CN112820066B - Object-based alarm processing method, device, equipment and storage medium - Google Patents
Object-based alarm processing method, device, equipment and storage medium Download PDFInfo
- Publication number
- CN112820066B CN112820066B CN202011632657.1A CN202011632657A CN112820066B CN 112820066 B CN112820066 B CN 112820066B CN 202011632657 A CN202011632657 A CN 202011632657A CN 112820066 B CN112820066 B CN 112820066B
- Authority
- CN
- China
- Prior art keywords
- alarm
- time
- event
- alarm event
- real
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G08—SIGNALLING
- G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G08B19/00—Alarms responsive to two or more different undesired or abnormal conditions, e.g. burglary and fire, abnormal temperature and abnormal rate of flow
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Alarm Systems (AREA)
Abstract
The embodiment of the invention discloses an object-based alarm processing method, device, equipment and storage medium. The method comprises the following steps: acquiring real-time monitoring data acquired by a plurality of sensors in a monitoring area, and mapping each real-time monitoring data into at least one real-time object attribute value of each monitored object in the monitoring area; generating at least one alarm event according to the attribute values of the real-time objects and alarm configuration information respectively corresponding to the monitored objects; and identifying at least one target alarm event meeting the alarm condition in each alarm event to alarm. According to the technical scheme of the embodiment of the invention, the real-time monitoring data is objectified, an object-oriented alarm processing mode is realized, alarm configuration information can be defined on the object, and the flexibility and the accuracy of alarm are improved.
Description
Technical Field
The embodiment of the invention relates to the technical field of intelligent alarm, in particular to an object-based alarm processing method, device, equipment and storage medium.
Background
At present, the alarm technology can only give an alarm for a specific scene, for example, the alarm is given for the scenes of theft prevention, intrusion or operation failure. The alarm technology mainly focuses on detecting the change of physical environment through sensors physically, and integrates some sensors to monitor and alarm certain conditions.
The existing alarm technology has the following problems: 1. the alarm logic can not be defined by user, including the alarm scene, the object in the alarm scene and the alarm condition can not be defined by user; 2. after the alarm is generated, a plurality of repeated alarms or transient false alarms can be generated according to the time frequency; 3. after the transmission data of the sensor is interrupted and delayed, the alarm which should happen in history cannot be traced; 4. the alarm state recovery cannot be automatically monitored.
Disclosure of Invention
The embodiment of the invention provides an object-based alarm processing method, device, equipment and storage medium, which realize an object-oriented alarm processing mode by objectifying real-time monitoring data and improve the alarm accuracy.
In a first aspect, an embodiment of the present invention provides an object-based alarm processing method, including:
acquiring real-time monitoring data acquired by a plurality of sensors in a monitoring area, and mapping each real-time monitoring data into at least one real-time object attribute value of each monitored object in the monitoring area;
generating at least one alarm event according to the attribute values of the real-time objects and alarm configuration information respectively corresponding to the monitoring objects;
and identifying at least one target alarm event meeting the alarm condition in each alarm event to alarm.
In a second aspect, an embodiment of the present invention further provides an object-based alarm processing apparatus, including:
the data mapping module is used for acquiring real-time monitoring data acquired by a plurality of sensors in the monitoring area and mapping each real-time monitoring data into at least one real-time object attribute value of each monitored object in the monitoring area;
the alarm event generating module is used for generating at least one alarm event according to the attribute values of the real-time objects and the alarm configuration information respectively corresponding to the monitoring objects;
and the alarm module is used for identifying at least one target alarm event meeting the alarm condition in each alarm event and giving an alarm.
In a third aspect, an embodiment of the present invention further provides an electronic device, where the electronic device includes:
one or more processors;
a storage device to store one or more programs,
when executed by one or more processors, cause the one or more processors to implement the object-based alert processing methods provided by any of the embodiments of the present invention.
In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements the object-based alarm processing method provided in any embodiment of the present invention.
In the embodiment of the invention, real-time monitoring data acquired by a plurality of sensors in a monitoring area is acquired, and each real-time monitoring data is mapped into at least one real-time object attribute value of each monitored object in the monitoring area; generating at least one alarm event according to the attribute values of the real-time objects and alarm configuration information respectively corresponding to the monitoring objects; in each alarm event, at least one target alarm event meeting the alarm condition is identified to alarm, the problems that alarm logic cannot be customized and alarm is limited in the prior art are solved, an object-oriented alarm processing mode is realized by objectifying real-time monitoring data, alarm configuration information can be defined on an object, and the flexibility and the accuracy of alarm are improved.
Drawings
FIG. 1a is a flowchart of an object-based alarm processing method according to a first embodiment of the present invention;
FIG. 1b is a diagram illustrating the structure of object data to which embodiments of the present invention are applicable;
FIG. 1c is a schematic diagram of an object alarm configuration to which embodiments of the present invention are applicable;
FIG. 2 is a schematic structural diagram of an object-based alarm processing apparatus according to a second embodiment of the present invention;
fig. 3 is a schematic structural diagram of an electronic device in a third embodiment of the present invention.
Detailed Description
The present invention will be described in further detail with reference to the drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the invention and are not limiting of the invention. It should be further noted that, for the convenience of description, only some of the structures related to the present invention are shown in the drawings, not all of the structures.
Example one
Fig. 1a is a flowchart of an object-based alarm processing method in an embodiment of the present invention, which is applicable to an alarm situation according to monitoring data collected by a sensor, and the method can be executed by an object-based alarm processing apparatus, which can be implemented by hardware and/or software and can be generally integrated in an electronic device providing a monitoring alarm service. As shown in fig. 1a, the method comprises:
In this embodiment, the monitoring area may include at least one device to be monitored, each device to be monitored is provided with at least one sensor, and each sensor acquires data of the monitored device in real time, for example, the sensor acquires a voltage value of the electromechanical device in real time. In order to realize an object-oriented alarm mode, each device to be monitored in a monitoring area is used as a monitoring object, so that monitoring data acquired by a sensor can be used as object attributes of the monitoring object.
Optionally, the obtaining real-time monitoring data acquired by a plurality of sensors in the monitoring area, and mapping each real-time monitoring data to at least one real-time object attribute value of each monitored object in the monitoring area may include: acquiring real-time monitoring data acquired by a plurality of sensors in a monitoring area, and converting the real-time monitoring data into sub-precision monitoring data according to the sub-precision time granularity; and mapping the sub-precision monitoring data into at least one real-time object attribute value of each monitored object in the monitoring area according to the preset mapping relation between the monitoring data and the object attribute.
In this embodiment, because the monitoring data acquired by the sensors in real time is more, in order to reduce the updating speed of the monitoring data, the real-time monitoring data originally spaced by 1 second may be converted into the sub-precision monitoring data spaced by 10 seconds according to the sub-precision time granularity, for example, 10 seconds, after the real-time monitoring data acquired by all the sensors in the monitoring area is received. As shown in fig. 1b, for the real-time monitoring data collected by each sensor, a mapping relationship between the corresponding monitoring data and the object attribute is obtained, a monitored object is determined, and then the real-time monitoring data is mapped to the real-time object attribute value of the monitored object. For example, assuming that the sensor 1 and the sensor 2 are both installed on the electromechanical device 3, according to the mapping relationship, the sub-precision monitoring data of the sensor 1 and the sensor 2 are both used as the real-time object attribute values of the electromechanical device 3.
And step 120, generating at least one alarm event according to the attribute values of the real-time objects and the alarm configuration information respectively corresponding to the monitoring objects.
In this embodiment, as shown in fig. 1b, for each monitored object, different alarm configuration information may be defined in different alarm scenarios, including automatic point location alarm configuration information, object point location alarm configuration information, alarm tracing configuration information, and alarm merging configuration information, where multiple alarm event merging conditions may be defined for alarm merging configuration. The alarm entry comprises alarm information such as alarm name, alarm category and severity, and can be used for generating an alarm event.
Optionally, generating at least one alarm event according to the attribute values of the real-time objects and the alarm configuration information respectively corresponding to the monitoring objects may include: and verifying the alarm judgment logic of each alarm event configured in the alarm configuration information according to the real-time object attribute values respectively corresponding to the monitored objects, and generating the alarm event meeting the alarm judgment logic.
In this embodiment, the object point location alarm configuration information is alarm configuration information set for the monitored object, where the alarm configuration information includes at least one alarm condition defined on the monitored object, each alarm condition corresponds to one alarm judgment logic, and each alarm judgment logic may be defined by using a determination table shown in table 1. For each monitored object, after the real-time object attribute value of the monitored object is obtained, if the alarm judgment logic for determining the alarm condition is shown in table 1, the real-time object attribute value can be calculated according to each calculation expression in table 1, each calculation result is compared with the corresponding numerical value, and finally whether each comparison result meets the alarm judgment logic or not is verified. If yes, generating an alarm event according to the alarm item corresponding to the alarm condition. The alarm event may further include an alarm time (service time), an alarm event creation time (system time), and an alarm event recovery time (system time).
TABLE 1
Optionally, before identifying at least one target alarm event meeting the alarm condition among the alarm events and giving an alarm, the method may further include: and generating at least one alarm event according to the alarm configuration information of at least one target sensor in the monitoring area and the real-time monitoring data of each target sensor.
In this embodiment, the automatic point location alarm configuration information is alarm configuration information set for a specific sensor, where the automatic point location alarm configuration information may include at least one alarm condition, and each alarm condition corresponds to one alarm judgment logic. After the real-time monitoring data acquired by all the sensors in the monitoring area is acquired, the real-time monitoring data is objectified to generate an alarm event aiming at the monitored object, and whether a target sensor with automatic point position alarm configuration information exists in the monitoring area can be judged. If yes, judging whether the real-time monitoring data of each target sensor meets the alarm judgment logic corresponding to the alarm condition or not according to each alarm condition in the alarm configuration information of each target sensor, and if yes, generating an alarm event according to the alarm item corresponding to the alarm condition.
Optionally, generating at least one alarm event according to the attribute values of the real-time objects and the alarm configuration information respectively corresponding to the monitoring objects may include: when detecting that the current system time meets a periodic alarm condition, generating at least one alarm event according to the attribute values of each real-time object and alarm configuration information respectively corresponding to each monitored object;
before identifying at least one target alarm event meeting the alarm condition among the alarm events and giving an alarm, the method may further include: acquiring a historical tracing time period matched with the current system time; acquiring historical monitoring data acquired by a plurality of sensors in a monitoring area in a historical tracing time period, and mapping each historical monitoring data into at least one historical object attribute value of each monitored object in the monitoring area; and generating at least one alarm event according to the attribute values of the historical objects and the alarm configuration information respectively corresponding to the monitoring objects.
In this embodiment, the alarm calculation is periodic, for example, calculating an alarm every 5 seconds. When the current system time is detected to meet the periodic alarm condition, for example, the time interval between the current system time and the last alarm calculation time is equal to 5 seconds, the real-time object attribute value of each monitored object between the current system time and the last alarm calculation time is used as the attribute value of the real-time object to be calculated, and then at least one alarm event is generated according to the alarm configuration information corresponding to each monitored object.
In this embodiment, each piece of real-time monitoring data acquired by the sensor includes a data generation time, and when the real-time monitoring data is interrupted, delayed, or the like in the transmission process, a time difference between the time for receiving the real-time monitoring data and the generation time of the real-time monitoring data is relatively large, so that alarm calculation of the real-time monitoring data delayed to be received is omitted. In order to perform alarm calculation on both normally received and delayed received real-time monitoring data and avoid missing alarms which should occur in history, as shown in fig. 1c, when each monitoring data received from a sensor is subjected to objectification, data generation time of each monitoring data may be judged first, and if the data generation time is within effective time, for example, a time difference between the data generation time and current system time is less than or equal to an alarm calculation period, the monitoring data is mapped to a real-time object attribute value of a monitoring object; if the data generation time is not within the valid time, the monitoring data is marked as historical monitoring data and is updated to the object historical state of the monitored object. Therefore, when alarm calculation is carried out each time, the alarm calculation can be carried out on the real-time monitoring data in the real-time state of the monitored object, and the alarm calculation can also be carried out on the historical monitoring data in the historical state of the monitored object.
In this embodiment, when an alarm is calculated for the current system time, a historical trace-back time period matched with the current system time may be obtained according to a preset trace-back time window, where the trace-back start time of the historical trace-back time period = the current system time- (trace-back time window + duration), the trace-back end time = the current system time-duration, and the duration represents the duration alarm time of the previous alarm event. And then acquiring historical monitoring data acquired by each sensor in the historical tracing time period, mapping each historical monitoring data into a historical object attribute value of each monitored object in the monitoring area according to a corresponding mapping relation, and generating at least one alarm event according to the historical object attribute value and alarm configuration information corresponding to the monitored object for each monitored object.
Optionally, after generating at least one alarm event, the method may further include: and according to preset alarm event merging conditions, carrying out event merging treatment on the alarm events meeting the event merging conditions in the alarm events.
In this embodiment, each time the alarm is calculated, multiple alarm events may be generated, including: the alarm merging configuration information comprises at least one alarm merging condition, and the alarm merging configuration information comprises at least one alarm merging condition. For example, the alarm events of different monitoring objects in different levels may be combined into one alarm event of a top monitoring object, the alarm events of different monitoring objects in the same level may be combined into one alarm event, or the alarm events of the same monitoring object in the same level may be combined into one alarm event.
In this embodiment, each alarm merge condition corresponds to a merge logic, and each merge logic may be defined by using a corresponding merge table. For example, as shown in table 2, which is a merging table corresponding to merging logic of a hierarchy merging condition, according to the merging logic in table 2, different alarm events of different monitoring objects in the same hierarchy may be merged into one alarm event.
TABLE 2
It should be noted that, during each alarm calculation, if each monitoring object generates a historical alarm event, it needs to determine whether the alarm time in each historical alarm event is within the existing alarm event of the same type, if so, it is considered that the alarm event identical to the historical alarm event has been alarmed, and the historical alarm event can be discarded; if not, the historical alarm event can be reserved, and the historical alarm event and the real-time alarm event can be combined according to the corresponding alarm combination condition.
And step 130, identifying at least one target alarm event meeting the alarm condition in each alarm event to alarm.
In this embodiment, in order to avoid that the same alarm event generated by each calculation is alarmed in order to avoid the situation of performing alarm calculation periodically, that is, in order to avoid generating repeated alarms, an alarm closing duration for automatically judging whether the previous alarm is closed is set, so that the same alarm event is not alarmed any more before the previous alarm is not closed. Meanwhile, in order to avoid transient false alarm, the alarm duration is set, and when the alarm duration of the alarm event reaches the preset alarm closing time length, the alarm event is considered to be a real alarm event.
Optionally, among the alarm events, identifying at least one target alarm event that satisfies the alarm condition for alarming may include: sequentially acquiring an alarm event as a current processing alarm event, and acquiring event generation time of the current processing alarm event; in the backtracking of historical alarm events, acquiring a target historical alarm event corresponding to the current processing alarm event, and acquiring historical event generation time and alarm duration time matched with the target historical alarm event; the target historical alarm event and the current processing alarm event have the same event type, and the time difference value of the event generation time of the target historical alarm event and the current processing alarm event is less than or equal to the preset alarm closing time length; calculating the accumulated sum between the time difference and the alarm duration; if the accumulated sum exceeds the alarm closing time length, determining the current processing alarm event as a target alarm event; if the accumulated sum does not exceed the preset alarm closing time length, the accumulated sum is updated to the alarm duration of the current processing alarm event; and returning to execute the operation of sequentially acquiring one alarm event as the current alarm event processing until all the alarm events are processed.
In this embodiment, after the alarm events of the monitoring objects are obtained, the alarm events may be sequentially used as current processing alarm events for alarm identification. In the process of carrying out alarm identification on the current processing alarm event, searching the latest historical alarm event with the same type as the current processing alarm event from the historical alarm events of the monitored object, respectively obtaining the event generation time of the historical alarm event and the current processing alarm event, and calculating the time difference of the event generation time of the historical alarm event and the current processing alarm event. If the time difference is less than or equal to the preset alarm closing time length, the historical alarm event can be used as a target historical alarm event, and if the time difference is greater than the alarm closing time length, the alarm corresponding to the historical alarm event is considered to be closed, or the historical alarm event is a false alarm event. After the target historical alarm event is determined, the alarm duration matched with the target historical alarm event can be obtained, and the alarm duration and the time difference between the event generation time of the current processing alarm event and the event generation time of the target historical alarm event are accumulated. If the accumulated sum is greater than the alarm closing time, the alarm is considered to be closed, and the current processing alarm event can be used as a target alarm event to alarm; if the sum is less than or equal to the alarm closing time, the alarm is not closed, the current processing alarm event can not be repeatedly alarmed, and the sum can be updated to the alarm duration of the current processing alarm event for judging whether the next alarm event of the same type is the target alarm event.
It should be noted that after determining that the current processed alarm event is a target alarm event, the alarm duration of the current processed alarm event is updated to 0, and the alarm event recovery time of the target historical alarm event is updated.
In the embodiment of the invention, real-time monitoring data acquired by a plurality of sensors in a monitoring area is acquired, and each real-time monitoring data is mapped into at least one real-time object attribute value of each monitored object in the monitoring area; generating at least one alarm event according to the attribute values of the real-time objects and alarm configuration information respectively corresponding to the monitoring objects; in each alarm event, at least one target alarm event meeting the alarm condition is identified to alarm, so that the problems that the alarm logic cannot be defined by users and the alarm is limited in the prior art are solved, the real-time monitoring data is objectified, an object-oriented alarm processing mode is realized, the alarm configuration information can be defined on the object, and the alarm flexibility and accuracy are improved.
Example two
Fig. 2 is a schematic structural diagram of an object-based alarm processing apparatus according to a second embodiment of the present invention, which is applicable to an alarm situation according to monitoring data collected by a sensor, and the apparatus may be implemented by hardware and/or software, and may be generally integrated in an electronic device providing a monitoring alarm service. As shown in fig. 2, the apparatus includes:
the data mapping module 210 is configured to obtain real-time monitoring data acquired by a plurality of sensors in a monitoring area, and map each piece of real-time monitoring data into at least one real-time object attribute value of each monitored object in the monitoring area;
an alarm event generating module 220, configured to generate at least one alarm event according to the attribute values of the real-time objects and the alarm configuration information corresponding to the monitored objects, respectively;
and the alarm module 230 is configured to identify at least one target alarm event meeting an alarm condition among the alarm events and alarm.
In the embodiment of the invention, real-time monitoring data acquired by a plurality of sensors in a monitoring area is acquired, and each real-time monitoring data is mapped into at least one real-time object attribute value of each monitored object in the monitoring area; generating at least one alarm event according to the attribute values of the real-time objects and alarm configuration information respectively corresponding to the monitoring objects; in each alarm event, at least one target alarm event meeting the alarm condition is identified to alarm, the problems that alarm logic cannot be customized and alarm is limited in the prior art are solved, an object-oriented alarm processing mode is realized by objectifying real-time monitoring data, alarm configuration information can be defined on an object, and the flexibility and the accuracy of alarm are improved.
Optionally, the data mapping module 210 is configured to:
acquiring real-time monitoring data acquired by a plurality of sensors in a monitoring area, and converting the real-time monitoring data into sub-precision monitoring data according to the sub-precision time granularity; and mapping the sub-precision monitoring data into at least one real-time object attribute value of each monitored object in the monitoring area according to the preset mapping relation between the monitoring data and the object attribute.
Optionally, the alarm event generating module 220 is configured to:
and verifying the alarm judgment logic of each alarm event configured in the alarm configuration information according to the real-time object attribute values respectively corresponding to the monitored objects, and generating the alarm event meeting the alarm judgment logic.
Optionally, the alarm event generating module 220 is further configured to:
in each alarm event, before at least one target alarm event meeting the alarm condition is identified for alarming, at least one alarm event is generated according to the alarm configuration information of at least one target sensor in the monitoring area and the real-time monitoring data of each target sensor.
Optionally, the alarm event generating module 220 is configured to:
when detecting that the current system time meets a periodic alarm condition, generating at least one alarm event according to the attribute values of each real-time object and alarm configuration information respectively corresponding to each monitored object;
the alarm event generating module 220 is further configured to:
in each alarm event, before at least one target alarm event meeting the alarm condition is identified and an alarm is given, acquiring a historical tracing time period matched with the current system time; acquiring historical monitoring data acquired by a plurality of sensors in a monitoring area in a historical tracing time period, and mapping each historical monitoring data into at least one historical object attribute value of each monitored object in the monitoring area; and generating at least one alarm event according to the attribute values of the historical objects and the alarm configuration information respectively corresponding to the monitoring objects.
Optionally, the method further includes: and the event merging module is used for merging the alarm events meeting the event merging conditions in all the alarm events according to the preset alarm event merging conditions after at least one alarm event is generated.
Optionally, the alarm module 230 is configured to:
sequentially acquiring an alarm event as a current processing alarm event, and acquiring event generation time of the current processing alarm event;
in the backtracking of historical alarm events, acquiring a target historical alarm event corresponding to the current processing alarm event, and acquiring historical event generation time and alarm duration time matched with the target historical alarm event; the target historical alarm event and the current processing alarm event have the same event type, and the time difference value of the event generation time of the target historical alarm event and the current processing alarm event is less than or equal to the preset alarm closing time length;
calculating the accumulated sum between the time difference and the alarm duration;
if the accumulated sum exceeds the alarm closing time length, determining the current processing alarm event as a target alarm event;
if the accumulated sum does not exceed the preset alarm closing time, the accumulated sum is updated to the alarm duration of the current processing alarm event;
and returning to execute the operation of sequentially acquiring one alarm event as the current processing alarm event until the processing of all the alarm events is finished.
The object-based alarm processing device provided by the embodiment of the invention can execute the object-based alarm processing method provided by any embodiment of the invention, and has corresponding functional modules and beneficial effects of the execution method.
EXAMPLE III
Fig. 3 is a schematic structural diagram of an electronic device according to a third embodiment of the present invention. Fig. 3 illustrates a block diagram of an exemplary device 12 suitable for use in implementing embodiments of the present invention. The device 12 shown in fig. 3 is only an example and should not bring any limitations to the functionality and scope of use of the embodiments of the present invention.
As shown in FIG. 3, device 12 is in the form of a general purpose computing device. The components of device 12 may include, but are not limited to: one or more processors or processing units 16, a system memory 28, and a bus 18 that couples various system components including the system memory 28 and the processing unit 16.
The system memory 28 may include computer system readable media in the form of volatile memory, such as Random Access Memory (RAM) 30 and/or cache memory 32. Device 12 may further include other removable/non-removable, volatile/nonvolatile computer system storage media. By way of example only, storage system 34 may be used to read from and write to non-removable, nonvolatile magnetic media (not shown in FIG. 3, and commonly referred to as a "hard drive"). Although not shown in FIG. 3, a magnetic disk drive for reading from and writing to a removable, nonvolatile magnetic disk (e.g., a "floppy disk") and an optical disk drive for reading from or writing to a removable, nonvolatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to bus 18 by one or more data media interfaces. Memory 28 may include at least one program product having a set (e.g., at least one) of program modules that are configured to carry out the functions of embodiments of the invention.
A program/utility 40 having a set (at least one) of program modules 42 may be stored, for example, in memory 28, such program modules 42 including but not limited to an operating system, one or more application programs, other program modules, and program data, each of which or some combination of which may comprise an implementation of a network environment. Program modules 42 generally carry out the functions and/or methodologies of the described embodiments of the invention.
The processing unit 16 executes various functional applications and data processing by executing programs stored in the system memory 28, for example, to implement the object-based alarm processing method provided by the embodiment of the present invention, including:
acquiring real-time monitoring data acquired by a plurality of sensors in a monitoring area, and mapping each real-time monitoring data into at least one real-time object attribute value of each monitored object in the monitoring area;
generating at least one alarm event according to the attribute values of the real-time objects and alarm configuration information respectively corresponding to the monitoring objects;
and identifying at least one target alarm event meeting the alarm condition in each alarm event to alarm.
Example four
The fourth embodiment of the present invention further discloses a computer storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements an object-based alarm processing method, including:
acquiring real-time monitoring data acquired by a plurality of sensors in a monitoring area, and mapping each real-time monitoring data into at least one real-time object attribute value of each monitored object in the monitoring area;
generating at least one alarm event according to the attribute values of the real-time objects and alarm configuration information respectively corresponding to the monitoring objects;
and identifying at least one target alarm event meeting the alarm condition in each alarm event to alarm.
Computer storage media for embodiments of the present invention may take the form of any combination of one or more computer-readable media. The computer readable medium may be a computer readable signal medium or a computer readable storage medium. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.
A computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.
Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.
Computer program code for carrying out operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, smalltalk, C + +, or the like, as well as conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider).
It is to be noted that the foregoing is only illustrative of the preferred embodiments of the present invention and the technical principles employed. Those skilled in the art will appreciate that the present invention is not limited to the particular embodiments described herein, and that various obvious changes, rearrangements and substitutions will now be apparent to those skilled in the art without departing from the scope of the invention. Therefore, although the present invention has been described in greater detail by the above embodiments, the present invention is not limited to the above embodiments, and may include other equivalent embodiments without departing from the spirit of the present invention, and the scope of the present invention is determined by the scope of the appended claims.
Claims (9)
1. An object-based alarm processing method, comprising:
acquiring real-time monitoring data acquired by a plurality of sensors in a monitoring area, and mapping each real-time monitoring data into at least one real-time object attribute value of each monitored object in the monitoring area;
generating at least one alarm event according to the attribute values of the real-time objects and alarm configuration information respectively corresponding to the monitored objects;
in each alarm event, identifying at least one target alarm event meeting the alarm condition for alarming, and the method comprises the following steps:
sequentially acquiring an alarm event as a current processing alarm event, and acquiring event generation time of the current processing alarm event;
in backtracking historical alarm events, acquiring a target historical alarm event corresponding to the current processing alarm event, and acquiring historical event generation time and alarm duration time matched with the target historical alarm event; the target historical alarm event and the current processing alarm event have the same event type, and the time difference value of the event generation time of the target historical alarm event and the current processing alarm event is less than or equal to the preset alarm closing time length;
calculating an accumulated sum between the time difference and the alarm duration;
if the accumulated sum exceeds the alarm closure duration, determining the current processing alarm event as a target alarm event;
if the accumulated sum does not exceed the preset alarm closing time length, updating the accumulated sum into the alarm duration of the current processing alarm event;
and returning to execute the operation of sequentially acquiring one alarm event as the current alarm event processing until all the alarm events are processed.
2. The method of claim 1, wherein obtaining real-time monitoring data collected by a plurality of sensors in a monitored area and mapping each of the real-time monitoring data to at least one real-time object attribute value of each monitored object in the monitored area comprises:
acquiring real-time monitoring data acquired by a plurality of sensors in a monitoring area, and converting the real-time monitoring data into sub-precision monitoring data according to sub-precision time granularity;
and mapping the sub-precision monitoring data into at least one real-time object attribute value of each monitored object in the monitoring area according to a preset mapping relation between the monitoring data and the object attribute.
3. The method of claim 1, wherein generating at least one alarm event based on the property values of each of the real-time objects and alarm configuration information corresponding to each of the monitored objects, respectively, comprises:
and verifying the alarm judgment logic of each alarm event configured in the alarm configuration information according to the real-time object attribute value corresponding to each monitored object respectively, and generating the alarm event meeting the alarm judgment logic.
4. The method of claim 1, wherein prior to identifying, for each alarm event, at least one target alarm event that satisfies an alarm condition to alarm, further comprising:
and generating at least one alarm event according to the alarm configuration information of at least one target sensor in the monitoring area and the real-time monitoring data of each target sensor.
5. The method of claim 1, wherein generating at least one alarm event based on the property values of each of the real-time objects and alarm configuration information corresponding to each of the monitored objects, respectively, comprises:
when detecting that the current system time meets a periodic alarm condition, generating at least one alarm event according to the attribute values of the real-time objects and alarm configuration information respectively corresponding to the monitored objects;
before identifying at least one target alarm event meeting the alarm condition in each alarm event and alarming, the method further comprises the following steps:
acquiring a historical retroactive time period matched with the current system time;
acquiring historical monitoring data acquired by a plurality of sensors in a monitoring area in the historical tracing time period, and mapping each piece of historical monitoring data into at least one historical object attribute value of each monitored object in the monitoring area;
and generating at least one alarm event according to the attribute values of the historical objects and the alarm configuration information respectively corresponding to the monitored objects.
6. The method of any one of claims 1-5, further comprising, after generating at least one alarm event:
and according to preset alarm event merging conditions, carrying out event merging processing on the alarm events meeting the event merging conditions in the alarm events.
7. An object-based alarm handling apparatus, comprising:
the data mapping module is used for acquiring real-time monitoring data acquired by a plurality of sensors in a monitoring area and mapping each real-time monitoring data into at least one real-time object attribute value of each monitored object in the monitoring area;
the alarm event generating module is used for generating at least one alarm event according to the attribute values of the real-time objects and the alarm configuration information respectively corresponding to the monitoring objects;
the alarm module is used for identifying at least one target alarm event meeting the alarm condition in each alarm event and giving an alarm;
the alarm module is specifically configured to:
sequentially acquiring an alarm event as a current processing alarm event, and acquiring event generation time of the current processing alarm event;
in the backtracking of historical alarm events, acquiring a target historical alarm event corresponding to the current processing alarm event, and acquiring historical event generation time and alarm duration time matched with the target historical alarm event; the target historical alarm event and the current processing alarm event have the same event type, and the time difference value of the event generation time of the target historical alarm event and the current processing alarm event is less than or equal to the preset alarm closing time length;
calculating the accumulated sum between the time difference value and the alarm duration;
if the accumulated sum exceeds the alarm closing time length, determining the current processing alarm event as a target alarm event;
if the accumulated sum does not exceed the preset alarm closing time, the accumulated sum is updated to the alarm duration of the current processing alarm event;
and returning to execute the operation of sequentially acquiring one alarm event as the current processing alarm event until the processing of all the alarm events is finished.
8. An electronic device, characterized in that the device comprises:
one or more processors;
a storage device to store one or more programs,
when executed by the one or more processors, cause the one or more processors to implement the object-based alert processing method of any of claims 1-6.
9. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out the object-based alarm handling method of any one of claims 1-6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011632657.1A CN112820066B (en) | 2020-12-31 | 2020-12-31 | Object-based alarm processing method, device, equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011632657.1A CN112820066B (en) | 2020-12-31 | 2020-12-31 | Object-based alarm processing method, device, equipment and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112820066A CN112820066A (en) | 2021-05-18 |
| CN112820066B true CN112820066B (en) | 2022-12-30 |
Family
ID=75856478
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011632657.1A Active CN112820066B (en) | 2020-12-31 | 2020-12-31 | Object-based alarm processing method, device, equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112820066B (en) |
Families Citing this family (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113360359B (en) * | 2021-06-30 | 2023-04-21 | 天翼云科技有限公司 | Index abnormal data tracing method, device, equipment and storage medium |
| CN113642926B (en) * | 2021-08-31 | 2023-08-08 | 上海明略人工智能(集团)有限公司 | Method and device for risk early warning, electronic equipment and storage medium |
| CN114333256A (en) * | 2021-12-30 | 2022-04-12 | 挂号网（杭州）科技有限公司 | Event alarm method and device, electronic equipment and storage medium |
| CN114392511B (en) * | 2022-01-18 | 2023-01-10 | 昆山帝森华途工业物联网科技有限公司 | Monitoring method and host system of automatic alarm electric fire extinguishing controller |
| CN116389533A (en) * | 2023-06-06 | 2023-07-04 | 天津中新智冠信息技术有限公司 | Alarm management system and method based on Internet of things |
Family Cites Families (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JPS5690750A (en) * | 1979-12-26 | 1981-07-23 | Hitachi Ltd | Alarm device of no switching for rear defogger |
| US6286991B1 (en) * | 2000-01-12 | 2001-09-11 | Equitime, Inc. | Crown control for enhanced quadribalanced digital time displays |
| CN102014020A (en) * | 2010-11-12 | 2011-04-13 | 百度在线网络技术（北京）有限公司 | Equipment for performing network monitoring on network equipment and method thereof |
| CN105306234A (en) * | 2014-06-19 | 2016-02-03 | 中兴通讯股份有限公司 | Equipment monitoring method and device |
| CN107085593A (en) * | 2017-03-09 | 2017-08-22 | 广州中大百迅信息技术有限公司 | Environment control method and system |
| CN110084938A (en) * | 2019-04-29 | 2019-08-02 | 中铁第一勘察设计院集团有限公司 | The guard method for the anti-trailing behavior of operation of climbing to the top of a mountain is examined for subway column |
| CN110311990B (en) * | 2019-08-02 | 2021-08-20 | 大连同欣测控技术有限公司 | Configurable Internet of things data acquisition system and configuration method |
| CN111917877A (en) * | 2020-08-03 | 2020-11-10 | 上海浦东东方有线网络有限公司 | Data processing method and device for Internet of things equipment, electronic equipment and storage medium |
-
2020
- 2020-12-31 CN CN202011632657.1A patent/CN112820066B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN112820066A (en) | 2021-05-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112820066B (en) | Object-based alarm processing method, device, equipment and storage medium | |
| CN112436968B (en) | Network traffic monitoring method, device, equipment and storage medium | |
| CN113205037B (en) | Event detection method, event detection device, electronic equipment and readable storage medium | |
| CN114374565A (en) | Intrusion detection method and device for vehicle CAN network, electronic equipment and medium | |
| CN115357470B (en) | Information generation method and device, electronic equipment and computer readable medium | |
| CN113095132A (en) | Neural network-based gas field target detection and behavior identification method, system, terminal and storage medium | |
| CN114205216A (en) | Root cause positioning method and device for micro-service fault, electronic equipment and medium | |
| CN113657299A (en) | Traffic accident determination method and electronic equipment | |
| CN115034596A (en) | Risk conduction prediction method, device, equipment and medium | |
| CN114430331A (en) | Network security situation sensing method and system based on knowledge graph | |
| CN111400114A (en) | Deep recursion network-based big data computer system fault detection method and system | |
| CN111210225A (en) | State monitoring method, device, equipment and storage medium of transaction system | |
| US9207106B2 (en) | System and method for incident detection with spatiotemporal thresholds estimated via nonparametric quantile regression | |
| CN112926925A (en) | Product supervision method and device, electronic equipment and storage medium | |
| CN111784176A (en) | Data processing method, device, server and medium | |
| CN110659280B (en) | Road blocking abnormity detection method and device, computer equipment and storage medium | |
| CN111241155A (en) | Time series data abnormity detection method, device, equipment and storage medium | |
| CN116483666A (en) | Multi-source heterogeneous alarm information fusion method and system based on space-time correlation | |
| CN115146263A (en) | User account collapse detection method and device, electronic equipment and storage medium | |
| CN114445710A (en) | Image recognition method, image recognition device, electronic equipment and storage medium | |
| CN114973135A (en) | Head-shoulder-based sequential video sleep post identification method and system and electronic equipment | |
| CN112153341B (en) | Task supervision method, device and system, electronic equipment and storage medium | |
| CN112511568A (en) | Correlation analysis method, device and storage medium for network security event | |
| CN112465149A (en) | Same-city part identification method and device, electronic equipment and storage medium | |
| US10921167B1 (en) | Methods and apparatus for validating event scenarios using reference readings from sensors associated with predefined event scenarios |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |