CN112667464A - Intelligent analysis method, system and equipment for information system state - Google Patents

Intelligent analysis method, system and equipment for information system state Download PDF

Info

Publication number
CN112667464A
CN112667464A CN202011528269.9A CN202011528269A CN112667464A CN 112667464 A CN112667464 A CN 112667464A CN 202011528269 A CN202011528269 A CN 202011528269A CN 112667464 A CN112667464 A CN 112667464A
Authority
CN
China
Prior art keywords
state
information
module
intelligent analysis
prediction
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202011528269.9A
Other languages
Chinese (zh)
Inventor
宋曦
尚为良
王琼
金鑫
张磊
杨明杰
王刚
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Information Communication Co Of State Grid Gansu Electric Power Co
State Grid Gansu Electric Power Co Ltd
Original Assignee
Information Communication Co Of State Grid Gansu Electric Power Co
State Grid Gansu Electric Power Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Information Communication Co Of State Grid Gansu Electric Power Co, State Grid Gansu Electric Power Co Ltd filed Critical Information Communication Co Of State Grid Gansu Electric Power Co
Priority to CN202011528269.9A priority Critical patent/CN112667464A/en
Publication of CN112667464A publication Critical patent/CN112667464A/en
Pending legal-status Critical Current

Links

Abstract

The invention discloses an intelligent analysis method for the state of an information system, which is applied to the technical field of information system monitoring and comprises the following specific steps: acquiring data, namely acquiring an original log for analysis and extracting key fields; wherein the key field includes at least: fault factors and system current status; a model construction step, namely constructing a combined prediction model according to the mapping relation between the current state of the system and the fault factor in the key field; model training, namely inputting historical data into the constructed combined prediction model, solving a linear equation, and determining optimal combination parameters to obtain an optimal combined prediction model; and a step of predicting results, which is to input the current data into the optimal combined prediction model and output the prediction results. The invention avoids the error caused by judging the system state by manual experience and meets the requirement of monitoring the information system state.

Description

Intelligent analysis method, system and equipment for information system state
Technical Field
The invention relates to the technical field of information system monitoring, in particular to an intelligent analysis method, system and equipment for information system states.
Background
In the life cycle of the information system, the time and cost of system construction only account for a relatively small part, while the operation and maintenance of the system account for the main part of the whole time and cost, so that the information system is 'three-minute construction and seven-minute operation and maintenance', and meets the importance of the operation and maintenance of the information system; in recent years, informatization of various industries is gradually changed from information system construction to a new stage of combining construction and operation and maintenance, and the operation and maintenance technology of the information system is rapidly developed; however, in the IT operation and maintenance process, most IT staff are only in a passive and inefficient state of manual fire fighting, and can only discover and start processing when an event has occurred and caused a business impact.
In order to improve the efficiency and quality of operation and maintenance, the system operation condition is comprehensively predicted and analyzed, so that the aim of preventing and treating possible system faults in advance is fulfilled, the technical problem that the long-term stable operation of the system cannot be intelligently guaranteed at the present stage is solved, and the risk prevention and control capability of the system is improved.
Although the existing technology of IT operation and maintenance management is continuously improved, the intelligence is not high; although the technology can acquire early warning information of IT equipment, a server and network flow and even a database, the acquisition of the early warning information is also based on judgment of operation and maintenance personnel according to an original log, the judgment needs manual experience, and even some risks cannot acquire the early warning information according to the manual experience, so that the possible system faults can not be prevented and processed in advance.
Therefore, how to provide a method, a system and a device for intelligently analyzing the state of an information system without depending on manual experience is a problem that needs to be solved by those skilled in the art.
Disclosure of Invention
In view of this, the invention provides an intelligent analysis method, system and device for information system state, which constructs a linear prediction model according to the fault factor analyzed from the original log and the current state of the system, solves the model, and inputs the current data into the combined prediction model to obtain the current state of the system, thereby avoiding the error caused by judging the system state through manual experience and meeting the requirement of monitoring the state of the information system.
In order to achieve the above purpose, the invention provides the following technical scheme:
an intelligent analysis method for information system state includes the following steps:
acquiring data, namely acquiring an original log for analysis and extracting key fields; wherein the key field includes at least: fault factors and system current status;
a model construction step, namely constructing a combined prediction model according to the mapping relation between the current state of the system and the fault factor in the key field;
model training, namely inputting historical data into the constructed combined prediction model, solving a linear equation, and determining optimal combination parameters to obtain an optimal combined prediction model;
and a step of predicting results, which is to input the current data into the optimal combined prediction model and output the prediction results.
Preferably, in the above intelligent analysis method for information system status, in the step of acquiring data, a key field is extracted from an original log, and the key field is extracted chronologically and is denoted as a ═ a1,A2,A3,...,An](ii) a Wherein A isn={α1,α2,...,αn},αiIs the ithFault factor, and i ∈ [1, n ]](ii) a B is the current state of the system, B ═ beta12,...,βn]。
Preferably, in the above intelligent analysis method for the state of the information system, in the model construction step, according to the current state of the fault factor co-acting system, the linear equation of the combined prediction model is BT=AX;
Wherein alpha isijAnd indicating the index parameter corresponding to the jth fault factor at the ith moment.
Preferably, in the above intelligent analysis method for the state of the information system, in the model training step, the linear equation is solved, if no solution is available, the linearly related fault factor in the fault factors is deleted, the linear equation is reconstructed, and the solution is performed until a new solution of the linear equation is obtained, that is, the solution is the optimal combination parameter, and is recorded as (x)1,x2,...,xn)。
Preferably, in the above intelligent analysis method for information system status, the failure factors are ranked in importance, weight coefficients are assigned according to importance, and the optimal combination parameter (x)1,x2,...,xn)=(ω1x12x2,...,ωnxn)。
An information system state intelligent analysis system comprising:
the first acquisition module is used for acquiring an original log for analysis and extracting key fields; wherein the key field includes at least: fault factors and system current status;
the model construction module is used for constructing a combined prediction model according to the mapping relation between the current state of the system and the fault factor in the key field;
the model training module is used for inputting a training set into the constructed combined prediction model, solving a linear equation, and determining an optimal combined parameter to obtain an optimal combined prediction model;
and the prediction result output module is used for inputting the current data into the optimal combined prediction model and outputting the prediction result.
Preferably, in the above intelligent analysis system for information system state, the model training module includes a linear equation updating module and a solving module; the solving module judges whether the constructed combined prediction model has a solution; if the solution does not exist, the linear equation updating module deletes the fault factors with the correlation to reconstruct the linear equation; and if the solution exists, outputting the optimal combination parameter.
Preferably, in the above intelligent analysis system for information system status, the system further comprises an early warning module; and the early warning module compares the prediction result output by the prediction result output module with a preset threshold value and gives an alarm when the prediction result exceeds the threshold value range.
Preferably, in the above intelligent analysis system for information system status, the system further comprises a weight calculation module, which sorts the failure factors according to importance and assigns weight coefficients.
A computer device comprising a memory and a processor; the memory having stored thereon a computer program executable by the processor; and when the processor runs the computer program, the intelligent analysis method for the state of the information system is executed.
According to the technical scheme, compared with the prior art, the intelligent analysis method, the intelligent analysis system and the intelligent analysis equipment for the state of the information system are disclosed, a linear prediction model is constructed according to the fault factors analyzed from the original log and the current state of the system, the model is solved, and then the current data is input into the combined prediction model to obtain the current state of the system, so that errors caused by manual experience judgment of the state of the system are avoided, and the requirement of monitoring the state of the information system is met.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the provided drawings without creative efforts.
FIG. 1 is a schematic flow diagram of the overall process of the present invention;
FIG. 2 is a block diagram of the system architecture of the present invention;
FIG. 3 is a block diagram of a system according to a first embodiment of the present invention;
FIG. 4 is a block diagram of a system according to a second embodiment of the present invention;
FIG. 5 is a block diagram of a system according to a third embodiment of the present invention;
figure 6 the drawing is a block diagram of the apparatus of the invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
It is to be understood that: in the existing information system, operation and maintenance personnel can judge partial faults according to the content of an original log, but faults caused by fault factors with small relevance cannot be judged by the operation and maintenance personnel.
It can be understood that the intelligent analysis method for the state of the information system provided by the embodiment of the invention can improve the accuracy of fault prediction through the constructed combined prediction model. Referring to fig. 1, fig. 1 is a schematic flow chart of an intelligent analysis method for information system states according to an embodiment of the present invention.
The method comprises the following specific steps:
s11, a data acquisition step, namely acquiring an original log for analysis and extracting key fields; wherein, the key field at least includes: fault factors and system current status;
specifically, the failure factor may be any parameter in the original log, as long as the parameter may affect the current state of the system, that is, the failure factor;
further, the current state of the system can be classified as good, warning, and failure;
specifically, in the step of acquiring data, a key field is extracted from the original log, and the key field is extracted chronologically and is represented as a ═ a1,A2,A3,...,An](ii) a Wherein A isn={α1,α2,...,αn},αiIs the ith fault factor, and i ∈ [1, n ]](ii) a B is the current state of the system, B ═ beta12,...,βn]。
Further, the current state of the system may be divided into states of different systems, including databases, application systems, hosts, etc.
S12, constructing a model, namely constructing a combined prediction model according to the mapping relation between the current state of the system and the fault factor in the key field;
specifically, different fault factors cause faults of different subsystems, so a combined prediction model is constructed according to the mapping relation between the fault factors and the current state of the system;
further, the linear equation of the combined prediction model is BT=AX;
Wherein alpha isijAnd indicating the index parameter corresponding to the jth fault factor at the ith moment.
S13 model training, namely inputting historical data into the constructed combined prediction model, solving a linear equation, and determining optimal combination parameters to obtain an optimal combined prediction model;
further, in the step of model training, the linear equation is solved, if no solution exists, the fault factors linearly related in the fault factors are deleted, the linear equation is reconstructed,and solving until a new solution of the linear equation is obtained, namely the optimal combination parameter is recorded as (x)1,x2,...,xn)。
In an optional embodiment of the invention, the fault factors are subjected to importance ranking, weight coefficients are distributed according to the importance, and the optimal combination parameter (x)1,x2,...,xn)=(ω1x12x2,...,ωnxn)。
And S14, a step of predicting results, which is to input the current data into the optimal combined prediction model and output the prediction results.
In another embodiment, an information system state intelligent analysis system is disclosed, as in fig. 2, comprising:
the first acquisition module is used for acquiring an original log for analysis and extracting key fields; wherein, the key field at least includes: fault factors and system current status;
the model construction module is used for constructing a combined prediction model according to the mapping relation between the current state of the system and the fault factors in the key fields;
the model training module is used for inputting a training set into the constructed combined prediction model, solving a linear equation, and determining optimal combination parameters to obtain an optimal combined prediction model;
and the prediction result output module is used for inputting the current data into the optimal combined prediction model and outputting the prediction result.
As shown in fig. 3, in the first embodiment of the present invention, the model training module includes a linear equation updating module and a solving module; the solving module judges whether the constructed combined prediction model has a solution; if the solution does not exist, the linear equation updating module deletes the fault factors with the correlation to reconstruct the linear equation; and if the solution exists, outputting the optimal combination parameter.
Further, in another optional embodiment two, as shown in fig. 4, the system further includes an early warning module; and the early warning module compares the prediction result output by the prediction result output module with a preset threshold value and gives an alarm when the prediction result exceeds the threshold value range.
In another optional third embodiment, as shown in fig. 5, a weight calculation module is further included, which sorts the failure factors according to importance and assigns weight coefficients.
Optionally, an optional hardware structure of the information system state intelligent analysis system may be as shown in fig. 6, where fig. 6 is a structural diagram of an information system state intelligent analysis system provided in an embodiment of the present invention, and includes: at least one processor 01, at least one communication interface 02, at least one memory 03 and at least one communication bus 04;
in the embodiment of the present invention, the processor 01, the communication interface 02, and the memory 03 complete mutual communication through the communication bus 04;
processor 01 may be a central processing unit CPU, or an Application Specific Integrated Circuit (ASIC), or one or more Integrated circuits configured to implement an embodiment of the invention.
The memory 03 may comprise a high-speed RAM memory and may further comprise a non-volatile memory, such as at least one disk memory.
The memory 03 stores a program, and the processor 01 calls the program stored in the memory 03 to execute the intelligent analysis method for the information system state provided by the embodiment of the invention.
The embodiments in the present description are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other. The device disclosed by the embodiment corresponds to the method disclosed by the embodiment, so that the description is simple, and the relevant points can be referred to the method part for description.
The previous description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (10)

1. An intelligent analysis method for the state of an information system is characterized by comprising the following specific steps:
acquiring data, namely acquiring an original log for analysis and extracting key fields; wherein the key field includes at least: fault factors and system current status;
a model construction step, namely constructing a combined prediction model according to the mapping relation between the current state of the system and the fault factor in the key field;
model training, namely inputting historical data into the constructed combined prediction model, solving a linear equation, and determining optimal combination parameters to obtain an optimal combined prediction model;
and a step of predicting results, which is to input the current data into the optimal combined prediction model and output the prediction results.
2. The intelligent analysis method for the state of the information system as claimed in claim 1, wherein in the step of acquiring data, key fields are extracted from the original log, and the key fields are extracted in time sequence and are represented as a ═ a1,A2,A3,...,An](ii) a Wherein A isn={α1,α2,...,αn},αiIs the ith fault factor, and i ∈ [1, n ]](ii) a B is the current state of the system, B ═ beta12,...,βn]。
3. The intelligent analysis method for the state of the information system as claimed in claim 2, wherein in the model construction step, the linear equation of the combined prediction model is B according to the current state of the fault factor co-acting systemT=AX;
Wherein alpha isijAnd indicating the index parameter corresponding to the jth fault factor at the ith moment.
4. The intelligent analysis method for the state of the information system as claimed in claim 3, wherein in the model training step, the linear equation is solved, if no solution is available, the linearly related fault factors in the fault factors are deleted, the linear equation is reconstructed, and the solution is carried out until a new solution of the linear equation is obtained, namely the optimal combination parameter is recorded as (x)1,x2,...,xn)。
5. The intelligent analysis method for the state of information system as claimed in claim 4, wherein the failure factors are ranked in importance, weight coefficients are assigned according to importance, and the optimal combination parameter (x) is1,x2,…,xn)=(ω1x12x2,...,ωnxn)。
6. An intelligent analysis system for the status of an information system, comprising:
the first acquisition module is used for acquiring an original log for analysis and extracting key fields; wherein the key field includes at least: fault factors and system current status;
the model construction module is used for constructing a combined prediction model according to the mapping relation between the current state of the system and the fault factor in the key field;
the model training module is used for inputting a training set into the constructed combined prediction model, solving a linear equation, and determining an optimal combined parameter to obtain an optimal combined prediction model;
and the prediction result output module is used for inputting the current data into the optimal combined prediction model and outputting the prediction result.
7. The intelligent analysis system of information system state as claimed in claim 6, wherein the model training module comprises a linear equation updating module and a solving module; the solving module judges whether the constructed combined prediction model has a solution; if the solution does not exist, the linear equation updating module deletes the fault factors with the correlation to reconstruct the linear equation; and if the solution exists, outputting the optimal combination parameter.
8. The intelligent analysis system for the state of the information system as claimed in claim 6, further comprising an early warning module; and the early warning module compares the prediction result output by the prediction result output module with a preset threshold value and gives an alarm when the prediction result exceeds the threshold value range.
9. The intelligent analysis system for the state of the information system as claimed in claim 6, further comprising a weight calculation module for sorting the failure factors according to the importance and assigning weight coefficients.
10. A computer device comprising a memory and a processor; the memory having stored thereon a computer program executable by the processor; the processor, when executing the computer program, performs the method for intelligent analysis of information system state as claimed in any one of claims 1-5.
CN202011528269.9A 2020-12-22 2020-12-22 Intelligent analysis method, system and equipment for information system state Pending CN112667464A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011528269.9A CN112667464A (en) 2020-12-22 2020-12-22 Intelligent analysis method, system and equipment for information system state

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011528269.9A CN112667464A (en) 2020-12-22 2020-12-22 Intelligent analysis method, system and equipment for information system state

Publications (1)

Publication Number Publication Date
CN112667464A true CN112667464A (en) 2021-04-16

Family

ID=75407601

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011528269.9A Pending CN112667464A (en) 2020-12-22 2020-12-22 Intelligent analysis method, system and equipment for information system state

Country Status (1)

Country Link
CN (1) CN112667464A (en)

Similar Documents

Publication Publication Date Title
US9378112B2 (en) Predictive alert threshold determination tool
US10797971B2 (en) Diagnostic framework in computing systems
US7082381B1 (en) Method for performance monitoring and modeling
US7617313B1 (en) Metric transport and database load
CN106209405B (en) Method for diagnosing faults and device
KR101984730B1 (en) Automatic predicting system for server failure and automatic predicting method for server failure
CN103761173A (en) Log based computer system fault diagnosis method and device
US20160055044A1 (en) Fault analysis method, fault analysis system, and storage medium
Tang et al. An integrated framework for optimizing automatic monitoring systems in large IT infrastructures
US10489711B1 (en) Method and apparatus for predictive behavioral analytics for IT operations
WO2018103453A1 (en) Network detection method and apparatus
Zhong et al. Study on network failure prediction based on alarm logs
JP2012003713A (en) Apparatus and program for detecting change in fault cause determination rule
CN112380089A (en) Data center monitoring and early warning method and system
CN112667464A (en) Intelligent analysis method, system and equipment for information system state
JP5435225B2 (en) Operation management apparatus, operation management method, and program
Jiang et al. Correlation Analysis of Alarm Data Based on Fuzzy Rule in Power Network
WO2019053767A1 (en) Log message processing system and log message processing method
US10983856B2 (en) Identifying root causes of performance issues
CN111262750B (en) Method and system for evaluating baseline model
CN111416744A (en) Method and device for monitoring and alarming on Internet line
CN112395170A (en) Intelligent fault analysis method, device, equipment and storage medium
JP2018180862A (en) Filter definition information device, program and method
CN112380759A (en) Smart meter service life prediction method based on deep learning and CoxPH model
Prasanga et al. States Prediction of Web Services Using Hidden Markov Model

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination