CN114553669A - Method, device and equipment for identifying change event - Google Patents

Method, device and equipment for identifying change event Download PDF

Info

Publication number
CN114553669A
CN114553669A CN202210147521.4A CN202210147521A CN114553669A CN 114553669 A CN114553669 A CN 114553669A CN 202210147521 A CN202210147521 A CN 202210147521A CN 114553669 A CN114553669 A CN 114553669A
Authority
CN
China
Prior art keywords
change event
alarm information
matching
information
service
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202210147521.4A
Other languages
Chinese (zh)
Inventor
张乐乐
顾延宇
杜永刚
任飞
李晓虹
辅佳良
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Alipay Hangzhou Information Technology Co Ltd
Original Assignee
Alipay Hangzhou Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alipay Hangzhou Information Technology Co Ltd filed Critical Alipay Hangzhou Information Technology Co Ltd
Priority to CN202210147521.4A priority Critical patent/CN114553669A/en
Publication of CN114553669A publication Critical patent/CN114553669A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0631Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08Configuration management of networks or network elements
    • H04L41/0803Configuration setting
    • H04L41/0813Configuration setting characterised by the conditions triggering a change of settings

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Alarm Systems (AREA)

Abstract

The embodiment of the specification discloses a method, a device and equipment for identifying a change event. Obtaining a business change event, wherein the business change event is generated based on configuration change of a git warehouse or a database by an organization; traversing and matching the service change event with a set of pre-acquired alarm information; when the service change event is matched with any one of the alarm information in the set, the matched alarm information is pushed to an initiating mechanism of the service change event; otherwise, stopping pushing the alarm information. Therefore, when the gateway is adapted to a plurality of different personalized mechanisms, the root of change is better positioned, a large amount of abnormal service monitoring noise caused by mechanism capability difference of the gateway is reduced, and alarm is given after matching is successful.

Description

Method, device and equipment for identifying change event
Technical Field
The present disclosure relates to the field of internet technologies, and in particular, to a method, an apparatus, and a device for identifying a change event.
Background
With the development of the mobile internet, some industrial gateway systems are generally required to adapt to the differentiated message and protocol standards of multiple organizations. Under the situation, on one hand, the gateway system needs to use the script and the database to solve the differentiation standards of the external mechanisms in various industries (such as message rendering, message processing, message signing, message communication, message signing checking and the like, at this time, the corresponding changes of the script and the database are changed and executed by various upper-layer application systems, and the gateway system cannot sense the changes, and on the other hand, the gateway is used as a centralized control and routing distribution platform, and the performance differentiation of all the connected external mechanisms is very large, so that the alarm noise of each service in the monitoring of the gateway system is very large, and the abnormal script or database change is difficult to find in time.
Based on this, a more accurate identification scheme of change events is needed.
Disclosure of Invention
The embodiment of the specification provides a method, a device, equipment and a storage medium for identifying a change event, which are used for solving the following technical problems: there is a need for a more accurate identification scheme for change events.
To solve the above technical problem, one or more embodiments of the present specification are implemented as follows:
in a first aspect, an embodiment of the present specification provides a method for identifying a change event, which is applied in a gateway system adapted to multiple organizations, and the method includes: acquiring a business change event, wherein the business change event is generated based on the configuration change of a git warehouse or a database by an organization; traversing and matching the service change event with a set of pre-acquired alarm information; when the service change event is matched with any one of the alarm information in the set, the matched alarm information is pushed to an initiating mechanism of the service change event; otherwise, stopping pushing the alarm information.
In a second aspect, an embodiment of the present specification provides an apparatus for identifying a change event, which is applied in a gateway system adapted to multiple organizations, and the apparatus includes: the acquisition module is used for acquiring a business change event, wherein the business change event is generated based on the configuration change of a git warehouse or a database by an organization; the matching module is used for traversing and matching the service change event with a set of pre-acquired alarm information; the pushing module is used for pushing the matched alarm information to an initiating mechanism of the business change event when the business change event is matched with any alarm information in the set; otherwise, stopping pushing the alarm information.
In a third aspect, embodiments of the present specification provide an electronic device, including:
at least one processor; and the number of the first and second groups,
a memory communicatively coupled to the at least one processor; wherein,
the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the method of the first aspect.
In a fourth aspect, embodiments of the present specification provide a non-volatile computer storage medium having stored thereon computer-executable instructions that, when read by a computer, cause the one or more processors to perform the method of the first aspect.
At least one technical scheme adopted by one or more embodiments of the specification can achieve the following beneficial effects: obtaining a business change event, wherein the business change event is generated based on configuration change of a git warehouse or a database by an organization; traversing and matching the service change event with a set of pre-acquired alarm information; when the service change event is matched with any one of the alarm information in the set, the matched alarm information is pushed to an initiating mechanism of the service change event; otherwise, stopping pushing the alarm information. Therefore, when the gateway is adapted to a plurality of different personalized mechanisms, the root of change is better positioned, a large amount of abnormal service monitoring noise caused by mechanism capability difference of the gateway is reduced, alarm is given after the matching is successful, and the accuracy of alarm of different mechanism sides is improved.
Drawings
In order to more clearly illustrate the embodiments of the present specification or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the description below are only some embodiments described in the present specification, and for those skilled in the art, other drawings may be obtained according to these drawings without creative efforts.
Fig. 1 is a flowchart illustrating a method for identifying a change event according to an embodiment of the present disclosure;
FIG. 2 is a logical diagram of generating business change events based on a git repository as provided by embodiments of the present description;
FIG. 3 is a logic diagram of a database-based generation of a business change event according to an embodiment of the present disclosure;
fig. 4 is a schematic structural diagram of a recognition device based on a change event according to an embodiment of the present disclosure;
fig. 5 is a schematic structural diagram of an electronic device provided in an embodiment of the present specification.
Detailed Description
The embodiment of the specification provides a method, a device, equipment and a storage medium for identifying a change event.
In order to make those skilled in the art better understand the technical solutions in the present specification, the technical solutions in the embodiments of the present specification will be clearly and completely described below with reference to the drawings in the embodiments of the present specification, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be obtained by a person skilled in the art without making any inventive step based on the embodiments of the present disclosure, shall fall within the scope of protection of the present application.
In the payment platform, a plurality of different types of institutions may be docked at the same time, for example, one payment platform may be docked with a telephone business hall, a water supply company or an electric power institution, and various service scenes such as government affairs, medical insurance, health codes, buses, subways and the like, so that a large number of users can pay for various different types of institutions through the payment platform. That is, the gateway of the platform needs to perform centralized management when interfacing with various organizations. Meanwhile, the performance of different mechanisms is very different, and generally each type of mechanism can individually configure its own service logic, so that when a gateway of a platform is connected to various mechanisms, configuration change in the mechanisms often causes system alarm, which causes very large noise in alarm sound and needs to reduce noise, thereby identifying abnormal change. Based on this, the embodiments of the present specification provide a scheme for identifying a change event, so as to implement more accurate identification of the change event.
As shown in fig. 1, fig. 1 is a schematic flowchart of a method for identifying a change event according to an embodiment of the present disclosure, and is applied in a gateway system adapted to multiple organizations, where the method includes:
s101: based on the static code of the applet, a business change event is obtained, wherein the business change event is generated based on configuration change of the git repository or the database by the organization.
In the gateway system, a groovy script, a velocity template and a database can be generally used for adapting to a differentiated standard interface (such as special service logic, communication and signature verification) of an external mechanism for the platform upstream service (such as life payment and health code scanning) to complete message exchange with the external mechanism. Namely, the gateway system needs to serve multiple industries as a base platform.
As for the external organization, when it is connected to the platform, the external organization also needs to perform development and maintenance on the upper application system locally, and the development and maintenance process can be performed by using a git warehouse or a database. The gateway configuration personnel may make various configuration changes (e.g., version upgrades, underlying code replacements, etc.) to the git repository or database to change its business logic based on the business changes of the external organization.
For example, the gateway creates a git for the personalized configuration of the adaptation mechanism, and the file directory that needs to be version-controlled is called a git warehouse, the warehouse can distinguish the configuration of different mechanisms according to the directory, all files in the directory realize version management through the git, and the git can track and record all updates occurring in the directory. External organizations and gateway configurators in different industries can use various commands to configure or submit files in the git repository, and so on.
Representing the current directory, or pushing the local version library to the remote server using a git push origin master, which is the remote host, the master representation is the master branch on the remote server, while the branch name is modifiable.
In practical application, when a gateway configuration person performs configuration change, the script file required to be modified by the change can be merged into the corresponding branch of the git warehouse. In this case, a webhook or other tool may be used to detect whether the script in the git is changed in real time, generate corresponding original change event information, and convert the original change event information into a service change event based on the original change event information.
For another example, for a database, an external organization may use various data tables to perform service development or maintenance, database configuration personnel in different industries update the gateway database configuration table that needs to be modified by the change, and the development and maintenance of the service may be completed by performing configuration change on the database. At this time, a real-time Data Replication Center (DRC) system may be used to monitor the change of the tables in the database in real time, and process and acquire the service change event including the path information from the original database table in more time.
S103, traversing and matching the service change event with a set of pre-acquired alarm information.
The pre-acquired alarm information may be generated by the checking system based on a pre-configured defense checking rule, and the alarm information does not depend on the service change event completely. That is, if the service change event causes abnormal service processing, corresponding alarm information may be generated. However, even if the alarm information occurs, the alarm information is not necessarily caused by the service change event.
For example, if the external organization is a mobile phone business hall in xx province, the payment platform may estimate the interaction traffic (including the number of people, the payment amount, etc.) in each time period, and if the real-time interaction traffic cannot satisfy the preset interaction traffic (for example, the success rate of payment to the mobile phone business hall in xx province is lower than a preset threshold value in the time period from 11 o 'clock to 12 o' clock), an alarm message may be sent.
It will be readily appreciated that in practice alarm information may be generated for a number of reasons, some of which are not necessarily completely accurate, nor is the alarm information generated completely due to a traffic change event, i.e. in which there is alarm noise.
The set of alarm information can be classified correspondingly based on a plurality of modes such as the generation mechanism, the industry type, the generation time period and the like of the alarm information. For example, the set of alarm information may be a set of alarm information of xx provincial business halls, a set of alarm information of xx industry, a set of alarm information between 11 points and 12 points, and the like.
As a server, it is obvious that an industry, an organization, and the like corresponding to a service change event can be obtained in advance. For example, when the webhook or DRC system listens for the original change event, the push message may be analyzed by the configuration to obtain a corresponding tag to indicate the industry or organization of the event, and so on. Therefore, at the server, the acquired service change event can be subjected to traversal matching with the set of the pre-acquired alarm information, and the matching mode can be subjected to traversal matching based on the type, mechanism, generation time period and the like of the set of the alarm information. The specific matching rule can be set automatically based on the industry, the type of the organization and the like where the external organization is located. For example, the matching rules may be organization names being the same, industry being the same, time period being the same, and so on.
S105, when the business change event is matched with any alarm information in the set, pushing the matched alarm information to an initiating mechanism of the business change event; otherwise, stopping pushing the alarm information.
When the service change event is matched with any one of the alarm information in the set, it is indicated that a certain correlation may exist between the service change event and the matched alarm information, and at this time, the alarm information can be considered to belong to effective alarm information, so that the matched alarm information is pushed to an initiator of the service change event; if not, the alarm information is possibly the noise, and the pushing of the alarm information is stopped.
For example, the mobile business office in xx province performs online maintenance and system update, so that the server side acquires a business change event and knows that the business change event is "generated at 12 o' clock 1/2022". Meanwhile, a set of related alarm information of mobile payment of a mobile business hall of xx province is obtained through monitoring, wherein the set comprises a plurality of pieces of alarm information. In the conventional manner, a plurality of pieces of alarm information may be pushed to the initiator of the change event. In the method of the present application, each message in the set of alarm information is temporally matched.
For example, the preset rule may be that the observation is made within 3 hours after the occurrence of the service change event, and the recharging success rate should always fluctuate within a normal range. At 12, alarm information generated by a small amount of users (for example, the recharging success rate is slightly low) may be regarded as mismatching, and the alarm information is stopped to be pushed; while the alarm information (for example, the success rate of recharging sharply decreases) generated by recharging a large number of users at the point 2 and the point 30 may be considered as a match, and the similar alarm information "it is detected that the success rate of recharging at the point 2 and the point 30 is low, please detect whether it is caused by the service change at the point 12" is pushed to the initiator of the change event, thereby avoiding the alarm noise on the service.
Obtaining a business change event, wherein the business change event is generated based on configuration change of a git warehouse or a database by an organization; traversing and matching the service change event with a set of pre-acquired alarm information; when the service change event is matched with any one of the alarm information in the set, the matched alarm information is pushed to an initiating mechanism of the service change event; otherwise, stopping pushing the alarm information. Therefore, when the gateway is adapted to a plurality of different personalized mechanisms, the root of change is better positioned, a large amount of abnormal service monitoring noise caused by mechanism capability difference of the gateway is reduced, alarm is given after the matching is successful, and the accuracy of alarm of different mechanism sides is improved.
In one embodiment, when the organization side employs configuration based on scripts in the git repository to maintain and operate business logic, the business change event can be generated based on the following ways: acquiring original change event information pushed by a git warehouse; and determining whether the current change event is an effective change event according to the original change event information. If yes, inquiring an absolute path where a configuration script corresponding to the effective change event is located; and generating the service change event according to the absolute path and gateway configuration information preset in the gateway system.
For example, a groovy or velocity may be used to make configuration changes to the script in the git repository, thereby forming an original change event. The Git warehouse can monitor and obtain change detail information generated when the scripts in the Git warehouse are configured by adopting webhook, and then push the original change event and the change detail information to a preset address (namely, a server), so that the server can filter the original change event, thereby obtaining an effective change event (if the original change event is an ineffective event, a subsequent process is not triggered, namely, the warning information cannot be triggered by a default ineffective event), further inquiring an absolute path where the configuration script corresponding to the effective change event is located, and generating the service change event according to the absolute path and gateway configuration information preset in the gateway system. Fig. 2 is a logic diagram of generating business change events based on a git repository according to an embodiment of the present disclosure, as shown in fig. 2.
Further, when determining whether the current modification event is an effective modification event according to the original modification event information, the type of the current modification event may be determined according to the original modification event information, and the determination that the type is an online modification event may be determined as an effective modification event. For example, the gateway configurator may adopt a push instruction when configuring the script, and the change of the push instruction to the git repository may not be in on-line immediate effect, so the type of the change event may be invalid; for another example, when configuring the script, the organization may merge the script files to be modified and merge the merged script files into the corresponding branches in the git repository, so that the change may be an online change and will take effect immediately, and thus the type of the change event may be a valid change event. By the method, invalid events in service change can be filtered in advance in the gateway, so that the alarm checking efficiency is improved, and a basis is provided for subsequent accurate alarm.
In one embodiment, when the mechanism side employs configuration based on a database, the business change event may be generated based on the following manner: acquiring original database change information generated by a database monitoring system; and generating the service change event according to the original change information of the database and the preset gateway configuration information in the gateway system.
For example, a gateway configuration person performs database configuration change on related information in a database, and simultaneously, a DRC system synchronously monitors and acquires original change information of the database, so as to deliver the original change information of the database to a gateway, and the gateway calls local gateway configuration information and combines the original change information of the database to generate the service change event. Fig. 3 is a logic diagram of generating a business change event based on a database according to an embodiment of the present disclosure, as shown in fig. 3.
In an embodiment, when traversing and matching the service change event with a set of pre-acquired alarm information, because of a large difference in capabilities of different mechanisms connected to a gateway, scripts of many mechanisms do not necessarily have traffic immediately after being changed online or do not take effect immediately because of a local cache of the gateway, and it is necessary to lengthen a detection time after being changed (for example, one hour or two hours after being changed) as much as possible to prevent missing abnormal changes. At this time, a plurality of stepped matching windows may be adopted for matching, and traversal matching is performed on the set of the service change event and the pre-acquired alarm information, wherein the time interval between the matching window and the service change event is positively correlated with the matching period in the matching window.
For example, the total observation time is one hour after the change, every 10 minutes is regarded as a matching window, the first matching window corresponding to the previous 10 minutes is matched every 1 minute, the second matching window is matched every 2 minutes, and so on. Because the probability of the change being abnormal is inversely proportional to the increase of the online running time, the abnormal change obtained by detection cannot be reduced through the mode on one hand, and the detection pressure of the system can be reduced on the other hand.
In an embodiment, when the service change event is subjected to traversal matching with a set of pre-acquired alarm information, the mechanism type of the service change event can be further determined; acquiring a set of alarm information matched with the organization type; and traversing and matching the service change event with a set of alarm information matched with the mechanism type.
Specifically, because the performance differences of different organization types are very large, alarm rules which accord with the distribution of online business data can be formulated according to the characteristics of different industry organizations, so that an alarm information set directly matched with the organization types is generated. For example, the institution type may be an institution related to mobile phone payment; it is also possible to have associated mechanisms for paying for water and electricity, etc., and it is obvious that there are completely different flow distributions under different mechanisms, even if all are payment related. For example, the basic success rate of the life payment institution is 100%, and the mobile phone recharge rate is 80%.
Based on the method, the platform side can also shunt the alarm information in advance, so that a set of the alarm information matched with the mechanism type is obtained, the server side can route to the corresponding set of the alarm information according to the mechanism type of the service change event and perform traversal matching, and therefore the alarm rule conforming to the online service data distribution is formulated according to the characteristics of different mechanism types, a large amount of invalid alarm noise is reduced, and the alarm accuracy is improved.
In an embodiment, when the service change event is matched with any one of the alarm information in the set, matching may be performed based on a preset time point rule. Determining the occurrence time point of the configuration change of the git warehouse or the database corresponding to the business change event; and when the generation time of any one alarm information in the set and the occurrence time point meet preset conditions, confirming that the service change event is matched with the alarm information. The preset rules here may be such as: the generation time of the warning information is within a specified time range after the occurrence time point of the configuration change (for example, the generation time of the warning information is within 0 minute to 1 hour after the occurrence time point of the configuration change).
In practical application, because the abnormal change of the gateway configuration personnel often does not directly cause service breakdown or abnormality, but generally has a delay of a period of time, based on the method, the matching of the service change event and the alarm information can meet the actual needs of the organization side in the period of time, and more accurate alarm is realized.
Based on the same idea, one or more embodiments of the present specification further provide apparatuses and devices corresponding to the above-described method, as shown in fig. 4 and 5.
In a second aspect, as shown in fig. 4, fig. 4 is a schematic structural diagram of a risk detection apparatus based on applet dynamic and static analysis provided in an embodiment of this specification, and is applied to a gateway system adapted to multiple organizations, where the apparatus includes:
the obtaining module 401 obtains a service change event, where the service change event is generated based on configuration change of a git warehouse or a database by an organization;
the matching module 403 is used for performing traversal matching on the service change event and a set of pre-acquired alarm information;
a pushing module 405, configured to push the matched alarm information to an initiating mechanism of the service change event when the service change event matches any alarm information in the set; otherwise, stopping pushing the alarm information.
Optionally, the apparatus further includes a first generating module 407, which acquires original change event information pushed by the git repository; determining whether the current change event is an effective change event or not according to the original change event information; if yes, inquiring an absolute path where a configuration script corresponding to the effective change event is located; and generating the service change event according to the absolute path and gateway configuration information preset in the gateway system.
Optionally, the first generating module 407 determines the type of the current change event according to the original change event information, and determines that the type is an online change event as an effective change event.
Optionally, the apparatus further includes a second generating module 409, configured to obtain original database change information generated by the database monitoring system; and generating the service change event according to the original change information of the database and the preset gateway configuration information in the gateway system.
Optionally, the matching module 403 performs traversal matching on the set of the service change event and the pre-acquired warning information by using a plurality of matching windows, where a time interval between a matching window and the service change event is positively correlated with a matching period in the matching window.
Optionally, the matching module 403 determines an organization type of the service change event; acquiring a set of alarm information matched with the organization type; and traversing and matching the service change event with a set of alarm information matched with the mechanism type.
Optionally, the matching module 403 determines an occurrence time point of configuration change of the git warehouse or the database corresponding to the service change event; and when the generation time of any one alarm information in the set and the occurrence time point meet preset conditions, confirming that the service change event is matched with the alarm information.
In a third aspect, as shown in fig. 5, fig. 5 is a schematic structural diagram of an electronic device provided in an embodiment of this specification, where the electronic device includes:
at least one processor; and (c) a second step of,
a memory communicatively coupled to the at least one processor; wherein,
the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the method of the first aspect.
In a fourth aspect, based on the same idea, one or more embodiments of the present specification further provide a non-volatile computer storage medium corresponding to the method described above, and storing computer-executable instructions, which, when read by a computer, cause one or more processors to execute the method according to the first aspect.
In the 90's of the 20 th century, improvements to a technology could clearly distinguish between improvements in hardware (e.g., improvements to circuit structures such as diodes, transistors, switches, etc.) and improvements in software (improvements to process flow). However, as technology advances, many of today's process flow improvements have been seen as direct improvements in hardware circuit architecture. Designers almost always obtain the corresponding hardware circuit structure by programming an improved method flow into the hardware circuit. Thus, it cannot be said that an improvement in the process flow cannot be realized by hardware physical modules. For example, a Programmable Logic Device (PLD), such as a Field Programmable Gate Array (FPGA), is an integrated circuit whose Logic functions are determined by programming the Device by a user. A digital system is "integrated" on a PLD by the designer's own programming without requiring the chip manufacturer to design and fabricate application-specific integrated circuit chips. Furthermore, nowadays, instead of manually making an Integrated Circuit chip, such Programming is often implemented by "logic compiler" software, which is similar to a software compiler used in program development and writing, but the original code before compiling is also written by a specific Programming Language, which is called Hardware Description Language (HDL), and HDL is not only one but many, such as abel (advanced Boolean Expression Language), ahdl (alternate Hardware Description Language), traffic, pl (core universal Programming Language), HDCal (jhdware Description Language), lang, Lola, HDL, laspam, hardward Description Language (vhr Description Language), vhal (Hardware Description Language), and vhigh-Language, which are currently used in most common. It will also be apparent to those skilled in the art that hardware circuitry that implements the logical method flows can be readily obtained by merely slightly programming the method flows into an integrated circuit using the hardware description languages described above.
The controller may be implemented in any suitable manner, for example, the controller may take the form of, for example, a microprocessor or processor and a computer-readable medium storing computer-readable program code (e.g., software or firmware) executable by the (micro) processor, logic gates, switches, an Application Specific Integrated Circuit (ASIC), a programmable logic controller, and an embedded microcontroller, examples of which include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicone Labs C8051F320, the memory controller may also be implemented as part of the control logic for the memory. Those skilled in the art will also appreciate that, in addition to implementing the controller as pure computer readable program code, the same functionality can be implemented by logically programming method steps such that the controller is in the form of logic gates, switches, application specific integrated circuits, programmable logic controllers, embedded microcontrollers and the like. Such a controller may thus be considered a hardware component, and the means included therein for performing the various functions may also be considered as a structure within the hardware component. Or even means for performing the functions may be regarded as being both a software module for performing the method and a structure within a hardware component.
The systems, devices, modules or units illustrated in the above embodiments may be implemented by a computer chip or an entity, or by a product with certain functions. One typical implementation device is a computer. In particular, the computer may be, for example, a personal computer, a laptop computer, a cellular telephone, a camera phone, a smartphone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.
For convenience of description, the above devices are described as being divided into various units by function, respectively. Of course, the functions of the various elements may be implemented in the same one or more software and/or hardware implementations of the present description.
As will be appreciated by one skilled in the art, the present specification embodiments may be provided as a method, system, or computer program product. Accordingly, embodiments of the present description may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, embodiments of the present description may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and so forth) having computer-usable program code embodied therein.
The description has been presented with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the description. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.
The memory may include forms of volatile memory in a computer readable medium, Random Access Memory (RAM) and/or non-volatile memory, such as Read Only Memory (ROM) or flash memory (flash RAM). Memory is an example of a computer-readable medium.
Computer-readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), Digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, a computer readable medium does not include a transitory computer readable medium such as a modulated data signal and a carrier wave.
It should also be noted that the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.
This description may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The specification may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including memory storage devices.
The embodiments in the present specification are described in a progressive manner, and the same and similar parts among the embodiments are referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, for the embodiments of the apparatus, the device, and the nonvolatile computer storage medium, since they are substantially similar to the embodiments of the method, the description is simple, and for the relevant points, reference may be made to the partial description of the embodiments of the method.
The foregoing description has been directed to specific embodiments of this disclosure. Other embodiments are within the scope of the following claims. In some cases, the actions or steps recited in the claims may be performed in a different order than in the embodiments and still achieve desirable results. In addition, the processes depicted in the accompanying figures do not necessarily require the particular order shown, or sequential order, to achieve desirable results. In some embodiments, multitasking and parallel processing may also be possible or may be advantageous.
The above description is merely one or more embodiments of the present disclosure and is not intended to limit the present disclosure. Various modifications and alterations to one or more embodiments of the present description will be apparent to those skilled in the art. Any modification, equivalent replacement, improvement or the like made within the spirit and principle of one or more embodiments of the present specification should be included in the scope of the claims of the present specification.

Claims (15)

1. A change event identification method is applied to a gateway system adapting multiple mechanisms, and comprises the following steps:
acquiring a business change event, wherein the business change event is generated based on the configuration change of a git warehouse or a database by an organization;
traversing and matching the service change event with a set of pre-acquired alarm information;
when the service change event is matched with any one of the alarm information in the set, the matched alarm information is pushed to an initiating mechanism of the service change event; otherwise, stopping pushing the alarm information.
2. The method of claim 1, wherein the business change event is generated based on an organization making a change to a git repository configuration, comprising:
acquiring original change event information pushed by a git warehouse;
determining whether the current change event is an effective change event or not according to the original change event information;
if yes, inquiring an absolute path where a configuration script corresponding to the effective change event is located;
and generating the service change event according to the absolute path and gateway configuration information preset in the gateway system.
3. The method of claim 2, wherein determining whether the present change event is a valid change event according to the original change event information comprises:
and determining the type of the current change event according to the original change event information, and determining that the type is online change as an effective change event.
4. The method of claim 1, wherein the business change event is generated based on a configuration change to a database by an organization, comprising:
acquiring original database change information generated by a database monitoring system;
and generating the service change event according to the original change information of the database and the preset gateway configuration information in the gateway system.
5. The method of claim 1, wherein the step of performing traversal matching on the service change event and a set of pre-acquired alarm information comprises:
and traversing and matching the service change event and a set of pre-acquired alarm information by adopting a plurality of matching windows, wherein the time interval between the matching window and the service change event is positively correlated with the matching period in the matching window.
6. The method of claim 1, wherein the step of performing traversal matching on the service change event and a set of pre-acquired alarm information comprises:
determining the mechanism type of the business change event;
acquiring a set of alarm information matched with the organization type;
and traversing and matching the service change event with a set of alarm information matched with the mechanism type.
7. The method of claim 1, wherein the service change event is matched with any one of the alarm information in the set, comprising:
determining the occurrence time point of the configuration change of a git warehouse or a database corresponding to the business change event;
and when the generation time of any one alarm information in the set and the occurrence time point meet preset conditions, confirming that the service change event is matched with the alarm information.
8. An apparatus for identifying change events, applied in a gateway system adapted to multiple organizations, the apparatus comprising:
the acquisition module is used for acquiring a business change event, wherein the business change event is generated based on the configuration change of a git warehouse or a database by an organization;
the matching module is used for traversing and matching the service change event with a set of pre-acquired alarm information;
the pushing module is used for pushing the matched alarm information to an initiating mechanism of the business change event when the business change event is matched with any alarm information in the set; otherwise, stopping pushing the alarm information.
9. The apparatus of claim 8, wherein the apparatus further comprises a first generation module for obtaining original change event information pushed by the git repository; determining whether the current change event is an effective change event according to the original change event information; if yes, inquiring an absolute path where a configuration script corresponding to the effective change event is located; and generating the service change event according to the absolute path and gateway configuration information preset in the gateway system.
10. The apparatus of claim 9, wherein the first generating module determines a type of the present change event according to the original change event information, and determines that the type is an online change as a valid change event.
11. The device of claim 8, wherein the device further comprises a second generation module for acquiring original change information of the database generated by the database monitoring system; and generating the service change event according to the original change information of the database and the preset gateway configuration information in the gateway system.
12. The apparatus of claim 8, wherein the matching module performs traversal matching on the service change event and a set of pre-acquired alarm information by using a plurality of matching windows, and a time interval between a matching window and the service change event is positively correlated to a matching period in the matching window.
13. The apparatus of claim 8, wherein the matching module determines a type of organization of the business change event; acquiring a set of alarm information matched with the organization type; and traversing and matching the service change event with a set of alarm information matched with the mechanism type.
14. The apparatus of claim 8, wherein the matching module determines an occurrence time point of a configuration change of a git repository or database corresponding to the business change event; and when the generation time of any one alarm information in the set and the occurrence time point meet preset conditions, confirming that the service change event is matched with the alarm information.
15. An electronic device, comprising:
at least one processor; and the number of the first and second groups,
a memory communicatively coupled to the at least one processor; wherein,
the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the method of any one of claims 1 to 7.
CN202210147521.4A 2022-02-17 2022-02-17 Method, device and equipment for identifying change event Pending CN114553669A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202210147521.4A CN114553669A (en) 2022-02-17 2022-02-17 Method, device and equipment for identifying change event

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202210147521.4A CN114553669A (en) 2022-02-17 2022-02-17 Method, device and equipment for identifying change event

Publications (1)

Publication Number Publication Date
CN114553669A true CN114553669A (en) 2022-05-27

Family

ID=81674813

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202210147521.4A Pending CN114553669A (en) 2022-02-17 2022-02-17 Method, device and equipment for identifying change event

Country Status (1)

Country Link
CN (1) CN114553669A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116841654A (en) * 2023-06-16 2023-10-03 北银消费金融有限公司 Service system access method and device and computer equipment

Citations (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2013080387A (en) * 2011-10-04 2013-05-02 Canon Inc Information processing apparatus, information processing method, and program
US20140025234A1 (en) * 2012-07-17 2014-01-23 Elwha LLC, a limited liability company of the State of Delaware Unmanned device utilization methods and systems
CN105915381A (en) * 2016-04-21 2016-08-31 贵州电网有限责任公司信息中心 System for realizing monitoring system business logic online modification
CN106411612A (en) * 2016-11-10 2017-02-15 无线生活(杭州)信息科技有限公司 Distributed system alarm analysis method and device
CN107908530A (en) * 2017-11-27 2018-04-13 新华三云计算技术有限公司 A kind of alert processing method and device
KR20180085531A (en) * 2017-01-19 2018-07-27 주식회사 만도 A camera system for ADAS and driving Assistance System by using the same
CN109639504A (en) * 2019-01-04 2019-04-16 平安科技(深圳)有限公司 A kind of alarm information processing method and device based on cloud platform
CN110245056A (en) * 2019-06-10 2019-09-17 中国工商银行股份有限公司 O&M alarm information processing method and device
CN110784338A (en) * 2019-09-29 2020-02-11 许昌许继软件技术有限公司 Intelligent alarm processing method and distribution network master station system
US20210232332A1 (en) * 2020-01-24 2021-07-29 EMC IP Holding Company LLC Dynamic storage device system configuration adjustment
CN113987492A (en) * 2021-10-29 2022-01-28 绿盟科技集团股份有限公司 Method and device for determining alarm event

Patent Citations (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2013080387A (en) * 2011-10-04 2013-05-02 Canon Inc Information processing apparatus, information processing method, and program
US20140025234A1 (en) * 2012-07-17 2014-01-23 Elwha LLC, a limited liability company of the State of Delaware Unmanned device utilization methods and systems
CN105915381A (en) * 2016-04-21 2016-08-31 贵州电网有限责任公司信息中心 System for realizing monitoring system business logic online modification
CN106411612A (en) * 2016-11-10 2017-02-15 无线生活(杭州)信息科技有限公司 Distributed system alarm analysis method and device
KR20180085531A (en) * 2017-01-19 2018-07-27 주식회사 만도 A camera system for ADAS and driving Assistance System by using the same
CN107908530A (en) * 2017-11-27 2018-04-13 新华三云计算技术有限公司 A kind of alert processing method and device
CN109639504A (en) * 2019-01-04 2019-04-16 平安科技(深圳)有限公司 A kind of alarm information processing method and device based on cloud platform
CN110245056A (en) * 2019-06-10 2019-09-17 中国工商银行股份有限公司 O&M alarm information processing method and device
CN110784338A (en) * 2019-09-29 2020-02-11 许昌许继软件技术有限公司 Intelligent alarm processing method and distribution network master station system
US20210232332A1 (en) * 2020-01-24 2021-07-29 EMC IP Holding Company LLC Dynamic storage device system configuration adjustment
CN113987492A (en) * 2021-10-29 2022-01-28 绿盟科技集团股份有限公司 Method and device for determining alarm event

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116841654A (en) * 2023-06-16 2023-10-03 北银消费金融有限公司 Service system access method and device and computer equipment
CN116841654B (en) * 2023-06-16 2024-07-16 北银消费金融有限公司 Service system access method and device and computer equipment

Similar Documents

Publication Publication Date Title
CN112199506A (en) Information detection method, device and equipment for application program
CN108320071B (en) Business risk management method, device and equipment
CN110569428A (en) recommendation model construction method, device and equipment
CN111680960A (en) Attendance statistical method and equipment
CN106033574B (en) Method and device for identifying cheating behaviors
CN115203394A (en) Model training method, service execution method and device
CN114553669A (en) Method, device and equipment for identifying change event
CN112966113A (en) Data risk prevention and control method, device and equipment
CN111966715A (en) Service processing method, device, electronic equipment and storage medium
CN116610568A (en) Method, device, equipment and medium for identifying dependency relationship of codes
US11809859B2 (en) Coordinated source code commits utilizing risk and error tolerance
CN108628931B (en) Method, device and equipment for data driving service
CN112258295A (en) Recording processing method, device and equipment
CN110008252B (en) Data checking method and device
CN116822606A (en) Training method, device, equipment and storage medium of anomaly detection model
US12014147B2 (en) Comment management method, server and readable storage medium
CN112860508B (en) Abnormal positioning method, device and equipment based on knowledge graph
US20160063375A1 (en) Determination of substances in an assembly
CN110737524B (en) Task rule management method, device, equipment and medium
CN112286572A (en) Configuration method and device of business process
CN109146395B (en) Data processing method, device and equipment
CN111552703A (en) Data processing method and device
CN112596781A (en) Service execution and service configuration method and device
CN111967769A (en) Risk identification method, device, equipment and medium
CN111026458A (en) Method and device for setting exit time of application program

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination