CN114548833A

CN114548833A - Integrated intelligent operation and maintenance control method, system and operation and maintenance platform

Info

Publication number: CN114548833A
Application number: CN202210426671.9A
Authority: CN
Inventors: 刘晶杰
Original assignee: DIGITAL CHINA ADVANCED SYSTEMS SERVICES CO LTD
Current assignee: DIGITAL CHINA ADVANCED SYSTEMS SERVICES CO LTD
Priority date: 2022-04-22
Filing date: 2022-04-22
Publication date: 2022-05-27

Abstract

The invention belongs to the technical field of cloud data processing, and discloses an integrated intelligent operation and maintenance control method, system and platform, wherein the integrated intelligent operation and maintenance control method specifically comprises the steps of making a service directory according to a service range provided by an integrated intelligent operation and maintenance self-service portal, and distributing the service directory to a corresponding target user range of the self-service portal; managing a service process by using a workflow engine module, wherein the service process comprises application, approval, delivery, recovery/evaluation; constructing a CMDB uniform resource configuration library, and storing all key information of operation and maintenance management and all data related to operation and maintenance in real time; realizing resource change management of a service directory and change management of historical IT resources in a non-self-service portal service directory through the CMDB; and constructing a safety operation center, opening an API (application programming interface) interface for the automatic operation and maintenance module, and realizing real-time update of the operation and maintenance data by linking with the CMDB.

Description

Integrated intelligent operation and maintenance control method, system and operation and maintenance platform

Technical Field

The invention belongs to the technical field of cloud data processing, and particularly relates to an integrated intelligent operation and maintenance control method, system and operation and maintenance platform.

Background

With the continuous promotion of the national and enterprise digital transformation process, the cloud computing and container technology is widely applied to information-based construction, and the cloud becomes the mainstream trend in a business application system. Meanwhile, with the popularization of cloud computing and the change of network forms, in the process of cloud of the IT infrastructure, the whole IT infrastructure can still meet the regulatory requirements of national network security laws and network security level protection systems. How to ensure the efficient, safe and stable operation, maintenance and operation of the integral heterogeneous IT information system infrastructure. Has become a difficult topic and puts higher demands and challenges on operation and maintenance management teams.

When the data center IT infrastructure is clouded, an operation and maintenance management team supports daily operation and maintenance of the whole IT infrastructure and operation work through a cloud management platform, an IT monitoring system, ITSM (service process) management and information security management operation and maintenance management tool combination of each original factory or open source. The tools are divided into cloud management, information security management SOC, IT monitoring, service process management (ITSM), automation operation and maintenance, log management, Network Performance Monitoring (NPM) and business application monitoring (APM) from the major aspect, and each tool has division of labor and emphasis on functions. The method puts higher requirements on the specialty, the capability and the scale of operation and maintenance personnel of the IT infrastructure; from another dimension, the current situation also causes natural chimney limitation on the current operation and maintenance mode. The operation and maintenance team has to maintain and keep data synchronization and flow collaboration among the chimney-type operation and maintenance management tools through various offline or other modes, so that the operation and maintenance requirements of the IT overall infrastructure are met to the maximum extent. To take a simple example: the operation and maintenance team realizes application, release, recovery and monitoring of the daily virtual host through the cloud management platform in daily operation and maintenance and operation work; however, in order to meet the stable requirement of the service environment borne on the whole IT infrastructure, the operation and maintenance team has to synchronize the frequently newly-added, expanded and returned changed IT virtualization resource information to the corresponding IT monitoring and service application monitoring (APM) through other methods to realize the monitoring of the service system borne on the virtual hosts and the borne service system; meanwhile, the operation and maintenance team also needs to take the information security requirements into consideration, and the changed IT resource information is synchronized to the fortress management platform for operation and maintenance security audit through a offline or other ways, so that creation and deletion actions of the operation and maintenance audit accounts of the newly added virtual hosts and the provision of the security operation and maintenance audit capability of the end user accessing the virtual machine resources in the whole process are realized. Under the current situation of the current operation and maintenance tools, an operation and maintenance team can support the requirements of complete operation, maintenance, operation and safety scenes only by combining a plurality of operation and maintenance tools in the face of the originally complete operation and maintenance scene.

The various kinds of operation and maintenance management tools mentioned above can be roughly classified into the following categories:

1) cloud management platform (abbreviation: cloud management, the same applies below) to realize management and scheduling of cloud resources, and meanwhile, the method can provide monitoring for basic operation states of a basic network, a storage, a physical machine and a virtual machine supporting a cloud environment.

2) The IT monitoring system realizes providing continuous monitoring for various software and hardware resources and service systems in the cloud environment, and comprises: the system comprises physical equipment, a virtual machine, a database, middleware and a service application system.

3) The operation and maintenance management system provides unified resource management (short for: CMDB, the same below), service flow management (abbreviation: ITSM, the same below), and a service directory management related operation and maintenance management tool.

4) And the automatic operation and maintenance system is linked with each system to realize the automatic delivery of the service.

5) Service performance monitoring (abbreviation: APM, the same below), the monitoring of the key performance index of the service system is realized.

6) Network performance monitoring (abbreviation: NPM, the same below), the monitoring of the key performance indicators of the network is achieved.

7) Information security management center (abbreviation: SOC, the same as below), operation and maintenance safety barrier audit, cloud data center intranet east-west flow visualization and control, and safety log analysis of various operation, maintenance and operation safety capabilities are realized.

The combination of the existing operation and maintenance products can solve most problems in the operation and maintenance process under the cloud environment, but the above examples can find that the whole operation and maintenance and operation process of the IT infrastructure in the range of the cloud data center still has a plurality of defects:

1) lack the integration wisdom fortune dimension ability of running through daily fortune dimension scene overall process, the unable integration of current instrument covers fortune dimension overall process: for example, the self-service application of the newly added IT resources can not be taken as a starting point, and the automatic creation of a CMDB library of the newly added resources, the automatic creation and the admission of a newly added monitoring object, the creation of a safe operation and maintenance bastion account of the newly added resources, the safe login and the operation audit of the newly added resources and the synchronous management of the data and the flow coordination capacity among a series of operation and maintenance professional modules of the newly added resources through the internal linkage of the integrated operation and maintenance control system can be realized.

2) Lack of linkage with other third party systems within the user, such as: when the daily problems are processed in the daily operation and maintenance process due to the fact that the identity authentication, the safety management platform, the message platform, the portal/OA, the service system and the equipment/nano-management resources are used, switching is carried out back and forth among a plurality of systems, and operation and maintenance processing efficiency is reduced. For example: in the service online process in the cloud environment, user resource application, permission opening, resource allocation, resource management and system deployment operations need to be set and operated in a plurality of systems, and then the distribution process of resources on the service cloud can be completed. In the operation and maintenance process of the cloud service system, the creation of operation and maintenance audit accounts of distributed resources, the regular modification of various account passwords of the system, the network flow visualization of the cloud resources and the access control operation and maintenance requirements also need to perform tedious resource data synchronization and operation in a plurality of operation and maintenance tools.

3) Data islands or loose coupling exist among the operation and maintenance tools, so that the operation and maintenance management cannot be efficiently coordinated and matched with a team, and the operation and maintenance efficiency is reduced. For example, a set of IT resource data of a user needs to be repeatedly input in a cloud management platform, a CMDB asset management platform, an IT monitoring platform, an operation and maintenance safety bastion platform, a network flow management platform and an ITSM process management platform, and the IT asset consistency maintenance is passively carried out.

4) The main operational service scenario cannot be approved and delivered automatically by automated means.

Through the above analysis, the problems and defects of the prior art are as follows:

(1) the prior art lacks the integrated intelligent operation and maintenance capability throughout the whole operation and maintenance scene of a user and the integrated capability of covering the whole operation and maintenance process; when linkage with other systems inside the user is lacked, and daily problems are handled in the daily operation and maintenance process, the multiple systems are switched back and forth, and the operation and maintenance processing efficiency is reduced.

In the prior art, data islands or loose coupling exist among operation and maintenance tools, so that operation and maintenance management cannot be efficiently coordinated and matched with a team, and the operation and maintenance efficiency is reduced. The main operational service scenario cannot be approved and delivered automatically by automated means.

Disclosure of Invention

Aiming at the problems in the prior art, the invention provides an integrated intelligent operation and maintenance control method, system and operation and maintenance platform.

The invention is realized in such a way that an integrated intelligent operation and maintenance control method comprises the following steps:

s1: a service directory is formulated according to a service range provided by the integrated intelligent operation and maintenance self-service portal and is distributed to a corresponding target user range of the self-service portal;

s2: managing a service process by using a workflow engine module, wherein the service process comprises application, approval, delivery, recovery/evaluation;

s3: constructing a CMDB uniform resource configuration library, and storing all key information of operation and maintenance management and all data related to operation and maintenance in real time;

s4: realizing resource change management of a service directory and change management of historical IT resources in a non-self-service portal service directory through the CMDB;

s5: and the real-time updating of the operation and maintenance data is realized by linking an API (application programming interface) opened by the constructed safety operation center to the automatic operation and maintenance module and the CMDB.

Further, the service directory publishing information in S1 includes a service scope, service content, service object, service deadline, and service provider.

Further, the service directory content includes, but is not limited to: the method comprises the following steps of IT resource application, server access authority application, network security policy fulfillment, service system access authority fulfillment, data resource access authority fulfillment, terminal fault reporting maintenance and mailbox application.

Further, the service directory supports the following typical cases:

1) after approval, manually participating in service delivery;

2) and after the approval is passed, automatic delivery is carried out.

Further, the CMDB uniform resource configuration library in S3 includes operation and maintenance objects, operation and maintenance relationships, operation and maintenance activities, and structured data and unstructured data associated with each operation and maintenance tool.

Further, in S4, the resource change management of the service directory is implemented through the CMDB, and when the service content in the service directory involves a change of resource, including resource addition, change, offline/recovery, the resource change needs to be linked with the CMDB before, during, and after the resource change, so as to continuously maintain the accuracy and real-time of the data in the unified resource library, the method specifically includes the following steps:

s41: the target user applies for the cloud host through the service portal, before the cloud host applies for approval, the operation and maintenance portal needs to inquire whether the resources meeting the conditions can be allocated through the CMDB, and the operation and maintenance portal can pass through the approval only when the compliance is met and the resources are sufficient;

s42: after the approval is passed, in the cloud resource delivery process, pre-allocated resources, associated software and hardware information and configuration information need to be notified to the CMDB module, so that the data real-time performance of the CMDB is ensured;

s43: and after the resource delivery is completed, the CMDB is informed of the completion of the delivery of the delivered cloud resources, the associated resource information and the configuration information again.

Further, the change management of the historical IT resources in the non-self-service portal service directory in S4 specifically includes the following steps:

the method comprises the following steps: the CMDB automatically discovers the existing equipment resources to be managed in the whole network through an automatic discovery engine;

step two: the equipment resource to be managed is butted with other operation and maintenance tools in an API interface mode;

step three: after the successful connection, the CMDB automatically extracts the managed equipment information, the configuration information and the monitoring information in each system.

Further, the docking range in the second step includes but is not limited to: the system comprises a unified identity authentication system, a cloud management platform/hybrid cloud pipe system, a bastion machine, a power environment system, a unified safety management system, a unified message platform, a mail system, an IT monitoring system and a service system.

Another objective of the present invention is to provide an integrated intelligent operation and maintenance control system, which is characterized in that the integrated intelligent operation and maintenance control system comprises:

the integrated intelligent operation and maintenance self-service portal is used for managing the content of each single service in the service directory and filling and reporting the service application;

and the integrated intelligent operation and maintenance management portal is used for managing the safety of each flow and the monitoring system in the integrated intelligent operation and maintenance control system.

Further, the integrated intelligent operation and maintenance management portal comprises:

the service directory management module is used for formulating a service directory according to a service range provided by the integrated intelligent operation and maintenance self-service portal and distributing the service directory to a corresponding target user range of the self-service portal;

ITSM service flow management, which is used for carrying out full flow management on the submitted service application and comprises a workflow engine module for supporting the whole flow circulation process of service application, examination and approval, delivery, recovery/evaluation; the workflow engine module generates different approval nodes, approval processes, conditions for automatic service delivery and triggered business operations according to different service contents, and simultaneously generates different worksheet forms according to various service contents and various process nodes;

CMDB resource management, namely firstly constructing a CMDB unified configuration library to provide configuration management and consumption support for other tools in the integrated intelligent operation and maintenance system; the system comprises a storage module, a management module and a management module, wherein the storage module is used for storing all key information of operation and maintenance management and all related data of operation and maintenance, including an operation and maintenance object, an operation and maintenance relation, operation and maintenance activities and structured data and unstructured data related to various operation and maintenance tools;

the automatic operation and maintenance module is used for realizing the automation of daily operation and maintenance and the automation of service delivery through butt joint linkage with all resources, equipment, a third-party operation and maintenance tool and a service system; the automation of the service delivery needs the butt joint linkage of the automatic operation and maintenance and the corresponding equipment, a third-party operation and maintenance tool and a service system, and the automatic opening of the related service is carried out;

the IT monitoring platform is used for linking with the CMDB to realize automatic monitoring and monitoring performance analysis of resources if the monitoring and receiving are needed after the service automatic household is delivered;

the hybrid cloud pipe is used for giving the automatic operation and maintenance module through an open API (application programming interface), and comprises the steps of creating, changing, destroying and daily operating resources, after the cloud application is approved, the automatic operation and maintenance module needs to open, change, start and stop daily switches and destroy and recover the cloud resources according to the resource configuration application requirements, and simultaneously, after the cloud host applies for opening, the used IP information needs to be synchronized to the CMDB system and the IP address management module;

the safety operation center is used for giving the automatic operation and maintenance module through an open API (application programming interface) interface to realize the creation of the operation and maintenance account and the unified management of the operation and maintenance passwords; after the cloud resource virtual machine is started, the automatic operation and maintenance module needs to apply for starting an operation and maintenance account with the safety operation center, and after the account is started, the related account information is synchronized to the CMDB system for complete consistency storage.

Furthermore, an IP address management module in the hybrid cloud pipe is used for managing the IP address connected with the network, and is linked with the CMDB and the automatic operation and maintenance module for technical support.

Further, the CMDB provides the most accurate and complete IP whole capacity, the using condition, the using user and the valid period information of each subnet, and discovers actively added IP addresses and changing conditions of each subnet at regular time through an automatic discovery engine and records in real time.

Furthermore, the automatic operation and maintenance module is linked with each network device to find the network access connection condition, the uplink device and the port of each IP in real time, change information and active information, and link related information with the CMDB to keep the real-time performance of data.

Another objective of the present invention is to provide an integrated intelligent operation and maintenance platform, which includes:

the service portal is used for carrying out unified management on application, submission, automatic delivery and operation and maintenance of the service;

the integrated intelligent operation and maintenance control system is used for monitoring the performance and the logs of the integrated intelligent operation and maintenance control system;

the automatic management is used for carrying out model construction and scheduling on the automatic process;

the CMDB unified resource management is used for carrying out centralized unified storage and management on the data generated by operation and maintenance in the integrated intelligent operation and maintenance platform and the data required by the operation and maintenance platform;

and the basic operation framework is used for managing the automatic flow command of the data and the data communication.

Further, the service portal includes:

the service directory management is used for carrying out centralized unified management on the constructed service directories;

the service request management is used for managing the submitted service request;

the self-service system comprises a self-service system and a service management system, wherein the self-service system is used for managing automatic application and automatic delivery of services;

the workflow engine is used for generating different worksheets according to various service contents and various process nodes;

the automatic service delivery is used for automatically opening the services which are already applied for;

and the unified operation and maintenance service is used for carrying out unified management on the whole process in the service portal.

Further, the centralized monitoring includes:

the performance monitoring is used for monitoring the performance of the integrated intelligent operation and maintenance platform and monitoring the system abnormity through the monitoring CPU;

the log monitoring is used for managing and controlling log records generated by the integrated intelligent operation and maintenance platform in operation;

and unified alarm, which is connected with performance monitoring and log monitoring, and alarm is given once abnormality is found.

Further, the automated management comprises:

the model arrangement is used for establishing a model for the automatic process and arranging the sequence of the model;

the script library is used for storing and classifying automatically executed script statements;

and scheduling management, which is used for automatically scheduling the script statements in the script library according to the model established in the model arrangement.

Further, the CMDB unified resource management comprises:

the automatic discovery engine is used for searching and downloading equipment resources in the network;

the configuration model management is used for carrying out storage management on the configuration model in the integrated intelligent operation and maintenance platform and updating the configuration model in real time;

and the configuration library is used for carrying out combined classified storage on the configuration models in the configuration model management.

Further, the base operating framework includes:

unified scheduling, namely uniformly scheduling script statements in an automation flow in the integrated intelligent operation and maintenance platform;

the instruction adaptation is used for testing the correctness and the applicability of the instructions in the integrated intelligent operation and maintenance platform;

the command distribution is used for distributing commands to the automatic flow to be operated in the integrated intelligent operation and maintenance platform;

the data analysis is used for analyzing the data received in the integrated intelligent operation and maintenance platform;

and the data communication bus is used for providing channel support for communication operation in the integrated intelligent operation and maintenance platform.

The invention also aims to provide an information data processing terminal for realizing the integrated intelligent operation and maintenance control method.

The invention also aims to provide a mobile device for realizing the integrated intelligent operation and maintenance control method.

Another object of the present invention is to provide a computer-readable storage medium, which includes instructions that, when executed on a computer, cause the computer to execute the integrated intelligent operation and maintenance control method.

By combining all the technical schemes, the invention has the advantages and positive effects that:

first, aiming at the technical problems existing in the prior art and the difficulty in solving the problems, the technical problems to be solved by the technical scheme of the present invention are closely combined with results and data in the research and development process, and the technical problems to be solved by the technical scheme of the present invention are deeply analyzed in detail, so that some creative technical effects are brought after the problems are solved. The specific description is as follows:

according to the invention, under the IT infrastructure of the cloud data center, the integrated operation and maintenance capability based on the whole operation and maintenance scene process is realized; the deep fusion of basic operation and maintenance, cloud management and a safe operation platform is realized; the basic operation and maintenance platform is linked with the inside of the safety operation and maintenance capacity and comprises an operation and maintenance safety bastion machine, a password account unified management system and a cloud safety center; the unified management of hardware, software, safety and cloud resource pool full-dimensional operation and maintenance objects and data is realized; the automatic delivery based on the operation and maintenance scene service is realized; the integration of operation, maintenance, safety and operation is realized.

The invention is linked with each relevant system needed to be related in the IT operation and maintenance scene process, and the relevant systems are linked in a unified way based on the operation and maintenance scene process, including but not limited to: the system comprises an account authentication system, a mail system, an asset management system, a cloud platform, a safety management system and a service system.

The invention can carry out unified admission management with the operated and maintained objects (security, network, server, storage, database, middleware and service application), and can be linked with the objects except for collecting monitoring information, dynamically set strategy configuration information and control the operation condition of each object.

The intelligent operation and maintenance control system is in butt joint linkage with other operation and maintenance management tools, and through the unified management, the intelligent operation and maintenance control system is integrated, all operation and maintenance related support systems, operation and maintenance objects and business systems are opened, unified services are provided for business departments and operation and maintenance departments, and the operation and maintenance object unified management, the operation and maintenance resource unified distribution, the operation and maintenance data unified storage and the operation and maintenance request unified services are realized. And the complete coverage of the full life cycle of the operation and maintenance scene is realized.

Secondly, considering the technical scheme as a whole or from the perspective of products, the technical effect and advantages of the technical scheme to be protected by the invention are specifically described as follows: the cloud data center IT infrastructure integration system can help a user to realize integration and deep fusion of operation and maintenance capacity under the cloud data center IT infrastructure, and integration of relevant chimney tools related to user operation, maintenance, safety and operation scenes is realized through integration intelligent capacity; various data passive synchronization and manual operation in the daily operation and maintenance process under the cloud IT framework are reduced, manual participation is avoided, the service delivery efficiency of cloud IT resources is improved, and the satisfaction degree of the whole operation and maintenance and operation service is improved.

Third, as an inventive supplementary proof of the claims of the present invention, there are also presented several important aspects:

(1) the expected income and commercial value after the technical scheme of the invention is converted are as follows:

after the technical scheme is converted, the market pattern of the traditional IT operation and maintenance product is expected to be overturned. The user's selection to the operation and maintenance product will be from single function product: such as network management monitoring, ITSM flow management, CMDB asset management and hybrid cloud management, is converted into an integrated operation and maintenance platform product which can improve operation and maintenance and operation efficiency.

(2) The technical scheme of the invention solves the technical problem that people are eagerly to solve but can not be successfully solved all the time:

according to the technical scheme, the integrated intelligent operation and maintenance capability output is adopted, so that a large amount of repeated daily work of a user is reduced, and the operation and maintenance efficiency and the operation efficiency are improved.

(3) The technical scheme of the invention overcomes the technical prejudice whether:

at present, the mainstream operation and maintenance product manufacturers can provide some or all of the operation and maintenance management related products, but all the products exist independently or in a loose coupling mode at present.

The technical scheme of the invention overcomes the current situation of chimney type data island or loose coupling of the traditional operation and maintenance management products, and improves the operation, maintenance and operation efficiency through the integrated intelligent operation and maintenance capability.

Drawings

FIG. 1 is a schematic flow chart illustrating an integrated intelligent operation and maintenance control method according to an embodiment of the present invention;

FIG. 2 is a schematic structural diagram of an integrated intelligent operation and maintenance control system according to an embodiment of the present invention;

FIG. 3 is a schematic diagram of an integrated intelligent operation and maintenance platform according to an embodiment of the present invention;

fig. 4 is a flowchart illustrating an implementation of the integrated intelligent operation and maintenance platform according to an embodiment of the present invention.

Fig. 5 is a schematic structural diagram of constructing a CMDB unified configuration library according to an embodiment of the present invention.

Fig. 6 is a schematic diagram of a business department submitting a service request through an operation and maintenance service portal according to an embodiment of the present invention.

Fig. 7 is a schematic diagram of the daily operation and maintenance phase according to the embodiment of the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention is further described in detail with reference to the following embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

The embodiment of the invention provides an integrated intelligent operation and maintenance control method, a system and an operation and maintenance platform, wherein the integrated intelligent operation and maintenance control method specifically comprises the steps of formulating a service directory according to a service range provided by an integrated intelligent operation and maintenance self-service portal and distributing the service directory to a corresponding target user range of the self-service portal; managing a service process by using a workflow engine module, wherein the service process comprises application, approval, delivery, recovery/evaluation; constructing a CMDB uniform resource configuration library, and storing all key information of operation and maintenance management and all data related to operation and maintenance in real time; realizing resource change management of a service directory and change management of historical IT resources in a non-self-service portal service directory through the CMDB; and opening an API (application programming interface) interface for the automatic operation and maintenance module, and realizing data linkage, real-time data updating and result data interaction in an integrated operation and maintenance platform system among various operation and maintenance tool modules such as an IT (information technology) monitoring system, a hybrid cloud pipe, a safe operation center and the like based on various integrated operation and maintenance scenes after linkage with the CMDB. And finally, the integrated intelligent operation and maintenance capability support based on the full life cycle of the operation and maintenance scene under the IT basic architecture environment of the cloud data center is realized.

Aiming at the problems in the prior art, the invention provides an integrated intelligent operation and maintenance control method, system and operation and maintenance platform, and the invention is described in detail below with reference to the accompanying drawings.

Main scheme and effect description section:

as shown in fig. 1, the integrated intelligent operation and maintenance control method includes the following steps:

As shown in fig. 2, the integrated intelligent operation and maintenance control system structure provided by the present invention includes:

The integration wisdom fortune dimension management portal includes:

CMDB resource management, namely firstly constructing a CMDB unified configuration library to provide configuration management and consumption support for other tools in the integrated intelligent operation and maintenance system; the system comprises a storage module, a management module and a management module, wherein the storage module is used for storing all key information of operation and maintenance management and all relevant data of associated operation and maintenance, including an operation and maintenance object, an operation and maintenance relation, operation and maintenance activities and structured data and unstructured data of associated operation and maintenance tools;

As shown in fig. 3, the integrated intelligent operation and maintenance platform provided by the present invention includes a self-service portal, a uniform resource management (CMDB), an IT service management (workflow engine), a centralized monitoring module, an automation operation and maintenance module, and a security center. The whole system takes the CMDB as a core, and realizes the generation and consumption functions of asset data in the IT infrastructure operation and maintenance and operation processes based on the user operation and maintenance full life cycle scene. The system function providing includes: self-service application of IT assets, open authority control of an applicant/application resource, process approval of the application resource, warehousing of the application asset, creation of a monitoring object of the application asset, creation of a safe operation and maintenance audit account number of the application resource, safe operation and maintenance access and operation and maintenance whole-process audit of the applicant to the application resource, and return and release of the resource.

The south direction is communicated with a security management center, a cloud management platform, a cloud security platform, an operation and maintenance security bastion machine, a whole-network account password management system, a unified identity authentication system, an asset management system, a management device and a service system related system.

The north direction provides a unified operation and maintenance portal and a self-service portal for business personnel and IT management personnel.

As shown in fig. 4, the overall process of the integrated intelligent operation and maintenance platform specifically includes:

a preparation stage:

the first step is as follows: constructing CMDB unified configuration library

The CMDB unified configuration library stores all key information and associated information of operation and maintenance management, including operation and maintenance objects, operation and maintenance relations, operation and maintenance activities, associated structured data and unstructured data, is a data center of the whole platform, forms a unified, full and accurate configuration library, and is a key for organic operation of the integrated intelligent operation and maintenance platform. The steps of constructing the unified configuration library are divided into the following two modes, one of the two modes can be selected, and the two modes can also be selected simultaneously, and the specific selection mode depends on the actual current situation.

The method 1 is that the CMDB automatically discovers the resources of the equipment to be managed in the whole network through an automatic discovery engine; the logical structure is shown in fig. 5.

The method mainly comprises the following steps:

1) after the automatic discovery engine passes through the IP range and the authentication information input by the user, the system automatically records the current active online IP library;

2) and aiming at the single IP, identifying the type, the model and the version of the detected online equipment through a built-in equipment fingerprint library. The fingerprint identification process comprises the following steps:

a) firstly, trying to carry out protocol communication with the IP through a built-in communication protocol;

b) after the protocol is hit, the authentication information input by the system is tried one by one, and after the authentication is passed, the instruction communication can be started;

c) collecting the fingerprint of the managed equipment through a command library built in the system;

d) after the acquisition is finished, the fingerprint database is matched with the built-in fingerprint database, and the type, the model and the version of the equipment can be automatically identified after the matching is successful.

3) After the auto discovery engine identifies the fully managed resources, it collects the configuration information of the device profile through the built-in fingerprint library and command set of the system, such as: kernel version, vendor, running configuration, sequence number;

4) and adding the identified equipment resources to the unified configuration library to provide a configuration management baseline for other subsystems in the platform.

Mode 2: the system is docked with the operation and maintenance matching system in an API interface mode, and the docking range includes but is not limited to: the system comprises a unified identity authentication system, a cloud management platform/hybrid cloud pipe, a bastion machine, a power environment system, a unified safety management system, a unified message platform, a mail system and a monitoring system. And the information and the configuration information of the managed equipment in each system are automatically extracted through the butt joint with each platform.

Taking a cloud pipe as an example, the method mainly comprises the following steps:

1) through the butt joint of an API/SDK interface and an authentication certificate provided by a cloud management platform and a cloud management, different cloud management platforms can provide a proprietary protocol API, and an integrated intelligent operation and maintenance platform needs to be automatically adapted according to various brands/manufacturers/versions;

2) extracting a resource list managed by the cloud management platform through an API (application programming interface) protocol, wherein the resource list includes but is not limited to a resource pool, a physical machine and a virtual machine;

3) extracting a configuration list of each resource object in the cloud management platform;

4) and storing all the configuration information in the cloud management platform into a unified configuration library.

The second step is that: unified service directory for constructing integrated operation and maintenance

The unified service directory is a daily operation and maintenance service list and a service range provided by an operation and maintenance team/the outside, and common service directories include but are not limited to: the method comprises the following steps of computer fault reporting and maintenance, mailbox application, cloud resource application, server access authority application, network security policy fulfillment, service system access authority fulfillment and data resource access authority fulfillment.

And a unified operation and maintenance portal of the system manages and releases the service directory for the operation and maintenance team. The service supports the following scenarios:

1) applying online, and manually participating in service delivery offline;

2) applying on line, and automatically delivering on line;

in the process of making the service directory, the following specific information of related contents is provided:

1) the service basic information comprises a service name, a service range, service time and a service mode;

2) the service approval process comprises an approval process and an approver;

3) the delivery mode, online/offline delivery, delivery deadline and responsible person;

4) after the service directory is formulated, the authority range of each service is provided, the target user publishes related information, and the user with the authority can check the service in the authority range after logging in the service portal.

And (3) an operation stage: service application and delivery closed loop.

The third step: the business department submits the construction and operation of the service request service catalog through the self-service portal, wherein the construction and operation comprise the service catalog management, the workflow engine, the automatic operation and maintenance and the support of a self-service portal module.

Fig. 6 shows the main logic of each part of the integrated intelligent operation and maintenance platform:

1) and the service directory management is used for compiling and releasing directories of all service ranges which can be provided by operation and maintenance teams and operation teams, wherein the service ranges comprise service ranges, service contents, service objects and service providers. And formulating the finished service directory, and publishing the service directory to a corresponding service range.

2) A workflow engine: and supporting the whole process of business application, approval, delivery, recovery/evaluation of the service directory.

3) A self-service portal: and supporting all business service requests of business departments, and realizing automatic delivery of business services through an automatic service platform after the work approval of the workflow engine.

The fourth step: service automation delivery

The service automatic delivery needs to depend on the specific definition of the service directory and the corresponding flow definition. The main functional module support in the service delivery process comprises:

1) service directory management: the service of specific application delivery is provided with clear definition, including delivery mode and delivery content, and the delivery information is fed back to the CMDB system, relating to the resource configuration change information, and can be managed in a centralized way through the uniform resource management module.

2) Service delivery:

a) if the service delivery is offline, the related responsible person and the executive person can provide related services, and the service delivery process, the delivered goods and the delivery evaluation are recorded in the platform.

b) The online service is realized, the automatic operation and maintenance is in butt joint linkage with a corresponding system (a cloud management platform/hybrid cloud management, a mailbox, unified identity authentication, a bastion machine and an access control …) platform, and the related services are automatically opened;

3) monitoring and managing:

if the cloud resources are involved, the system is also required to be linked with a monitoring system, so that automatic monitoring and monitoring performance analysis of the resources are realized.

And II, application embodiment. In order to prove the creativity and the technical value of the technical scheme of the invention, the part is the application example of the technical scheme of the claims on specific products or related technologies.

The technical scheme of the invention can be applied to the following application scenes:

1. and applying, opening, using and recycling the cloud resources in the cloud data center environment in a full life cycle process.

2. And (4) carrying out a network security operation and maintenance operation scene under the cloud data center environment. The method comprises operation and maintenance safety bastion machine, operation and maintenance audit and operation and maintenance account password unified management.

3. The whole process of applying, opening, using and recycling the functions/resources/authorities/data of the service application system managed by the integrated intelligent operation and maintenance control system.

4. The whole process of applying, opening, using and recycling the functions/resources/authorities/data of the equipment/resources managed by the integrated intelligent operation and maintenance control system.

5. The whole process of application, opening, use and recovery of functions/resources/authorities/data of the Internet of things facility equipment managed by the integrated intelligent operation and maintenance control system.

And thirdly, evidence of relevant effects of the embodiment. The embodiment of the invention achieves some positive effects in the process of research and development or use, and has great advantages compared with the prior art, and the following contents are described by combining data and diagrams in the test process.

In the test of the integrated intelligent operation and maintenance system provided by the embodiment of the invention, a virtual machine application test, a virtual machine approval process test, an approval operation test and a process approval delivery aging test are carried out. Through the use of the integrated intelligent operation and maintenance system, experiments show that the invention thoroughly changes the efficiency of the traditional IT service operation and maintenance and operation process.

Under the mode that the traditional multi-operation and maintenance professional tools are used in a matched mode, a user applies for cloud resources to open and deliver through a cloud management platform, and then the newly increased and changed operation and maintenance asset data are respectively synchronized into a CMDB asset management platform, an IT network management monitoring system, a safe operation and maintenance auditing bastion machine system, an operation and maintenance account password management system, a network flow safety monitoring system and other special operation and maintenance tool systems through a line down mode, so that the function realization of different IT operation and maintenance operation scenes of the user is realized. Typically, this period takes at least 1 week or more and the accuracy and effectiveness of the synchronized asset data cannot be guaranteed. Meanwhile, in order to enhance the management of the IT flow in the user, the user may need to transfer and approve the part of the IT change event through the ITSM flow management tool. An originally complete operation and maintenance scene is manually split into parts supported by a plurality of different operation and maintenance tools, so that the operation and maintenance cost is greatly increased.

At present, after the full-flow online automatic delivery and the system internal integrated linkage calling based on an operation scene are realized through the integrated intelligent operation and maintenance system, the online application to the opening is carried out, and then the time of a series of flows such as automatic input of assets, supervision and monitoring objects, safe operation and maintenance audit account creation and the like can be completed within 30 minutes, meanwhile, the integrated operation and maintenance platform also integrates the flow approval function into the operation and maintenance scene, the synchronous approval of the opened resources can be completed through further operation, the operation and maintenance data are synchronous under the artificial line, and the operation workload is reduced by more than 80%, so that the integrated efficient operation and maintenance support is realized.

In the description of the present invention, "a plurality" means two or more unless otherwise specified; the terms "upper", "lower", "left", "right", "inner", "outer", "front", "rear", "head", "tail" indicate orientations or positional relationships based on those shown in the drawings, merely for convenience in describing the present invention and to simplify the description, and do not indicate or imply that the device or element referred to must have a particular orientation, be constructed and operated in a particular orientation, and therefore should not be construed as limiting the invention. Furthermore, the terms "first," "second," and "third" are used for descriptive purposes only and are not to be construed as indicating or implying relative importance.

It should be noted that the embodiments of the present invention can be realized by hardware, software, or a combination of software and hardware. The hardware portion may be implemented using dedicated logic; the software portions may be stored in a memory and executed by a suitable instruction execution system, such as a microprocessor or specially designed hardware. Those skilled in the art will appreciate that the apparatus and methods described above may be implemented using computer executable instructions and/or embodied in processor control code, such code being provided on a carrier medium such as a disk, CD-or DVD-ROM, programmable memory such as read only memory (firmware), or a data carrier such as an optical or electronic signal carrier, for example. The apparatus and its modules of the present invention may be implemented by hardware circuits such as very large scale integrated circuits or gate arrays, semiconductors such as logic chips, transistors, or programmable hardware devices such as field programmable gate arrays, programmable logic devices, software executed by various types of processors, or a combination of the above hardware circuits and software, e.g., firmware.

The above description is only for the specific embodiments of the present invention, but the scope of the present invention is not limited thereto, and any modification, equivalent replacement and improvement made by those skilled in the art within the technical scope of the present invention disclosed in the present invention should be covered within the scope of the present invention.

Claims

1. An integrated intelligent operation and maintenance control method is characterized by comprising the following steps:

s4: realizing resource change management of a service directory and change management of historical IT resources in a non-self-service portal service directory through a CMDB;

2. The integrated intelligent operation and maintenance control method according to claim 1, wherein the service directory distribution information in S1 includes service scope, service content, service object, service deadline, and service provider.

3. The integrated intelligent operation and maintenance control method according to claim 1, wherein the service directory contents include but are not limited to: the method comprises the following steps of IT resource application, server access authority application, network security policy fulfillment, service system access authority fulfillment, data resource access authority fulfillment, terminal fault reporting maintenance and mailbox application.

4. The integrated intelligent operation and maintenance control method according to claim 1, wherein the service directory supports the following typical cases:

1) after approval, manually participating in service delivery;

2) and after the approval is passed, automatic delivery is carried out.

5. The integrated intelligent operation and maintenance control method according to claim 1, wherein the CMDB uniform resource allocation library in S3 includes operation and maintenance objects, operation and maintenance relationships, operation and maintenance activities, and structured data and unstructured data associated with each operation and maintenance tool.

6. The integrated intelligent operation and maintenance control method according to claim 1, wherein in S4, the management of resource change of the service directory is implemented through the CMDB, and when the service content in the service directory involves resource change, including resource addition, resource change, and offline/recovery, the resource change needs to be linked with the CMDB before, during, and after the resource change, so as to continuously maintain the accuracy and real-time performance of the data in the unified resource library, specifically comprising the following steps:

7. The integrated intelligent operation and maintenance control method according to claim 1, wherein the change management of the historical IT resources in the non-self-service portal service directory in S4 specifically comprises the following steps:

step two: the equipment resources to be managed are butted with other operation and maintenance tools in an API (application programming interface) interface mode;

8. The integrated intelligent operation and maintenance control method according to claim 7, wherein the docking range in the second step includes but is not limited to: the system comprises a unified identity authentication system, a cloud management platform/hybrid cloud pipe system, a bastion machine, a power environment system, a unified safety management system, a unified message platform, a mail system, an IT monitoring system and a service system.

9. An integrated intelligent operation and maintenance control system for implementing the integrated intelligent operation and maintenance control method according to any one of claims 1 to 8, wherein the integrated intelligent operation and maintenance control system comprises:

10. The integrated intelligent operation and maintenance control system of claim 9, wherein the integrated intelligent operation and maintenance management portal comprises:

11. The integrated intelligent operation and maintenance control system according to claim 10, wherein the IP address management module in the hybrid cloud management is configured to manage the IP address of the network access connection, and is technically supported by linking with the CMDB and the automation operation and maintenance module.

12. The integrated intelligent operation and maintenance control system according to claim 11, wherein the CMDB provides the most accurate and complete IP overall capacity, use condition, use user, and expiration date information of each subnet, and periodically discovers active new IP addresses and changes of each subnet through the auto discovery engine, and records them in real time.

13. The integrated intelligent operation and maintenance control system according to claim 11, wherein the automation operation and maintenance module is linked with each network device to find the network access connection, the uplink device and the port of each IP in real time, change information and active information, and link the relevant information with the CMDB to maintain real-time data.

14. An integrated intelligent operation and maintenance platform for implementing the integrated intelligent operation and maintenance control system of any one of claims 9 to 13, wherein the integrated intelligent operation and maintenance platform comprises:

the CMDB unified resource management is used for carrying out centralized unified storage and management on the data generated by operation and maintenance in the integrated intelligent operation and maintenance platform and the data required by operation and maintenance of the operation and maintenance platform;

15. The integrated intelligent operation and maintenance platform of claim 14, wherein the service portal comprises:

service request management for managing the submitted service request;

16. The integrated intelligent operation and maintenance platform of claim 14, wherein the centralized monitoring comprises:

17. The integrated intelligent operation and maintenance platform of claim 14, wherein the automated management comprises:

18. The integrated intelligent operation and maintenance platform of claim 14, wherein the CMDB unified resource management comprises:

19. The integrated intelligent operation and maintenance platform of claim 14, wherein the base operation framework comprises:

unified scheduling, namely uniformly scheduling script statements in an automation process in the integrated intelligent operation and maintenance platform;

20. A computer-readable storage medium comprising instructions which, when executed on a computer, cause the computer to perform the integrated intelligent operation and maintenance control method of any one of claims 1 to 8.