CN113238911A - Alarm processing method and device - Google Patents

Alarm processing method and device Download PDF

Info

Publication number
CN113238911A
CN113238911A CN202110437427.8A CN202110437427A CN113238911A CN 113238911 A CN113238911 A CN 113238911A CN 202110437427 A CN202110437427 A CN 202110437427A CN 113238911 A CN113238911 A CN 113238911A
Authority
CN
China
Prior art keywords
alarm
data
collector
threshold value
instruction
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202110437427.8A
Other languages
Chinese (zh)
Inventor
王金水
谢建隆
詹碧英
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Kehua Data Co ltd
Zhangzhou Kehua Technology Co Ltd
Original Assignee
Kehua Data Co ltd
Zhangzhou Kehua Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Kehua Data Co ltd, Zhangzhou Kehua Technology Co Ltd filed Critical Kehua Data Co ltd
Priority to CN202110437427.8A priority Critical patent/CN113238911A/en
Publication of CN113238911A publication Critical patent/CN113238911A/en
Pending legal-status Critical Current

Links

Abstract

The invention is suitable for the technical field of data centers, and provides an alarm processing method and an alarm processing device, wherein the method comprises the following steps: acquiring first alarm data sent by at least one collector of a data center; respectively carrying out alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data; and if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, generating an adjusting instruction for indicating the collector to adjust the alarm judging flow based on a preset rule. According to the method and the device, the first warning judgment can be performed in each collector, so that the monitoring device can directly acquire warning data, resource shortage and response bottleneck caused by the fact that all data are accumulated together are avoided, meanwhile, the monitoring device can perform secondary warning judgment on the warning data, and therefore the judgment accuracy of the warning data is improved.

Description

Alarm processing method and device
Technical Field
The invention belongs to the technical field of data centers, and particularly relates to an alarm processing method and device.
Background
Currently, the construction of data centers, especially micro-modular data centers, is rapidly developing. However, with the construction of a large data center machine room, the intelligent devices and 1T devices in the micro-module infrastructure are deployed in a large amount, which poses a great challenge to the data acquisition and processing capability of the data center monitoring system.
At present, when Data of a Data Center is processed, all Data collected by each collector is mainly processed through a Data Center Information Management (DCIM). However, with the construction of increasingly large data centers, when a single DCIM is used for data processing in the prior art, the defects of central host resource shortage and response bottleneck can occur.
Disclosure of Invention
In view of this, embodiments of the present invention provide an alarm processing method and apparatus to solve the problem of monitoring resource shortage and response bottleneck in the prior art.
A first aspect of an embodiment of the present invention provides an alarm processing method, which is applied to a monitoring device, and includes:
acquiring first alarm data sent by at least one collector of a data center, wherein the first alarm data are operation data screened by each collector according to a corresponding first alarm threshold;
respectively carrying out alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data;
and if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, generating an adjusting instruction of the collector based on a preset rule, and sending the adjusting instruction to the collector, wherein the adjusting instruction is used for indicating the collector to adjust the alarm judgment process.
A second aspect of an embodiment of the present invention provides an alarm processing method, including:
collecting operation data of monitored equipment;
performing alarm judgment on the operating data, and taking the operating data exceeding a first alarm threshold value as first alarm data;
sending the first alarm data to a monitoring device;
if a monitoring threshold value updating instruction sent by the monitoring device is received; and replacing the corresponding first alarm threshold value according to a third alarm threshold value carried in the monitoring threshold value updating instruction.
A third aspect of the present embodiment provides an alarm processing apparatus, which is applied to a monitoring apparatus, and includes:
the data acquisition module is used for acquiring first alarm data sent by at least one collector of the data center, wherein the first alarm data are operation data screened by each collector according to a corresponding first alarm threshold;
the secondary alarm judging module is used for respectively carrying out alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data;
and the alarm flow adjusting module is used for generating an adjusting instruction of the collector based on a preset rule and sending the adjusting instruction to the collector if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, wherein the adjusting instruction is used for indicating the collector to adjust the alarm judging flow.
A fourth aspect of the embodiments of the present invention provides a monitoring apparatus, including a memory, a processor, and a computer program stored in the memory and executable on the processor, where the processor implements the steps of the alarm processing method as described above when executing the computer program.
A fifth aspect of embodiments of the present invention provides a computer-readable storage medium, which stores a computer program that, when executed by a processor, implements the steps of the alarm processing method as described above.
Compared with the prior art, the embodiment of the invention has the following beneficial effects: the embodiment firstly obtains first alarm data sent by at least one collector of a data center, wherein the first alarm data are operation data screened by each collector according to a respective corresponding first alarm threshold; then, alarm judgment is carried out on the first alarm data sent by each collector respectively to obtain corresponding second alarm data; if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, an adjustment instruction of the collector is generated based on a preset rule, and the adjustment instruction is sent to the collector, wherein the adjustment instruction is used for indicating the collector to adjust the alarm judgment process.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed to be used in the embodiments or the prior art descriptions will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without inventive exercise.
Fig. 1 is a schematic flow chart of an alarm processing method according to an embodiment of the present invention;
fig. 2 is another schematic flow chart of an alarm processing method according to an embodiment of the present invention;
FIG. 3 is a schematic diagram of an alarm processing apparatus provided in an embodiment of the present invention;
fig. 4 is a schematic diagram of a monitoring device according to an embodiment of the present invention.
Detailed Description
In the following description, for purposes of explanation and not limitation, specific details are set forth, such as particular system structures, techniques, etc. in order to provide a thorough understanding of the embodiments of the invention. It will be apparent, however, to one skilled in the art that the present invention may be practiced in other embodiments that depart from these specific details. In other instances, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the present invention with unnecessary detail.
In order to explain the technical means of the present invention, the following description will be given by way of specific examples.
In an embodiment, as shown in fig. 1, fig. 1 shows an implementation flow of an alarm processing method provided in this embodiment, where an execution subject of the flow is a monitoring device, and the method includes:
s101: acquiring first alarm data sent by at least one collector of a data center, wherein the first alarm data are operation data screened by each collector according to a corresponding first alarm threshold;
s102: respectively carrying out alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data;
s103: and if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, generating an adjusting instruction of the collector based on a preset rule, and sending the adjusting instruction to the collector, wherein the adjusting instruction is used for indicating the collector to adjust the alarm judgment process.
In this embodiment, the collectors collect the operation data of the monitored device, perform alarm judgment on the operation data, and preferentially send the alarm data to the monitoring device if the alarm data exists, so that the monitoring device can directly obtain the alarm data sent by each collector and perform further processing, thereby avoiding resource shortage of the monitoring device caused by accumulation of all data on the monitoring device, and improving data processing efficiency of the data center.
In this embodiment, after acquiring the first alarm data sent by each collector, the monitoring device may perform secondary alarm judgment on each first alarm data in an idle period to verify whether the alarm judgment process of the collector is correct, so as to improve the judgment accuracy of the alarm data.
In an embodiment, the specific implementation flow of S102 includes:
performing alarm judgment on each first alarm data by adopting a corresponding second alarm threshold value to obtain second alarm data; the second alarm threshold is a current alarm threshold corresponding to each operating data stored in the monitoring device.
In this embodiment, the monitoring device may perform secondary alarm determination on the first alarm data in an idle period, where the idle period may be a preset time period, or may also be a time period obtained by counting the data processing amount of each time period by the monitoring device, and the time period with a smaller data processing amount is taken as the idle time period.
In an embodiment, the adjusting instruction includes an operation data obtaining instruction, and the specific implementation flow of S103 in fig. 1 includes:
s201: counting the times of inconsistency of first alarm data and second alarm data corresponding to the same collector;
s202: and if the number of times that the first alarm data and the second alarm data corresponding to the same collector are inconsistent is greater than the maximum preset number of times, sending an operation data acquisition instruction to the collector, wherein the operation data acquisition instruction is used for indicating the collector to return the acquired operation data.
In order to avoid the problem of subsequent processing caused by poor alarm accuracy of the collector, in this embodiment, when the number of times that the first alarm data and the second alarm data of the same collector are inconsistent is greater than the maximum preset number of times, the collector returns the operation data to the monitoring device, so that the monitoring device performs secondary alarm judgment on the operation data sent by the collector.
Specifically, after receiving the operation data acquisition instruction, the collector performs alarm judgment when acquiring the operation data of the monitored device next time, and then sequentially sends the first alarm data and the corresponding operation data to the monitoring device.
In an embodiment of the present invention, the monitoring device may set different weights for various alarm data, and set different periods of secondary alarm determination for the alarm data with different weights. For example, a shorter secondary alarm determination period is set for alarm data with a higher weight, and a longer secondary alarm determination period is set for alarm data with a lower weight, so that the data processing number of the monitoring device can be further reduced.
In an embodiment, an implementation flow of the alarm processing method provided in this embodiment further includes:
s301: inputting the operation data sent by each collector into an alarm threshold value comprehensive analysis model to obtain a third alarm threshold value corresponding to each operation data; the alarm threshold value comprehensive analysis model is a neural network model obtained based on alarm training sample training, and the training sample comprises an operation data set and an alarm threshold value set; the operation data set comprises operation data corresponding to each collector; the alarm threshold value group comprises alarm threshold values corresponding to all the operation data;
s302: if the difference value between the third alarm threshold value corresponding to the operating data and the second alarm threshold value is larger than the first difference value threshold value, generating and sending an alarm threshold value updating instruction to the collector corresponding to the operating data, and updating the corresponding second alarm threshold value by adopting the third alarm threshold value corresponding to the operating data; and the alarm threshold updating instruction is used for indicating the collector to update the corresponding first alarm threshold according to the third alarm threshold corresponding to the operating data.
In this embodiment, the operation data is various, different operation data has different alarm thresholds, and the alarm thresholds of the operation data affect each other, for example, when the ambient temperature is too high or the load of the equipment increases, the alarm threshold of the equipment temperature also increases by a correspondingly small degree. Therefore, the alarm threshold value comprehensive analysis model is obtained by training a large number of alarm samples in advance, and can determine respective alarm threshold values based on a group of operation data sent by each collector.
In this embodiment, there is an association relationship between the operation data in the operation data group, for example, the operation data sent by each collector in the same cabinet is combined into one operation data group, or the operation data sent by each collector in the same monitored device is combined into one operation data group.
In this embodiment, when the monitoring device monitors that a difference between a third alarm threshold corresponding to certain operation data and a second alarm threshold is too large, the alarm threshold is updated by using the third alarm threshold, where the updating of the alarm threshold is divided into two aspects, one is to update the second alarm threshold stored in the monitoring device, and the other is to update the first alarm threshold stored in the collector.
In an embodiment, the adjustment instruction includes a stop alarm instruction, and the specific implementation flow of S103 in fig. 1 includes:
and if the first alarm data and the second alarm data corresponding to the same collector for the continuous preset times are inconsistent, sending an alarm stopping instruction to the collector so as to stop the alarm judging process of the collector.
In this embodiment, if the alarm determination result of a certain collector is always different from the secondary alarm determination result of the monitoring device, it indicates that there is a problem in the alarm determination process of the collector, and at this time, the collector may be controlled to stop the alarm determination process, and the alarm determination process is started after the alarm determination process of a subsequent collector is repaired.
Further, at the stage that the collector stops the alarm judging process, the collector directly sends the operation data to the monitoring device, and the monitoring device carries out alarm judging processing on the operation data sent by the collector in real time.
In an embodiment, as shown in fig. 2, fig. 2 shows a flow of implementing an alarm processing method, where an execution subject of the flow is a collector, and the method includes:
s401: collecting operation data of monitored equipment;
s402: performing alarm judgment on the operating data, and taking the operating data exceeding a first alarm threshold value as first alarm data;
s403: sending the first alarm data to a monitoring device;
s404: if a monitoring threshold value updating instruction sent by the monitoring device is received; and replacing the corresponding first alarm threshold value according to a third alarm threshold value carried in the monitoring threshold value updating instruction.
As can be seen from the foregoing embodiments, in this embodiment, first alarm data sent by at least one collector of a data center is first obtained, where the first alarm data is operation data screened by each collector according to a respective corresponding first alarm threshold; then, alarm judgment is carried out on the first alarm data sent by each collector respectively to obtain corresponding second alarm data; if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, an adjustment instruction of the collector is generated based on a preset rule, and the adjustment instruction is sent to the collector, wherein the adjustment instruction is used for indicating the collector to adjust the alarm judgment process.
It should be understood that, the sequence numbers of the steps in the foregoing embodiments do not imply an execution sequence, and the execution sequence of each process should be determined by its function and inherent logic, and should not constitute any limitation to the implementation process of the embodiments of the present invention.
In one embodiment, as shown in fig. 3, fig. 3 illustrates a structure of an alarm processing apparatus provided in an embodiment of the present invention, which includes:
the data acquisition module 110 is configured to acquire first alarm data sent by at least one collector of the data center, where the first alarm data are operation data screened by each collector according to a respective corresponding first alarm threshold;
the secondary alarm judging module 120 is configured to respectively perform alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data;
and an alarm flow adjusting module 130, configured to generate an adjusting instruction of the same collector based on a preset rule and send the adjusting instruction to the collector if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, where the adjusting instruction is used to instruct the collector to adjust an alarm judgment flow.
In one embodiment, the secondary alarm determination module 120 includes:
performing alarm judgment on each first alarm data by adopting a corresponding second alarm threshold value to obtain second alarm data; the second alarm threshold is a current alarm threshold corresponding to each operating data stored in the monitoring device.
In one embodiment, the adjustment instruction includes an operation data obtaining instruction, and the alarm flow adjustment module 130 includes:
the frequency judging unit is used for counting the frequency of inconsistency of the first alarm data and the second alarm data corresponding to the same collector;
and the operation data acquisition unit is used for sending an operation data acquisition instruction to the collector if the number of times that the first alarm data and the second alarm data corresponding to the same collector are inconsistent is greater than the maximum preset number of times, wherein the operation data acquisition instruction is used for indicating the collector to return the acquired operation data.
In one embodiment, the apparatus further comprises:
the threshold acquisition module is used for inputting the operation data sent by each collector into the alarm threshold comprehensive analysis model to obtain a third alarm threshold corresponding to each operation data; the alarm threshold value comprehensive analysis model is a neural network model obtained based on alarm training sample training, and the training sample comprises an operation data set and an alarm threshold value set; the operation data set comprises operation data corresponding to each collector; the alarm threshold value group comprises alarm threshold values corresponding to all the operation data;
the threshold updating module is used for generating and sending an alarm threshold updating instruction to the collector corresponding to the operating data if the difference value between a third alarm threshold corresponding to the operating data and the second alarm threshold is larger than the first difference threshold, and updating the corresponding second alarm threshold by adopting the third alarm threshold corresponding to the operating data; and the alarm threshold updating instruction is used for indicating the collector to update the corresponding first alarm threshold according to the third alarm threshold corresponding to the operating data.
In one embodiment, the adjustment instruction includes a stop alarm instruction, and the alarm flow adjustment module 130 includes:
and the alarm flow stopping unit is used for sending an alarm stopping instruction to the collector if the first alarm data and the second alarm data corresponding to the same collector are inconsistent for the continuous preset times so as to stop the alarm judging flow of the collector.
In one embodiment, this embodiment provides a collector, which includes:
the operation data acquisition module is used for acquiring operation data of the monitored equipment;
the first alarm judgment module is used for carrying out alarm judgment on the operating data and taking the operating data exceeding a first alarm threshold value as first alarm data;
the alarm data sending module is used for sending the first alarm data to a monitoring device;
the alarm threshold updating module is used for updating the alarm threshold if receiving a monitoring threshold updating instruction sent by the monitoring device; and replacing the corresponding first alarm threshold value according to a third alarm threshold value carried in the monitoring threshold value updating instruction.
Fig. 4 is a schematic diagram of a monitoring device according to an embodiment of the present invention. As shown in fig. 4, the monitoring device 4 of this embodiment includes: a processor 40, a memory 41 and a computer program 42 stored in said memory 41 and executable on said processor 40. The processor 40, when executing the computer program 42, implements the steps in the various alert processing method embodiments described above, such as the steps 101 to 103 shown in fig. 1. Alternatively, the processor 40, when executing the computer program 42, implements the functions of the modules/units in the above-mentioned device embodiments, such as the functions of the modules 110 to 130 shown in fig. 3.
The computer program 42 may be partitioned into one or more modules/units that are stored in the memory 41 and executed by the processor 40 to implement the present invention. The one or more modules/units may be a series of computer program instruction segments capable of performing specific functions, which are used to describe the execution of the computer program 42 in the monitoring device 4. The monitoring device 4 may be a desktop computer, a notebook, a palm computer, a cloud server, or other computing devices. The monitoring device may include, but is not limited to, a processor 40, a memory 41. It will be understood by those skilled in the art that fig. 4 is merely an example of the monitoring apparatus 4, and does not constitute a limitation of the monitoring apparatus 4, and may include more or less components than those shown, or combine some components, or different components, for example, the monitoring apparatus may further include an input-output device, a network access device, a bus, etc.
The Processor 40 may be a Central Processing Unit (CPU), other general purpose Processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), an off-the-shelf Programmable Gate Array (FPGA) or other Programmable logic device, discrete Gate or transistor logic, discrete hardware components, etc. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
The memory 41 may be an internal storage unit of the monitoring device 4, such as a hard disk or a memory of the monitoring device 4. The memory 41 may also be an external storage device of the monitoring apparatus 4, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card), and the like, provided on the monitoring apparatus 4. Further, the memory 41 may also include both an internal storage unit and an external storage device of the monitoring apparatus 4. The memory 41 is used for storing the computer program and other programs and data required by the monitoring device. The memory 41 may also be used to temporarily store data that has been output or is to be output.
It will be apparent to those skilled in the art that, for convenience and brevity of description, only the above-mentioned division of the functional units and modules is illustrated, and in practical applications, the above-mentioned function distribution may be performed by different functional units and modules according to needs, that is, the internal structure of the apparatus is divided into different functional units or modules to perform all or part of the above-mentioned functions. Each functional unit and module in the embodiments may be integrated in one processing unit, or each unit may exist alone physically, or two or more units are integrated in one unit, and the integrated unit may be implemented in a form of hardware, or in a form of software functional unit. In addition, specific names of the functional units and modules are only for convenience of distinguishing from each other, and are not used for limiting the protection scope of the present application. The specific working processes of the units and modules in the system may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
In the above embodiments, the descriptions of the respective embodiments have respective emphasis, and reference may be made to the related descriptions of other embodiments for parts that are not described or illustrated in a certain embodiment.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
In the embodiments provided in the present invention, it should be understood that the disclosed apparatus/monitoring apparatus and method may be implemented in other ways. For example, the above-described device/monitoring device embodiments are merely illustrative, and for example, the division of the modules or units is only one logical function division, and there may be other division manners in actual implementation, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.
The integrated modules/units, if implemented in the form of software functional units and sold or used as separate products, may be stored in a computer readable storage medium. Based on such understanding, all or part of the flow of the method according to the embodiments of the present invention may also be implemented by a computer program, which may be stored in a computer-readable storage medium, and when the computer program is executed by a processor, the steps of the method embodiments may be implemented. . Wherein the computer program comprises computer program code, which may be in the form of source code, object code, an executable file or some intermediate form, etc. The computer-readable medium may include: any entity or device capable of carrying the computer program code, recording medium, usb disk, removable hard disk, magnetic disk, optical disk, computer Memory, Read-Only Memory (ROM), Random Access Memory (RAM), electrical carrier wave signals, telecommunications signals, software distribution medium, and the like. It should be noted that the computer readable medium may contain content that is subject to appropriate increase or decrease as required by legislation and patent practice in jurisdictions, for example, in some jurisdictions, computer readable media does not include electrical carrier signals and telecommunications signals as is required by legislation and patent practice.
The above-mentioned embodiments are only used for illustrating the technical solutions of the present invention, and not for limiting the same; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; such modifications and substitutions do not substantially depart from the spirit and scope of the embodiments of the present invention, and are intended to be included within the scope of the present invention.

Claims (10)

1. An alarm processing method is applied to a monitoring device and comprises the following steps:
acquiring first alarm data sent by at least one collector of a data center, wherein the first alarm data are operation data screened by each collector according to a corresponding first alarm threshold;
respectively carrying out alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data;
and if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, generating an adjusting instruction of the collector based on a preset rule, and sending the adjusting instruction to the collector, wherein the adjusting instruction is used for indicating the collector to adjust the alarm judgment process.
2. The alarm processing method of claim 1, wherein the performing alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data comprises:
performing alarm judgment on each first alarm data by adopting a corresponding second alarm threshold value to obtain second alarm data; the second alarm threshold is a current alarm threshold corresponding to each operating data stored in the monitoring device.
3. The alarm processing method of claim 1, wherein the adjustment instruction comprises an operation data acquisition instruction, and the generating the adjustment instruction of the acquirer based on the preset rule comprises:
counting the times of inconsistency of first alarm data and second alarm data corresponding to the same collector;
and if the number of times that the first alarm data and the second alarm data corresponding to the same collector are inconsistent is greater than the maximum preset number of times, sending an operation data acquisition instruction to the collector, wherein the operation data acquisition instruction is used for indicating the collector to return the acquired operation data.
4. The alert processing method according to claim 3, wherein the method further comprises:
inputting the operation data sent by each collector into an alarm threshold value comprehensive analysis model to obtain a third alarm threshold value corresponding to each operation data; the alarm threshold value comprehensive analysis model is a neural network model obtained based on alarm training sample training, and the training sample comprises an operation data set and an alarm threshold value set; the operation data set comprises operation data corresponding to each collector; the alarm threshold value group comprises alarm threshold values corresponding to all the operation data;
if the difference value between the third alarm threshold value corresponding to the operating data and the second alarm threshold value is larger than the first difference value threshold value, generating and sending an alarm threshold value updating instruction to the collector corresponding to the operating data, and updating the corresponding second alarm threshold value by adopting the third alarm threshold value corresponding to the operating data; and the alarm threshold updating instruction is used for indicating the collector to update the corresponding first alarm threshold according to the third alarm threshold corresponding to the operating data.
5. The alarm processing method of claim 1, wherein the adjustment instruction comprises an alarm stopping instruction, and the generating of the adjustment instruction of the acquirer based on the preset rule comprises:
and if the first alarm data and the second alarm data corresponding to the same collector for the continuous preset times are inconsistent, sending an alarm stopping instruction to the collector so as to stop the alarm judging process of the collector.
6. An alarm processing method is applied to a collector and comprises the following steps:
collecting operation data of monitored equipment;
performing alarm judgment on the operating data, and taking the operating data exceeding a first alarm threshold value as first alarm data;
sending the first alarm data to a monitoring device;
if a monitoring threshold value updating instruction sent by the monitoring device is received; and replacing the corresponding first alarm threshold value according to a third alarm threshold value carried in the monitoring threshold value updating instruction.
7. An alarm processing device, applied to a monitoring device, includes:
the data acquisition module is used for acquiring first alarm data sent by at least one collector of the data center, wherein the first alarm data are operation data screened by each collector according to a corresponding first alarm threshold;
the secondary alarm judging module is used for respectively carrying out alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data;
and the alarm flow adjusting module is used for generating an adjusting instruction of the collector based on a preset rule and sending the adjusting instruction to the collector if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, wherein the adjusting instruction is used for indicating the collector to adjust the alarm judging flow.
8. The alarm processing device according to claim 7, wherein the secondary alarm determining module specifically comprises:
performing alarm judgment on each first alarm data by adopting a corresponding second alarm threshold value to obtain second alarm data; the second alarm threshold is a current alarm threshold corresponding to each operating data stored in the monitoring device.
9. A monitoring device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that the processor implements the steps of the method according to any of claims 1 to 5 when executing the computer program.
10. A computer-readable storage medium, in which a computer program is stored which, when being executed by a processor, carries out the steps of the method according to any one of claims 1 to 5.
CN202110437427.8A 2021-04-22 2021-04-22 Alarm processing method and device Pending CN113238911A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110437427.8A CN113238911A (en) 2021-04-22 2021-04-22 Alarm processing method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110437427.8A CN113238911A (en) 2021-04-22 2021-04-22 Alarm processing method and device

Publications (1)

Publication Number Publication Date
CN113238911A true CN113238911A (en) 2021-08-10

Family

ID=77128906

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110437427.8A Pending CN113238911A (en) 2021-04-22 2021-04-22 Alarm processing method and device

Country Status (1)

Country Link
CN (1) CN113238911A (en)

Similar Documents

Publication Publication Date Title
CN105281981B (en) The data traffic monitoring method and device of network service
US20120271962A1 (en) Achieving Lossless Data Streaming in a Scan Based Industrial Process Control System
CN108564181B (en) Power equipment fault detection and maintenance method and terminal equipment
CN103425568A (en) Method and device for processing log information
CN108198408B (en) Self-adaptive anti-electricity-stealing monitoring method and system based on electricity information acquisition system
RU2532714C2 (en) Method of acquiring data when evaluating network resources and apparatus therefor
CN110221145B (en) Power equipment fault diagnosis method and device and terminal equipment
CN111654405A (en) Method, device, equipment and storage medium for fault node of communication link
CN111159009A (en) Pressure testing method and device for log service system
CN113238911A (en) Alarm processing method and device
CN109375146B (en) Supplementary collection method and system for electricity consumption data and terminal equipment
CN109670091B (en) Metadata intelligent maintenance method and device based on data standard
CN109325603B (en) Fault request processing method and device and terminal equipment
CN108072858B (en) Electric energy meter quality management method and system and terminal equipment
CN109450089B (en) Transformer area low voltage identification method and device and terminal equipment
CN110543509A (en) Monitoring system, method and device for user access data and electronic equipment
CN107748711B (en) Method for automatically optimizing Storm parallelism, terminal equipment and storage medium
CN105095382A (en) Method and device for sample distributed clustering calculation
CN106991038A (en) Service monitoring method and device based on java collectors
CN108463813B (en) Method and device for processing data
CN109918353B (en) Method for automatically processing information and terminal equipment
CN109471916B (en) Weather forecast generation method and device
CN110334955B (en) Index evaluation processing method, device, equipment and storage medium
CN107908832B (en) Air conditioning system model identification and conversion method and terminal equipment
CN113342872A (en) PUE energy consumption monitoring-based method and electronic equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination