TWI847064B - Equipment detection method and equipment detection device - Google Patents

Abstract

The disclosure provides an equipment detection method and an equipment detection device. The method includes: reading a detection profile, where the detection profile indicates a device model; issuing a detection instruction to a device to be tested that belongs to the device model based on the detection profile, wherein the device to be tested performs a self-test operation in response to the detection instruction; receiving a device response message associated with the self-test operation from the device to be tested; analyzing the device response message to generate a test result of the self-test operation; and in response to determining that the test result indicates that the device to be tested has an alarm, sending a specific alarm or execute a self-healing operation.

Description

Equipment detection device and equipment detection method

The present invention relates to an equipment management mechanism, and in particular to an equipment detection device and an equipment detection method.

The self-detection and repair functions of network equipment play a key role in virtual and real networks. The self-detection function is mainly responsible for detecting whether the software/hardware of network equipment is operating normally and ensuring the integrity and reliability of various functions of network equipment. It is an important means to improve the stability of network equipment. The self-detection function of network equipment is usually composed of multiple functional detection items. Due to different hardware environments, different network equipment has very different specific detection items of self-detection, and each detection item is relatively independent and the judgment method is also different.

Therefore, for technical personnel in this field, how to design a mechanism that can provide a large number of regular detection operations for various network devices in virtual and real network environments, and flexibly control the execution of self-detection test items, detection sequence, alarm conditions, and subsequent repair actions is an important issue.

In view of this, the present invention provides a device detection apparatus and a device detection method, which can be used to solve the above technical problems.

The present invention provides a device detection apparatus, including a detection profile reading module, a device information acquisition module, a detection analysis and interpretation module, and an alarm and self-repair module. The detection profile reading module reads a first detection profile, wherein the first detection profile indicates a first device model. In response to a call from the detection profile reading module, the device information acquisition module issues a first detection instruction to a first device to be detected belonging to the first device model based on the first detection profile, wherein the first device to be detected performs a first self-detection operation in response to the first detection instruction, and the device information acquisition module receives a first device feedback message associated with the first self-detection operation from the first device to be detected. The detection analysis and interpretation module analyzes the message returned by the first device to generate a first detection result of the first self-detection operation. In response to determining that the first detection result indicates that a first alarm occurs in the first device to be detected, the alarm and self-repair module sends a first specific alarm or performs a first self-repair operation accordingly.

The present invention proposes a device detection method, comprising: reading a first detection configuration file, wherein the first detection configuration file indicates a first device model; issuing a first detection instruction to a first device to be detected belonging to the first device model based on the first detection configuration file, wherein the first device to be detected performs a first self-detection operation in response to the first detection instruction; receiving a first device return message associated with the first self-detection operation from the first device to be detected; analyzing the first device return message to generate a first detection result of the first self-detection operation; and responding to determining that the first detection result indicates that a first alarm occurs in the first device to be detected, sending a first specific alarm or performing a first self-repair operation accordingly.

110: Equipment detection device

111: Detection configuration file reading module

112: Equipment information acquisition module

113: Detection, analysis and interpretation module

114: Alarm and self-repair module

115: Output module

121~12N: Equipment to be tested

C1, C2: detection instructions

R1, R2, RN: Device returns message

S210~S250: Steps

Figure 1 is a schematic diagram of a device detection apparatus and a device to be detected according to one embodiment of the present invention.

Figure 2 is a flow chart of a device detection method according to one embodiment of the present invention.

FIG3 is a schematic diagram of a detection profile and its tree hierarchy according to an embodiment of the present invention.

FIG4 is a schematic diagram of a detection profile and its tree hierarchy according to the first embodiment of the present invention.

Figure 5 is a schematic diagram of a device response message drawn according to the first embodiment of the present invention.

FIG6 is a schematic diagram of a detection profile and its tree hierarchy according to the second embodiment of the present invention.

Figure 7 is a schematic diagram of a device response message drawn according to the second embodiment of the present invention.

Figure 8 is a schematic diagram of a report drawn according to the second embodiment of the present invention.

Please refer to FIG1, which is a schematic diagram of a device detection device and a device to be detected according to an embodiment of the present invention. As shown in FIG1, the device detection device 110 includes a detection configuration file reading module 111, a device information acquisition module 112, a detection analysis and interpretation module 113, an alarm and self-repair module 114 and an output module 115. In one embodiment, the detection profile reading module 111, the device information acquisition module 112, the detection analysis and interpretation module 113, the alarm and self-repair module 114 and the output module 115 can be hardware modules respectively, wherein the device information acquisition module 112 can be coupled between the detection profile reading module 111 and the detection analysis and interpretation module 113, and the alarm and self-repair module 114 can be coupled between the detection analysis and interpretation module 113 and the output module 115. In this case, the detection profile reading module 111, the equipment information acquisition module 112, the detection analysis and interpretation module 113, the alarm and self-repair module 114 and the output module 115 can work together to implement the equipment detection method proposed by the present invention.

In another embodiment, the equipment detection device 110 may include a storage circuit (such as a hard disk or various memories) and a processor (such as a CPU), and the detection configuration file reading module 111, the equipment information acquisition module 112, the detection analysis and interpretation module 113, the alarm and self-repair module 114 and the output module 115 may be implemented as software modules stored in the storage circuit. In this case, the processor may access the detection configuration file reading module 111, the equipment information acquisition module 112, the detection analysis and interpretation module 113, the alarm and self-repair module 114 and the output module 115 to implement the equipment detection method proposed by the present invention, but it is not limited to this.

Please refer to FIG. 2, which is a flow chart of a device detection method according to an embodiment of the present invention. The method of this embodiment can be executed by the device detection device 110 of FIG. 1. The following is a description of the details of each step of FIG. 2 in conjunction with the components shown in FIG. 1.

First, in step S210, the detection profile reading module 111 reads a first detection profile, wherein the first detection profile may indicate a first device model. In an embodiment of the present invention, the first detection profile may have a common data format, such as a JSON (JavaScript Object Notation) file, but is not limited thereto.

In general, after reading the first detection configuration file, the device detection device 110 can control one or more of the devices 121 to 12N to be detected that belong to the first device model to perform self-detection operations accordingly. In different embodiments, each device 121 to 12N to be detected can be a physical device or a virtual device. For ease of explanation, it is assumed below that the devices 121 and 122 to be detected belong to the first device model, but it is not limited to this. After the devices 121 and 122 to be detected complete the self-detection operation, the corresponding device response can be returned to the device detection device 110 accordingly.

In one embodiment, the maintenance personnel can edit the first detection configuration file in the above-mentioned universal data format for the first device model to be detected. In some embodiments, the first detection configuration file may also include an interface application program interface corresponding to the first device model and a first detection list associated with the first device model.

In one embodiment, the interface application program interface is, for example, a transmission interface corresponding to at least one of the Simple Network Management Protocol (SNMP), the Secure Shell (SSH) protocol, and the RestAPI, but is not limited thereto. For example, assuming that the interface application program interface corresponding to the first device model is recorded as an SNMP interface, the device detection device 110 can communicate/control the device to be detected belonging to the first device model through SNMP. For another example, assuming that the interface application program interface corresponding to the first device model is recorded as an SSH protocol interface, the device detection device 110 can communicate/control the device to be detected belonging to the first device model through the SSH protocol interface, but is not limited thereto.

In one embodiment, the first detection list associated with the first device model may include at least one of the detection cycle applicable to the devices 121 and 122 to be detected belonging to the first device model (e.g., detection every 15 minutes/daily/monthly, etc.), detection instructions (e.g., instructions or parameters to be issued to the devices 121 and 122 to be detected), detection keyword groups, detection logic, detection alarm principles, and detection alarm actions.

In one embodiment, since only part of the equipment response provided by each of the equipment to be tested 121 and 122 may be used by the equipment detection device 110, the maintenance personnel can define the required keyword group in the detection keyword group to extract the required content from the above equipment response.

In some embodiments, since there may be more than one detection keyword group captured, when the maintenance personnel believe that only one detection keyword group meets the requirements, the detection logic can be set to "One" accordingly. In addition, when the maintenance personnel believe that all detection keyword groups must meet the requirements to meet the requirements, the detection logic can be set to "All" accordingly, but it is not limited to this.

In one embodiment, the detection alarm policy may define a detection policy and a detection operator (such as ANR/OR) to define the situation that is determined to be normal or requires an alarm. For example, when the detection alarm policy records "detection policy A AND detection policy B", it means that an alarm is determined to exist when both detection policy A and detection policy B are satisfied. On the other hand, when the detection alarm policy records "detection policy A OR detection policy B", it means that an alarm is determined to exist when either detection policy A or detection policy B is satisfied, but it is not limited to this.

In one embodiment, the alarm detection action may record the corresponding action taken when it is determined that an alarm exists, such as sending an alarm or performing a self-repair operation, but it is not limited to this.

After reading the first detection profile, the detection profile reading module 111 can correspondingly call the device information acquisition module 112 to issue a first detection instruction to one or more devices to be detected belonging to the first device model.

Correspondingly, in step S220, the device information acquisition module 112 issues a first detection instruction C1 to the first device to be detected belonging to the first device model based on the first detection configuration file in response to the call of the detection configuration file reading module 111, wherein the first device to be detected performs a first self-detection operation in response to the first detection instruction C1.

For the sake of explanation, it is assumed that the device to be detected 111 is the first device to be detected belonging to the first device model, but this is only used as an example and is not used to limit the possible implementation methods of the present invention. In this case, the device to be detected 111 can execute the corresponding first self-detection operation in response to the first detection instruction C1, and can correspondingly provide the first device return message R1 related to the first self-detection operation to the device detection device 110.

Therefore, in step S230, the device information acquisition module 112 receives the first device feedback message R1 associated with the first self-detection operation from the first device to be detected.

Afterwards, in step S240, the detection analysis and interpretation module 113 analyzes the first device return message R1 to generate the first detection result of the first self-detection operation.

In one embodiment, the detection analysis and interpretation module 113 may use a regular expression to obtain a detection keyword group from the first device return message R1, and analyze the detection keyword group according to the above detection principle and the above detection operation element to obtain a first detection result, wherein the first detection result may indicate whether there is an alarm in the first device to be detected. The relevant details can be referred to the previous description and will not be elaborated here.

In step S250, in response to determining that the first detection result indicates that the first device to be detected has a first alarm, the alarm and self-repair module 114 sends a first specific alarm or performs a first self-repair operation accordingly.

In one embodiment, the alarm and self-repair module 114 may send a first specific alarm or perform a first self-repair operation for the first alarm according to the detection alarm action recorded in the first detection profile, but is not limited thereto. In one embodiment, the alarm and self-repair module 114 may, for example, send the first specific alarm to the relevant maintenance personnel to notify the maintenance personnel to perform corresponding processing on the first alarm on the first device to be detected. In other embodiments, the alarm and self-repair module 114 may, for example, control the first device to be detected to perform the first self-repair operation to try to allow the first device to be detected to eliminate the first alarm by itself, but is not limited thereto.

In the scenario of FIG. 1 , assuming that the device to be detected 122 also belongs to the first device model indicated in the first detection profile, the device information acquisition module 112 can also issue a first detection instruction C1 to the device to be detected 122 of the first device model based on the above-mentioned first detection profile to control the device to be detected 122 to perform a second self-detection operation, and receive a second device return message R2 corresponding to the second self-detection operation from the device to be detected 112. Afterwards, the detection analysis and interpretation module 113 can analyze the second device return message R2 to generate a second detection result of the second self-detection operation. Then, in response to determining that the second detection result indicates that the device to be detected 122 has a second alarm, the alarm and self-repair module 114 can send a second specific alarm or perform a second self-repair operation accordingly. For relevant details, please refer to the description in the previous embodiment and will not be elaborated here.

In one embodiment, the detection profile reading module 111 can also read a second detection profile, wherein the second detection profile can indicate a second device model. The device information acquisition module 112 can issue a second detection instruction C2 to a third device to be detected belonging to the second device model based on the second detection profile in response to a call from the detection profile reading module 111. In one embodiment, assuming that the device to be detected 12N belongs to the second device model, the device information acquisition module 112 can send a second detection instruction C2 to the device to be detected 12N, and perform a third self-detection operation in response to the second detection instruction C2. Thereafter, the device information acquisition module 112 can receive a third device return message RN associated with the third self-detection operation from the device to be detected 12N. Then, the detection analysis and interpretation module 113 can analyze the third device return message RN to generate a third detection result of the third self-detection operation. In response to determining that the third detection result indicates that the device to be detected 12N has a third alarm, the alarm and self-repair module 114 sends a third specific alarm or performs a third self-repair operation accordingly. The relevant details can be referred to the description in the previous embodiment and will not be elaborated here.

In one embodiment, after completing the relevant tests on each of the devices to be tested 121~12N, the output module 115 can generate a corresponding report for reference by maintenance personnel, but it is not limited to this.

Please refer to FIG. 3, which is a schematic diagram of a detection profile and its tree hierarchy according to an embodiment of the present invention. In the scenario of FIG. 3, the detection profile shown can perform two types of self-detection on device A (i.e., Device A), and the details can be recorded in "DeviceA_Alarm_Level_1" and "DeviceA_Alarm_Level_2", and the details will be further explained with the help of the following first embodiment and second embodiment.

Please refer to FIG. 4, which is a schematic diagram of a detection profile and its tree hierarchy according to the first embodiment of the present invention. In the scenario of FIG. 4, it is assumed that the device detection device 110 wants to check the MPLS status of device A every 5 minutes, and will send an alarm if Status and State are not up. Accordingly, the detection profile named "DeviceA_Alarm_Level_1" can be edited to have the content shown on the left side of FIG. 4. For example, from the parameters such as "interval" and "intervalUnit" corresponding to the detection cycle, it can be seen that the detection cycle is 5 minutes. From the "cmd" corresponding to the detection command, it can be seen that the detection command is "show mpls traffic-eng tunnels role head brief". From the "candidateRE" corresponding to the detection keyword group, it can be seen that the detection keyword group is "([a-zA-Z0-9_\-\*]+)\s+([0-9\.]+)\s+([a-zA-Z]+)\s+([a-zA-Z]+)$". From the "checkPolicy" corresponding to the detection logic, it can be seen that each keyword must be met. From the "rule" and "operator" corresponding to the detection alarm policy, it can be seen that in the obtained detection keyword group, if the 3rd and 4th columns are both "up", it is normal, otherwise there is an alarm. From the "alarmAction" corresponding to the detection alarm action, it can be seen that the "MSER MPLS alarm" alarm can be sent.

Please refer to FIG. 5, which is a schematic diagram of a device response message according to the first embodiment of the present invention. In the scenario of FIG. 5, the device response message includes 9 detection keyword groups marked with a gray background, wherein the third and fourth columns of each detection keyword group are both "up", so the device detection device 110 can determine that it is normal, so there is no need to send an alarm.

Please refer to FIG. 6, which is a schematic diagram of a detection configuration file and its tree hierarchy according to the second embodiment of the present invention. In the scenario of FIG. 6, it is assumed that the device detection device 110 wants to check the configuration backup file (i.e., config.cfg) of device A every day, and when it is determined that the date is not yesterday or today, it will issue an alarm and immediately perform the configuration backup operation.

Correspondingly, the detection profile named "DeviceA_Alarm_Level_2" can be edited to have the content shown on the left side of Figure 6. For example, from the parameters "interval" and "intervalUnit" corresponding to the detection cycle, it can be seen that the detection cycle is 1 day. From the "cmd" corresponding to the detection command, it can be seen that the detection command is "dir config.cfg". From the "candidateRE" corresponding to the detection keyword group, it can be seen that the detection keyword group is "\d+\s+[a-zA-Z\-\.]+\s+[\d\s]+(.+)\s+config.cfg". From the "checkPolicy" corresponding to the detection logic, it can be seen that only one keyword must be matched to be normal.

In the second embodiment, the storage time of the configuration backup file to be detected must be yesterday or today. Since the date comparison logic is more complicated (for example, it is necessary to measure that yesterday of 4/1 is 3/31, not 4/0), it is necessary to specially define this column as date comparison and further define the date format of the device response, as shown in "rule" and "operator" corresponding to the detection alarm rule. From the "alarmAction" corresponding to the detection alarm action, it can be seen that the alarm of "DeviceA backup date is abnormal" can be sent, and the configuration backup can be performed (that is, "copy running-config config.cfg").

Please refer to FIG. 7, which is a schematic diagram of a device response message according to the second embodiment of the present invention. In the scenario of FIG. 7, the device response message includes a set of detection keyword groups marked with a gray background, and its execution date is "Fri Oct 30 04:46:37 2020". In the second embodiment, if this date is not within the set "yesterday or today's time period", a "DeviceA backup date abnormal" alarm will be sent and configuration backup will be performed. After the detection is completed, a report as shown in FIG. 8 can be generated.

Please refer to FIG8, which is a schematic diagram of a report according to the second embodiment of the present invention. As can be seen from FIG8, the report can completely record the detection instructions, detection results, equipment response messages and execution time, but is not limited to this. .

In summary, in the embodiment of the present invention, maintenance personnel can use their professional knowledge to edit the required detection setting file, and the equipment detection device can control the equipment to be detected to perform self-detection operations after reading and parsing the corresponding parameters in the detection setting file. In addition, the present invention can provide maintenance personnel with the flexibility to set the required detection conditions in the detection setting file, including: candidate strings, detection principles, detection fields, detection field formats, detection operators, detection values, etc. Through the interpretation module of the universal detection framework function, regular expressions are used to extract keyword groups for detection, and the results are calculated according to the detection principles and detection operators. When the detection result is an alarm, self-repair can be performed according to the action described in the treatment action setting field.

The method implemented in the present invention can provide a large number of regular detection operations for various network devices in virtual and real network environments, flexibly control the execution of self-detection detection items, detection sequence, alarm conditions and subsequent repair actions, without modifying the software, effectively detect hidden faults and shorten the fault and personnel inspection time, and meet the customer's monitoring equipment and risk control needs.

Based on the above, the present invention has at least the following features: (1) It can flexibly control the execution of self-detection test items, the detection sequence, alarm conditions and subsequent repair actions, which can be achieved by simply changing the detection configuration file without modifying the software; (2) It can support the execution of sequential continuous detection and has high flexibility; (3) It can support the transmission of structured data in general data driver settings, using the extremely lightweight data exchange format JSON but not limited to this format; (4) It can support various interfaces of the device, including SNMP, SSH, Re stAPI, but not limited to this type of method; (5) It flexibly supports parameterized detection instructions, detection logic of various positive/negative lists, and multiple detection formats (including string, value, and date comparison), reducing the customization of various monitoring processes; (6) When the detection result is an alarm, it can perform self-repair according to the pre-specified treatment actions, effectively detect hidden faults and shorten the fault and personnel repair time; (7) It can be applied to various network devices in virtual and real networks to perform a large number of regular detection operations to meet customers' monitoring equipment and risk control needs.

Although the present invention has been disclosed as above by the embodiments, it is not intended to limit the present invention. Anyone with ordinary knowledge in the relevant technical field can make some changes and modifications without departing from the spirit and scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the scope defined by the attached patent application.

S210~S250: Steps

Claims (6)

A device detection apparatus comprises: a detection profile reading module, which reads a first detection profile, wherein the first detection profile indicates a first device model; a device information acquisition module, which, in response to a call from the detection profile reading module, issues a first detection instruction to a first device to be detected belonging to the first device model based on the first detection profile, wherein the first device to be detected performs a first self-detection operation in response to the first detection instruction, and the device information acquisition module receives a first device return message associated with the first self-detection operation from the first device to be detected; a detection analysis and interpretation module, which analyzes the first device The first detection result of the first self-detection operation is generated by returning a message; and an alarm and self-repair module, wherein in response to determining that the first detection result indicates that the first device to be detected has a first alarm, the alarm and self-repair module sends a first specific alarm and executes a first self-repair operation accordingly, wherein the first detection configuration file further includes an interface application program interface corresponding to the first device model, a first detection list associated with the first device model, wherein the first detection list includes at least one of a detection cycle and a detection keyword group, wherein the device information acquisition module issues the first detection instruction corresponding to the first detection configuration file to the first device to be detected through at least one of Simple Network Management Protocol (SNMP) and RestAPI. The device detection apparatus as described in claim 1, wherein the detection analysis and interpretation module uses a regular expression to obtain a detection keyword set from the first device return message, and analyzes the detection keywords according to at least one detection principle and at least one detection operation element to obtain the first detection result. The device detection apparatus as described in claim 1, wherein the first detection configuration file has a universal data format. The device detection device as described in claim 1, wherein: the device information acquisition module further issues the first detection instruction to a second device to be detected belonging to the first device model based on the first detection configuration file in response to the call of the detection configuration file reading module, wherein the second device to be detected performs a second self-detection operation in response to the first detection instruction, and the device information acquisition module receives a second device return message associated with the second self-detection operation from the second device to be detected; the detection analysis and interpretation module analyzes the second device return message to generate a second detection result of the second self-detection operation; and the alarm and self-repair module responds to determining that the second detection result indicates that the second device to be detected has a second alarm, and the alarm and self-repair module sends a second specific alarm or performs a second self-repair operation accordingly. The device detection apparatus as described in claim 1, wherein: the detection profile reading module further reads a second detection profile, wherein the second detection profile indicates a second device model; the device information acquisition module issues a second detection instruction to a third device to be detected belonging to the second device model based on the second detection profile in response to a call from the detection profile reading module, wherein the third device to be detected performs a third self-detection operation in response to the second detection instruction , and the device information acquisition module receives a third device return message associated with the third self-detection operation from the third device to be detected; the detection analysis and interpretation module analyzes the third device return message to generate a third detection result of the third self-detection operation; and the alarm and self-repair module responds to the determination that the third detection result indicates that the third device to be detected has a third alarm, and the alarm and self-repair module sends a third specific alarm or performs a third self-repair operation accordingly. A device detection method includes: reading a first detection configuration file, wherein the first detection configuration file indicates a first device model; issuing a first detection instruction to a first device to be detected belonging to the first device model based on the first detection configuration file, wherein the first device to be detected performs a first self-detection operation in response to the first detection instruction; receiving a first device return message associated with the first self-detection operation from the first device to be detected; analyzing the first device return message to generate a first detection result of the first self-detection operation; and and at least one of the RestAPIs issues the first detection instruction corresponding to the first detection profile to the first device to be detected; and in response to determining that the first detection result indicates that the first device to be detected has a first alarm, a first specific alarm is sent and a first self-repair operation is performed accordingly, wherein the first detection profile further includes an interface application program interface corresponding to the first device model, a first detection list associated with the first device model, wherein the first detection list includes at least one of a detection cycle and a detection keyword group.

Images