CN115328736A - Probe deployment method, device, equipment and storage medium - Google Patents

Abstract

The invention discloses a probe deployment method, a device, equipment and a storage medium, wherein the method comprises the following steps: when the application program is monitored to be started, reading and analyzing a monitoring rule character string from a local file to obtain a monitoring rule list; traversing regular expressions in the monitoring rule list, and determining a target expression matched with the application program from the regular expressions; wherein the regular expression comprises: monitoring attributes, feature names, operational characters and expression key values; and performing probe deployment on the application program according to the target expression. By the method, the labor cost for deploying the probe for the application program is saved, and the probe deployment efficiency and the probe deployment precision are improved.

Description

A probe deployment method, device, equipment and storage medium

technical field

Embodiments of the present invention relate to the field of computers, and in particular, to a probe deployment method, device, equipment, and storage medium.

Background technique

The probe technology can realize the script file detecting the sensitive information of the server, and realize the purpose of monitoring the application program on the server. Currently, when configuring probes for applications, staff are required to deploy probes for different applications according to configuration files, and the efficiency of probe deployment is low. When staff face a large number of server clusters, a large number of repetitive operations are prone to probe deployment errors. Therefore, how to improve the efficiency and accuracy of probe deployment is a problem that needs to be solved.

Contents of the invention

The present invention provides a probe deployment method, device, equipment and storage medium, which saves the labor cost of deploying probes for application programs, and improves the probe deployment efficiency and probe deployment accuracy.

According to an aspect of the present invention, a probe deployment method is provided, including:

When it is detected that the application starts, read and parse the monitoring rule string from the local file to obtain a list of monitoring rules;

Traverse the regular expressions in the monitoring rule list, and determine the target expression matching the application program from the regular expressions; wherein, the regular expressions include: monitoring attributes, feature names, operators and expressions type key value;

Probe deployment is performed on the application program according to the target expression.

According to another aspect of the present invention, a probe deployment device is provided, the device comprising:

The monitoring rule list acquisition module is used to read and parse the monitoring rule string from the local file to obtain the monitoring rule list when the monitoring application starts;

A target expression acquisition module, configured to traverse the regular expressions in the monitoring rule list, and determine a target expression matching the application program from the regular expressions; wherein, the regular expressions include: monitoring attributes , feature names, operators, and expression keys;

A probe deployment module, configured to perform probe deployment on the application program according to the target expression.

According to another aspect of the present invention, an electronic device is provided, and the electronic device includes:

at least one processor; and

a memory communicatively coupled to the at least one processor; wherein,

The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor, so that the at least one processor can execute the method described in any embodiment of the present invention. Probe deployment method.

According to another aspect of the present invention, a computer-readable storage medium is provided, the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement any of the embodiments of the present invention when executed. The probe deployment method.

In the technical solution of the embodiment of the present invention, when the application program is detected to be started, the monitoring rule string is read and parsed from the local file to obtain the monitoring rule list; the regular expressions in the monitoring rule list are traversed to determine from the regular expressions The target expression matching the application; where the regular expression includes: monitoring attributes, feature names, operators, and expression key values; according to the target expression, the application is deployed as a probe. The above solution solves the problem of low deployment efficiency and easy occurrence of probe deployment errors when staff deploy probes for application programs by modifying configuration files. By monitoring the regular expressions in the rule list, the probe deployment mode of the application is determined, which saves the labor cost of deploying probes for the application, and improves the efficiency and accuracy of probe deployment.

It should be understood that the content described in this section is not intended to identify key or important features of the embodiments of the present invention, nor is it intended to limit the scope of the present invention. Other features of the present invention will be easily understood from the following description.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained based on these drawings without creative effort.

FIG. 1 is a flowchart of a probe deployment method provided in Embodiment 1 of the present invention;

FIG. 2 is a flowchart of a probe deployment method provided in Embodiment 2 of the present invention;

FIG. 3 is a schematic structural diagram of a probe deployment device provided by Embodiment 3 of the present invention;

FIG. 4 is a schematic structural diagram of an electronic device provided by Embodiment 4 of the present invention.

Detailed ways

In order to enable those skilled in the art to better understand the solutions of the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only It is an embodiment of a part of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts shall fall within the protection scope of the present invention.

It should be noted that the terms "candidate" and "target" in the description and claims of the present invention and the above drawings are used to distinguish similar objects, and not necessarily used to describe a specific order or sequence. It is to be understood that the data so used are interchangeable under appropriate circumstances such that the embodiments of the invention described herein can be practiced in sequences other than those illustrated or described herein. Furthermore, the terms "comprising" and "etc", as well as any variations thereof, are intended to cover a non-exclusive inclusion, for example, a process, method, system, product or device comprising a sequence of steps or elements need not be limited to the expressly listed instead, may include other steps or elements not explicitly listed or inherent to the process, method, product or apparatus.

Embodiment one

FIG. 1 is a flow chart of a probe deployment method provided by Embodiment 1 of the present invention, and this embodiment is applicable to the case of deploying probes to an application program. The method can be executed by a probe deployment device, which can be implemented in the form of hardware and/or software. The probe deployment device can be configured in an electronic device, such as a probe deployment system for an electronic device. The probe deployment system includes: a monitoring rule synchronization module, a driver module and an identification module.

As shown in Figure 1, the method includes:

S110. When it is detected that the application is started, read and parse the monitoring rule string from the local file to obtain a list of monitoring rules.

Wherein, the application program may be any process started on the device monitored by the probe deployment system. The local file refers to the file used to store the monitoring rule string in the local storage space of the probe deployment system. The monitoring rule string is a character string that can be used to represent a monitoring rule. The monitoring rule list is a list for recording rule expressions, and the rule expressions are expressions for representing monitoring rule information.

Specifically, the monitoring rule synchronization module requests the back-end server to obtain the monitoring rule information corresponding to each application program stored in the back-end server, and converts the obtained monitoring rule information into a monitoring rule string according to the specified data conversion format, and Store monitoring rule strings in a local file.

When it is detected that the device starts the application program, the identification module is loaded for the application program, the monitoring rule string in the local file is read through the identification module, and the monitoring rule string is parsed to obtain the monitoring rule expression and monitoring rule information, and The monitoring rule expression and monitoring rule information are correspondingly stored in the monitoring rule list. The list of monitoring rules is shown in Table 1:

Table 1

Exemplarily, the loading method of the recognition module may be: add a mark to the application program through the driver module according to the process creation message; load the kernel dynamic library to the marked application program through the kernel module, and generate a kernel dynamic library loading completion message, and load the kernel dynamic library The dynamic library loading completion message is sent to the driver module; after the driver module determines that the kernel dynamic library loading completion message is received, the code segment of the loading identification module is added to the specified kernel function; the specified kernel function is called by the kernel module to load the application program Identification module.

S120. Traverse the regular expressions in the monitoring rule list, and determine a target expression matching the application program from the regular expressions.

Among them, the regular expressions include: monitoring attributes, feature names, operators and expression key values. Monitoring attributes are data that can characterize whether an application is monitored or not. The feature name refers to the name of the application corresponding to the regular expression. The expression key value refers to the value of the monitoring rule string corresponding to the regular expression. The operator refers to the expression key value specified in the regular expression and the data of the association relationship that the application program needs to have. Table 2 shows the description of the operators and their correspondences.

Table 2

Specifically, the metadata of the application program is extracted, and the metadata refers to data used to describe data attributes. Traverse the regular expressions in the monitoring rule list, and determine the target expression matching the application from the regular expressions according to the metadata of the application, the monitoring attributes of the regular expressions, feature names, operators, and expression key values.

S130. Perform probe deployment on the application program according to the target expression.

Wherein, deploying the probe to the application program includes: inserting the probe into the application program and not inserting the probe into the application program.

Specifically, according to the target expression, the program monitoring rules of the application specified in the target expression are determined. If the program monitoring rule is to monitor the application program, insert the probe into the application program; if the program monitoring rule is not to monitor the application program, then do not insert the probe into the application program.

Exemplarily, the probe deployment can be performed on the application program according to the monitoring attribute of the target expression. Specifically, it can be achieved through the following sub-steps:

S1301. Determine whether to monitor the application program according to the monitoring attribute of the target expression.

Specifically, the corresponding relationship between the monitoring attribute of the target expression and the program monitoring rule is set in advance, and whether to monitor the application is determined according to the monitoring attribute of the target expression and the corresponding relationship between the monitoring attribute and the program monitoring rule.

Exemplarily, if the monitoring attribute of the target expression is ENABLE, it is determined to monitor the application program; if the monitoring attribute of the target expression is DISABLE, it is determined not to monitor the application program.

Specifically, the monitoring attributes of the target expression include ENABLE and DISABLE. If the monitoring attribute of the target expression is ENABLE, the program monitoring rule is to monitor the application program; if the monitoring attribute of the target expression is DISABLE, the program monitoring rule is Applications are not monitored.

S1302. If yes, when deploying the probe to the application program, insert the probe into the application program.

Correspondingly, if it is determined not to monitor the application program according to the monitoring attribute of the target expression, no probe is inserted into the application program when the probe is deployed on the application program.

It can be understood that, according to the monitoring attribute of the target expression, it is determined whether to monitor the application program, and when the application program needs to be monitored, a probe is inserted into the application program. The technical effect of automatically deploying probes for application programs can be realized, and the efficiency of probe deployment is improved.

In the technical solution provided by this embodiment, when the application program is detected to be started, the monitoring rule string is read and parsed from the local file to obtain the monitoring rule list; the regular expressions in the monitoring rule list are traversed to determine from the regular expressions The target expression matching the application; where the regular expression includes: monitoring attributes, feature names, operators, and expression key values; according to the target expression, the application is deployed as a probe. The above solution solves the problem of low deployment efficiency and easy occurrence of probe deployment errors when staff deploy probes for application programs by modifying configuration files. By monitoring the regular expressions in the rule list, the probe deployment mode of the application is determined, which saves the labor cost of deploying probes for the application, and improves the efficiency and accuracy of probe deployment.

Exemplarily, on the basis of the above embodiments, it is also possible to obtain updated update rule information in the backend server every other time period; and update the monitoring rule string stored in the local file according to the update rule information.

Wherein, the time period refers to the time interval between the probe deployment system acquiring updated update rule information from the back-end server every two times. The update rule information refers to the monitoring rule information updated by the backend server, and the backend server will update the monitoring rule information of the application program in real time according to the actual situation of the application program.

Specifically, a time period is set according to actual requirements, and the probe deployment system obtains update rule information updated by the back-end server within the time period from the back-end server every other time period. The update rule information is converted into an update rule string according to a prescribed data conversion format, and the update rule string is stored in a local file, so as to update the monitoring rule string stored in the local file. The update rule character string refers to a character string that can be used to represent update rule information.

The probe deployment system updates the monitoring rule string stored in the local file according to the updated update rule information in the back-end server every other time period, which can realize the monitoring rule string in the local file and the monitoring information in the back-end server Synchronous update ensures the integrity of monitoring rule strings in local files.

Embodiment two

Fig. 2 is a flow chart of a probe deployment method provided by Embodiment 2 of the present invention. This embodiment is optimized on the basis of the above embodiments, and a rule expression in the traversal monitoring rule list is given, from A preferred implementation of regular expressions to determine target expressions that match the application. Specifically, as shown in Figure 2, the method includes:

S210. When it is detected that the application is started, read and parse the monitoring rule string from the local file to obtain a list of monitoring rules.

S220. Determine data characteristics of the application program, and determine metadata of the application program according to the data characteristics.

Wherein, the data feature of the application program includes: a feature name and a feature value of the application program. Characteristic value refers to the value of the corresponding characteristic of the application. The corresponding meanings of the feature names and feature values of the application are shown in Table 3:

table 3

Specifically, determine the data characteristics of the application according to the startup command line of the application, the name of the application, the content of the configuration file, and the executable file, arrange the data characteristics of the application into a list of characteristics, and use the list of characteristics as the metadata of the application .

S230. Traverse the regular expression in the monitoring rule list, determine the regular expression matching the data feature according to the data feature, the feature name, operator and expression key value of the regular expression, and express the rule expression matching the data feature formula as the target expression to match against the application.

Specifically, traverse the regular expressions in the monitoring rule list, match the data features with the feature names and expression key values of the regular expressions based on the operators of the regular expressions, determine the regular expressions that match the data features, and Use regular expressions that match data characteristics as target expressions that match applications.

Exemplarily, according to the regular expression in the monitoring rule list, the application name and program key value of the application in the data feature, the target expression matching the application can be determined from the regular expression. Specifically, it can be achieved through the following sub-steps:

S2301. Determine the application name and program key value of the application program according to the data characteristics.

Specifically, the data feature includes the application name and program key value of the application program, so the application name and program key value of the application program can be determined directly according to the data feature.

S2302. Traversing the regular expressions in the monitoring rule list, matching the application name with the feature name in the regular expression, determining the target name consistent with the application name from the feature names, and determining the regular expression corresponding to the target name as a candidate expression.

Wherein, the target name refers to the feature name consistent with the application name in the regular expression.

Specifically, traverse the regular expression in the monitoring rule list, determine the feature name in the regular expression, and match the application name with the feature name in the regular expression, select the target name from the feature name, and match the target name corresponding to regular expressions as candidate expressions.

S2303. Determine whether the data feature matches the candidate expression according to the program key value of the application program, the operator in the candidate expression, and the expression key value.

Exemplarily, the method for determining whether the data feature matches the candidate expression may be: determine whether the association relationship between the program key value and the expression key value conforms to the definition of the operator, and if so, determine that the data feature matches the candidate expression success.

Specifically, determine whether the association relationship between the program key value of the application program and the expression key value of the candidate expression conforms to the definition of the operator in the candidate expression, if so, determine that the data feature matches the candidate expression; if not , it is determined that the data feature does not match the candidate expression.

For example, traverse the regular expressions in the monitoring rule list, if the candidate expressions are DISABLE, EXE_NAME, EQUALS, php-cgi, where EXE_NAME is the target name, and php-cgi is the expression key value of the candidate expression. EQUALS is the operator in the candidate expression, which means "equal to". Match the feature name of the application equal to the feature value of EXE_NAME and the expression key value of the candidate expression. If the corresponding feature value of the application is equal to php-cgi, the data feature matches the candidate expression; if the corresponding feature of the application If the value is not equal to php-cgi, the data feature does not match the candidate expression.

S2304. If yes, use the candidate expression as the target expression matching the application program.

Specifically, if the data feature matches the candidate expression, the candidate expression is used as the target expression matching the application program.

In the above scheme, according to the application name in the data feature and the feature name in the regular expression, determine the candidate expression from the regular expression, and then determine whether the candidate expression can be used as the target expression according to the program key value of the application, and improve In order to ensure the accuracy of the selected target expression.

S240. Perform probe deployment on the application program according to the target expression.

In the technical solution of this embodiment, when it is detected that the application is started, the string of monitoring rules is read and parsed from the local file to obtain a list of monitoring rules; the metadata of the application is determined, and the data characteristics of the metadata are extracted; the traversal monitoring The regular expression in the rule list, according to the data feature, the feature name of the regular expression, the operator and the expression key value, determines the regular expression that matches the data feature, and uses the regular expression that matches the data feature as an application The target expression matched by the program; according to the target expression, the probe deployment is performed on the application. In the above solution, according to the data characteristics of the metadata of the application and the matching result of the regular expression, the target expression is determined from the regular expression, and the application is deployed as a probe according to the target expression, which realizes the application based on the metadata of the application. And the regular expressions in the monitoring rule list can automatically deploy probes to the application, saving labor costs and further improving the accuracy of probe deployment.

Embodiment three

FIG. 3 is a schematic structural diagram of a probe deployment device provided by Embodiment 4 of the present invention. This embodiment is applicable to the situation where the probe is deployed to the application program. As shown in FIG. 3 , the probe deployment device includes: a monitoring rule list acquisition module 310 , a target expression acquisition module 320 and a probe deployment module 330 .

Wherein, the monitoring rule list obtaining module 310 is used for reading and parsing the monitoring rule character string from the local file to obtain the monitoring rule list when the monitoring application starts;

The target expression acquisition module 320 is used to traverse the regular expressions in the monitoring rule list, and determine the target expression matching the application program from the regular expressions; wherein, the regular expressions include: monitoring attributes, feature names, operators and expression key value;

The probe deployment module 330 is configured to perform probe deployment on the application program according to the target expression.

In the technical solution provided by this embodiment, when the application program is detected to be started, the monitoring rule string is read and parsed from the local file to obtain the monitoring rule list; the regular expressions in the monitoring rule list are traversed to determine from the regular expressions The target expression matching the application; where the regular expression includes: monitoring attributes, feature names, operators, and expression key values; according to the target expression, the application is deployed as a probe. The above solution solves the problem of low deployment efficiency and easy occurrence of probe deployment errors when staff deploy probes for application programs by modifying configuration files. By monitoring the regular expressions in the rule list, the probe deployment mode of the application is determined, which saves the labor cost of deploying probes for the application, and improves the efficiency and accuracy of probe deployment.

Exemplary, the target expression acquisition module 320 includes:

a data feature extraction unit configured to determine metadata of the application and extract data features of the metadata;

The target expression determining unit is used to traverse the regular expressions in the monitoring rule list, determine the regular expressions matching the data features according to the data features, the feature names, operators and expression key values of the regular expressions, and combine them with The regular expression matched by the data feature is used as the target expression matched with the application.

Further, the target expression determination unit is specifically used for:

Determine the application name and program key value of the application according to the data characteristics;

Traverse the regular expression in the monitoring rule list, match the application name with the feature name in the regular expression, determine the target name consistent with the application name from the feature name, and determine the regular expression corresponding to the target name as a candidate expression ;

Determine whether the data feature matches the candidate expression based on the program key value of the application, the operator in the candidate expression, and the expression key value;

If so, the candidate expression is used as the target expression matching the application.

Among them, according to the program key value of the application, the operator in the candidate expression, and the expression key value, determine whether the data feature matches the candidate expression, including:

It is determined whether the association relationship between the program key value and the expression key value conforms to the definition of the operator, and if so, it is determined that the data feature matches the candidate expression successfully.

Exemplary, the probe deployment module 330 includes:

A monitoring attribute acquisition unit, configured to determine whether to monitor the application program according to the monitoring attribute of the target expression;

The probe deployment unit is configured to insert a probe into the application program when the application program is determined to be monitored, when the probe deployment is performed on the application program.

Exemplarily, the monitoring attribute acquisition unit is specifically used for:

If the monitoring attribute of the target expression is ENABLE, it is determined to monitor the application;

If the monitor attribute of the target expression is DISABLE, it is determined not to monitor the application.

The probe deployment device provided in this embodiment can be applied to the probe deployment method provided in any of the above embodiments, and has corresponding functions and beneficial effects.

Embodiment Four

FIG. 4 shows a schematic structural diagram of an electronic device 10 that can be used to implement an embodiment of the present invention. Electronic device is intended to represent various forms of digital computers, such as laptops, desktops, workstations, personal digital assistants, servers, blade servers, mainframes, and other suitable computers. Electronic devices may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (eg, helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions, are by way of example only, and are not intended to limit implementations of the inventions described and/or claimed herein.

As shown in FIG. 4, the electronic device 10 includes at least one processor 11, and a memory connected in communication with the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores There is a computer program executable by at least one processor, and the processor 11 can operate according to a computer program stored in a read-only memory (ROM) 12 or loaded from a storage unit 18 into a random access memory (RAM) 13. Various appropriate actions and processes are performed. In the RAM 13, various programs and data necessary for the operation of the electronic device 10 are also stored. The processor 11 , ROM 12 , and RAM 13 are connected to each other through a bus 14 . An input/output (I/O) interface 15 is also connected to the bus 14 .

Multiple components in the electronic device 10 are connected to the I/O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a magnetic disk, an optical disk etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, and the like. The communication unit 19 allows the electronic device 10 to exchange information/data with other devices through a computer network such as the Internet and/or various telecommunication networks.

Processor 11 may be various general and/or special purpose processing components having processing and computing capabilities. Some examples of processor 11 include, but are not limited to, central processing units (CPUs), graphics processing units (GPUs), various dedicated artificial intelligence (AI) computing chips, various processors that run machine learning model algorithms, digital signal processing processor (DSP), and any suitable processor, controller, microcontroller, etc. The processor 11 executes various methods and processes described above, such as the probe deployment method.

In some embodiments, the probe deployment method may be implemented as a computer program tangibly embodied in a computer-readable storage medium, such as the storage unit 18 . In some embodiments, part or all of the computer program may be loaded and/or installed on the electronic device 10 via the ROM 12 and/or the communication unit 19 . When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the probe deployment method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured in any other suitable manner (for example, by means of firmware) to execute the probe deployment method.

Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips Implemented in a system of systems (SOC), load programmable logic device (CPLD), computer hardware, firmware, software, and/or combinations thereof. These various embodiments may include being implemented in one or more computer programs executable and/or interpreted on a programmable system including at least one programmable processor, the programmable processor Can be special-purpose or general-purpose programmable processor, can receive data and instruction from storage system, at least one input device, and at least one output device, and transmit data and instruction to this storage system, this at least one input device, and this at least one output device an output device.

Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus, so that the computer program causes the functions/operations specified in the flowcharts and/or block diagrams to be implemented when executed by the processor. A computer program may execute entirely on the machine, partly on the machine, as a stand-alone software package partly on the machine and partly on a remote machine or entirely on the remote machine or server.

In the context of the present invention, a computer readable storage medium may be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus or device. A computer readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. Alternatively, a computer readable storage medium may be a machine readable signal medium. More specific examples of machine-readable storage media would include one or more wire-based electrical connections, portable computer discs, hard drives, random access memory (RAM), read only memory (ROM), erasable programmable read only memory (EPROM or flash memory), optical fiber, compact disk read only memory (CD-ROM), optical storage, magnetic storage, or any suitable combination of the foregoing.

In order to provide interaction with the user, the systems and techniques described herein can be implemented on an electronic device having a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display)) for displaying information to the user. monitor); and a keyboard and pointing device (eg, a mouse or a trackball) through which the user can provide input to the electronic device. Other kinds of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and can be in any form (including Acoustic input, speech input or, tactile input) to receive input from the user.

The systems and techniques described herein can be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., as a a user computer having a graphical user interface or web browser through which a user can interact with embodiments of the systems and techniques described herein), or including such backend components, middleware components, Or any combination of front-end components in a computing system. The components of the system can be interconnected by any form or medium of digital data communication, eg, a communication network. Examples of communication networks include: local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

A computing system can include clients and servers. Clients and servers are generally remote from each other and typically interact through a communication network. The relationship of client and server arises by computer programs running on the respective computers and having a client-server relationship to each other. The server can be a cloud server, also known as a cloud computing server or a cloud host. It is a host product in the cloud computing service system to solve the problems of difficult management and weak business expansion in traditional physical hosts and VPS services. defect.

It should be understood that steps may be reordered, added or deleted using the various forms of flow shown above. For example, each step described in the present invention may be executed in parallel, sequentially, or in a different order, as long as the expected result of the technical solution of the present invention can be achieved, there is no limitation herein.

The above specific implementation methods do not constitute a limitation to the protection scope of the present invention. It should be apparent to those skilled in the art that various modifications, combinations, sub-combinations and substitutions may be made depending on design requirements and other factors. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (10)

1. A probe deployment method, characterized in that, comprising: When it is detected that the application starts, read and parse the monitoring rule string from the local file to obtain a list of monitoring rules; Traverse the regular expressions in the monitoring rule list, and determine the target expression matching the application program from the regular expressions; wherein, the regular expressions include: monitoring attributes, feature names, operators and expressions type key value; Probe deployment is performed on the application program according to the target expression. 2. The method according to claim 1, wherein the traversing the regular expressions in the monitoring rule list, and determining the target expression matching the application program from the regular expressions comprises: determining data characteristics of the application program, and determining metadata of the application program according to the data characteristics; Traverse the regular expressions in the monitoring rule list, determine the regular expressions matching the data features according to the data features, the feature names, operators and expression key values of the regular expressions, and combine them with The regular expression matched by the data feature is used as the target expression matched with the application program. 3. The method according to claim 2, wherein the traversal of the regular expressions in the monitoring rule list is performed according to the data feature, the feature name, the operator and the expression key of the regular expression value, determine the regular expression matching the data feature, and use the regular expression matching the data feature as the target expression matching the application program, including: Determine the application name and program key value of the application program according to the data characteristics; Traverse the regular expressions in the monitoring rule list, match the application name with the feature names in the regular expressions, determine the target name consistent with the application name from the feature names, and determine the The regular expression corresponding to the target name is a candidate expression; determining whether the data feature matches the candidate expression according to the program key value of the application program, the operator in the candidate expression, and the expression key value; If yes, the candidate expression is used as the target expression matching the application program. 4. The method according to claim 3, wherein, according to the program key value of the application program, the operator and the expression key value in the candidate expression, it is determined whether the data feature is consistent with the Candidate expression matches described above, including: Determine whether the association relationship between the program key and the expression key conforms to the definition of the operator, and if so, determine that the data feature matches the candidate expression successfully. 5. The method according to claim 1, wherein said deploying probes to said application program according to said target expression comprises: Determine whether to monitor the application program according to the monitoring attribute of the target expression; If yes, when the probe is deployed on the application, the probe is inserted into the application. 6. The method according to claim 5, wherein the determining whether to monitor the application program according to the monitoring attribute of the target expression comprises: If the monitoring attribute of the target expression is ENABLE, it is determined to monitor the application program; If the monitoring attribute of the target expression is DISABLE, it is determined not to monitor the application program. 7. The method of claim 1, further comprising: Obtain the update rule information updated in the backend server every time period; The monitoring rule string stored in the local file is updated according to the update rule information. 8. A probe deployment device, comprising: The monitoring rule list acquisition module is used to read and parse the monitoring rule string from the local file to obtain the monitoring rule list when the monitoring application starts; A target expression acquisition module, configured to traverse the regular expressions in the monitoring rule list, and determine a target expression matching the application program from the regular expressions; wherein, the regular expressions include: monitoring attributes , feature names, operators, and expression keys; A probe deployment module, configured to perform probe deployment on the application program according to the target expression. 9. An electronic device, characterized in that the electronic device comprises: at least one processor; and a memory communicatively coupled to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, the computer program is executed by the at least one processor, so that the at least one processor can perform any one of claims 1-7 The described probe deployment method. 10. A computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the method described in any one of claims 1-7 when executed. Probe deployment method.

Images