CN117155755A - Alarm information processing method and device, electronic equipment and storage medium - Google Patents
Alarm information processing method and device, electronic equipment and storage medium Download PDFInfo
- Publication number
- CN117155755A CN117155755A CN202311103425.0A CN202311103425A CN117155755A CN 117155755 A CN117155755 A CN 117155755A CN 202311103425 A CN202311103425 A CN 202311103425A CN 117155755 A CN117155755 A CN 117155755A
- Authority
- CN
- China
- Prior art keywords
- alarm
- information
- alarm information
- category
- association
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 230000010365 information processing Effects 0.000 title claims abstract description 33
- 238000003672 processing method Methods 0.000 title claims abstract description 24
- 238000012545 processing Methods 0.000 claims abstract description 87
- 238000012423 maintenance Methods 0.000 claims abstract description 33
- 238000000034 method Methods 0.000 claims abstract description 25
- 238000011084 recovery Methods 0.000 claims description 18
- 238000004590 computer program Methods 0.000 claims description 16
- 230000004931 aggregating effect Effects 0.000 claims description 5
- 230000004044 response Effects 0.000 claims description 5
- 230000000694 effects Effects 0.000 abstract description 6
- 238000004891 communication Methods 0.000 description 12
- 238000010586 diagram Methods 0.000 description 6
- 230000006399 behavior Effects 0.000 description 5
- 230000005540 biological transmission Effects 0.000 description 5
- 230000008859 change Effects 0.000 description 4
- 230000006870 function Effects 0.000 description 4
- 230000002776 aggregation Effects 0.000 description 3
- 238000004220 aggregation Methods 0.000 description 3
- 230000006835 compression Effects 0.000 description 3
- 238000007906 compression Methods 0.000 description 3
- 238000001914 filtration Methods 0.000 description 3
- 230000003287 optical effect Effects 0.000 description 3
- 230000008569 process Effects 0.000 description 3
- 230000005856 abnormality Effects 0.000 description 2
- 238000013145 classification model Methods 0.000 description 2
- 230000003993 interaction Effects 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 230000001133 acceleration Effects 0.000 description 1
- 230000009471 action Effects 0.000 description 1
- 238000004458 analytical method Methods 0.000 description 1
- 238000003491 array Methods 0.000 description 1
- 238000013473 artificial intelligence Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000001413 cellular effect Effects 0.000 description 1
- 238000004140 cleaning Methods 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 239000011521 glass Substances 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 238000010801 machine learning Methods 0.000 description 1
- 239000013307 optical fiber Substances 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 230000001953 sensory effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000009466 transformation Effects 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
- G06F11/324—Display of status information
- G06F11/327—Alarm or error message display
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F18/00—Pattern recognition
- G06F18/20—Analysing
- G06F18/24—Classification techniques
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Data Mining & Analysis (AREA)
- General Physics & Mathematics (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Life Sciences & Earth Sciences (AREA)
- Signal Processing (AREA)
- Computer Networks & Wireless Communication (AREA)
- Quality & Reliability (AREA)
- Artificial Intelligence (AREA)
- Bioinformatics & Cheminformatics (AREA)
- Bioinformatics & Computational Biology (AREA)
- Computer Vision & Pattern Recognition (AREA)
- Evolutionary Biology (AREA)
- Evolutionary Computation (AREA)
- Alarm Systems (AREA)
Abstract
The invention discloses an alarm information processing method, an alarm information processing device, electronic equipment and a storage medium, and relates to the field of equipment operation and maintenance, wherein the method comprises the following steps: acquiring an alarm main body field of the first alarm information; acquiring equipment association information of the first alarm information according to the alarm main body field and the dynamic association dictionary, and acquiring an alarm category of the first alarm information according to the alarm main body field; and carrying out data processing on the first alarm information through a preset processing rule matched with the alarm category and the equipment association information so as to execute alarm forwarding operation according to a data processing result. The technical scheme of the embodiment of the invention not only realizes the classified acquisition and automatic forwarding of the alarm information, but also avoids the redundant sending of invalid alarms and repeated alarms, thereby not only reducing the sending quantity of the alarm information, but also avoiding the generation of alarm storm problems, leading an operation and maintenance party to acquire real alarms and important alarms in a targeted way and improving the alarm effect of the alarm information.
Description
Technical Field
The present invention relates to the field of equipment operation and maintenance, and in particular, to a method and apparatus for processing alarm information, an electronic device, and a storage medium.
Background
When each enterprise provides service to the outside, the service servers distributed in different areas often provide complete service functions, and in order to ensure the continuous availability and safety of the service services, F5 equipment is generally required to build service server clusters in different areas.
When the F5 equipment performs operations such as load balancing and virtual agent aiming at the port of the service server in the current area, the equipment monitors all alarm information generated by the service server, and therefore the alarm information is directly sent to all operation and maintenance parties or sent to an alarm processing platform, and the alarm processing platform finishes forwarding the alarm information.
However, the alarm information sending mechanism often generates a large amount of alarm information, even tens of thousands of alarm information can be sent in a single day, which not only can lead to redundant sending of a large number of invalid alarms and repeated alarms, but also can lead an operation and maintenance party to be unable to timely distinguish real alarms and important alarms.
Disclosure of Invention
The invention provides an alarm information processing method, an alarm information processing device, electronic equipment and a storage medium, which are used for solving the problem of excessive quantity of alarm information.
According to an aspect of the present invention, there is provided an alarm information processing method, including:
In response to acquiring the first alarm information, acquiring an alarm main body field of the first alarm information;
acquiring equipment association information of the first alarm information according to the alarm subject field and the dynamic association dictionary, and acquiring an alarm category of the first alarm information according to the alarm subject field;
and carrying out data processing on the first alarm information through a preset processing rule matched with the alarm category and the equipment association information so as to execute alarm forwarding operation according to a data processing result.
According to another aspect of the present invention, there is provided an alarm information processing apparatus including:
the alarm main body acquisition module is used for responding to the acquisition of the first alarm information and acquiring an alarm main body field of the first alarm information;
the alarm category acquisition module is used for acquiring equipment association information of the first alarm information according to the alarm subject field and the dynamic association dictionary, and acquiring the alarm category of the first alarm information according to the alarm subject field;
and the alarm forwarding execution module is used for carrying out data processing on the first alarm information through a preset processing rule matched with the alarm category and the equipment association information so as to execute alarm forwarding operation according to a data processing result.
According to another aspect of the present invention, there is provided an electronic apparatus including:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein,
the memory stores a computer program executable by the at least one processor to enable the at least one processor to perform the alert information processing method according to any one of the embodiments of the present invention.
According to another aspect of the present invention, there is provided a computer readable storage medium storing computer instructions for causing a processor to implement the alarm information processing method according to any one of the embodiments of the present invention when executed.
According to the technical scheme, after the equipment association information of the first alarm information is acquired according to the alarm main body field and the dynamic association dictionary of the first alarm information and the alarm category of the first alarm information is acquired according to the alarm main body field, the first alarm information is subjected to data processing according to the preset processing rules matched with the alarm category and the equipment association information, so that alarm forwarding operation is carried out according to the data processing result, classified acquisition and automatic forwarding of the alarm information are realized, redundant emission of invalid alarms and repeated alarms is avoided, the transmission quantity of the alarm information is reduced, the generation of alarm storm problems is avoided, the real alarms and important alarms are acquired by an operation and maintenance party in a targeted mode, and the alarm effect of the alarm information is improved.
It should be understood that the description in this section is not intended to identify key or critical features of the embodiments of the invention or to delineate the scope of the invention. Other features of the present invention will become apparent from the description that follows.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for the description of the embodiments will be briefly described below, and it is apparent that the drawings in the following description are only some embodiments of the present invention, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
FIG. 1A is a schematic diagram of an application scenario of an alarm information processing method according to an embodiment of the present invention;
FIG. 1B is a flowchart of an alarm information processing method according to a first embodiment of the present invention;
FIG. 2 is a flowchart of an alarm information processing method according to a second embodiment of the present invention;
FIG. 3 is a flowchart of an alarm information processing method according to a third embodiment of the present invention;
FIG. 4 is a schematic diagram of an alarm information processing apparatus according to a fourth embodiment of the present invention;
Fig. 5 is a schematic structural diagram of an electronic device implementing an alarm information processing method according to an embodiment of the present invention.
Detailed Description
In order that those skilled in the art will better understand the present invention, a technical solution in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in which it is apparent that the described embodiments are only some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the present invention without making any inventive effort, shall fall within the scope of the present invention.
It should be noted that the terms "first," "second," and the like in the description and the claims of the present invention and the above figures are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments of the invention described herein may be implemented in sequences other than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
The alarm information processing method provided by the invention can be applied to an application scene shown in FIG. 1A, and can be executed by an alarm processing platform in FIG. 1A, wherein the alarm processing platform can be configured in one or more pieces of electronic equipment; the service cluster is composed of one or more service servers, and each service server is used for processing one or more types of specific services, such as financial transaction services, user management services, asset management services and the like; each service cluster is in communication connection with a matched F5 cluster, so that cross-regional cluster construction is carried out through the F5 cluster, load balancing and virtual agent of different service ports in an area are further realized, and service sustainability of each service cluster and operation of disaster recovery switching functions are ensured; wherein each F5 cluster includes one or more F5 devices; the alarm processing platform is in communication connection with one or more F5 clusters, and the F5 clusters send the alarm information to the alarm processing platform after detecting the alarm information in the service clusters or receiving the alarm information sent by the service clusters.
F5 devices are related facilities for improving link performance and availability of wide area network link traffic management, which send out alarm information based on Trap mode of simple network management protocol (Simple Network Management Protocol, SNMP), and configure IP address and community name of the alarm processing platform (i.e. service identifier of SNMP) at corresponding output port (e.g. 162 port), the alarm processing platform is installed with Linux operating system, so as to construct a data transmission path for completing the alarm information from the F5 devices to the alarm processing platform; optionally, in the embodiment of the present invention, the number of F5 clusters and service clusters is not specifically limited, and the number of F5 devices in the F5 clusters and the number of service servers in the service clusters are not specifically limited, that is, the number parameters J, K, L, M, N, P and Q in fig. 1A are natural numbers greater than or equal to 1.
Example 1
Fig. 1B is a flowchart of an alarm information processing method according to a first embodiment of the present invention, where the embodiment is applicable to data processing of alarm information according to alarm types and device association information of the alarm information, where the alarm information processing apparatus may be implemented in hardware and/or software, and where the alarm information processing apparatus is configured on an alarm processing platform, where the alarm processing platform may be configured in an electronic device such as a server. As shown in fig. 1B, the method includes:
s101, acquiring an alarm main body field of the first alarm information in response to acquiring the first alarm information.
The F5 equipment can send out alarm information in a standard format in a 16-system data form, and the alarm processing platform can store the 16-system data through a Hex-format file; wherein, the content of the Hex file is a fixed regular code, and each row represents a Hex record; by parsing the Hex file, the 16-ary data therein can be converted into standard alert text in a specified format, for example, into standard number alert text in an 8-bit (Universal Character Set/Unicode Transformation Format, UTF-8) format.
Because the alarm information sent by the F5 equipment is standardized data information, the types of the component fields and the positions (namely serial numbers) of the fields in the character sequence are in a uniform format, the alarm main body fields in the alarm information are also in the same positions in the alarm information; the alarm processing platform analyzes the alarm main body field at the appointed position of the first alarm information through a regular analysis method; the alarm main body field may include a service address field, a service port field, an alarm feature field, an alarm duration field, a pool name field, and the like.
A service address field, which is an IP (Internet Protocol ) address of the service server where the alarm is located; a service port field, which is a port identifier of a service server where the alarm is located; an alarm feature field, which is descriptive information related to the current alarm, and which represents a specific alarm cause and an alarm event; an alarm duration field representing information such as a start time and duration of an alarm, for example, a disconnection duration, a login duration, a high load state duration, etc.; POOL (POOL) name field, which indicates Thread POOL (Thread POOL) and Resource POOL (Resource POOL) to which the current alert information relates.
S102, acquiring equipment association information of the first alarm information according to the alarm main body field and the dynamic association dictionary, and acquiring an alarm category of the first alarm information according to the alarm main body field.
The dynamic association dictionary records the relevant equipment information of each F5 equipment in the F5 cluster and each service server in the service cluster and the association relation among the equipment; for example, cluster names of F5 clusters and business clusters; the number, model, type and the like of F5 devices included in the F5 cluster, and the number, model, type and the like of service servers included in the service cluster; f5 equipment and service server IP address, port information and area; the method also comprises the identity information of the F5 equipment, namely whether the F5 equipment is a main node equipment or a standby node equipment.
Particularly, because the identity information of the F5 device is continuously changed according to the change of the service requirement, and meanwhile, the device address and the device port of the F5 device, and the service address and the service port of the service server may also be continuously changed along with the change of the network state, the dynamic association dictionary is in a dynamic update state, after each time the alarm information is acquired, and the alarm main field of the alarm information is acquired, the update operation of the dynamic association dictionary can be performed in advance, and then the device association information is acquired according to the dynamic association dictionary, so as to ensure that the accurate device association information is acquired. Thus, according to the alarm body field (e.g., the IP address of the service server), the device association information matched with the IP address is queried through the dynamic association dictionary, and the device association information can be used as the additional information of the first alarm information.
The alarm categories may include port failure alarms, port recovery alarms, device status alarms, background login alarms, etc.; the port fault alarm is an alarm sent when the port is unavailable (namely, the port state is down) due to the line fault; when the port is started and in a normal working state, the port state is "up"; the port resumes the alarm, namely the alarm sent when the port resumes from the unavailable fault state to the normal working state; the equipment state alarm is an alarm generated when the service server has equipment operation abnormality, for example, the appointed functional components cannot operate, the equipment operation load is too high, and the like; the background login alarm is a login alarm generated when a user logs in a service server.
After the alarm main body field of the first alarm information is acquired, the alarm category to which the first alarm information belongs can be determined by comparing the alarm main body field with the keywords of each alternative alarm category; the alarm classification model can be trained in advance, the alarm subject field is used as input data, the classification result of the alarm subject field is predicted through the alarm classification model, and the classification result is used as the alarm category of the first alarm information.
Optionally, in an embodiment of the present invention, the obtaining, according to the alarm body field, an alarm category of the first alarm information includes: and acquiring the alarm category of the first alarm information according to the hit number or hit rate of the alarm keyword set corresponding to each candidate alarm category respectively in the alarm main body field. Specifically, according to the data characteristics of each alternative alarm category, a plurality of alarm keywords may be preconfigured for each alternative alarm category, the number of alarm keywords between alarm categories may be equal or may be unequal, and after the alarm main body field of the first alarm information is acquired, the alarm main body field is in the alarm keyword set of each alarm category. The number or hit rate of hit alarm keywords determines the alarm category to which the first alarm information belongs, so that alarm classification under multiple alarm keywords is realized, and the classification accuracy of the first alarm information is improved.
S103, carrying out data processing on the first alarm information through a preset processing rule matched with the alarm category and the equipment association information so as to execute alarm forwarding operation according to a data processing result.
The preset processing rules can comprise various data processing rules such as a data filtering rule, a data cleaning rule, a data aggregation rule, a data deleting rule and the like; for example, the data filtering rules may include filtering fields of a specified sequence of the first alert information, retaining only partial fields that have actual meaning (e.g., retaining only alert body fields or partial fields in alert body fields); the data cleansing rule may include data consistency detection and missing information population, for example, population of a part of the missing fields in the first alert information by the device association information; a data aggregation rule comprising merging a plurality of pieces of alarm information and generating new alarm information based on the plurality of pieces of alarm information; in the embodiment of the present invention, the data processing type included in the preset processing rule is not particularly limited.
According to different alarm categories, respectively executing different types of data processing operations on the alarm information; for example, if the alarm class is a device security class alarm, combining the device association information with the first alarm information, and forwarding the combined alarm information to a corresponding operation and maintenance party to ensure the data integrity of the device security class alarm; if the alarm type is an operation state alarm, which reflects the general change of the operation state of the equipment, the first alarm information is subjected to delay transmission processing, and when the same alarm information is acquired again, the first alarm information is sent out, so that the occurrence of false alarm phenomenon caused by accidental equipment state change is avoided.
The relevant information of the operation and maintenance party can be obtained through a service information table stored in a configuration management database (Configuration Management Database, CMDB); for example, according to the service address, service port and service type in the alarm main body field, the contact way of the corresponding operation and maintenance personnel is queried through the CMDB, and the first alarm information or the aggregate information is forwarded to the corresponding operation and maintenance party in various communication ways such as mail, short message, telephone, etc.
Optionally, in an embodiment of the present invention, the data processing for the first alarm information by a preset processing rule matched with the alarm category and the device association information includes: if the sender of the first alarm information is the master node equipment, the first alarm information is reserved; and if the sender of the first alarm information is the standby node equipment, deleting the first alarm information. Specifically, in the alarm mechanism of the F5 device, after the F5 device serving as the master node sends out one piece of alarm information, in order to ensure consistency of backup data, the other F5 device serving as the slave node always sends out the same alarm information, and actually the two pieces of alarm information are identical, that is, the alarm main body field is identical to the equipment association information, at this time, only the alarm information sent out by the master node is reserved, so that repeated sending of the alarm information is avoided, the alarm information processing capacity of an alarm processing platform is reduced, and the alarm effect of the alarm information is improved.
According to the technical scheme, after the equipment association information of the first alarm information is acquired according to the alarm main body field and the dynamic association dictionary of the first alarm information and the alarm category of the first alarm information is acquired according to the alarm main body field, the first alarm information is subjected to data processing according to the preset processing rules matched with the alarm category and the equipment association information, so that alarm forwarding operation is carried out according to the data processing result, classified acquisition and automatic forwarding of the alarm information are realized, redundant emission of invalid alarms and repeated alarms is avoided, the transmission quantity of the alarm information is reduced, the generation of alarm storm problems is avoided, the real alarms and important alarms are acquired by an operation and maintenance party in a targeted mode, and the alarm effect of the alarm information is improved.
Example two
Fig. 2 is a flowchart of an alarm information processing method according to a second embodiment of the present invention, where after determining that an alarm type of the first alarm information is a port failure alarm or a port recovery alarm, the relation between the present embodiment and the above embodiment is that whether the alarm is a normal network fluctuation alarm is continuously detected. As shown in fig. 2, the method specifically includes:
S201, responding to the acquisition of the first alarm information, and acquiring an alarm main body field of the first alarm information; s202 is performed.
S202, acquiring equipment association information of first alarm information according to the alarm subject field and the dynamic association dictionary, and acquiring an alarm category of the first alarm information according to the alarm subject field; if the alarm category of the first alarm information is determined to be the port fault alarm, executing S203; if it is determined that the alarm class of the first alarm information is the port recovery alarm, S206 is executed.
S203, setting the first alarm information to be in a waiting processing state, and setting waiting time for the first alarm information; s204 is performed.
S204, judging whether second alarm information matched with the first alarm information is acquired in the waiting time; the second alarm information is the same as the equipment association information of the first alarm information, and the alarm category of the second alarm information is port recovery alarm; if the second alarm information matched with the first alarm information is acquired within the waiting time, executing S205; if the second alarm information matched with the first alarm information is not acquired within the waiting time, S208 is executed.
If the alarm type of the first alarm information is determined to be port fault alarm, the first alarm information is not forwarded temporarily, but is set to be in a waiting processing state, and waiting time is set for the first alarm information, wherein the waiting time can be pre-configured as required, for example, the waiting time can be set to be 1 minute; judging whether the same type of second alarm information exists in a continuous time period after the current moment; the second alarm information is the same as the equipment association information of the first alarm information, namely, the second alarm information and the first alarm information are related to the same service port by the same service server, and the port state alarm sent by the same service is aimed at, wherein the difference is that the alarm type of the first alarm information is port fault alarm, and the alarm type of the second alarm information is port recovery alarm.
S205, the first alarm information and the second alarm information are aggregated into a network fluctuation alarm, and the network fluctuation alarm is sent to a corresponding operation and maintenance party.
If the second alarm information exists, because the interval time between the second alarm information and the first alarm information is shorter, and the second alarm information and the first alarm information are related to the same service port and the alarm information sent by the same service server, the disconnection and the recovery of the port are considered to be caused by normal network fluctuation behaviors, the first alarm information and the adjacent second alarm information positioned behind the first alarm information are aggregated into network fluctuation alarms, and only the network fluctuation alarms are sent to the corresponding operation and maintenance party, and the first alarm information and the second alarm information do not need to execute forwarding operation, so that the quantity compression of the alarm information is realized.
S206, judging whether third alarm information matched with the first alarm information exists in the pre-association time; the third alarm information is the same as the equipment association information of the first alarm information, the alarm type of the third alarm information is port fault alarm, and the third alarm information is in a waiting processing state; if the third alarm information matched with the first alarm information exists in the pre-association time, S207 is executed; if the third alarm information matched with the first alarm information does not exist in the pre-association time, S208 is executed.
If the alarm type of the first alarm information is determined to be the port recovery alarm, judging whether third alarm information exists in a continuous time period before the current moment; the pre-association time is the same as the waiting time; the third alarm information is the same as the equipment association information of the first alarm information, and indicates that the third alarm information and the first alarm information are the same service port, and the alarm information sent by the same service is for the same service.
S207, aggregating the first alarm information and the third alarm information into a network fluctuation alarm, and sending the network fluctuation alarm to a corresponding operation and maintenance party.
Likewise, if the third alarm information exists, because the interval time between the third alarm information and the first alarm information is shorter, and the port state information sent by the same service server for the same service port is related to the same service, the disconnection and recovery of the port are determined to be caused by normal network fluctuation behavior, at this time, the first alarm information and the third alarm information positioned in front of the first alarm information are aggregated into network fluctuation alarms, and only the network fluctuation alarms are sent to the corresponding operation and maintenance party, and the first alarm information and the third alarm information do not need to execute forwarding operation, so that the quantity compression of the alarm information is also realized.
S208, the first alarm information is sent to the corresponding operation and maintenance party.
If the corresponding third alarm information is not obtained before the alarm category is the first alarm information of the port recovery alarm or the corresponding second alarm information is not obtained after the alarm category is the first alarm information of the port fault alarm, the port fault indicated by the first alarm information is indicated to last for a long time, and the port communication abnormality is obviously existed, and the first alarm information is timely forwarded to the corresponding operation and maintenance party at the moment so as to ensure the timely sending of the port state alarm.
Optionally, in an embodiment of the present invention, the performing data processing on the first alarm information by using a preset processing rule matched with the alarm category and the device association information to perform an alarm forwarding operation according to a data processing result includes at least one of: updating the count value of a corresponding first counter according to the current network fluctuation alarm, and transmitting the current network fluctuation alarm to a corresponding operation and maintenance party until the count value of the first counter is larger than or equal to a preset fluctuation threshold; and acquiring the matched waiting time and/or the pre-association time according to the equipment association information of the first alarm information.
Specifically, if the number of the network fluctuation alarms is small, the network behavior of the port is normal, and each network fluctuation alarm does not need to be sent to a corresponding operation and maintenance party, so that when the count value of the first counter corresponding to the network fluctuation alarm does not reach a preset fluctuation threshold, the forwarding operation of the network fluctuation alarm is not executed; and when the count value of the first counter corresponding to the network fluctuation alarm reaches a preset fluctuation threshold, the network fluctuation alarm is sent to a corresponding operation and maintenance party, so that alarm information is prevented from being frequently sent due to normal network fluctuation behaviors.
According to the different service types carried by the service server where the first alarm information is located, different waiting time and pre-association time can be allocated to the alarm information in different service servers; for example, if the service server is used for carrying transaction service, the service server must keep higher real-time, so that the alarm information sent by each port in the service server can be set to be shorter in waiting time and pre-association time, so as to ensure timely sending of port fault alarm and port recovery alarm; if the service server is used for carrying data backup service, it can adapt to the network fluctuation with long time consumption, and the alarm information sent by each port in the service server can be set to be long waiting time and pre-association time, so as to reduce the number of port state alarms sent by the service server.
According to the technical scheme of the embodiment of the invention, if the second alarm information with the alarm category of the port recovery alarm exists after the first alarm information with the alarm category of the port fault alarm or the third alarm information with the alarm category of the port fault alarm exists before the first alarm information with the alarm category of the port recovery alarm, the aggregation operation of the network fluctuation alarms is executed, and the network fluctuation alarms are only sent to the corresponding operation and maintenance party, so that the quantity compression of the alarm information is realized, the network fluctuation alarms marked as normal network behaviors are also embodied, the alarm information is only a general notification message, and the operation and maintenance party is guided to view other alarm information with higher priority.
Example III
Fig. 3 is a flowchart for creating and displaying a chart acceleration task according to a third embodiment of the present invention, where the relationship between the present embodiment and the above embodiment is that the alarm type of the acquired first alarm information is a port failure alarm or a port recovery alarm, and as shown in fig. 3, the method specifically includes:
s301, acquiring an alarm main body field of first alarm information in response to acquiring the first alarm information; s302 is performed.
S302, acquiring equipment association information of first alarm information according to the alarm subject field and the dynamic association dictionary, and acquiring an alarm category of the first alarm information according to the alarm subject field; if it is determined that the alarm category of the first alarm information is the designated alarm category, S303 is executed.
S303, judging that the count value of a second counter matched with the first alarm information reaches a preset quantity threshold; wherein the specified alarm category comprises a device status alarm or a background login alarm; if yes, executing S304; if not, S305 is performed.
S304, executing the forwarding operation of the first alarm information, and accumulating the count value of the second counter.
The data processing platform is used for respectively configuring a counter for a service port of each service server aiming at equipment state alarm and background login alarm sent by the same service, wherein the counter is used for recording the triggering quantity of the type of alarm information; the preset number threshold may be preconfigured as required, for example, the preset number threshold may be set to 3 times, that is, when the number of times of sending the first alarm information is less than 3 times, the obtained first alarm information may be directly forwarded, and after forwarding, the count value of the second counter is added with 1.
S305, judging whether the timing value of a first timer matched with the second counter reaches a preset time threshold; if not, executing S306; if yes, S307 is executed.
The data processing platform is a service port of each service server, and is respectively configured with a timer aiming at the equipment state alarm and the background login alarm sent by the same service, wherein the timer is used for recording the time of the last sending of the alarm information and the interval time from the current time; the timer is matched with the counter one by one; when the count value of the second counter reaches a preset quantity threshold value, the first timer starts to count; the preset time threshold may be preconfigured to be completed as needed, for example, the preset time threshold may be set to 2 hours.
S306, not executing the forwarding operation of the first alarm information.
According to the technical scheme, when the first alarm information is sent out for 3 times in an accumulated way, the timing of the first timer is started, and the first alarm information is not sent repeatedly in the future 2 hours.
S307, the forwarding operation of the first alarm information is executed, and the count value of the second counter is zeroed.
According to the technical scheme, after the timing value of the first timer reaches 2 hours, the second counter is zeroed so as to count the number of the first alarm information again.
According to the technical scheme, after the alarm type of the first alarm information is determined to be the equipment state alarm or the background login alarm, the alarm information is forwarded and restrained from two dimensions of the sending number and the sending period through the simultaneous use of the counter and the timer, so that the equipment state alarm and the background login alarm are sent out in time, alarm storm caused by excessive alarm information is avoided, and the alarm effect of the alarm information is improved.
Example IV
Fig. 4 is a block diagram of an alarm information processing apparatus according to a fourth embodiment of the present invention, as shown in fig. 4, where the apparatus specifically includes:
an alarm body acquisition module 401, configured to acquire an alarm body field of the first alarm information in response to acquiring the first alarm information;
an alarm category obtaining module 402, configured to obtain device association information of the first alarm information according to the alarm subject field and the dynamic association dictionary, and obtain an alarm category of the first alarm information according to the alarm subject field;
and the alarm forwarding execution module 403 is configured to perform data processing on the first alarm information according to a preset processing rule matched with the alarm category and the device association information, so as to execute an alarm forwarding operation according to a data processing result.
According to the technical scheme, after the equipment association information of the first alarm information is acquired according to the alarm main body field and the dynamic association dictionary of the first alarm information and the alarm category of the first alarm information is acquired according to the alarm main body field, the first alarm information is subjected to data processing according to the preset processing rules matched with the alarm category and the equipment association information, so that alarm forwarding operation is carried out according to the data processing result, classified acquisition and automatic forwarding of the alarm information are realized, redundant emission of invalid alarms and repeated alarms is avoided, the transmission quantity of the alarm information is reduced, the generation of alarm storm problems is avoided, the real alarms and important alarms are acquired by an operation and maintenance party in a targeted mode, and the alarm effect of the alarm information is improved.
Optionally, the alarm forwarding execution module 403 is specifically configured to, if it is determined that the alarm class of the first alarm information is a port failure alarm, set the first alarm information to a waiting processing state, and set a waiting time for the first alarm information; judging whether second alarm information matched with the first alarm information is acquired in the waiting time; the second alarm information is the same as the equipment association information of the first alarm information, and the alarm category of the second alarm information is port recovery alarm; if second alarm information matched with the first alarm information is acquired in the waiting time, aggregating the first alarm information and the second alarm information into a network fluctuation alarm, and sending the network fluctuation alarm to a corresponding operation and maintenance party; and if the second alarm information matched with the first alarm information is not acquired within the waiting time, the first alarm information is sent to the corresponding operation and maintenance party.
Optionally, the alarm forwarding execution module 403 is specifically configured to determine whether the third alarm information matched with the first alarm information exists in the pre-association time if it is determined that the alarm class of the first alarm information is a port recovery alarm; the third alarm information is the same as the equipment association information of the first alarm information, the alarm type of the third alarm information is port fault alarm, and the third alarm information is in a waiting processing state; if third alarm information matched with the first alarm information exists in the pre-association time, aggregating the first alarm information and the third alarm information into a network fluctuation alarm, and sending the network fluctuation alarm to a corresponding operation and maintenance party; if the third alarm information matched with the first alarm information does not exist in the pre-association time, the first alarm information is sent to the corresponding operation and maintenance party.
Optionally, the alarm forwarding execution module 403 is specifically configured to update a count value of a corresponding first counter according to a current network fluctuation alarm, until the count value of the first counter is greater than or equal to a preset fluctuation threshold, and send the current network fluctuation alarm to a corresponding operation and maintenance party; and acquiring the matched waiting time and/or the pre-association time according to the equipment association information of the first alarm information.
Optionally, the alarm forwarding execution module 403 is specifically configured to determine that the count value of the second counter matched with the first alarm information reaches a preset number threshold if it is determined that the alarm class of the first alarm information is an equipment status alarm or a background login alarm; if the count value of the second counter is determined not to reach the preset number threshold, executing the forwarding operation of the first alarm information, and accumulating the count value of the second counter; if the count value of the second counter reaches the preset number threshold, judging whether the timing value of the first timer matched with the second counter reaches the preset time threshold or not; if the timing value of the first timer is determined to reach a preset time threshold, executing the forwarding operation of the first alarm information, and carrying out zero resetting treatment on the count value of the second counter; and if the timing value of the first timer is not up to the preset time threshold, not executing the forwarding operation of the first alarm information.
Optionally, the alert category obtaining module 402 is specifically configured to obtain, according to the alert body field, the number of hits or the hit rate in the alert keyword set corresponding to each candidate alert category, and obtain the alert category of the first alert information.
Optionally, the alarm forwarding execution module 403 is specifically configured to reserve the first alarm information if the sender of the first alarm information is a master node device; and if the sender of the first alarm information is the standby node equipment, deleting the first alarm information.
The device can execute the alarm information processing method provided by any embodiment of the invention, and has the corresponding functional modules and beneficial effects of the execution method. Technical details which are not described in detail in the present embodiment may refer to the alarm information processing method provided in any embodiment of the present invention.
Example five
Fig. 5 shows a schematic diagram of the structure of an electronic device 10 that may be used to implement an embodiment of the invention. Electronic devices are intended to represent various forms of digital computers, such as laptops, desktops, workstations, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. Electronic equipment may also represent various forms of mobile devices, such as personal digital processing, cellular telephones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions, are meant to be exemplary only, and are not meant to limit implementations of the inventions described and/or claimed herein.
As shown in fig. 5, the electronic device 10 includes at least one processor 11, and a memory, such as a Read Only Memory (ROM) 12, a Random Access Memory (RAM) 13, etc., communicatively connected to the at least one processor 11, in which the memory stores a computer program executable by the at least one processor, and the processor 11 may perform various appropriate actions and processes according to the computer program stored in the Read Only Memory (ROM) 12 or the computer program loaded from the storage unit 18 into the Random Access Memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 may also be stored. The processor 11, the ROM 12 and the RAM 13 are connected to each other via a bus 14. An input/output (I/O) interface 15 is also connected to bus 14.
Various components in the electronic device 10 are connected to the I/O interface 15, including: an input unit 16 such as a keyboard, a mouse, etc.; an output unit 17 such as various types of displays, speakers, and the like; a storage unit 18 such as a magnetic disk, an optical disk, or the like; and a communication unit 19 such as a network card, modem, wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information/data with other devices via a computer network, such as the internet, and/or various telecommunication networks.
The processor 11 may be a variety of general and/or special purpose processing components having processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a Central Processing Unit (CPU), a Graphics Processing Unit (GPU), various specialized Artificial Intelligence (AI) computing chips, various processors running machine learning model algorithms, digital Signal Processors (DSPs), and any suitable processor, controller, microcontroller, etc. The processor 11 performs the respective methods and processes described above, such as an alarm information processing method.
In some embodiments, the alert information processing method may be implemented as a computer program tangibly embodied on a computer-readable storage medium, such as a storage unit. In some embodiments, part or all of the computer program may be loaded and/or installed onto the heterogeneous hardware accelerator via the ROM and/or the communication unit. When the computer program is loaded into RAM and executed by a processor, one or more steps of the alert information processing method described above may be performed. Alternatively, in other embodiments, the processor may be configured to perform the alert information processing method in any other suitable manner (e.g., by means of firmware).
Various implementations of the systems and techniques described here above may be implemented in digital electronic circuitry, integrated circuit systems, field Programmable Gate Arrays (FPGAs), application Specific Integrated Circuits (ASICs), application Specific Standard Products (ASSPs), systems On Chip (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and/or combinations thereof. These various embodiments may include: implemented in one or more computer programs, the one or more computer programs may be executed and/or interpreted on a programmable system including at least one programmable processor, which may be a special purpose or general-purpose programmable processor, that may receive data and instructions from, and transmit data and instructions to, a storage system, at least one input device, and at least one output device.
A computer program for carrying out methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus, such that the computer programs, when executed by the processor, cause the functions/acts specified in the flowchart and/or block diagram block or blocks to be implemented. The computer program may execute entirely on the machine, partly on the machine, as a stand-alone software package, partly on the machine and partly on a remote machine or entirely on the remote machine or server.
In the context of the present invention, a computer-readable storage medium may be a tangible medium that can contain, or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. The computer readable storage medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. Alternatively, the computer readable storage medium may be a machine readable signal medium. More specific examples of a machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
To provide for interaction with a user, the systems and techniques described here can be implemented on a heterogeneous hardware accelerator having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to a user; and a keyboard and pointing device (e.g., a mouse or a trackball) through which a user can provide input to the heterogeneous hardware accelerator. Other kinds of devices may also be used to provide for interaction with a user; for example, feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form, including acoustic input, speech input, or tactile input.
The systems and techniques described here can be implemented in a computing system that includes a background component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front-end component (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such background, middleware, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local Area Networks (LANs), wide Area Networks (WANs), blockchain networks, and the internet.
The computing system may include clients and servers. The client and server are typically remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other. The server can be a cloud server, also called a cloud computing server or a cloud host, and is a host product in a cloud computing service system, so that the defects of high management difficulty and weak service expansibility in the traditional physical hosts and VPS service are overcome.
It should be appreciated that various forms of the flows shown above may be used to reorder, add, or delete steps. For example, the steps described in the present invention may be performed in parallel, sequentially, or in a different order, so long as the desired results of the technical solution of the present invention are achieved, and the present invention is not limited herein.
The above embodiments do not limit the scope of the present invention. It will be apparent to those skilled in the art that various modifications, combinations, sub-combinations and alternatives are possible, depending on design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the scope of the present invention.
Claims (10)
1. An alarm information processing method, comprising:
in response to acquiring the first alarm information, acquiring an alarm main body field of the first alarm information;
acquiring equipment association information of the first alarm information according to the alarm subject field and the dynamic association dictionary, and acquiring an alarm category of the first alarm information according to the alarm subject field;
and carrying out data processing on the first alarm information through a preset processing rule matched with the alarm category and the equipment association information so as to execute alarm forwarding operation according to a data processing result.
2. The method according to claim 1, wherein the data processing is performed on the first alarm information by a preset processing rule matched with the alarm category and the device association information, so as to perform an alarm forwarding operation according to a data processing result, and specifically includes:
if the alarm type of the first alarm information is determined to be port fault alarm, setting the first alarm information to be in a waiting processing state, and setting waiting time for the first alarm information;
judging whether second alarm information matched with the first alarm information is acquired in the waiting time; the second alarm information is the same as the equipment association information of the first alarm information, and the alarm category of the second alarm information is port recovery alarm;
if second alarm information matched with the first alarm information is acquired in the waiting time, aggregating the first alarm information and the second alarm information into a network fluctuation alarm, and sending the network fluctuation alarm to a corresponding operation and maintenance party;
and if the second alarm information matched with the first alarm information is not acquired within the waiting time, the first alarm information is sent to the corresponding operation and maintenance party.
3. The method according to claim 1, wherein the data processing is performed on the first alarm information by a preset processing rule matched with the alarm category and the device association information, so as to perform an alarm forwarding operation according to a data processing result, and specifically includes:
if the alarm type of the first alarm information is determined to be the port recovery alarm, judging whether third alarm information matched with the first alarm information exists in the pre-association time; the third alarm information is the same as the equipment association information of the first alarm information, the alarm type of the third alarm information is port fault alarm, and the third alarm information is in a waiting processing state;
if third alarm information matched with the first alarm information exists in the pre-association time, aggregating the first alarm information and the third alarm information into a network fluctuation alarm, and sending the network fluctuation alarm to a corresponding operation and maintenance party;
if the third alarm information matched with the first alarm information does not exist in the pre-association time, the first alarm information is sent to the corresponding operation and maintenance party.
4. A method according to claim 2 or 3, wherein the data processing is performed on the first alarm information by a preset processing rule matched with the alarm category and the device association information, so as to perform an alarm forwarding operation according to a data processing result, and the method comprises at least one of the following steps:
Updating the count value of a corresponding first counter according to the current network fluctuation alarm, and transmitting the current network fluctuation alarm to a corresponding operation and maintenance party until the count value of the first counter is larger than or equal to a preset fluctuation threshold;
and acquiring the matched waiting time and/or the pre-association time according to the equipment association information of the first alarm information.
5. The method according to claim 1, wherein the data processing is performed on the first alarm information by a preset processing rule matched with the alarm category and the device association information, so as to perform an alarm forwarding operation according to a data processing result, and specifically further comprising:
if the alarm type of the first alarm information is determined to be an equipment state alarm or a background login alarm, judging that the count value of a second counter matched with the first alarm information reaches a preset number threshold;
if the count value of the second counter is determined not to reach the preset number threshold, executing the forwarding operation of the first alarm information, and accumulating the count value of the second counter;
if the count value of the second counter reaches the preset number threshold, judging whether the timing value of the first timer matched with the second counter reaches the preset time threshold or not;
If the timing value of the first timer is determined to reach a preset time threshold, executing the forwarding operation of the first alarm information, and carrying out zero resetting treatment on the count value of the second counter;
and if the timing value of the first timer is not up to the preset time threshold, not executing the forwarding operation of the first alarm information.
6. The method of claim 1, wherein the obtaining the alert category of the first alert information based on the alert body field comprises:
and acquiring the alarm category of the first alarm information according to the hit number or hit rate of the alarm keyword set corresponding to each candidate alarm category respectively in the alarm main body field.
7. The method of claim 1, wherein the data processing the first alert information by a preset processing rule matched with the alert category and the device association information comprises:
if the sender of the first alarm information is the master node equipment, the first alarm information is reserved;
and if the sender of the first alarm information is the standby node equipment, deleting the first alarm information.
8. An alert information processing apparatus, comprising:
The alarm main body acquisition module is used for responding to the acquisition of the first alarm information and acquiring an alarm main body field of the first alarm information;
the alarm category acquisition module is used for acquiring equipment association information of the first alarm information according to the alarm subject field and the dynamic association dictionary, and acquiring the alarm category of the first alarm information according to the alarm subject field;
and the alarm forwarding execution module is used for carrying out data processing on the first alarm information through a preset processing rule matched with the alarm category and the equipment association information so as to execute alarm forwarding operation according to a data processing result.
9. An electronic device, the electronic device comprising:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein,
the memory stores a computer program executable by the at least one processor to enable the at least one processor to perform the alert information processing method of any one of claims 1-7.
10. A computer readable storage medium storing computer instructions for causing a processor to implement the alarm information processing method of any one of claims 1-7 when executed.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311103425.0A CN117155755B (en) | 2023-08-29 | 2023-08-29 | Alarm information processing method and device, electronic equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311103425.0A CN117155755B (en) | 2023-08-29 | 2023-08-29 | Alarm information processing method and device, electronic equipment and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN117155755A true CN117155755A (en) | 2023-12-01 |
| CN117155755B CN117155755B (en) | 2024-09-03 |
Family
ID=88905436
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202311103425.0A Active CN117155755B (en) | 2023-08-29 | 2023-08-29 | Alarm information processing method and device, electronic equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN117155755B (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110321268A (en) * | 2019-06-12 | 2019-10-11 | 平安科技（深圳）有限公司 | A kind of alarm information processing method and device |
| WO2021096431A1 (en) * | 2019-11-14 | 2021-05-20 | Envision Digital International Pte. Ltd. | Method and apparatus for configuring alarm rule of iot device, device, and storage medium |
| CN114567536A (en) * | 2022-02-24 | 2022-05-31 | 北京百度网讯科技有限公司 | Abnormal data processing method and device, electronic equipment and storage medium |
| CN115150261A (en) * | 2022-06-29 | 2022-10-04 | 北京天融信网络安全技术有限公司 | Alarm analysis method and device, electronic equipment and storage medium |
| CN115396289A (en) * | 2022-08-31 | 2022-11-25 | 广东电网有限责任公司 | Fault alarm determination method and device, electronic equipment and storage medium |
| CN116488332A (en) * | 2023-04-17 | 2023-07-25 | 贵州电网有限责任公司 | Automatic verification method for monitoring information of auxiliary control system of transformer substation |
-
2023
- 2023-08-29 CN CN202311103425.0A patent/CN117155755B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110321268A (en) * | 2019-06-12 | 2019-10-11 | 平安科技（深圳）有限公司 | A kind of alarm information processing method and device |
| WO2021096431A1 (en) * | 2019-11-14 | 2021-05-20 | Envision Digital International Pte. Ltd. | Method and apparatus for configuring alarm rule of iot device, device, and storage medium |
| CN114567536A (en) * | 2022-02-24 | 2022-05-31 | 北京百度网讯科技有限公司 | Abnormal data processing method and device, electronic equipment and storage medium |
| CN115150261A (en) * | 2022-06-29 | 2022-10-04 | 北京天融信网络安全技术有限公司 | Alarm analysis method and device, electronic equipment and storage medium |
| CN115396289A (en) * | 2022-08-31 | 2022-11-25 | 广东电网有限责任公司 | Fault alarm determination method and device, electronic equipment and storage medium |
| CN116488332A (en) * | 2023-04-17 | 2023-07-25 | 贵州电网有限责任公司 | Automatic verification method for monitoring information of auxiliary control system of transformer substation |
Also Published As
| Publication number | Publication date |
|---|---|
| CN117155755B (en) | 2024-09-03 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN113342564B (en) | Log auditing method and device, electronic equipment and medium | |
| CN116225769B (en) | Method, device, equipment and medium for determining root cause of system fault | |
| CN116010220A (en) | Alarm diagnosis method, device, equipment and storage medium | |
| CN114885014A (en) | Method, device, equipment and medium for monitoring external field equipment state | |
| CN113656252B (en) | Fault positioning method, device, electronic equipment and storage medium | |
| CN113485862B (en) | Method and device for managing service faults, electronic equipment and storage medium | |
| CN117608904A (en) | Fault positioning method and device, electronic equipment and storage medium | |
| CN117155755B (en) | Alarm information processing method and device, electronic equipment and storage medium | |
| CN116645082A (en) | System inspection method, device, equipment and storage medium | |
| CN114500443A (en) | Message pushing method, device, system, electronic equipment and storage medium | |
| CN117076185B (en) | Server inspection method, device, equipment and medium | |
| CN113595870B (en) | Push message processing method and device, electronic equipment and storage medium | |
| CN114513441B (en) | System maintenance method, device, equipment and storage medium based on block chain | |
| CN112596922B (en) | Communication management method, device, equipment and medium | |
| CN118170617B (en) | Cluster anomaly detection method and device, electronic equipment and storage medium | |
| CN116319397A (en) | Method, device and storage medium for acquiring user network behavior portraits | |
| CN117687816A (en) | Service reliability evaluation method, device, equipment and storage medium | |
| CN117749614A (en) | Protocol rule determining method and device, electronic equipment and storage medium | |
| CN117614998A (en) | Current limiting method and device for micro-service system, electronic equipment and storage medium | |
| CN118363938A (en) | Enterprise service bus ESB system integration method, device, equipment and medium | |
| CN117573491A (en) | Positioning method, device, equipment and storage medium for performance bottleneck | |
| CN114691404A (en) | Service process monitoring method and device, electronic equipment, storage medium and product | |
| CN117667347A (en) | Task processing method and device, electronic equipment and storage medium | |
| CN115601043A (en) | Risk transaction processing method and device, electronic equipment and storage medium | |
| CN116668258A (en) | Alarm information processing method and device and electronic equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |