CN114911672A

CN114911672A - Data processing method and device

Info

Publication number: CN114911672A
Application number: CN202210415794.2A
Authority: CN
Inventors: 周薇
Original assignee: Beijing QIYI Century Science and Technology Co Ltd
Current assignee: Beijing QIYI Century Science and Technology Co Ltd
Priority date: 2022-04-20
Filing date: 2022-04-20
Publication date: 2022-08-16

Abstract

The embodiment of the application provides a data processing method and device. The data processing method is applied to monitoring the running state of target software, and the target software is designed based on a layered architecture; the method comprises the following steps: and acquiring the monitoring information of the monitoring object of each level from the layered architecture. And when abnormal information exists in the monitoring information of other levels not belonging to the user layer, performing abnormity detection on the first monitoring information of the monitoring object of the user layer associated with the abnormal monitoring object, wherein the abnormal monitoring object is the monitoring object of the abnormal information, and the monitoring object of each associated level responds to the same service request sent by the terminal. Generating and displaying service alarm information when the first monitoring information is determined to be abnormal information; and generating and displaying service alarm information when abnormal information does not exist in the monitoring information of other levels which do not belong to the user layer and the monitoring information of the user layer has the abnormal information. The invention reduces the probability of false early warning of the monitoring equipment and improves the early warning accuracy.

Description

Data processing method and device

Technical Field

The present invention relates to the field of computer technologies, and in particular, to a data processing method and apparatus.

Background

In order to ensure the stable operation of the server, currently, a monitoring device is usually used to monitor the operation state of the service layer of the server online, so as to perform early warning according to the monitored operation state of the service layer. The service layer is used for providing a plurality of business services on the basis of the resources provided by the infrastructure layer of the service end.

However, the inventor finds that the current warning method may have a false warning condition. For example, the early warning may be a false early warning caused by a fault in the monitored operating state of the service layer, or a false early warning caused by no early warning is needed when the downstream of the service layer has fault tolerance capability. Therefore, it is necessary to manually discriminate whether the warning belongs to the false warning, so as to notify the relevant maintenance personnel to perform exception handling when it is determined that the warning does not belong to the false warning. Therefore, the early warning accuracy of the existing monitoring equipment is poor, and the monitoring efficiency is low.

Disclosure of Invention

The embodiment of the application aims to provide a data processing method and device, so that the probability of error early warning of monitoring equipment is reduced to a certain extent, the early warning accuracy is improved, and the monitoring efficiency is improved. The specific technical scheme is as follows:

in a first aspect of the present invention, a data processing method is first provided, which is applied to a monitoring device, where the monitoring device is configured to monitor an operating state of target software, and the target software is designed based on a layered architecture; the method comprises the following steps:

acquiring monitoring information of a monitoring object belonging to a user layer, monitoring information of a monitoring object belonging to a service layer and monitoring information of a monitoring object belonging to an infrastructure layer from the layered architecture, wherein the monitoring information reflects the running state of the monitoring object;

when abnormal information exists in the monitoring information of other levels not belonging to the user layer, according to the association relationship of the monitoring objects of all levels, performing abnormal detection on the first monitoring information of the monitoring object of the user layer associated with an abnormal monitoring object, wherein the abnormal monitoring object is the monitoring object of the abnormal information, and the monitoring objects of all levels associated in the association relationship respond to the same service request;

when the first monitoring information is determined to be abnormal information, generating service alarm information and displaying the service alarm information, wherein the service alarm information is used for reflecting the abnormal operation of the target software;

and when abnormal information does not exist in the monitoring information of other levels and the monitoring information of the user layer has the abnormal information, generating the service alarm information and displaying the service alarm information.

In a second aspect of the implementation of the present invention, there is also provided a data processing apparatus, applied to a monitoring device, where the monitoring device is configured to monitor an operating state of target software, and the target software is designed based on a layered architecture; the device comprises:

the acquisition module is used for acquiring monitoring information of a monitoring object belonging to a user layer, monitoring information of a monitoring object belonging to a service layer and monitoring information of a monitoring object belonging to an infrastructure layer from the layered architecture, wherein the monitoring information reflects the running state of the monitoring object;

the detection module is used for carrying out abnormity detection on first monitoring information of a monitoring object of the user layer associated with an abnormal monitoring object according to the association relation of the monitoring object of each layer when the monitoring information of other layers which do not belong to the user layer has abnormal information, wherein the abnormal monitoring object is the monitoring object of the abnormal information, and the monitoring objects of each layer associated in the association relation respond to the same service request;

the generating module is used for generating service alarm information and displaying the service alarm information when the first monitoring information is determined to be abnormal information, wherein the service alarm information is used for reflecting the abnormal operation of the target software; and the monitoring information display module is also used for generating and displaying the service alarm information when abnormal information does not exist in the monitoring information of other levels and the monitoring information of the user layer has the abnormal information.

In a third aspect of the present invention, there is also provided an electronic device, including a processor, a communication interface, a memory, and a communication bus, where the processor, the communication interface, and the memory complete communication with each other through the communication bus;

a memory for storing a computer program;

a processor adapted to perform the method steps of any of the above first aspects when executing a program stored in the memory.

In a fourth aspect implemented by the present invention, there is also provided a computer-readable storage medium having stored therein instructions, which, when run on a computer, cause the computer to execute the data processing method of any one of the above first aspects.

In a fifth aspect of the present invention, there is also provided a computer program product containing instructions which, when run on a computer, cause the computer to perform the data processing method of any one of the above first aspects.

The data processing method and device provided by the embodiment of the application are applied to monitoring equipment for monitoring the running state of target software. The target software is designed based on a hierarchical architecture comprising: a user layer, a service layer, and an infrastructure layer. When abnormal information exists in monitoring information of other hierarchies which do not belong to the user hierarchy in the hierarchical architecture, the first monitoring information of the monitoring object of the user hierarchy which is associated with the abnormal monitoring object is subjected to abnormal detection, the abnormal monitoring object is the monitoring object of the abnormal information, and the monitoring objects of the associated hierarchies respond to the same service request. When the first monitoring information of the user layer associated with the abnormal monitoring object is determined to be abnormal information, the target software is judged to have abnormal operation, the service alarm information is generated, and the service alarm information is displayed. And when abnormal information does not exist in the monitoring information of other levels which do not belong to the user layer in the layered architecture and the monitoring information of the user layer has the abnormal information, judging that the target software has abnormal operation, generating service alarm information and displaying the service alarm information. In the technical scheme, when abnormal reflection exists in a user layer, real faults exist in target software at a high probability. Therefore, the target software has abnormal information in the monitoring information of other levels which do not belong to the user layer, and the accuracy of judging the abnormality of the target software can be improved by verifying whether the monitoring information of the monitoring object of the user layer is abnormal information. Compared with the related technology, the probability of false early warning of the monitoring equipment is reduced, the early warning accuracy is improved, and the monitoring efficiency is improved.

Drawings

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below.

Fig. 1 is a schematic diagram of an implementation environment of a data processing method according to an embodiment of the present application;

fig. 2 is a flowchart of a data processing method according to an embodiment of the present application;

fig. 3 is a flowchart of another data processing method according to an embodiment of the present application;

fig. 4 is a flowchart of a method for determining source anomaly information according to an embodiment of the present application;

fig. 5 is a schematic diagram of a data processing platform according to an embodiment of the present application;

FIG. 6 is a schematic diagram of another data processing platform according to an embodiment of the present application

Fig. 7 is a block diagram of a data processing apparatus according to an embodiment of the present application;

fig. 8 is a block diagram of an electronic device according to an embodiment of the present application.

Detailed Description

The technical solutions in the embodiments of the present application will be described below with reference to the drawings in the embodiments of the present application.

Referring to fig. 1, a schematic diagram of an implementation environment of a data processing method according to an embodiment of the present application is shown. As shown in fig. 1, the implementation environment may include: a monitoring device 101 and a monitored system 102 running target software. The monitoring apparatus 101 and the monitored system 102 are connected via a network. Alternatively, the network may be a wireless network (wireless network). The wireless network may include: wireless fidelity network, 3rd-generation (3G) mobile communication technology network, or General Packet Radio Service (GPRS) network.

The monitoring device 101 is configured to monitor an operating state of target software operated by a monitored system, so as to perform early warning and/or fault analysis (also referred to as anomaly analysis) according to the monitored operating condition of the target software. Optionally, the monitoring device 101 may include a display device to display the monitored operating condition of the target software. For example, the monitoring apparatus 101 may be a server externally connected with a display device, a server cluster including a plurality of servers, a cloud server, or the like.

The target software is designed based on a hierarchical architecture. The layered architecture comprises three layers, namely a user layer, a service layer and an infrastructure layer. The infrastructure layer in the hierarchical architecture provides computing and storage resources. The service layer provides a variety of services based on the resources provided by the infrastructure layer. The user layer presents the results of the various services. Based on this, the monitoring device 101 may be used to monitor a monitoring object belonging to an infrastructure layer, a monitoring object belonging to a service layer, and a monitoring object belonging to a user layer, so as to realize monitoring of each level of the target software.

In one application scenario, the target software may be software that runs based on a cloud computing environment. The target software may be run in a distributed system, and at least two of a user layer, a service layer, and an infrastructure layer of the target software may be deployed to different electronic devices. Illustratively, as shown in fig. 1, the monitored system 102 may include a terminal 1021 running target software and a server 1022. The server 1022 provides a variety of services supported by the target software for the terminal 1021. The terminal 1021 is used for displaying the running results of various services supported by the target software. The part of the server side providing hardware resources such as calculation, storage and the like belongs to an infrastructure layer. The part of the service end which provides various services on the basis of hardware resources provided by an infrastructure layer belongs to a service layer. The terminal belongs to the user layer. By way of example, the terminal may be a mobile phone, a computer, a wearable device, or the like. The server may be one server, a server cluster including a plurality of servers, or a cloud server.

Optionally, the server may include one or more electronic devices. The electronic equipment belonging to the service layer is used for providing resource service capability for the target software. Resource service capabilities may include computing services, storage services, network services, security monitoring services, and the like. Electronic devices belonging to the infrastructure layer are used to provide the underlying hardware for the target software. For example, the electronic devices belonging to the infrastructure layer may be computing servers, storage servers, and/or network devices such as switches, routers, and the like.

Optionally, the target software may be software that runs based on a cloud computing environment. The monitoring object of the monitoring device for the infrastructure layer may include: and the server side of the monitored system comprises a computing unit and/or a storage unit. For example, the computing unit and/or the storage unit may comprise: memory, Central Processing Unit (CPU), disk space, and network IO. The monitoring object of the monitoring device for the service layer may include: an Interface, also called an Application Programming Interface (API), in the server of the monitored system is used to provide services required by the target software. The monitoring object of the monitoring device for the user layer may include: and the terminal sends the service request in the monitored system. For example, the monitoring object of the user layer is a terminal display page, a terminal page interactive operation, and the like. In an alternative implementation manner, the monitoring object of each level of the monitored device may be determined based on the service usage manner of the monitored system by the user.

For example, the user may query the content of the first column of the first table stored by the server through the terminal, and perform a summation operation on the content of the first column. The user sends a target service request through the terminal, the target service request requesting a sum of contents of a first column of the first table. And after receiving the target service request, the service end acquires the content of the first column of the first table stored in the storage unit in the infrastructure layer through the first interface of the service layer. And calling the acquired content of the first column of the first table through a second interface of the service layer, and performing summation operation on the content to obtain a summation result. And transmits the summation result to the terminal. And the terminal displays the summation result. Based on this, for a service that queries the first table and performs an operation on the content of the first table, the monitoring object of the infrastructure layer may be a target storage unit in which the first table is stored. The monitoring objects of the service layer can be a first interface and a second interface. The monitoring object of the user layer can be a target interface used for displaying the summation result for the terminal.

In another application scenario, the target software may be a stand-alone software. The target software may be run on an electronic device. Illustratively, the monitored system includes a terminal running the target software. The basic hardware components in the terminal that provide resources for computation, storage, etc. belong to the infrastructure layer. The components that run in the terminal for providing the services supported by the target software belong to a service layer. The relevant interface of the target software displayed by the terminal belongs to the application layer. Illustratively, the terminal may be a mobile phone, a computer, a wearable device, or the like.

Alternatively, the target software may be software running on a stand-alone device. The monitoring object of the monitoring device for the infrastructure layer may include: a computing unit and/or a storage unit in the terminal. For example, the computing unit and/or the storage unit may comprise: memory, Central Processing Unit (CPU), and disk space. The monitoring object of the monitoring device for the service layer may include: a log of the runs of the components of the service supported by the target software is provided. For example, the monitoring object of the service layer may be an operation log of the object code, and the terminal operates the object code to implement the service supported by the object software. The monitoring object of the monitoring device for the user layer may include: an interface for providing display data of an associated interface of the target software.

Please refer to fig. 2, which shows a flowchart of a data processing method according to an embodiment of the present application. The data processing method can be applied to the implementation environment shown in fig. 1 and executed by a monitoring device in the implementation environment. As shown in fig. 2, the method includes:

step 201, obtaining monitoring information of a monitoring object belonging to a user layer, monitoring information of a monitoring object belonging to a service layer, and monitoring information of a monitoring object belonging to an infrastructure layer from a layered architecture.

In the embodiment of the application, the monitoring information reflects the running state of the monitored object. In an alternative manner, the monitoring information may include: monitoring object identification and running state. The monitored object identifier is used for uniquely indicating the monitored object. The operating state may be a healthy state or an abnormal state. When the monitored object is in a healthy state, the monitored object is indicated to run normally. When the monitored object is in an abnormal state, the monitored object is indicated to be abnormal in operation, and a fault exists.

In another alternative, the monitoring information may include: monitoring object identification and monitoring index. The content of the monitoring index can reflect the running state of the monitored object. In one case, the targeted software may be a stand-alone software. The monitoring information of the monitoring object of the infrastructure layer includes: the operational data of the object is monitored. The monitoring information of the monitoring object of the service layer comprises: the contents of the supervisory object (i.e., the log of the runs of the components that provide the services supported by the target software). The monitoring indexes of the monitoring object of the user layer comprise: and displaying the information by the terminal.

In another case, the targeted software may be software that runs based on a cloud computing environment. The monitoring indexes of the monitoring object of the user layer may include: and sending the information displayed by the terminal of the service request. The monitoring information of the monitoring object of the service layer may include: an HTTP response code of the interface, the HTTP response code indicating whether the service request was successfully completed. The monitoring information of the monitoring object of the infrastructure layer includes: the operational data of the object is monitored. It should be noted that the monitoring information may further include at least one of the following information: the response time of the monitoring object and the response content of the monitoring object.

For example, the service of querying the first table and operating on the content of the first table is taken as an example. And the monitoring index of the monitoring object of the user layer is a summation result displayed by the terminal. The monitoring information of the first interface of the service layer is the HTTP response code generated by the first interface. The monitoring information of the second interface of the service layer is the HTTP response code generated by the second interface. The monitoring information of the monitoring object of the infrastructure layer is storage data of a storage unit in which the first table is stored.

Optionally, the monitoring device may obtain the monitoring information of the monitored object of each hierarchy at regular time. Alternatively, the monitoring device may also acquire monitoring information of the monitored object of each hierarchy in real time.

For the monitoring objects of different levels, the processes of acquiring the monitoring information of the monitoring objects by the monitoring equipment can be the same or different. In an optional implementation manner, the process of the monitoring device acquiring the monitoring information of the monitored object in the user layer, the monitoring information of the monitored object in the service layer, and the monitoring information in the infrastructure layer may all include: and the monitoring equipment sends a monitoring information request to the monitored object. And responding to the monitoring information request, and receiving the monitoring information sent by the monitoring object. After determining the monitoring objects of each hierarchy, the monitoring device may store addresses of the monitoring objects of each hierarchy. And sending a monitoring information request to the monitoring object through the address, wherein the monitoring information request is an HTTP request. And after receiving the monitoring information request, the monitoring object sends a monitoring response aiming at the monitoring information to the monitoring equipment, wherein the monitoring response comprises the monitoring information of the monitoring object. Therefore, the monitoring equipment receives the monitoring information sent by the monitoring object.

Or, the monitoring object may also send the monitoring information of the monitoring object to the monitoring device at regular time, so that the monitoring device may obtain the monitoring information of the monitoring object of each hierarchy.

In another optional implementation manner, for the monitored object in the user layer, the process of acquiring, by the monitoring device, the monitoring information of the monitored object in the user layer may include: the monitoring device automatically obtains the monitoring information of the monitored object through a User Interface (UI) automation module. Or, the monitoring device obtains the monitoring information of the monitored object through a Web service interface (Web service interface). Or the monitoring equipment acquires the monitoring information through an interface which provides display data of a relevant interface of the target software. For the monitoring object of the service layer, the process of the monitoring device acquiring the monitoring information of the monitoring object of the service layer may include: and calling the monitoring object of the service layer to acquire the monitoring information of the monitoring object. For the monitoring object of the infrastructure layer, the process of the monitoring device acquiring the monitoring information of the monitoring object of the infrastructure layer may include: and reading the storage file information of the monitored object of the infrastructure layer aiming at the storage unit to acquire the monitoring information of the monitored object, wherein the storage file information can be used for indicating the local file storage condition of the monitored object. For the computing unit, the operation file information of the monitored object of the infrastructure layer is read to obtain the monitoring information of the monitored object, and the operation file information can be used for indicating the computing operation condition of the monitored object.

Step 202, when abnormal information exists in the monitoring information of other levels not belonging to the user layer, according to the association relationship of the monitoring objects of each level, performing abnormal detection on the first monitoring information of the monitoring object of the user layer associated with the abnormal monitoring object, wherein the abnormal monitoring object is the monitoring object of the abnormal information, and the monitoring objects of each level associated in the association relationship respond to the same service request.

In the embodiment of the present application, the abnormal information may refer to information for reflecting the abnormal operation of the monitored object. The exception information may reflect that the target software has an operational exception or an operational failure. After the monitoring device obtains the monitoring information of the monitored object of each hierarchy, it can determine whether there is abnormal information in the obtained monitoring information of each hierarchy to determine whether there is possible abnormal operation of the target software.

When the abnormal information exists in the monitoring information of other levels which do not belong to the user level, the abnormal information indicates that the target software may have the abnormal operation. The user layer can have abnormal reflection under the condition that the target software has the problem of real abnormal operation. Therefore, the monitoring device can determine the monitoring object of the user layer associated with the abnormal monitoring object according to the association relationship of the monitoring objects of each layer level. And further acquiring first monitoring information of the monitoring object of the associated user layer, and performing abnormity detection on the first monitoring information so as to further verify and judge whether the target software has a fault according to the first monitoring information of the user layer associated with the abnormal monitoring object. Optionally, the process of performing, by the monitoring device, abnormality detection on the first monitoring information may include: the monitoring equipment judges whether the first monitoring information of the monitoring object of the user layer associated with the abnormal monitoring object is abnormal information.

In an optional implementation manner, if the monitoring information includes the monitored object identifier and the operating state. The process of the monitoring device determining whether there is abnormal information in the acquired monitoring information of each level includes: the monitoring equipment traverses the running state included in each monitoring information to determine whether each monitoring information has abnormal information according to whether the running state is an abnormal state. For example, when it is determined that monitoring information of an abnormal state is included in monitoring information of another hierarchy not belonging to the user hierarchy, it is determined that abnormal information exists in the monitoring information of the other hierarchy. When it is determined that the monitoring information of the abnormal state is not included in the monitoring information of other levels not belonging to the user layer, it is determined that the abnormal information does not exist in the monitoring information of the other levels.

In another optional implementation manner, if the monitoring information may include the monitored object identifier and the monitoring index. The process of the monitoring device determining whether there is abnormal information in the acquired monitoring information of each level includes: the monitoring device can judge whether the monitoring index of each monitoring information is abnormal data. The monitoring information of which the monitoring index is abnormal data indicates that the monitored object of the monitoring information runs abnormally. For example, when it is determined that abnormal data exists in the monitoring index of monitoring information of another hierarchy not belonging to the user hierarchy, it is determined that abnormal information exists in the monitoring information of the other hierarchy. When it is determined that no abnormal data exists in the monitoring data of the monitoring information of other levels which do not belong to the user layer, it is determined that no abnormal information exists in the monitoring information of the other levels.

Wherein, the abnormal data of the monitoring index may refer to a value different from the normal data of the monitoring index. Optionally, the monitoring device may pre-store normal data of the monitoring index of the monitored object. Alternatively, the monitoring device may determine the normal data of the monitoring index by calculation or the like. Of course, the monitoring device may also store the abnormal data of the monitored object in advance.

For example, for a monitoring object of the user layer, the monitoring device may store abnormal data displayed by the terminal sending the service request. For example, the exception data is an error code. And aiming at the monitoring object of the service layer, the monitoring equipment stores an HTTP response code indicating that the service request is not completed successfully. Or, for the monitoring object of the service layer, the monitoring device stores the error reporting information of the running log of the target code. For the monitoring object of the infrastructure layer, the monitoring device may store normal operation data of the monitoring object. The monitoring device may compare actual data of the monitoring index in the monitoring information with abnormal data/normal data of the target monitored object with respect to the monitoring information of any target monitored object in each monitored object. And determining whether the monitoring index of the monitoring information is abnormal data according to the comparison result.

In the embodiment of the application, the monitoring device may store the association relationship of the monitoring objects of each hierarchy, and the monitoring objects of each hierarchy associated in the association relationship respond to the same service request. The association relationship of the monitoring objects of each hierarchy may be artificially determined according to the monitoring objects involved in responding to the same service request after the monitoring objects of each hierarchy are determined. Or, the association relationship may be acquired and determined by a tool according to the monitoring objects involved in responding to the same service request after the monitoring objects of each hierarchy are determined.

It should be noted that the target software may be software that runs based on a cloud computing environment. The monitoring object of the service layer may include a plurality of microservice nodes. The incidence relation of each micro service node of the service layer can be based on the calling relation of each micro service node. For example, for the service request a, after receiving the service request a, the first micro service node invokes the second micro service node to respond to the service request a according to the response information of the second micro service node. If the monitoring object of the service layer comprises the first micro service node and the second micro service node, the first micro service node is associated with the second micro service node in the association relationship.

For example, a service for querying a first table and operating on the content of the first table is taken as an example. The monitoring object of the infrastructure layer is a target storage unit in which the first table is stored. The monitoring objects of the service layer can be a first interface and a second interface. The monitoring object of the user layer can be a target interface of the terminal for displaying the summation result. In the association relationship of the monitoring objects of each hierarchy, the target storage unit of the infrastructure layer, the first interface of the service layer, the second interface of the service layer and the target interface of the user layer are associated.

And 203, when the first monitoring information is determined to be abnormal information, generating service alarm information and displaying the service alarm information, wherein the service alarm information is used for reflecting the abnormal operation of the target software.

In the embodiment of the application, after the first monitoring information of the monitoring object of the user layer associated with the abnormal monitoring object is subjected to the abnormality detection, if the first monitoring information is determined not to be the abnormal information, the probability that the target software has the false abnormality is high, and the monitoring device may not process the first monitoring information. Or, the monitoring device may mark the monitoring information of each monitoring object of the abnormal information as possible abnormal to remind the staff that there may be abnormality for the monitoring object of the abnormal information. And if the first monitoring information is determined to be abnormal information, indicating that the target software is determined to have abnormal operation. The monitoring device may generate the service alarm information and display the service alarm information. Optionally, the monitoring device may further send the service alarm information to a terminal of a relevant worker to remind the relevant worker that the target software is abnormally operated, so as to solve a fault problem.

And 204, generating service alarm information and displaying the service alarm information when abnormal information does not exist in the monitoring information of other levels not belonging to the user layer and the monitoring information of the user layer has the abnormal information.

In the embodiment of the application, when abnormal information does not exist in the monitoring information of other levels not belonging to the user layer and the monitoring information of the user layer has the abnormal information, the fact that the target software determines that the operation is abnormal is indicated. The monitoring device may generate the service alarm information and display the service alarm information. Optionally, the monitoring device may further send the service alarm information to a terminal of a relevant worker to remind the relevant worker that the target software is abnormally operated, so as to solve a fault problem.

It should be noted that, when the monitoring device determines that the monitoring information of the monitoring objects of each hierarchy is not abnormal information, it indicates that the target software has no fault. The monitoring device can store the current judgment result so as to be convenient for the query of workers.

To sum up, the data processing method and apparatus provided in the embodiments of the present application are applied to a monitoring device for monitoring an operating state of target software. The target software is designed based on a hierarchical architecture comprising: a user layer, a service layer, and an infrastructure layer. When abnormal information exists in monitoring information of other hierarchies which do not belong to the user hierarchy in the hierarchical architecture, the first monitoring information of the monitoring object of the user hierarchy which is associated with the abnormal monitoring object is subjected to abnormal detection, the abnormal monitoring object is the monitoring object of the abnormal information, and the monitoring objects of the associated hierarchies respond to the same service request. When the first monitoring information of the user layer associated with the abnormal monitoring object is determined to be abnormal information, the target software is judged to have abnormal operation, the service alarm information is generated, and the service alarm information is displayed. And when abnormal information does not exist in the monitoring information of other levels which do not belong to the user layer in the layered architecture and the monitoring information of the user layer has the abnormal information, judging that the target software has abnormal operation, generating service alarm information and displaying the service alarm information. In the technical scheme, when abnormal reflection exists in a user layer, real faults exist in target software at a high probability. Therefore, the target software has abnormal information in the monitoring information of other levels which do not belong to the user layer, and the accuracy of judging the abnormality of the target software can be improved by verifying whether the monitoring information of the monitoring object of the user layer is abnormal information. Compared with the related technology, the probability of false early warning of the monitoring equipment is reduced, the early warning accuracy is improved, and the monitoring efficiency is improved.

Please refer to fig. 3, which shows a flowchart of another data processing method provided in the embodiment of the present application. The data processing method can be applied to the implementation environment shown in fig. 1 and executed by a monitoring device in the implementation environment. As shown in fig. 3, the method includes:

step 301, obtaining monitoring information of a monitoring object belonging to a user layer, monitoring information of a monitoring object belonging to a service layer, and monitoring information of a monitoring object belonging to an infrastructure layer from a layered architecture, wherein the monitoring information reflects an operation state of the monitoring object.

Step 302, when there is abnormal information in the monitoring information of other levels not belonging to the user layer, according to the association relationship of the monitoring objects of each level, performing abnormal detection on the first monitoring information of the monitoring object of the user layer associated with the abnormal monitoring object, where the abnormal monitoring object is the monitoring object of the abnormal information, and the monitoring objects of each level associated in the association relationship respond to the same service request.

And 303, generating service alarm information and displaying the service alarm information when the first monitoring information is determined to be abnormal information, wherein the service alarm information is used for reflecting the abnormal operation of the target software.

And 304, generating service alarm information and displaying the service alarm information when abnormal information does not exist in the monitoring information of other levels not belonging to the user layer and the monitoring information of the user layer has the abnormal information.

The explanation and implementation manners of step 301 to step 304 may refer to the explanation and implementation manners of step 201 to step 204 in sequence, which is not described in detail in this embodiment of the present application.

In this embodiment, the service alarm information may include: monitoring information and/or fault link diagrams and the like belonging to abnormal information, so that a worker can obtain more fault abnormal information of the target software according to the service alarm information after receiving the service alarm information, and the troubleshooting and maintenance efficiency is improved. In the embodiment of the present application, the following situations may be taken as examples of contents that may be included in the service alarm information, and a generation process of the service alarm information is further described.

In a first optional implementation manner, the process of generating the service alarm information includes: and generating service alarm information comprising the source abnormal information. That is, the service alarm information includes source exception information. The method may further include steps 401 to 402 before generating the traffic alert information. As shown in fig. 4, the method further comprises:

step 401, obtaining second monitoring information of the monitoring object associated with the abnormal monitoring object according to the association relationship of the monitoring object of each level, where the second monitoring information is abnormal information.

In this embodiment of the application, the monitoring device may determine the monitoring object associated with the abnormal monitoring object according to the association relationship between the monitoring objects of the different levels, where the monitoring object associated with the abnormal monitoring object refers to the monitoring object of the different levels associated with the abnormal monitoring object. And acquiring all monitoring information of the monitoring object associated with the abnormal monitoring object, and screening all the monitoring information to obtain second monitoring information belonging to the abnormal information. The implementation manner of the monitoring device for screening the second monitoring information belonging to the abnormal information from all the monitoring information may refer to the implementation manner of the monitoring device for judging whether the acquired monitoring information of each level has the abnormal information, which is not described herein again in this embodiment of the application.

Step 402, according to the response sequence of each monitoring object in the association relation to the service request, selecting the monitoring information of the first monitoring object from the second monitoring information and the monitoring information of the abnormal monitoring object as the source abnormal information.

In this embodiment, the monitoring device may select the monitoring information of the first monitoring object as the source abnormal information from the second monitoring information and the monitoring information of the abnormal monitoring object, that is, from the monitoring objects belonging to the abnormal information in the monitoring information of all the monitoring objects associated with the abnormal monitoring object.

For example, a service for querying a first table and operating on the content of the first table is taken as an example. The monitoring object of the infrastructure layer is a target storage unit in which a first table is stored. The monitoring objects of the service layer can be a first interface and a second interface. The monitoring object of the user layer can be a target interface of the terminal for displaying the summation result. In the association relationship of the monitoring objects of each hierarchy, the target storage unit of the infrastructure layer, the first interface of the service layer, the second interface of the service layer, and the target interface of the user layer are associated.

Assuming that the monitoring information of the monitoring objects of each level is abnormal information, the abnormal monitoring object is the monitoring object of each level. The monitoring equipment responds to the service according to the response sequence of each monitored object: and selecting the target storage unit (namely the first monitoring object) of the infrastructure layer from the monitoring information of the monitoring objects of each hierarchy as source abnormal information.

In this way, the monitoring objects are sorted according to the response sequence to the service request, and the sorting sequence is usually the monitoring object of the infrastructure layer, the monitoring object of the service layer, and the monitoring object of the user layer in terms of hierarchy. And because the degree of influence of the abnormal operation of the user layer, the service layer and the infrastructure layer on the normal operation of the target software is sequentially deepened, and the abnormal operation of the user layer, the service layer and the infrastructure layer has relevance, the abnormal operation of the infrastructure layer can sequentially influence the service layer and the user layer. Therefore, the monitoring information of the first monitoring object is selected as the source abnormal information according to the response sequence of each monitoring object in the association relation to the service request, so that the abnormal condition of each monitoring object can be traced back according to the influence sequence of the abnormal operation of the monitoring object on the normal operation of the target software, the monitoring object which is abnormally operated at first is found out, the monitoring object which is abnormally operated at first is determined, and the accurate positioning of the fault monitoring object is realized. The method is beneficial to the fault analysis and fault repair of the target software. Compared with the related technology, the method solves the problem of inaccurate fault positioning caused by fault spreading, and improves the accuracy of abnormity judgment of the target software. And further, the probability of error early warning of the monitoring equipment is further reduced, the early warning accuracy is improved, and the monitoring efficiency is improved.

In this embodiment, the monitoring device may further select the source abnormal information from the second monitoring information and the monitoring information of the abnormal monitoring object according to other conditions.

For example, the monitoring objects of each hierarchy may have maintenance priorities. The maintenance priority of the monitoring objects can be determined according to the influence degree of each monitoring object on the normal operation of the target software during abnormal operation. The higher the maintenance priority, the greater the degree of influence. The monitoring device may select, as the source abnormal information, the monitoring information of the monitoring object whose maintenance priority is greater than the priority threshold from the second monitoring information and the monitoring information of the abnormal monitoring object. Wherein, the maintenance priority can be determined according to the actual situation.

In a second optional implementation manner, the process of generating the service alarm information includes: and generating service alarm information comprising the fault link map. I.e. the traffic alarm information comprises a faulty link map. The method may further include step S11 before generating the traffic alert information. The method further comprises the following steps:

step S11, generating a fault link diagram according to the response sequence of each monitoring object for the service request, the monitoring information of the abnormal monitoring object, and the monitoring information of the monitoring object associated with the abnormal monitoring object in the association relationship of the monitoring objects of each hierarchy. And the monitoring information in the fault link diagram is displayed in a connection mode according to the response sequence of the monitoring objects in the incidence relation to the service request.

In this embodiment of the present application, the displaying of the monitoring information in the faulty link map according to the response sequence may include: the monitoring information can be displayed in a connection mode in a response sequence. Or, each monitoring information can be displayed in a multi-level menu form in a connected mode according to the response sequence.

For example, assume that the abnormal monitoring object is the second monitoring object of the service layer. The monitoring object associated with the abnormal monitoring object comprises: a first monitoring object of the user layer and a third monitoring object of the infrastructure layer. If the association relationship is that the first monitoring object, the second monitoring object and the third monitoring object are associated, and the response sequence of each monitoring object to the same service request is as follows: a third monitored object, a second monitored object and a first monitored object. And the monitoring equipment displays the monitoring information of the first monitored object, the monitoring information of the second monitored object and the monitoring information of the third monitored object by adopting the connection lines according to the response sequence to generate a fault link diagram. The connecting lines identify the associated order and the corresponding order of the monitored objects of each monitoring information.

It should be noted that the monitoring device may further generate a fault link map according to a response sequence of the monitoring object of each hierarchy to the service request, and the monitoring information of the monitoring object of each hierarchy in the fault link map is shown in a connected manner according to the response sequence.

In this way, due to the fault link diagram, the monitoring results of the monitoring objects with the relevant relationship in the longitudinal direction of each hierarchy, namely the direction from the user layer, the service layer to the infrastructure layer, can be visually displayed. Therefore, the service alarm information comprising the fault link map can more clearly remind related personnel of the abnormal operation condition of the target software. The method is beneficial to the fault analysis of the target software.

In a third optional implementation manner, the process of generating the service alarm information includes: and generating service alarm information comprising source abnormal information and the fault link diagram. That is, the service alarm information includes source exception information and a failure link map. The method may further include step S21 before generating the traffic alert information. The method further comprises the following steps:

step S21, obtaining second monitoring information of the monitoring object associated with the abnormal monitoring object according to the association relationship of the monitoring objects of each hierarchy, where the second monitoring information is abnormal information.

Step S22, according to the response sequence of each monitoring object in the association relation to the service request, selecting the monitoring information of the first monitoring object from the monitoring information of the second monitoring object and the monitoring information of the abnormal monitoring object as the source abnormal information.

Step S23, generating a fault link map according to the response sequence of each monitoring object for the service request, the monitoring information of the abnormal monitoring object, and the monitoring information of the monitoring object associated with the abnormal monitoring object in the association relationship of the monitoring objects of each hierarchy. And the monitoring information in the fault link diagram is displayed in a connection mode according to the response sequence of the monitoring objects in the incidence relation to the service request.

The explanation and implementation of steps S21, S22, and S23 may refer to the explanation and implementation of

steps

401, 402, and S11 in sequence, which is not described in detail in this embodiment of the present application.

It should be noted that the source exception information in the failed link map may be displayed in a marked manner. The identification display may refer to the marked display of the source anomaly information in the form of highlighting, thickening and the like. In this way, the failure link map generated by the third optional implementation manner is compared with the failure link map generated by the second optional implementation manner. Because the source abnormal information included in the fault link diagram is marked and displayed, the service alarm information including the fault link diagram can clearly remind related personnel of the abnormal operation condition of the target software, and the fault analysis of the target software is further facilitated.

And 305, sending service alarm information to an alarm terminal corresponding to the level to which the abnormal monitoring object belongs.

In the embodiment of the application, monitoring personnel corresponding to any level in the user layer, the service layer and the infrastructure layer can be different. That is, different levels of monitoring tasks can be assigned to different role personnel in the system development team. For example, an operation and maintenance team is assigned with monitoring tasks at the infrastructure layer. And allocating the monitoring tasks of the service layer for the development team. And allocating a monitoring task of a user layer for a Quality Assurance (QA) team or a client operation and maintenance team. The monitoring equipment can send service alarm information to monitoring personnel in the form of mails, instant messaging software or telephones and the like.

Optionally, the monitoring device may store a correspondence between the identity of the monitoring person and the hierarchy, and a correspondence between the identity and the related information of the monitoring person indicated by the identity. The related information corresponding to the identity at least comprises: and the terminal identifier of the alarm terminal held by the monitoring personnel is indicated by the identity identifier. The monitoring personnel indicated by the identity identification have the authority to view the monitoring information of the corresponding hierarchy. The monitoring device may query the corresponding relationship according to the hierarchy to which the abnormal monitoring object of the abnormal information belongs, in the monitoring information of each hierarchy. And sending the service alarm information to an alarm terminal corresponding to the identity corresponding to the hierarchy. Of course, the granularity of the viewing authority of the monitoring personnel can also be the monitoring object. That is, the monitoring person may correspond to the monitored object.

Therefore, different monitoring personnel can be responsible for part of abnormal analysis and maintenance work, and the working efficiency of the abnormal fault analysis and maintenance of the target software is improved. For example, the efficiency of work such as failure reproduction in abnormal failure analysis, failure resolution in failure maintenance, and error-free confirmation after failure resolution is improved. Furthermore, for single-level abnormal information caused by reasons such as that a downstream calling party has entered fault-tolerant processing, all downstream monitoring objects operate normally at this time. The monitoring device may send the service alarm information to the monitoring personnel corresponding to the single-layer abnormal information. On the basis of guaranteeing the fault analysis and maintenance efficiency, the labor input and the time cost of the fault analysis are reduced, and the fault analysis efficiency and the monitoring efficiency are improved.

It should be noted that the monitoring device may also perform a summary analysis on the monitoring information of the monitored object at any level to obtain a summary result. And sending the summary result to the alarm terminal corresponding to the level. Therefore, the monitoring results of the monitoring objects of all levels in the horizontal direction, namely, in each single direction of the user layer, the service layer and the infrastructure layer can be visually displayed.

Optionally, the monitoring device may perform operation health analysis on the monitoring information of the monitoring object at any level according to the monitoring information of each monitoring object at the level, so as to obtain an operation health degree. The operational health is used to reflect the operational condition of the hierarchy as a whole. For example, the operation health degree may be a ratio of an abnormally operated monitoring object to a normally operated monitoring object. The ratio of the number of abnormally operated monitoring objects to the total number of the monitoring objects in the hierarchy can also be used.

In the embodiment of the application, the monitoring equipment can store the obtained monitoring information of the monitoring objects of each level, the source abnormal information, the fault link diagram, the alarm information and other information generated in the working process of the monitoring equipment, so that relevant workers can call and check the information conveniently. Optionally, the method further includes:

step 306, responding to the display instruction aiming at the monitoring information inquiry page, and displaying the monitoring information inquiry page.

In the embodiment of the application, if an inquirer wants to check the monitoring information of the target software, the inquirer can execute the trigger operation for the monitoring information inquiry page, so that the monitoring device receives the trigger operation for the monitoring information inquiry page, and generates a display instruction for the monitoring information inquiry page in response to the trigger operation. And further responding to the display instruction, and displaying a monitoring information inquiry page. The monitoring device can receive a query object which the query personnel want to view the monitoring information on a monitoring information query page.

For example, the triggering operation on the monitoring information query page may be a setting operation of a triggering control for the monitoring information query page. The inquiry personnel can execute the setting operation aiming at the trigger control, so that the monitoring equipment can receive the setting operation aiming at the trigger control, and the display instruction aiming at the monitoring information inquiry page is generated in response to the setting operation. And further responding to the display instruction, and displaying a monitoring information inquiry page. The inquirer can write the inquiry object in the monitoring information inquiry page. The triggering control can be used for triggering display of a monitoring information query page. The setting operation for the trigger control may include: click operation, long press operation, slide operation, or the like.

Step 307, in response to the information query instruction, obtaining a query object and an identity of a query person in the monitoring information query page, where the query object may include: the target monitors the object and/or the target hierarchy.

Wherein the identity of the inquirer corresponds to at least one hierarchy. And the inquirer indicated by the identity identification has the authority to view the monitoring information of the corresponding hierarchy. In this embodiment, the inquirer may be the aforementioned monitoring person.

Alternatively, the monitoring information query page may include an input area of a query object for which the querying person wants to view the monitoring information. The query person may trigger an input operation for the query object in the input area. For example, the input area may include an input box for a query personnel to write to the query object. The querying person triggering an input operation for the query object in the input area may include: and the inquiring person writes the writing operation of the inquiring object in the input box. Alternatively, the input area may include a selection control. One selection control corresponds to one query object. The query personnel triggering the input operation aiming at the query object in the input area can comprise the following steps: and the inquiry personnel executes the triggering operation of the selection control corresponding to the inquiry object in the input area. The triggering operation for the selection control corresponding to the query object may include: click operation, long press operation, slide operation, or the like.

For example, the monitoring device may receive an input operation for the query object in an input area of the monitoring information query page, and in response to the input operation, generate an information query instruction and obtain an identity of a querying person and select the query object corresponding to the operation. For another example, the monitoring information query page may also include a confirmation query control. The query personnel can execute the input operation aiming at the confirmed query control after the input area triggers the input operation aiming at the query object. The monitoring device can receive an input operation aiming at the confirmation query control, and generates an information query instruction in response to the input operation. And acquiring the identity of the inquirer in the input area and selecting the inquired object corresponding to the operation.

Step 308, when the hierarchy corresponding to the identity of the inquirer is consistent with the hierarchy of the inquired object, displaying an inquiry result page, wherein the inquiry result page comprises: and monitoring information of each monitoring object related to the query object in the association relation and/or the monitoring information of the query object.

In the embodiment of the application, the monitoring equipment can carry out consistency check on the hierarchy corresponding to the identity of the inquirer and the hierarchy of the inquired object. And if the hierarchy corresponding to the identity is consistent with the hierarchy of the query object, which indicates that the query personnel indicated by the identity has the authority to view the monitoring information of the query object, the monitoring equipment displays a query result page on the monitoring equipment. If the hierarchy corresponding to the identity is not consistent with the hierarchy of the query object, indicating that the querying person indicated by the identity does not have the authority to view the monitoring information of the monitoring object, the monitoring device can display no-authority prompt information, wherein the no-authority prompt information is used for prompting the querying person not to view the authority of the written monitoring object.

Wherein, in case that the query object is the target monitoring object, the query result page may include: and monitoring information of each monitored object related to the target monitored object in the monitoring information of the target monitored object and/or the incidence relation of the monitored objects of each level. In the case where the query object is a target hierarchy, the query results page may include: monitoring information of the monitoring objects included in the target hierarchy and/or monitoring information of the monitoring objects related to the monitoring objects in the target hierarchy.

For example, monitoring the input area of the information query page may include: the system comprises selection controls corresponding to the monitoring objects of all the levels and selection controls corresponding to all the levels. If an inquirer wants to view monitoring information of a target monitoring object belonging to a service layer, the inquirer can click a selection control corresponding to the target monitoring object, namely, click operation aiming at the selection control corresponding to the target monitoring object is executed. The monitoring equipment receives the clicking operation, responds to the clicking operation, generates an information query instruction and takes a target monitoring object corresponding to the clicking operation as a query object. And the monitoring equipment judges whether the hierarchy corresponding to the identity of the inquirer is consistent with the hierarchy of the inquired object. And if so, displaying a query result page, wherein the query result page comprises the monitoring information of the target monitoring object and the monitoring information of each monitoring object related to the target monitoring object. If not, displaying the no-permission prompt information.

If the inquirer wants to check the monitoring information of each monitoring object belonging to the service layer, the inquirer can click the selection control corresponding to the service layer, namely, click operation aiming at the selection control corresponding to the service layer is executed. The monitoring equipment receives the click operation, responds to the click operation, generates an information query instruction and takes the service layer corresponding to the click operation as a query object. And the monitoring equipment judges whether the hierarchy corresponding to the identity of the inquirer is consistent with the hierarchy of the inquired object. And if so, displaying an inquiry result page, wherein the inquiry result page comprises the monitoring information of the monitoring object included by the service layer. If not, displaying the no-permission prompt information.

To sum up, the data processing method and apparatus provided in the embodiments of the present application are applied to a monitoring device for monitoring an operating state of target software. The target software is designed based on a hierarchical architecture comprising: a user layer, a service layer, and an infrastructure layer. When abnormal information exists in monitoring information of other hierarchies which do not belong to the user hierarchy in the hierarchical architecture, the first monitoring information of the monitoring object of the user hierarchy which is associated with the abnormal monitoring object is subjected to abnormal detection, the abnormal monitoring object is the monitoring object of the abnormal information, and the monitoring objects of the associated hierarchies respond to the same service request. When the first monitoring information of the user layer associated with the abnormal monitoring object is determined to be abnormal information, the target software is judged to have abnormal operation, the service alarm information is generated, and the service alarm information is displayed. And when abnormal information does not exist in the monitoring information of other levels which do not belong to the user layer in the layered architecture and the monitoring information of the user layer has the abnormal information, judging that the target software has abnormal operation, generating service alarm information and displaying the service alarm information. In the technical scheme, when abnormal reflection exists in the user layer, the problem of real faults of the target software exists at a high probability. Therefore, the target software has abnormal information in the monitoring information of other levels which do not belong to the user layer, and the accuracy of judging the abnormality of the target software can be improved by verifying whether the monitoring information of the monitoring object of the user layer is abnormal information. Compared with the related technology, the probability of false early warning of the monitoring equipment is reduced, the early warning accuracy is improved, and the monitoring efficiency is improved.

The embodiment of the application also provides a data processing platform. The data processing platform is a Web page (Web) system constructed by adopting a Model-View-Controller (MVC) architecture. The data processing platform may include: the system comprises an information display layer, an information service layer and an information access layer.

The information display layer is used for different monitoring personnel to use functions of platform function setting, monitoring information inquiry and the like through the data processing platform. The information service layer is used for analyzing monitoring information of the monitored object, the incidence relation of the monitored objects of all levels and other monitoring data to generate business alarm information. The information service layer provides a monitoring information inquiry interface, a platform function setting interface and the like for the information display layer. The information access layer is used for collecting the monitoring information of the monitoring objects of each level, preprocessing the monitoring information and controlling the monitoring information to be stored in the database. The preprocessing of the monitoring information may include denoising and cleaning the monitoring information. The database can be a database included in the data processing platform, or a database connected with the data processing platform, etc.

Referring to fig. 5, a block diagram of a data processing platform provided in an embodiment of the present application is shown. The data processing platform is built on the monitoring device shown in fig. 1, and the data processing platform can implement any data processing method provided by the embodiment of the application. As shown in fig. 5, the data processing platform 500 includes: an information presentation layer 501, an information service layer 502, and an information access layer 503.

The information access layer 503 is configured to obtain monitoring information of a monitored object belonging to a user layer, monitoring information of a monitored object belonging to a service layer, and monitoring information of a monitored object belonging to an infrastructure layer, where the monitoring information reflects an operating state of the monitored object.

The information service layer 502 is configured to, when there is abnormal information in monitoring information of other levels that do not belong to the user layer, perform abnormality detection on first monitoring information of a monitoring object of the user layer associated with an abnormal monitoring object according to an association relationship of the monitoring object of each level, where the abnormal monitoring object is a monitoring object of the abnormal information, and the monitoring objects of each level associated in the association relationship respond to the same service request; when the first monitoring information is determined to be abnormal information, generating service alarm information, wherein the service alarm information is used for reflecting the abnormal operation of the target software; and generating service alarm information when abnormal information does not exist in the monitoring information of other levels not belonging to the user layer and the monitoring information of the user layer has the abnormal information.

The information display layer 501 is used for displaying monitoring information and/or service alarm information of each layer.

Optionally, the information service layer 502 is further configured to: acquiring second monitoring information of the monitoring object associated with the abnormal monitoring object according to the association relation, wherein the second monitoring information is abnormal information; selecting the monitoring information of the first monitoring object in the monitoring information of the second monitoring information and the abnormal monitoring object as source abnormal information according to the response sequence of each monitoring object in the incidence relation to the service request; and generating service alarm information comprising the source abnormal information.

Optionally, the information service layer 502 is further configured to: generating a fault link diagram according to the response sequence of each monitoring object in the association relation to the service request, the monitoring information of the abnormal monitoring object and the monitoring information of the monitoring object associated with the abnormal monitoring object, wherein the monitoring information in the fault link diagram is displayed in a connected mode according to the response sequence; and generating service alarm information comprising the fault link map.

Optionally, the information service layer 502 is further configured to: and sending service alarm information to an alarm terminal corresponding to the level to which the abnormal monitoring object belongs.

Optionally, the information service layer 502 is further configured to: responding to a display instruction aiming at the monitoring information inquiry page, and displaying the monitoring information inquiry page; responding to an information query instruction, acquiring a query object and an identity of a query person in a monitoring information query page, wherein the identity corresponds to at least one hierarchy, the person indicated by the identity has the authority of viewing the monitoring information of the corresponding hierarchy, and the query object comprises: a target monitoring object and/or target hierarchy;

the information presentation layer 503 is also used to: when the hierarchy corresponding to the identity is consistent with the hierarchy of the query object, displaying a query result page, wherein the query result page comprises: and monitoring information of each monitoring object related to the query object in the association relation and/or the monitoring information of the query object.

Optionally, the data processing platform 500 further includes: the system comprises a log recording module and an authority control module, wherein the log recording module is at least used for recording a behavior log of the data processing platform. The authority control module is at least used for verifying the authority of the monitored object.

In the embodiment shown in the data processing platform provided in the embodiment of the present application, the explanation and implementation processes of the method executed by each hierarchy or module may refer to the relevant explanation and implementation processes provided in the foregoing data processing method side embodiment. To avoid repetition, further description is omitted here.

In an embodiment of the present application, a data processing platform provided in the embodiment of the present application is configured to monitor an operating state of target software. The target software is designed based on a hierarchical architecture comprising: a user layer, a service layer, and an infrastructure layer. When abnormal information exists in monitoring information of other hierarchies which do not belong to the user hierarchy in the hierarchical architecture, the first monitoring information of the monitoring object of the user hierarchy which is associated with the abnormal monitoring object is subjected to abnormal detection, the abnormal monitoring object is the monitoring object of the abnormal information, and the monitoring objects of the associated hierarchies respond to the same service request. When the first monitoring information of the user layer associated with the abnormal monitoring object is determined to be abnormal information, the target software is judged to have abnormal operation, the service alarm information is generated, and the service alarm information is displayed. And when abnormal information does not exist in the monitoring information of other levels which do not belong to the user layer in the hierarchical framework and the abnormal information exists in the monitoring information of the user layer, judging that the target software has abnormal operation, generating service alarm information and displaying the service alarm information. In the technical scheme, when abnormal reflection exists in a user layer, real faults exist in target software at a high probability. Therefore, the target software has abnormal information in the monitoring information of other levels which do not belong to the user layer, and the accuracy of judging the abnormality of the target software can be improved by verifying whether the monitoring information of the monitoring object of the user layer is abnormal information. Compared with the related technology, the probability of false early warning of the monitoring equipment is reduced, the early warning accuracy is improved, and the monitoring efficiency is improved.

For example, please refer to fig. 6, which illustrates a schematic diagram of another data processing platform provided in an embodiment of the present application. In the embodiment of the present application, the data processing platform shown in fig. 6 is used to further describe the data processing method and the data processing platform provided in the present invention. As shown in fig. 6, data processing platform 600 comprises: an information presentation layer 601, an information service layer 602, an information access layer 603, a logging module 604, and an authority control module 605.

The information display layer 601 includes: a user layer 6011, and an interaction layer 6012. The user layer 6011 is configured to display, on a monitoring system page, monitoring information and/or service alarm information of each hierarchy to monitoring personnel (developers, operation and maintenance personnel, testing personnel, and management personnel), and to display, for example, a setting page of a monitoring object, a setting page of service alarm information, a monitoring information query page, a query result page, and the like.

The interaction layer 6012 includes a page interaction module 60121 and an alarm push module 601212. The page interaction module 60121 is configured to obtain the monitoring information to be displayed from the information service layer 602, and push the monitoring information to the user layer 6011. The page interaction module 60121 may also be configured to transmit information acquired from the setup page to the information service layer 602. The alarm pushing module 601212 is configured to obtain the service alarm information from the information service layer 602 and push the service alarm information to the user layer 6011.

The information service layer 602 is also called a business layer 602. The information service layer 602 includes: a monitoring information viewing module 6021, an alarm setting module 6022, a monitoring information analysis module 6023, a monitoring object setting module 6024 and a monitoring index setting module 6025. Wherein the monitoring information viewing module 6021 provides the monitoring information to the interaction layer. The alarm setting module 6022 is configured to set the service alarm information, which may include content and/or service alarm information generation rules. For example, the alarm setting module 6022 is configured to generate the service alarm information when the first monitoring information of the monitoring object of the user layer associated with the abnormal monitoring object is abnormal information. The monitoring information analysis module 6023 is used for realizing the functions of the information service layer of the data processing platform provided by the foregoing embodiment of fig. 5. The monitored object setting module 6024 is used for artificially setting the monitored objects of each hierarchy. The monitoring index setting module 6025 is used for artificially setting the monitoring index in the monitoring information.

The information access layer 603 includes: a monitoring information collection layer 6031, a data processing layer 6032, and a data storage layer 6033. The monitoring information collection layer 6031 includes: database synchronization module 60311, request push module 60312, data file parsing module 60313, and data read interface 60314. The request pushing module 60312 is configured to send a monitoring information request to the monitoring objects of each hierarchy, and receive a monitoring information response including monitoring information sent by the monitoring objects. The data file parsing module 60313 is configured to parse the monitoring information response to obtain the monitoring information. The database synchronization module 60311 is used to transmit the monitoring information to the data processing layer 6032 through the data read interface 60314.

The data processing layer 6032 includes: a monitor data read module 60321 and a monitor data write module 60322. The monitoring data reading module 60321 is configured to, by the service layer, obtain the monitoring information acquired by the information access layer 603 from the data storage layer through the monitoring data reading module 60321. The monitoring data writing module 60322 is used to store the monitoring information transferred by the data processing layer 6032 to the data storage layer.

Data storage layer 6033 includes: mySQL databases, log databases, and other file databases. The mySQL database, the log database and other file databases are used for storing information of the data processing platform. Wherein, the log database can be used for storing the behavior log of the data processing platform. The mySQL database is also called a raw monitoring data storage database, and can be used for storing monitoring information of monitoring objects of each hierarchy.

The log module 604 may be used to record a behavior log of the data processing platform, and the rights control module 605 may be used to verify the rights of the monitored object.

To sum up, the data processing platform provided by the embodiment of the application is used for monitoring the running state of the target software. The target software is designed based on a hierarchical architecture comprising: a user layer, a service layer, and an infrastructure layer. When abnormal information exists in monitoring information of other levels which do not belong to a user level in a layered framework, abnormality detection is carried out on first monitoring information of a monitoring object of the user level which is associated with an abnormal monitoring object, the abnormal monitoring object is a monitoring object of the abnormal information, and the monitoring objects of the associated levels respond to the same service request. When the first monitoring information of the user layer associated with the abnormal monitoring object is determined to be abnormal information, the target software is judged to have abnormal operation, the service alarm information is generated, and the service alarm information is displayed. And when abnormal information does not exist in the monitoring information of other levels which do not belong to the user layer in the layered architecture and the monitoring information of the user layer has the abnormal information, judging that the target software has abnormal operation, generating service alarm information and displaying the service alarm information. In the technical scheme, when abnormal reflection exists in a user layer, real faults exist in target software at a high probability. Therefore, the target software has abnormal information in the monitoring information of other levels which do not belong to the user layer, and the accuracy of judging the abnormality of the target software can be improved by verifying whether the monitoring information of the monitoring object of the user layer is abnormal information. Compared with the related technology, the probability of false early warning of the monitoring equipment is reduced, the early warning accuracy is improved, and the monitoring efficiency is improved.

Referring to fig. 7, a block diagram of a data processing apparatus according to an embodiment of the present application is shown. The data processing device is applied to monitoring equipment, the monitoring equipment is used for monitoring target software, and the target software comprises: a user layer, a service layer and an infrastructure layer; as shown in fig. 7, the data processing apparatus 700 includes: an acquisition module 701, a detection module 702, and a generation module 703.

An obtaining module 701, configured to obtain, from the layered architecture, monitoring information of a monitored object belonging to a user layer, monitoring information of a monitored object belonging to a service layer, and monitoring information of a monitored object belonging to an infrastructure layer, where the monitoring information reflects an operating state of the monitored object;

a detection module 702, configured to, when there is abnormal information in the monitoring information of other levels that do not belong to the user layer, perform abnormal detection on first monitoring information of a monitoring object of the user layer associated with an abnormal monitoring object according to an association relationship of the monitoring object of each level, where the abnormal monitoring object is a monitoring object of the abnormal information, and the monitoring objects of each level associated in the association relationship respond to the same service request;

a generating module 703, configured to generate service alarm information and display the service alarm information when it is determined that the first monitoring information is abnormal information, where the service alarm information is used to reflect that the target software is abnormal in operation; and the monitoring information display module is also used for generating and displaying the service alarm information when abnormal information does not exist in the monitoring information of other levels not belonging to the user layer and the monitoring information of the user layer has the abnormal information.

Optionally, the obtaining module 701 is further configured to obtain, according to the association relationship, second monitoring information of a monitoring object associated with the abnormal monitoring object, where the second monitoring information is abnormal information;

the data processing apparatus 700 further comprises: a selecting module, configured to select, according to a response sequence of each monitoring object in the association relation to the service request, monitoring information of a first monitoring object in the monitoring information of the second monitoring information and the abnormal monitoring object as source abnormal information;

the generating module 703 is further configured to generate service alarm information including the source exception information.

Optionally, the generating module 703 is further configured to generate a fault link map according to a response sequence of each monitoring object in the association relation to the service request, the monitoring information of the abnormal monitoring object, and the monitoring information of the monitoring object associated with the abnormal monitoring object, where each monitoring information in the fault link map is shown in a connected manner according to the response sequence; and also for generating traffic alarm information including the faulty link map.

Optionally, the data processing apparatus 700 further includes: and the sending module is used for sending the service alarm information to an alarm terminal corresponding to the level to which the abnormal monitoring object belongs.

Optionally, the data processing apparatus 700 further includes: and the display module is used for responding to a display instruction aiming at the monitoring information inquiry page and displaying the monitoring information inquiry page.

The obtaining module 701 is further configured to: in response to an information query instruction, acquiring a query object and an identity of a query person in the monitoring information query page, where the identity corresponds to at least one hierarchy, and the person indicated by the identity has a right to view monitoring information of the corresponding hierarchy, and the query object includes: the target monitors the object and/or the target hierarchy.

A display module, configured to display a query result page when the hierarchy corresponding to the identity is consistent with the hierarchy of the query object, where the query result page includes: and monitoring information of the query object and/or monitoring information of each monitoring object associated with the query object in the association relation.

Optionally, the monitoring object of the user layer includes: a terminal for sending the service request; the monitoring object of the service layer comprises: the interface is used for providing services required by the target software in the server; the monitoring objects of the infrastructure layer comprise: the server side comprises a computing unit and/or a storage unit, and the monitoring information comprises: monitoring object identification and monitoring indexes, wherein the monitoring indexes of the monitoring object of the user layer comprise: the information displayed by the terminal sending the service request, and the monitoring information of the monitored object of the service layer includes: the monitoring information of the monitoring object of the infrastructure layer comprises: the operational data of the object is monitored.

Optionally, the monitoring object of the service layer includes a plurality of micro service nodes, and the association relationship of each micro service node of the service layer is determined based on the call relationship of each micro service node.

To sum up, the data processing apparatus provided in the embodiment of the present application is applied to a monitoring device for monitoring an operating state of target software. The target software is designed based on a hierarchical architecture comprising: a user layer, a service layer, and an infrastructure layer. When abnormal information exists in monitoring information of other hierarchies which do not belong to the user hierarchy in the hierarchical architecture, the first monitoring information of the monitoring object of the user hierarchy which is associated with the abnormal monitoring object is subjected to abnormal detection, the abnormal monitoring object is the monitoring object of the abnormal information, and the monitoring objects of the associated hierarchies respond to the same service request. When the first monitoring information of the user layer associated with the abnormal monitoring object is determined to be abnormal information, the target software is judged to have abnormal operation, the service alarm information is generated, and the service alarm information is displayed. And when abnormal information does not exist in the monitoring information of other levels which do not belong to the user layer in the layered architecture and the monitoring information of the user layer has the abnormal information, judging that the target software has abnormal operation, generating service alarm information and displaying the service alarm information. In the technical scheme, when abnormal reflection exists in a user layer, real faults exist in target software at a high probability. Therefore, the target software has abnormal information in the monitoring information of other levels which do not belong to the user layer, and the accuracy of judging the abnormality of the target software can be improved by verifying whether the monitoring information of the monitoring object of the user layer is abnormal information. Compared with the related technology, the probability of false early warning of the monitoring equipment is reduced, the early warning accuracy is improved, and the monitoring efficiency is improved.

The embodiment of the application also provides electronic equipment, and the electronic equipment can be the terminal or the server. As shown in fig. 8, the system comprises a processor 801, a communication interface 802, a memory 803 and a communication bus 804, wherein the processor 801, the communication interface 802 and the memory 803 communicate with each other via the communication bus 804,

a memory 803 for storing a computer program;

the processor 801 is configured to implement the following steps when executing the program stored in the memory 803: acquiring monitoring information of a monitoring object belonging to a user layer, monitoring information of a monitoring object belonging to a service layer and monitoring information of a monitoring object belonging to an infrastructure layer from the layered architecture, wherein the monitoring information reflects the running state of the monitoring object; when abnormal information exists in the monitoring information of other levels not belonging to the user layer, according to the association relationship of the monitoring objects of all levels, performing abnormal detection on the first monitoring information of the monitoring object of the user layer associated with an abnormal monitoring object, wherein the abnormal monitoring object is the monitoring object of the abnormal information, and the monitoring objects of all levels associated in the association relationship respond to the same service request; when the first monitoring information is determined to be abnormal information, generating service alarm information and displaying the service alarm information, wherein the service alarm information is used for reflecting the abnormal operation of the target software; and when abnormal information does not exist in the monitoring information of other levels which do not belong to the user layer and the monitoring information of the user layer has the abnormal information, generating the service alarm information and displaying the service alarm information.

The communication bus mentioned in the electronic device may be a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, or the like. The communication bus may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown, but this does not mean that there is only one bus or one type of bus.

The communication interface is used for communication between the electronic equipment and other equipment.

The Memory may include a Random Access Memory (RAM), or may also include a non-volatile Memory (non-volatile Memory), such as at least one disk Memory. Optionally, the memory may also be at least one memory device located remotely from the processor.

The processor may be a general-purpose processor, and includes a Central Processing Unit (CPU), a Network Processor (NP), and the like; the Integrated Circuit may also be a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field Programmable Gate Array (FPGA) or other Programmable logic device, discrete gate or transistor logic device, or discrete hardware components.

In yet another embodiment of the present invention, a computer-readable storage medium is further provided, in which a computer program is stored, and when the computer program is executed by a processor, the steps of the data processing method described in any of the above embodiments are performed.

In a further embodiment of the present invention, there is also provided a computer program product containing instructions which, when run on a computer, cause the computer to perform the steps of the data processing method of any of the above embodiments.

In the above embodiments, the implementation may be wholly or partially realized by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loaded and executed on a computer, cause the processes or functions described in accordance with the embodiments of the invention to occur, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored in a computer readable storage medium or transmitted from one computer readable storage medium to another, for example, from one website site, computer, server, or data center to another website site, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, Digital Subscriber Line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device, such as a server, a data center, etc., that incorporates one or more of the available media. The usable medium may be a magnetic medium (e.g., floppy Disk, hard Disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., Solid State Disk (SSD)), among others.

It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the term "and/or" means and or. For example, "a and/or B" means: A. b and A and B. The terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.

All the embodiments in the present specification are described in a related manner, and the same and similar parts among the embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, for the system embodiment, since it is substantially similar to the method embodiment, the description is simple, and for the relevant points, reference may be made to the partial description of the method embodiment.

The above description is only for the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention shall fall within the protection scope of the present invention.

Claims

1. A data processing method is characterized in that the method is applied to monitoring equipment, the monitoring equipment is used for monitoring the running state of target software, and the target software is designed based on a layered architecture; the method comprises the following steps:

2. The method of claim 1, further comprising:

acquiring second monitoring information of the monitoring object associated with the abnormal monitoring object according to the association relation, wherein the second monitoring information is abnormal information;

according to the response sequence of each monitoring object in the incidence relation to the service request, selecting the monitoring information of the first monitoring object from the second monitoring information and the monitoring information of the abnormal monitoring object as source abnormal information;

the generating the service alarm information includes: and generating service alarm information comprising the source abnormal information.

3. The method of claim 1, further comprising:

generating a fault link diagram according to the response sequence of each monitoring object in the association relation to the service request, the monitoring information of the abnormal monitoring object and the monitoring information of the monitoring object associated with the abnormal monitoring object, wherein each monitoring information in the fault link diagram is displayed in a connected mode according to the response sequence;

the generating of the service alarm information includes: and generating service alarm information comprising the fault link map.

4. The method of any of claims 1 to 3, further comprising:

and sending the service alarm information to an alarm terminal corresponding to the level to which the abnormal monitoring object belongs.

5. The method of claim 4, further comprising:

responding to a display instruction aiming at a monitoring information inquiry page, and displaying the monitoring information inquiry page;

in response to an information query instruction, acquiring a query object and an identity of a query person in the monitoring information query page, where the identity corresponds to at least one hierarchy, and the person indicated by the identity has a right to view monitoring information of the corresponding hierarchy, and the query object includes: a target monitoring object and/or target hierarchy;

when the hierarchy corresponding to the identity is consistent with the hierarchy of the query object, displaying a query result page, wherein the query result page comprises: and monitoring information of the query object and/or monitoring information of each monitoring object associated with the query object in the association relation.

6. The method according to any one of claims 1 to 3, wherein the monitoring object of the user layer comprises: a terminal for sending the service request; the monitoring object of the service layer comprises: the interface is used for providing services required by the target software in the server; the monitoring objects of the infrastructure layer comprise: the server side comprises a computing unit and/or a storage unit, and the monitoring information comprises: monitoring object identification and monitoring indexes, wherein the monitoring indexes of the monitoring object of the user layer comprise: the information displayed by the terminal sending the service request, and the monitoring information of the monitoring object of the service layer includes: the monitoring information of the monitoring object of the infrastructure layer comprises: the operational data of the object is monitored.

7. The method according to any one of claims 1 to 3, wherein the monitoring object of the service layer comprises a plurality of micro service nodes, and the association relationship of each micro service node of the service layer is determined based on the call relationship of each micro service node.

8. The data processing device is applied to monitoring equipment, wherein the monitoring equipment is used for monitoring the running state of target software, and the target software is designed based on a layered architecture; the device comprises:

9. An electronic device is characterized by comprising a processor, a communication interface, a memory and a communication bus, wherein the processor and the communication interface are used for realizing mutual communication by the memory through the communication bus;

a memory for storing a computer program;

a processor for implementing the method steps of any one of claims 1 to 7 when executing a program stored in the memory.

10. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the method according to any one of claims 1 to 7.