CN113282620A - JSON alarm message structure unified standard processing method, system, equipment and storage medium - Google Patents
JSON alarm message structure unified standard processing method, system, equipment and storage medium Download PDFInfo
- Publication number
- CN113282620A CN113282620A CN202110439582.3A CN202110439582A CN113282620A CN 113282620 A CN113282620 A CN 113282620A CN 202110439582 A CN202110439582 A CN 202110439582A CN 113282620 A CN113282620 A CN 113282620A
- Authority
- CN
- China
- Prior art keywords
- alarm message
- json
- database
- alarm
- unified
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/24—Querying
- G06F16/245—Query processing
- G06F16/2455—Query execution
- G06F16/24564—Applying rules; Deductive queries
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/25—Integrating or interfacing systems involving database management systems
- G06F16/254—Extract, transform and load [ETL] procedures, e.g. ETL data flows in data warehouses
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Databases & Information Systems (AREA)
- Data Mining & Analysis (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computational Linguistics (AREA)
- Alarm Systems (AREA)
Abstract
The invention provides a method, a system, equipment and a storage medium for processing a JSON alarm message structure in a unified standard. The JSON alarm message processing method comprises the following steps: receiving an alarm message produced by a monitoring tool; pulling the matching rules stored in the database; analyzing the alarm message according to the matching rule, and processing the alarm message into a target alarm message with a unified standard structure; and outputting the target alarm message to a unified platform for consumption, so that the unified platform can alarm. By adopting the technical scheme, the alarm message of the monitoring tool is automatically output to the alarm message structure with the unified standard through the matching rule stored in the database for processing and consumption of the unified platform, the process is greatly low in butt joint cost, the monitoring tool end does not need to make any modification and development, the unified standard of the unified platform is not concerned, and only the alarm message is required to be produced.
Description
Technical Field
The invention relates to the technical field of alarm information correlation, in particular to a method, a system, equipment and a storage medium for processing a JSON alarm message structure unified standard.
Background
At present, the company has various systems, the number of the systems is large, the monitoring tools of various systems are abundant and various, and the number of generated alarm messages is large, so that the alarm messages generated by various monitoring tools need to be uniformly converged, uniformly output and processed, and an alarm life cycle is borne by a platform to form an alarm closed loop.
Disclosure of Invention
In view of this, a method, a system, a device and a storage medium for processing JSON alarm message structures in a unified standard are provided to solve the problems in the related art that standards are not unified and unified processing cannot be standardized in the alarm docking process.
The invention adopts the following technical scheme:
in a first aspect, an embodiment of the present invention provides a JSON alert message processing method, including:
receiving an alarm message produced by a monitoring tool;
pulling the matching rules stored in the database;
analyzing the alarm message according to the matching rule, and processing the alarm message into a target alarm message with a unified standard structure;
and outputting the target alarm message to a unified platform for consumption, so that the unified platform can alarm.
Optionally, the method further includes:
providing a view component to facilitate a user in setting matching rules;
and storing the set matching rules in the database.
Optionally, a preset matching rule is prestored in the database.
Optionally, the number of the monitoring tools is multiple.
In a second aspect, the present application provides a JSON alert message processing system, including: the system comprises a monitoring tool, an analysis engine, a database and a unified platform;
matching rules are stored in the database; the matching rule is a rule for converting the alarm message into a target alarm message with a unified standard structure
The analysis engine receives the alarm message produced by the monitoring tool, pulls the matching rule stored in the database, analyzes the alarm message according to the matching rule, processes the alarm message into a target alarm message with a unified standard structure and outputs the target alarm message to a unified platform for consumption;
and the unified platform alarms based on the target alarm message.
Optionally, a view module;
the view module is used for providing a view component so as to facilitate the setting of the matching rule by a user and storing the set matching rule in the database.
Optionally, the method further includes: and a preset matching rule is prestored in the database.
Optionally, the method further includes: the number of the monitoring tools is multiple.
In a third aspect, the present application provides a JSON alert message processing device, including:
a processor, and a memory coupled to the processor;
the memory is used for storing a computer program, and the computer program is at least used for executing the JSON alarm message processing method provided by the application;
the processor is used for calling and executing the computer program in the memory.
In a fourth aspect, the present application provides a storage medium storing a computer program, which when executed by a processor, implements the steps in the JSON alert message processing method according to the present application.
By adopting the technical scheme, the alarm message of the monitoring tool is automatically output to an alarm message structure with a unified standard through the matching rule stored in the database for processing and consumption of the unified platform, the process is greatly low in butt joint cost, the monitoring tool end does not need to make any modification and development, does not need to care about the unified standard of the unified platform, and only needs to produce the alarm message; according to the preset standard rule, the alarm message is automatically processed, the unified platform is not required to be in customized butt joint with each monitoring tool, and when the alarm message body structure of the monitoring tool end changes, the matching rule can be adapted to the alarm processing of the engine only by adjusting or resetting, so that the time and labor development cost of the unified platform are greatly saved.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.
Fig. 1 is a flowchart of a JSON alert message processing method according to an embodiment of the present invention;
fig. 2 is a schematic structural diagram of a JSON alert message processing system according to an embodiment of the present invention;
fig. 3 is an interaction diagram of a JSON alert message processing system according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of a JSON alert message processing device according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the technical solutions of the present invention will be described in detail below. It is to be understood that the described embodiments are merely exemplary of the invention, and not restrictive of the full scope of the invention. All other embodiments, which can be derived by a person skilled in the art from the examples given herein without any inventive step, are within the scope of the present invention.
The application scenario of the embodiment of the invention is explained first, and at present, the company has various systems, a large number of systems, various monitoring tools of various systems, and a large number of generated alarm messages, and at present, the alarm messages generated by various monitoring tools need to be uniformly aggregated and converged, uniformly output and processed, and an alarm life cycle is carried by a platform to form an alarm closed loop. According to the technical scheme, the alarm message structure body is reconstructed by the monitoring tool through manual butt joint according to a unified standard, alarm is generated to be consumed by a unified platform, but the butt joint monitoring reconstruction difficulty possibly has the problems of high reconstruction cost, insufficient manpower, untimely butt joint or incapability of reconstructing the message structure body according to the standard, heavy development workload and the like. The present application proposes a corresponding solution to this problem.
Examples
Fig. 1 is a flowchart of a JSON alert message processing method according to an embodiment of the present invention, which may be executed by the JSON alert message processing system according to an embodiment of the present invention. Referring to fig. 1, the method may specifically include the following steps:
s101, receiving an alarm message produced by a monitoring tool;
specifically, the number of the monitoring tools is multiple.
S102, pulling the matching rules stored in the database;
it should be noted that, in the solution provided in the present application, further includes: providing a view component to facilitate a user in setting matching rules; and storing the set matching rules in the database.
By the arrangement, the source alarm message structure of the monitoring tool can be manually input into a system, namely a database, through the view component page, and the matching rule is set according to the unified standard. Furthermore, when the alarm message body structure of the monitoring tool end changes, the alarm processing of the engine can be adapted only by adjusting or resetting the standard rule.
Further, preset matching rules are prestored in the database. To accommodate most existing monitoring tools.
S103, analyzing the alarm message according to the matching rule, and processing the alarm message into a target alarm message with a unified standard structure;
and S104, outputting the target alarm message to a unified platform for consumption, so that the unified platform can alarm.
According to the scheme, a source alarm message structure of the monitoring tool is manually input into the system through a page, the field matching rule is set according to the unified standard, the analysis engine automatically outputs the alarm message of the monitoring tool to the alarm message structure of the unified standard through operating the field matching rule set by the page, the unified platform is used for processing and consuming, the process is greatly low in butt joint cost, the monitoring tool end does not need to make any transformation and development, does not need to care about the unified standard of the unified platform, and only needs to produce the alarm message; furthermore, the alarm message is automatically processed through the analysis engine according to the preset standard rule without the need of customizing and butting each monitoring tool by the unified platform, and when the structure of the alarm message body of the monitoring tool end changes, the alarm processing of the engine can be adapted only by adjusting or resetting the standard rule, so that the time and labor development cost of the unified platform are greatly saved.
Fig. 2 is a schematic structural diagram of a JSON alert message processing system according to an embodiment of the present invention; fig. 3 is an interaction diagram of a JSON alert message processing system according to an embodiment of the present invention. Referring to fig. 2 and fig. 3, in the solution provided in the present application, a JSON alert message processing system includes: a monitoring tool 21, a parsing engine 22, a database 23 and a unified platform 24;
matching rules are stored in the database 23; the matching rule is a rule for converting the alarm message into a target alarm message with a unified standard structure;
the analysis engine 22 receives the alarm message generated by the monitoring tool 21, pulls the matching rule stored in the database 23, analyzes the alarm message according to the matching rule, processes the alarm message into a target alarm message with a unified standard structure, and outputs the target alarm message to the unified platform 24 for consumption;
the unifying platform 24 alerts based on the target alert message.
Further, the scheme provided by the application further comprises: a view module 25;
the view module is used for providing a view component so as to facilitate the setting of the matching rule by a user and storing the set matching rule in the database.
Further, preset matching rules are prestored in the database.
Further, the number of the monitoring tools is multiple.
Specifically, referring to fig. 3, the functional module related to the present invention is as shown in fig. 3, and the basic principle is that by matching a unified standard rule, a source alarm message body structure is automatically analyzed, and the source alarm message is processed into an alarm message that can be processed by a unified platform, and the process directly avoids communication and docking with a monitoring tool end, and the monitoring tool end only needs to output the alarm message without paying attention to what structure is needed by a target alarm message, and the unified platform end does not need to pay attention to what structure is needed by the source alarm, and only needs to consume and process the alarm, thereby greatly reducing a docking book, and for docking various monitoring tools in a large range, a docking responsible person only needs to configure the matched rule, and no other time and labor cost are consumed.
The following is a core technology implementation scheme:
1. rule configuration
And providing a rule configuration page needing to be matched by the analysis engine, namely a view component in fig. 2, selecting and associating the structure of the source alarm message and the structure of the target alarm message by a dockee through a view, and writing the set matching rule into a database for the analysis engine to pull and match.
Producer-alarm message Producer
The Producer is an alarm message Producer, namely each monitoring tool, and only needs to produce alarm messages in the whole process and supply the alarm messages to the analysis engine for consumption without any other processing.
3. Analytic engine
The analysis Engine is composed of two components, one is a consumption component of the alarm message, namely, a Consumer, and the other is a processing component, namely, an Engine, which is used for matching the alarm analysis rule and processing the alarm message structure, the Consumer receives and acquires the alarm message produced by the monitoring tool, the Engine receives and processes the source alarm message, the Engine pulls the matching rule stored in the DB, analyzes the source alarm message according to the unified standard rule, processes the source alarm message into the target alarm message structure, and outputs the target alarm message structure to the unified platform for consumption.
4. Unified platform-alert message handler
The unified platform is used as a final processor of the alarm message, and receives the processed alarm message from the analysis engine and consumes and processes the processed alarm message.
An embodiment of the present invention further provides a JSON alert message processing device, please refer to fig. 4, where fig. 4 is a schematic structural diagram of a JSON alert message processing device, and as shown in fig. 4, the JSON alert message processing device includes: a processor 41, and a memory 42 connected to the processor 41; the memory 42 is used for storing a computer program for executing at least a response method of the JSON alert message processing device in the embodiment of the present invention; the processor 41 is used to call and execute the computer program in the memory.
The present application further provides a storage medium, where a computer program is stored, and when the computer program is executed by a processor, the steps in the JSON alarm message processing method provided in the present application are implemented.
It is understood that the same or similar parts in the above embodiments may be mutually referred to, and the same or similar parts in other embodiments may be referred to for the content which is not described in detail in some embodiments.
It should be noted that the terms "first," "second," and the like in the description of the present invention are used for descriptive purposes only and are not to be construed as indicating or implying relative importance. Further, in the description of the present invention, the meaning of "a plurality" means at least two unless otherwise specified.
Any process or method descriptions in flow charts or otherwise described herein may be understood as representing modules, segments, or portions of code which include one or more executable instructions for implementing specific logical functions or steps of the process, and alternate implementations are included within the scope of the preferred embodiment of the present invention in which functions may be executed out of order from that shown or discussed, including substantially concurrently or in reverse order, depending on the functionality involved, as would be understood by those reasonably skilled in the art of the present invention.
It should be understood that portions of the present invention may be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, the various steps or methods may be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, any one or combination of the following techniques, which are known in the art, may be used: a discrete logic circuit having a logic gate circuit for implementing a logic function on a data signal, an application specific integrated circuit having an appropriate combinational logic gate circuit, a Programmable Gate Array (PGA), a Field Programmable Gate Array (FPGA), or the like.
It will be understood by those skilled in the art that all or part of the steps carried by the method for implementing the above embodiments may be implemented by hardware related to instructions of a program, which may be stored in a computer readable storage medium, and when the program is executed, the program includes one or a combination of the steps of the method embodiments.
In addition, functional units in the embodiments of the present invention may be integrated into one processing module, or each unit may exist alone physically, or two or more units are integrated into one module. The integrated module can be realized in a hardware mode, and can also be realized in a software functional module mode. The integrated module, if implemented in the form of a software functional module and sold or used as a stand-alone product, may also be stored in a computer readable storage medium.
The storage medium mentioned above may be a read-only memory, a magnetic or optical disk, etc.
In the description herein, references to the description of the term "one embodiment," "some embodiments," "an example," "a specific example," or "some examples," etc., mean that a particular feature, structure, material, or characteristic described in connection with the embodiment or example is included in at least one embodiment or example of the invention. In this specification, the schematic representations of the terms used above do not necessarily refer to the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.
Although embodiments of the present invention have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting the present invention, and that variations, modifications, substitutions and alterations can be made to the above embodiments by those of ordinary skill in the art within the scope of the present invention.
Claims (10)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110439582.3A CN113282620A (en) | 2021-04-23 | 2021-04-23 | JSON alarm message structure unified standard processing method, system, equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110439582.3A CN113282620A (en) | 2021-04-23 | 2021-04-23 | JSON alarm message structure unified standard processing method, system, equipment and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN113282620A true CN113282620A (en) | 2021-08-20 |
Family
ID=77277234
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110439582.3A Pending CN113282620A (en) | 2021-04-23 | 2021-04-23 | JSON alarm message structure unified standard processing method, system, equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113282620A (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106778873A (en) * | 2016-12-19 | 2017-05-31 | 北京市天元网络技术股份有限公司 | A kind of warning information classification method of disposal and device based on white list rule |
| CN109218097A (en) * | 2018-09-19 | 2019-01-15 | 山东浪潮云投信息科技有限公司 | A kind of warning system and alarm method of cloud platform configurable alert rule |
| CN109639465A (en) * | 2018-11-27 | 2019-04-16 | 平安科技（深圳）有限公司 | Warning information storage method and device based on cloud platform |
| WO2019165883A1 (en) * | 2018-03-01 | 2019-09-06 | 中兴通讯股份有限公司 | Data processing method and apparatus |
| CN112671560A (en) * | 2020-12-11 | 2021-04-16 | 广东电力通信科技有限公司 | High-availability distributed real-time alarm processing method and system |
-
2021
- 2021-04-23 CN CN202110439582.3A patent/CN113282620A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106778873A (en) * | 2016-12-19 | 2017-05-31 | 北京市天元网络技术股份有限公司 | A kind of warning information classification method of disposal and device based on white list rule |
| WO2019165883A1 (en) * | 2018-03-01 | 2019-09-06 | 中兴通讯股份有限公司 | Data processing method and apparatus |
| CN109218097A (en) * | 2018-09-19 | 2019-01-15 | 山东浪潮云投信息科技有限公司 | A kind of warning system and alarm method of cloud platform configurable alert rule |
| CN109639465A (en) * | 2018-11-27 | 2019-04-16 | 平安科技（深圳）有限公司 | Warning information storage method and device based on cloud platform |
| CN112671560A (en) * | 2020-12-11 | 2021-04-16 | 广东电力通信科技有限公司 | High-availability distributed real-time alarm processing method and system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8701080B2 (en) | Template components having constraints representative of best practices in integration software development | |
| US8468391B2 (en) | Utilizing log event ontology to deliver user role specific solutions for problem determination | |
| CN112068817B (en) | Code generation method, system, device and medium for terminal side of Internet of things | |
| US20080010082A1 (en) | System and method for business process management | |
| US20090037459A1 (en) | Annotation data handlers for data stream processing | |
| CN101996132A (en) | Method and device for automatically testing common object request broker architecture (CORBA) interfaces | |
| US8296723B2 (en) | Configurable unified modeling language building blocks | |
| CN105407024A (en) | Heterogeneous data intercommunication method and apparatus based on publishing and subscription communication mechanism | |
| JP2013542474A (en) | Automated analysis of composite applications | |
| CN111383104A (en) | Method and device for acquiring fund investment supervision indexes | |
| CN109522005A (en) | Cross-platform GRAPHICAL PROGRAMMING method | |
| CN115438768A (en) | Model reasoning method, device, computer equipment and storage medium | |
| CN114880321A (en) | A business early warning method and device | |
| CN111581183A (en) | Data migration method and device based on data model | |
| CN114895945A (en) | Protobuf data coding method and device | |
| US12197401B2 (en) | Object creation from schema for event streaming platform | |
| US8799860B2 (en) | System and method for expressing XML schema validation using java in a declarative manner | |
| US20130127863A1 (en) | Determining an optimal sequence of status transitions for business objects | |
| CN101694617A (en) | Multi-language support implementing method based on resource identifier | |
| CN113282620A (en) | JSON alarm message structure unified standard processing method, system, equipment and storage medium | |
| CN109324823B (en) | Digital content resource heterogeneous multi-element integration system and integration method | |
| CN109754849B (en) | Personal health stream data processing system and method in cloud computing environment | |
| CN109783253A (en) | Distributed message data/address bus based on kafka | |
| CN109189468A (en) | A kind of access of examination & approval data source configurationization and XML map configurationization system | |
| CN110968404A (en) | Equipment data processing method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20210820 |