CN113238911B - Alarm processing method and device - Google Patents
Alarm processing method and device Download PDFInfo
- Publication number
- CN113238911B CN113238911B CN202110437427.8A CN202110437427A CN113238911B CN 113238911 B CN113238911 B CN 113238911B CN 202110437427 A CN202110437427 A CN 202110437427A CN 113238911 B CN113238911 B CN 113238911B
- Authority
- CN
- China
- Prior art keywords
- alarm
- data
- collector
- threshold value
- instruction
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3089—Monitoring arrangements determined by the means or processing involved in sensing the monitored data, e.g. interfaces, connectors, sensors, probes, agents
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
- G06F11/3006—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
- G06F11/324—Display of status information
- G06F11/327—Alarm or error message display
Abstract
The invention is suitable for the technical field of data centers, and provides an alarm processing method and an alarm processing device, wherein the method comprises the following steps: acquiring first alarm data sent by at least one collector of a data center; respectively carrying out alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data; and if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, generating an adjusting instruction for indicating the collector to adjust the alarm judging flow based on a preset rule. According to the method and the device, the first warning judgment can be performed in each collector, so that the monitoring device can directly acquire warning data, resource shortage and response bottleneck caused by the fact that all data are accumulated together are avoided, meanwhile, the monitoring device can perform secondary warning judgment on the warning data, and therefore the judgment accuracy of the warning data is improved.
Description
Technical Field
The invention belongs to the technical field of data centers, and particularly relates to an alarm processing method and device.
Background
Currently, the construction of data centers, especially micro-modular data centers, is rapidly developing. However, with the construction of a large data center machine room, the intelligent devices and 1T devices in the micro-module infrastructure are deployed in a large amount, which presents a great challenge to the data acquisition and processing capability of the data center monitoring system.
At present, when Data of a Data Center is processed, all Data collected by each collector is mainly processed by a Data Center Infrastructure Management (DCIM). However, with the construction of increasingly large data centers, when a single DCIM is used for data processing in the prior art, the defects of central host resource shortage and response bottleneck can occur.
Disclosure of Invention
In view of this, embodiments of the present invention provide an alarm processing method and apparatus to solve the problem of monitoring resource shortage and response bottleneck in the prior art.
A first aspect of an embodiment of the present invention provides an alarm processing method, which is applied to a monitoring device, and includes:
acquiring first alarm data sent by at least one collector of a data center, wherein the first alarm data are operation data screened by each collector according to a corresponding first alarm threshold;
respectively carrying out alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data;
if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, generating an adjusting instruction of the collector based on a preset rule, and sending the adjusting instruction to the collector, wherein the adjusting instruction is used for instructing the collector to adjust the alarm judgment process.
A second aspect of an embodiment of the present invention provides an alarm processing method, including:
collecting operation data of monitored equipment;
performing alarm judgment on the operating data, and taking the operating data exceeding a first alarm threshold value as first alarm data;
sending the first alarm data to a monitoring device;
if a monitoring threshold updating instruction sent by the monitoring device is received; and replacing the corresponding first alarm threshold value according to a third alarm threshold value carried in the monitoring threshold value updating instruction.
A third aspect of the present embodiment provides an alarm processing apparatus, which is applied to a monitoring apparatus, and includes:
the data acquisition module is used for acquiring first alarm data sent by at least one collector of the data center, wherein the first alarm data are operation data screened by each collector according to a corresponding first alarm threshold;
the secondary alarm judgment module is used for respectively carrying out alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data;
and the alarm flow adjusting module is used for generating an adjusting instruction of the collector based on a preset rule and sending the adjusting instruction to the collector if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, wherein the adjusting instruction is used for instructing the collector to adjust the alarm judging flow.
A fourth aspect of the embodiments of the present invention provides a monitoring apparatus, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, where the processor implements the steps of the alarm processing method as described above when executing the computer program.
A fifth aspect of embodiments of the present invention provides a computer-readable storage medium, which stores a computer program that, when executed by a processor, implements the steps of the alarm processing method as described above.
Compared with the prior art, the embodiment of the invention has the following beneficial effects: in the embodiment, first alarm data sent by at least one collector of a data center is obtained, wherein the first alarm data are operation data screened out by each collector according to a respective corresponding first alarm threshold; then, alarm judgment is carried out on the first alarm data sent by each collector respectively to obtain corresponding second alarm data; if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, an adjustment instruction of the collector is generated based on a preset rule, and the adjustment instruction is sent to the collector and used for instructing the collector to adjust the alarm judgment flow.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed to be used in the embodiments or the prior art descriptions will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without inventive exercise.
Fig. 1 is a schematic flowchart of an alarm processing method according to an embodiment of the present invention;
fig. 2 is another schematic flow chart of the alarm processing method according to the embodiment of the present invention;
FIG. 3 is a schematic diagram of an alarm processing apparatus provided in an embodiment of the present invention;
fig. 4 is a schematic diagram of a monitoring device according to an embodiment of the present invention.
Detailed Description
In the following description, for purposes of explanation and not limitation, specific details are set forth, such as particular system structures, techniques, etc. in order to provide a thorough understanding of the embodiments of the invention. It will be apparent, however, to one skilled in the art that the present invention may be practiced in other embodiments that depart from these specific details. In other instances, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the present invention with unnecessary detail.
In order to explain the technical means of the present invention, the following description will be given by way of specific examples.
In an embodiment, as shown in fig. 1, fig. 1 shows an implementation flow of an alarm processing method provided in this embodiment, where an execution subject of the flow is a monitoring device, and the method includes:
s101: acquiring first alarm data sent by at least one collector of a data center, wherein the first alarm data are operation data screened by each collector according to a corresponding first alarm threshold;
s102: respectively carrying out alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data;
s103: if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, generating an adjusting instruction of the collector based on a preset rule, and sending the adjusting instruction to the collector, wherein the adjusting instruction is used for instructing the collector to adjust the alarm judgment process.
In this embodiment, the collectors collect the operation data of the monitored device, perform alarm judgment on the operation data, and preferentially send the alarm data to the monitoring device if the alarm data exists, so that the monitoring device can directly obtain the alarm data sent by each collector and perform further processing, thereby avoiding resource shortage of the monitoring device caused by accumulation of all data on the monitoring device, and improving data processing efficiency of the data center.
In this embodiment, after acquiring the first alarm data sent by each collector, the monitoring device may perform secondary alarm judgment on each first alarm data in an idle period to verify whether the alarm judgment process of the collector is correct, so as to improve the judgment accuracy of the alarm data.
In an embodiment, the specific implementation flow of S102 includes:
the alarm judgment is carried out on each first alarm data by adopting the corresponding second alarm threshold value, obtaining second alarm data; the second alarm threshold is a current alarm threshold corresponding to each operating data stored in the monitoring device.
In this embodiment, the monitoring device may perform secondary alarm determination on the first alarm data in an idle period, where the idle period may be a preset time period, or may also be a time period obtained by counting the data processing amount of each time period by the monitoring device, and the time period with a smaller data processing amount is taken as the idle time period.
In an embodiment, the adjusting instruction includes an operation data obtaining instruction, and the specific implementation flow of S103 in fig. 1 includes:
s201: counting the times of inconsistency of first alarm data and second alarm data corresponding to the same collector;
s202: and if the inconsistent times of the first alarm data and the second alarm data corresponding to the same collector are greater than the maximum preset times, sending an operation data acquisition instruction to the collector, wherein the operation data acquisition instruction is used for indicating the collector to return the collected operation data.
In order to avoid the problem of subsequent processing caused by poor alarm accuracy of the collector, in this embodiment, when the number of times that the first alarm data and the second alarm data of the same collector are inconsistent is greater than the maximum preset number of times, the collector returns the operation data to the monitoring device, so that the monitoring device performs secondary alarm judgment on the operation data sent by the collector.
Specifically, after receiving the operation data acquisition instruction, the collector performs alarm judgment when acquiring the operation data of the monitored device next time, and then sequentially sends the first alarm data and the corresponding operation data to the monitoring device.
In an embodiment of the present invention, the monitoring apparatus may set different weights for various alarm data, and set different periods of secondary alarm determination for the alarm data with different weights. For example, a shorter secondary alarm determination period is set for alarm data with a higher weight, and a longer secondary alarm determination period is set for alarm data with a lower weight, so that the data processing number of the monitoring device can be further reduced.
In an embodiment, an implementation flow of the alarm processing method provided in this embodiment further includes:
s301: inputting the operation data sent by each collector into an alarm threshold value comprehensive analysis model to obtain a third alarm threshold value corresponding to each operation data; the alarm threshold value comprehensive analysis model is a neural network model obtained based on alarm training sample training, and the training sample comprises an operation data set and an alarm threshold value set; the operation data set comprises operation data corresponding to each collector; the alarm threshold value group comprises alarm threshold values corresponding to all the operation data;
s302: if the difference value between the third alarm threshold value corresponding to the operating data and the second alarm threshold value is larger than the first difference value threshold value, generating and sending an alarm threshold value updating instruction to the collector corresponding to the operating data, and updating the corresponding second alarm threshold value by adopting the third alarm threshold value corresponding to the operating data; and the alarm threshold updating instruction is used for indicating the collector to update the corresponding first alarm threshold according to the third alarm threshold corresponding to the operating data.
In this embodiment, the operation data is various, different operation data has different alarm thresholds, and the alarm thresholds of the respective operation data affect each other, for example, when the ambient temperature is too high or the load of the equipment increases, the alarm threshold of the equipment temperature also increases by a corresponding small amount. Therefore, the alarm threshold value comprehensive analysis model is obtained by utilizing a large number of alarm samples in advance for training, and respective alarm threshold values can be determined based on a group of operation data sent by each collector.
In this embodiment, there is an association relationship between the operation data in the operation data group, for example, the operation data sent by each collector in the same cabinet is combined into one operation data group, or the operation data sent by each collector in the same monitored device is combined into one operation data group.
In this embodiment, when the monitoring device monitors that a difference between a third alarm threshold corresponding to certain operation data and a second alarm threshold is too large, the alarm threshold is updated by using the third alarm threshold, where the updating of the alarm threshold is divided into two aspects, one is to update the second alarm threshold stored in the monitoring device, and the other is to update the first alarm threshold stored in the collector.
In an embodiment, the adjustment instruction includes a stop alarm instruction, and the specific implementation flow of S103 in fig. 1 includes:
and if the first alarm data and the second alarm data corresponding to the same collector for the continuous preset times are inconsistent, sending an alarm stopping instruction to the collector so as to stop the alarm judging process of the collector.
In this embodiment, if the alarm determination result of a certain collector is always different from the secondary alarm determination result of the monitoring device, it indicates that there is a problem in the alarm determination process of the collector, and at this time, the collector may be controlled to stop the alarm determination process, and then the alarm determination process is started after the alarm determination process of a subsequent collector is repaired.
Further, at the stage that the collector stops the alarm judging process, the collector directly sends the operation data to the monitoring device, and the monitoring device carries out alarm judging processing on the operation data sent by the collector in real time.
In an embodiment, as shown in fig. 2, fig. 2 shows a flow of implementing an alarm processing method, where an execution subject of the flow is a collector, and the method includes:
s401: collecting operation data of monitored equipment;
s402: performing alarm judgment on the operating data, and taking the operating data exceeding a first alarm threshold value as first alarm data;
s403: sending the first alarm data to a monitoring device;
s404: if a monitoring threshold value updating instruction sent by the monitoring device is received; and replacing the corresponding first alarm threshold value according to a third alarm threshold value carried in the monitoring threshold value updating instruction.
As can be seen from the foregoing embodiment, in this embodiment, first alarm data sent by at least one collector of a data center is first obtained, where the first alarm data is operation data screened out by each collector according to a respective corresponding first alarm threshold; then, alarm judgment is carried out on the first alarm data sent by each collector respectively to obtain corresponding second alarm data; if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, an adjustment instruction of the collector is generated based on a preset rule, and the adjustment instruction is sent to the collector, wherein the adjustment instruction is used for indicating the collector to adjust the alarm judgment process.
It should be understood that, the sequence numbers of the steps in the foregoing embodiments do not imply an execution sequence, and the execution sequence of each process should be determined by functions and internal logic of the process, and should not limit the implementation process of the embodiments of the present invention in any way.
In one embodiment, as shown in fig. 3, fig. 3 illustrates a structure of an alarm processing apparatus provided in an embodiment of the present invention, which includes:
the data acquisition module 110 is configured to acquire first alarm data sent by at least one collector of the data center, where the first alarm data are operation data screened by each collector according to a respective corresponding first alarm threshold;
the secondary alarm judging module 120 is configured to respectively perform alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data;
and an alarm flow adjusting module 130, configured to generate an adjusting instruction of the collector based on a preset rule if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, and send the adjusting instruction to the collector, where the adjusting instruction is used to instruct the collector to adjust the alarm judgment flow.
In one embodiment, the secondary alarm determination module 120 includes:
performing alarm judgment on each first alarm data by adopting a corresponding second alarm threshold value to obtain second alarm data; the second alarm threshold is a current alarm threshold corresponding to each operating data stored in the monitoring device.
In one embodiment, the adjustment instruction includes an operation data obtaining instruction, and the alarm flow adjustment module 130 includes:
the frequency judging unit is used for counting the frequency of inconsistency of the first alarm data and the second alarm data corresponding to the same collector;
and the operation data acquisition unit is used for sending an operation data acquisition instruction to the collector if the number of times that the first alarm data and the second alarm data corresponding to the same collector are inconsistent is greater than the maximum preset number of times, wherein the operation data acquisition instruction is used for indicating the collector to return the acquired operation data.
In one embodiment, the apparatus further comprises:
the threshold acquisition module is used for inputting the operation data sent by each collector into the alarm threshold comprehensive analysis model to obtain a third alarm threshold corresponding to each operation data; the alarm threshold value comprehensive analysis model is a neural network model obtained based on alarm training sample training, and the training sample comprises an operation data set and an alarm threshold value set; the operation data group comprises operation data corresponding to each collector; the alarm threshold value group comprises alarm threshold values corresponding to all the operation data;
the threshold updating module is used for generating and sending an alarm threshold updating instruction to the collector corresponding to the operating data if the difference value between a third alarm threshold corresponding to the operating data and the second alarm threshold is larger than the first difference threshold, and updating the corresponding second alarm threshold by adopting the third alarm threshold corresponding to the operating data; and the alarm threshold updating instruction is used for indicating the collector to update the corresponding first alarm threshold according to the third alarm threshold corresponding to the operating data.
In one embodiment, the adjustment instruction includes a stop alarm instruction, and the alarm flow adjustment module 130 includes:
and the alarm flow stopping unit is used for sending an alarm stopping instruction to the collector if the first alarm data and the second alarm data corresponding to the same collector for the continuous preset times are inconsistent, so that the collector stops the alarm judging flow.
In one embodiment, this embodiment provides a collector, which includes:
the operation data acquisition module is used for acquiring operation data of the monitored equipment;
the first alarm judgment module is used for carrying out alarm judgment on the operating data and taking the operating data exceeding a first alarm threshold value as first alarm data;
the alarm data sending module is used for sending the first alarm data to a monitoring device;
the alarm threshold updating module is used for updating the alarm threshold if receiving a monitoring threshold updating instruction sent by the monitoring device; and replacing the corresponding first alarm threshold value according to a third alarm threshold value carried in the monitoring threshold value updating instruction.
Fig. 4 is a schematic diagram of a monitoring device according to an embodiment of the present invention. As shown in fig. 4, the monitoring device 4 of this embodiment includes: a processor 40, a memory 41 and a computer program 42 stored in said memory 41 and executable on said processor 40. The processor 40, when executing the computer program 42, implements the steps in the various alert processing method embodiments described above, such as the steps 101 to 103 shown in fig. 1. Alternatively, the processor 40, when executing the computer program 42, implements the functions of the modules/units in the above-mentioned device embodiments, such as the modules 110 to 130 shown in fig. 3.
The computer program 42 may be partitioned into one or more modules/units that are stored in the memory 41 and executed by the processor 40 to implement the present invention. The one or more modules/units may be a series of computer program instruction segments capable of performing specific functions, which are used to describe the execution of the computer program 42 in the monitoring device 4. The monitoring device 4 may be a computing device such as a desktop computer, a notebook, a palm computer, and a cloud server. The monitoring device may include, but is not limited to, a processor 40, a memory 41. It will be understood by those skilled in the art that fig. 4 is merely an example of the monitoring apparatus 4, and does not constitute a limitation of the monitoring apparatus 4, and may include more or less components than those shown, or combine some components, or different components, for example, the monitoring apparatus may further include an input-output device, a network access device, a bus, etc.
The Processor 40 may be a Central Processing Unit (CPU), other general purpose Processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), an off-the-shelf Programmable Gate Array (FPGA) or other Programmable logic device, discrete Gate or transistor logic, discrete hardware components, etc. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
The memory 41 may be an internal storage unit of the monitoring device 4, such as a hard disk or a memory of the monitoring device 4. The memory 41 may also be an external storage device of the monitoring apparatus 4, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card), and the like, provided on the monitoring apparatus 4. Further, the memory 41 may also include both an internal storage unit and an external storage device of the monitoring apparatus 4. The memory 41 is used for storing the computer program and other programs and data required by the monitoring device. The memory 41 may also be used to temporarily store data that has been output or is to be output.
It should be clear to those skilled in the art that, for convenience and simplicity of description, the foregoing division of the functional units and modules is only used for illustration, and in practical applications, the above function distribution may be performed by different functional units and modules as needed, that is, the internal structure of the apparatus may be divided into different functional units or modules to perform all or part of the above described functions. Each functional unit and module in the embodiments may be integrated in one processing unit, or each unit may exist alone physically, or two or more units are integrated in one unit, and the integrated unit may be implemented in a form of hardware, or in a form of software functional unit. In addition, specific names of the functional units and modules are only used for distinguishing one functional unit from another, and are not used for limiting the protection scope of the present application. For the specific working processes of the units and modules in the system, reference may be made to the corresponding processes in the foregoing method embodiments, which are not described herein again.
In the above embodiments, the description of each embodiment has its own emphasis, and reference may be made to the related description of other embodiments for parts that are not described or recited in any embodiment.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
In the embodiments provided in the present invention, it should be understood that the disclosed apparatus/monitoring apparatus and method may be implemented in other ways. For example, the above-described device/monitoring device embodiments are merely illustrative, and for example, the division of the modules or units is only one logical function division, and there may be other division manners in actual implementation, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit may be implemented in the form of hardware, or may also be implemented in the form of a software functional unit.
The integrated modules/units, if implemented in the form of software functional units and sold or used as separate products, may be stored in a computer readable storage medium. Based on such understanding, all or part of the flow of the method according to the embodiments of the present invention may also be implemented by a computer program, which may be stored in a computer-readable storage medium, and when the computer program is executed by a processor, the steps of the method embodiments may be implemented. . Wherein the computer program comprises computer program code, which may be in the form of source code, object code, an executable file or some intermediate form, etc. The computer-readable medium may include: any entity or device capable of carrying the computer program code, recording medium, usb disk, removable hard disk, magnetic disk, optical disk, computer Memory, read-Only Memory (ROM), random Access Memory (RAM), electrical carrier wave signals, telecommunications signals, software distribution medium, and the like. It should be noted that the computer-readable medium may contain suitable additions or subtractions depending on the requirements of legislation and patent practice in jurisdictions, for example, in some jurisdictions, computer-readable media may not include electrical carrier signals or telecommunication signals in accordance with legislation and patent practice.
The above-mentioned embodiments are only used to illustrate the technical solution of the present invention, and not to limit the same; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; such modifications and substitutions do not substantially depart from the spirit and scope of the embodiments of the present invention, and are intended to be included within the scope of the present invention.
Claims (9)
1. An alarm processing method is applied to a monitoring device and comprises the following steps:
acquiring first alarm data sent by at least one collector of a data center, wherein the first alarm data are operation data screened by each collector according to a corresponding first alarm threshold;
respectively carrying out alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data;
if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, generating an adjusting instruction of the collector based on a preset rule, and sending the adjusting instruction to the collector, wherein the adjusting instruction is used for indicating the collector to adjust an alarm judgment process;
the alarm judgment is respectively carried out on the first alarm data sent by each collector to obtain corresponding second alarm data, and the alarm judgment comprises the following steps:
and respectively carrying out alarm judgment on the first alarm data sent by each collector in an idle time period to obtain corresponding second alarm data.
2. The alarm processing method according to claim 1, wherein the performing alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data comprises:
performing alarm judgment on each first alarm data by adopting a corresponding second alarm threshold value to obtain second alarm data; the second alarm threshold is a current alarm threshold corresponding to each operating data stored in the monitoring device.
3. The alarm processing method of claim 1, wherein the adjustment instruction comprises an operation data acquisition instruction, and the generating the adjustment instruction of the acquirer based on the preset rule comprises:
counting the times of inconsistency of first alarm data and second alarm data corresponding to the same collector;
and if the inconsistent times of the first alarm data and the second alarm data corresponding to the same collector are greater than the maximum preset times, sending an operation data acquisition instruction to the collector, wherein the operation data acquisition instruction is used for indicating the collector to return the collected operation data.
4. The alert processing method according to claim 3, wherein the method further comprises:
inputting the operation data sent by each collector into an alarm threshold value comprehensive analysis model to obtain a third alarm threshold value corresponding to each operation data; the alarm threshold value comprehensive analysis model is a neural network model obtained based on alarm training sample training, and the training sample comprises an operation data set and an alarm threshold value set; the operation data set comprises operation data corresponding to each collector; the alarm threshold value group comprises alarm threshold values corresponding to all the operation data;
if the difference value between the third alarm threshold value and the second alarm threshold value corresponding to the running data is larger than the first difference threshold value, generating and sending an alarm threshold value updating instruction to the collector corresponding to the running data, and updating the corresponding second alarm threshold value by adopting the third alarm threshold value corresponding to the running data; and the alarm threshold updating instruction is used for indicating the collector to update the corresponding first alarm threshold according to the third alarm threshold corresponding to the operating data.
5. The alarm processing method of claim 1, wherein the adjustment instruction comprises an alarm stopping instruction, and the generating of the adjustment instruction of the acquirer based on the preset rule comprises:
and if the first alarm data and the second alarm data corresponding to the same collector for the continuous preset times are inconsistent, sending a warning stopping instruction to the collector so as to stop the warning judgment process of the collector.
6. An alarm processing device, which is applied to a monitoring device, comprises:
the data acquisition module is used for acquiring first alarm data sent by at least one collector of the data center, wherein the first alarm data are operation data screened by each collector according to a corresponding first alarm threshold;
the secondary alarm judging module is used for respectively carrying out alarm judgment on the first alarm data sent by each collector to obtain corresponding second alarm data;
the alarm flow adjusting module is used for generating an adjusting instruction of the collector based on a preset rule and sending the adjusting instruction to the collector if the first alarm data and the second alarm data corresponding to the same collector are inconsistent, wherein the adjusting instruction is used for instructing the collector to adjust the alarm judging flow;
the secondary alarm judging module comprises:
and respectively carrying out alarm judgment on the first alarm data sent by each collector in an idle time period to obtain corresponding second alarm data.
7. The alarm processing device according to claim 6, wherein the secondary alarm determining module specifically comprises:
performing alarm judgment on each first alarm data by adopting a corresponding second alarm threshold value to obtain second alarm data; the second alarm threshold is a current alarm threshold corresponding to each operating data stored in the monitoring device.
8. A monitoring device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that the processor implements the steps of the method according to any of claims 1 to 5 when executing the computer program.
9. A computer-readable storage medium, in which a computer program is stored which, when being executed by a processor, carries out the steps of a method according to any one of claims 1 to 5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110437427.8A CN113238911B (en) | 2021-04-22 | 2021-04-22 | Alarm processing method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110437427.8A CN113238911B (en) | 2021-04-22 | 2021-04-22 | Alarm processing method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113238911A CN113238911A (en) | 2021-08-10 |
| CN113238911B true CN113238911B (en) | 2022-10-25 |
Family
ID=77128906
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110437427.8A Active CN113238911B (en) | 2021-04-22 | 2021-04-22 | Alarm processing method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113238911B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115277479A (en) * | 2022-07-29 | 2022-11-01 | 国网浙江省电力有限公司宁波供电公司 | Method and system for realizing system operation condition monitoring based on monitoring assistant |
Family Cites Families (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103763127B (en) * | 2013-12-30 | 2018-03-02 | 北京世纪东方通讯设备有限公司 | A kind of equipment state alarm monitoring method and system |
| CN111200515B (en) * | 2018-11-20 | 2022-12-06 | 中国移动通信集团内蒙古有限公司 | Alarm processing method and device |
| CN109671234A (en) * | 2019-01-04 | 2019-04-23 | 北京中星微人工智能芯片技术有限公司 | A kind of alarm method and device of monitoring device |
| CN111611133B (en) * | 2020-05-21 | 2022-04-29 | 莫毓昌 | Data center energy consumption management method based on intelligent monitoring |
-
2021
- 2021-04-22 CN CN202110437427.8A patent/CN113238911B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN113238911A (en) | 2021-08-10 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110221145B (en) | Power equipment fault diagnosis method and device and terminal equipment | |
| CN107204894B (en) | Method and device for monitoring network service quality | |
| CN105281981A (en) | Data traffic monitoring method and device for network service | |
| CN103425568A (en) | Method and device for processing log information | |
| CN113379564A (en) | Power grid load prediction method and device and terminal equipment | |
| CN113159145A (en) | Characteristic engineering arrangement method and device | |
| CN114581856B (en) | Agricultural unit motion state identification method and system based on Beidou system and cloud platform | |
| CN108072858B (en) | Electric energy meter quality management method and system and terminal equipment | |
| CN113238911B (en) | Alarm processing method and device | |
| CN111147306B (en) | Fault analysis method and device of Internet of things equipment and Internet of things platform | |
| CN109375146B (en) | Supplementary collection method and system for electricity consumption data and terminal equipment | |
| CN109325603B (en) | Fault request processing method and device and terminal equipment | |
| CN114189535A (en) | Service request method and system based on smart city data | |
| CN111159009B (en) | Pressure testing method and device for log service system | |
| CN110543509A (en) | Monitoring system, method and device for user access data and electronic equipment | |
| CN113795032B (en) | Method and device for judging invisible faults of indoor division, storage medium and equipment | |
| CN115128986A (en) | Industrial internet yield real-time monitoring system and method based on SaaS (software as a service) level | |
| CN111222739B (en) | Nuclear power station task allocation method and nuclear power station task allocation system | |
| CN109918353B (en) | Method for automatically processing information and terminal equipment | |
| CN113778977A (en) | Data processing method and data processing device | |
| CN108805741B (en) | Fusion method, device and system of power quality data | |
| CN115643558B (en) | Data processing method and device, electronic equipment and storage medium | |
| CN110334955B (en) | Index evaluation processing method, device, equipment and storage medium | |
| CN117911077A (en) | Power marketing risk early warning method, device, terminal and storage medium | |
| CN113868085A (en) | Hard disk monitoring method, device and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |