CN-121979746-A - Log data alarm prompting method and device, electronic equipment and readable storage medium

CN121979746ACN 121979746 ACN121979746 ACN 121979746ACN-121979746-A

Abstract

The disclosure relates to the technical field of data processing, and provides a log data alarm prompting method, a device, electronic equipment and a readable storage medium. The method comprises the steps of analyzing and processing the to-be-processed abnormal log data to obtain attribute fields corresponding to the to-be-processed abnormal log data, carrying out standardized processing on the attribute fields to obtain standardized abnormal data, carrying out frequency control de-duplication processing on the standardized abnormal data based on a preset alarm template to obtain a target alarm text, carrying out queue transmission on the target alarm text to enable the target alarm text to be displayed to a terminal device, so that the accuracy and instantaneity of alarm information are improved, the processing capacity of the abnormal log is enhanced, the reliability of alarm notification is improved, the operation and maintenance efficiency and fault repair speed are improved, the timeliness and traceability of the alarm information are ensured through a standardized format and a reliable transmission mechanism, and the service relevance and the system consistency of the alarm information are enhanced.

Inventors

Bao Naiming
Request for anonymity

Assignees

飞鸟鱼信息科技有限公司

Dates

Publication Date: 20260505
Application Date: 20251224

Claims (10)

1. The log data alarm prompting method is characterized by comprising the following steps of: analyzing the to-be-processed abnormal log data to obtain attribute fields corresponding to the to-be-processed abnormal log data; Carrying out standardized processing on the attribute field to obtain standardized abnormal data; Performing frequency control de-duplication processing on the standardized abnormal data based on a preset alarm template to obtain a target alarm text; and transmitting the target alarm text in a queue, so that the target alarm text is displayed to the terminal equipment.
2. The log data alarm prompting method according to claim 1, wherein after the frequency control deduplication processing is performed on the standardized abnormal data based on the preset alarm template, the method further comprises: performing abnormal grade evaluation processing on the target alarm text to obtain a target abnormal grade; Matching the target abnormal level with a preset notification object set to obtain a target notification object; and carrying out mode selection processing on the target notification object based on a preset notification mode to obtain a target pushing mode, wherein the target pushing mode is used for representing a queue transmission mode of the target alarm text.
3. The method for prompting log data alert according to claim 1, wherein the performing frequency control de-duplication processing on the standardized abnormal data based on a preset alert template to obtain a target alert text comprises: Performing exception type extraction processing on the standardized exception data to obtain exception characteristic data; performing frequency control de-duplication processing on the abnormal characteristic data based on a preset time window to obtain a target screening result; And filling the target screening result based on the preset warning template to obtain the target warning text.
4. The log data alert prompt method according to claim 1, wherein the normalizing the attribute field to obtain normalized abnormal data comprises: Performing context completion processing on the attribute field to obtain a target extension field; And carrying out formatting packaging treatment on the target extension field to obtain the standardized abnormal data.
5. The log data alarm prompting method according to claim 1, wherein the analyzing the to-be-processed abnormal log data to obtain the attribute field corresponding to the to-be-processed abnormal log data includes: performing format recognition processing on the to-be-processed abnormal log data to obtain a log format type; performing field extraction processing on the log format type to obtain a field extraction result; and carrying out structured packaging treatment on the field extraction result to obtain the attribute field.
6. The log data alarm prompting method according to claim 1, wherein before the analyzing the to-be-processed abnormal log data to obtain the attribute field corresponding to the to-be-processed abnormal log data, the method further comprises: acquiring log data; Performing association matching processing on the log data based on a preset abnormal keyword list to obtain an initial abnormal log; and carrying out source marking processing on the initial exception log to obtain the exception log data to be processed.
7. The log data alert prompt method as claimed in claim 1, further comprising, after said queuing the target alert text for display to a terminal device: Responding to a terminal equipment display instruction to perform interface rendering processing on the terminal equipment to obtain a visual alarm interface; And responding to an alarm interface triggering instruction, and displaying the target alarm text on the visual alarm interface.
8. A log data alert prompt apparatus, comprising: the first processing module is used for analyzing and processing the to-be-processed abnormal log data to obtain attribute fields corresponding to the to-be-processed abnormal log data; the second processing module is used for carrying out standardized processing on the attribute field to obtain standardized abnormal data; The third processing module is used for performing frequency control de-duplication processing on the standardized abnormal data based on a preset alarm template to obtain a target alarm text; And the fourth processing module is used for carrying out queue transmission on the target alarm text so as to display the target alarm text to the terminal equipment.
9. An electronic device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that the processor implements the steps of the method according to any of claims 1 to 7 when the computer program is executed.
10. A readable storage medium storing a computer program, characterized in that the computer program when executed by a processor implements the steps of the method according to any one of claims 1 to 7.

Description

Log data alarm prompting method and device, electronic equipment and readable storage medium Technical Field The disclosure relates to the technical field of data processing, and in particular relates to a log data alarm prompting method, a log data alarm prompting device, electronic equipment and a readable storage medium. Background In the field of log monitoring and alarming, the prior art generally adopts a scheme of integrating elastic alarms (ELAST ALERT) by an elastic stack (ELASTIC STACK), collects logs through a collector (Beats), analyzes and processes log storage (Logstash), stores indexes by elastic search (elastic search), and carries out anomaly detection and alarming by ELAST ALERT based on another markup language (YAML Ain't Markup Language) rule. Therefore, the prior art has the problems of weak service relevance, low log information distribution efficiency, insufficient notification accuracy and poor system cooperativity caused by the lack of effective fusion between a technical implementation mechanism and a service operation mechanism of the log monitoring and alarming system. Disclosure of Invention In view of the above, embodiments of the present disclosure provide a method, an apparatus, an electronic device, and a readable storage medium for prompting log data alarms, so as to solve the problems in the prior art that, due to the lack of effective integration between a technology implementation mechanism of a log monitoring and alarm system and a service operation mechanism, service association is weak, log information allocation efficiency is low, notification accuracy is insufficient, and system coordination is poor. According to a first aspect of the disclosed embodiment, a log data alarm prompting method is provided, which comprises the steps of analyzing and processing abnormal log data to be processed to obtain attribute fields corresponding to the abnormal log data to be processed, carrying out standardized processing on the attribute fields to obtain standardized abnormal data, carrying out frequency control de-duplication processing on the standardized abnormal data based on a preset alarm template to obtain a target alarm text, and carrying out queue transmission on the target alarm text to enable the target alarm text to be displayed on a terminal device. In some embodiments, after performing frequency control de-duplication processing on standardized abnormal data based on a preset alarm template to obtain a target alarm text, performing abnormal grade evaluation processing on the target alarm text to obtain a target abnormal grade, performing matching processing on the target abnormal grade and a preset notification object set to obtain a target notification object, and performing mode selection processing on the target notification object based on a preset notification mode to obtain a target push mode, wherein the target push mode is used for representing a queue transmission mode of the target alarm text. In some embodiments, frequency control deduplication processing is performed on standardized abnormal data based on a preset alarm template to obtain a target alarm text, wherein the frequency control deduplication processing is performed on the standardized abnormal data based on a preset time window to obtain abnormal characteristic data, the frequency control deduplication processing is performed on the abnormal characteristic data based on a preset time window to obtain a target screening result, and the filling processing is performed on the target screening result based on the preset alarm template to obtain the target alarm text. In some embodiments, the standardized processing is performed on the attribute field to obtain standardized exception data, including performing context completion processing on the attribute field to obtain a target extension field, and performing formatting packaging processing on the target extension field to obtain standardized exception data. In some embodiments, analyzing the to-be-processed abnormal log data to obtain attribute fields corresponding to the to-be-processed abnormal log data comprises performing format recognition processing on the to-be-processed abnormal log data to obtain log format types, performing field extraction processing on the log format types to obtain field extraction results, and performing structured packaging processing on the field extraction results to obtain the attribute fields. In some embodiments, before the to-be-processed abnormal log data is analyzed and processed to obtain the attribute field corresponding to the to-be-processed abnormal log data, the method further comprises the steps of obtaining the log data, performing association matching processing on the log data based on a preset abnormal keyword list to obtain an initial abnormal log, and performing source marking processing on the initial abnormal log to obtain the to-be-processed abnormal log data. In some embodiments, after the