CN113205666B - Early warning method - Google Patents
Early warning method Download PDFInfo
- Publication number
- CN113205666B CN113205666B CN202110492217.9A CN202110492217A CN113205666B CN 113205666 B CN113205666 B CN 113205666B CN 202110492217 A CN202110492217 A CN 202110492217A CN 113205666 B CN113205666 B CN 113205666B
- Authority
- CN
- China
- Prior art keywords
- early warning
- rule
- warning
- data
- early
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G08—SIGNALLING
- G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G08B25/00—Alarm systems in which the location of the alarm condition is signalled to a central station, e.g. fire or police telegraphic systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/14—Error detection or correction of the data by redundancy in operation
- G06F11/1402—Saving, restoring, recovering or retrying
- G06F11/1446—Point-in-time backing up or restoration of persistent data
- G06F11/1458—Management of the backup or restore process
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/21—Design, administration or maintenance of databases
- G06F16/215—Improving data quality; Data cleansing, e.g. de-duplication, removing invalid entries or correcting typographical errors
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/24—Querying
- G06F16/245—Query processing
- G06F16/2455—Query execution
- G06F16/24552—Database cache management
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/25—Integrating or interfacing systems involving database management systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/50—Allocation of resources, e.g. of the central processing unit [CPU]
- G06F9/5005—Allocation of resources, e.g. of the central processing unit [CPU] to service a request
- G06F9/5027—Allocation of resources, e.g. of the central processing unit [CPU] to service a request the resource being a machine, e.g. CPUs, Servers, Terminals
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/50—Allocation of resources, e.g. of the central processing unit [CPU]
- G06F9/5061—Partitioning or combining of resources
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/54—Interprogram communication
- G06F9/546—Message passing systems or structures, e.g. queues
-
- G—PHYSICS
- G08—SIGNALLING
- G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G08B23/00—Alarms responsive to unspecified undesired or abnormal conditions
-
- G—PHYSICS
- G08—SIGNALLING
- G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G08B25/00—Alarm systems in which the location of the alarm condition is signalled to a central station, e.g. fire or police telegraphic systems
- G08B25/008—Alarm setting and unsetting, i.e. arming or disarming of the security system
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2201/00—Indexing scheme relating to error detection, to error correction, and to monitoring
- G06F2201/80—Database-specific techniques
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2209/00—Indexing scheme relating to G06F9/00
- G06F2209/50—Indexing scheme relating to G06F9/50
- G06F2209/5011—Pool
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2209/00—Indexing scheme relating to G06F9/00
- G06F2209/50—Indexing scheme relating to G06F9/50
- G06F2209/5018—Thread allocation
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2209/00—Indexing scheme relating to G06F9/00
- G06F2209/54—Indexing scheme relating to G06F9/54
- G06F2209/548—Queue
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Databases & Information Systems (AREA)
- Software Systems (AREA)
- Data Mining & Analysis (AREA)
- Business, Economics & Management (AREA)
- Emergency Management (AREA)
- Quality & Reliability (AREA)
- Computer Security & Cryptography (AREA)
- Computational Linguistics (AREA)
- Alarm Systems (AREA)
Abstract
The early warning method comprises the steps of performing early warning exception handling before early warning identification, wherein the early warning identification comprises data acquisition and backup; adding acquisition items, and adding global standardized early warning rules and/or customized early warning rules; converting the data into json data; pushing json data to a RabbitMq queue; monitoring a RabbitMq queue, and performing data verification to obtain correct data; storing correct data to a Redis database and an Ehcache cache frame; acquiring correct data from an Ehcache cache frame, matching an early warning rule, identifying the combination and upgrade mechanism of early warning, and explaining the early warning rule to carry out early warning; triggering early warning, generating an early warning log, and reporting the early warning condition; and triggering an early warning recovery mechanism, removing the abnormity and generating an early warning recovery log. The invention realizes the effects of timely discovering abnormity, efficiently and flexibly accumulating abnormity identification experience, dynamically improving the abnormity grade according to the environment and improving the abnormity processing efficiency, accurately judging whether to remove the abnormity early warning state by utilizing the recovery coefficient and the recovery condition, and avoiding frequent early warning recovery and misinformation.
Description
Technical Field
The invention relates to the technical field of early warning, in particular to an early warning method.
Background
In the prior art, the early warning system has various types and different functions, is used for forest fire prevention, public security management, health management and the like. The key safety parameters in the natural and production processes are generally monitored, and when the critical safety parameters reach a limit value, a strong prompt alarm is generated. However, the common alarm mode is single, the content of the configured rule is not friendly, the simple threshold configuration can be performed only according to the existing collected data model, some early warning logics which need to be adapted to local conditions and some early warning logics which need to be calculated by a complex formula often need to be calculated by a user, the threshold result is configured into the rule, the early warning logics can not be really solidified in the rule, the early warning is easily sent out or removed, and the real control can not be realized.
Disclosure of Invention
The invention aims to provide an early warning method and an early warning system aiming at the defects in the background art, wherein early warning logic is solidified in a rule through a preset global standardized early warning rule and a customized early warning rule defined by a user based on an early warning combination mechanism and an early warning upgrading mechanism, early warning and analysis are carried out on abnormal dynamic change conditions of a monitored value in time, abnormal recognition experience is efficiently and flexibly accumulated, abnormal grades are dynamically improved according to the environment, and the efficiency of abnormal processing is improved;
by means of an early warning recovery mechanism, recovery coefficients and recovery conditions are utilized to accurately judge whether an abnormal early warning state is relieved or not, and frequent early warning recovery and false alarm are avoided.
In order to achieve the purpose, the invention adopts the following technical scheme:
the early warning method comprises the steps of carrying out early warning exception handling before early warning identification;
the early warning identification comprises the following steps:
collecting binary data of an environment or equipment to be early-warned, and temporarily backing up the binary data;
adding a collection item to be early-warned based on the collected binary data, and adding a global standardized early-warning rule and/or a customized early-warning rule based on the collection item;
converting the binary data into data conforming to a json protocol;
the converted json data are pushed to a RabbitMq queue concurrently;
monitoring a RabbitMq queue in real time, carrying out data verification on json data, and eliminating problem data to obtain correct data;
storing correct data into a Redis database to perform primary caching to backup the data and storing the correct data into an Ehcache cache frame to perform secondary caching to run the data;
acquiring correct data from an Ehcache cache frame, matching an early warning rule according to an acquisition item, identifying a combination and upgrade mechanism of early warning, and concurrently interpreting the early warning rule based on a thread pool to perform early warning;
triggering early warning, generating an early warning log, and reporting an early warning condition;
and triggering an early warning recovery mechanism, removing the abnormity and generating an early warning recovery log.
The early warning recovery mechanism comprises:
and when the collected binary data is identified to be restored to the normal range, executing restoration judgment operation according to the restoration coefficient and the restoration condition, wherein the restoration judgment operation comprises judging whether the binary data is just restored to the critical value touching the normal range, if so, judging the restoration to be abnormal restoration, and if not, judging the restoration to be normal restoration.
Preferably, the early warning recovery mechanism specifically includes:
if the early warning is the upper limit early warning, the recovery judgment operation comprises the steps of judging whether the detection value is reduced to a set low-point value in a normal range;
if the early warning is the lower limit early warning, the recovery judgment operation comprises the step of judging whether the detection value rises to a set high-point value in a normal range;
the low point value and the high point value do not belong to the critical value of the normal range.
Preferably, the early warning combination mechanism reuses the existing early warning rules to perform complex early warning, and specifically includes:
newly establishing an early warning rule;
and associating the newly-built early warning rule with other existing early warning rules to perform linkage early warning.
Preferably, the early warning upgrading mechanism configures a plurality of early warning rules to perform upgrading linkage early warning, and specifically includes:
configuring a plurality of early warning rules, and carrying out grade division on the early warning rules;
based on the divided grades, the lower-level early warning rule triggers the upper-level early warning rule to carry out early warning, and so on until the highest-level early warning rule is triggered to carry out early warning.
Preferably, each acquisition item can be added with a plurality of early warning rules;
the global standardized early warning rule is a preset early warning rule;
the customized early warning rule is an early warning rule needing to be defined by user;
the early warning rule comprises rule content, duration and early warning level;
the rule content comprises a trigger early warning condition formed by setting judgment logic according to binary data of the acquisition items;
the duration time comprises that when the rule content is judged to be effective, early warning can be triggered after the preset duration time;
the early warning level comprises the division of early warning grades according to severity.
Preferably, the data verification includes:
checking whether the acquired data is negative, if so, carrying out negative elimination warning and eliminating problem data;
and checking whether the self-carried acquisition time of the acquired data exceeds the actual system time, if so, performing time exclusion alarm and eliminating problem data.
Preferably, the early warning log comprises logs recording all full early warning states after the early warning takes effect;
the early warning recovery log comprises a log recording recovery time.
Preferably, the early warning exception handling includes the following steps:
step S1: acquiring original data of an environment or equipment to be early-warned, and judging whether an early-warning rule used in the early-warning identification process is a global standard early-warning rule or a customized early-warning rule based on the original data;
if the pre-warning rule is customized, executing step S3;
if the global standardized early warning rule is adopted, executing step S2;
step S2: setting a global standardized early warning rule;
step S3: performing pre-operation early warning based on the selected early warning rule, generating early warning records, and not reporting early warning information;
step S4: operating early warning judgment according to the early warning record, generating an early warning judgment operation result, triggering an early warning self-correcting mechanism to judge whether the early warning rule has a problem, and if so, suspending the early warning function of the early warning rule;
step S5: and judging whether the test run early warning is triggered according to the early warning judgment operation result, if so, judging that the test run early warning is abnormal, otherwise, judging that the test run early warning is abnormal, and repairing the test run early warning.
Preferably, the method for judging whether the early warning rule has a problem by the early warning self-correcting mechanism comprises the following steps:
judging whether the current early warning rule exceeds an error correction coefficient, if so, judging that the current early warning rule has a problem;
and suspending the early warning function of the early warning rule with the problem and repairing the early warning function.
Preferably, when the test run early warning is not triggered, whether the early warning abnormality is confirmed to be processed within a preset time is judged, and if yes, the early warning is repaired; if not, an abnormal alarm is sent out.
Compared with the prior art, the invention has the following beneficial effects:
1. the method carries out early warning abnormity processing before early warning identification, judges whether the current early warning system is abnormal or not by carrying out trial operation early warning according to different early warning rules and judges whether the current early warning rule has problems or not by an early warning self-error correction mechanism, thereby realizing the self-checking of the early warning rules and improving the correctness of the early warning system.
2. According to the invention, through a preset global standardized early warning rule and a customized early warning rule defined by a user, based on an early warning combination mechanism and an early warning upgrading mechanism, early warning logic is solidified in the rule, early warning and analysis are carried out on abnormal dynamic change conditions of a monitored value in time, abnormal recognition experience is efficiently and flexibly accumulated, the abnormal grade is dynamically improved according to the environment, and the efficiency of abnormal processing is improved;
3. according to the method, through an early warning recovery mechanism, whether the abnormal early warning state is relieved or not is accurately judged by utilizing the recovery coefficient and the recovery condition, and frequent early warning recovery and false alarm are avoided;
4. the invention provides a manual auditing function and early warning record for traceability analysis, ensures reliable and safe production operation, and informs related parties in advance to carry out preventive protection before danger occurs.
Drawings
FIG. 1 is a flow diagram of early warning exception handling according to one embodiment of the invention;
fig. 2 is a timing diagram of an early warning identification process of one embodiment of the invention.
Detailed Description
Reference will now be made in detail to embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like or similar reference numerals refer to the same or similar elements or elements having the same or similar function throughout. The embodiments described below with reference to the accompanying drawings are illustrative only for the purpose of explaining the present invention and are not to be construed as limiting the present invention;
any process or method descriptions in flow charts or otherwise described herein may be understood as representing modules, segments, or portions of code which include one or more executable instructions for implementing specific logical functions or steps of the process, and alternate implementations are included within the scope of the preferred embodiment of the present invention in which functions may be executed out of order from that shown or discussed, including substantially concurrently or in reverse order, depending on the functionality involved, as would be understood by those reasonably skilled in the art of the present invention.
The technical scheme of the invention is further explained by the specific implementation mode in combination with the attached drawings.
The early warning method in the prior art is single, is unfriendly when rule contents are configured, can be simply configured according to an existing acquired data model, needs early warning logics according to local conditions and needs complex formula calculation, often needs a user to calculate a threshold value result by himself/herself and then configures the threshold value into a rule, and cannot really solidify the early warning logics in the rule, and in order to solve the problems, the early warning method is provided, and comprises the steps of performing early warning abnormal processing before early warning identification, as shown in fig. 2;
the early warning identification comprises the following steps:
collecting binary data of an environment or equipment to be early-warned, and temporarily backing up the binary data;
in the embodiment, a processor is used for collecting binary data of an environment or equipment, and a memory is used for temporarily backing up the binary data so as to prevent the collected data from being lost;
adding a collection item to be early-warned based on the collected binary data, and adding a global standardized early-warning rule and/or a customized early-warning rule based on the collection item;
in this embodiment, the acquisition items may include items such as current, voltage, harmonic, temperature, and the like, and the specific acquisition items are determined according to actual production and according to the acquisition capability of the processor; the addition and deletion of the acquisition items can dynamically react to the early warning;
preferably, each acquisition item can be added with a plurality of early warning rules;
the global standardized early warning rule is a preset early warning rule, and it needs to be explained that the preset early warning rule is an early warning rule carried by the system and does not need to be set by a user;
the customized early warning rule is an early warning rule needing to be customized, and it needs to be explained that the customized early warning rule needs a user to set the early warning rule by himself and then is added;
the global standardized early warning rule and the customized early warning rule can be automatically switched, namely, after a user selects the global standardized early warning rule, the global standardized early warning rule can be converted into the customized early warning rule, and the conversion of the early warning rule can be dynamically reflected to early warning;
the early warning rule comprises rule content, duration and early warning level;
the rule content comprises a trigger early warning condition formed by setting judgment logic according to binary data of the acquisition items;
for example, in this embodiment, the warning rule is based on a grammar close to natural language, and the logic is determined by a record or voice control input according to actual business requirements, for example: (waning. actual value > (waning. ratinga. 1.07-10)) & (waning. measurepointname. equials ("xxx collection point") | warning. measurepointname. continain. continuously ("xxx city"));
the early warning rule means that the actual value of the collected data is greater than a rated value x 1.07-10, and the name of the collection point is a xxx collection point or the area of the collection point is a xxx city, the judgment is valid; except individual keywords, the grammar of the content of the early warning rule is the same as that of natural language, so that the early warning rule is convenient to write;
meanwhile, the system also provides another mode for generating rule contents: setting a simple threshold value, and generating the content of the complaint rule according to the set threshold value;
the duration time comprises that when the rule content is judged to be effective, early warning can be triggered after the preset duration time; that is, after the logic in the rule content is triggered, the logic needs to last for a period of time, so that the early warning can be triggered.
The early warning level comprises the division of early warning grades according to severity.
If the color is divided into blue (general), yellow (heavy) and red (serious) according to the severity, the early warning grades are divided according to different colors;
it should be noted that, when configuring the early warning rule, the user may be allowed to pass after performing manual review, if the user needs manual review, an application needs to be initiated, and manual confirmation needs to be performed within a certain time, and if no manual confirmation exists within a certain time, the rule is defaulted to be invalid, and the early warning cannot be triggered.
Converting the binary data into data conforming to a json protocol;
the converted json data are pushed to a RabbitMq queue concurrently;
the cloud acquisition server interprets the binary data into data conforming to a json protocol after receiving the binary data sent by the processor, and pushes the json data to a RabbitMq queue by fully utilizing a multi-core processor of the cloud server by using a java thread pool;
monitoring a RabbitMq queue in real time, carrying out data verification on json data, and eliminating problem data to obtain correct data;
acquiring json data by monitoring a RabbitMq queue, using a java thread pool, concurrently performing data verification on the acquired data, and eliminating problem data;
specifically, the data verification includes:
checking whether the acquired data is negative, if so, carrying out negative elimination warning and eliminating problem data;
checking whether the self-carried acquisition time of the acquired data exceeds the actual system time, if so, performing time exclusion alarm and excluding problem data;
the early warning result can be effectively prevented from being interfered by error data through checking the data.
Storing correct data into a Redis database to perform primary caching to backup the data and storing the correct data into an Ehcache cache frame to perform secondary caching to run the data;
the method comprises the steps of storing correct data into a Redis database, wherein the Redis data has a first-level cache function, backing up the correct data and preventing the correct data from being lost, and meanwhile, storing the correct data into an Ehcache cache frame, wherein the Ehcache cache frame has a second-level cache function, and acquiring data from the Ehcache cache frame according to a subsequent matching early warning rule.
Acquiring correct data from an Ehcache cache frame, matching an early warning rule according to an acquisition item, identifying a combination and upgrade mechanism of early warning, and concurrently interpreting the early warning rule based on a thread pool to perform early warning;
specifically, according to different acquisition items, matching is carried out by selecting a corresponding early warning rule from the selected global standardized early warning rules or customized early warning rules;
preferably, the early warning combination mechanism reuses the existing early warning rules to perform complex early warning, and specifically includes:
newly building an early warning rule;
and associating the newly-built early warning rule with other existing early warning rules to perform linkage early warning.
Preferably, the early warning upgrading mechanism configures a plurality of early warning rules to perform upgrading linkage early warning, and specifically includes:
configuring a plurality of early warning rules, and carrying out grade division on the early warning rules;
based on the divided grades, the lower-level early warning rule triggers the upper-level early warning rule to carry out early warning, and so on until the highest-level early warning rule is triggered to carry out early warning.
The early warning combination comprises the following steps of associating other existing early warning rules for linkage early warning by newly establishing an early warning rule, for example, the following scenes:
the fire alarm needs to be warned, and the current rules are as follows:
A. the carbon monoxide gas concentration is ultrahigh, and the early warning rule (the duration is one minute, and the early warning level is particularly serious);
B. the air temperature is ultrahigh, and the early warning rule (the duration is one minute, and the early warning level is particularly serious);
C. the dust concentration is ultrahigh, and the early warning rule (the duration is one minute, and the early warning level is particularly serious);
and (3) actual operation after combination: the client adds a fire alarm early warning rule to be associated with the three early warning rules, when two of the three early warning rules take effect, the fire alarm can be triggered to be early warned, the existing early warning rules are reused to carry out complex early warning by newly adding an early warning rule, no additional acquisition equipment is needed, no repeated early warning logic needs to be designed, and the cost is saved to the maximum extent;
further, the early warning upgrade configures upgrade linkage of a plurality of early warning rules according to business requirements, so that the upgrade of early warning is realized, for example, in the following scenes:
the requirement carries out early warning to thunderstorm weather, has had the rule at present:
A. the heavy rain early warning rainfall is 25-50 mm in early warning rule (the duration is 24 hours, the early warning level is serious);
B. the rainstorm rainfall is 50-100 mm in early warning rule (the duration is 24 hours, and the early warning level is serious);
C. the heavy rainstorm rainfall is 100-250 mm in early warning rule (the duration is 24 hours, and the early warning level is serious);
D. the early warning rule (the duration is 24 hours, the early warning level is serious) of the ultra-large heavy rain whose rainfall is more than 250 mm;
actual operation after upgrading: and adding one thunderstorm weather early warning rule to be associated with the 4 early warning rules, triggering the higher early warning to carry out early warning when the lower early warning takes effect, triggering the higher early warning again when the higher early warning takes effect, and repeating the steps until the highest early warning is achieved.
Triggering early warning, generating an early warning log, and reporting an early warning condition;
the report early warning condition can be notified by sending short messages, e-mails, WeChat messages, voice messages and other forms;
and triggering an early warning recovery mechanism, removing the abnormity and generating an early warning recovery log.
After the abnormity is relieved, the early warning recovery mechanism is triggered to recover to normal state, the condition of continuous early warning is prevented, and the relevant information of the early warning is stored by generating an early warning log and generating an early warning recovery log so as to facilitate subsequent checking.
The early warning recovery mechanism comprises:
and when the collected binary data is identified to be restored to the normal range, executing restoration judgment operation according to the restoration coefficient and the restoration condition, wherein the restoration judgment operation comprises judging whether the binary data is just restored to the critical value touching the normal range, if so, judging the restoration to be abnormal restoration, and if not, judging the restoration to be normal restoration.
Preferably, the early warning recovery mechanism specifically includes:
if the early warning is the upper limit early warning, the recovery judgment operation comprises the steps of judging whether the detection value is reduced to a set low-point value in a normal range;
if the early warning is the lower limit early warning, the recovery judgment operation comprises the step of judging whether the detection value rises to a set high-point value in a normal range;
the low point value and the high point value do not belong to the critical value of the normal range.
When the change of the collected data is recognized, which can be understood as that the data value is restored to be within the normal range in the embodiment, the early warning state is not immediately released, but the judgment is performed according to the recovery coefficient and the recovery condition, when the detection value is judged, that is, the collected data is reduced to a low-point value within the normal range or is increased to a high-point value within the normal range, the abnormal state is released, and it needs to be noted that the operation of releasing the abnormal state is not triggered when the detection value touches a critical value within the normal range.
There are two ways of setting the recovery coefficient and the recovery condition:
1. user-defined settings (two ways): a. specific numerical values can be filled in; b. filling in recovery content;
2. performing machine learning and artificial intelligent automatic judgment according to multiple times of early warning validation and recovery of the monitoring point or similar monitoring points;
preferably, the early warning log comprises logs recording all full early warning states after early warning takes effect;
the early warning recovery log comprises a log for recording recovery time.
In case that the triggering condition and the early warning process of the early warning system in the prior art are set, the triggering condition and the early warning process cannot be changed and checked under normal conditions, the situation that the early warning process and the triggering condition are not known by themselves due to the fact that the early warning process and the triggering condition are prone to causing problems can be easily caused, namely, the abnormity existing in the whole early warning system can not be identified and processed, so that the whole early warning system is prone to generating deviation when early warning is carried out, in order to solve the problems, the early warning abnormity processing is carried out before the early warning identification is carried out, and the early warning abnormity processing comprises the following steps:
step S1: acquiring original data of an environment or equipment to be early-warned, and judging whether an early-warning rule used in the early-warning identification process is a global standard early-warning rule or a customized early-warning rule based on the original data;
if the pre-warning rule is the customized pre-warning rule, executing step S3;
if the global standardized early warning rule is adopted, executing step S2;
step S2: setting a global standardized early warning rule;
preferably, the setting of the global standardized early warning rule comprises setting rule contents, upper and lower limit values, early warning recovery conditions and early warning recovery coefficients;
the early warning judgment comprises the judgment of rule content, upper and lower limit values, early warning recovery conditions, early warning recovery coefficients, duration and early warning levels.
In this embodiment, as shown in the global standardized early warning rule table, taking early warning of the power distribution network as an example, setting a global standardized early warning rule, including setting an early warning rule name, early warning rule contents, an upper limit value, a lower limit value, a recovery coefficient, a recovery condition, and the like, when setting, if the upper and lower limit values are empty, early warning is performed according to the early warning rule contents, otherwise, the early warning is performed according to the upper and lower limit values;
global standardized early warning rule table:
step S3: performing pre-operation early warning based on the selected early warning rule, generating early warning records, and not reporting early warning information;
step S4: operating early warning judgment according to the early warning record, generating an early warning judgment operation result, triggering an early warning self-correcting mechanism to judge whether the early warning rule has a problem, and if so, suspending the early warning function of the early warning rule;
preferably, the method for judging whether the early warning rule has a problem by the early warning self-correcting mechanism comprises the following steps:
judging whether the current early warning rule exceeds an error correction coefficient, if so, judging that the current early warning rule has a problem;
and suspending the early warning function of the early warning rule with the problem and repairing the early warning function.
Step S5: and judging whether the test run early warning is triggered according to the early warning judgment operation result, if so, judging that the test run early warning is abnormal, otherwise, judging that the test run early warning is abnormal, and repairing the test run early warning.
Preferably, when the pre-warning of the test run is not triggered, whether the abnormality of the pre-warning is determined to be processed within a preset time is judged, and if the abnormality of the pre-warning is determined, the pre-warning is repaired; if not, an abnormal alarm is sent out.
In the embodiment, it is very necessary to identify and process the possible abnormality of the early warning system, so that the problem that the early warning system may have the abnormal early warning process is placed before the step of identifying the equipment or the environment by the early warning system, so as to ensure that the equipment or the environment cannot be deviated during early warning identification; specifically, the early warning identification is carried out based on two early warning rules, namely a global standardized early warning rule and a customized early warning rule, the global standardized early warning rule is a self-contained default early warning rule of an early warning system, and the customized early warning rule is a customer-defined early warning rule, so that judgment is needed firstly;
further, the pre-run warning generates a warning record, but does not send warning information to the outside, it should be noted that the pre-run warning needs to be continued for a period of time, such as 2 hours of pre-run warning shown in fig. 1, so as to ensure the effectiveness of the pre-run warning, the pre-run warning can generate a pre-run warning judgment result, whether the pre-run warning is triggered or not can be judged based on the result, if yes, if the early warning of the early warning system is not abnormal, the early warning of the early warning system is abnormal, and if the early warning of the early warning system is abnormal, waiting for confirmation within a period of time, such as 2 hours as shown in fig. 1, this time confirmation being a manual confirmation, confirming whether to proceed with the process, if so, if not, indicating that the test run early warning is abnormal but cannot be known, and selecting a corresponding notification mode to send out a repair strategy;
further, when the pre-run pre-warning is carried out, a pre-warning self-correction mechanism is triggered, wherein the pre-warning self-correction mechanism can be understood as that if an early-warning rule is generated in an over-constant amount (error correction coefficient), the generation of the rule is firstly suspended, then a relevant person in charge is informed to carry out processing, after the relevant person in charge processes the rule, no problem is confirmed, and then the rule pre-warning work is resumed; the error correction coefficient can be set to alarm at the same time for more than 30% of users according to an early warning rule in fig. 1 or generate 50 early warning messages within 15 minutes.
The error correction coefficient setting mode has two types:
1. user-defined settings (including two ways): a. specific numerical values can be filled in; b. filling error correction content;
2. the system performs machine learning and artificial intelligence automatic judgment according to the effect and recovery of multiple previous early warnings of the monitoring point or similar monitoring points;
the technical principle of the present invention is described above in connection with specific embodiments. The description is made for the purpose of illustrating the principles of the invention and should not be taken in any way as a limitation on the scope of the invention. Based on the explanations herein, those skilled in the art will be able to conceive of other embodiments of the present invention without inventive step, and these embodiments will fall within the scope of the present invention.
Claims (6)
1. An early warning method is characterized in that: performing early warning exception handling before early warning identification;
the early warning identification comprises the following steps:
collecting binary data of an environment or equipment to be early warned, and temporarily backing up the binary data;
adding a collection item to be pre-warned based on the collected binary data, and adding a global standardized pre-warning rule and/or a customized pre-warning rule based on the collection item, wherein the global standardized pre-warning rule is a preset pre-warning rule, the customized pre-warning rule is a pre-warning rule needing to be defined by user, and the global standardized pre-warning rule and the customized pre-warning rule can be switched automatically;
converting the binary data into data conforming to a json protocol;
the converted json data are pushed to a RabbitMq queue concurrently;
monitoring a RabbitMq queue in real time, carrying out data verification on json data, and eliminating problem data to obtain correct data;
storing correct data into a Redis database to perform primary caching to backup the data and storing the correct data into an Ehcache cache frame to perform secondary caching to run the data;
acquiring correct data from an Ehcache cache frame, matching an early warning rule according to an acquisition item, identifying a combination and upgrade mechanism of early warning, and concurrently interpreting the early warning rule based on a thread pool to perform early warning;
triggering early warning, generating an early warning log, and reporting the early warning condition;
triggering an early warning recovery mechanism, removing the abnormity and generating an early warning recovery log;
the early warning recovery mechanism comprises:
when the collected binary data are identified to be restored to the normal range, executing restoration judgment operation according to the restoration coefficient and the restoration condition, wherein the restoration judgment operation comprises judging whether the binary data are just restored to the critical value touching the normal range, if so, judging the restoration to be abnormal restoration, and if not, judging the restoration to be normal restoration;
the early warning combination mechanism reuses the existing early warning rules to perform complex early warning, and specifically comprises the following steps:
newly building an early warning rule;
associating the newly-built early warning rule with other existing early warning rules to perform linkage early warning;
the upgrading linkage early warning is carried out by configuring a plurality of early warning rules by an upgrading mechanism of the early warning, and the method specifically comprises the following steps:
configuring a plurality of early warning rules, and carrying out grade division on the early warning rules;
based on the divided grades, the lower-level early warning rules trigger the upper-level early warning rules to carry out early warning, and so on until the highest-level early warning rules are triggered to carry out early warning;
the early warning exception handling method comprises the following steps:
step S1: acquiring original data of an environment or equipment to be early-warned, and judging whether an early-warning rule used in the early-warning identification process is a global standard early-warning rule or a customized early-warning rule based on the original data;
if the pre-warning rule is the customized pre-warning rule, executing step S3;
if the global standardized early warning rule is adopted, executing step S2;
step S2: setting a global standardized early warning rule;
step S3: performing pre-operation early warning based on the selected early warning rule, generating early warning records, and not reporting early warning information;
step S4: running early warning judgment according to early warning records, generating an early warning judgment running result, triggering an early warning self-correction mechanism to judge whether a current early warning rule exceeds an error correction coefficient, and if so, judging that the current early warning rule has a problem, wherein the error correction coefficient comprises a custom constant;
suspending the early warning function of the early warning rule with problems and repairing the early warning function;
step S5: and judging whether the test run early warning is triggered or not according to the early warning judgment operation result, if so, judging that the test run early warning is abnormal, otherwise, judging that the test run early warning is abnormal, and repairing the test run early warning.
2. The warning method as claimed in claim 1, wherein:
the early warning recovery mechanism specifically comprises:
if the early warning is the upper limit early warning, the recovery judging operation comprises the step of judging whether the detection value is reduced to a set low-point value in a normal range;
if the early warning is the lower limit early warning, the recovery judgment operation comprises the step of judging whether the detection value rises to a set high-point value in a normal range;
the low point value and the high point value do not belong to the critical value of the normal range.
3. The warning method as claimed in claim 1, wherein:
each acquisition item can be added with a plurality of early warning rules;
the early warning rule comprises rule content, duration and early warning level;
the rule content comprises a trigger early warning condition formed by setting judgment logic according to binary data of the acquisition items;
the duration time comprises that when the rule content is judged to be effective, early warning can be triggered after the preset duration time;
the early warning level comprises the division of early warning grades according to severity.
4. The warning method as claimed in claim 1, wherein:
the data verification comprises the following steps:
checking whether the acquired data is negative, if so, carrying out negative elimination warning and eliminating problem data;
and checking whether the self-carried acquisition time of the acquired data exceeds the actual system time, if so, performing time exclusion alarm and eliminating problem data.
5. The warning method according to claim 1, wherein:
the early warning logs comprise logs recording all full early warning states after early warning takes effect;
the early warning recovery log comprises a log recording recovery time.
6. The warning method according to claim 5, wherein:
when the trial operation early warning is not triggered, judging whether to confirm to process the early warning abnormity within preset time, and if so, repairing the early warning; if not, an abnormal alarm is sent out.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202110492217.9A CN113205666B (en) | 2021-05-06 | 2021-05-06 | Early warning method |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202110492217.9A CN113205666B (en) | 2021-05-06 | 2021-05-06 | Early warning method |
Publications (2)
Publication Number | Publication Date |
---|---|
CN113205666A CN113205666A (en) | 2021-08-03 |
CN113205666B true CN113205666B (en) | 2022-06-17 |
Family
ID=77030048
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202110492217.9A Active CN113205666B (en) | 2021-05-06 | 2021-05-06 | Early warning method |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN113205666B (en) |
Families Citing this family (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113760879B (en) * | 2021-08-24 | 2024-02-27 | 携程旅游信息技术(上海)有限公司 | Database anomaly monitoring method, system, electronic equipment and medium |
Citations (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5155468A (en) * | 1990-05-17 | 1992-10-13 | Sinmplex Time Recorder Co. | Alarm condition detecting method and apparatus |
CN101324856A (en) * | 2008-08-07 | 2008-12-17 | 金蝶软件(中国)有限公司 | Method and system for upgrading data |
CN101572015A (en) * | 2009-01-04 | 2009-11-04 | 四川川大智胜软件股份有限公司 | Evaluation and test method for short term collision alert in air traffic control automation system |
CN109583758A (en) * | 2018-11-30 | 2019-04-05 | 广州净松软件科技有限公司 | Early warning rule modification method, device and the computer equipment of observation system |
CN110334728A (en) * | 2019-05-06 | 2019-10-15 | 中国联合网络通信集团有限公司 | A kind of fault early warning method and device towards industry internet |
CN112000324A (en) * | 2020-08-21 | 2020-11-27 | 成都卫士通信息产业股份有限公司 | Warning function setting method and device and related components |
CN112215452A (en) * | 2020-07-28 | 2021-01-12 | 智维云图(上海)智能科技有限公司 | Intelligent fire-fighting remote monitoring method and system and safety assessment method |
CN112422638A (en) * | 2020-10-28 | 2021-02-26 | 北京北明数科信息技术有限公司 | Data real-time stream processing method, system, computer device and storage medium |
CN112565009A (en) * | 2020-11-27 | 2021-03-26 | 中盈优创资讯科技有限公司 | Processing method and device based on custom performance threshold alarm rule |
Family Cites Families (14)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4703325A (en) * | 1984-10-22 | 1987-10-27 | Carrier Corp. | Remote subsystem |
JP4080980B2 (en) * | 2003-09-26 | 2008-04-23 | 三菱電機株式会社 | Electronic control unit |
US10832564B2 (en) * | 2017-05-01 | 2020-11-10 | Johnson Controls Technology Company | Building security system with event data analysis for generating false alarm rules for false alarm reduction |
CN107436497A (en) * | 2017-09-12 | 2017-12-05 | 丹阳市精通眼镜技术创新服务中心有限公司 | A kind of gas leakage alarm glasses and preparation method thereof |
CN108010286A (en) * | 2017-10-20 | 2018-05-08 | 中电和瑞科技有限公司 | A kind of analog quantity off-limit alarm method and apparatus |
CN107977165B (en) * | 2017-11-22 | 2021-01-08 | 用友金融信息技术股份有限公司 | Data cache optimization method and device and computer equipment |
CN108040092B (en) * | 2017-11-28 | 2018-11-27 | 特斯联(北京)科技有限公司 | A kind of management of Internet of Things big data and application platform towards garden |
CN109446448A (en) * | 2018-09-10 | 2019-03-08 | 平安科技(深圳)有限公司 | Data processing method and system |
CN109710639A (en) * | 2018-11-26 | 2019-05-03 | 厦门市美亚柏科信息股份有限公司 | A kind of search method based on pair buffers, device and storage medium |
CN111190798A (en) * | 2020-01-03 | 2020-05-22 | 苏宁云计算有限公司 | Service data monitoring and warning device and method |
CN111831458B (en) * | 2020-06-11 | 2024-04-26 | 武汉烽火技术服务有限公司 | High-concurrency high-decoupling data processing method and data center system |
CN112149823A (en) * | 2020-08-20 | 2020-12-29 | 汉威科技集团股份有限公司 | Combined implementation method for filtering alarm information |
CN112084087A (en) * | 2020-08-24 | 2020-12-15 | 上海微亿智造科技有限公司 | Industrial equipment state monitoring and operation and maintenance management method and system |
CN112134736A (en) * | 2020-09-17 | 2020-12-25 | 叶晓斌 | Method for judging alarm convergence recovery based on damping algorithm |
-
2021
- 2021-05-06 CN CN202110492217.9A patent/CN113205666B/en active Active
Patent Citations (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5155468A (en) * | 1990-05-17 | 1992-10-13 | Sinmplex Time Recorder Co. | Alarm condition detecting method and apparatus |
CN101324856A (en) * | 2008-08-07 | 2008-12-17 | 金蝶软件(中国)有限公司 | Method and system for upgrading data |
CN101572015A (en) * | 2009-01-04 | 2009-11-04 | 四川川大智胜软件股份有限公司 | Evaluation and test method for short term collision alert in air traffic control automation system |
CN109583758A (en) * | 2018-11-30 | 2019-04-05 | 广州净松软件科技有限公司 | Early warning rule modification method, device and the computer equipment of observation system |
CN110334728A (en) * | 2019-05-06 | 2019-10-15 | 中国联合网络通信集团有限公司 | A kind of fault early warning method and device towards industry internet |
CN112215452A (en) * | 2020-07-28 | 2021-01-12 | 智维云图(上海)智能科技有限公司 | Intelligent fire-fighting remote monitoring method and system and safety assessment method |
CN112000324A (en) * | 2020-08-21 | 2020-11-27 | 成都卫士通信息产业股份有限公司 | Warning function setting method and device and related components |
CN112422638A (en) * | 2020-10-28 | 2021-02-26 | 北京北明数科信息技术有限公司 | Data real-time stream processing method, system, computer device and storage medium |
CN112565009A (en) * | 2020-11-27 | 2021-03-26 | 中盈优创资讯科技有限公司 | Processing method and device based on custom performance threshold alarm rule |
Also Published As
Publication number | Publication date |
---|---|
CN113205666A (en) | 2021-08-03 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN109343395B (en) | Abnormity detection system and method for DCS operation log of nuclear power plant | |
JP2009289221A (en) | Monitoring apparatus and monitoring method for detecting sign of fault or the like of monitoring target system | |
CN110879109A (en) | Cable joint temperature data acquisition method, monitoring device and storage medium | |
CN113205666B (en) | Early warning method | |
CN106837707A (en) | A kind of automatic trouble diagnosis system based on fault model triggering | |
CN107634988A (en) | A kind of method and server of the Fault Diagnosis for Substation based on Internet of Things | |
CN103278719A (en) | Power equipment fault detection method and system based on matrix diagram and confidence coefficient | |
CN112461289A (en) | Ring main unit fault monitoring method, system, terminal and storage medium | |
CN114996090A (en) | Server abnormity detection method and device, electronic equipment and storage medium | |
CN115794588A (en) | Memory fault prediction method, device and system and monitoring server | |
CN110009347B (en) | Block chain transaction information auditing method and device | |
CN113159608B (en) | Early warning abnormity processing method and system based on early warning identification | |
CN109194501A (en) | The method of the Intranet application system emergency response disposition of intelligent automation | |
CN116010886B (en) | Security monitoring method, device, electronic equipment and storage medium | |
CN111401760B (en) | Safety and stability control device exception handling decision method and device | |
CN113034056A (en) | Early warning identification method and system | |
CN112666458B (en) | Power generation equipment state evaluation method and evaluation device | |
CN113592108A (en) | Charging fault management method of charging pile and related equipment | |
CN112598293A (en) | Safety risk identification system and method for chemical enterprises | |
CN115375059A (en) | Power grid risk operation and maintenance automatic early warning method and system | |
CN111146863A (en) | Power safety detection method for transformer substation | |
CN112565221B (en) | Vulnerability detection method, device, system and platform | |
CN115049517A (en) | Power grid power failure monitoring method and device | |
CN115348150B (en) | Abnormality alarming method and device | |
CN117217625B (en) | Enterprise safety supervision method and device based on data analysis |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |