CN113821404B - Alarm processing method, system, equipment and medium - Google Patents
Alarm processing method, system, equipment and medium Download PDFInfo
- Publication number
- CN113821404B CN113821404B CN202111007688.2A CN202111007688A CN113821404B CN 113821404 B CN113821404 B CN 113821404B CN 202111007688 A CN202111007688 A CN 202111007688A CN 113821404 B CN113821404 B CN 113821404B
- Authority
- CN
- China
- Prior art keywords
- alarm
- verifier
- alarm information
- node
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000003672 processing method Methods 0.000 title claims abstract description 9
- 238000012795 verification Methods 0.000 claims abstract description 53
- 238000012545 processing Methods 0.000 claims abstract description 17
- 230000004044 response Effects 0.000 claims description 26
- 238000000034 method Methods 0.000 claims description 14
- 238000004590 computer program Methods 0.000 claims description 9
- 238000006243 chemical reaction Methods 0.000 claims description 8
- 238000004364 calculation method Methods 0.000 claims description 3
- 230000001960 triggered effect Effects 0.000 claims 1
- 238000012544 monitoring process Methods 0.000 abstract description 9
- 230000002159 abnormal effect Effects 0.000 description 6
- 230000000694 effects Effects 0.000 description 4
- 238000010586 diagram Methods 0.000 description 3
- 230000002688 persistence Effects 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 2
- 230000014509 gene expression Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 208000024891 symptom Diseases 0.000 description 2
- 230000005856 abnormality Effects 0.000 description 1
- 238000009825 accumulation Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000004422 calculation algorithm Methods 0.000 description 1
- 230000001186 cumulative effect Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 230000007257 malfunction Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
- G06F11/3006—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
- G06F11/324—Display of status information
- G06F11/327—Alarm or error message display
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- Computing Systems (AREA)
- Quality & Reliability (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Mathematical Physics (AREA)
- Alarm Systems (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses an alarm processing method, which comprises the following steps: receiving alarm information generated after a service node triggers an alarm rule; determining an alarm type according to the alarm information; determining a plurality of verifier nodes for verifying the alarm information according to the alarm type; verifying the alarm information by each verifier node and generating a corresponding score based on a verification result; adding the scores generated by each verifier node to serve as final scores of the alarm information; and determining the processing priority corresponding to the alarm information according to the alarm type and the final score. The invention also discloses a system, computer equipment and a readable storage medium. The scheme provided by the invention verifies the alarm information through the plurality of verifier nodes, so that the accuracy and the flexibility of monitoring can be improved.
Description
Technical Field
The present invention relates to the field of servers, and in particular, to an alarm processing method, system, device, and storage medium.
Background
In the field of network management, a fault is defined as a cause of a malfunction, and is a cause of an alarm event. An alarm is an event report formed by a notification issued by a managed object when a specific event occurs, for delivering alarm information. It is well defined by the manufacturer and is generated by devices in the network, and is a message sent by the system indicating that something has happened or is unusual, which is ultimately observed by the network manager.
The ideal alarm information contains information about the name of the fault equipment, fault symptoms, occurrence positions, occurrence time, occurrence reasons and the like. However, most alarms only have data fields such as the name of the device experiencing the fault, symptoms of the fault, occurrence time, etc., and no data fields such as the detailed place and cause of occurrence of the fault, etc., which are necessary for identifying the fault, are provided.
Latency refers to the time required for a message or packet to travel from one end of a network to another. It includes transmission delay, propagation delay, processing delay and queuing delay. (delay = transmit delay + propagation delay + processing delay + queuing delay) in general, transmit delay and propagation delay are mainly considered. For the case of large message length, the transmission delay is a major contradiction; in the case of smaller message length, propagation delay is a major contradiction.
In practice, the state value of the machine itself changes with the restart of the BMC (Baseboard Management Controller ) and other activities, which affects the accuracy of the alarm. During the BMC restarting period, the node monitors the sensor abnormality, and certain threshold type alarms for generating invalid alarms cannot be summarized by a simple level, so that a more flexible alarm strategy is required. For example, when a certain service is restarted, the CPU occupancy rate is temporarily improved, and an invalid alarm is generated after the node just captures a high point.
Because of the large network delay or network fluctuation between the monitoring node and the controlled node, the problems of network request loss, slow data acquisition response and the like are likely to exist, and the alarm is inaccurate, so that the manpower and material resources are consumed.
Disclosure of Invention
In view of this, in order to overcome at least one aspect of the above-mentioned problems, an embodiment of the present invention provides an alarm processing method, including the following steps:
receiving alarm information generated after a service node triggers an alarm rule;
determining an alarm type according to the alarm information;
determining a plurality of verifier nodes for verifying the alarm information according to the alarm type;
verifying the alarm information by each verifier node and generating a corresponding score based on a verification result;
adding the scores generated by each verifier node to serve as final scores of the alarm information;
and determining the processing priority corresponding to the alarm information according to the alarm type and the final score.
In some embodiments, verifying the alert information with each verifier node, respectively, and generating a corresponding score based on the verification results, further comprises:
and verifying the alarm information by using one of the verifier nodes every preset time period to generate a corresponding score based on a verification result.
In some embodiments, further comprising:
setting different weights for each verifier node according to the alarm types;
judging whether the sum of the weights of the verifier nodes which verify the alarm information currently is larger than a preset value;
and stopping verifying the alarm information by using the rest verifier nodes in response to the alarm information being larger than the preset value.
In some embodiments, adding the scores generated by each verifier node as a final score for the alert information further includes:
multiplying the weight corresponding to each verifier node subjected to verification by the corresponding score, and adding the weight to obtain the final score of the alarm information.
In some embodiments, further comprising:
in response to receiving an instruction to adjust the weight of the verifier nodes, the weight of each verifier node is updated in accordance with the instruction.
In some embodiments, determining a number of verifier nodes to verify the alert information according to the alert type further comprises:
judging whether the alarm type is a preset alarm type or not;
and determining a preset verifier node corresponding to the preset alarm type in response to the alarm type being the preset alarm type.
In some embodiments, receiving the alarm information generated after the service node triggers the alarm rule further includes:
creating an alarm pool;
and carrying out format conversion on the received alarm information, and then placing the alarm information into the alarm pool.
Based on the same inventive concept, according to another aspect of the present invention, an embodiment of the present invention further provides an alarm processing system, including:
the receiving module is configured to receive alarm information generated after the service node triggers an alarm rule;
the first determining module is configured to determine an alarm type according to the alarm information;
the second determining module is configured to determine a plurality of verifier nodes for verifying the alarm information according to the alarm type;
the verification module is configured to verify the alarm information by utilizing each verifier node respectively and generate a corresponding score based on a verification result;
the calculation module is configured to add the scores generated by each verifier node and then take the sum as a final score of the alarm information;
and the third determining module is configured to determine the processing priority corresponding to the alarm information according to the alarm type and the final score.
Based on the same inventive concept, according to another aspect of the present invention, an embodiment of the present invention further provides a computer apparatus, including:
at least one processor; and
a memory storing a computer program executable on the processor, wherein the processor executes the program to perform the steps of:
receiving alarm information generated after a service node triggers an alarm rule;
determining an alarm type according to the alarm information;
determining a plurality of verifier nodes for verifying the alarm information according to the alarm type;
verifying the alarm information by each verifier node and generating a corresponding score based on a verification result;
adding the scores generated by each verifier node to serve as final scores of the alarm information;
and determining the processing priority corresponding to the alarm information according to the alarm type and the final score.
In some embodiments, verifying the alert information with each verifier node, respectively, and generating a corresponding score based on the verification results, further comprises:
and verifying the alarm information by using one of the verifier nodes every preset time period to generate a corresponding score based on a verification result.
In some embodiments, further comprising:
setting different weights for each verifier node according to the alarm types;
judging whether the sum of the weights of the verifier nodes which verify the alarm information currently is larger than a preset value;
and stopping verifying the alarm information by using the rest verifier nodes in response to the alarm information being larger than the preset value.
In some embodiments, adding the scores generated by each verifier node as a final score for the alert information further includes:
multiplying the weight corresponding to each verifier node subjected to verification by the corresponding score, and adding the weight to obtain the final score of the alarm information.
In some embodiments, further comprising:
in response to receiving an instruction to adjust the weight of the verifier nodes, the weight of each verifier node is updated in accordance with the instruction.
In some embodiments, determining a number of verifier nodes to verify the alert information according to the alert type further comprises:
judging whether the alarm type is a preset alarm type or not;
and determining a preset verifier node corresponding to the preset alarm type in response to the alarm type being the preset alarm type.
In some embodiments, receiving the alarm information generated after the service node triggers the alarm rule further includes:
creating an alarm pool;
and carrying out format conversion on the received alarm information, and then placing the alarm information into the alarm pool.
Based on the same inventive concept, according to another aspect of the present invention, there is also provided a computer-readable storage medium storing a computer program which, when executed by a processor, performs the steps of:
receiving alarm information generated after a service node triggers an alarm rule;
determining an alarm type according to the alarm information;
determining a plurality of verifier nodes for verifying the alarm information according to the alarm type;
verifying the alarm information by each verifier node and generating a corresponding score based on a verification result;
adding the scores generated by each verifier node to serve as final scores of the alarm information;
and determining the processing priority corresponding to the alarm information according to the alarm type and the final score.
In some embodiments, verifying the alert information with each verifier node, respectively, and generating a corresponding score based on the verification results, further comprises:
and verifying the alarm information by using one of the verifier nodes every preset time period to generate a corresponding score based on a verification result.
In some embodiments, further comprising:
setting different weights for each verifier node according to the alarm types;
judging whether the sum of the weights of the verifier nodes which verify the alarm information currently is larger than a preset value;
and stopping verifying the alarm information by using the rest verifier nodes in response to the alarm information being larger than the preset value.
In some embodiments, adding the scores generated by each verifier node as a final score for the alert information further includes:
multiplying the weight corresponding to each verifier node subjected to verification by the corresponding score, and adding the weight to obtain the final score of the alarm information.
In some embodiments, further comprising:
in response to receiving an instruction to adjust the weight of the verifier nodes, the weight of each verifier node is updated in accordance with the instruction.
In some embodiments, determining a number of verifier nodes to verify the alert information according to the alert type further comprises:
judging whether the alarm type is a preset alarm type or not;
and determining a preset verifier node corresponding to the preset alarm type in response to the alarm type being the preset alarm type.
In some embodiments, receiving the alarm information generated after the service node triggers the alarm rule further includes:
creating an alarm pool;
and carrying out format conversion on the received alarm information, and then placing the alarm information into the alarm pool.
The invention has the following beneficial technical effects: the scheme provided by the invention verifies the alarm information through the plurality of verifier nodes, so that the accuracy and the flexibility of monitoring can be improved. The plurality of verifier nodes can cross verify, and the alarm can take effect after the number of times of verification is met, so that abnormal states such as BMC restarting or upgrading are avoided through multiple times of verification of the plurality of verifiers, and the alarm accuracy is improved.
Drawings
In order to more clearly illustrate the embodiments of the invention or the technical solutions in the prior art, the drawings that are necessary for the description of the embodiments or the prior art will be briefly described, it being obvious that the drawings in the following description are only some embodiments of the invention and that other embodiments may be obtained according to these drawings without inventive effort for a person skilled in the art.
FIG. 1 is a flow chart of an alarm processing method according to an embodiment of the present invention;
FIG. 2 is a flow chart of an alarm processing method according to an embodiment of the present invention;
FIG. 3 is a schematic diagram of an alarm processing system according to an embodiment of the present invention;
FIG. 4 is a schematic diagram of a computer device according to an embodiment of the present invention;
fig. 5 is a schematic structural diagram of a computer-readable storage medium according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the following embodiments of the present invention will be described in further detail with reference to the accompanying drawings.
It should be noted that, in the embodiments of the present invention, all the expressions "first" and "second" are used to distinguish two entities with the same name but different entities or different parameters, and it is noted that the "first" and "second" are only used for convenience of expression, and should not be construed as limiting the embodiments of the present invention, and the following embodiments are not described one by one.
According to an aspect of the present invention, an embodiment of the present invention proposes an alarm processing method, as shown in fig. 1, which may include the steps of: a step of
S1, receiving alarm information generated after a service node triggers an alarm rule;
s2, determining the alarm type according to the alarm information;
s3, determining a plurality of verifier nodes for verifying the alarm information according to the alarm type;
s4, verifying the alarm information by each verifier node and generating a corresponding score based on a verification result;
s5, adding the scores generated by each verifier node to serve as final scores of the alarm information;
s6, determining the processing priority corresponding to the alarm information according to the alarm type and the final score.
The scheme provided by the invention verifies the alarm information through the plurality of verifier nodes, so that the accuracy and the flexibility of monitoring can be improved. The plurality of verifier nodes can cross verify, and the alarm can be effective after the number of times of verification is met, so that invalid abnormal states such as BMC restarting or upgrading are avoided through multiple times of verification of the plurality of verifiers, and the alarm accuracy is improved.
In some embodiments, receiving the alarm information generated after the service node triggers the alarm rule further includes:
creating an alarm pool;
and carrying out format conversion on the received alarm information, and then placing the alarm information into the alarm pool.
In some embodiments, verifying the alert information with each verifier node, respectively, and generating a corresponding score based on the verification results, further comprises:
and verifying the alarm information by using one of the verifier nodes every preset time period to generate a corresponding score based on a verification result.
In some embodiments, further comprising:
setting different weights for each verifier node according to the alarm types;
judging whether the sum of the weights of the verifier nodes which verify the alarm information currently is larger than a preset value;
and stopping verifying the alarm information by using the rest verifier nodes in response to the alarm information being larger than the preset value.
In some embodiments, adding the scores generated by each verifier node as a final score for the alert information further includes:
multiplying the weight corresponding to each verifier node subjected to verification by the corresponding score, and adding the weight to obtain the final score of the alarm information.
Specifically, as shown in fig. 2, after the alarm is generated, the alarm may enter the alarm pool through the preprocessor. The preprocessor is responsible for uniformly converting alarms of various protocols into alarms defined by the monitoring system, and can also specify a minimum time interval between two verifiers for the alarms according to the types of the alarms. And different verifier nodes can be configured with different weights on different alarms, and each alarm needs that the weight accumulation of the verifier is more than or equal to 100 percent, so that a verification period of a period of time is passed, and if the sensor is recovered to be normal, the alarm is given a very low score and is identified.
In this way, by enabling alarms of different channels to enter the alarm pool through the preprocessor, the verifier verifies and scores the alarms in the alarm pool, and the alarms of different types have different scoring strategies, so that the alarms become more accurate. For example, whether the state type alarms such as the hard disk is in place or not is only a yes answer and a no answer, so that the state type alarms such as the hard disk is only 0 and 100; for threshold alarms such as CPU occupancy rate or time delay, different values have different scores, which are determined according to rules. When the alarm is overdriven by a verifier with a cumulative weight greater than 100%, the final score is obtained and entered into the persistence layer. The persistence layer is used for persistence storage of the confirmed alarm, and the confirmed alarm appears at the front end and is provided for operation and maintenance personnel.
In some embodiments, further comprising:
in response to receiving an instruction to adjust the weight of the verifier nodes, the weight of each verifier node is updated in accordance with the instruction.
Specifically, as shown in FIG. 2, different businesses may assemble and configure their own authenticators, making authentication logic for a particular alert. After deploying the verifier node, the method can request to the coordinator node to redistribute the verification weight of the specific alarm, and the coordinator node examines the weight and issues the weight to each verifier to adjust the specific alarm weight.
In some embodiments, determining a number of verifier nodes to verify the alert information according to the alert type further comprises:
judging whether the alarm type is a preset alarm type or not;
and determining a preset verifier node corresponding to the preset alarm type in response to the alarm type being the preset alarm type.
In particular, a particular alert may have a higher weight on a particular verifier, with a scoring that is more targeted.
The scheme provided by the invention verifies the alarm information through the plurality of verifier nodes, so that the accuracy and the flexibility of monitoring can be improved. The plurality of verifier nodes can cross verify, and the alarm can be effective after the number of times of verification is met, so that invalid abnormal states such as BMC restarting or upgrading are avoided through multiple times of verification of the plurality of verifiers, and the alarm accuracy is improved.
Based on the same inventive concept, according to another aspect of the present invention, there is also provided an alarm processing system 400, as shown in fig. 3, including:
a receiving module 401 configured to receive alarm information generated after the service node triggers an alarm rule;
a first determining module 402 configured to determine an alarm type according to the alarm information;
a second determining module 403 configured to determine a number of verifier nodes for verifying the alarm information according to the alarm type;
a verification module 404 configured to verify the alert information with each verifier node, respectively, and generate a corresponding score based on the verification result;
a calculation module 405 configured to add the scores generated by each verifier node to be the final score of the alert information;
and a third determining module 406, configured to determine a processing priority corresponding to the alarm information according to the alarm type and the final score.
In some embodiments, verifying the alert information with each verifier node, respectively, and generating a corresponding score based on the verification results, further comprises:
and verifying the alarm information by using one of the verifier nodes every preset time period to generate a corresponding score based on a verification result.
In some embodiments, further comprising:
setting different weights for each verifier node according to the alarm types;
judging whether the sum of the weights of the verifier nodes which verify the alarm information currently is larger than a preset value;
and stopping verifying the alarm information by using the rest verifier nodes in response to the alarm information being larger than the preset value.
In some embodiments, adding the scores generated by each verifier node as a final score for the alert information further includes:
multiplying the weight corresponding to each verifier node subjected to verification by the corresponding score, and adding the weight to obtain the final score of the alarm information.
In some embodiments, further comprising:
in response to receiving an instruction to adjust the weight of the verifier nodes, the weight of each verifier node is updated in accordance with the instruction.
In some embodiments, determining a number of verifier nodes to verify the alert information according to the alert type further comprises:
judging whether the alarm type is a preset alarm type or not;
and determining a preset verifier node corresponding to the preset alarm type in response to the alarm type being the preset alarm type.
In some embodiments, receiving the alarm information generated after the service node triggers the alarm rule further includes:
creating an alarm pool;
and carrying out format conversion on the received alarm information, and then placing the alarm information into the alarm pool.
The scheme provided by the invention verifies the alarm information through the plurality of verifier nodes, so that the accuracy and the flexibility of monitoring can be improved. The plurality of verifier nodes can cross verify, and the alarm can be effective after the number of times of verification is met, so that invalid abnormal states such as BMC restarting or upgrading are avoided through multiple times of verification of the plurality of verifiers, and the alarm accuracy is improved.
Based on the same inventive concept, according to another aspect of the present invention, as shown in fig. 4, an embodiment of the present invention further provides a computer apparatus 501, including:
at least one processor 520; and
the memory 510, the memory 510 stores a computer program 511 executable on a processor, and the processor 520 executes the program to perform the steps of:
s1, receiving alarm information generated after a service node triggers an alarm rule;
s2, determining the alarm type according to the alarm information;
s3, determining a plurality of verifier nodes for verifying the alarm information according to the alarm type;
s4, verifying the alarm information by each verifier node and generating a corresponding score based on a verification result;
s5, adding the scores generated by each verifier node to serve as final scores of the alarm information;
s6, determining the processing priority corresponding to the alarm information according to the alarm type and the final score.
In some embodiments, verifying the alert information with each verifier node, respectively, and generating a corresponding score based on the verification results, further comprises:
and verifying the alarm information by using one of the verifier nodes every preset time period to generate a corresponding score based on a verification result.
In some embodiments, further comprising:
setting different weights for each verifier node according to the alarm types;
judging whether the sum of the weights of the verifier nodes which verify the alarm information currently is larger than a preset value;
and stopping verifying the alarm information by using the rest verifier nodes in response to the alarm information being larger than the preset value.
In some embodiments, adding the scores generated by each verifier node as a final score for the alert information further includes:
multiplying the weight corresponding to each verifier node subjected to verification by the corresponding score, and adding the weight to obtain the final score of the alarm information.
In some embodiments, further comprising:
in response to receiving an instruction to adjust the weight of the verifier nodes, the weight of each verifier node is updated in accordance with the instruction.
In some embodiments, determining a number of verifier nodes to verify the alert information according to the alert type further comprises:
judging whether the alarm type is a preset alarm type or not;
and determining a preset verifier node corresponding to the preset alarm type in response to the alarm type being the preset alarm type.
In some embodiments, receiving the alarm information generated after the service node triggers the alarm rule further includes:
creating an alarm pool;
and carrying out format conversion on the received alarm information, and then placing the alarm information into the alarm pool.
The scheme provided by the invention verifies the alarm information through the plurality of verifier nodes, so that the accuracy and the flexibility of monitoring can be improved. The plurality of verifier nodes can cross verify, and the alarm can take effect after the number of times of verification is met, so that abnormal states such as BMC restarting or upgrading are avoided through multiple times of verification of the plurality of verifiers, and the alarm accuracy is improved.
Based on the same inventive concept, according to another aspect of the present invention, as shown in fig. 5, an embodiment of the present invention further provides a computer-readable storage medium 601, the computer-readable storage medium 601 storing computer program instructions 610, the computer program instructions 610 when executed by a processor performing the steps of:
s1, receiving alarm information generated after a service node triggers an alarm rule;
s2, determining the alarm type according to the alarm information;
s3, determining a plurality of verifier nodes for verifying the alarm information according to the alarm type;
s4, verifying the alarm information by each verifier node and generating a corresponding score based on a verification result;
s5, adding the scores generated by each verifier node to serve as final scores of the alarm information;
s6, determining the processing priority corresponding to the alarm information according to the alarm type and the final score.
In some embodiments, verifying the alert information with each verifier node, respectively, and generating a corresponding score based on the verification results, further comprises:
and verifying the alarm information by using one of the verifier nodes every preset time period to generate a corresponding score based on a verification result.
In some embodiments, further comprising:
setting different weights for each verifier node according to the alarm types;
judging whether the sum of the weights of the verifier nodes which verify the alarm information currently is larger than a preset value;
and stopping verifying the alarm information by using the rest verifier nodes in response to the alarm information being larger than the preset value.
In some embodiments, adding the scores generated by each verifier node as a final score for the alert information further includes:
multiplying the weight corresponding to each verifier node subjected to verification by the corresponding score, and adding the weight to obtain the final score of the alarm information.
In some embodiments, further comprising:
in response to receiving an instruction to adjust the weight of the verifier nodes, the weight of each verifier node is updated in accordance with the instruction.
In some embodiments, determining a number of verifier nodes to verify the alert information according to the alert type further comprises:
judging whether the alarm type is a preset alarm type or not;
and determining a preset verifier node corresponding to the preset alarm type in response to the alarm type being the preset alarm type.
In some embodiments, receiving the alarm information generated after the service node triggers the alarm rule further includes:
creating an alarm pool;
and carrying out format conversion on the received alarm information, and then placing the alarm information into the alarm pool.
The scheme provided by the invention verifies the alarm information through the plurality of verifier nodes, so that the accuracy and the flexibility of monitoring can be improved. The plurality of verifier nodes can cross verify, and the alarm can be effective after the number of times of verification is met, so that invalid abnormal states such as BMC restarting or upgrading are avoided through multiple times of verification of the plurality of verifiers, and the alarm accuracy is improved.
Finally, it should be noted that, as will be appreciated by those skilled in the art, all or part of the procedures in implementing the methods of the embodiments described above may be implemented by a computer program for instructing relevant hardware, and the program may be stored in a computer readable storage medium, and the program may include the procedures of the embodiments of the methods described above when executed.
Further, it should be appreciated that the computer-readable storage medium (e.g., memory) herein can be either volatile memory or nonvolatile memory, or can include both volatile and nonvolatile memory.
Those of skill would further appreciate that the various illustrative logical blocks, modules, circuits, and algorithm steps described in connection with the disclosure herein may be implemented as electronic hardware, computer software, or combinations of both. To clearly illustrate this interchangeability of hardware and software, various illustrative components, blocks, modules, circuits, and steps have been described above generally in terms of their functionality. Whether such functionality is implemented as software or hardware depends upon the particular application and design constraints imposed on the overall system. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present disclosure.
The foregoing is an exemplary embodiment of the present disclosure, but it should be noted that various changes and modifications could be made herein without departing from the scope of the disclosure as defined by the appended claims. The functions, steps and/or actions of the method claims in accordance with the disclosed embodiments described herein need not be performed in any particular order. Furthermore, although elements of the disclosed embodiments may be described or claimed in the singular, the plural is contemplated unless limitation to the singular is explicitly stated.
It should be understood that as used herein, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly supports the exception. It should also be understood that "and/or" as used herein is meant to include any and all possible combinations of one or more of the associated listed items.
The foregoing embodiment of the present invention has been disclosed with reference to the number of embodiments for the purpose of description only, and does not represent the advantages or disadvantages of the embodiments.
It will be understood by those skilled in the art that all or part of the steps for implementing the above embodiments may be implemented by hardware, or may be implemented by a program for instructing relevant hardware, and the program may be stored in a computer readable storage medium, where the storage medium may be a read-only memory, a magnetic disk or an optical disk, etc.
Those of ordinary skill in the art will appreciate that: the above discussion of any embodiment is merely exemplary and is not intended to imply that the scope of the disclosure of embodiments of the invention, including the claims, is limited to such examples; combinations of features of the above embodiments or in different embodiments are also possible within the idea of an embodiment of the invention, and many other variations of the different aspects of the embodiments of the invention as described above exist, which are not provided in detail for the sake of brevity. Therefore, any omission, modification, equivalent replacement, improvement, etc. of the embodiments should be included in the protection scope of the embodiments of the present invention.
Claims (9)
1. An alarm processing method, comprising the steps of:
receiving alarm information generated after a service node triggers an alarm rule;
determining an alarm type according to the alarm information;
determining a plurality of verifier nodes for verifying the alarm information according to the alarm type;
verifying the alarm information by each verifier node and generating a corresponding score based on a verification result;
adding the scores generated by each verifier node to serve as final scores of the alarm information;
determining a processing priority corresponding to the alarm information according to the alarm type and the final score;
the method further comprises the steps of:
setting different weights for each verifier node according to the alarm types;
judging whether the sum of the weights of the verifier nodes which verify the alarm information currently is larger than a preset value;
and stopping verifying the alarm information by using the rest verifier nodes in response to the alarm information being larger than the preset value.
2. The method of claim 1, wherein verifying the alert information with each verifier node and generating a corresponding score based on the verification results, respectively, further comprises:
and verifying the alarm information by using one of the verifier nodes every preset time period to generate a corresponding score based on a verification result.
3. The method of claim 1, wherein adding the scores generated by each verifier node as a final score for the alert information, further comprises:
multiplying the weight corresponding to each verifier node subjected to verification by the corresponding score, and adding the weight to obtain the final score of the alarm information.
4. The method as recited in claim 1, further comprising:
in response to receiving an instruction to adjust the weight of the verifier nodes, the weight of each verifier node is updated in accordance with the instruction.
5. The method of claim 1, wherein determining a number of verifier nodes to verify the alert information based on the alert type, further comprises:
judging whether the alarm type is a preset alarm type or not;
and determining a preset verifier node corresponding to the preset alarm type in response to the alarm type being the preset alarm type.
6. The method of claim 1, wherein receiving the alert information generated after the service node triggered the alert rule further comprises:
creating an alarm pool;
and carrying out format conversion on the received alarm information, and then placing the alarm information into the alarm pool.
7. An alarm processing system, comprising:
the receiving module is configured to receive alarm information generated after the service node triggers an alarm rule;
the first determining module is configured to determine an alarm type according to the alarm information;
the second determining module is configured to determine a plurality of verifier nodes for verifying the alarm information according to the alarm type;
the verification module is configured to verify the alarm information by utilizing each verifier node respectively and generate a corresponding score based on a verification result;
the calculation module is configured to add the scores generated by each verifier node and then take the sum as a final score of the alarm information;
the third determining module is configured to determine a processing priority corresponding to the alarm information according to the alarm type and the final score;
the verification module is further configured to:
setting different weights for each verifier node according to the alarm types;
judging whether the sum of the weights of the verifier nodes which verify the alarm information currently is larger than a preset value;
and stopping verifying the alarm information by using the rest verifier nodes in response to the alarm information being larger than the preset value.
8. A computer device, comprising:
at least one processor; and
a memory storing a computer program executable on the processor, wherein the processor performs the steps of the method of any one of claims 1-6 when the program is executed.
9. A computer readable storage medium storing a computer program, characterized in that the computer program when executed by a processor performs the steps of the method according to any one of claims 1-6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111007688.2A CN113821404B (en) | 2021-08-30 | 2021-08-30 | Alarm processing method, system, equipment and medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111007688.2A CN113821404B (en) | 2021-08-30 | 2021-08-30 | Alarm processing method, system, equipment and medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113821404A CN113821404A (en) | 2021-12-21 |
| CN113821404B true CN113821404B (en) | 2023-12-26 |
Family
ID=78913774
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111007688.2A Active CN113821404B (en) | 2021-08-30 | 2021-08-30 | Alarm processing method, system, equipment and medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113821404B (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106908690A (en) * | 2017-02-20 | 2017-06-30 | 积成电子股份有限公司 | Distributed intelligence warning system and its method for diagnosing faults between boss station |
| CN107888424A (en) * | 2017-11-27 | 2018-04-06 | 凌云天博光电科技股份有限公司 | Warning information recognition methods and device, NMS |
| CN108447013A (en) * | 2018-03-28 | 2018-08-24 | 湖州华科信息咨询有限公司 | A kind of environmentally friendly reminding method and device based on multi-parameters sampling |
| CN109412789A (en) * | 2018-09-29 | 2019-03-01 | 深圳市中电数通智慧安全科技股份有限公司 | A kind of method and device of fire fighting monitoring |
| CN109871305A (en) * | 2019-01-18 | 2019-06-11 | 深圳壹账通智能科技有限公司 | Processing method, device, computer equipment and the storage medium of warning information |
| WO2020233251A1 (en) * | 2019-05-17 | 2020-11-26 | 深圳前海微众银行股份有限公司 | Data management method and device |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20080303811A1 (en) * | 2007-06-07 | 2008-12-11 | Leviathan Entertainment, Llc | Virtual Professional |
-
2021
- 2021-08-30 CN CN202111007688.2A patent/CN113821404B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106908690A (en) * | 2017-02-20 | 2017-06-30 | 积成电子股份有限公司 | Distributed intelligence warning system and its method for diagnosing faults between boss station |
| CN107888424A (en) * | 2017-11-27 | 2018-04-06 | 凌云天博光电科技股份有限公司 | Warning information recognition methods and device, NMS |
| CN108447013A (en) * | 2018-03-28 | 2018-08-24 | 湖州华科信息咨询有限公司 | A kind of environmentally friendly reminding method and device based on multi-parameters sampling |
| CN109412789A (en) * | 2018-09-29 | 2019-03-01 | 深圳市中电数通智慧安全科技股份有限公司 | A kind of method and device of fire fighting monitoring |
| CN109871305A (en) * | 2019-01-18 | 2019-06-11 | 深圳壹账通智能科技有限公司 | Processing method, device, computer equipment and the storage medium of warning information |
| WO2020233251A1 (en) * | 2019-05-17 | 2020-11-26 | 深圳前海微众银行股份有限公司 | Data management method and device |
Non-Patent Citations (3)
| Title |
|---|
| Kaisheng Zhang ; Jiaan Zhang.Research on the meter's pulse signal processing based on sleep-monitoring alarm system.IEEE.2009,全文. * |
| 基于多源安全信息的IDS告警验证研究;王景新;王志英;戴葵;;计算机应用(第08期);全文 * |
| 基于文本追踪合并的检测算法研究;徐旭;余俊丰;;计算机工程与设计(第04期);全文 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113821404A (en) | 2021-12-21 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108710544B (en) | Process monitoring method of database system and rail transit comprehensive monitoring system | |
| US20200057686A1 (en) | Compute node, failure detection method thereof and cloud data processing system | |
| CN112162878A (en) | Database fault discovery method and device, electronic equipment and storage medium | |
| CN111901422B (en) | Method, system and device for managing nodes in cluster | |
| CN110705893B (en) | Service node management method, device, equipment and storage medium | |
| US11522876B2 (en) | Method and device for detecting an attack on a serial communications system | |
| Koutras | Two-level software rejuvenation model with increasing failure rate degradation | |
| CN109710441A (en) | A kind of software watchdog, electronic equipment and computer storage medium | |
| CN105357069A (en) | Distributed node service state monitoring method, device and system | |
| US20230367664A1 (en) | Method for managing ecu on vehicle, and ecu and readable storage medium | |
| CN110837432A (en) | Method and device for determining abnormal node in service cluster and monitoring server | |
| CN111199400A (en) | Safety monitoring method and device for block chain network | |
| CN116418653A (en) | Fault positioning method and device based on multi-index root cause positioning algorithm | |
| CN113821404B (en) | Alarm processing method, system, equipment and medium | |
| US11777785B2 (en) | Alert throttling | |
| JP5949785B2 (en) | Information processing method, apparatus and program | |
| JP2007249741A (en) | Suspicious part specifying apparatus and processing method | |
| JP2004145536A (en) | Management system | |
| JP2003032253A (en) | In-advance countermeasure on-line diagnosis in manageable network | |
| CN112068935A (en) | Method, device and equipment for monitoring deployment of kubernets program | |
| CN110224872B (en) | Communication method, device and storage medium | |
| CN117149482A (en) | Method and device for detecting thread state, electronic equipment and medium | |
| JP2006244334A (en) | Plant monitoring method | |
| Tcholtchev et al. | Autonomic fault-management and resilience from the perspective of the network operation personnel | |
| CN116366349A (en) | Modeling method and device for cascading failures of power information physical system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |