence time of the current event, and meanwhile, when the alarm information is pushed again, the pushing device can count the frequency of the current event occurring in the time period according to the preset time period so as to obtain the event occurrence frequency of the current event. Wherein, the time period can be set by operation and maintenance personnel.
In contrast to the first embodiment, in the second embodiment, it is possible for the push device to process multiple alarm data simultaneously, that is, to obtain multiple current events according to multiple alarm data, and these current events can be processed in parallel synchronously.
In order to further improve the pushing efficiency of the alarm information, in the second embodiment, after the event level of the current event and the event occurrence frequency of the current event are determined, an event service line where the event level of the current event is located may also be determined according to a pre-stored event hierarchy structure.
Specifically, as described above, the upstream event of the current event can be obtained according to the pre-stored event hierarchy, and the upstream event refers to an event having a higher event level than the event level of the current event and having a direct association relationship with the current event. If the current event is a server connectivity exception, the upstream event may be a service unavailability; the current event is that service is unavailable, and the upstream event is that a service line is abnormal. That is, an event line of business consisting of server connectivity exceptions, service unavailability, and service line exceptions is available according to the event hierarchy.
And then, determining an upstream event of the current event on the event service line, and judging whether the event occurrence frequency of all other events which are related to the upstream event and are at the event level of the current event meets a preset frequency condition. Specifically, still taking the current time as an example of a server connection exception, the upstream event thereof is service unavailability, and in the event hierarchy, the service unavailability may be associated with other events such as a port connection exception and a network interrupt, which are both at the same event level as the server connection exception, i.e., both low levels. At this time, it can be determined whether the event occurrence frequencies of the two events satisfy a preset frequency condition.
If so, taking an upstream event of the current event on the event service line as a new current event, and executing a step of determining an event level of the new current event and an event occurrence frequency of the current event, wherein the event level of the upstream event is higher than the event level of the current event. That is, the service is unavailable as a new current event, and the step of determining the event level of the new current event and the event occurrence frequency of the current event, which is further included in the alert information for pushing, is returned.
And if not, executing the steps of determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event, determining the pushing mode of the alarm information and pushing the alarm information.
In the second embodiment, on the basis of the first embodiment, the alarm information is pushed in a progressive event level manner, so that the alarm information can be more accurate, and the pushing efficiency of the alarm information is effectively improved.
Fig. 4 is a schematic structural diagram of a device for pushing alarm information according to a third embodiment of the present invention, and as shown in fig. 4, the device for pushing alarm information includes:
a first processing unit 10 for determining a current event based on the received alarm data;
a second processing unit 20, configured to determine an event level of the current event and an event occurrence frequency of the current event;
and the third processing unit 30 is configured to determine a pushing manner of the alarm information and push the alarm information according to the event level and the event occurrence frequency of the current event.
Optionally, the second processing unit 20 is specifically configured to:
and determining the occurrence frequency of the events of the current time in a preset time period according to the historical event record so as to obtain the occurrence frequency of the events.
Optionally, the third processing unit 30 is specifically configured to:
determining a plurality of candidate push modes corresponding to the event level, wherein each candidate push mode has a different push priority;
determining the current pushing priority of the current event according to the occurrence frequency of the event, and taking a candidate pushing mode corresponding to the current pushing priority as a pushing mode for pushing the alarm information of the current event;
and pushing the alarm information by adopting the pushing mode.
Optionally, the second processing unit 20 is specifically configured to:
determining the event level of the current event according to a pre-stored event hierarchy structure;
the event hierarchy is composed of a plurality of events, and the events are connected by adopting a tree structure.
Optionally, after the second processing unit 20 determines the event level of the current event and the event occurrence frequency of the current event, the third processing unit 30 is further configured to determine, according to a pre-stored event hierarchy structure, an event service line where the event level of the current event is located; determining an upstream event of the current event on the event service line, and judging whether event occurrence frequencies of all other events which are related to the upstream event and are at the event level of the current event meet a preset frequency condition or not; if yes, taking an upstream event of the current event on the event service line as a new current event, so that the second processing unit 20 executes the steps of determining an event level of the new current event and an event occurrence frequency of the current event; wherein the event level of the upstream event is higher than the event level of the current event; if not, the third processing unit 30 executes the step of determining the pushing mode of the alarm information and pushing the alarm information.
It can be clearly understood by those skilled in the art that, for convenience and brevity of description, the specific working process and corresponding beneficial effects of the system described above may refer to the corresponding process in the foregoing method embodiments, and are not described herein again.
The alarm information pushing device provided by the invention determines the current event according to the received alarm data; determining an event level of the current event and an event occurrence frequency of the current event; and determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event. Therefore, the pushing mode of the alarm information corresponding to the current event to be pushed can be determined according to the event level and the event occurrence frequency of the current event in the alarm information to be pushed, and the pushing is carried out, so that the pushing efficiency and the pushing accuracy are effectively improved, and the problem that operation and maintenance personnel easily omit important alarm information is solved.
Fig. 5 is a schematic hardware structure diagram of a warning information pushing device according to a fourth embodiment of the present invention. As shown in fig. 5, the alarm information pushing apparatus includes: a memory 41, a processor 42 and a computer program stored on the memory 41 and executable on the processor 42, the processor 42 executing the method of any of the above embodiments when executing the computer program.
The present invention also provides a readable storage medium comprising a program which, when run on a terminal, causes the terminal to perform the method of any of the above embodiments.
Those of ordinary skill in the art will understand that: all or a portion of the steps of implementing the above-described method embodiments may be performed by hardware associated with program instructions. The program may be stored in a computer-readable storage medium. When executed, the program performs steps comprising the method embodiments described above; and the aforementioned storage medium includes: various media that can store program codes, such as ROM, RAM, magnetic or optical disks.
Finally, it should be noted that: the above embodiments are only used to illustrate the technical solution of the present invention, and not to limit the same; while the invention has been described in detail and with reference to the foregoing embodiments, it will be understood by those skilled in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and the modifications or the substitutions do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present invention.
Claims (12)
1. A method for pushing alarm information is characterized by comprising the following steps:
determining a current event according to the received alarm data;
determining an event level of the current event and an event occurrence frequency of the current event;
and determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event.
2. The alert information pushing method according to claim 1, wherein determining an event occurrence frequency of the current event includes:
and determining the occurrence frequency of the events of the current time in a preset time period according to the historical event record so as to obtain the occurrence frequency of the events.
3. The method for pushing alarm information according to claim 1, wherein the determining a pushing manner of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event includes:
determining a plurality of candidate push modes corresponding to the event level, wherein each candidate push mode has a different push priority;
determining the current pushing priority of the current event according to the occurrence frequency of the event, and taking a candidate pushing mode corresponding to the current pushing priority as a pushing mode for pushing the alarm information of the current event;
and pushing the alarm information by adopting the pushing mode.
4. The alert information pushing method according to any one of claims 1 to 3, wherein determining an event level of the current event includes:
determining the event level of the current event according to a pre-stored event hierarchy structure;
the event hierarchy is composed of a plurality of events, and the events are connected by adopting a tree structure.
5. The alert information pushing method according to claim 4, wherein after the determining the event level of the current event and the event occurrence frequency of the current event, further includes:
determining an event service line where the event level of the current event is located according to a pre-stored event hierarchy structure;
determining an upstream event of the current event on the event service line, and judging whether event occurrence frequencies of all other events which are related to the upstream event and are at the event level of the current event meet a preset frequency condition or not;
if so, taking an upstream event of the current event on the event service line as a new current event, and executing a step of determining the event level of the new current event and the event occurrence frequency of the current event; wherein the event level of the upstream event is higher than the event level of the current event;
and if not, executing the steps of determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event, determining the pushing mode of the alarm information and pushing the alarm information.
6. A pushing device for alarm information is characterized by comprising:
the first processing unit is used for determining a current event according to the received alarm data;
a second processing unit, configured to determine an event level of the current event and an event occurrence frequency of the current event;
and the third processing unit is used for determining a pushing mode of the alarm information and pushing the alarm information according to the event level and the event occurrence frequency of the current event.
7. The alert information pushing apparatus according to claim 6, wherein the second processing unit is specifically configured to:
and determining the occurrence frequency of the events of the current time in a preset time period according to the historical event record so as to obtain the occurrence frequency of the events.
8. The alert information pushing apparatus according to claim 6, wherein the third processing unit is specifically configured to:
determining a plurality of candidate push modes corresponding to the event level, wherein each candidate push mode has a different push priority;
determining the current pushing priority of the current event according to the occurrence frequency of the event, and taking a candidate pushing mode corresponding to the current pushing priority as a pushing mode for pushing the alarm information of the current event;
and pushing the alarm information by adopting the pushing mode.
9. The alert information pushing device according to any one of claims 6 to 8, wherein the second processing unit is specifically configured to:
determining the event level of the current event according to a pre-stored event hierarchy structure;
the event hierarchy is composed of a plurality of events, and the events are connected by adopting a tree structure.
10. The alert information pushing apparatus according to claim 9, wherein the third processing unit, after the second processing unit determines the event level of the current event and the event occurrence frequency of the current event, is further configured to determine an event service line where the event level of the current event is located according to a pre-stored event hierarchy structure; determining an upstream event of the current event on the event service line, and judging whether event occurrence frequencies of all other events which are related to the upstream event and are at the event level of the current event meet a preset frequency condition or not; if so, taking an upstream event of the current event on the event service line as a new current event, so that the second processing unit executes a step of determining an event level of the new current event and an event occurrence frequency of the current event; wherein the event level of the upstream event is higher than the event level of the current event; and if not, the third processing unit executes the step of determining the pushing mode of the alarm information and pushing the alarm information.
11. A pushing device for alarm information is characterized by comprising: a memory, a processor coupled to the memory, and a computer program stored on the memory and executable on the processor,
the processor, when executing the computer program, performs the method of any of claims 1-5.
12. A readable storage medium, characterized by comprising a program which, when run on a terminal, causes the terminal to perform the method of any one of claims 1-5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811024526.8A CN110875841A (en) | 2018-09-04 | 2018-09-04 | Alarm information pushing method and device and readable storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811024526.8A CN110875841A (en) | 2018-09-04 | 2018-09-04 | Alarm information pushing method and device and readable storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN110875841A true CN110875841A (en) | 2020-03-10 |
Family
ID=69716894
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811024526.8A Pending CN110875841A (en) | 2018-09-04 | 2018-09-04 | Alarm information pushing method and device and readable storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110875841A (en) |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112035721A (en) * | 2020-07-22 | 2020-12-04 | 大箴(杭州)科技有限公司 | Crawler cluster monitoring method and device, storage medium and computer equipment |
| CN113128902A (en) * | 2021-05-06 | 2021-07-16 | 四川大熊猫数字科技发展有限公司 | Emergency event immediate report disposal system and disposal method |
| CN113408464A (en) * | 2021-06-30 | 2021-09-17 | 深圳市商汤科技有限公司 | Behavior detection method and device, electronic equipment and storage medium |
| CN113920767A (en) * | 2021-10-22 | 2022-01-11 | 南京智慧交通信息股份有限公司 | Operation and maintenance alarming method, system, device and computer readable storage medium |
| CN114443429A (en) * | 2022-01-21 | 2022-05-06 | 苏州浪潮智能科技有限公司 | Alarm event processing method and device and computer readable storage medium |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20040133672A1 (en) * | 2003-01-08 | 2004-07-08 | Partha Bhattacharya | Network security monitoring system |
| US20090193436A1 (en) * | 2008-01-30 | 2009-07-30 | Inventec Corporation | Alarm display system of cluster storage system and method thereof |
| CN104967537A (en) * | 2015-06-30 | 2015-10-07 | 北京奇艺世纪科技有限公司 | Alarm information pushing method and device |
| CN107395392A (en) * | 2017-06-07 | 2017-11-24 | 成都视达科信息技术有限公司 | A kind of alert analysis method and system |
| US20180165142A1 (en) * | 2016-12-12 | 2018-06-14 | Vmware, Inc. | Methods and systems to identify anomalous behaving components of a distributed computing system |
-
2018
- 2018-09-04 CN CN201811024526.8A patent/CN110875841A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20040133672A1 (en) * | 2003-01-08 | 2004-07-08 | Partha Bhattacharya | Network security monitoring system |
| US20090193436A1 (en) * | 2008-01-30 | 2009-07-30 | Inventec Corporation | Alarm display system of cluster storage system and method thereof |
| CN104967537A (en) * | 2015-06-30 | 2015-10-07 | 北京奇艺世纪科技有限公司 | Alarm information pushing method and device |
| US20180165142A1 (en) * | 2016-12-12 | 2018-06-14 | Vmware, Inc. | Methods and systems to identify anomalous behaving components of a distributed computing system |
| CN107395392A (en) * | 2017-06-07 | 2017-11-24 | 成都视达科信息技术有限公司 | A kind of alert analysis method and system |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112035721A (en) * | 2020-07-22 | 2020-12-04 | 大箴(杭州)科技有限公司 | Crawler cluster monitoring method and device, storage medium and computer equipment |
| CN113128902A (en) * | 2021-05-06 | 2021-07-16 | 四川大熊猫数字科技发展有限公司 | Emergency event immediate report disposal system and disposal method |
| CN113408464A (en) * | 2021-06-30 | 2021-09-17 | 深圳市商汤科技有限公司 | Behavior detection method and device, electronic equipment and storage medium |
| CN113920767A (en) * | 2021-10-22 | 2022-01-11 | 南京智慧交通信息股份有限公司 | Operation and maintenance alarming method, system, device and computer readable storage medium |
| CN113920767B (en) * | 2021-10-22 | 2023-02-24 | 南京智慧交通信息股份有限公司 | Operation and maintenance alarming method, system, device and computer readable storage medium |
| CN114443429A (en) * | 2022-01-21 | 2022-05-06 | 苏州浪潮智能科技有限公司 | Alarm event processing method and device and computer readable storage medium |
| CN114443429B (en) * | 2022-01-21 | 2024-05-28 | 苏州浪潮智能科技有限公司 | Alarm event processing method and device and computer readable storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110875841A (en) | Alarm information pushing method and device and readable storage medium | |
| CN110661659B (en) | Alarm method, device and system and electronic equipment | |
| CN109308252B (en) | Fault positioning processing method and device | |
| CN108768710B (en) | Dynamic weight evaluation method, model and device for optical transmission network health | |
| US7504936B2 (en) | Method and apparatus for dynamically prioritize network faults based on real-time service degradation | |
| US20160342459A1 (en) | Dynamic escalation of service conditions | |
| CN109861856B (en) | Method and device for notifying system fault information, storage medium and computer equipment | |
| CN111026749B (en) | Service alarm method and device | |
| CN110620676B (en) | Fault management method and related device | |
| JP2007080035A (en) | Notification method and system for fault notification | |
| CN110650060A (en) | Processing method, equipment and storage medium for flow alarm | |
| CN111565135A (en) | Method for monitoring operation of server, monitoring server and storage medium | |
| CN108845916B (en) | Platform monitoring and alarming method, device, equipment and computer readable storage medium | |
| US11544119B2 (en) | Business rules processing framework for implementing new desired functionality in a telecommunication application | |
| CN110990245A (en) | Micro-service operation state judgment method and device based on call chain data | |
| CN109684176A (en) | A kind of report method of warning information, system and associated component | |
| CN106488416B (en) | Industry short message sending method and device | |
| CN110119314B (en) | Server calling method and device, server and storage medium | |
| CN110730087A (en) | Method and device for processing alarm storm | |
| CN113656252B (en) | Fault positioning method, device, electronic equipment and storage medium | |
| CN111262731B (en) | Alarm method, alarm device, server equipment and storage medium | |
| CN115037653B (en) | Service flow monitoring method, device, electronic equipment and storage medium | |
| US20220376971A1 (en) | Data processing method and related device | |
| CN109699041B (en) | RRU channel fault diagnosis processing method, device and computer storage medium | |
| CN113556671B (en) | Fault positioning method, device and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20200420 Address after: 310052 room 508, floor 5, building 4, No. 699, Wangshang Road, Changhe street, Binjiang District, Hangzhou City, Zhejiang Province Applicant after: Alibaba (China) Co.,Ltd. Address before: 510627 Guangdong city of Guangzhou province Whampoa Tianhe District Road No. 163 Xiping Yun Lu Yun Ping square B radio tower 13 layer self unit 01 Applicant before: Guangdong Shenma Search Technology Co.,Ltd. |
|
| TA01 | Transfer of patent application right | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20200310 |
|
| RJ01 | Rejection of invention patent application after publication |