Event processing method and device

Abstract

The embodiment of the invention provides an event processing method and device and relates to the field of monitoring alarm. The method comprises the steps of receiving input events; each time when conditions of receiving the input events satisfies preset rules, taking the received input events as to-be-processed event sets and matching the to-be-processed event sets with preset alarm rules; and when the to-be-processed event sets match the preset alarm rules, generating alarm events. According to the method, real-time search and alarm can be realized, and moreover, complicated alarm corresponding to a plurality of events can be obtained. Only the currently received input events which satisfy the preset rules are processed in real time, and the number of the input events at one time is limited, so the alarm volume at the same time is limited, thereby facilitating processing of a system. Moreover, the generated complicated alarm corresponds to the plurality of input events, the contained information volume is high, the generated alarm has clearer significance, and the system is easy to carry out corresponding response rapidly.

Description

technical field [0001] The present invention relates to the field of monitoring and alarming, in particular to an event processing method and device. Background technique [0002] When the traditional monitoring and alarm system processes the collected monitoring information, it usually stores the monitored data in the database, and then reads the data from the database and executes the query to complete. [0003] This method of processing monitoring information only with database-supported queries is usually applied to query all static historical data, and it is difficult to achieve real-time query and alarm. However, due to one-time query of all historical data, alarms will be triggered. The amount is too large for the system to handle. At the same time, what is analyzed in this way is often a simple alarm corresponding to a single event. These alarms contain less information, and it is difficult for the system to respond appropriately and quickly. Furthermore, it is dif...

AI Technical Summary

Problems solved by technology

[0003] This method of processing monitoring information only with database-supported queries is usually applied to query all static historical data, and it is difficult to achieve real-time query and alarm. However, due to one-time query of all historical data, alarms will be triggered. The volume is too large for the system to handle

At the same time, what is analyzed in this way is often a simple alarm corresponding to a single event. These alarms contain less information, and it is difficult for the system to respond appropriately and quickly.

Furthermore, it is difficult to analyze complex alarms with specific rules corresponding to multiple events in this way. For such complex alarms, it is necessary to write code on the basis of analyzing simple alarm results for secondary processing, will generate a huge workload

Images