CN113190415A - Internet hospital system monitoring method, equipment, storage medium and program product - Google Patents

Internet hospital system monitoring method, equipment, storage medium and program product Download PDF

Info

Publication number
CN113190415A
CN113190415A CN202110584123.4A CN202110584123A CN113190415A CN 113190415 A CN113190415 A CN 113190415A CN 202110584123 A CN202110584123 A CN 202110584123A CN 113190415 A CN113190415 A CN 113190415A
Authority
CN
China
Prior art keywords
hospital system
internet hospital
target
internet
abnormal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202110584123.4A
Other languages
Chinese (zh)
Inventor
刘宗节
任思奇
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Jingdong Tuoxian Technology Co Ltd
Original Assignee
Beijing Jingdong Tuoxian Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Jingdong Tuoxian Technology Co Ltd filed Critical Beijing Jingdong Tuoxian Technology Co Ltd
Priority to CN202110584123.4A priority Critical patent/CN113190415A/en
Publication of CN113190415A publication Critical patent/CN113190415A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/3003Monitoring arrangements specially adapted to the computing system or computing system component being monitored
    • G06F11/302Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system component is a software system
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/3065Monitoring arrangements determined by the means or processing involved in reporting the monitored data

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Computing Systems (AREA)
  • Quality & Reliability (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Mathematical Physics (AREA)
  • Debugging And Monitoring (AREA)

Abstract

The embodiment of the invention provides a method, equipment, a storage medium and a program product for monitoring an internet hospital system, which are characterized in that service log data of the internet hospital system are collected and added into a message queue; acquiring a target index according to the service log data in the message queue through a stream processing engine; judging whether the Internet hospital system is abnormal or not according to the target index and a preset alarm rule; and if the internet hospital system is determined to be abnormal, sending an alarm message to the user terminal. The embodiment of the invention acquires the service log data of the Internet hospital system, analyzes and processes the service log data to obtain the target index, constructs a unified monitoring index system, realizes unified monitoring of different Internet hospitals accessed to the Internet hospital system, judges whether the Internet hospital system is abnormal or not based on the target index and the preset alarm rule, and explores the potential abnormality of the Internet hospital system so as to alarm in time and recover the abnormality.

Description

Internet hospital system monitoring method, equipment, storage medium and program product
Technical Field
The embodiment of the invention relates to the technical field of Internet, in particular to a method, equipment, a storage medium and a program product for monitoring an Internet hospital system.
Background
With the rapid development and expansion of internet hospitals, the business requirements of the internet hospitals are increasingly multiplied, more and more hospitals or institutions reside in the internet hospital system platform, and the flow sources of the internet hospital system are more and more, so that the important point of ensuring that the internet hospital system does not break down in normal operation under such huge flow is achieved, and therefore, the monitoring of the internet hospital system becomes more and more important.
At present, monitoring of an internet hospital system generally monitors the available conditions of each internet hospital interface, including monitoring of the calling times and calling time delay of the interfaces, various abnormal conditions may occur when the internet hospital system is accessed to different internet hospitals, and effective positioning, tracing and early warning of the abnormal conditions cannot be realized only by monitoring the available conditions of the interfaces.
Disclosure of Invention
The embodiment of the invention provides a method, equipment, a storage medium and a program product for monitoring an internet hospital system, so as to realize effective monitoring of the internet hospital system and alarm of abnormal conditions.
In a first aspect, an embodiment of the present invention provides an internet hospital system monitoring method, including:
collecting service log data of an internet hospital system, and adding the service log data into a message queue;
acquiring a target index according to the service log data in the message queue through a stream processing engine;
judging whether the Internet hospital system is abnormal or not according to the target index and a preset alarm rule;
and if the internet hospital system is determined to be abnormal, sending an alarm message to the user terminal.
In a second aspect, an embodiment of the present invention provides an internet hospital system monitoring device, including:
the system comprises an acquisition module, a message queue and a message processing module, wherein the acquisition module is used for acquiring service log data of an Internet hospital system and adding the service log data into the message queue;
the stream processing module is used for acquiring a target index according to the service log data in the message queue through the stream processing engine;
the wind control module is used for judging whether the Internet hospital system is abnormal or not according to the target index and a preset alarm rule;
and the warning module is used for sending a warning message to the user terminal if the abnormality of the Internet hospital system is determined.
In a third aspect, an embodiment of the present invention provides an electronic device, including: at least one processor; and a memory;
the memory stores computer-executable instructions;
the at least one processor executing the computer-executable instructions stored by the memory causes the at least one processor to perform the method of the first aspect.
In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium, in which computer-executable instructions are stored, and when a processor executes the computer-executable instructions, the method according to the first aspect is implemented.
In a fifth aspect, an embodiment of the present invention provides a computer program product, which includes computer instructions that, when executed by a processor, implement the method according to the first aspect.
The monitoring method, the monitoring equipment, the monitoring storage medium and the monitoring program product of the internet hospital system provided by the embodiment of the invention are characterized in that the service log data of the internet hospital system are collected and added into a message queue; acquiring a target index according to the service log data in the message queue through a stream processing engine; judging whether the Internet hospital system is abnormal or not according to the target index and a preset alarm rule; and if the internet hospital system is determined to be abnormal, sending an alarm message to the user terminal. According to the embodiment of the invention, the service log data of the Internet hospital system is collected, and the service log data is analyzed and processed to obtain the target index, so that a unified monitoring index system is constructed, the unified monitoring of different Internet hospitals accessed to the Internet hospital system is realized, further, whether the Internet hospital system is abnormal or not can be judged based on the target index and the preset alarm rule, and the potential abnormality of the Internet hospital system can be discovered, so that the timely alarm can be given and the abnormality can be recovered.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and together with the description, serve to explain the principles of the disclosure.
FIG. 1 is a schematic diagram of an Internet hospital system provided by an embodiment of the present invention;
fig. 2 is a flowchart of a monitoring method for an internet hospital system according to an embodiment of the present invention;
FIG. 3 is a flow chart of a monitoring method for an Internet hospital system according to another embodiment of the present invention;
FIG. 4 is a flow chart of a monitoring method for an Internet hospital system according to another embodiment of the present invention;
FIG. 5 is a block diagram of an Internet hospital system monitoring device according to an embodiment of the present invention;
fig. 6 is a block diagram of an electronic device according to an embodiment of the invention.
With the foregoing drawings in mind, certain embodiments of the disclosure have been shown and described in more detail below. These drawings and written description are not intended to limit the scope of the disclosed concepts in any way, but rather to illustrate the concepts of the disclosure to those skilled in the art by reference to specific embodiments.
Detailed Description
Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, like numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the exemplary embodiments below are not intended to represent all implementations consistent with the present disclosure. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present disclosure, as detailed in the appended claims.
With the rapid development and expansion of internet hospitals, the business requirements of the internet hospitals are increasingly multiplied, more and more hospitals or institutions reside in the internet hospital system platform, and the flow sources of the internet hospital system are more and more, so that the important point of ensuring that the internet hospital system does not break down in normal operation under such huge flow is achieved, and therefore, the monitoring of the internet hospital system becomes more and more important.
At present, monitoring of an internet hospital system generally monitors the available conditions of each internet hospital interface, including monitoring of calling times and calling time delay of the interfaces, does not monitor service data, and ignores the value of monitoring the service data. The internet hospital system is accessed to different internet hospitals, various abnormal conditions can occur, particularly, the monitoring data log formats of the internet hospitals are not uniform, links cannot be tracked, uniform monitoring is not performed, a uniform index system is not provided, the health degree of the system cannot be scientifically and objectively measured, and effective positioning, tracing and early warning on various abnormal conditions of the different internet hospitals accessed to the internet hospital system cannot be realized only by monitoring the available conditions of the interface.
In view of the above technical problems, an embodiment of the present invention provides a method for monitoring an internet hospital system, which collects service log data for different internet hospitals to which the internet hospital system is accessed, and adds the service log data to a message queue; acquiring a target index according to the service log data in the message queue through a stream processing engine, and constructing a unified measurement system through the target index to scientifically and objectively measure the health degree of the system; further, whether the internet hospital system is abnormal or not can be judged according to the target index and a preset alarm rule; and if the internet hospital system is determined to be abnormal, sending an alarm message to the user terminal so that the user can find and locate the abnormality in time and recover the abnormality.
The internet hospital system monitoring method provided by the embodiment of the invention is applied to the internet hospital system shown in fig. 1, wherein the internet hospital system is accessed to a plurality of different internet hospitals, namely, the background server 102 of the internet hospital system is connected with the servers 101 of all the internet hospitals, the background server 102 of the internet hospital system can collect service log data from the servers 101 of all the internet hospitals, the system architecture of the background server 102 is shown as a dotted line frame in fig. 1, and the service log data are collected through the data collection unit and added into the message queue; acquiring a target index according to the service log data in the message queue through a stream processing engine; then judging whether the Internet hospital system is abnormal or not by the wind control measurement platform according to the target index and a preset alarm rule; if the abnormality of the internet hospital system is determined, an alarm message can be sent to the user terminal by the notification center. The target indexes acquired by the flow processing engine can be stored in a database, the wind control measurement platform can acquire the target indexes from the database in real time or at regular time, and whether the internet hospital system is abnormal or not is judged according to the target indexes and preset alarm rules.
The following describes the technical solutions of the present invention and how to solve the above technical problems with specific embodiments. The following several specific embodiments may be combined with each other, and details of the same or similar concepts or processes may not be repeated in some embodiments. Embodiments of the present invention will be described below with reference to the accompanying drawings.
Fig. 2 is a flowchart of a monitoring method for an internet hospital system according to an embodiment of the present invention. The embodiment provides an internet hospital system monitoring method, the execution main body of which is electronic equipment such as a server, and the internet hospital system monitoring method comprises the following specific steps:
s201, collecting service log data of an Internet hospital system, and adding the service log data into a message queue.
In this embodiment, the internet hospital system has access to a plurality of different internet hospitals, that is, the background server of the internet hospital system is connected to the server-side devices such as the servers of the internet hospitals, and in order to avoid the data formats of the internet hospitals being non-uniform, the present embodiment can collect the required service log data of the internet hospitals from the servers of the internet hospitals in a uniform format. The method can be specifically collected by a buried point, or collected from service logs of all internet hospitals, or collected from service databases of all internet hospitals. The business log data includes, but is not limited to, data in business processes such as triage, inquiry, prescription, medicine purchase and the like.
Optionally, service log data of each internet hospital is collected in a preset log format by burying points in Software Development Kits (SDKs) preset in server devices of each internet hospital of the internet hospital system, and is used as the service log data of the internet hospital system. The SDK is a java application program, the SDK is embedded into each Internet hospital service system through maven dependence, the service system calls the SDK method to transmit service log data needing to be reported for monitoring, and the SDK data can asynchronously send the data to the message queue for storage.
The service log data is added into a message queue for buffering, wherein the message queue is an important channel for full link data transmission, and backlog, connection number, enqueue and dequeue number and the like are usually required to be concerned so as to judge whether the message queue normally operates.
In addition, a background server of the internet hospital system can also monitor and bury points, send the log data of the background server system to a performance monitoring platform in real time or in a fixed time and orientation manner, monitor system parameters such as interface calling times and calling time delay, and directly give an alarm when the system parameters such as the interface calling times and the calling time delay are abnormal, namely send an alarm message to the user terminal.
S202, a stream processing engine acquires a target index according to the service log data in the message queue.
In this embodiment, the stream processing engine consumes the service log data in the message queue, optionally, the stream processing engine may be a Flink engine or another engine, the stream processing engine is a key for consuming and analyzing data in a full link, and the stability of the stream processing engine is related to whether the message queue has data backlog or not and the accuracy of downstream data.
In this embodiment, the target index may be obtained by the stream processing engine, and optionally, the target index includes a target service index and/or a target system index.
The target service index may include, but is not limited to, measurement indexes such as an inquiry sheet amount, a payment sheet amount, a triage sheet amount, a purchase sheet missed call sheet amount, a user cancel sheet amount, a prescription sheet amount, a payment conversion rate, and a prescription conversion rate. The system fluctuation can be measured by the same ratio or the ring ratio. In this embodiment, the stream processing engine may analyze the service log data in the message queue to obtain a target field in the service log data, and determine a value of the target field as the target service index. That is, in this embodiment, the value of the field corresponding to the target service indicator may be directly analyzed from the service log data through the stream processing engine.
And the target system index may include, but is not limited to, a measure of whether the transaction traffic is abnormal, a measure of whether the order-grabbing anti-cheating is abnormal, a measure of the server performance abnormality, and the like. In this embodiment, the stream processing engine may analyze the service log data in the message queue to obtain a target field in the service log data, and obtain a target system index according to a value of the target field and a preset algorithm, where the preset algorithm is an algorithm for obtaining the target system index, and the preset algorithm may be some statistical algorithms, for example, statistics of transaction flow for a period of time is performed by the statistical algorithm, or some target system indexes require certain operation on multiple data, and may be implemented by a specific preset algorithm, which is not illustrated here.
The embodiment establishes a unified monitoring measurement index system of the internet hospitals based on the target index, facilitates the unification of the calibers, and realizes the monitoring of different internet hospitals.
And S203, judging whether the Internet hospital system is abnormal or not according to the target index and a preset alarm rule.
In this embodiment, after the target index is obtained, whether the internet hospital system is abnormal or not can be judged based on the target index and a preset alarm rule, so that the abnormality can be found in time and an alarm can be given in time.
In an optional embodiment, for the target service index, the target service index is compared with a historical service index, and whether an abnormality exists in the internet hospital system is determined according to a comparison result. For example, regarding the amount of the questionnaire, the amount of the questionnaire in the same year of the last year or the amount of the questionnaire in the last month may be acquired based on the historical amount of the questionnaire, and the amount of the questionnaire in the present month and the amount of the questionnaire in the same year of the last year are compared (concordance), or the amount of the questionnaire in the present month and the amount of the questionnaire in the last month are compared (cyclic ratio), so that it is feared that whether the amount of the questionnaire is abnormal or not is judged, and it is determined whether the internet hospital system is abnormal or not.
In another optional embodiment, for the target system index, the target system index is input into a corresponding preset abnormality judgment model, and whether the internet hospital system is abnormal or not is judged through the preset abnormality judgment model. In this embodiment, at least one preset abnormality judgment model may be preconfigured, and then the target system index is input into the corresponding preset abnormality judgment model, and whether the internet hospital system is abnormal is judged by means of the preset abnormality judgment model.
Optionally, the preset abnormality determination model includes at least one of the following: the system comprises a transaction flow abnormity detection model, a ticket robbing anti-cheating model, a doctor-patient violation wind control model and a doctor service abnormity detection model.
In this embodiment, the transaction flow anomaly detection model may be used to detect whether there is a transaction flow anomaly in the internet hospital system based on the target system index; the order-grabbing anti-cheating model can be used for detecting whether order-grabbing cheating exists in the internet hospital system or not based on target system indexes; the doctor-patient violation wind control model can be used for detecting whether doctor violation or patient violation exists in the internet hospital system based on target system indexes, such as the situations that a patient maliciously seizes a coupon, the patient harasses a doctor and the like; the doctor service abnormity detection model can be used for detecting whether the condition that a doctor does not normally serve exists in the Internet hospital system based on the target system index. The abnormality determination model may adopt any algorithm model capable of realizing the function thereof, and is not limited herein. The embodiment realizes business anti-fraud and doctor-patient wind control management by detecting abnormal behaviors such as abnormal flow, illegal operation of patients and doctors and the like, and provides one-stop full-flow automatic decision-making service.
Optionally, after the stream processing engine obtains the target index according to the service log data in the message queue in S202, the target index may be further stored in a database, where optionally, a clickwouse (a column-type storage database) database may be used, and the read-write performance of the database is excellent, but the clickwouse database has a disadvantage that it does not support slightly higher concurrence, so that data is written into the database in a large batch and a small number of times, generally 20 to 100 thousands of data in each batch, and query frequency needs to be reduced as much as possible. Of course, other databases, such as HBase data, may also be used in this embodiment.
Further, when the internet hospital system is judged to be abnormal according to the target index and the preset alarm rule, the target index can be obtained from the database in real time or at regular time, and whether the internet hospital system is abnormal is judged according to the target index and the preset alarm rule.
And S204, if the internet hospital system is determined to be abnormal, sending an alarm message to the user terminal.
In this embodiment, after determining that the internet hospital system is abnormal, an alarm message may be sent to a user terminal such as a manager and a service person, where the sending method is not limited to mail, short message, instant messaging, and the like, and the alarm message may be sent in real time or at regular time, and the user is prompted by the alarm message that the internet hospital system is abnormal, so that the user may perform problem troubleshooting and abnormal recovery on the internet hospital system.
In the monitoring method for the internet hospital system provided by the embodiment, the service log data of the internet hospital system are collected and added into the message queue; acquiring a target index according to the service log data in the message queue through a stream processing engine; judging whether the Internet hospital system is abnormal or not according to the target index and a preset alarm rule; and if the internet hospital system is determined to be abnormal, sending an alarm message to the user terminal. In the embodiment, by acquiring the service log data of the internet hospital system and analyzing and processing the service log data to obtain the target index, a unified monitoring index system is constructed, so that unified monitoring of different internet hospitals accessed to the internet hospital system is realized, further, whether the internet hospital system is abnormal or not can be judged based on the target index and the preset alarm rule, and the potential abnormality of the internet hospital system can be discovered, so that the alarm can be timely given and the abnormality can be recovered.
On the basis of any of the above embodiments, as shown in fig. 3, after determining that there is an abnormality in the internet hospital system in S204, the method may further include:
s301, analyzing abnormal points of the Internet hospital system, and sending an analysis result to the user terminal for displaying;
s302, receiving a first query instruction of a problem positioning knowledge base sent by the user terminal according to the analysis result, wherein the problem positioning knowledge base comprises a plurality of pieces of preset problem positioning step information;
and S303, sending the problem positioning step information corresponding to the analysis result to the user terminal according to the first query instruction so that the user can perform problem positioning according to the preset problem positioning step information.
In this embodiment, after determining that there is an abnormality in the internet hospital system, the internet hospital system may be analyzed for an abnormal point, where the analysis dimensions include, but are not limited to: the method comprises the steps of system rejection constant, parameter abnormality detection, upstream and downstream interface utilization rate, database CPU and database hard disk utilization rate. Furthermore, the analysis result can be sent to the user terminal to be displayed, multidimensional analysis visualization can be performed, the data fluctuation condition can be observed intuitively and quickly, and the problem can be positioned quickly.
Furthermore, a user can go to a problem location knowledge base to inquire the problem location step information based on the analysis result, the user can gradually perform problem troubleshooting according to the inquired problem location step information so as to quickly locate the problem, and the problem location knowledge base can be used for quickly locating the problem of the user who does not know the service system, so that the maintenance threshold and the cost are reduced. The problem positioning knowledge base can comprise different preset problem positioning step information, and a user can inquire the problem positioning step information corresponding to the analysis result in a targeted mode based on the analysis result. The problem location knowledge base can be updated, and the user uploads the latest problem location steps to the problem location knowledge base.
On the basis of the above embodiment, the performing of the abnormal point analysis on the internet hospital system includes:
if the internet hospital system is determined to have a plurality of abnormalities, performing correlation analysis on the plurality of abnormalities according to a preset correlation analysis model and/or performing root analysis on the plurality of abnormalities according to a preset root analysis model to determine an abnormality source in the plurality of abnormalities; and sending the related information of the abnormal source to the user terminal for displaying.
In this embodiment, it is considered that when a certain link of the internet hospital system is abnormal, abnormal triggering warning may occur in a plurality of subsequent links, therefore, when it is determined that a plurality of abnormalities exist in the internet hospital system, correlation analysis and/or root cause analysis can be performed on the plurality of abnormalities, abnormal sources in the plurality of abnormalities are determined, and then, a user can be conveniently and quickly positioned to the abnormal sources under the condition of the plurality of abnormalities, so that the abnormal sources are pertinently solved, the recovery efficiency is improved, and the labor cost is saved. In this embodiment, correlation analysis may be performed on the plurality of anomalies according to a preset correlation analysis model, wherein the preset correlation analysis model may be obtained through training; in addition, the root cause analysis can be performed on the plurality of anomalies according to the preset root cause analysis model, the analysis can be performed on the business process time sequence, the nodes with problems in the business process time sequence are discovered, and similarly, the preset root cause analysis model can also be obtained through training.
After problem positioning is carried out, the positioned problems can be repaired, and specifically, interface repairing, problem repair knowledge base repairing, automatic repairing and the like can be carried out.
On the basis of any of the above embodiments, optionally, as shown in fig. 4, the method may further include:
s401, receiving a second query instruction of a problem repair knowledge base sent by the user terminal according to a problem positioning result, wherein the problem repair knowledge base comprises repair schemes of different problems;
s402, sending the repairing scheme corresponding to the problem positioning result to the user terminal according to the second query instruction.
In this embodiment, a problem repair knowledge base may be provided, where the problem repair knowledge base includes repair schemes for different problems, and a user may query the problem repair knowledge base according to a problem positioning result, obtain a corresponding repair scheme, and then perform manual repair based on the repair scheme.
On the basis of any of the foregoing embodiments, optionally, the method may further include:
and if the problem positioning result is that the updating of the Internet hospital system fails, adopting a standby cluster configured with the Internet hospital system before updating to realize the rollback of the Internet hospital system.
In this embodiment, when the internet hospital system is updated, including when any server cluster is updated, the standby cluster may be used to retain the old version system before updating, and when the new version system in the updated service weapon cluster has an abnormal condition of failure in updating, the standby cluster of the internet hospital system before updating may be used to take over, so as to implement rollback of the internet hospital system, and facilitate maintaining the internet hospital system to continue to work normally.
On the basis of any of the foregoing embodiments, optionally, the method may further include:
and if the problem positioning result is abnormal flow, controlling the internet hospital system to limit the flow of the abnormal flow.
In this embodiment, when the result of problem location is abnormal flow, including abnormal flow at any stage of the business process such as triage, inquiry, prescription, and medicine purchase, the internet hospital system can be controlled to limit the abnormal flow, so as to avoid the continuous abnormal flow from affecting the stable operation of the system.
On the basis of any of the above embodiments, the method further comprises:
performing data preprocessing and feature extraction on the service log data and/or the target index to obtain data features; and training the preset abnormity judgment model according to the data characteristics.
In this embodiment, any model involved in the internet hospital system monitoring method may be trained and optimized based on the obtained business log data and/or target index. Specifically, business log data and/or target indexes can be obtained from a database, data preprocessing is carried out, the data cleaning and data processing are carried out, then feature extraction is carried out, feature data of main data analysis are obtained, such as single quantity prediction and diagnosis receiving duration prediction, the extracted feature data information is stored in the database, model training can be carried out on a DAS machine learning platform after configuration is completed, the trained model is deployed and brought on line, and the trained log is stored in the database, so that continuous training and optimization of the model can be realized, and the effect of the model is guaranteed.
Fig. 5 is a structural diagram of an internet hospital system monitoring device according to an embodiment of the present invention. The internet hospital system monitoring device provided in this embodiment may execute the processing flow provided in the method embodiment, as shown in fig. 5, the internet hospital system monitoring device 500 includes an acquisition module 501, a stream processing module 502, a wind control module 503, and an alarm module 504.
The acquisition module 501 is configured to acquire service log data of an internet hospital system and add the service log data to a message queue;
a stream processing module 502, configured to obtain a target index according to the service log data in the message queue through a stream processing engine;
the wind control module 503 is configured to determine whether the internet hospital system is abnormal according to the target index and a preset alarm rule;
and the alarm module 504 is configured to send an alarm message to the user terminal if it is determined that the internet hospital system is abnormal.
On the basis of any of the above embodiments, the target index includes a target business index and/or a target system index;
the stream processing module 502 is configured to, when obtaining the target index according to the service log data in the message queue through the stream processing engine:
analyzing the service log data in the message queue through the stream processing engine to obtain a target field in the service log data;
and determining the value of the target field as the target service index, or acquiring a target system index according to the value of the target field and a preset algorithm, wherein the preset algorithm is an algorithm for acquiring the target system index.
On the basis of any of the above embodiments, when determining whether the internet hospital system is abnormal according to the target index and the preset alarm rule, the wind control module 503 is configured to:
for a target service index, comparing the target service index with a historical service index, and judging whether the Internet hospital system is abnormal or not according to a comparison result; and/or
And for target system indexes, inputting the target system indexes into a corresponding preset abnormity judgment model, and judging whether the Internet hospital system is abnormal or not through the preset abnormity judgment model.
On the basis of any of the above embodiments, after the stream processing module 502 obtains the target index according to the service log data in the message queue through the stream processing engine, the stream processing module is further configured to:
storing the target index in a database;
the wind control module 503 is configured to, when determining whether there is an abnormality in the internet hospital system according to the target index and a preset alarm rule:
and acquiring a target index from the database in real time or at regular time, and judging whether the Internet hospital system is abnormal or not according to the target index and a preset alarm rule.
On the basis of any of the above embodiments, after determining that there is an abnormality in the internet hospital system, the wind control module 503 is further configured to:
analyzing abnormal points of the Internet hospital system, and sending an analysis result to the user terminal for displaying;
receiving a first query instruction of a problem location knowledge base sent by the user terminal according to the analysis result, wherein the problem location knowledge base comprises a plurality of pieces of preset problem location step information;
and sending the problem positioning step information corresponding to the analysis result to the user terminal according to the first query instruction so that the user can perform problem positioning according to the preset problem positioning step information.
On the basis of any of the above embodiments, when performing the abnormal point analysis on the internet hospital system, the wind control module 503 is configured to:
if the internet hospital system is determined to have a plurality of abnormalities, performing correlation analysis on the plurality of abnormalities according to a preset correlation analysis model and/or performing root analysis on the plurality of abnormalities according to a preset root analysis model to determine an abnormality source in the plurality of abnormalities;
and sending the related information of the abnormal source to the user terminal for displaying.
On the basis of any of the above embodiments, the apparatus further includes an exception recovery module configured to:
receiving a second query instruction of a problem repair knowledge base sent by the user terminal according to a problem positioning result, wherein the problem repair knowledge base comprises repair schemes of different problems;
and sending a repairing scheme corresponding to the problem positioning result to the user terminal according to the second query instruction.
On the basis of any of the above embodiments, the abnormality repairing module is further configured to:
if the problem positioning result is that the updating of the Internet hospital system fails, adopting a standby cluster configured with the Internet hospital system before updating to realize the rollback of the Internet hospital system; or
And if the problem positioning result is abnormal flow, controlling the internet hospital system to limit the flow of the abnormal flow.
On the basis of any of the above embodiments, the apparatus further comprises a training module configured to:
performing data preprocessing and feature extraction on the service log data and/or the target index to obtain data features;
and training the preset abnormity judgment model according to the data characteristics.
On the basis of any one of the above embodiments, the preset abnormality determination model includes at least one of:
the system comprises a transaction flow abnormity detection model, a ticket robbing anti-cheating model, a doctor-patient violation wind control model and a doctor service abnormity detection model.
On the basis of any of the above embodiments, when the collecting module 501 collects the service log data of the internet hospital system, it is configured to:
and acquiring service log data of each internet hospital in a preset log format through a Software Development Kit (SDK) embedded point preset in server-side equipment of each internet hospital of the internet hospital system.
The internet hospital system monitoring device provided by the embodiment of the present invention may be specifically configured to execute the method embodiments provided in fig. 2 to 4, and specific functions are not described herein again.
The monitoring equipment of the internet hospital system provided by the embodiment of the invention collects the service log data of the internet hospital system and adds the service log data into the message queue; acquiring a target index according to the service log data in the message queue through a stream processing engine; judging whether the Internet hospital system is abnormal or not according to the target index and a preset alarm rule; and if the internet hospital system is determined to be abnormal, sending an alarm message to the user terminal. In the embodiment, by acquiring the service log data of the internet hospital system and analyzing and processing the service log data to obtain the target index, a unified monitoring index system is constructed, so that unified monitoring of different internet hospitals accessed to the internet hospital system is realized, further, whether the internet hospital system is abnormal or not can be judged based on the target index and the preset alarm rule, and the potential abnormality of the internet hospital system can be discovered, so that the alarm can be timely given and the abnormality can be recovered.
Fig. 6 is a schematic structural diagram of an electronic device according to an embodiment of the present invention. The electronic device provided by the embodiment of the present invention may execute the processing flow provided by the internet hospital system monitoring method embodiment, as shown in fig. 6, the electronic device 60 includes a memory 61, a processor 62, and a computer program; wherein the computer program is stored in the memory 61 and is configured to be executed by the processor 62 for the internet hospital system monitoring method described in the above embodiment. In addition, the electronic device 60 may also have a communication interface 63 for receiving commands and data transmission.
The electronic device in the embodiment shown in fig. 6 can be used to implement the technical solution of the above-mentioned internet hospital system monitoring method embodiment, and the implementation principle and technical effect are similar, which are not described herein again.
In addition, the present embodiment also provides a computer-readable storage medium on which a computer program is stored, the computer program being executed by a processor to implement the internet hospital system monitoring method described in the above embodiment.
In addition, the present embodiment also provides a computer program product, which includes a computer program, and the computer program is executed by a processor to implement the internet hospital system monitoring method described in the foregoing embodiment.
In the embodiments provided in the present invention, it should be understood that the disclosed apparatus and method may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, or in a form of hardware plus a software functional unit.
The integrated unit implemented in the form of a software functional unit may be stored in a computer readable storage medium. The software functional unit is stored in a storage medium and includes several instructions to enable a computer device (which may be a personal computer, a server, or a network device) or a processor (processor) to execute some steps of the methods described in the embodiments of the present invention. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
It is obvious to those skilled in the art that, for convenience and simplicity of description, the foregoing division of the functional modules is merely used as an example, and in practical applications, the above function distribution may be performed by different functional modules according to needs, that is, the internal structure of the device is divided into different functional modules to perform all or part of the above described functions. For the specific working process of the device described above, reference may be made to the corresponding process in the foregoing method embodiment, which is not described herein again.
The above embodiments are only used for illustrating the technical solutions of the embodiments of the present invention, and are not limited thereto; although embodiments of the present invention have been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and the modifications or the substitutions do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present invention.
Other embodiments of the disclosure will be apparent to those skilled in the art from consideration of the specification and practice of the disclosure disclosed herein. This application is intended to cover any variations, uses, or adaptations of the disclosure following, in general, the principles of the disclosure and including such departures from the present disclosure as come within known or customary practice within the art to which the disclosure pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.
It will be understood that the present disclosure is not limited to the precise arrangements described above and shown in the drawings and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims (15)

1. An internet hospital system monitoring method is characterized by comprising the following steps:
collecting service log data of an internet hospital system, and adding the service log data into a message queue;
acquiring a target index according to the service log data in the message queue through a stream processing engine;
judging whether the Internet hospital system is abnormal or not according to the target index and a preset alarm rule;
and if the internet hospital system is determined to be abnormal, sending an alarm message to the user terminal.
2. The method of claim 1, wherein the target metrics comprise target business metrics and/or target system metrics;
the obtaining of the target index by the stream processing engine according to the service log data in the message queue includes:
analyzing the service log data in the message queue through the stream processing engine to obtain a target field in the service log data;
and determining the value of the target field as the target service index, or acquiring a target system index according to the value of the target field and a preset algorithm, wherein the preset algorithm is an algorithm for acquiring the target system index.
3. The method according to claim 2, wherein the determining whether the internet hospital system is abnormal according to the target index and a preset alarm rule comprises:
for a target service index, comparing the target service index with a historical service index, and judging whether the Internet hospital system is abnormal or not according to a comparison result; and/or
And for target system indexes, inputting the target system indexes into a corresponding preset abnormity judgment model, and judging whether the Internet hospital system is abnormal or not through the preset abnormity judgment model.
4. The method according to any one of claims 1 to 3, wherein after the target index is obtained by the stream processing engine according to the service log data in the message queue, the method further comprises:
storing the target index in a database;
the judging whether the internet hospital system is abnormal or not according to the target index and the preset alarm rule comprises the following steps:
and acquiring a target index from the database in real time or at regular time, and judging whether the Internet hospital system is abnormal or not according to the target index and a preset alarm rule.
5. The method of claim 1, wherein after determining that there is an abnormality in the internet hospital system, further comprising:
analyzing abnormal points of the Internet hospital system, and sending an analysis result to the user terminal for displaying;
receiving a first query instruction of a problem location knowledge base sent by the user terminal according to the analysis result, wherein the problem location knowledge base comprises a plurality of pieces of preset problem location step information;
and sending the problem positioning step information corresponding to the analysis result to the user terminal according to the first query instruction so that the user can perform problem positioning according to the preset problem positioning step information.
6. The method of claim 5, wherein said conducting outlier analysis of an internet hospital system comprises:
if the internet hospital system is determined to have a plurality of abnormalities, performing correlation analysis on the plurality of abnormalities according to a preset correlation analysis model and/or performing root analysis on the plurality of abnormalities according to a preset root analysis model to determine an abnormality source in the plurality of abnormalities;
and sending the related information of the abnormal source to the user terminal for displaying.
7. The method of claim 5, further comprising:
receiving a second query instruction of a problem repair knowledge base sent by the user terminal according to a problem positioning result, wherein the problem repair knowledge base comprises repair schemes of different problems;
and sending a repairing scheme corresponding to the problem positioning result to the user terminal according to the second query instruction.
8. The method of claim 5, further comprising:
if the problem positioning result is that the updating of the Internet hospital system fails, adopting a standby cluster configured with the Internet hospital system before updating to realize the rollback of the Internet hospital system; or
And if the problem positioning result is abnormal flow, controlling the internet hospital system to limit the flow of the abnormal flow.
9. The method of claim 3, further comprising:
performing data preprocessing and feature extraction on the service log data and/or the target index to obtain data features;
and training the preset abnormity judgment model according to the data characteristics.
10. The method according to claim 3 or 9, wherein the preset abnormality determination model includes at least one of:
the system comprises a transaction flow abnormity detection model, a ticket robbing anti-cheating model, a doctor-patient violation wind control model and a doctor service abnormity detection model.
11. The method of claim 1, wherein collecting service log data for an internet hospital system comprises:
and acquiring service log data of each internet hospital in a preset log format through a Software Development Kit (SDK) embedded point preset in server-side equipment of each internet hospital of the internet hospital system.
12. An internet hospital system monitoring device, comprising:
the system comprises an acquisition module, a message queue and a message processing module, wherein the acquisition module is used for acquiring service log data of an Internet hospital system and adding the service log data into the message queue;
the stream processing module is used for acquiring a target index according to the service log data in the message queue through the stream processing engine;
the wind control module is used for judging whether the Internet hospital system is abnormal or not according to the target index and a preset alarm rule;
and the warning module is used for sending a warning message to the user terminal if the abnormality of the Internet hospital system is determined.
13. An electronic device, comprising: at least one processor; and a memory;
the memory stores computer-executable instructions;
the at least one processor executing the computer-executable instructions stored by the memory causes the at least one processor to perform the method of any one of claims 1-11.
14. A computer-readable storage medium having computer-executable instructions stored thereon which, when executed by a processor, implement the method of any one of claims 1-11.
15. A computer program product comprising computer instructions, characterized in that the computer instructions, when executed by a processor, implement the method of any of claims 1-11.
CN202110584123.4A 2021-05-27 2021-05-27 Internet hospital system monitoring method, equipment, storage medium and program product Pending CN113190415A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110584123.4A CN113190415A (en) 2021-05-27 2021-05-27 Internet hospital system monitoring method, equipment, storage medium and program product

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110584123.4A CN113190415A (en) 2021-05-27 2021-05-27 Internet hospital system monitoring method, equipment, storage medium and program product

Publications (1)

Publication Number Publication Date
CN113190415A true CN113190415A (en) 2021-07-30

Family

ID=76985389

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110584123.4A Pending CN113190415A (en) 2021-05-27 2021-05-27 Internet hospital system monitoring method, equipment, storage medium and program product

Country Status (1)

Country Link
CN (1) CN113190415A (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113608990A (en) * 2021-10-08 2021-11-05 上海豪承信息技术有限公司 Terminal performance detection method, device, storage medium and program product
CN113660119A (en) * 2021-08-12 2021-11-16 重庆和航科技股份有限公司 Internet of things terminal state data tracing method and system
CN114817410A (en) * 2022-06-23 2022-07-29 心鉴智控(深圳)科技有限公司 Service data processing method, device, equipment and storage medium
CN115831334A (en) * 2022-11-10 2023-03-21 江苏智先生信息科技有限公司 Safety protection management monitoring system and management platform for medical institution

Citations (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9516053B1 (en) * 2015-08-31 2016-12-06 Splunk Inc. Network security threat detection by user/user-entity behavioral analysis
JP2017045079A (en) * 2015-08-24 2017-03-02 株式会社日立製作所 Cloud management method and cloud management system
CN107273267A (en) * 2017-06-09 2017-10-20 环球智达科技(北京)有限公司 Log analysis method based on elastic components
CN107612740A (en) * 2017-09-30 2018-01-19 武汉光谷信息技术股份有限公司 A kind of daily record monitoring system and method under distributed environment
CN108874614A (en) * 2017-05-11 2018-11-23 上海宏时数据系统有限公司 A kind of big data log intelligent analysis system and method
US20190026163A1 (en) * 2017-07-18 2019-01-24 Sap Se Intelligent Business Logging for Cloud Applications
CN110457178A (en) * 2019-07-29 2019-11-15 江苏艾佳家居用品有限公司 A kind of full link monitoring alarm method based on log collection analysis
CN111221702A (en) * 2019-11-18 2020-06-02 上海维谛信息科技有限公司 Exception handling method, system, terminal and medium based on log analysis
CN111240940A (en) * 2020-01-09 2020-06-05 江苏满运软件科技有限公司 Real-time service monitoring method and device, electronic equipment and storage medium
CN111274094A (en) * 2020-02-04 2020-06-12 上海携程商务有限公司 Interface early warning method, system, equipment and storage medium
CN112269727A (en) * 2020-10-26 2021-01-26 银盛支付服务股份有限公司 Monitoring and alarming method and system based on log information
CN112416724A (en) * 2020-12-04 2021-02-26 中国建设银行股份有限公司 Alarm processing method, system, computer equipment and storage medium

Patent Citations (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2017045079A (en) * 2015-08-24 2017-03-02 株式会社日立製作所 Cloud management method and cloud management system
US9516053B1 (en) * 2015-08-31 2016-12-06 Splunk Inc. Network security threat detection by user/user-entity behavioral analysis
CN108874614A (en) * 2017-05-11 2018-11-23 上海宏时数据系统有限公司 A kind of big data log intelligent analysis system and method
CN107273267A (en) * 2017-06-09 2017-10-20 环球智达科技(北京)有限公司 Log analysis method based on elastic components
US20190026163A1 (en) * 2017-07-18 2019-01-24 Sap Se Intelligent Business Logging for Cloud Applications
CN107612740A (en) * 2017-09-30 2018-01-19 武汉光谷信息技术股份有限公司 A kind of daily record monitoring system and method under distributed environment
CN110457178A (en) * 2019-07-29 2019-11-15 江苏艾佳家居用品有限公司 A kind of full link monitoring alarm method based on log collection analysis
CN111221702A (en) * 2019-11-18 2020-06-02 上海维谛信息科技有限公司 Exception handling method, system, terminal and medium based on log analysis
CN111240940A (en) * 2020-01-09 2020-06-05 江苏满运软件科技有限公司 Real-time service monitoring method and device, electronic equipment and storage medium
CN111274094A (en) * 2020-02-04 2020-06-12 上海携程商务有限公司 Interface early warning method, system, equipment and storage medium
CN112269727A (en) * 2020-10-26 2021-01-26 银盛支付服务股份有限公司 Monitoring and alarming method and system based on log information
CN112416724A (en) * 2020-12-04 2021-02-26 中国建设银行股份有限公司 Alarm processing method, system, computer equipment and storage medium

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113660119A (en) * 2021-08-12 2021-11-16 重庆和航科技股份有限公司 Internet of things terminal state data tracing method and system
CN113608990A (en) * 2021-10-08 2021-11-05 上海豪承信息技术有限公司 Terminal performance detection method, device, storage medium and program product
CN114817410A (en) * 2022-06-23 2022-07-29 心鉴智控(深圳)科技有限公司 Service data processing method, device, equipment and storage medium
CN114817410B (en) * 2022-06-23 2022-09-13 心鉴智控(深圳)科技有限公司 Service data processing method, device, equipment and storage medium
CN115831334A (en) * 2022-11-10 2023-03-21 江苏智先生信息科技有限公司 Safety protection management monitoring system and management platform for medical institution
CN115831334B (en) * 2022-11-10 2023-10-03 江苏智先生信息科技有限公司 Safety protection management monitoring system and management platform for medical institution

Similar Documents

Publication Publication Date Title
CN113190415A (en) Internet hospital system monitoring method, equipment, storage medium and program product
US11657309B2 (en) Behavior analysis and visualization for a computer infrastructure
CN106294091B (en) It is a kind of to intercept method for analyzing performance and system without intrusive log
US6973415B1 (en) System and method for monitoring and modeling system performance
US8352867B2 (en) Predictive monitoring dashboard
US7082381B1 (en) Method for performance monitoring and modeling
CN108964995A (en) Log correlation analysis method based on time shaft event
CN105071969A (en) JMX (Java Management Extensions)-based customization real-time monitoring and automatic exception handling system and method
CN111475370A (en) Operation and maintenance monitoring method, device and equipment based on data center and storage medium
US7197428B1 (en) Method for performance monitoring and modeling
CN114189430A (en) Three-dimensional log full-link monitoring system, method, medium and equipment
US7369967B1 (en) System and method for monitoring and modeling system performance
JP2008276279A (en) Device performance management method, device performance management system, and management program
KR101953558B1 (en) Apparatus and Method for Fault Management of Smart Devices
CN116755992B (en) Log analysis method and system based on OpenStack cloud computing
US7617313B1 (en) Metric transport and database load
CN108665237B (en) Method for establishing automatic inspection model and positioning abnormity based on business system
CN116719664A (en) Application and cloud platform cross-layer fault analysis method and system based on micro-service deployment
CN112699048B (en) Program fault processing method, device, equipment and storage medium based on artificial intelligence
CN113342608A (en) Method and device for monitoring streaming computing engine task
KR20140034994A (en) Apparatus and method for estimation of disease transmission situation using social network service data
CN110011845B (en) Log collection method and system
CN111176950A (en) Method and equipment for monitoring network card of server cluster
CA2793952C (en) Extracting data related to clinical diagnostic instruments
CN112131090B (en) Service system performance monitoring method, device, equipment and medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination