CN115834449A - Method for discovering and managing collector equipment in industrial audit system - Google Patents

Abstract

The invention discloses a method for discovering and managing collector equipment in an industrial audit system, which comprises the following steps: the audit center creates persistent nodes Box; wherein, the persistent nodes Box are permanent nodes; creating a temporary node at initialization; based on the monitoring principle of temporary nodes and zookeeper nodes, child nodes Box/Box 1 are created for persistent nodes, child nodes Box/Box 1/request and child nodes Box/Box 1/response are created for child nodes Box/Box 1/request, and therefore the auditing center can issue strategy data to the child nodes Box/Box 1/request and acquire node data processing results to the child nodes Box/Box 1/response. The invention can quickly discover the collector equipment, update the equipment resources and manage the strategy in time, and avoid inaccurate equipment discovery.

Description

Method for discovering and managing collector equipment in industrial audit system

Technical Field

The invention relates to the technical field of computers, in particular to a method for discovering and managing collector equipment in an industrial auditing system.

Background

With the development of the technology, industrial control audit monitoring products are deployed in an industrial system in a large scale, and monitoring analysis of an industrial network is achieved. The deployment mode usually adopts a central node to deploy an audit center system, sub-nodes deploy audit collector systems, and the collectors report the collected industrial system network data to the audit center for unified analysis and processing.

At present, in order to facilitate the discovery of collector equipment by an audit center and perform unified management, including monitoring the on-line state and the resource utilization rate of a collector, issuing a strategy becomes an important requirement. However, in the existing device discovery technology, address discovery devices reachable through a scanning network are inaccurate in device discovery, and a large number of devices which do not meet requirements are scanned; and the status detection and policy management of the scanned devices cannot be taken into account.

Disclosure of Invention

In view of this, the invention provides a method for discovering and managing collector devices in an industrial audit system, which is based on a zookeeper data model, and performs discovery, monitoring and management of devices by creating a node chain and monitoring node states, so as to update device resources in time and avoid the problems that device discovery is not accurate and strategies cannot be uniformly managed.

The invention discloses a method for discovering and managing collector equipment in an industrial audit system, which comprises the following steps:

step 1: the audit center creates persistent nodes Box; wherein, the persistent nodes Box are permanent nodes;

and 2, step: creating a temporary node at initialization;

and step 3: based on the monitoring principle of the temporary node and the zookeeper node, a child node Box/Box ID1 is created for the persistent node Box, a child node Box/Box ID1/request and a child node Box/Box ID1/response are created for the child node Box/Box ID1, so that an auditing center issues policy data to the child node Box/Box ID1/request and acquires a node data processing result from the child node Box/Box ID 1/response.

Further, the temporary node stores key parameters of collector equipment; the key parameters include a serial number, an IP address, a device name, a port number, and an online status.

Further, after the step 2 and before the step 3, the method further includes:

and configuring an IP (Internet protocol) pointing to the IP (Internet protocol), namely an IP address of an audit center, in the collector equipment, establishing a session with the persistent nodes Box, and synchronizing the key parameters of the collector equipment stored in the temporary nodes to the persistent nodes Box.

Further, the step 3 comprises:

step 31: the audit center creates a sub-node Box/Box ID1 for the persistent node Box based on the key parameters; wherein, the child node Box/Box ID1 is the serial number of the collector device;

step 32: the auditing center creates temporary nodes of Box/Box ID1/heartBeat for the child nodes and sets a monitor for monitoring the online state of the collector equipment and the connection state of the equipment network port;

step 33: the auditing center creates child nodes Box/Box ID1/request and child nodes Box/Box ID1/response for the child nodes, and the child nodes Box/Box ID1/response are used for sending down strategy data and obtaining node data processing results.

Further, the step 31 further includes:

a monitor is provided for the child node Boxes/BoxID1 for monitoring data changes of the child node Boxes/BoxID 1.

Further, after the step 32 and before the step 33, the method further includes:

according to the zookeeper node monitoring principle, collector equipment can be automatically found in an asset list of an audit center, and key parameters of the collector equipment are stored in a warehouse.

Further, the step 32 further includes:

the temporary node is deleted when the session is disconnected, a message is pushed to the persistent nodes Box, and the persistent nodes Box monitor that the temporary node is deleted, and then the state of the collector device is set to be offline.

Further, the step 33 includes:

the audit center sends the strategy data to the child node Box/Box ID1, the collector device monitors the child node Box/Box ID1/request to obtain the issued strategy data, and writes back the response data to the child node Box/Box ID1/response, and the audit center server monitors the Box/Box ID1/response to obtain the data processing response result.

Due to the adoption of the technical scheme, the invention has the following advantages: the invention can quickly discover the collector equipment, update the equipment resources and manage the strategy in time, and avoid inaccurate equipment discovery.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments described in the embodiments of the present invention, and it is obvious for those skilled in the art that other drawings can be obtained according to the drawings.

Fig. 1 is a schematic flowchart of a method for discovering and managing collector devices in an industrial audit system according to an embodiment of the present invention;

fig. 2 is a schematic diagram of a discovery and management device according to an embodiment of the present invention.

Detailed Description

The present invention will be further described with reference to the accompanying drawings and examples, it being understood that the examples described are only some of the examples and are not intended to limit the invention to the embodiments described herein. All other embodiments available to those of ordinary skill in the art are intended to be within the scope of the embodiments of the present invention.

Referring to fig. 1 and fig. 2, the present invention provides an embodiment of a method for discovering and managing collector devices in an industrial auditing system, which includes the following steps:

s1: the audit center creates persistent nodes Box; wherein, the persistent nodes Box are permanent nodes;

s2: creating a temporary node at initialization;

s3: based on the monitoring principle of temporary nodes and zookeeper nodes, child nodes Box/Box ID1 are created for persistent nodes Box, child nodes Box/Box ID1/request and child nodes Box/Box ID1/response are created for child nodes Box/Box ID1, and therefore the auditing center can issue strategy data to the child nodes Box/Box ID1/request and obtain node data processing results to the child nodes Box/Box ID 1/response.

In this embodiment, the temporary node stores key parameters of the collector device; the key parameters include serial number, IP address, device name, port number, and presence status.

In this embodiment, after S2 and before S3, the method further includes:

and configuring an IP (Internet protocol) pointing to the IP (Internet protocol), namely an IP address of an audit center, in the collector equipment, establishing a session with the persistent nodes Box, and synchronizing the key parameters of the collector equipment stored in the temporary nodes to the persistent nodes Box.

In this embodiment, S3 includes:

s31: the audit center creates a sub-node Box/Box ID1 for the persistent node Box based on the key parameters; wherein, the child node Box/Box ID1 is the serial number of the collector device;

s32: the auditing center creates temporary nodes of Box/Box ID1/heartBeat for the child nodes and sets a monitor for monitoring the online state of the collector equipment and the connection state of the equipment network port;

s33: the audit center creates child nodes Box/Box ID1/request and child nodes Box/Box ID1/response for child nodes, and the child nodes Box/Box ID1/response are used for sending down strategy data and obtaining node data processing results.

In this embodiment, S31 further includes:

a monitor is set for the child node Box/Box ID1 for monitoring data changes of the child node Box/Box ID 1.

In this embodiment, after S32 and before S33, the method further includes:

according to the zookeeper node monitoring principle, collector equipment can be automatically found in an asset list of an audit center, and key parameters of the collector equipment are stored in a warehouse.

In this embodiment, S32 further includes:

the temporary node is deleted when the session is disconnected, a message is pushed to the persistent nodes Box, and the persistent nodes Box monitor that the temporary node is deleted, and then the state of the collector device is set to be offline.

In this embodiment, S33 includes:

the audit center sends the strategy data to the child node Box/Box ID1, the collector device monitors the child node Box/Box ID1/request to obtain the issued strategy data, and writes back the response data to the child node Box/Box ID1/response, and the audit center server monitors the Box/Box ID1/response to obtain the data processing response result.

Finally, it should be noted that: the above embodiments are only for illustrating the technical solutions of the present invention and not for limiting the same, and although the present invention is described in detail with reference to the above embodiments, those of ordinary skill in the art should understand that: modifications and equivalents may be made to the embodiments of the invention without departing from the spirit and scope of the invention, which is to be covered by the claims.

Claims (8)

1. A method for discovering and managing collector equipment in an industrial audit system is characterized by comprising the following steps:

step 1: the audit center creates persistent nodes Box; wherein, the persistent nodes Box are permanent nodes;

step 2: creating a temporary node at initialization;

and step 3: based on the monitoring principle of the temporary node and the zookeeper node, a child node Box/Box ID1 is created for the persistent node Box, a child node Box/Box ID1/request and a child node Box/Box ID1/response are created for the child node Box/Box ID1, so that an auditing center issues policy data to the child node Box/Box ID1/request and acquires a node data processing result from the child node Box/Box ID 1/response.

2. The method of claim 1, wherein the temporary node stores key parameters of collector devices; the key parameters include a serial number, an IP address, a device name, a port number, and an online status.

3. The method of claim 2, wherein after step 2 and before step 3, further comprising:

and configuring an IP (Internet protocol) pointing to the IP (Internet protocol), namely an IP address of an audit center, in the collector equipment, establishing a session with the persistent nodes Box, and synchronizing the key parameters of the collector equipment stored in the temporary nodes to the persistent nodes Box.

4. The method of claim 3, wherein step 3 comprises:

step 31: the auditing center creates a child node Boxes/BoxID1 for the persistent node Boxes based on the key parameters; wherein, the child node Box/Box ID1 is the serial number of the collector device;

step 32: the auditing center creates temporary nodes of Box/Box ID1/heartBeat for the child nodes and sets a monitor for monitoring the online state of the collector equipment and the connection state of the equipment network port;

step 33: the auditing center creates child nodes Box/Box ID1/request and child nodes Box/Box ID1/response for the child nodes, and the child nodes Box/Box ID1/response are used for sending down strategy data and obtaining node data processing results.

5. The method of claim 4, wherein the step 31 further comprises:

a monitor is provided for the child node Boxes/BoxID1 for monitoring data changes of the child node Boxes/BoxID 1.

6. The method of claim 4, wherein after the step 32 and before the step 33, further comprising:

according to the zookeeper node monitoring principle, collector equipment can be automatically found in an asset list of an audit center, and key parameters of the collector equipment are stored in a warehouse.

7. The method of claim 4, wherein the step 32 further comprises:

the temporary node is deleted when the session is disconnected, a message is pushed to the persistent nodes Box, and the persistent nodes Box monitor that the temporary node is deleted, and then the state of the collector device is set to be offline.

8. The method of claim 4, wherein the step 33 comprises:

the audit center sends the strategy data to the child node Box/Box ID1, the collector device monitors the child node Box/Box ID1/request to obtain the issued strategy data, and writes back the response data to the child node Box/Box ID1/response, and the audit center server monitors the Box/Box ID1/response to obtain the data processing response result.

Images