CN113010331A

CN113010331A - Abnormal data processing method and device and computer readable storage medium

Info

Publication number: CN113010331A
Application number: CN202110272234.1A
Authority: CN
Inventors: 何林江
Original assignee: Tencent Technology Shenzhen Co Ltd
Current assignee: Tencent Technology Shenzhen Co Ltd
Priority date: 2021-03-12
Filing date: 2021-03-12
Publication date: 2021-06-22

Abstract

The embodiment of the application provides an abnormal data processing method, equipment and a computer readable storage medium; the method comprises the following steps: acquiring at least one associated object of abnormal data to be processed; sending a chat room establishing request to each associated object through a communication service object of an instant communication client; receiving confirmation creating information sent by the processing equipment corresponding to each associated object aiming at the chat room creating request, and obtaining at least one piece of confirmation creating information corresponding to at least one associated object; creating an anomalous data chat room for the at least one associated object based on the at least one confirmation creation information; and sending the abnormal data to be processed to each associated object through the abnormal data chatting room so that the processing equipment displays the sent abnormal data to be processed in a message record display frame corresponding to the abnormal data chatting room through the instant communication client, wherein the displayed abnormal data to be processed is used for triggering abnormal processing. Through the embodiment of the application, the efficiency of exception handling can be improved.

Description

Abnormal data processing method and device and computer readable storage medium

Technical Field

The present application relates to anomaly detection technology in computer network applications, and in particular, to an anomaly data processing method, device, and computer-readable storage medium.

Background

The abnormality means that an index value corresponding to the service data exceeds or is lower than an abnormal threshold value, or a difference value between the index value and a historical index value exceeds a difference threshold value, and the like; through the abnormity detection, the detected abnormal data is processed (for example, displayed and informed to relevant people) to trigger the abnormity processing, so that the stable operation of the service can be ensured, or the timeliness of the information processing can be improved.

Generally, the obtained exception data is usually displayed by a page, so that the exception monitor performs exception handling through the exception handling device based on the displayed exception data. However, in the processing process of the abnormal data, since the abnormal data is displayed through the page, the abnormal monitor cannot obtain the abnormal data in real time, and thus, the processing time of the abnormal data is poor, which results in low efficiency of the abnormal processing.

Disclosure of Invention

The embodiment of the application provides an abnormal data processing method, an abnormal data processing device, abnormal data processing equipment and a computer readable storage medium, and the abnormal data processing efficiency can be improved.

The technical scheme of the embodiment of the application is realized as follows:

the embodiment of the application provides an abnormal data processing method, which comprises the following steps:

acquiring exception data to be processed and at least one associated object corresponding to the exception data to be processed;

sending a chat room establishing request to each associated object in the at least one associated object through a communication service object of an instant communication client;

receiving confirmation creating information sent by the processing equipment corresponding to each associated object aiming at the chat room creating request, thereby obtaining at least one piece of confirmation creating information corresponding to at least one associated object;

creating an abnormal data chat room for the at least one associated object based on the at least one confirmation creation information, wherein the at least one associated object is a member of the abnormal data chat room;

and sending the abnormal data to be processed to each associated object through the abnormal data chatting room so that the processing equipment displays the sent abnormal data to be processed in a message record display frame corresponding to the abnormal data chatting room through the instant messaging client, wherein the displayed abnormal data to be processed is used for triggering abnormal processing.

The embodiment of the present application further provides an abnormal data processing method, including:

responding to a chat room establishing request sent by a detection device through a communication service object of an instant communication client, and displaying establishing request information, wherein the chat room establishing request is initiated by the communication service object aiming at least one associated object corresponding to abnormal data to be processed;

responding to a confirmation creating operation aiming at the creating request information, and sending confirmation creating information to the detection equipment so as to enable the communication service object to create an abnormal data chatting room, wherein the at least one associated object is a member of the abnormal data chatting room;

and displaying the received to-be-processed abnormal data sent by the communication service object in a message record display frame corresponding to the abnormal data chat room created based on the confirmation creation information, wherein the displayed to-be-processed abnormal data is used for triggering abnormal processing.

An embodiment of the present application provides a detection apparatus for processing abnormal data, including:

the information acquisition module is used for acquiring the abnormal data to be processed and at least one associated object corresponding to the abnormal data to be processed;

a request sending module, configured to send a chat room creation request to each associated object in the at least one associated object through a communication service object of an instant communication client;

an information receiving module, configured to receive acknowledgement creation information sent by the processing device corresponding to each associated object in response to the chat room creation request, so as to obtain at least one piece of acknowledgement creation information corresponding to the at least one associated object;

a chat room creating module, configured to create an abnormal data chat room for the at least one associated object based on the at least one confirmation creating information, where the at least one associated object is a member of the abnormal data chat room;

and the message sending module is used for sending the abnormal data to be processed to each associated object through the abnormal data chatting room so that the processing equipment displays the sent abnormal data to be processed in a message record display frame corresponding to the abnormal data chatting room through the instant messaging client, wherein the displayed abnormal data to be processed is used for triggering abnormal processing.

In this embodiment of the application, the information obtaining module is further configured to execute the current data obtaining task and obtain data to be detected for the current data obtaining task in the data obtaining task queue, where the data obtaining task queue is each data obtaining task under a topic to be detected, and the current data obtaining task is any data obtaining task in the data obtaining task queue; acquiring an index detection task queue corresponding to the current data acquisition task; performing anomaly detection on the data to be detected based on a current index detection task in the index detection task queue to generate an anomaly message, so as to obtain the abnormal data to be processed comprising the anomaly message, wherein the current index detection task is any index detection task in the index detection task queue; and determining the index associated object corresponding to the current index detection task as the at least one associated object corresponding to the abnormal data to be processed.

In this embodiment of the application, the information obtaining module is further configured to obtain an abnormal message queue including at least one abnormal message when the detection of the data to be detected is completed based on the indicator detection task queue, so as to obtain the abnormal data to be processed including the abnormal message queue; determining at least one index detection task corresponding to the abnormal message queue from the index detection task queue; and determining an index associated object set corresponding to the at least one index detection task as the at least one associated object corresponding to the abnormal data to be processed.

In this embodiment of the present application, the information obtaining module is further configured to determine, when the detection on the execution result of the data obtaining task queue is completed, at least one obtained abnormal message queue as the to-be-processed abnormal data; and determining at least one index associated object set corresponding to each index detection task queue corresponding to the data acquisition task queue as the at least one associated object corresponding to the abnormal data to be processed.

In the embodiment of the application, the triggering mode of the current data acquisition task is any one of timing triggering, event triggering and instruction triggering; the information acquisition module is further configured to execute the current data acquisition task to acquire the to-be-detected data when the trigger mode is the timing trigger and the execution time corresponding to the current data acquisition task is reached; when the triggering mode is the event triggering and an execution event corresponding to the current data acquisition task is detected, executing the current data acquisition task to acquire the to-be-detected data; and when the triggering mode is the instruction triggering and an execution instruction corresponding to the current data acquisition task is received, executing the current data acquisition task to acquire the data to be detected.

In this embodiment of the application, the information obtaining module is further configured to perform anomaly detection on the data to be detected based on a current index detection task in the index detection task queue; when the abnormal detection result is that the data to be detected does not meet the detection condition of the current index detection task, generating the abnormal message based on at least one of an abnormal title, key detection information, abnormal detection details, the theme to be detected and a repair state; the key detection information is at least one of the detection condition, a detection task identifier and an acquisition task identifier corresponding to the current data acquisition task.

In the embodiment of the application, the detection device further comprises a chat room multiplexing module, which is used for storing the abnormal data chat room through the instant messaging client; acquiring new abnormal data to be processed and at least one new associated object corresponding to the new abnormal data to be processed; when the at least one new associated object is the same as the at least one associated object, sending the new abnormal data to be processed to the at least one associated object through the stored abnormal data chat room, so that the processing device displays the sent new abnormal data to be processed in the message record display frame corresponding to the abnormal data chat room through the instant messaging client, wherein the displayed new abnormal data to be processed is used for triggering new abnormal processing.

In the embodiment of the application, the information acquisition module is further configured to determine that a data acquisition state is a completed state based on the data to be detected; and when the data acquisition state is the finished state, generating a detection trigger instruction aiming at the data to be detected.

In this embodiment of the application, the information obtaining module is further configured to obtain, in response to the detection trigger instruction, the index detection task queue corresponding to the current data obtaining task.

In the embodiment of the present application, the detection apparatus further includes a message processing module, configured to obtain an associated chat room corresponding to the abnormal data to be processed; constructing a chat room simulation object of the associated chat room through the instant messaging client; and sending the abnormal data to be processed in a message sending mode of the associated chat room through the chat room simulation object.

An embodiment of the present application provides a processing apparatus for exception data processing, including:

the system comprises a request receiving module, a chat room establishing module and a chat room establishing module, wherein the request receiving module is used for responding to a chat room establishing request sent by a detection device through a communication service object of an instant communication client and displaying establishing request information, and the chat room establishing request is initiated by the communication service object aiming at least one associated object corresponding to abnormal data to be processed;

the information sending module is used for responding to the confirmation creating operation aiming at the creating request information and sending confirmation creating information to the detection equipment so as to enable the communication service object to create an abnormal data chatting room, wherein the at least one related object is a member of the abnormal data chatting room;

and the message display module is used for displaying the received to-be-processed abnormal data sent by the communication service object in a message record display frame corresponding to the abnormal data chat room created based on the confirmation creation information, wherein the displayed to-be-processed abnormal data is used for triggering abnormal processing.

In the embodiment of the application, the to-be-processed abnormal data comprises a detection reminding message; the processing device further comprises a state query module for responding to the detection operation aiming at the detection reminding message and displaying a detection page comprising abnormal associated data, wherein the abnormal associated data comprises at least one of a repair state, a repair object, an abnormal type and an associated abnormality.

In this embodiment of the application, the message display module is further configured to display the received new exception data to be processed in the message record display frame corresponding to the exception data chat room, where the displayed new exception data to be processed is used to trigger new exception processing.

An embodiment of the present application provides a detection device for processing abnormal data, including:

a first memory for storing executable instructions;

and the first processor is used for realizing the abnormal data processing method applied to the detection equipment when the executable instructions stored in the first memory are executed.

An embodiment of the present application provides a processing device for exception data processing, including:

a second memory for storing executable instructions;

and the second processor is used for realizing the abnormal data processing method applied to the processing equipment when the executable instructions stored in the second memory are executed.

The embodiment of the application provides a computer-readable storage medium, which stores executable instructions and is used for realizing an abnormal data processing method of application and detection equipment when being executed by a first processor; or the abnormal data processing method applied to the processing equipment is realized when the second processor executes the abnormal data processing method.

The embodiment of the application has at least the following beneficial effects: when the detection device obtains the at least one associated object corresponding to the abnormal data to be processed, a chat room is created for the at least one associated object, the abnormal data to be processed is sent to the at least one associated object through the chat room, and the at least one associated object can obtain the abnormal data to be processed in real time, so that the processing time of the abnormal data is high, the abnormal processing can be triggered quickly, and the efficiency of the abnormal processing can be improved.

Drawings

FIG. 1 is a schematic diagram of an exemplary exception handling;

FIG. 2 is an alternative architectural diagram of an exception data handling system provided by an embodiment of the present application;

FIG. 3 is a block diagram of an alternative architecture for an exception data handling system according to an embodiment of the present application;

fig. 4 is a schematic structural diagram of a server in fig. 2 according to an embodiment of the present disclosure;

fig. 5 is a schematic structural diagram of a terminal in fig. 2 according to an embodiment of the present disclosure;

FIG. 6 is a schematic flow chart diagram illustrating an alternative method for processing exception data according to an embodiment of the present disclosure;

FIG. 7 is a diagram illustrating exemplary exception data to be processed according to an embodiment of the present application;

FIG. 8 is a schematic flow chart illustrating a process of acquiring exception data to be processed and at least one associated object according to an embodiment of the present application;

FIG. 9 is a schematic diagram illustrating an exemplary record of execution of a data capture task according to an embodiment of the present application;

FIG. 10 is a diagram illustrating an exemplary task corresponding to a topic to be detected according to an embodiment of the present application;

FIG. 11 is a schematic flow chart diagram illustrating an alternative method for exception data handling according to an embodiment of the present application;

FIG. 12 is a diagram illustrating an exemplary sending of exception data to be processed according to an embodiment of the present application;

FIG. 13 is a schematic diagram of an exemplary exception data processing flow provided by an embodiment of the present application;

FIG. 14 is a diagram illustrating an exemplary display page of exception data to be processed according to an embodiment of the present application;

FIG. 15 is a schematic diagram illustrating another exemplary display page of exception data to be processed according to an embodiment of the present application;

FIG. 16 is a schematic diagram of an exemplary self-test page provided by an embodiment of the present application;

FIG. 17 is a schematic diagram of another exemplary self-test page provided by an embodiment of the present application;

fig. 18 is a schematic diagram of an exemplary exception data processing flow provided in an embodiment of the present application.

Detailed Description

In order to make the objectives, technical solutions and advantages of the present application clearer, the present application will be described in further detail with reference to the attached drawings, the described embodiments should not be considered as limiting the present application, and all other embodiments obtained by a person of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

In the following description, reference is made to "some embodiments" which describe a subset of all possible embodiments, but it is understood that "some embodiments" may be the same subset or different subsets of all possible embodiments, and may be combined with each other without conflict.

In the following description, references to the terms "first", "second", and the like are only used for distinguishing similar objects and do not denote a particular order or importance, but rather the terms "first", "second", and the like may be used interchangeably with the order of priority or the order in which they are expressed, where permissible, to enable embodiments of the present application described herein to be practiced otherwise than as specifically illustrated and described herein.

Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein is for the purpose of describing embodiments of the present application only and is not intended to be limiting of the application.

Before further detailed description of the embodiments of the present application, terms and expressions referred to in the embodiments of the present application will be described, and the terms and expressions referred to in the embodiments of the present application will be used for the following explanation.

1) Hook (Hook), a message interception mechanism, used to detect various event messages in the system or process, intercept the messages sent to the target window and process them; such as detecting logs, intercepting keyboard, mouse inputs, etc.

2) IM (Instant messenger, or real-time messenger), a real-time messaging service tool that establishes private chat rooms over a network.

3) An index, a parameter that measures a target; such as success rate, time-consuming duration, resource size, failure rate, call volume, etc.

4) CGI (Common Gateway Interface) is a specification of an external program when a Web server operates, and a CGI application program can interact with a browser and also communicate with an external data source such as a database server through a data application program Interface to acquire data from a database service. In the embodiment of the present application, manual triggering may be implemented by a CGI.

5) Block Chain (Block Chain): is the storage structure of an encrypted, chained transaction formed by blocks (blocks).

6) Block Chain Network (Block Chain Network): the new block is incorporated into the set of a series of nodes of the block chain in a consensus manner.

7) The operation is a manner for triggering the device to execute processing, such as a click operation, a double-click operation, a long-press operation, a sliding operation, a gesture operation, a received trigger instruction, and the like; in addition, various operations in the embodiments of the present application may be a single operation or may be a collective term for a plurality of operations.

8) In response to the condition or state on which the process being performed depends being indicated, the one or more operations being performed may be in real time or may have a set delay when the dependent condition or state is satisfied; there is no restriction on the order of execution of the operations performed unless otherwise specified.

Generally, for the obtained abnormal data, a page is usually used for displaying or a related person is notified by an email. When a page is used to display abnormal data, for example, referring to fig. 1, fig. 1 is an exemplary abnormal information processing diagram; as shown in fig. 1, the data acquisition module 1-1 implements data distributed storage by using a database 1-11 (e.g., an "Hbase" file database); the data processing module 1-2 comprises index data acquisition 1-21 and index summary calculation 1-22; the data monitoring module 1-3 comprises a data updating decision module 1-31 and a data file packaging module 1-32; the data updating module 1-4 comprises a subscription relationship maintenance module 1-41, a configuration data caching module 1-42 and an updating data pushing module 1-43; the data processing module 1-2 and the data monitoring module 1-3 interact with each other by using a Message queue (for example, a Java Message Service (JMS) Message queue); the data updating module 1-4 and the graph display module 1-5 adopt a network Socket (Web Socket) protocol to realize the instant push of data; here, the data acquisition module 1-1, the data processing module 1-2, the data monitoring module 1-3, the data updating module 1-4 and the graphic display module 1-5 interact with each other to realize that the information data is displayed on a page (for example, a web monitoring page) when the new data arrives. However, when the page is adopted to display the abnormal data, the processing efficiency (notification efficiency) of the abnormal data is low; the reason is that some indexes need to be monitored all the time, related people cannot stare at the page all the time, and the index monitoring information displayed by the page cannot be sent to corresponding account numbers of the related people in real time, so that an abnormal monitor cannot obtain the index monitoring information in real time, and therefore, the abnormal data processing efficiency is low, and the abnormal processing efficiency is low.

In addition, for the obtained abnormal data, when related personnel are notified through an email, when multiple personnel are involved, notification needs to be performed one by one, the complexity is high, and the real-time performance is low, so that the efficiency of abnormal processing is low.

Based on this, embodiments of the present application provide an exception data processing method, apparatus, device, and computer-readable storage medium, which can improve exception handling efficiency.

The following describes an exemplary application of the detection device and the processing device for abnormal data processing provided by the embodiments of the present application, and the detection device and the processing device provided by the embodiments of the present application can be implemented as various types of user terminals such as a notebook computer, a tablet computer, a desktop computer, a set-top box, a mobile device (e.g., a mobile phone, a portable music player, a personal digital assistant, a dedicated messaging device, and a portable game device), and can also be implemented as a server. In the following, an exemplary application will be explained when the detection device is implemented as a server and the processing device as a terminal.

Referring to fig. 2, fig. 2 is an alternative architecture diagram of an exception data processing system provided in the embodiment of the present application; as shown in fig. 2, in order to support an abnormal data processing application, in the abnormal data processing system 100, the terminal 200 (processing device, illustratively, the terminal 200-1 and the terminal 200-2) is connected to the server 400 (detection device) through the network 300, and the network 300 may be a wide area network or a local area network, or a combination of the two; the abnormal data processing system further includes a database 400-1, configured to provide data support for the server 400 when the server 400 performs abnormality detection.

The server 400 is configured to obtain exception data to be processed and at least one associated object corresponding to the exception data to be processed; sending a chat room establishing request to each associated object in at least one associated object through a communication service object of an instant communication client; receiving confirmation creation information sent by the terminal 200 corresponding to each associated object according to the chat room creation request, thereby obtaining at least one confirmation creation information corresponding to at least one associated object; creating an abnormal data chat room aiming at least one associated object based on at least one piece of confirmation creating information, wherein at least one associated object is a member of the abnormal data chat room; sending the to-be-processed abnormal data to each associated object through the abnormal data chatting room, so that the terminal 200 displays the sent to-be-processed abnormal data in a message record display frame corresponding to the abnormal data chatting room through the instant messaging client, wherein the displayed to-be-processed abnormal data is used for triggering abnormal processing.

The terminal 200 is configured to respond to a chat room creation request sent by the server 400 through a communication service object of the instant messaging client, and display creation request information, where the chat room creation request is initiated by the communication service object for at least one associated object corresponding to the abnormal data to be processed; in response to the confirmation creation operation for the creation request information, sending confirmation creation information to the server 400 through the network 300 to cause the communication service object to create an abnormal data chat room, wherein at least one associated object is a member of the abnormal data chat room; and displaying the received to-be-processed abnormal data sent by the communication service object in a message record display frame corresponding to the abnormal data chat room created based on the confirmation creation information, wherein the displayed to-be-processed abnormal data is used for triggering abnormal processing.

In some embodiments, the server 400 may be an independent physical server, may also be a server cluster or a distributed system formed by a plurality of physical servers, and may also be a cloud server providing basic cloud computing services such as a cloud service, a cloud database, cloud computing, a cloud function, cloud storage, a Network service, cloud communication, a middleware service, a domain name service, a security service, a CDN (Content Delivery Network), a big data and artificial intelligence platform, and the like. The terminal 200 may be, but is not limited to, a smart phone, a tablet computer, a notebook computer, a desktop computer, a smart speaker, a smart watch, and the like. The terminal and the server may be directly or indirectly connected through wired or wireless communication, and the embodiment of the present application is not limited.

The embodiment of the application can also be realized by combining a block chain technology, and the block chain is a novel application mode of computer technologies such as distributed data storage, point-to-point transmission, a consensus mechanism, an encryption algorithm and the like. The blockchain is essentially a decentralized database, which is a string of data blocks associated by using cryptography, each data block contains information of a batch of network transactions, and the information is used for verifying the validity (anti-counterfeiting) of the information and generating the next block. The blockchain may include a blockchain underlying platform, a platform product services layer, and an application services layer. For the abnormal data processing method combined with the blockchain technique provided by the embodiment of the present application, referring to fig. 3, fig. 3 is another optional architecture diagram of the abnormal data processing system provided by the embodiment of the present application. In fig. 3, to-be-processed exception data sent by detection device 401 may be received by a plurality of processing devices (processing device 601 and processing device 602 are exemplarily shown in fig. 3), and exception processing is triggered based on the to-be-processed exception data.

In some embodiments, the detection device 401 may join the blockchain network 500 as one of the nodes. The type of blockchain network 500 is flexible and may be, for example, any of a public chain, a private chain, or a federation chain. Taking a public link as an example, an electronic device of any service entity may access the blockchain network 500 without authorization, so as to serve as a common node of the blockchain network 500, for example, the processing device 601 is mapped to the common node 500-1 in the blockchain network 500, the processing device 602 is mapped to the common node 500-2 in the blockchain network 500, and the detecting device 401 is mapped to the common node 500-3 in the blockchain network 500.

Taking the blockchain network 500 as an example of a federation chain, the processing device 601, the processing device 602, and the detection device 401 may access the blockchain network 500 as nodes after obtaining authorization. The detection device 401 may perform data acquisition and detection on the device to be detected 700 by executing an intelligent contract to obtain abnormal data to be processed, and send the abnormal data to be processed to the block chain network 500 for consensus. When the consensus passes and the to-be-processed abnormal data represent that the service operation of the device to be detected 700 is abnormal, the detection device 401 is called to respectively send the to-be-processed abnormal data to the processing device 601 and the processing device 602. Therefore, the processing device 601 and the processing device 602 are processed after being identified and confirmed by a plurality of nodes in the block chain network, the influence of detection errors is avoided through an identification mechanism, and the reliability and the accuracy of abnormal data processing are further improved.

Referring to fig. 4, fig. 4 is a schematic structural diagram of a server in fig. 2 according to an embodiment of the present disclosure; the server 400 shown in fig. 4 includes: at least one first processor 410, a first memory 450, at least one first network interface 420, and a first user interface 430. The various components in the server 400 are coupled together by a first bus system 440. It is understood that the first bus system 440 is used to enable connection communications between these components. The first bus system 440 includes a power bus, a control bus, and a status signal bus in addition to a data bus. For clarity of illustration, however, the various buses are labeled as first bus system 440 in fig. 4.

The first Processor 410 may be an integrated circuit chip having Signal processing capabilities, such as a general purpose Processor, a Digital Signal Processor (DSP), or other programmable logic device, discrete gate or transistor logic device, discrete hardware components, or the like, wherein the general purpose Processor may be a microprocessor or any conventional Processor, or the like.

The first user interface 430 includes one or more first output devices 431, including one or more speakers and/or one or more visual display screens, that enable the presentation of media content. The first user interface 430 also includes one or more first input devices 432, including user interface components that facilitate user input, such as a keyboard, mouse, microphone, touch screen display, camera, other input buttons and controls.

The first memory 450 includes either volatile memory or nonvolatile memory, and may also include both volatile and nonvolatile memory. The non-volatile Memory may be a Read Only Memory (ROM), and the volatile Memory may be a Random Access Memory (RAM). The first memory 450 described in embodiments herein is intended to comprise any suitable type of memory. The first memory 450 optionally includes one or more storage devices physically located remote from the first processor 410.

In some embodiments, the first memory 450 is capable of storing data to support various operations, examples of which include programs, modules, and data structures, or subsets or supersets thereof, as exemplified below.

A first operating system 451 including system programs for processing various basic system services and performing hardware-related tasks, such as a framework layer, a core library layer, a driver layer, etc., for implementing various basic services and processing hardware-based tasks;

a first network communication module 452 for communicating to other computing devices via one or more (wired or wireless) first network interfaces 420, an exemplary first network interface 420 comprising: bluetooth, wireless-compatibility authentication (Wi-Fi), and Universal Serial Bus (USB), etc.;

a first display module 453 for enabling presentation of information (e.g., user interfaces for operating peripherals and displaying content and information) via one or more first output devices 431 (e.g., display screens, speakers, etc.) associated with the first user interface 430;

a first input processing module 454 for detecting one or more user inputs or interactions from one of the one or more first input devices 432 and translating the detected inputs or interactions.

In some embodiments, the detection apparatus for abnormal data processing provided by the embodiments of the present application may be implemented in software, and fig. 4 illustrates the detection apparatus 455 stored in the first memory 450, which may be software in the form of programs and plug-ins, and includes the following software modules: an information acquiring module 4551, a request transmitting module 4552, an information receiving module 4553, a chat room creating module 4554, a message transmitting module 4555, a chat room multiplexing module 4556, and a message processing module 4557, the functions of which will be described below.

Referring to fig. 5, fig. 5 is a schematic structural diagram of a terminal in fig. 2 according to an embodiment of the present disclosure; as shown in fig. 5, the terminal 200 includes: at least one second processor 210, a second memory 250, at least one second network interface 220, and a second user interface 230. The various components in the terminal 200 are coupled together by a second bus system 240. It is understood that the second bus system 240 is used to enable connection communication between these components. The second bus system 240 includes a power bus, a control bus, and a status signal bus in addition to the data bus. But for clarity of illustration the various buses are labeled as the second bus system 240 in figure 5.

The second processor 210 may be an integrated circuit chip having signal processing capabilities, such as a general purpose processor, a digital signal processor, or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc., wherein the general purpose processor may be a microprocessor or any conventional processor, etc.

The second user interface 230 includes one or more second output devices 231, including one or more speakers and/or one or more visual displays, that enable the presentation of media content. The second user interface 230 also includes one or more second input devices 232, including user interface components that facilitate user input, such as a keyboard, mouse, microphone, touch screen display, camera, other input buttons and controls.

The second memory 250 includes either volatile memory or nonvolatile memory, and may also include both volatile and nonvolatile memory. The nonvolatile memory may be a read-only memory, and the volatile memory may be a random access memory. The second memory 250 described in embodiments herein is intended to comprise any suitable type of memory. The second memory 250 optionally includes one or more storage devices physically located remote from the second processor 210.

In some embodiments, the second memory 250 is capable of storing data to support various operations, examples of which include programs, modules, and data structures, or subsets or supersets thereof, as exemplified below.

A second operating system 251 including system programs for processing various basic system services and performing hardware-related tasks, such as a framework layer, a core library layer, a driver layer, etc., for implementing various basic services and processing hardware-based tasks;

a second network communication module 252 for communicating to other computing devices via one or more (wired or wireless) second network interfaces 220, an exemplary second network interface 220 comprising: bluetooth, wireless compatibility authentication, universal serial bus, and the like;

a second display module 253 to enable presentation of information (e.g., a user interface for operating peripherals and displaying content and information) via one or more second output devices 231 (e.g., a display screen, speakers, etc.) associated with the second user interface 230;

a second input processing module 254 for detecting one or more user inputs or interactions from one of the one or more second input devices 232 and translating the detected inputs or interactions.

In some embodiments, the processing device for exception data processing provided by the embodiment of the present application may be implemented in software, and fig. 5 illustrates the processing device 255 stored in the second memory 250, which may be software in the form of programs and plug-ins, and includes the following software modules: a request receiving module 2551, an information transmitting module 2552, a message display module 2553, and a status query module 2554, functions of which will be described below.

In other embodiments, the apparatus provided in this embodiment may be implemented in hardware, and for example, the apparatus provided in this embodiment may be a processor in the form of a hardware decoding processor, which is programmed to execute the exception data processing method provided in this embodiment, for example, the processor in the form of the hardware decoding processor may be one or more Application Specific Integrated Circuits (ASICs), DSPs, Programmable Logic Devices (PLDs), Complex Programmable Logic Devices (CPLDs), Field Programmable Gate Arrays (FPGAs), or other electronic components.

In the following, the abnormal data processing method provided by the embodiment of the present application will be described in conjunction with exemplary applications and implementations of the server and the terminal provided by the embodiment of the present application.

Referring to fig. 6, fig. 6 is an alternative flowchart of an abnormal data processing method provided in the embodiment of the present application, and will be described with reference to the steps shown in fig. 6.

S601, the detection device obtains the abnormal data to be processed and at least one associated object corresponding to the abnormal data to be processed.

In the embodiment of the application, when the detection device detects the service in the operation process and obtains the detection result representing the abnormal operation of the service, the detection device also obtains the abnormal data to be processed. Here, the abnormality may be determined based on various index detection algorithms including an abnormality determination condition, for example, an index value corresponding to the traffic data is larger than a threshold value.

It should be noted that, since the index corresponds to the object, for example, the operation and maintenance personnel who cares about the index; therefore, when the detection device obtains the abnormal data to be processed based on the index detection algorithm, the detection device can also obtain at least one associated object corresponding to the abnormal data to be processed.

It should be further noted that the abnormal data to be processed is data with abnormal operation, where the abnormal operation may be early warning data; event data, such as notification information of related data of an event: PV (Page View ) of a certain Page is 10 ten thousand every year, and the PV increases by 10% on the same scale; and the like, which are not specifically limited in the embodiments of the present application.

S602, the detection device sends a chat room creating request to each associated object in at least one associated object through the communication service object of the instant communication client.

In the embodiment of the application, the abnormal data to be processed is a notification message used for sending to at least one associated object; thus, after obtaining the anomaly data to be processed and the at least one associated object, the detection device creates a chat room in order to send the anomaly data to be processed to the at least one associated object. The detection device runs an instant communication client, and after abnormal data to be processed is obtained, the instant communication client is called to trigger clustering processing aiming at least one associated object; and, the detection device is a clustering process performed by a communication service object of the instant communication client. Firstly, when receiving a call based on exception data to be processed and at least one associated object, an instant messaging client generates a chat room creation request, and sends the chat room creation request to each associated object in the at least one associated object through a messaging service object.

The instant messaging client is an instant messaging tool which is used for creating a chat room based on the abnormal data to be processed and the at least one associated object acquired by the detection equipment and sending the abnormal data to be processed to the at least one associated object through the chat room; that is to say, the instant messaging client is a client with an instant messaging function, and can respond to the call initiated by the detection device based on the to-be-processed abnormal data and the at least one associated object, create a chat room, and send the to-be-processed abnormal data to the at least one associated object through the chat room; and the communication service object of the instant communication client is an execution main body, such as a service number, used in the instant communication client for creating a chat room in response to a call initiated by the detection device based on the to-be-processed abnormal data and the at least one associated object, and sending the to-be-processed abnormal data to the at least one associated object through the chat room. In addition, the chat room creation request is a request for creating a chat room for at least one associated object, where the chat room may be a conversation room of two objects or a group of two or more objects, and this is not particularly limited in this embodiment of the present application.

S603, the processing device responds to the chat room establishing request sent by the detection device through the communication service object of the instant communication client and displays the establishing request information.

In the embodiment of the application, an instant messaging client is also installed on the processing equipment, and each associated object logs in the instant messaging client running on the processing equipment; after the detection device sends a chat room establishing request to each associated object in at least one associated object through the communication service object, each associated object receives the chat room establishing request through an instant communication client running on the processing device; at this time, the instant messaging client displays, in response to the chat room creation request, creation request information, such as "whether to approve entry to a certain group, yes (button), no (button)" to acquire a response operation of each associated object for creation of the chat room based on the creation request information.

It should be noted that the chat room creation request is initiated by the communication service object for at least one associated object corresponding to the abnormal data to be processed. In addition, the creation request information may include a chat room creation prompt information (e.g., some index exception group invites you to join) and a creation response control (agree to join button and disagree to join button) for the exception data to be processed and the at least one associated object.

S604, the processing device responds to the confirmation creating operation aiming at the creating request information and sends confirmation creating information to the detection device.

In the embodiment of the present application, when the user triggers an operation of agreeing to create a chat room for the creation request information, for example, when the user clicks an agreement joining button, the instant messaging client running on the processing device receives a confirmation creation operation of each associated object for the creation request information; at this time, in response to the confirmation creating operation, confirmation creating information is generated and sent to the detection device to complete the response of each associated object to the chat room creating request, so that the communication service object creates a chat room for at least one associated object, and the abnormal data chat room is also obtained. Here, the confirmation creation information may be that each associated object is transmitted to the communication service object of the detection device through even the communication client running on the processing device.

It should be noted that, when the user triggers an operation of rejecting creating a chat room for the creation request information, for example, when the user clicks a disagreement join button, the instant messaging client running on the processing device receives the creation rejection operation of each associated object for the creation request information; at this time, in response to the creation rejection operation, creation rejection information is generated and sent to the detection device to complete the response of each associated object to the chat room creation request, and at this time, the chat room creation process for at least one associated object is ended.

S605, detecting confirmation creating information sent by the communication service object of the instant communication client on the equipment according to the received chat room creating request by the processing equipment corresponding to each associated object, and obtaining at least one piece of confirmation creating information corresponding to at least one associated object.

It should be noted that, when each associated object sends the confirmation creation information to the detection device through the instant messaging client running on the processing device, the messaging service object of the instant messaging client on the detection device also receives the set formed by the confirmation creation information corresponding to each associated object, that is, at least one piece of confirmation creation information corresponding to at least one associated object. Here, the at least one association object is in one-to-one correspondence with the at least one piece of confirmation creation information.

S606, the communication service object of the instant communication client on the detection device creates an abnormal data chat room aiming at least one associated object based on at least one piece of confirmation creation information.

In the embodiment of the application, after the communication service object acquires the at least one piece of creation confirmation information, it indicates that the at least one associated object agrees to create the chat room for the abnormal data to be processed, so that the communication service object is created for the at least one associated object, and the chat room for the abnormal data is obtained.

It should be noted that at least one of the associated objects is a member of the abnormal data chat room, and the member of the abnormal data chat room further includes a communication service object.

In some embodiments, when there is an associated object sent by the instant messaging client running on the processing device as creation rejection information, and some associated objects sent by the instant messaging client running on the processing device as creation confirmation information, the messaging service object creates an abnormal data chat room only for the associated object sending the creation confirmation information, and then sends an join message of the abnormal data chat room to the associated object sending the creation rejection information again to establish an association relationship between the abnormal data chat room and the associated object sending the creation rejection information. When all the at least one associated object sends information for rejecting creation, the detection device may generate related reminding information for performing alarm processing, for example, send the reminding information to an object at a higher level than the at least one associated object, or play an alarm audio.

S607, the communication service object of the instant communication client on the detection device sends the abnormal data to be processed to each associated object through the abnormal data chat room.

In the embodiment of the application, after the communication service object completes the creation of the abnormal data chat room, the to-be-processed abnormal data can be sent to each associated object through the abnormal data chat room. Here, the sending object of the abnormal data to be processed is a communication service object; when at least one associated object is an associated object, the sent abnormal data to be processed is a message record of the associated object; and when at least one associated object is a plurality of associated objects, the sent to-be-processed abnormal data is a group message record of the associated objects.

And S608, the processing device displays the received to-be-processed abnormal data sent by the communication service object in a message record display frame corresponding to the abnormal data chat room created based on the confirmation creation information.

It should be noted that after the communication service object sends the to-be-processed exception data to each associated object, the processing device corresponding to each associated object receives the to-be-processed exception data; at this time, the instant messaging client running on the processing device displays the to-be-processed abnormal data in a message record display frame of the abnormal data chat room, so as to notify a user corresponding to at least one associated object through the displayed to-be-processed abnormal data, thereby triggering abnormal processing, such as abnormal recovery, on the to-be-processed abnormal data.

In the embodiment of the application, the creation of the abnormal data chat room can also directly create the abnormal data chat room aiming at the abnormal data to be processed and the at least one associated object when the abnormal data to be processed and the at least one associated object are obtained, so that the processing interaction of sending a chat room creation request is omitted; the embodiment of the present application is not particularly limited to this.

Referring to fig. 7, fig. 7 is a schematic diagram illustrating exemplary exception data to be processed according to an embodiment of the present application; as shown in fig. 7, the message box 7-1 of the abnormal data chat room comprises a chat room title 7-11, a message record display box 7-12 and a member 7-13; wherein, the message record display frame 7-12 is used for displaying the exception data 7-121 to be processed, and the member 7-13 is used for displaying at least one associated object 7-131 and a communication service object 7-132. In addition, a message transmission box, which is not shown in fig. 7, may be further included in the message box 7-1.

It can be understood that when the detection device obtains the at least one associated object corresponding to the abnormal data to be processed, a chat room is created for the at least one associated object, and then the abnormal data to be processed is sent to the at least one associated object through the chat room, and the at least one associated object can obtain the abnormal data to be processed in real time, so that the processing time of the abnormal data is good, and therefore, the efficiency of the abnormal processing can be improved.

Referring to fig. 8, fig. 8 is a schematic diagram of a flow of acquiring exception data to be processed and at least one associated object according to an embodiment of the present application; as shown in fig. 8, in the embodiment of the present application, S601 may be implemented by S6011 to S6014; that is to say, the detection apparatus obtains the abnormal data to be processed and at least one associated object corresponding to the abnormal data to be processed, including S6011 to S6014, and the following steps are respectively described.

S6011, the detection device executes the current data acquisition task and acquires data to be detected aiming at the current data acquisition task in the data acquisition task queue, wherein the current data acquisition task is any data acquisition task in the data acquisition task queue.

It should be noted that the data acquisition task queue is each data acquisition task under the topic to be detected, so that when the detection device determines the topic to be detected, each data acquisition task under the topic to be detected is acquired, and the data acquisition task queue is also acquired. The topic to be detected is a service topic, for example, the topic is dedicated to EPC (Evolved Packet Core), or application delivery, and the like. Each data acquisition task in the data acquisition task queue is used to acquire data of different service types, for example, a task for acquiring a page traffic record or a task for acquiring server performance data.

In the embodiment of the present application, when the detection device executes any data acquisition task in the data acquisition task queue, the acquisition of data corresponding to the executed data acquisition task is also completed, which is referred to as to-be-detected data herein; the data to be detected is service operation data.

Referring to fig. 9, fig. 9 is a schematic diagram illustrating an execution record of an exemplary data acquisition task provided in an embodiment of the present application; as shown in fig. 9, in the execution recording page 9-1, an execution recording title 9-11 and an execution recording 9-12 are displayed; wherein each execution record includes various attributes, such as: component number, source material, trigger mode, start time, end time, time spent, etc.

S6012, the detection device obtains an index detection task queue corresponding to the current data obtaining task.

It should be noted that each data acquisition task corresponds to at least one index detection task for performing anomaly detection on the acquired data to be detected, wherein each index detection task is used for performing anomaly detection on the data to be detected according to a corresponding index; each index detection task comprises at least one of an index calculation mode, an index detection algorithm (used for determining whether the index is abnormal or not based on the judgment condition), an abnormal message generation mode and an index associated object; therefore, the detection device can acquire at least one index detection task corresponding to the current data acquisition task, which is referred to as an index detection task queue. The index detection task queue is used for carrying out anomaly detection on data to be detected based on different indexes.

Exemplarily, referring to fig. 10, fig. 10 is a schematic diagram of a task corresponding to an exemplary topic to be detected provided by an embodiment of the present application; as shown in fig. 10, for a topic 10-1 to be detected, one data obtaining task queue 10-2 corresponds, and for one data obtaining task 10-21 (current data obtaining task) in the data obtaining task queue 10-2, one index detecting task queue 10-3 corresponds.

S6013, the detection device performs anomaly detection on the data to be detected based on a current index detection task in the index detection task queue, and generates an anomaly message, so as to obtain the abnormal data to be processed, wherein the current index detection task is any index detection task in the index detection task queue.

It should be noted that the exception message is generated when an index detection task in the index detection task queue completes exception detection and determines that the data to be detected is abnormal. Here, the exception data to be processed is exception information.

S6014, the detection device determines the index associated object corresponding to the current index detection task as at least one associated object corresponding to the abnormal data to be processed.

It should be noted that, the index has a corresponding associated object, that is, an index associated object; the abnormal data to be processed corresponds to the current index detection task; therefore, at this time, the index associated object is at least one associated object corresponding to the to-be-processed abnormal data.

It can be understood that, when the detection device completes the anomaly detection of the data to be detected based on one index detection task, if the service anomaly is determined, the data to be processed anomaly is generated and notified to a related person (at least one associated object), and the notification efficiency of the data to be processed anomaly can be improved.

Referring to fig. 8, in the embodiment of the present application, S6012 is further followed by S6015 to S6017; that is to say, after the detection device performs anomaly detection on data to be detected based on the current index detection task in the index detection task queue and generates an anomaly message, the anomaly data processing method further includes S6015 to S6017, which are described below.

S6015, when the detection device completes detection of the data to be detected based on the index detection task queue, obtaining an abnormal message queue including at least one abnormal message, thereby obtaining the abnormal data to be processed including the abnormal message queue.

It should be noted that, different from the description in S6013, the exception data to be processed is an exception message queue including at least one exception message; wherein one of the at least one exception message corresponds to one of the index detection task queues.

In the embodiment of the application, as the abnormal detection result of the existing index detection task represents that the service is normal, at this time, no corresponding abnormal message is generated for the index detection task; therefore, the number of the abnormal messages contained in at least one abnormal message is less than or equal to the number of the index detection tasks contained in the index detection task queue.

S6016, the detection device determines at least one index detection task corresponding to at least one abnormal message from the index detection task queue.

It should be noted that at least one index detection task is composed of an index detection task whose abnormal detection result is a service abnormality; and the at least one exception message corresponds to the at least one to-be-processed sub-exception data one to one.

S6017, the detection device determines an index associated object set corresponding to at least one index detection task as at least one associated object corresponding to the abnormal data to be processed.

It should be noted that, different from the description in S6014, at least one associated object is an index associated object set corresponding to at least one index detection task. The index detection task comprises at least one index detection task and a plurality of index detection tasks, wherein the index detection tasks are at least one index detection task; for example, at least one index detection task includes an index detection task 1 to an index detection task 3, where an index-related object of the index detection task 1 is a related object 1, index-related objects of the index detection task 2 are a related object 1 and a related object 2, and an index-related object of the index detection task 2 is a related object 2, and then the index-related object set is a related object 1 and a related object 2.

In the embodiment of the present application, S6011, S6012, and S6015 to S6017 describe a process of notifying a relevant person of acquired to-be-processed abnormal data when abnormality detection is completed for to-be-detected data of one data acquisition task.

Referring to fig. 8, in the embodiment of the present application, S6015 is followed by S6018 and S6019; that is, after the detection device obtains the exception message queue including at least one exception message, the exception data processing method further includes S6018 and S6019, which are described below separately.

S6018, when the detection device completes detection of the execution result of the data acquisition task queue, determining at least one obtained abnormal message queue as to-be-processed abnormal data.

In the embodiment of the present application, unlike the descriptions in S6013 and S6015, the exception data to be processed is at least one exception message queue; and one abnormal message queue in the at least one abnormal message queue corresponds to one data acquisition task in the data acquisition task queue.

It should be noted that, because there is a case that all the index detection task queues have no abnormal message under the data acquisition task, that is, there is a case that the data acquisition task has no abnormal message queue, the number of the abnormal message queues included in at least one abnormal message queue is less than or equal to the number of the data acquisition tasks included in the data acquisition task queue.

S6019, the detection device determines at least one index associated object set corresponding to each index detection task queue corresponding to the data acquisition task queue as at least one associated object corresponding to the abnormal data to be processed.

It should be noted that, different from the descriptions in S6014 and S6017, at least one associated object is at least one index associated object set; and the at least one index associated object set corresponds to the at least one abnormal message queue one by one.

In the embodiment of the present application, S6011, S6012, S6015, and S6018 and S6019 describe a process of notifying a relevant person of the obtained to-be-processed abnormal data when abnormality detection is completed for a to-be-detected data queue corresponding to one to-be-detected topic.

It can be understood that the detection device performs notification of the to-be-processed abnormal data when completing the abnormal detection for one data acquisition task, or performs notification of the to-be-processed abnormal data when completing the abnormal detection for one to-be-detected subject, thereby reducing the sending times of the to-be-processed abnormal data and reducing the consumption of abnormal data processing.

In the embodiment of the application, the triggering mode of the current data acquisition task is any one of timing triggering, event triggering and instruction triggering; at this time, the detecting device in S6011 executes the current data acquiring task to acquire the data to be detected, including: when the triggering mode is timing triggering and the execution time corresponding to the current data acquisition task is reached, the detection equipment executes the current data acquisition task to obtain data to be detected; here, the timing trigger is a mode of triggering data acquisition based on time, and is simple and easy to implement, and the application scenario is wide. When the triggering mode is event triggering and an execution event corresponding to the current data acquisition task is detected, the detection equipment executes the current data acquisition task to obtain data to be detected; here, the event triggering refers to a manner of triggering data acquisition based on an event, for example, Hook triggering, and has high real-time performance. When the triggering mode is instruction triggering and an execution instruction corresponding to the current data acquisition task is received, the detection equipment executes the current data acquisition task to obtain data to be detected; here, the instruction triggering refers to a manner of triggering data acquisition based on a received instruction, for example, a manual triggering manner such as CGI triggering, and flexibility is high.

In this embodiment of the present application, the detection apparatus in S6013 performs abnormality detection on data to be detected based on a current index detection task in the index detection task queue, generates an abnormality message, including S60131 and S60133, and the following steps are respectively described.

S60131, the detection device detects the data to be detected based on the current index detection task in the index detection task queue.

It should be noted that, the detection device can perform the current index detection task to implement the anomaly detection of the data to be detected.

S60132, when the anomaly detection result is that the data to be detected does not meet the detection conditions of the current index detection task, the detection device generates an anomaly message based on at least one of an anomaly title, key detection information, anomaly detection details, a theme to be detected and a repair state.

It should be noted that the detection condition, i.e. the abnormality determination condition, is, for example, a relationship with a detection threshold, or a comparison result with a defect repair cycle, or a discovery manner of a defect list is not null; the current index detection task comprises an abnormal message generation mode and an abnormal title generation mode; the key detection information is at least one of a detection condition corresponding to the current index detection task, a detection task identifier and an acquisition task identifier corresponding to the current data acquisition task; the detection task identifier is an identifier of a current index detection task, for example, a number "check-007" in an index detection task queue; the get task identifier is an identifier of the current data get task, such as the number "jobs-005" in the data get task queue.

In the embodiment of the application, when the anomaly detection result is that the data to be detected meets the detection condition of the current index detection task, the anomaly message generation process is ended.

The data acquisition task and the index detection task are numbered, and when the abnormal data to be processed is obtained based on the numbers, the associated object can rapidly locate the data acquisition task and the index detection task through the abnormal data to be processed, so that the abnormal processing efficiency is improved.

Referring to fig. 11, fig. 11 is a schematic flowchart of another alternative abnormal data processing method provided in the embodiment of the present application; as shown in fig. 11, in the embodiment of the present application, S606 may further include S609 to S612; that is, after the detection device creates the abnormal data chat room for at least one associated object based on at least one piece of confirmation creation information, the abnormal data processing method further includes S609 to S612, which are described below.

And S609, the detection equipment stores the abnormal data chat room through the instant communication client.

It should be noted that, after determining that the communication service object creates the abnormal data chat room, the detection device stores the abnormal data chat room through the instant communication client, so as to perform abnormal data processing through the abnormal data chat room again in the subsequent process.

S610, the detection device obtains new abnormal data to be processed and at least one new associated object corresponding to the new abnormal data to be processed.

It should be noted that the new exception data to be processed is obtained after the exception data to be processed is obtained; and, the new exception data to be processed and the at least one new associated object are obtained in a similar manner, which is not described herein again in the embodiments of the present application.

S611, when the at least one new associated object is the same as the at least one associated object, the detection device sends new abnormal data to be processed to the at least one associated object through the stored abnormal data chat room.

It should be noted that the at least one new associated object is the same as the at least one associated object, that is, the at least one new associated object is the at least one associated object.

And S612, the processing equipment displays the received new abnormal data to be processed in a message record display frame corresponding to the abnormal data chatting room.

In the embodiment of the application, after the detection device sends new abnormal data to be processed to at least one associated object through the communication service object, the processing device receives the new abnormal data to be processed; therefore, the processing device displays the new abnormal data to be processed in the message record display frame corresponding to the abnormal data chat room. And the displayed new exception data to be processed is used for triggering new exception processing.

In the embodiment of the application, the abnormal data to be processed comprises a detection reminding message, and the detection reminding message is used for presenting the processing state of the abnormal data; thus, S608 may be followed by S613; that is, after the processing device displays the received to-be-processed abnormal data sent by the communication service object in the message record display frame corresponding to the abnormal data chat room created based on the confirmation creation information, the abnormal data processing method further includes S613, which will be described below.

S613, the processing equipment responds to the detection operation aiming at the detection reminding message and displays a detection page comprising abnormal associated data.

In the embodiment of the application, when a user corresponding to the associated object triggers a trigger operation for presenting an abnormal repair state for the detection reminding message, for example, when a link in the detection reminding message is clicked, the processing device receives the detection operation; thus, the processing device displays a detection page including the abnormal associated data in response to the detection operation; wherein the exception associated data includes at least one of a repair status, a repair object, an exception type, and an associated exception.

It can be understood that the efficiency of presenting the repair state is improved through the detection reminding message in the abnormal data to be processed.

In this embodiment of the application, after S6011 and before S6012, the abnormal data processing method may further include S60110 and S60111, that is, after the detection device executes the current data obtaining task, obtains the data to be detected, and before the index detection task queue corresponding to the current data obtaining task is obtained, the abnormal data processing method further includes S60110 and S60111, and the following steps are respectively described.

S60110, the detection device determines that the data acquisition state is a completed state based on the data to be detected.

It should be noted that, after the detection device obtains the data to be detected, the data obtaining state is updated to the completed state, where the completed state is a state where the data to be detected has been obtained.

S60111, when the data acquisition state is the completed state, the detection equipment generates a detection trigger instruction for the data to be detected.

It should be noted that, when the detection device determines that the data acquisition state is the completed state, the detection device generates a detection trigger instruction, so as to trigger the anomaly detection of the data to be detected through the detection trigger instruction. And when the detection device determines that the data acquisition state is an incomplete state, no abnormality detection is performed. The unfinished state is a state in which acquisition of the data to be detected is unfinished.

Correspondingly, in this embodiment of the present application, the step of acquiring, by the detection device in S6012, the index detection task queue corresponding to the current data acquisition task includes: and the detection equipment responds to the detection trigger instruction and acquires the index detection task queue corresponding to the current data acquisition task. That is, the anomaly detection is performed after the completion of the data to be detected.

It can be understood that, for the acquisition of the data to be detected and the anomaly detection, when the asynchronous mode is adopted, the accuracy of the anomaly detection result can be improved, for example, in an application scenario in which the acquisition time of the data to be detected is long.

In this embodiment of the application, after the detection device in S601 acquires the abnormal data to be processed, the abnormal data processing method further includes S614 to S616, which are described below.

S614, the detection equipment acquires the associated chat room corresponding to the abnormal data to be processed.

It should be noted that the associated chat room may be a chat room in a current index detection task corresponding to a current data acquisition task for generating abnormal data to be processed, for example, an organizational structure group where at least one associated object is located.

S615, the detection device constructs a chat room simulation object of the associated chat room through the instant communication client.

It should be noted that the chat room simulation object is a member of the associated chat room, such as a swarm robot, that transmits the exception data to be processed. Here, at least one chat room mock object may be included in the associated chat room, with different chat room mock objects being used to send different exception data.

S616, the detection device sends the abnormal data to be processed in a message sending mode of the associated chat room through the chat room simulation object.

In the embodiment of the application, when the detection device sends the abnormal data to be processed in a message sending mode of the associated chat room through the chat room simulation object, other objects in the members of the associated chat room receive the abnormal data to be processed.

For example, referring to fig. 12, fig. 12 is a schematic diagram of an exemplary sending of exception data to be processed according to an embodiment of the present application; as shown in FIG. 12, the pending anomaly data 12-11 presented in the message log box 12-1 of the associated chat room is displayed, and the sending object 12-12 refers to the name of the chat room mock object.

Next, an exemplary application of the embodiment of the present application in a practical application scenario will be described.

Referring to fig. 13, fig. 13 is a schematic diagram illustrating an exemplary exception data processing flow provided in an embodiment of the present application; as shown in fig. 13, the data acquisition and detection implemented by the exemplary abnormal data processing flow is a synchronous manner, and includes an acquisition triggering module 13-1, a data acquisition module 13-2, a data consumption module 13-3, a message early warning module 13-4, and a real-time self-checking module 13-5. Wherein the content of the first and second substances,

the acquisition triggering module 13-1 is used for triggering acquisition of index data (to-be-detected data), and comprises three triggering modes: a timed trigger 13-11, a hook trigger 13-12 (event trigger), and a manual trigger 13-13 (command trigger). Here, the acquisition triggering module 13-1 corresponds to at least one trigger for a topic to be detected, see the data acquisition task queue 10-2 shown in fig. 10; based on the three trigger modes, at least one trigger (data acquisition task queue) corresponding to the acquisition trigger module 13-1 includes triggers of the three trigger modes.

The data acquisition module 13-2 is used for responding to the trigger of the trigger in the acquisition triggering module 13-1 and acquiring index data 13-21; and is also used for preprocessing 13-22 the collected index data, such as format conversion, normalization processing, unit conversion and the like based on the data format of the data consumption module 13-3.

A data consumption module 13-3, configured to analyze whether the preprocessed index data meets expectations (detection conditions) according to characteristics of the service, so as to generate an early warning message (abnormal message) when the preprocessed index data does not meet expectations; that is, the index algorithm 1 (index detection task) … … is used to perform index summary calculation 13-31 on the preprocessed index data by the index algorithm N to realize the abnormality detection. Here, the data consumption module 13-3 corresponds to at least one index detection manner for one trigger in the collection trigger module 13-1, see the index detection task queue 10-3 shown in fig. 10.

It should be noted that at least one trigger and at least one index detection mode can be numbered, so that the expression effect of the early warning information can be improved, relevant people can quickly locate the relevant trigger and index detection mode, and the exception handling efficiency is improved.

And the message early warning module 13-4 is used for sending an early warning message to an instant messaging account (at least one associated object) of a related person by adopting an instant messaging client. Here, it can be implemented in the swarm robot manner 13-41, that is, adding swarm robots (chat room simulation objects) to the swarm (associated chat room) where the instant messaging account of the relevant person is located, and sending the warning message to the instant messaging account of the relevant person through the swarm robots, such as fig. 12; also for example, fig. 14 shows a schematic diagram of an exemplary display page of exception data to be processed, which shows that a group name 14-11 (chat room title) is displayed in a message box 14-1, and an alert message 14-121 is displayed in a message recording box 14-12 of an associated chat room. The method can also be implemented in a service number manner 13-42, that is, a group (abnormal data chat room) with the instant messaging account of the relevant person is created through a service number (messaging service object), and the warning message is sent to the instant messaging account of the relevant person through the created group, for example, fig. 7; for another example, as shown in fig. 15, the schematic diagram of the display page of the exception data to be processed provided by the embodiment of the present application shows that in the message box 15-1 of the exception data chat room, the message box includes a chat room title 15-11, a message record display box 15-12 and a member 15-13; the message record display frame 15-12 is used for displaying the to-be-processed abnormal data 15-121, and the member 15-13 is used for displaying at least one associated object and a communication service object; the early warning message is sent in a service number mode, so that resource consumption for sending the early warning message can be reduced.

The real-time self-checking module 13-5 is used for acquiring the abnormal processing state after abnormal processing is carried out on the basis of the sent early warning message; here, the process of acquiring the status of exception handling based on the self-test message (test alert message) in the warning message is plug-in assisted self-test 13-51; the process of obtaining the status of exception handling from a given page through query processing is online site self-test 13-52. For example, referring to fig. 16, fig. 16 is a schematic diagram of an exemplary self-checking page provided by the embodiment of the present application; as shown in fig. 16, the self-test page 16-1 includes a query control 16-11 for performing an exception query based on an identifier (e.g., an Identity Document) in the warning message; also included is abnormal state information 16-12, where "[ H5 ] [ 2 month … … activity ] the mobile terminal … … does not correct" as abnormal detail, "state: closed "as repair status," demand attribution: … …' is an exception type; the method also comprises the association exceptions 16-13, and when the exception in the association exceptions 16-13 is triggered, the exception details can be displayed; here, fig. 16 corresponds to fig. 7. For another example, fig. 17 is a schematic diagram of another exemplary self-checking page provided in the embodiment of the present application; as shown in FIG. 17, the self-test page 17-1 includes a query control 17-11, exception state information 17-12 and an associated exception 17-13; here, fig. 17 corresponds to fig. 15.

It should be noted that, in the embodiment of the present application, data acquisition and detection may also be achieved in an asynchronous manner; referring to fig. 18, fig. 18 is a schematic diagram illustrating an exemplary exception data processing flow provided by an embodiment of the present application; as shown in fig. 18, the data acquisition and detection implemented by the exemplary abnormal data processing flow is asynchronous, that is, the data acquisition and detection are divided into two processes, which are triggered by different triggers, and the data acquisition is performed first, and then the data detection is performed; therefore, the system comprises an acquisition triggering module 18-1, a data acquisition module 18-2, a data consumption module 18-3, a message early warning module 18-4 and a real-time self-checking module 18-5 besides the data storage module 18-6 additionally included. Specifically, the acquisition trigger module 18-1 comprises a timing trigger 18-11, a hook trigger 18-12 and a manual trigger 18-13; the data acquisition module 18-2 comprises acquisition index data 18-21 and preprocessing 18-22, but after the data acquisition module 18-2 finishes preprocessing 18-22, the preprocessed index data are stored in the data storage module 18-6; the data consumption module 18-3 comprises index summarizing calculation 18-31 and acquisition index data 18-32, and is used for acquiring preprocessed index data from the data storage module 18-6 under the trigger of the consumption trigger module 18-7 for processing by the index summarizing calculation 18-31; in addition, the consumption triggering module 18-7 also corresponds to three triggering modes: a timed trigger 18-71, a hook trigger 18-72 and a manual trigger 18-73.

It can be understood that by combining the anomaly detection with the instant messaging client, the processing of the early warning message is realized by automatically creating a group through the instant messaging client when the early warning is determined to be performed, and on one hand, the processing efficiency of the early warning message can be improved; on the other hand, by combining with the instant messaging client, the mobile processing can be realized, and the flexibility is strong; on the other hand, the intelligence of processing the early warning message is realized, the cost is low, the condition that the exception is processed but omitted can be avoided, and the exception processing effect is improved.

Continuing with the exemplary structure of the detection apparatus 455 provided in the embodiments of the present application implemented as software modules, in some embodiments, as shown in fig. 4, the software modules stored in the detection apparatus 455 of the first memory 450 may include:

an information obtaining module 4551, configured to obtain to-be-processed exception data and at least one associated object corresponding to the to-be-processed exception data;

a request sending module 4552, configured to send a chat room creation request to each associated object in the at least one associated object through a messaging service object of an instant messaging client;

an information receiving module 4553, configured to receive confirmation creation information sent by the processing device corresponding to each associated object in response to the chat room creation request, so as to obtain at least one confirmation creation information corresponding to the at least one associated object;

a chat room creating module 4554 configured to create an abnormal data chat room for the at least one associated object based on the at least one confirmation creating information, wherein the at least one associated object is a member of the abnormal data chat room;

a message sending module 4555, configured to send the to-be-processed exception data to each associated object through the exception data chat room, so that the processing device displays the sent to-be-processed exception data in a message record display box corresponding to the exception data chat room through the instant messaging client, where the displayed to-be-processed exception data is used to trigger exception processing.

In this embodiment of the application, the information obtaining module 4551 is further configured to execute the current data obtaining task and obtain data to be detected for a current data obtaining task in a data obtaining task queue, where the data obtaining task queue is each data obtaining task under a topic to be detected, and the current data obtaining task is any data obtaining task in the data obtaining task queue; acquiring an index detection task queue corresponding to the current data acquisition task; performing anomaly detection on the data to be detected based on a current index detection task in the index detection task queue to generate an anomaly message, so as to obtain the abnormal data to be processed comprising the anomaly message, wherein the current index detection task is any index detection task in the index detection task queue; and determining the index associated object corresponding to the current index detection task as the at least one associated object corresponding to the abnormal data to be processed.

In this embodiment of the present application, the information obtaining module 4551 is further configured to, when the task queue is detected based on the indicator, obtain an abnormal message queue including at least one abnormal message, so as to obtain the to-be-processed abnormal data including the abnormal message queue; determining at least one index detection task corresponding to the abnormal message queue from the index detection task queue; and determining an index associated object set corresponding to the at least one index detection task as the at least one associated object corresponding to the abnormal data to be processed.

In this embodiment of the application, the information obtaining module 4551 is further configured to determine, when the detection on the execution result of the data obtaining task queue is completed, at least one obtained exception message queue as the to-be-processed exception data; and determining at least one index associated object set corresponding to each index detection task queue corresponding to the data acquisition task queue as the at least one associated object corresponding to the abnormal data to be processed.

In the embodiment of the application, the triggering mode of the current data acquisition task is any one of timing triggering, event triggering and instruction triggering; the information obtaining module 4551 is further configured to execute the current data obtaining task to obtain the to-be-detected data when the trigger mode is the timing trigger and the execution time corresponding to the current data obtaining task is reached; when the triggering mode is the event triggering and an execution event corresponding to the current data acquisition task is detected, executing the current data acquisition task to acquire the to-be-detected data; and when the triggering mode is the instruction triggering and an execution instruction corresponding to the current data acquisition task is received, executing the current data acquisition task to acquire the data to be detected.

In this embodiment of the application, the information obtaining module 4551 is further configured to perform anomaly detection on the data to be detected based on the current index detection task in the index detection task queue; when the abnormal detection result is that the data to be detected does not meet the detection condition of the current index detection task, generating the abnormal message based on at least one of an abnormal title, key detection information, abnormal detection details, the theme to be detected and a repair state; the key detection information is at least one of the detection condition, a detection task identifier and an acquisition task identifier corresponding to the current data acquisition task.

In this embodiment of the application, the detecting device 455 further includes a chat room multiplexing module 4556, configured to store the abnormal data chat room through the instant messaging client; acquiring new abnormal data to be processed and at least one new associated object corresponding to the new abnormal data to be processed; when the at least one new associated object is the same as the at least one associated object, sending the new abnormal data to be processed to the at least one associated object through the stored abnormal data chat room, so that the processing device displays the sent new abnormal data to be processed in the message record display frame corresponding to the abnormal data chat room through the instant messaging client, wherein the displayed new abnormal data to be processed is used for triggering new abnormal processing.

In this embodiment of the application, the information obtaining module 4551 is further configured to determine, based on the data to be detected, that a data obtaining state is a completed state; and when the data acquisition state is the finished state, generating a detection trigger instruction aiming at the data to be detected.

In this embodiment of the application, the information obtaining module 4551 is further configured to, in response to the detection trigger instruction, obtain the index detection task queue corresponding to the current data obtaining task.

In this embodiment of the present application, the detecting device 455 further includes a message processing module 4557, configured to obtain an associated chat room corresponding to the to-be-processed exception data; constructing a chat room simulation object of the associated chat room through the instant messaging client; and sending the abnormal data to be processed in a message sending mode of the associated chat room through the chat room simulation object.

Embodiments of the present application provide a computer program product or computer program comprising computer instructions stored in a computer readable storage medium. The first processor of the computer device reads the computer instructions from the computer readable storage medium, and executes the computer instructions, so that the computer device executes the abnormal data processing method described in the embodiment of the present application.

Continuing with the exemplary structure of the processing device 255 implemented as software modules provided in the embodiments of the present application, in some embodiments, as shown in fig. 5, the software modules stored in the processing device 255 of the second memory 250 may include:

a request receiving module 2551, configured to display, in response to a chat room creation request sent by a detection device through a communication service object of an instant messaging client, creation request information, where the chat room creation request is initiated by the communication service object for at least one associated object corresponding to abnormal data to be processed;

an information sending module 2552, configured to send confirmation creation information to the detection device in response to a confirmation creation operation for the creation request information, so that the messaging service object creates an abnormal data chat room, where the at least one associated object is a member of the abnormal data chat room;

a message display module 2553, configured to display the received to-be-processed exception data sent by the communication service object in a message record display frame corresponding to the exception data chat room created based on the confirmation creation information, where the displayed to-be-processed exception data is used to trigger exception processing.

In the embodiment of the application, the to-be-processed abnormal data comprises a detection reminding message; the processing device 255 further includes a status query module 2554 configured to display a detection page including anomaly-associated data in response to a detection operation for the detection prompt message, wherein the anomaly-associated data includes at least one of a repair status, a repair object, an anomaly type, and an associated anomaly.

In this embodiment of the application, the message display module 2553 is further configured to display the received new exception data to be processed in the message record display box corresponding to the exception data chat room, where the displayed new exception data to be processed is used to trigger new exception processing.

Embodiments of the present application also provide a computer program product or computer program comprising computer instructions stored in a computer-readable storage medium. The second processor of the computer device reads the computer instructions from the computer-readable storage medium, and executes the computer instructions, so that the computer device executes the abnormal data processing method described in the embodiment of the present application.

The embodiment of the application provides a computer-readable storage medium storing executable instructions, wherein the executable instructions are stored, and when being executed by a first processor, the executable instructions cause the first processor to execute the abnormal data processing method applied to the detection equipment, which is provided by the embodiment of the application; or, when the executable instructions are executed by the second processor, the second processor is caused to execute the exception data processing method applied to the processing device provided by the embodiment of the application; for example, an exception data handling method as shown in fig. 6.

In some embodiments, the computer-readable storage medium may be memory such as FRAM, ROM, PROM, EPROM, EEPROM, flash, magnetic surface memory, optical disk, or CD-ROM; or may be various devices including one or any combination of the above memories.

In some embodiments, executable instructions may be written in any form of programming language (including compiled or interpreted languages), in the form of programs, software modules, scripts or code, and may be deployed in any form, including as a stand-alone program or as a module, component, subroutine, or other unit suitable for use in a computing environment.

By way of example, executable instructions may correspond, but do not necessarily have to correspond, to files in a file system, and may be stored in a portion of a file that holds other programs or data, such as in one or more scripts in a hypertext Markup Language (HTML) document, in a single file dedicated to the program in question, or in multiple coordinated files (e.g., files that store one or more modules, sub-programs, or portions of code).

By way of example, executable instructions may be deployed to be executed on one computing device or on multiple computing devices at one site or distributed across multiple sites and interconnected by a communication network.

To sum up, in the embodiment of the present application, when obtaining at least one associated object corresponding to the to-be-processed abnormal data, the detection device creates a chat room for the at least one associated object, and then sends the to-be-processed abnormal data to the at least one associated object through the chat room, and the at least one associated object can obtain the to-be-processed abnormal data in real time, so the time efficiency of processing the abnormal data is high, and therefore, the efficiency, flexibility and effect of processing the abnormal data can be improved, and the resource consumption of processing the abnormal data is reduced.

The above description is only an example of the present application, and is not intended to limit the scope of the present application. Any modification, equivalent replacement, and improvement made within the spirit and scope of the present application are included in the protection scope of the present application.

Claims

1. An exception data processing method, comprising:

2. The method according to claim 1, wherein the obtaining of the exception data to be processed and the at least one associated object corresponding to the exception data to be processed includes:

the method comprises the steps of executing a current data acquisition task and acquiring data to be detected aiming at the current data acquisition task in a data acquisition task queue, wherein the data acquisition task queue is used for each data acquisition task under a theme to be detected, and the current data acquisition task is any one data acquisition task in the data acquisition task queue;

acquiring an index detection task queue corresponding to the current data acquisition task;

performing anomaly detection on the data to be detected based on a current index detection task in the index detection task queue to generate an anomaly message, so as to obtain the abnormal data to be processed comprising the anomaly message, wherein the current index detection task is any index detection task in the index detection task queue;

and determining the index associated object corresponding to the current index detection task as the at least one associated object corresponding to the abnormal data to be processed.

3. The method according to claim 2, wherein after the data to be detected is subjected to anomaly detection based on the current index detection task in the index detection task queue and an anomaly message is generated, the method further comprises:

when the detection of the data to be detected is finished based on the index detection task queue, obtaining an abnormal message queue comprising at least one abnormal message, thereby obtaining the abnormal data to be processed comprising the abnormal message queue;

determining at least one index detection task corresponding to the abnormal message queue from the index detection task queue;

and determining an index associated object set corresponding to the at least one index detection task as the at least one associated object corresponding to the abnormal data to be processed.

4. The method of claim 3, wherein after obtaining an exception message queue comprising at least one exception message, the method further comprises:

when the detection of the execution result aiming at the data acquisition task queue is finished, determining at least one acquired abnormal message queue as the abnormal data to be processed;

and determining at least one index associated object set corresponding to each index detection task queue corresponding to the data acquisition task queue as the at least one associated object corresponding to the abnormal data to be processed.

5. The method according to claim 2, wherein the triggering mode of the current data acquisition task is any one of timing triggering, event triggering and instruction triggering;

the executing the current data acquiring task to acquire the data to be detected includes:

when the triggering mode is the timing triggering and the execution time corresponding to the current data acquisition task is up, executing the current data acquisition task to acquire the data to be detected;

when the triggering mode is the event triggering and an execution event corresponding to the current data acquisition task is detected, executing the current data acquisition task to acquire the to-be-detected data;

and when the triggering mode is the instruction triggering and an execution instruction corresponding to the current data acquisition task is received, executing the current data acquisition task to acquire the data to be detected.

6. The method according to claim 2, wherein the performing anomaly detection on the data to be detected based on the current index detection task in the index detection task queue to generate an anomaly message comprises:

performing anomaly detection on the data to be detected based on the current index detection task in the index detection task queue;

when the abnormal detection result is that the data to be detected does not meet the detection condition of the current index detection task, generating the abnormal message based on at least one of an abnormal title, key detection information, abnormal detection details, the theme to be detected and a repair state;

the key detection information is at least one of the detection condition, a detection task identifier and an acquisition task identifier corresponding to the current data acquisition task.

7. The method of any of claims 1 to 6, wherein after creating the anomalous data chat room for the at least one associated object based on the at least one confirmation creation information, the method further comprises:

storing the abnormal data chat room through the instant messaging client;

acquiring new abnormal data to be processed and at least one new associated object corresponding to the new abnormal data to be processed;

when the at least one new associated object is the same as the at least one associated object, sending the new abnormal data to be processed to the at least one associated object through the stored abnormal data chat room, so that the processing device displays the sent new abnormal data to be processed in the message record display frame corresponding to the abnormal data chat room through the instant messaging client, wherein the displayed new abnormal data to be processed is used for triggering new abnormal processing.

8. The method according to any one of claims 2 to 6, wherein after the current data acquisition task is executed, the data to be detected is acquired, and before an index detection task queue corresponding to the current data acquisition task is acquired, the method further comprises:

determining that the data acquisition state is a finished state based on the data to be detected;

when the data acquisition state is the completed state, generating a detection trigger instruction aiming at the data to be detected;

the acquiring of the index detection task queue corresponding to the current data acquisition task includes:

and responding to the detection trigger instruction, and acquiring the index detection task queue corresponding to the current data acquisition task.

9. The method of any of claims 1 to 6, wherein after the obtaining of the exception data to be processed, the method further comprises:

acquiring an associated chat room corresponding to the abnormal data to be processed;

constructing a chat room simulation object of the associated chat room through the instant messaging client;

and sending the abnormal data to be processed in a message sending mode of the associated chat room through the chat room simulation object.

10. An exception data processing method, comprising:

11. The method of claim 10, wherein the exception data to be processed comprises a detection alert message;

after the received to-be-processed abnormal data sent by the messaging service object is displayed in a message record display frame corresponding to the abnormal data chat room created based on the confirmation creation information, the method further comprises:

and displaying a detection page comprising abnormal associated data in response to the detection operation aiming at the detection reminding message, wherein the abnormal associated data comprises at least one of a repair state, a repair object, an abnormal type and an associated abnormal.

12. The method according to claim 10 or 11, wherein after displaying the received to-be-processed abnormal data sent by the messaging service object in a message record display frame corresponding to the abnormal data chat room created based on the confirmation creation information, the method further comprises:

and displaying the received new abnormal data to be processed in the message record display frame corresponding to the abnormal data chatting room, wherein the displayed new abnormal data to be processed is used for triggering new abnormal processing.

13. A detection apparatus for exception data handling, comprising:

a first memory for storing executable instructions;

a first processor for implementing the method of any one of claims 1 to 9 when executing executable instructions stored in the first memory.

14. A processing device for exception data processing, comprising:

a second memory for storing executable instructions;

a second processor, adapted to perform the method of any of claims 10 to 12 when executing the executable instructions stored in the second memory.

15. A computer-readable storage medium having stored thereon executable instructions for, when executed by a first processor, implementing the method of any one of claims 1 to 9; or for implementing the method of any of claims 10 to 12 when executed by a second processor.