CN117714561A - Alarm message processing method, device, equipment and storage medium - Google Patents
Alarm message processing method, device, equipment and storage medium Download PDFInfo
- Publication number
- CN117714561A CN117714561A CN202410032651.2A CN202410032651A CN117714561A CN 117714561 A CN117714561 A CN 117714561A CN 202410032651 A CN202410032651 A CN 202410032651A CN 117714561 A CN117714561 A CN 117714561A
- Authority
- CN
- China
- Prior art keywords
- message
- alarm
- determining
- alarm message
- analysis
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000003672 processing method Methods 0.000 title claims abstract description 20
- 238000004458 analytical method Methods 0.000 claims abstract description 64
- 238000012545 processing Methods 0.000 claims abstract description 63
- 238000000034 method Methods 0.000 claims abstract description 50
- 230000002159 abnormal effect Effects 0.000 claims description 37
- 238000004590 computer program Methods 0.000 claims description 16
- 230000008859 change Effects 0.000 claims description 13
- 238000013507 mapping Methods 0.000 claims description 7
- 230000008569 process Effects 0.000 description 10
- 238000004891 communication Methods 0.000 description 8
- 238000010586 diagram Methods 0.000 description 5
- 230000003287 optical effect Effects 0.000 description 3
- 230000003203 everyday effect Effects 0.000 description 2
- 230000006870 function Effects 0.000 description 2
- 230000003993 interaction Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000003491 array Methods 0.000 description 1
- 238000013473 artificial intelligence Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000001413 cellular effect Effects 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 239000002360 explosive Substances 0.000 description 1
- 239000011521 glass Substances 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 238000010801 machine learning Methods 0.000 description 1
- 239000013307 optical fiber Substances 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 230000001953 sensory effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/22—Parsing or analysis of headers
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/02—Details
- H04L12/16—Arrangements for providing special services to substations
- H04L12/18—Arrangements for providing special services to substations for broadcast or conference, e.g. multicast
- H04L12/1895—Arrangements for providing special services to substations for broadcast or conference, e.g. multicast for short real-time information, e.g. alarms, notifications, alerts, updates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
- H04L51/21—Monitoring or handling of messages
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Alarm Systems (AREA)
Abstract
The invention discloses an alarm message processing method, an alarm message processing device, alarm message processing equipment and a storage medium. The method comprises the following steps: acquiring an alarm message, and determining the message type and the message acquisition time of the alarm message; judging whether to analyze the alarm message according to the message type and the message acquisition time to obtain an analysis judgment result; if the analysis judging result is that the message analysis is carried out, the message analysis is carried out on the alarm message to obtain a message field and a message field value; determining a message consumption end of the alarm message according to the message field and the message field value; determining a target notification mode for sending an alarm message; based on the notification mode, the alarm message is sent to the message consumer. The technical scheme improves the flexibility of message processing and message notification of the alarm message.
Description
Technical Field
The present invention relates to the field of data processing technologies, and in particular, to a method, an apparatus, a device, and a storage medium for processing an alarm message.
Background
In the present information age, the data volume of each industry has shown explosive growth. Big data not only presents a great opportunity, but also presents challenges. One of the challenges is how to effectively process a large amount of alarm information, and timely respond to users through notification media in a short time, so that the users can timely find out the problems and timely process the problems. However, the conventional alarm message processing method cannot flexibly match corresponding message notifiers, and the message processing and message notification modes are too single to adapt to the scenes of large data volume and complicated data and consumers.
Disclosure of Invention
The invention provides an alarm message processing method, an alarm message processing device, alarm message processing equipment and a storage medium, so as to improve the flexibility of message processing and message notification of alarm messages.
According to an aspect of the present invention, there is provided an alarm message processing method, the method including:
acquiring an alarm message, and determining the message type and the message acquisition time of the alarm message;
judging whether to analyze the message of the alarm message according to the message type and the message acquisition time to obtain an analysis judgment result;
if the analysis judging result is that the message analysis is carried out, carrying out message analysis on the alarm message to obtain a message field and a message field value;
determining a message consumption end of the alarm message according to the message field and the message field value;
determining a target notification mode for sending the alarm message;
and sending the alarm message to the message consumption terminal based on the notification mode.
According to another aspect of the present invention, there is provided an alarm message processing apparatus, the apparatus comprising:
the alarm message acquisition module is used for acquiring alarm messages and determining the message types and the message acquisition time of the alarm messages;
the message analysis module is used for judging whether to analyze the message of the alarm message according to the message type and the message acquisition time to obtain an analysis judgment result;
the message field determining module is used for carrying out message analysis on the alarm message if the analysis judging result is that the message analysis is carried out, so as to obtain a message field and a message field value;
the consumption end determining module is used for determining a message consumption end of the alarm message according to the message field and the message field value;
a notification mode determining module, configured to determine a target notification mode for sending the alarm message;
and the alarm message sending module is used for sending the alarm message to the message consumption terminal based on the notification mode.
According to another aspect of the present invention, there is provided an electronic apparatus including:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein,
the memory stores a computer program executable by the at least one processor to enable the at least one processor to perform the alert message processing method according to any one of the embodiments of the present invention.
According to another aspect of the present invention, there is provided a computer readable storage medium storing computer instructions for causing a processor to implement the alarm message processing method according to any one of the embodiments of the present invention when executed.
The technical scheme of the embodiment of the invention obtains the alarm message and determines the message type and the message obtaining time of the alarm message; judging whether to analyze the alarm message according to the message type and the message acquisition time to obtain an analysis judgment result; if the analysis judging result is that the message analysis is carried out, the message analysis is carried out on the alarm message to obtain a message field and a message field value; determining a message consumption end of the alarm message according to the message field and the message field value; determining a target notification mode for sending an alarm message; based on the notification mode, the alarm message is sent to the message consumer. The technical scheme realizes the automatic processing of the alarm message, utilizes the message queue to process the alarm message, and increases the processing capacity of the system; the flexible matching of message notifiers matched with the alarm messages is realized, and the message processing and message notification modes can be suitable for the complex scene of large-scale consumption personnel of data volume.
It should be understood that the description in this section is not intended to identify key or critical features of the embodiments of the invention or to delineate the scope of the invention. Other features of the present invention will become apparent from the description that follows.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for the description of the embodiments will be briefly described below, and it is apparent that the drawings in the following description are only some embodiments of the present invention, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
FIG. 1 is a flow chart of an alarm message processing method according to a first embodiment of the present invention;
FIG. 2 is a flowchart of an alarm message processing method according to a second embodiment of the present invention;
fig. 3 is a schematic structural diagram of an alarm message processing apparatus according to a third embodiment of the present invention;
fig. 4 is a schematic structural diagram of an electronic device implementing an alarm message processing method according to an embodiment of the present invention.
Detailed Description
In order that those skilled in the art will better understand the present invention, a technical solution in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in which it is apparent that the described embodiments are only some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the present invention without making any inventive effort, shall fall within the scope of the present invention.
It should be noted that the terms "first," "second," and the like in the description and the claims of the present invention and the above figures are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments of the invention described herein may be implemented in sequences other than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
Example 1
Fig. 1 is a flowchart of an alarm message processing method according to a first embodiment of the present invention, where the method may be implemented by an alarm message processing device, and the alarm message processing device may be implemented in hardware and/or software, and the alarm message processing device may be configured in an electronic device. As shown in fig. 1, the method includes:
s110, acquiring the alarm message, and determining the message type and the message acquisition time of the alarm message.
The message type of the alarm message may include various types, for example, the alarm message may be a host CPU (Central Processing Unit ) load alarm message, a service call exception message, a third party alarm message, a process exit exception alarm message, etc.
Illustratively, a large number of alert messages may be received through the message queue and the message receipt time at which the message queue receives the alert message is taken as the message retrieval time.
S120, judging whether to analyze the alarm message according to the message type and the message acquisition time, and obtaining an analysis judgment result.
For example, whether the alarm message accords with a preset processing rule or processing strategy can be judged according to the message type and the message acquisition time, and if so, message analysis can be performed on the alarm message; if not, the alarm message can be not analyzed. The analysis and judgment result is to analyze the alarm message and not analyze the alarm message.
Wherein, the processing rules or the processing strategies can be preset by the related technicians. For example, the processing rules or processing policies may be that the message acquisition time is within a predetermined message processing time range and the message type is in a predetermined message whitelist.
In an alternative embodiment, according to the message type and the message acquisition time, judging whether to analyze the message of the alarm message to obtain an analysis judgment result, including: determining a message processing time range of the alarm message according to the message type; if the message acquisition time is within the message processing time range, the analysis and judgment result is that the message analysis is carried out on the alarm message; and if the message acquisition time is not in the message processing time range, the analysis and judgment result is that the message analysis is not performed on the alarm message.
It should be noted that, since the message types of the alarm messages are different, different message processing time ranges may be corresponding to the alarm messages of different message types. The correspondence between the message types of different alarm messages and the corresponding message processing time ranges and times can be preset by related technicians. For example, the message processing time range corresponding to the message type A is 09:00-11:00 every day; the message processing time range corresponding to the message type B is 14:00-16:00 and the like every day.
For example, if the message acquisition time of the alarm message is within the corresponding message processing time range, the message analysis is performed on the alarm message; if the message acquisition time of the alarm message is not in the corresponding message processing time range, the message analysis is not carried out on the alarm message, a message label is generated, and when the time of the alarm message meets the message processing time condition, the message analysis is carried out on the message.
And S130, if the analysis judging result is that the message analysis is performed, the message analysis is performed on the alarm message to obtain a message field and a message field value.
If the alarm message analysis condition is met, the alarm message is analyzed to obtain a message field and a message field value of the alarm message. For example, the message field is "ID" and the corresponding message field value is "123"; the message field is of the type, and the corresponding message field value is of the clock alarm; the message field is "alarm name", and the corresponding field value is "target service & & host IP (Internet Protocol Address ) & network request http:// www.
In order to further improve the reliability of the subsequent sending of the alarm message, the alarm message can be further verified, so that the comprehensive verification of the alarm message is realized.
In an alternative embodiment, after the message parsing is performed on the alarm message to obtain the message field and the message field value, the method further includes: determining a field matching result based on a preset field matching rule according to the message field; determining a field value matching result based on a preset field value matching rule according to the field value of the message; and judging whether to execute the message consumption end of the alarm message according to the message field and the message field value according to the field matching result and the field value matching result.
The field matching rule may be to determine whether a message field matching a preset message field exists in the parsed message field, that is, the matching mode may be including or not. Or whether the message field is matched with the preset message field; or whether the analyzed message field is similar to the preset message field, specifically, a text matching algorithm is adopted for matching.
The field value matching rule may be to determine whether the message field value is null or not, if not, further match the message field value with a preset message field value, where a specific matching mode may be the same as the field matching mode, and this embodiment will not be described herein.
If the field matching result and the field value matching result are both that the field matching result is the matching result, determining a message consumption end of the alarm message according to the message field and the message field value; if any matching result in the field matching result and the field value matching result does not pass, the alarm message is not processed.
It should be noted that, in order to facilitate the subsequent message notifier to process the alarm message in a targeted manner, the notification content may also be automatically generated according to the alarm message.
In an alternative embodiment, if the field matching result and the field value matching result are both matching, determining whether a history message corresponding to the alarm message exists in the history time period; if yes, generating notification content according to the alarm message and the history message; if not, generating notification content according to the alarm message; correspondingly, based on the notification mode, sending the alarm message to the message consumption end comprises the following steps: based on the notification mode, the alarm message and the notification content are sent to the message consumer.
If the field matching result and the field value matching result are both matching passing, determining whether a history message corresponding to the alarm message exists in the history time period; if yes, generating notification content according to the alarm message and the history message; if the alarm information does not exist, the alarm information can be determined to be the newly generated alarm information, and the notification content is marked with the information as the newly generated alarm information.
Optionally, generating the notification content according to the alarm message and the history message includes: determining the duration of the abnormal state according to the abnormal time in the alarm message and the abnormal time in the history message; determining abnormal grade change information according to the grade state in the alarm message and the grade state in the history message; and generating notification content according to the abnormal state duration and the abnormal level change information.
For example, the abnormal time in the history message and the abnormal time in the alarm message are determined, and according to the two abnormal times, the duration of the abnormal state of the alarm message can be determined, and specifically, the time difference between the two abnormal times can be determined. According to the grade state in the alarm message and the grade state in the history message, abnormal grade change information can be determined; for example, if the level state of the history message is a moderate early warning and the level state of the warning message is a severe early warning, it may be determined that the abnormal level change information is that the warning message has a moderate early warning and is converted into a severe early warning. A notification content including the abnormal state duration and the abnormal level change information is generated.
For the generation mode of the notification content, a generation template of the notification content may be pre-constructed, for example, a content field may be customized in the template, such as whether a new alarm is given, an abnormal state duration, abnormal level change information, etc., and the notification content may be automatically generated based on the generation template.
S140, determining the message consumption end of the alarm message according to the message field and the message field value.
The message consumer of the alert message is illustratively determined by determining a message field value corresponding to a message field containing an association with the message consumption segment. For example, the consumption field "alert name" contains a field value of "host IP". From this host IP, the relevant user associated with the host IP, i.e. the message consumer, can be determined.
S150, determining a target notification mode for sending the alarm message.
For example, the target notification mode of the alarm message may be preset in the notification mode configuration table by a related technician, and one or more notification modes selected randomly are used as the target notification mode.
In an alternative embodiment, determining a target notification manner for sending an alarm message includes: determining whether a first notification mode corresponding to the message type exists in a pre-configured message notification association relationship; if yes, determining the first notification mode as a target notification mode; and if not, determining a second notification mode corresponding to the message consumer based on the preset consumer notification mode mapping relation, and determining the second notification mode as a target notification mode.
For example, it may be determined whether a first notification manner corresponding to a message type exists in a pre-configured message notification association relationship. The message notification association relationship may be an association relationship between alarm messages of different message types and notification manners, which are configured in advance. If the first notification mode corresponding to the message type exists, the first notification mode is determined to be a target notification mode. If the first notification mode corresponding to the message type does not exist, determining a second notification mode corresponding to the message consumer according to a preset mapping relation of the notification modes of the consumer, and determining the second notification mode as a target notification mode. The mapping relationship between the consumer notification mode may be a mapping relationship between a preconfigured message consumer and the notification mode. The notification mode can comprise at least one of mail, short message, telephone, social software and the like.
And S160, sending the alarm message to a message consumption end based on the notification mode.
The technical scheme of the embodiment of the invention obtains the alarm message and determines the message type and the message obtaining time of the alarm message; judging whether to analyze the alarm message according to the message type and the message acquisition time to obtain an analysis judgment result; if the analysis judging result is that the message analysis is carried out, the message analysis is carried out on the alarm message to obtain a message field and a message field value; determining a message consumption end of the alarm message according to the message field and the message field value; determining a target notification mode for sending an alarm message; based on the notification mode, the alarm message is sent to the message consumer. The technical scheme realizes the automatic processing of the alarm message, utilizes the message queue to process the alarm message, and increases the processing capacity of the system; the flexible matching of message notifiers matched with the alarm messages is realized, and the message processing and message notification modes can be suitable for the complex scene of large-scale consumption personnel of data volume.
Example two
Fig. 2 is a flowchart of a method for processing an alarm message according to a second embodiment of the present invention. The present embodiment provides a preferred example based on the above-described embodiments.
As shown in fig. 2, the method comprises the following specific steps:
s210, acquiring an alarm message, and determining the message type and the message acquisition time of the alarm message.
S220, determining a message processing time range of the alarm message according to the message type.
And S230A, if the message acquisition time is within the message processing time range, carrying out message analysis on the alarm message to obtain a message field and a message field value.
And S230B, if the message acquisition time is not in the message processing time range, not analyzing the alarm message.
S240A, determining a field matching result based on a preset field matching rule according to the message field.
S240B, according to the message field value, determining a field value matching result based on a preset field value matching rule.
S250, judging whether a history message corresponding to the alarm message exists in the history time period if the field matching result and the field value matching result are both matched; if yes, executing S260A-S260C; if not, S260D is performed.
S260A, determining the duration of the abnormal state according to the abnormal time in the alarm message and the abnormal time in the history message.
S260B, determining abnormal grade change information according to the grade state in the alarm message and the grade state in the history message.
And S260C, generating notification content according to the abnormal state duration time and the abnormal level change information.
S260D, generating notification content according to the alarm message.
S270, determining the message consumption end of the alarm message according to the message field and the message field value.
S280, judging whether a first notification mode corresponding to the message type exists in the pre-configured message notification association relation; if yes, executing S290A; if not, S290B is performed.
S290A, the first notification method is determined as the target notification method.
S290B, based on the preset mapping relation of the notification modes of the consumption ends, determining a second notification mode corresponding to the consumption ends of the messages, and determining the second notification mode as a target notification mode.
And S2100, sending the alarm message and the notification content to a message consumption end based on the notification mode.
Example III
Fig. 3 is a schematic structural diagram of an alarm message device according to a third embodiment of the present invention. The alarm message device provided by the embodiment of the invention can be suitable for the situations of automatic message processing and message notification of massive alarm messages, and can be realized in a hardware and/or software mode, as shown in fig. 3, and the device specifically comprises: an alarm message acquisition module 301, a message parsing module 302, a message field determination module 303, a consumption determination module 304, a notification manner determination module 305, and an alarm message sending module 306. Wherein,
an alarm message obtaining module 301, configured to obtain an alarm message, and determine a message type and a message obtaining time of the alarm message;
the message parsing module 302 is configured to determine whether to parse the alarm message according to the message type and the message acquisition time, so as to obtain a parsing determination result;
a message field determining module 303, configured to, if the analysis and judgment result is that message analysis is performed, perform message analysis on the alarm message to obtain a message field and a message field value;
a consumption end determining module 304, configured to determine a message consumption end of the alarm message according to the message field and the message field value;
a notification mode determining module 305, configured to determine a target notification mode for sending the alarm message;
and the alarm message sending module 306 is configured to send the alarm message to the message consumption end based on the notification manner.
The technical scheme of the embodiment of the invention obtains the alarm message and determines the message type and the message obtaining time of the alarm message; judging whether to analyze the alarm message according to the message type and the message acquisition time to obtain an analysis judgment result; if the analysis judging result is that the message analysis is carried out, the message analysis is carried out on the alarm message to obtain a message field and a message field value; determining a message consumption end of the alarm message according to the message field and the message field value; determining a target notification mode for sending an alarm message; based on the notification mode, the alarm message is sent to the message consumer. The technical scheme realizes the automatic processing of the alarm message, utilizes the message queue to process the alarm message, and increases the processing capacity of the system; the flexible matching of message notifiers matched with the alarm messages is realized, and the message processing and message notification modes can be suitable for the complex scene of large-scale consumption personnel of data volume.
Optionally, the message parsing module 302 includes:
a time range determining unit, configured to determine a message processing time range of the alarm message according to the message type;
the first message analysis unit is used for analyzing the message of the alarm message if the message acquisition time is within the message processing time range; the method comprises the steps of,
and the second message analysis unit is used for judging that the message analysis is not performed on the alarm message if the message acquisition time is not in the message processing time range.
Optionally, the apparatus further includes:
the field matching result determining module is used for determining a field matching result based on a preset field matching rule according to the message field after the message analysis is carried out on the alarm message to obtain the message field and the message field value; the method comprises the steps of,
the field value matching result determining module is used for determining a field value matching result based on a preset field value matching rule according to the message field value;
and the message consumption end judging module is used for judging whether to execute the message consumption end of the alarm message according to the message field and the message field value according to the field matching result and the field value matching result.
Optionally, the apparatus further includes:
the historical message judging module is used for determining whether a historical message corresponding to the alarm message exists in a historical time period if the field matching result and the field value matching result are both matched and pass;
the first notification content generation module is used for generating notification content according to the alarm message and the history message if the history message corresponding to the alarm message exists; the method comprises the steps of,
the second notification content generation module is used for generating notification content according to the alarm message if the history message corresponding to the alarm message does not exist;
accordingly, the alarm message sending module 306 includes:
and sending the alarm message and the notification content to the message consumption terminal based on the notification mode.
Optionally, the first notification content generating module includes:
an abnormal duration determining unit configured to determine an abnormal state duration according to an abnormal time in the alert message and an abnormal time in the history message; the method comprises the steps of,
an abnormal change information determining unit, configured to determine abnormal level change information according to a level state in the alert message and a level state in the history message;
and the notification content generation unit is used for generating notification content according to the abnormal state duration time and the abnormal grade change information.
Optionally, the notification manner determining module includes:
a notification mode judging unit, configured to determine whether a first notification mode corresponding to the message type exists in a pre-configured message notification association relationship;
a first notification method determining unit, configured to determine, if a first notification method corresponding to the message type exists, the first notification method as the target notification method; the method comprises the steps of,
and the second notification mode determining unit is used for determining a second notification mode corresponding to the message consumption terminal based on a preset consumption terminal notification mode mapping relation if the first notification mode corresponding to the message type does not exist, and determining the second notification mode as a target notification mode.
The alarm message processing device provided by the embodiment of the invention can execute the alarm message processing method provided by any embodiment of the invention, and has the corresponding functional modules and beneficial effects of the execution method.
Example IV
Fig. 4 shows a schematic diagram of an electronic device 40 that may be used to implement an embodiment of the invention. Electronic devices are intended to represent various forms of digital computers, such as laptops, desktops, workstations, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. Electronic equipment may also represent various forms of mobile devices, such as personal digital processing, cellular telephones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions, are meant to be exemplary only, and are not meant to limit implementations of the inventions described and/or claimed herein.
As shown in fig. 4, the electronic device 40 includes at least one processor 41, and a memory communicatively connected to the at least one processor 41, such as a Read Only Memory (ROM) 42, a Random Access Memory (RAM) 43, etc., in which the memory stores a computer program executable by the at least one processor, and the processor 41 may perform various suitable actions and processes according to the computer program stored in the Read Only Memory (ROM) 42 or the computer program loaded from the storage unit 48 into the Random Access Memory (RAM) 43. In the RAM 43, various programs and data required for the operation of the electronic device 40 may also be stored. The processor 41, the ROM 42 and the RAM 43 are connected to each other via a bus 44. An input/output (I/O) interface 45 is also connected to bus 44.
Various components in electronic device 40 are connected to I/O interface 45, including: an input unit 46 such as a keyboard, a mouse, etc.; an output unit 47 such as various types of displays, speakers, and the like; a storage unit 48 such as a magnetic disk, an optical disk, or the like; and a communication unit 49 such as a network card, modem, wireless communication transceiver, etc. The communication unit 49 allows the electronic device 40 to exchange information/data with other devices via a computer network, such as the internet, and/or various telecommunication networks.
The processor 41 may be various general and/or special purpose processing components with processing and computing capabilities. Some examples of processor 41 include, but are not limited to, a Central Processing Unit (CPU), a Graphics Processing Unit (GPU), various specialized Artificial Intelligence (AI) computing chips, various processors running machine learning model algorithms, digital Signal Processors (DSPs), and any suitable processor, controller, microcontroller, etc. The processor 41 performs the various methods and processes described above, such as the alert message processing method.
In some embodiments, the alert message processing method may be implemented as a computer program tangibly embodied on a computer-readable storage medium, such as the storage unit 48. In some embodiments, part or all of the computer program may be loaded and/or installed onto the electronic device 40 via the ROM 42 and/or the communication unit 49. When the computer program is loaded into the RAM 43 and executed by the processor 41, one or more steps of the alert message processing method described above may be performed. Alternatively, in other embodiments, the processor 41 may be configured to perform the alert message processing method in any other suitable manner (e.g., by means of firmware).
Various implementations of the systems and techniques described here above may be implemented in digital electronic circuitry, integrated circuit systems, field Programmable Gate Arrays (FPGAs), application Specific Integrated Circuits (ASICs), application Specific Standard Products (ASSPs), systems On Chip (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and/or combinations thereof. These various embodiments may include: implemented in one or more computer programs, the one or more computer programs may be executed and/or interpreted on a programmable system including at least one programmable processor, which may be a special purpose or general-purpose programmable processor, that may receive data and instructions from, and transmit data and instructions to, a storage system, at least one input device, and at least one output device.
A computer program for carrying out methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus, such that the computer programs, when executed by the processor, cause the functions/acts specified in the flowchart and/or block diagram block or blocks to be implemented. The computer program may execute entirely on the machine, partly on the machine, as a stand-alone software package, partly on the machine and partly on a remote machine or entirely on the remote machine or server.
In the context of the present invention, a computer-readable storage medium may be a tangible medium that can contain, or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. The computer readable storage medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. Alternatively, the computer readable storage medium may be a machine readable signal medium. More specific examples of a machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
To provide for interaction with a user, the systems and techniques described here can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to a user; and a keyboard and a pointing device (e.g., a mouse or a trackball) through which a user can provide input to the electronic device. Other kinds of devices may also be used to provide for interaction with a user; for example, feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form, including acoustic input, speech input, or tactile input.
The systems and techniques described here can be implemented in a computing system that includes a background component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front-end component (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such background, middleware, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local Area Networks (LANs), wide Area Networks (WANs), blockchain networks, and the internet.
The computing system may include clients and servers. The client and server are typically remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other. The server can be a cloud server, also called a cloud computing server or a cloud host, and is a host product in a cloud computing service system, so that the defects of high management difficulty and weak service expansibility in the traditional physical hosts and VPS service are overcome.
It should be appreciated that various forms of the flows shown above may be used to reorder, add, or delete steps. For example, the steps described in the present invention may be performed in parallel, sequentially, or in a different order, so long as the desired results of the technical solution of the present invention are achieved, and the present invention is not limited herein.
The above embodiments do not limit the scope of the present invention. It will be apparent to those skilled in the art that various modifications, combinations, sub-combinations and alternatives are possible, depending on design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the scope of the present invention.
Claims (10)
1. An alert message processing method, comprising:
acquiring an alarm message, and determining the message type and the message acquisition time of the alarm message;
judging whether to analyze the message of the alarm message according to the message type and the message acquisition time to obtain an analysis judgment result;
if the analysis judging result is that the message analysis is carried out, carrying out message analysis on the alarm message to obtain a message field and a message field value;
determining a message consumption end of the alarm message according to the message field and the message field value;
determining a target notification mode for sending the alarm message;
and sending the alarm message to the message consumption terminal based on the notification mode.
2. The method according to claim 1, wherein the determining whether to parse the alarm message according to the message type and the message acquisition time to obtain a parsing determination result includes:
determining a message processing time range of the alarm message according to the message type;
if the message acquisition time is within the message processing time range, the analysis judging result is that the message analysis is carried out on the alarm message; the method comprises the steps of,
and if the message acquisition time is not in the message processing time range, the analysis judging result is that the message analysis is not carried out on the alarm message.
3. The method of claim 1, further comprising, after said message parsing the alert message to obtain a message field and a message field value:
determining a field matching result based on a preset field matching rule according to the message field; the method comprises the steps of,
determining a field value matching result based on a preset field value matching rule according to the message field value;
judging whether to execute the message consumption end of the alarm message according to the message field and the message field value according to the field matching result and the field value matching result.
4. A method according to claim 3, characterized in that the method further comprises:
if the field matching result and the field value matching result are both matching passing, determining whether a history message corresponding to the alarm message exists in a history time period;
if yes, generating notification content according to the alarm message and the history message; the method comprises the steps of,
if not, generating notification content according to the alarm message;
correspondingly, the sending the alarm message to the message consumption end based on the notification mode includes:
and sending the alarm message and the notification content to the message consumption terminal based on the notification mode.
5. The method of claim 4, wherein generating notification content from the alert message and the history message comprises:
determining abnormal state duration according to the abnormal time in the alarm message and the abnormal time in the history message; the method comprises the steps of,
determining abnormal grade change information according to the grade state in the alarm message and the grade state in the history message;
and generating notification content according to the abnormal state duration time and the abnormal grade change information.
6. The method of claim 1, wherein the determining a target notification manner for sending the alert message comprises:
determining whether a first notification mode corresponding to the message type exists in a pre-configured message notification association relation;
if yes, determining the first notification mode as the target notification mode; the method comprises the steps of,
if not, determining a second notification mode corresponding to the message consumer based on a preset consumer notification mode mapping relation, and determining the second notification mode as a target notification mode.
7. An alert message processing apparatus, comprising:
the alarm message acquisition module is used for acquiring alarm messages and determining the message types and the message acquisition time of the alarm messages;
the message analysis module is used for judging whether to analyze the message of the alarm message according to the message type and the message acquisition time to obtain an analysis judgment result;
the message field determining module is used for carrying out message analysis on the alarm message if the analysis judging result is that the message analysis is carried out, so as to obtain a message field and a message field value;
the consumption end determining module is used for determining a message consumption end of the alarm message according to the message field and the message field value;
a notification mode determining module, configured to determine a target notification mode for sending the alarm message;
and the alarm message sending module is used for sending the alarm message to the message consumption terminal based on the notification mode.
8. The apparatus of claim 7, wherein the message parsing module comprises:
a time range determining unit, configured to determine a message processing time range of the alarm message according to the message type;
the first message analysis unit is used for analyzing the message of the alarm message if the message acquisition time is within the message processing time range; the method comprises the steps of,
and the second message analysis unit is used for judging that the message analysis is not performed on the alarm message if the message acquisition time is not in the message processing time range.
9. An electronic device, the electronic device comprising:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein,
the memory stores a computer program executable by the at least one processor to enable the at least one processor to perform the alert message processing method of any one of claims 1-6.
10. A computer readable storage medium storing computer instructions for causing a processor to implement the alarm message processing method of any one of claims 1-6 when executed.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410032651.2A CN117714561A (en) | 2024-01-09 | 2024-01-09 | Alarm message processing method, device, equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410032651.2A CN117714561A (en) | 2024-01-09 | 2024-01-09 | Alarm message processing method, device, equipment and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN117714561A true CN117714561A (en) | 2024-03-15 |
Family
ID=90153472
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202410032651.2A Pending CN117714561A (en) | 2024-01-09 | 2024-01-09 | Alarm message processing method, device, equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN117714561A (en) |
-
2024
- 2024-01-09 CN CN202410032651.2A patent/CN117714561A/en active Pending
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112911013A (en) | Cloud application processing method and device, computer equipment and storage medium | |
| CN112948223B (en) | Method and device for monitoring running condition | |
| CN112579903A (en) | User account processing method, device, equipment and storage medium | |
| CN115904656A (en) | State control method, device and equipment applied to chip and storage medium | |
| CN115034927A (en) | Data processing method and device, electronic equipment and storage medium | |
| CN115426287B (en) | System monitoring and optimizing method and device, electronic equipment and medium | |
| CN116594563A (en) | Distributed storage capacity expansion method and device, electronic equipment and storage medium | |
| CN117093627A (en) | Information mining method, device, electronic equipment and storage medium | |
| CN115168154B (en) | Abnormal log detection method, device and equipment based on dynamic baseline | |
| CN117714561A (en) | Alarm message processing method, device, equipment and storage medium | |
| CN115629903A (en) | Task delay monitoring method, device, equipment and storage medium | |
| CN113010571B (en) | Data detection method, device, electronic equipment, storage medium and program product | |
| CN116225941A (en) | Page detection method and device, electronic equipment and storage medium | |
| CN115601043A (en) | Risk transaction processing method and device, electronic equipment and storage medium | |
| CN116501968A (en) | Method, device, electronic equipment and medium for subscribing internet of things data | |
| CN114710590A (en) | Crank call detection method, device, equipment and medium | |
| CN117010908A (en) | Information display method and device, electronic equipment and storage medium | |
| CN118802495A (en) | System fault checking method and device, electronic equipment and storage medium | |
| CN116170278A (en) | Alarm processing method and device | |
| CN118502797A (en) | Alarm method, device, equipment and medium of application program package | |
| CN115525516A (en) | Task scheduling alarm method and device, electronic equipment and storage medium | |
| CN116455999A (en) | Application state management method and device, electronic equipment and storage medium | |
| CN117081939A (en) | Traffic data processing method, device, equipment and storage medium | |
| CN117749614A (en) | Protocol rule determining method and device, electronic equipment and storage medium | |
| CN116319397A (en) | Method, device and storage medium for acquiring user network behavior portraits |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |