CN117608979A - Rule visualization method and device, electronic equipment and storage medium - Google Patents

Rule visualization method and device, electronic equipment and storage medium Download PDF

Info

Publication number
CN117608979A
CN117608979A CN202311627454.7A CN202311627454A CN117608979A CN 117608979 A CN117608979 A CN 117608979A CN 202311627454 A CN202311627454 A CN 202311627454A CN 117608979 A CN117608979 A CN 117608979A
Authority
CN
China
Prior art keywords
event
rule
processing
paths
target attribute
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202311627454.7A
Other languages
Chinese (zh)
Inventor
王�琦
李世宁
孙永敬
张明
李琪
刘伯松
高昊阳
李小波
洪海
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Construction Bank Corp
Original Assignee
China Construction Bank Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Construction Bank Corp filed Critical China Construction Bank Corp
Priority to CN202311627454.7A priority Critical patent/CN117608979A/en
Publication of CN117608979A publication Critical patent/CN117608979A/en
Pending legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
    • G06F11/324—Display of status information
    • G06F11/327—Alarm or error message display

Abstract

The invention provides a rule visualization method, a device, electronic equipment and a storage medium, wherein the method comprises the following steps: acquiring event rules in a service system acquired through different paths; aiming at event rules acquired by different paths, performing target attributes on the event rules according to processing strategies corresponding to the paths; analyzing based on the target attribute to obtain a corresponding analysis result; and integrating analysis results corresponding to each event rule, and visually displaying integrated data obtained through integration. In the embodiment of the invention, the event rule is subjected to target attribute through the processing strategy corresponding to the path, and is analyzed to obtain a corresponding analysis result; and visually displaying the integrated data after integrating the analysis results corresponding to each event rule. Thereby improving the efficiency of rule maintenance and facilitating understanding.

Description

Rule visualization method and device, electronic equipment and storage medium
Technical Field
The present invention relates to the field of data processing and display technologies, and in particular, to a rule visualization method, a device, an electronic apparatus, and a storage medium.
Background
And directly displaying the read rules so as to integrally manage the rules. Because the data of the acquired rules of different paths are different, the acquired rules are directly displayed, so that management is not systematic, and the rules are difficult to maintain and difficult to understand.
Disclosure of Invention
In view of the above, the embodiments of the present invention provide a rule visualization method, device, electronic apparatus, and storage medium, so as to solve the problem in the prior art that the rule is difficult to maintain and is not easy to understand.
In order to achieve the above object, the embodiment of the present invention provides the following technical solutions:
a first aspect of an embodiment of the present invention shows a rule visualization method, the method including:
acquiring event rules in a service system acquired through different paths;
aiming at event rules acquired by different paths, performing target attributes on the event rules according to processing strategies corresponding to the paths;
analyzing based on the target attribute to obtain a corresponding analysis result;
and integrating analysis results corresponding to each event rule, and visually displaying integrated data obtained through integration.
Optionally, the performing, according to a processing policy corresponding to the path, the target attribute on the event rule according to the event rule collected for different paths includes:
searching corresponding relations between different paths and the event rules, and determining a processing strategy corresponding to the paths;
and processing the event rule by utilizing the processing strategy corresponding to the path to obtain the corresponding target attribute.
Optionally, the analyzing based on the target attribute to obtain a corresponding analysis result includes:
analyzing the target attribute to determine index group data of different dimensions;
and sorting the index group data with different dimensions according to a preset format to obtain an analysis result.
Optionally, after acquiring the event rule in the service system acquired through different paths, the method further includes:
inputting the event rule and the path corresponding to the event rule into a preset processing model, processing the event rule and the event rule based on the preset processing model, and outputting a corresponding target attribute, wherein the preset processing model is obtained based on sample data training.
Optionally, the method further comprises:
after carrying out target attribute on event rules acquired for different paths according to processing strategies corresponding to the paths, determining nodes corresponding to the event rules according to the target attribute;
and backtracking visual display is carried out on the event rule based on the node.
Optionally, the method further comprises:
receiving an input operation for a rule;
and responding to the input operation, and creating an alarm event corresponding to the rule.
A second aspect of an embodiment of the present invention shows a rule visualization apparatus, the apparatus comprising:
the acquisition unit is used for acquiring event rules in the service system acquired through different paths;
the processing unit is used for aiming at event rules acquired by different paths, and carrying out target attribute on the event rules according to processing strategies corresponding to the paths;
the analysis unit is used for analyzing based on the target attribute to obtain a corresponding analysis result;
and the visualization unit is used for integrating the analysis results corresponding to each event rule and performing visual display on the integrated data obtained by integration.
Optionally, the processing unit is specifically configured to:
searching corresponding relations between different paths and the event rules, and determining a processing strategy corresponding to the paths; and processing the event rule by utilizing the processing strategy corresponding to the path to obtain the corresponding target attribute.
A third aspect of the embodiment of the present invention shows an electronic device, where the electronic device is configured to execute a program, where the program executes the rule visualization method according to the first aspect of the embodiment of the present invention.
A fourth aspect of the embodiment of the present invention shows a storage medium, where the storage medium includes a storage program, where when the program runs, the device where the storage medium is controlled to execute the rule visualizing method as shown in the first aspect of the embodiment of the present invention.
Based on the rule visualization method, the device, the electronic equipment and the storage medium provided by the embodiment of the invention, the method comprises the following steps: acquiring event rules in a service system acquired through different paths; aiming at event rules acquired by different paths, performing target attributes on the event rules according to processing strategies corresponding to the paths; analyzing based on the target attribute to obtain a corresponding analysis result; and integrating analysis results corresponding to each event rule, and visually displaying integrated data obtained through integration. In the embodiment of the invention, the event rule is subjected to target attribute through the processing strategy corresponding to the path, and is analyzed to obtain a corresponding analysis result; and visually displaying the integrated data after integrating the analysis results corresponding to each event rule. Thereby improving the efficiency of rule maintenance and facilitating understanding.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings that are required to be used in the embodiments or the description of the prior art will be briefly described below, and it is obvious that the drawings in the following description are only embodiments of the present invention, and that other drawings can be obtained according to the provided drawings without inventive effort for a person skilled in the art.
FIG. 1 is a flow chart of a rule visualization method according to an embodiment of the present invention;
FIG. 2 is a schematic diagram of a target attribute architecture according to an embodiment of the present invention;
FIG. 3 is a flow chart of another rule visualization method according to an embodiment of the present invention;
FIG. 4 is a flow chart of yet another rule visualization method according to an embodiment of the present invention;
fig. 5 is a schematic structural diagram of a rule visualization device according to an embodiment of the present invention.
Detailed Description
The following description of the embodiments of the present invention will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present invention, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
The terms "first," "second," "third," "fourth" and the like in the description and in the claims of this application and in the above-described figures, if any, are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments described herein may be implemented in other sequences than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
It should be noted that the description of "first", "second", etc. in this disclosure is for descriptive purposes only and is not to be construed as indicating or implying a relative importance or implying an indication of the number of technical features being indicated. Thus, a feature defining "a first" or "a second" may explicitly or implicitly include at least one such feature. In addition, the technical solutions of the embodiments may be combined with each other, but it is necessary to base that the technical solutions can be realized by those skilled in the art, and when the technical solutions are contradictory or cannot be realized, the combination of the technical solutions should be considered to be absent and not within the scope of protection claimed in the present invention.
In this application, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.
Referring to fig. 1, a flow chart of a rule visualization method according to an embodiment of the present invention is shown, where the method includes:
step S101: acquiring event rules in a service system acquired through different paths;
optionally, the method further comprises: each event rule in the service system is initialized in advance, and the method specifically comprises the steps of cleaning the Jiangsu of the user, differentiating scripts in the rules according to the conventional general, manufacturer and private rules, single responsibility and the like, adding comments, identifying the operation and maintenance scene, operation and maintenance personnel, judging conditions and output, adding debugging log information, facilitating debugging and post diagnosis, and obtaining the cleaned event rule.
It should be noted that the different paths at least include paths of simple network management protocol Snmp, system log Syslog, simple network management protocol trap, and the like.
Step S102: aiming at event rules acquired by different paths, performing target attributes on the event rules according to processing strategies corresponding to the paths;
it should be noted that, the process of implementing step S102 specifically includes the following steps:
step S11: and searching the corresponding relation between different paths and the event rule, and determining a processing strategy corresponding to the paths.
Since the data in the event rules acquired by different paths are different, the processing strategies corresponding to the different paths need to be preset to process the data through the processing strategies.
For example: as shown in table (1), the attribute name corresponding to the event attribute carried by the event rule that can be collected by the Snmp path of the simple network management protocol is an EventYype alarm object, i.e. event type, eventDesc event description, timeStamp occurrence time, CIID, i.e. CI number, KPIID, i.e. KPI number, security level, threshold setting threshold, value performance Value, seconds duration, interval sampling Interval, etc. The attribute name corresponding to the event attribute carried by the event rule that can be collected by the Syslog path of the system log is the time stamp at this time, the input name of the inputname rule, the source IP of the from host_ip message, the source host name of the from host message, the pri_text, i.e., the main part of PRI part of the message information, hostname message host name,
SyslogSeverity, i.e., the severity of Severity from the message message, syslogfacity, i.e., the facilities in the facility from the message message, syslogtag message tag, programnme generated the message program name, and msgid message id. The attribute names corresponding to the event attributes carried by the event rules that can be collected by the simple network management protocol trap path are trap, namely trap event OID numbers, a parameter, namely the number of trap event parameters, para_ OID 1-N, namely a trap event generation OID list, 1-N parameters, para_val1-N, namely a trap event parameter value list, 1-N parameters, timeStamp event occurrence time, IPAddress, namely a trap event IP address, and sysupreme, namely the duration of a trap event system.
Table (1):
in the specific implementation process of step S11, the correspondence between the different paths and the event rule is traversed, so as to determine a processing policy corresponding to the paths.
Step S12: and processing the event rule by utilizing the processing strategy corresponding to the path to obtain the corresponding target attribute.
In the specific implementation process of step S12, for event rules acquired by different paths, if the paths are simple network management protocol Snmp paths, extracting target attributes in the event rules by a processing strategy corresponding to the simple network management protocol Snmp paths; if the path is a system log Syslog path, extracting a target attribute in an event rule through a processing strategy corresponding to the system log Syslog path; if the path is a simple network management protocol trap path, extracting the target attribute in the event rule through a processing strategy corresponding to the simple network management protocol trap path.
It should be noted that, the data items in the target attributes output by different paths are consistent.
It is further noted that the target attributes include common attributes and special attributes, as shown in table (2).
Table (2):
the attribute names corresponding to the data items of the public attribute are at least DeviceID device ID and EventYype alarm object, for example: the device CPU/board CPU/protocol/port, eventYype event type, such as device hardware fault/service index overrun/security event, eventTime event occurrence time, such as rule trigger time, indicator index, value index Value, and Group. The data item with special attribute refers to other useful attributes unique to each type of equipment according to the alarm index.
For a better understanding of what is shown, an example is illustrated below, as shown in fig. 2.
The port state of the simple network management protocol Snmp is 1.3.6.1.2.1.2.2.1.15 =2, where 1 represents UP;2 represents down;3 represents a testing. Specifically, get: IP of request: port device 1.3.6.1.2.1.2.2.1 port state, port index 15, state down.
The port state of the simple network management protocol trap is 1.3.6.1.2.1.2.2.1.8.15; specifically, the event IP is sent: device name, event type: OID,1.3.6.1.6.3.1.1.5.3 denotes port down;1.3.6.1.2.1.2.2.1.1 the detailed index.
H3C of Syslog of system: <30> [ time ] xxx port xxx down, HW: <× > [ time ] × ] the xxx port xxx down, specifically, the SyslogIP is sent: monitoring equipment, port: the specific port name can be fetched by SNMP or fetched into the CMDB if the index is fetched by SNMP, and the state is directly resolved.
The target attributes may include a device ID, an alarm object, an event type, event occurrence time, an index value, a group to which the index value belongs, and xxx, etc.
And determining and extracting the equipment ID, the alarm object, the event type, the event occurrence time, the index value, the group and the like in the event rule acquired by the corresponding paths according to the processing strategies corresponding to the different paths.
Step S103: and analyzing based on the target attribute to obtain a corresponding analysis result.
The process of step S103 is specifically implemented, and includes the following steps:
step S21: and analyzing the target attribute to determine index group data of different dimensions.
It should be noted that, the index set data of different dimensions at least includes IP message index set data and interface index set data.
In the specific implementation process of step S21, the target attribute is analyzed, and indexes in the common attribute and the special attribute are analyzed to determine index set parameters of dimensions such as the IP message index set data and the interface index set data.
It should be noted that the index set data includes a plurality of indexes, and each index and other data corresponding to the index.
Step S22: and sorting the index group data with different dimensions according to a preset format to obtain an analysis result.
It should be noted that, the preset format is preset according to the actual situation, and the preset format specifies the required index, and the data items related to the index in the other corresponding data, which specifically may include rule threshold, alarm level, threshold, trigger times of the trigger rule in the preset time period, and alarm content.
For example, as shown in table (3), the index group parameters are the dimensions of the IP packet index group data and the interface index group data corresponding to the event rule a.
The index group parameters of the dimensions such as the IP message index group data and the interface index group data comprise indexes, rule thresholds, alarm levels, thresholds, trigger times of trigger rules in a preset time period, alarm content and the like.
Table (3):
step S104: and integrating analysis results corresponding to each event rule, and visually displaying integrated data obtained through integration.
In the specific implementation process of step S104, integrating the analysis results corresponding to each event rule by using a line graph, a sector graph and other modes, so as to define the rule by a script or a visual mode, and outputting the rule as a script or formatted language of the focusing rule; to display the results of the integration.
Optionally, based on the above embodiment of the present invention, the method further includes the following steps:
step S31: receiving an input operation for a rule;
step S32: and responding to the input operation, and creating an alarm event corresponding to the rule.
It should be noted that, the output operation may include a set trigger condition, a termination condition, an alarm recovery condition, and the like.
In the embodiment of the invention, event rules in a service system are acquired through different paths; aiming at event rules acquired by different paths, performing target attributes on the event rules according to processing strategies corresponding to the paths; analyzing based on the target attribute to obtain a corresponding analysis result; and integrating analysis results corresponding to each event rule, and visually displaying integrated data obtained through integration. The invention carries out target attribute on the event rule through the processing strategy corresponding to the path, and analyzes the event rule to obtain a corresponding analysis result; and visually displaying the integrated data after integrating the analysis results corresponding to each event rule. Thereby improving the efficiency of rule maintenance and facilitating understanding.
Optionally, based on the rule visualization method shown in the above embodiment of the present invention, the embodiment of the present invention correspondingly discloses a flow chart of another rule visualization method, as shown in fig. 3, where the method includes:
step S301: acquiring event rules in a service system acquired through different paths;
it should be noted that the specific implementation procedure of step S301 is the same as that of step S101 described above, and reference may be made to each other.
Step S302: inputting the event rule and the path corresponding to the event rule into a preset processing model, processing the event rule and the event rule based on the preset processing model, and outputting a corresponding target attribute.
In step S302, a preset processing model is constructed based on the sample data.
It should be noted that, the process of constructing the preset processing model based on the sample data includes:
step S31: historical event rules acquired by different paths and target attributes are acquired.
Step S32: training the initial model by using different paths, the historical event rules and the target attributes until the output predicted target attributes are the same as the target attributes in the test set, and determining the initial model obtained by current training as a preset processing model.
It should be noted that, the data items of the target attribute corresponding to different paths are the same, but the data corresponding to the data items of the target attribute under each path are different.
In the specific implementation process of step S32, taking the different paths, the historical event rules and the target attributes as sample data; dividing the sample data into a training set and a testing set; training the initial model based on the training set to obtain a trained initial model; testing the initial model by using a test set to obtain a predicted target attribute; and judging whether the predicted target attribute is the same as the target attribute in the test set, and if so, determining that the initial model obtained by current training is a preset processing model.
Step S303: and analyzing based on the target attribute to obtain a corresponding analysis result.
Step S304: and integrating analysis results corresponding to each event rule, and visually displaying integrated data obtained through integration.
It should be noted that the specific implementation procedures of step S303 and step S304 are the same as the specific implementation procedures of step S103 and step S104 described above, and can be seen from each other.
In the embodiment of the invention, event rules in a service system are acquired through different paths; inputting the event rules and paths corresponding to the event rules into a preset processing model aiming at the event rules acquired by different paths, processing the event rules and the event rules based on the preset processing model, and outputting corresponding target attributes; analyzing based on the target attribute to obtain a corresponding analysis result; and integrating analysis results corresponding to each event rule, and visually displaying integrated data obtained through integration. The event rules and the event rules are processed through a preset processing model, corresponding target attributes are output, and analysis is carried out on the corresponding target attributes to obtain corresponding analysis results; and visually displaying the integrated data after integrating the analysis results corresponding to each event rule. Thereby improving the efficiency of rule maintenance and facilitating understanding.
Optionally, based on the method shown in the above embodiment of the present invention, referring to fig. 4 in conjunction with fig. 1, the method includes:
step S401: acquiring event rules in a service system acquired through different paths;
step S402: aiming at event rules acquired by different paths, carrying out target attribute on the event rules according to processing strategies corresponding to the paths.
It should be noted that the specific implementation procedures of step S401 and step S402 are the same as those of step S101 and step S102 described above, and can be seen from each other.
Step S403: determining a node corresponding to the event rule according to the target attribute;
in the specific implementation process of the specific implementation step S403, the target attribute is sequentially written into the corresponding node tree according to the generating node tree of the event rule, so as to obtain the node corresponding to the event rule.
For example: and searching the data item in the target attribute as the data corresponding to the equipment ID, filling the data item into the first node, and so on until each node in the node tree is filled.
Step S404: and backtracking visual display is carried out on the event rule based on the node.
In the specific implementation process of step S404, the event rule is subjected to backtracking visual display according to a node tree formed by the nodes.
In the embodiment of the invention, event rules in a service system are acquired through different paths; aiming at event rules acquired by different paths, performing target attributes on the event rules according to processing strategies corresponding to the paths; determining a node corresponding to the event rule according to the target attribute; and backtracking visual display is carried out on the event rule based on the node. And visual traceability warning can be performed.
Based on the method shown in the embodiment of the present invention, correspondingly, the embodiment of the present invention also correspondingly discloses a structural schematic diagram of a rule visualization device, as shown in fig. 5, where the device includes:
an acquiring unit 501, configured to acquire event rules in a service system acquired through different paths;
the processing unit 502 is configured to perform, for event rules collected by different paths, target attributes on the event rules according to processing policies corresponding to the paths;
an analysis unit 503, configured to perform analysis based on the target attribute, so as to obtain a corresponding analysis result;
and the visualization unit 504 is configured to integrate the analysis results corresponding to each event rule, and perform visual display on the integrated data obtained by integration.
It should be noted that, the specific principle and the execution process of each unit in the rule visualization device disclosed in the embodiment of the present application are the same as those of the rule visualization method shown in the embodiment of the present application, and reference may be made to corresponding parts in the rule visualization method disclosed in the embodiment of the present application, and no redundant description is made here.
In the embodiment of the invention, event rules in a service system are acquired through different paths; aiming at event rules acquired by different paths, performing target attributes on the event rules according to processing strategies corresponding to the paths; analyzing based on the target attribute to obtain a corresponding analysis result; and integrating analysis results corresponding to each event rule, and visually displaying integrated data obtained through integration. The invention carries out target attribute on the event rule through the processing strategy corresponding to the path, and analyzes the event rule to obtain a corresponding analysis result; and visually displaying the integrated data after integrating the analysis results corresponding to each event rule. Thereby improving the efficiency of rule maintenance and facilitating understanding.
Optionally, based on the rule visualization device shown in the foregoing embodiment of the present invention, the processing unit 502 is specifically configured to:
searching corresponding relations between different paths and the event rules, and determining a processing strategy corresponding to the paths; and processing the event rule by utilizing the processing strategy corresponding to the path to obtain the corresponding target attribute.
Optionally, based on the rule visualization device shown in the above embodiment of the present invention, the analysis unit 503 is specifically configured to:
analyzing the target attribute to determine index group data of different dimensions;
and sorting the index group data with different dimensions according to a preset format to obtain an analysis result.
Optionally, based on the rule visualization device shown in the foregoing embodiment of the present invention, the processing unit 502 is further configured to:
after event rules in a service system acquired through different paths are acquired, inputting the event rules and paths corresponding to the event rules into a preset processing model, processing the event rules and the event rules based on the preset processing model, and outputting corresponding target attributes, wherein the preset processing model is obtained based on sample data training.
Optionally, based on the rule visualization device shown in the foregoing embodiment of the present invention, the processing unit 502 is further configured to:
after carrying out target attribute on event rules acquired for different paths according to processing strategies corresponding to the paths, determining nodes corresponding to the event rules according to the target attribute;
correspondingly, the visualization unit 504 is also used for
And backtracking visual display is carried out on the event rule based on the node.
Optionally, based on the rule visualization device shown in the foregoing embodiment of the present invention, the processing unit 502 is further configured to:
receiving an input operation for a rule;
and responding to the input operation, and creating an alarm event corresponding to the rule.
The embodiment of the invention also discloses an electronic device which is used for running a database storage process, wherein the rule visualization method disclosed in the above figures 1 to 4 is executed when the database storage process is run.
The embodiment of the invention also discloses a storage medium, which comprises a database storage process, wherein the equipment where the storage medium is controlled to execute the rule visualization method disclosed in the figures 1 to 4 when the database storage process runs.
In the context of this disclosure, a storage medium may be a tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.
In this specification, each embodiment is described in a progressive manner, and identical and similar parts of each embodiment are all referred to each other, and each embodiment mainly describes differences from other embodiments. In particular, for a system or system embodiment, since it is substantially similar to a method embodiment, the description is relatively simple, with reference to the description of the method embodiment being made in part. The systems and system embodiments described above are merely illustrative, wherein the elements illustrated as separate elements may or may not be physically separate, and the elements shown as elements may or may not be physical elements, may be located in one place, or may be distributed over a plurality of network elements. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment. Those of ordinary skill in the art will understand and implement the present invention without undue burden.
Those of skill would further appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, computer software, or combinations of both, and that the various illustrative elements and steps are described above generally in terms of functionality in order to clearly illustrate the interchangeability of hardware and software. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the solution. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
The previous description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (10)

1. A method of visualizing rules, the method comprising:
acquiring event rules in a service system acquired through different paths;
aiming at event rules acquired by different paths, performing target attributes on the event rules according to processing strategies corresponding to the paths;
analyzing based on the target attribute to obtain a corresponding analysis result;
and integrating analysis results corresponding to each event rule, and visually displaying integrated data obtained through integration.
2. The method of claim 1, wherein the event rules collected for different paths are subject to target attributes according to processing policies corresponding to the paths, comprising:
searching corresponding relations between different paths and the event rules, and determining a processing strategy corresponding to the paths;
and processing the event rule by utilizing the processing strategy corresponding to the path to obtain the corresponding target attribute.
3. The method of claim 1, wherein the analyzing based on the target attribute to obtain a corresponding analysis result comprises:
analyzing the target attribute to determine index group data of different dimensions;
and sorting the index group data with different dimensions according to a preset format to obtain an analysis result.
4. The method of claim 1, further comprising, after acquiring the event rules in the business system collected through the different paths:
inputting the event rule and the path corresponding to the event rule into a preset processing model, processing the event rule and the event rule based on the preset processing model, and outputting a corresponding target attribute, wherein the preset processing model is obtained based on sample data training.
5. The method as recited in claim 1, further comprising:
after carrying out target attribute on event rules acquired for different paths according to processing strategies corresponding to the paths, determining nodes corresponding to the event rules according to the target attribute;
and backtracking visual display is carried out on the event rule based on the node.
6. The method as recited in claim 1, further comprising:
receiving an input operation for a rule;
and responding to the input operation, and creating an alarm event corresponding to the rule.
7. A rule visualization apparatus, the apparatus comprising:
the acquisition unit is used for acquiring event rules in the service system acquired through different paths;
the processing unit is used for aiming at event rules acquired by different paths, and carrying out target attribute on the event rules according to processing strategies corresponding to the paths;
the analysis unit is used for analyzing based on the target attribute to obtain a corresponding analysis result;
and the visualization unit is used for integrating the analysis results corresponding to each event rule and performing visual display on the integrated data obtained by integration.
8. The apparatus according to claim 7, wherein the processing unit is specifically configured to:
searching corresponding relations between different paths and the event rules, and determining a processing strategy corresponding to the paths; and processing the event rule by utilizing the processing strategy corresponding to the path to obtain the corresponding target attribute.
9. An electronic device, characterized in that the electronic device is configured to run a program, wherein the program, when run, performs the rule visualization method according to any one of claims 1-6.
10. A storage medium comprising a stored program, wherein the program, when run, controls a device in which the storage medium is located to perform the rule visualization method according to any one of claims 1-6.
CN202311627454.7A 2023-11-30 2023-11-30 Rule visualization method and device, electronic equipment and storage medium Pending CN117608979A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202311627454.7A CN117608979A (en) 2023-11-30 2023-11-30 Rule visualization method and device, electronic equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202311627454.7A CN117608979A (en) 2023-11-30 2023-11-30 Rule visualization method and device, electronic equipment and storage medium

Publications (1)

Publication Number Publication Date
CN117608979A true CN117608979A (en) 2024-02-27

Family

ID=89955864

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202311627454.7A Pending CN117608979A (en) 2023-11-30 2023-11-30 Rule visualization method and device, electronic equipment and storage medium

Country Status (1)

Country Link
CN (1) CN117608979A (en)

Similar Documents

Publication Publication Date Title
US10275301B2 (en) Detecting and analyzing performance anomalies of client-server based applications
CN102158360B (en) Network fault self-diagnosis method based on causal relationship positioning of time factors
US7953847B2 (en) Monitoring and management of distributing information systems
CN107241229B (en) Service monitoring method and device based on interface testing tool
JP6085550B2 (en) Log analysis apparatus and method
WO2004079553A2 (en) System, method and model for autonomic management of enterprise applications
CN114157554B (en) Fault checking method and device, storage medium and computer equipment
Rochim et al. Design Log Management System of Computer Network Devices Infrastructures Based on ELK Stack
CN111124830B (en) Micro-service monitoring method and device
CN107635003A (en) The management method of system journal, apparatus and system
CN105871638B (en) A kind of network safety control method and device
CN113572656A (en) Method and device for flexibly combining inspection items of network equipment
CN114328107A (en) Monitoring method and system for optomagnetic fusion storage server cluster and electronic equipment
US20080072321A1 (en) System and method for automating network intrusion training
Wang et al. A methodology for root-cause analysis in component based systems
CN117608979A (en) Rule visualization method and device, electronic equipment and storage medium
CN111817865A (en) Method for monitoring network management equipment and monitoring system
Vokorokos et al. Data preprocessing for efficient evaluation of network traffic parameters
CN113794586B (en) Snapshot and playback method and system of network topology
CN113726808A (en) Website monitoring method, device, equipment and storage medium
CN114257414A (en) Intelligent network security duty method and system
CN111585819A (en) Distribution network communication equipment fault analysis method and system
CN108390790B (en) Fault diagnosis method and device for routing equipment
Gunasekaran et al. Correlating log messages for system diagnostics
Tateishi et al. Method for visualizing information from large-scale carrier networks

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination