CN103744766B

CN103744766B - A kind of method of work of monitoring system

Info

Publication number: CN103744766B
Application number: CN201310743692.4A
Authority: CN
Inventors: 陆舟; 于华章
Original assignee: Feitian Technologies Co Ltd
Current assignee: Feitian Technologies Co Ltd
Priority date: 2013-12-30
Filing date: 2013-12-30
Publication date: 2016-08-24
Anticipated expiration: 2033-12-30
Also published as: CN103744766A

Abstract

The present invention provides the method for work of a kind of monitoring system, belongs to information security field.Described method includes, control centre automatically sets up monitoring and is connected with monitored machine, when being successfully established monitoring and connecting, obtain the OS name of monitored machine, OS name according to monitored machine loads corresponding instruction database, resources occupation rate instruction is obtained from instruction database, and send it to monitored machine, control centre obtains resources occupation rate from the systematic function response received, when resources occupation rate reaches early warning range, control centre uses the processing mode in configuration information to process；The beneficial effects of the present invention is, control centre can obtain the resources occupation rate of monitored machine, when resources occupation rate reaches pre-set ratio, it is automatically adjusted in monitored machine the process run, deduction and exemption early warning is to the interlude of manual operation, improve O&M efficiency, reduce O&M cost, ensure the stable operation of monitored machine.

Description

Working method of monitoring system

Technical Field

The invention relates to the field of information security, in particular to a working method of a monitoring system.

Background

The current systems require high stability during operation. In terms of stability, the stability of the server is a major part, i.e., the stability of the server is a prerequisite for stable operation of the system. Usually, due to defects in system design or other reasons, CPU, memory, etc. of the server are high and even crashed, which will affect the high speed and stable operation of the system. In order to ensure the stable operation of the system, the stability of the server is ensured to be the primary consideration.

In the prior art, information is early-warned to an administrator by monitoring a bad operation state of a server, and the normal operation of the server and the system cannot be guaranteed due to the fact that the administrator cannot timely process the information.

Disclosure of Invention

To solve the drawbacks of the prior art, the present invention provides a method for operating a monitoring system, including,

step S1: firstly, the control center reads the configuration information of the monitored machine and automatically connects the monitored machine according to the configuration information;

step S2: when the control center establishes monitoring connection with the monitored machine, the control center obtains the name of an operating system of the monitored machine, and loads a corresponding instruction library according to the name of the operating system;

step S3: the control center acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, waits for receiving a system performance response returned by the monitored machine, and executes step S4;

step S4: the control center acquires the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches an early warning range, and executes the step S5 if the resource occupancy rate reaches the early warning range; otherwise, returning to the step S3 after waiting for the first preset time;

step S5: the control center processes the first class process in the monitored machine, acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, waits for receiving a system performance response returned by the monitored machine, and executes step S6;

step S6: the control center acquires the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches the early warning range, if so, the control center processes a second type of process in the monitored machine, acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, waits for receiving the system performance response returned by the monitored machine, and executes the step S7; otherwise, returning to the step S3;

step S7: the control center obtains the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches the early warning range, if so, the control center restarts the monitored machine, and returns to the step S3; otherwise, the process returns to step S3.

The automatic connection of the monitored machine according to the configuration information is specifically that the control center sends a monitoring connection establishment request containing a machine account number and a machine password to the monitored machine, judges whether an authorization response returned by the monitored machine is received within a first preset time, and if so, the connection is successful; otherwise, sending the warning information of the connection not established to the administrator to wait for the administrator to process.

In step S2, the loading the corresponding instruction library according to the operating system name specifically includes,

step S2-1: the control center judges whether the configuration information has an operating system name, if so, the control center executes the step S2-4; otherwise, executing step S2-2;

step S2-2: the control center sends a system platform retrieval instruction to the monitored machine, waits for receiving a system platform response returned by the monitored machine, and executes the step S2-3;

step S2-3: the control center obtains the operating system name from the system platform response, writes the operating system name into the configuration information, and executes the step S2-4;

step S2-4: and the control center loads an instruction library matched with the name of the operating system.

The resource occupancy rate instruction is obtained from the instruction library, and is sent to the monitored machine, and a system performance response returned by the monitored machine is waited to be received, specifically,

the control center acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, judges whether a response returned by the monitored machine is received within third preset time, and continues to execute the operation if the response returned by the monitored machine is received within the third preset time; otherwise, sending a report that the system performance response is unknown to the administrator, and waiting for receiving the system performance response sent by the administrator.

The sending of the report of unknown system performance response to the administrator waits for receiving the system performance response sent by the administrator, and may be that the control center restarts the monitored machine.

The step S7 includes before the control center restarts the monitored machine,

the control center processes a third type of process in the monitored machine, acquires a resource occupancy rate instruction from the instruction library and sends the resource occupancy rate instruction to the monitored machine, when a system performance response returned by the monitored machine is received, the control center acquires the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches an early warning range, if so, the control center restarts the monitored machine, and returns to the step S3; otherwise, the process returns to step S3.

The processing of the third class of processes in the monitored machine may specifically include,

step R1: the control center acquires a scanning connection instruction from the instruction library, sends the scanning connection instruction to the monitored machine, and waits for receiving a scanning connection response returned by the monitored machine;

step R2: the control center acquires a first process serial number according to the scanning connection response, and takes the first process serial number as a current process serial number;

step R3: the control center acquires a process stopping instruction from the instruction library, sends the process stopping instruction containing a current process serial number to the monitored machine, acquires a process checking instruction from the instruction library, sends the process checking instruction containing the current process serial number to the monitored machine, and waits for receiving a process checking response returned by the monitored machine;

step R4: the control center judges whether the current process is successfully stopped according to the process checking response, if so, the control center executes a step R5; otherwise, sending the current process stop failure alarm information to the administrator, waiting for the administrator to process, and ending;

step R5: the control center judges whether a next process exists according to the scanning connection response, if so, the control center obtains a next process serial number according to the scanning connection response, takes the next process serial number as a current process serial number, and returns to the step R3; otherwise, ending.

The step R2 is specifically that,

the control center judges whether a connected process exists according to the scanning connection response, if so, a first process serial number is obtained from the scanning connection response and is used as a current process serial number; otherwise, restarting the monitored machine.

In step S5, the control center processes the first type of process in the monitored machine, and instead, the control center processes the second type of process in the monitored machine; in the step S6, the control center processes the second type of process in the monitored machine, and instead, the control center processes the first type of process in the monitored machine; or,

in the step S6, the control center processes the second type of process in the monitored machine, and instead, the control center processes the third type of process in the monitored machine; before restarting the monitored machine in step S7, the method further includes that the control center processes a second type of process in the monitored machine; or,

in step S5, the control center processes the first type of process in the monitored machine, and instead, the control center processes the second type of process in the monitored machine; in the step S6, the control center processes the second type of process in the monitored machine, and instead, the control center processes the third type of process in the monitored machine; before restarting the monitored machine in step S7, the method further includes that the control center processes a first type of process in the monitored machine; or,

in step S5, the control center processes the first type of process in the monitored machine, and instead, the control center processes the third type of process in the monitored machine; in the step S6, the control center processes the second type of process in the monitored machine, and instead, the control center processes the first type of process in the monitored machine; before restarting the monitored machine in step S7, the method further includes that the control center processes a second type of process in the monitored machine; or,

in step S5, the control center processes the first type of process in the monitored machine, and instead, the control center processes the third type of process in the monitored machine; before restarting the monitored machine in step S7, the method further includes that the control center processes a first type of process in the monitored machine.

In step S7, the control center restarts the monitored machine specifically,

step M1: the control center acquires a system restarting instruction from the instruction library and sends the system restarting instruction to the monitored machine;

step M2: the control center judges whether the monitored machine is restarted successfully or not, if so, the operation of restarting the monitored machine is finished; otherwise, executing step M3;

step M3: and the control center sends system restart failure alarm information to the administrator, waits for the administrator to process and ends.

The determining whether the monitored machine is restarted successfully in the step M2 specifically includes,

step N1: starting a timer to start timing;

step N2: the control center judges whether the count value of the timer is smaller than a second preset time, if so, the step N3 is executed; otherwise, failing to restart the monitored machine, executing step M3;

step N3: the control center sends a request for establishing monitoring connection to the monitored machine, and executes the step N4;

step N4: the control center judges whether an authorization response returned by the monitored machine is received within a first preset time, if so, the count value of the timer is cleared, the timer is closed, and the monitored machine is restarted successfully; otherwise, the step N2 is returned to.

The processing of the first type of process in the monitored machine may specifically comprise,

step P1: the control center acquires a scanning process instruction from the instruction library, sends the scanning process instruction to the monitored machine, waits for receiving a scanning process response returned by the monitored machine, and executes step P2;

step P2: the control center acquires a first class process from the scanning process response, takes the first class process as a current first class process, and executes the step P3;

step P3: the control center acquires a view process port instruction from the instruction library, sends the view process port number instruction containing the current first class process to the monitored machine, waits for receiving a port number response returned by the monitored machine, and executes step P4;

step P4: the control center acquires the port number from the port number response, acquires a port number connection number checking instruction from the instruction library, sends the port number connection number checking instruction containing the port number to the monitored machine, waits for receiving the port number connection number response returned by the monitored machine, and executes step P5;

step P5: the control center judges whether the port connection number reaches a preset connection number according to the port number connection number response, if so, the step P6 is executed; otherwise, executing step P10;

step P6: the control center acquires a process stopping instruction from the instruction library, sends the process stopping instruction containing the current first class of process to the monitored machine, and executes the step P7;

step P7: the control center obtains a viewing process instruction from the instruction library, sends the viewing process instruction containing the current first class process to the monitored machine, waits for receiving a viewing process response returned by the monitored machine, and executes a step P8;

step P8: the control center judges whether the current process is successfully stopped or not according to the checking process response, if so, the step P9 is executed, otherwise, the control center sends a current first-class process stopping failure warning message to an administrator, waits for the administrator to process, and ends;

step P9: the control center obtains a starting process instruction from the instruction library, sends the starting process instruction containing the current first class of process to the monitored machine, judges whether the starting is successful, and executes the step P10 if the starting is successful; otherwise, sending the current first-class process starting failure alarm information to the administrator, waiting for the administrator to process, and ending;

step P10: the control center judges whether a next first class process exists according to the scanning process response, if so, the control center acquires the next first class process as the current first class process, and returns to the step P3; otherwise, ending.

The step P2 is specifically that the control center determines whether a first class process exists according to the scanning process response, and if so, obtains a first class process from the scanning process response, and executes step P3 by taking the first class process as the current first class process; otherwise, processing the second type of process in the monitored machine.

The processing of the second type of process in the monitored machine may, in particular,

step Q1: the control center acquires a scanning process instruction from the instruction library, sends the scanning process instruction to the monitored machine, waits for receiving a scanning process response returned by the monitored machine, and executes a step Q2;

step Q2: the control center acquires a first second type process from the scanning process response, takes the first second type process as a current second type process, and executes a step Q3;

step Q3: the control center acquires a viewing process instruction from the instruction library, sends the viewing process instruction containing the current process name to the monitored machine, and waits for receiving a viewing process response returned by the monitored machine;

step Q4: when the control center receives the response of the checking process, the control center judges whether the current process needs to be restarted according to the response of the checking process, if so, the step Q5 is executed; otherwise, executing a step Q9;

step Q5: the control center acquires a process stopping instruction from the instruction library, sends the process stopping instruction containing the current second type of process to the monitored machine, and executes a step Q6;

step Q6: the control center acquires a viewing process instruction from the instruction library, sends the viewing process instruction containing the current second type of process to the monitored machine, waits for receiving a viewing process response returned by the monitored machine, and executes a step Q7;

step Q7: when the control center receives a process checking response, judging whether the current second type process is successfully stopped according to the process checking response, if so, executing a step Q8; otherwise, sending the current second-class process stop failure alarm information to the administrator, waiting for the administrator to process, and ending;

step Q8: the control center obtains a process starting instruction from the instruction library, sends the process starting instruction containing the current second type of process to the monitored machine, judges whether the process is started successfully, if so, executes the step Q9, otherwise, sends a current second type of process starting failure alarm message to an administrator, waits for the administrator to process, and ends;

step Q9: the control center judges whether a next second type process exists according to the scanning process response, if so, the control center acquires the next second type process as the current second type process, and returns to the step Q3; otherwise, ending.

The step Q2 is specifically that the control center determines whether there is a second class process in the scanning process response, and if so, acquires a first second class process from the scanning process response, and executes step Q3 with the first second class process as a current second class process; otherwise, processing the third type process in the monitored machine.

Before the step S5, the control center further obtains the current system time of the control center, obtains the processing monitoring time, determines whether recounting is needed, if yes, executes step S5; otherwise, executing step S5';

step S5': judging whether the count value is smaller than a preset value, if so, processing a first type of process in the monitored machine by the control center, acquiring a resource occupancy rate instruction from the instruction library, sending the resource occupancy rate instruction to the monitored machine, waiting for receiving a system performance response returned by the monitored machine, and executing a step S6'; otherwise, the control center sends the alarm information of the monitored machine to the administrator, clears the count value, clears the processing monitoring time, waits for the administrator to process and finishes;

step S6': the control center acquires the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches an early warning range, if so, the control center processes a second type of process in the monitored machine, acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, waits for receiving the system performance response returned by the monitored machine, and executes the step S7'; otherwise, returning to the step S3;

step S7': the control center obtains the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches an early warning range, if so, the control center restarts the monitored machine, and returns to the step S3; otherwise, returning to the step S3 after waiting for the preset time;

in step S7, after the control center restarts the monitored machine, setting the count value to 1, and using the current system time as the updated processing monitoring time.

A working method of a monitoring system comprises the following steps,

step W1: firstly, the control center reads the configuration information of the monitored machine and automatically connects the monitored machine according to the configuration information;

step W2: when the control center establishes monitoring connection with the monitored machine, the name of an operating system of the monitored machine is obtained, and a corresponding instruction library in the control center is loaded according to the name of the operating system;

step W3: the control center acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, waits for receiving a system performance response returned by the monitored machine, and executes step W4;

step W4: the control center acquires the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches an early warning range, and executes the step W5 if the resource occupancy rate reaches the early warning range; otherwise, returning to the step W3 after waiting for the first preset time;

step W5: the control center acquires a processing mode from the configuration information, processes the configuration information by adopting the processing mode, and returns to the step W3;

the processing mode specifically includes processing a first type of process in the monitored machine and/or processing a second type of process in the monitored machine and/or processing a third type of process in the monitored machine.

The loading of the instruction library corresponding to the control center according to the operating system name in the step W2 specifically includes,

step W2-1: the control center judges whether the configuration information has an operating system name, if so, the control center executes a step W2-4; otherwise, executing the step W2-2;

step W2-2: the control center sends a system platform retrieval instruction to the monitored machine, waits for receiving a system platform response returned by the monitored machine, and executes step W2-3;

step W2-3: the control center obtains the operating system name from the system platform response, writes the operating system name into the configuration information, and executes the step W2-4;

step W2-4: and the control center loads an instruction library matched with the name of the operating system.

the control center acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, judges whether a system performance response returned by the monitored machine is received within third preset time, and continues to execute if the system performance response is received; otherwise, sending a report that the system performance response is unknown to the administrator, and waiting for receiving the system performance response sent by the administrator.

The processing of the first type of processes in the monitored machine may specifically include,

step P1': the control center obtains a scanning process instruction from the instruction library, sends the scanning process instruction to the monitored machine, waits for receiving a scanning process response returned by the monitored machine, and executes a step P2';

step P2': the control center acquires the name of the first class process from the scanning process response, takes the name as the current first class process, and executes the step P3';

step P3': the control center acquires a view process port instruction from the instruction library, sends the view process port number instruction containing the current first class process to the monitored machine, waits for receiving a port number response returned by the monitored machine, and executes a step P4';

step P4': the control center acquires the port number from the port number response, acquires a port number connection number checking instruction from the instruction library, sends the port number connection number checking instruction containing the port number to the monitored machine, waits for receiving the port number connection number response returned by the monitored machine, and executes a step P5';

step P5': the control center judges whether the port connection number reaches a preset connection number according to the port connection number response, if so, the step P6' is executed; otherwise, executing step P10';

step P6': the control center acquires a process stopping instruction from the instruction library, sends the process stopping instruction containing the current process name to the monitored machine, and executes the step P7';

step P7': the control center acquires a viewing process instruction from the instruction library, sends the viewing process instruction containing the current first class process to the monitored machine, waits for receiving a viewing process response returned by the monitored machine, and executes a step P8';

step P8': the control center judges whether the current first-class process is successfully stopped or not according to the process checking response, if so, the step P9' is executed, otherwise, the control center sends a failure warning message of the current first-class process stop to an administrator, waits for the administrator to process, and ends;

step P9': the control center obtains a starting process instruction from the instruction library, sends the starting process instruction containing the current first class of process to the monitored machine, judges whether the starting is successful, and executes the step P10' if the starting is successful; otherwise, sending the current first-class process starting failure alarm information to the administrator, waiting for the administrator to process, and ending;

step P10': the control center judges whether a next first type process exists according to the scanning process response, if so, the control center acquires the next first type process as the current first type process, and returns to the step P3'; otherwise, ending.

The step P2 'is specifically that the control center determines whether a first class process exists according to the scanning process response, and if so, obtains a first class process name from the scanning process response, and executes the step P3' by using the first class process name as the current first class process; otherwise, processing the second type of process in the monitored machine.

The second type of process in the process monitored machine is specifically,

step Q1': the control center acquires a scanning process instruction from the instruction library, sends the scanning process instruction to the monitored machine, waits for receiving a scanning process response returned by the monitored machine, and executes a step Q2';

step Q2': the control center acquires the name of the first second type process from the scanning process response, takes the name as the current second type process, and executes a step Q3';

step Q3': the control center acquires a viewing process instruction from the instruction library, sends the viewing process instruction containing the current process name to the monitored machine, and waits for receiving a viewing process response returned by the monitored machine;

step Q4': when the control center receives the response of the checking process, the control center judges whether the current second type process needs to be restarted according to the response of the checking process, if so, the step Q5' is executed; otherwise, executing a step Q9';

step Q5': the control center acquires a process stopping instruction from the instruction library, sends the process stopping instruction containing the current second type of process to the monitored machine, and executes a step Q6';

step Q6': the control center acquires a viewing process instruction from the instruction library, sends the viewing process instruction containing the current second type of process to the monitored machine, waits for receiving a viewing process response returned by the monitored machine, and executes a step Q7';

step Q7': when the control center receives a process checking response, whether the current second type of process is successfully stopped is judged according to the process checking response, and if yes, the step Q8' is executed; otherwise, sending the current second-class process stop failure alarm information to the administrator, waiting for the administrator to process, and ending;

step Q8': the control center obtains a process starting instruction from the instruction library, sends the process starting instruction containing the current second type of process to the monitored machine, judges whether the process is started successfully, if so, executes a step Q9', otherwise, sends a current second type of process starting failure alarm message to an administrator, waits for the administrator to process, and ends;

step Q9': the control center judges whether a next second type process exists according to the scanning process response, if so, the control center acquires the next second type process as the current second type process, and returns to the step Q3'; otherwise, ending.

The step Q2 'is specifically that the control center determines whether a second class process exists in the scanning process response, and if yes, obtains a first second class process name from the scanning process response, and executes the step Q3' by using the first second class process name as the current second class process; otherwise, processing the third type process in the monitored machine.

Said processing of processes of a third type in said monitored machine may specifically comprise,

step R1': the control center acquires a scanning connection instruction from the instruction library, sends the scanning connection instruction to the monitored machine, and waits for receiving a scanning connection response returned by the monitored machine;

step R2': the control center acquires a first process serial number according to the scanning connection response, takes the first process serial number as a current process serial number, and executes a step R3';

step R3': the control center acquires a process stopping instruction from the instruction library, sends the process stopping instruction containing a current process serial number to the monitored machine, acquires a process checking instruction from the instruction library, sends the process checking instruction containing the current process serial number to the monitored machine, and waits for receiving a process checking response returned by the monitored machine;

step R4': the control center judges whether the current process is successfully stopped according to the process checking response, if so, the control center executes a step R5'; otherwise, sending the current process stop failure alarm information to the administrator, waiting for the administrator to process, and ending;

step R5': the control center judges whether a next process exists according to the scanning connection response, if so, the control center obtains a next process serial number according to the scanning connection response, takes the next process serial number as a current process serial number, and returns to the step R3'; otherwise, ending.

The step R2' is specifically that,

The control center restarts the monitored machine specifically,

step M1': the control center acquires a system restarting instruction from the instruction library and sends the system restarting instruction to the monitored machine;

step M2': the control center judges whether the monitored machine is restarted successfully or not, if so, the operation of restarting the monitored machine is finished; otherwise, executing step M3';

step M3': and the control center sends system restart failure alarm information to the administrator, waits for the administrator to process and ends.

The determining whether the monitored machine is restarted successfully in the step M2' specifically includes,

step N1': starting a timer to start timing;

step N2': the control center judges whether the count value of the timer is less than a second preset time, if so, the step N3' is executed; otherwise, indicating that the monitored machine is failed to be restarted, executing a step M3';

step N3': the control center sends a request for establishing monitoring connection to the monitored machine, and executes the step N4';

step N4': the control center judges whether an authorization response returned by the monitored machine is received within a first preset time, if so, the control center indicates that the monitored machine is successfully restarted, clears the count value of the timer, closes the timer and executes a step M3'; otherwise, the step N2' is returned.

The step W2 further includes that the control center defines a processing mode index value;

the step W5 is specifically that the control center determines whether a processing method corresponding to the processing method index value exists in the configuration information, and if so, acquires the processing method corresponding to the processing method index value from the configuration information, performs processing using the processing method, updates the processing method index value, and returns to the step W3; otherwise, restarting the monitored machine, clearing the processing mode index value, and returning to the step W3.

The technical scheme of the invention has the beneficial effects that: the control center can acquire the resource occupancy rate of the monitored machine, automatically adjust the running process of the monitored machine when the resource occupancy rate reaches the early warning range, reduce the intermediate time from early warning to manual operation, improve the operation and maintenance efficiency, reduce the operation and maintenance cost and ensure the normal running of the monitored machine.

Drawings

Fig. 1 is a flowchart of a working method of a monitoring system according to embodiment 1 of the present invention;

fig. 2 is a flowchart of a method for performing primary monitoring processing according to embodiment 1 of the present invention;

fig. 3 is a flowchart of a method for restarting a monitored machine according to embodiment 1 of the present invention;

fig. 4 is a flowchart of a method for performing secondary monitoring processing according to embodiment 1 of the present invention;

fig. 5 is a flowchart of a method for processing a first type of process in a monitored machine according to embodiment 1 of the present invention;

fig. 6 is a flowchart of a method for processing a second type of process in a monitored machine according to embodiment 1 of the present invention;

fig. 7 is a flowchart of a method for performing three-level monitoring processing according to embodiment 1 of the present invention;

fig. 8 is a flowchart of a method for stopping a third type of process in a monitored machine according to embodiment 1 of the present invention.

Detailed Description

The invention provides a working method of a monitoring system, which is used for monitoring one or more processes in a monitored machine and the monitored machine, and monitoring the use condition of a CPU and a memory of the monitored machine. And automatically intervening operation and maintenance under abnormal conditions to improve the operation stability of the system.

In order to make the objects, technical solutions and advantages of the present invention more apparent, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Example 1

The embodiment provides a working method of a monitoring system, in which a control center of the monitoring system monitors an operation state of a monitored machine and performs automatic intervention according to a response result, as shown in fig. 1, specifically including,

step 101: firstly, the control center reads the configuration information of the monitored machine and automatically connects the monitored machine according to the configuration information;

specifically, the control center reads configuration information of all monitored machines stored in the control center, wherein the configuration information comprises machine IP, machine account numbers, machine passwords and operating system names. Wherein the machine password is processed by symmetric encryption. And the control center is connected with the monitored machine according to the machine account and the machine password in the configuration information of the monitored machine.

For example, the configuration information of all monitored machines is read as

Step 102: the control center sends a request for establishing monitoring connection to the monitored machine, judges whether the monitoring connection can be established with the monitored machine, if so, executes step 104; otherwise, executing step 103;

in the embodiment, the control center sends a monitoring connection establishing request to the corresponding monitored machine according to the machine IP, and if an authorization response returned by the monitored machine is received within a first preset time, the control center can establish monitoring connection with the monitored machine; otherwise, a monitoring connection cannot be established with the monitored machine. Preferably, the first preset time is 30 s. The request for establishing the monitoring connection comprises a machine account and a machine password.

For example, the control center sends a request for establishing monitoring connection to the monitored machine with IP 192.168.0.6, and receives an authorization response returned by the monitored machine within 30s, so that the control center establishes monitoring connection with the monitored machine.

Step 103: the control center acquires the machine IP of the monitored machine which is not connected with the monitoring from the configuration information, sends the alarm information of the connection which is not established to the administrator, waits for the processing of the administrator and finishes;

in this embodiment, the monitoring connection non-establishment warning information includes a machine IP of the monitored machine for which the monitoring connection is not established.

Step 104: the control center judges whether the configuration information designates the name of the operating system of the monitored machine which establishes the monitoring connection, if so, the step 107 is executed; otherwise, executing step 105;

for example, the configuration information of the monitored machine with the IP of 192.168.0.6 stored in the control center does not include the operating system name, so step 105 is executed;

step 105: the control center sends a system platform retrieval instruction to the monitored machine which has established the monitoring connection, waits for receiving a system platform response returned by the monitored machine, and executes the step 106;

specifically, the control center sends a system platform retrieval instruction to the monitored machine with the established monitoring connection, judges whether a system platform response returned by the monitored machine is received within a third preset time, and if so, executes step 106; otherwise, the control center sends a system platform unknown report to the administrator and waits for receiving the name of the operating system sent by the administrator; preferably, the third preset time is 20 s.

In this embodiment, the control center sends a system platform unknown report to the administrator, waits for receiving an operating system name sent by the administrator, and may also obtain a restart system instruction from the instruction library for the control center, send the restart system instruction to the monitored machine, determine whether to restart the monitored machine, and if yes, return to step 105; otherwise, sending a system restart failure alarm message to the administrator to wait for the administrator to process.

For example, the system platform retrieve instruction is a diameter instruction; the control center sends a unit instruction to the monitored machine with the machine IP of 192.168.0.6, and waits for receiving a returned system platform response.

Step 106: when the control center receives the system platform response returned by the monitored machine, the control center obtains the operating system name from the system platform response, writes the operating system name into corresponding configuration information, and executes step 107;

for example, the system platform response received by the control center is Linux gehua3.2.0-23-generic, and the control center acquires the operating system name Linux from the system platform response and writes the Linux into the configuration information of the monitored machine with the machine IP of 192.168.0.6.

Step 107: the control center loads an instruction library corresponding to the name of the operating system of the monitored machine and executes step 108;

in this embodiment, the control center stores in advance instruction libraries corresponding to the operating systems, such as a linux instruction library and a unix instruction library.

For example, the control center loads an instruction library corresponding to the Linux operating system, that is, the control center loads a Linux instruction library, where the Linux instruction is used for the control center to operate a monitored machine with an operating system of Linux and a machine IP of 192.168.0.2.

Step 108: the control center obtains the resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, waits for receiving the system performance response returned by the monitored machine, and executes step 109;

specifically, the control center sends a resource occupancy rate acquisition instruction to the monitored machine, determines whether a system performance response returned by the monitored machine is received within a third preset time, and if so, executes step 109; otherwise, the control center sends a system performance response unknown report to the administrator, waits for receiving the system performance response sent by the administrator, and executes step 109;

in this embodiment, the control center sends a system performance response unknown report to the administrator, waits for receiving a system performance response sent by the administrator, executes step 109, and may also obtain a restart system instruction from the instruction library for the control center, send the restart system instruction to the monitored machine, determine whether to restart the monitored machine, and if yes, return to step 109; otherwise, sending a system restart failure alarm message to the administrator to wait for the administrator to process.

For example, the control center obtains the resource occupancy rate instruction as a top instruction from a Linux instruction library corresponding to the monitored machine with the machine IP of 192.168.0.6, sends the top instruction to the monitored machine with the machine IP of 192.168.0.6, and waits for receiving a system performance response.

Step 109: when the control center receives the system performance response, the control center acquires the resource occupancy rate from the system performance response;

in this embodiment, the method for acquiring the resource occupancy rate from the performance response specifically includes acquiring the occupancy rate of the CPU and the occupancy rate of the memory from the performance response, and taking the maximum value of the occupancy rates of the CPU and the occupancy rates of the memory as the resource occupancy rate.

For example, if the CPU occupancy rate obtained by the control center from the system performance response is 100% and the memory occupancy rate is 92%, the resource occupancy rate takes the maximum value of the CPU occupancy rate and the memory occupancy rate, that is, 100%.

Step 110: the control center judges the monitoring grade according to the resource occupancy rate, if the monitoring grade is the first-grade monitoring, the first-grade monitoring processing is carried out, and then the step 108 is returned; if the monitoring is the second-level monitoring, the second-level monitoring processing is carried out, and then the step 108 is returned; if the monitoring is the third-level monitoring, the third-level monitoring processing is carried out, and then the step 108 is returned; if the grade is other grade, return to step 108;

in this embodiment, the monitoring level is determined according to the resource occupancy rate, specifically, if the resource occupancy rate reaches a first preset rate, the monitoring level is first-level monitoring; if the resource occupancy rate reaches a second preset rate and is lower than the first preset rate, the monitoring grade is represented as secondary monitoring; if the resource occupancy rate reaches a third preset rate and is lower than a second preset rate, the monitoring grade is represented as three-level monitoring; and if the resource occupancy rate is lower than a third preset rate, indicating that the monitored machine normally operates.

Preferably, the first predetermined ratio is 100%, the second predetermined ratio is 95%, and the third predetermined ratio is 90%.

Taking the data in step 109 as an example, the resource occupancy rate of 100% reaches the first-level monitoring, and the first-level monitoring processing is required.

Preferably, the method for performing the primary monitoring processing, as shown in fig. 2, specifically includes,

step 111-1: the control center obtains the current system time of the control center, obtains the first-level monitoring time, judges whether recounting is needed according to the current system time and the first-level monitoring time, if yes, the step 111-2 is executed; otherwise, executing step 111-3;

in this embodiment, the primary monitoring time is stored in a configuration file or in a control center or in a database, and preferably, the initial value of the primary monitoring time is 0;

in the embodiment, the specific step of judging whether recounting is needed according to the current system time and the processing primary monitoring time is to calculate the time interval between the current system time and the processing primary monitoring time, judge whether the time interval reaches the preset duration, and recount the time interval if the time interval reaches the preset duration; otherwise recounting is not required.

Preferably, the preset time is 24 hours;

step 111-2: the control center restarts the monitored machine, sets the first count value as 1, takes the current system time as the updated processing first-level monitoring time, and returns to step 108;

in this embodiment, the first count value is used to record the restart times of the monitored machine, and preferably, the initial value of the first count value is 0;

step 111-3: the control center judges whether the first count value is smaller than a preset value, if so, the step 111-4 is executed; otherwise, executing step 111-5;

preferably, the preset value is 3;

step 111-4: the control center restarts the monitored machine, takes the current system time as the updated processing primary monitoring time, updates the first count value, and returns to step 108;

preferably, the updating of the first count value is specifically to add 1 to the first count value to obtain an updated first count value.

Step 111-5: and the control center sends information that the first-level monitoring processing times reach a preset value to an administrator, clears the first count value, the second count value and the third count value, clears the first-level monitoring processing time, the second-level monitoring processing time and the third-level monitoring processing time, waits for the administrator to process, and ends.

Preferably, the initial value of the first count value is 0, the initial value of the second count value is 0, and the initial value of the third count value is 0;

further, the specific operations for restarting the monitored machine as shown in FIG. 3 include,

step A1: the control center acquires a system restarting instruction from the instruction library and sends the system restarting instruction to the monitored machine;

specifically, the control center obtains a reboot system instruction from a Linux instruction library corresponding to the monitored machine with the machine IP of 192.168.0.6, and sends the reboot instruction to the monitored machine with the machine IP of 192.168.0.6, where the reboot instruction is used to reboot the monitored machine.

Step A2: the control center judges whether the monitored machine is restarted successfully or not, if yes, the operation is finished; otherwise, executing step A3;

in this embodiment, the method for determining whether to restart the monitored machine successfully includes the following steps,

step a 1: starting a timer to start timing;

in this embodiment, the timer is synchronized with the system time;

step a 2: the control center judges whether the count value of the timer is less than a second preset time, if so, the step a3 is executed; otherwise, indicating that the monitored machine fails to be restarted, executing the step A3;

preferably, the second preset time is 10 min.

Step a 3: the control center sends a request for establishing monitoring connection to a monitored machine with the IP of 192.168.0.6;

step a 4: the control center judges whether an authorization response returned by the monitored machine with the machine IP of 192.168.0.6 is received within first preset time, if yes, the monitored machine is restarted successfully, the count value of the timer is cleared, the timer is closed, and the step A3 is executed; otherwise, the step a2 is returned.

Step A3: the control center sends a system restart failure warning message to the administrator, waits for the administrator to process and ends;

the method of performing the secondary monitoring process, as shown in fig. 4 in particular, includes,

step 112-1: the control center obtains the current system time of the control center, obtains and processes the second grade monitoring time, judge whether need to count again according to current system time and processing second grade monitoring time, carry out step 112-2 if yes; otherwise, go to step 112-7;

in the embodiment, the step of judging whether recounting is needed according to the current system time and the processing secondary monitoring time specifically comprises the steps of calculating the time interval between the current system time and the processing secondary monitoring time, judging whether the time interval reaches the preset duration, and recounting if the time interval reaches the preset duration; otherwise recounting is not required.

Preferably, the preset time is 24 hours;

step 112-2: the control center processes a first type of process in the monitored machine;

in this embodiment, preferably, the first type of process is a database process.

Step 112-3: the control center acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate acquisition instruction to the monitored machine, waits for receiving a system performance response returned by the monitored machine, and executes the step 112-4;

specifically, the control center sends a resource occupancy rate acquisition instruction to the monitored machine, judges whether a system performance response returned by the monitored machine is received within a third preset time, and if yes, executes step 112-4; otherwise, the control center sends a system performance response unknown report to the administrator, waits for receiving the system performance response sent by the administrator, and executes step 112-4;

in this embodiment, the control center sends a system performance response unknown report to the administrator, waits for receiving a system performance response sent by the administrator, executes step 112-4, and may also obtain a restart system instruction from the instruction library for the control center, send the restart system instruction to the monitored machine, determine whether to restart the monitored machine, and if yes, return to step 112-3; otherwise, sending a system restart failure alarm message to the administrator to wait for the administrator to process.

Step 112-4: when the control center receives the system performance response, the control center acquires the resource occupancy rate from the system performance response;

step 112-5: the control center judges whether the resource occupancy rate reaches the secondary monitoring, if so, the step 112-6 is executed; otherwise, returning to the step 108;

step 112-6: the control center processes the second class of processes in the monitored machine, takes the current system time as the updated processing secondary monitoring time, sets the second counting value as 1, and returns to the step 108;

in this embodiment, the initial value of the second count value is 0, and preferably, the second class process is a service process;

step 112-7: the control center judges whether the second counting value is smaller than the preset value, if so, the step 112-8 is executed; otherwise, executing step 112-13;

preferably, the preset value is 3.

Step 112-8: the control center processes a first type of process in the monitored machine;

step 112-9: the control center obtains the resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, waits for receiving a system performance response returned by the monitored machine, and executes the step 112-10;

the operation method of this step is the same as that of step 112-3, and is not described again.

Step 112-10: when the control center receives the system performance response, the control center acquires the resource occupancy rate from the system performance response;

step 112-11: the control center judges whether the resource occupancy rate reaches the secondary monitoring, if so, the step 112-12 is executed; otherwise, returning to the step 108;

step 112-12: the control center processes the second class of processes in the monitored machine, takes the current system time as the updated processing secondary monitoring time, updates the second count value and returns to the step 108;

preferably, the updating of the second count value is specifically to add 1 to the second count value to obtain an updated second count value.

Step 112-13: and the control center sends information that the processing secondary monitoring times reach a preset value to the administrator, clears the second count value, clears the processing secondary monitoring time, waits for the administrator to process and finishes.

In this embodiment, the processing of the first class process in the monitored machine in step 112-2 may also be processing of the second class process in the monitored machine, and the processing of the second class process in the monitored machine in step 112-6 may be processing of the first class process in the monitored machine, the processing of the first class process in the monitored machine in step 112-8 may be processing of the second class process in the monitored machine, and the processing of the second class process in the monitored machine in step 112-12 may be processing of the first class process in the monitored machine.

Further, a method for processing a first type of process in a monitored machine is shown in fig. 5, and specifically includes,

step B1: the control center obtains the scanning process instruction from the instruction library, sends the scanning process instruction to the monitored machine, waits for receiving a scanning process response returned by the monitored machine, and executes the step B2;

specifically, the control center sends a scanning process instruction to the monitored machine, and after waiting for receiving a scanning process response returned by the monitored machine, the method further includes determining whether the scanning process response returned by the monitored machine is received within a third preset time, and if so, executing step B2; otherwise, the control center sends a scanning process response unknown report to the administrator and waits for receiving a scanning process response sent by the administrator;

in this embodiment, the control center sends a scanning process response unknown report to the administrator, waits for receiving a scanning process response sent by the administrator, and may also obtain a restart system instruction from the instruction library for the control center, send the restart system instruction to the monitored machine, determine whether to restart the monitored machine, and if yes, return to step B1; otherwise, sending a system restart failure alarm message to the administrator to wait for the administrator to process.

For example, the control center obtains the scanning process instruction as ps-aux instruction from the Linux instruction library corresponding to the monitored machine with the machine IP of 192.168.0.6, sends the ps-aux instruction to the monitored machine with the machine IP of 192.168.0.6, and waits for receiving a scanning process response returned by the monitored machine. The ps-aux instruction is used to fetch all active processes in the monitored machine.

Step B2: when the control center receives the scanning process response, the control center judges whether a first type of process exists according to the scanning process response, if so, the step B3 is executed; otherwise, step C1 is performed.

In this embodiment, the first type of process in the monitored machine is a mysql, db2, oracle and other processes;

for example, if there is a record action mysql 201260.04.681722446976.

Step B3: the control center acquires the first class process name from the scanning process response, takes the first class process name as the current first class process name, and executes the step B4;

for example, the control center obtains a first-class process record line, mysql 201260.04.681722446976.

Step B4: the control center obtains a view process port instruction from the instruction library, sends the view process port number instruction containing the current first class process name to the monitored machine, waits for receiving a port number response returned by the monitored machine, and executes the step B5;

specifically, the method includes that the control center sends a process port number checking instruction containing the name of the current first class of process to the monitored machine, and after the port number response returned by the monitored machine is received, the method also includes the steps of judging whether the port number response returned by the monitored machine is received within third preset time, and if yes, executing step B5; otherwise, the control center sends a port number response unknown report to the administrator and waits for receiving the port number response sent by the administrator;

in this embodiment, the control center sends a port number response unknown report to the administrator, waits for receiving a port number response sent by the administrator, and may also obtain a restart system instruction from the instruction library for the control center, send the restart system instruction to the monitored machine, determine whether to restart the monitored machine, and if yes, return to step B4; otherwise, sending a system restart failure alarm message to the administrator to wait for the administrator to process.

For example, the control center acquires the view process port instruction as a netstat-anp | grep instruction from a Linux instruction library corresponding to a monitored machine with the machine IP of 192.168.0.6, and sends the netstat-anp | grep instruction containing the name of the first type of process in the monitored machine, namely, a netstat-anp | grep mysql instruction to the monitored machine, wherein the netstat-anp | grep mysql instruction is used for acquiring the port number of the mysql process in the monitored machine.

Step B5: when the control center receives the port number response, acquiring the port number from the port number response, acquiring a port number connection number checking instruction from an instruction library, sending the port number connection number checking instruction containing the port number to the monitored machine, waiting for receiving the port number connection number response returned by the monitored machine, and executing step B6;

for example, the control center obtains the port number 3306 from the port number response, obtains the instruction for checking the port number connection number as a netstat-tl | grep instruction from a Linux instruction library corresponding to the monitored machine with the machine IP of 192.168.0.6, and sends the instruction for checking the port number connection number as a netstat-tl | grep instruction, that is, a netstat-tl | grep3306 instruction, to the monitored machine, where the instruction is used to obtain the port connection number of 3306 ports.

Step B6: when the control center receives the port number connection number response, whether the port connection number reaches the preset connection number is judged according to the port number connection number response, and if yes, the step B7 is executed; otherwise, executing step B13;

preferably, the preset number of connections is 30.

For example, if the port number connection number response received by the control center is 50, which indicates that the port connection number of the 3306 port is 50, and at this time, the port connection number of the 3306 port exceeds the preset connection number, step B7 is executed;

step B7: the control center obtains a process stopping instruction from the instruction library, sends the process stopping instruction containing the name of the current first type of process to the monitored machine, and executes the step B8;

for example, the control center obtains a kill-9| grep instruction as a stop process instruction from a Linux instruction library corresponding to a monitored machine with the machine IP of 192.168.0.6, and sends the kill-9| grep myql instruction to the monitored machine with the machine IP of 192.168.0.6, wherein the kill-9| grep myql instruction is used for stopping the mysql process.

Step B8: the control center obtains a viewing process instruction from the instruction library, sends the viewing process instruction containing the name of the current first type of process to the monitored machine, waits for receiving a viewing process response returned by the monitored machine, and executes the step B9;

specifically, the control center sends a viewing process instruction to the monitored machine, and after waiting for receiving a viewing process response returned by the monitored machine, the method further includes determining whether the viewing process response returned by the monitored machine is received within a third preset time, and if so, executing step B9; otherwise, the control center sends a viewing process response unknown report to the administrator, waits for receiving a viewing process response sent by the administrator, and executes the step B9;

in this embodiment, the control center sends a report of unknown response to the administrator to wait for receiving a response to the check process sent by the administrator, and may also obtain a restart system instruction from the instruction library for the control center, send the restart system instruction to the monitored machine, determine whether to restart the monitored machine, and if yes, return to step B8; otherwise, sending a system restart failure alarm message to the administrator to wait for the administrator to process.

For example, the control center obtains a view process instruction ps ax | grep from a Linux instruction library corresponding to a monitored machine with machine IP of 192.168.0.6, and sends the view process instruction ps ax | grep containing the name of the current first type of process, namely, a ps ax | grep mysql instruction to the monitored machine with machine IP of 192.168.0.6, wherein the ps ax | grep mysql instruction is used for viewing whether the mysql process is stopped running.

Step B9: when the control center receives the response of the checking process, whether the current first-class process is successfully stopped is judged according to the response of the checking process, if so, the step B11 is executed, otherwise, the step B10 is executed;

for example, the view process response received by the control center is mysql 201260.04.681722446976;

step B10: and the control center sends the current first-class process stop failure warning information to the administrator, waits for the administrator to process and finishes.

Specifically, the control center sends stop failure warning information containing the name of the current first-class process to an administrator.

Step B11: the control center obtains a starting process instruction from the instruction library, sends the starting process instruction containing the name of the current first type of process to the monitored machine, judges whether the starting is successful, and executes the step B13 if the starting is successful; otherwise, step B12 is executed.

In this embodiment, the method for determining whether the start is successful is specifically,

step 1: the control center obtains a scanning process instruction from the instruction library, sends the scanning process instruction to the monitored machine, waits for receiving a scanning process response returned by the monitored machine, and executes the step 2;

step 2: the control center judges whether a scanning process response returned by the monitored machine is received within third preset time, if so, the step 3 is executed; otherwise, indicating that the starting fails, executing the step B12;

and step 3: when the control center receives the scanning process response, the control center judges whether the current first type process exists according to the scanning process response, if so, the starting is successful, and the step B13 is executed; otherwise, indicating a failed start, step B12 is performed.

For example, the control center obtains a start process instruction from a Linux instruction library corresponding to a monitored machine with a machine IP of 192.168.0.6, and sends the start process instruction including the name of the current first type of process to the monitored machine with a machine IP of 192.168.0.6, that is, sends a start mysql, where the start mysql is used to start the mysql process.

The control center obtains a scanning process instruction as a ps-aux instruction from a Linux instruction library corresponding to a monitored machine with a machine IP of 192.168.0.6, sends the ps-aux instruction to the monitored machine with a machine IP of 192.168.0.6, receives a scanning process response returned by the monitored machine within a third preset time, and the scanning process response has a record line mysql 201260.04.681722446976.

Step B12: and the control center sends the current first-class process starting failure warning information to the administrator, waits for the administrator to process and finishes.

Step B13: the control center judges whether a next first type process exists according to the scanning process response, if so, the step B14 is executed; otherwise, ending;

step B14: the control center obtains the next first class process name, takes the next first class process name as the current first class process name, and returns to the step B4.

Further, the method for processing the second type of process in the monitored machine is shown in fig. 6, and specifically includes,

step C1: the control center acquires a scanning process instruction from the instruction library, sends the scanning process instruction to the monitored machine, and waits for receiving a scanning process response returned by the monitored machine;

the operation method of this step is the same as that of step B1 and is not described again.

Step C2: when the control center receives the scanning process response, judging whether a second type of process exists according to the scanning process response, if so, executing the step C3; otherwise, executing step D1;

in this embodiment, the second type of process in the monitored machine is a tomcat, a jboss, a weblogic, or the like;

the operation method of this step is the same as that of step B2, and is not described again.

For example, if the scan process response includes the name of tomcat process, it is determined that there is a second class of process in the monitored machine with the IP of 192.168.0.6, and step C3 is executed;

step C3: the control center acquires the first second type process name from the scanning process response, takes the first second type process name as the current second type process name, and executes the step C4;

the specific operation method of this step is the same as that of step B3.

For example, the control center obtains a ps ax | grep instruction from a Linux instruction library, and sends the ps ax | grep instruction containing the second type of process name to a monitored machine with the machine IP of 192.168.0.6, namely sends ps ax | grep tomcat.

Step C4: the control center acquires a viewing process instruction from the instruction library, sends the viewing process instruction containing the current second type process name to the monitored machine, and waits for receiving a viewing process response returned by the monitored machine;

step C5: when the control center receives the viewing process response, the control center acquires the resource occupancy rate of the current second type process according to the viewing process response;

for example, the view process response received by the control center is tomcat 20126806681722446976.

Step C6: the control center judges whether the resource occupancy rate of the second type of process in the current monitored machine reaches a fourth preset rate, if so, the step C7 is executed; otherwise, step C13 is performed.

For example, if the fourth preset ratio is 75%, the CPU occupancy rate of the tomcat process acquired by the control center is 80%, and the memory occupancy rate is 66%, the resource occupancy rate is equal to the CPU occupancy rate of 80%, and if the fourth preset ratio is exceeded, step C7 is executed.

Step C7: the control center obtains a process stopping instruction from the instruction library, sends the process stopping instruction containing the name of the current second type of process to the monitored machine, and executes the step C8;

for example, the control center obtains a kill-9| grep instruction from a Linux instruction library, and sends the kill-9| grep tomcat instruction to a monitored machine with machine IP of 192.168.0.6, so as to stop the tomcat process.

Step C8: the control center obtains a viewing process instruction from the instruction library, sends the viewing process instruction containing the current second type process name to the monitored machine, waits for receiving a viewing process response returned by the monitored machine, and executes the step C9;

the specific operation method of this step is the same as that of step B8, and is not described again.

For example, the control center obtains a ps ax | grep instruction from a Linux instruction library, and sends the ps ax | grep instruction containing the second type of process name, namely, the ps ax | grep tomcat instruction to a monitored machine with the IP of the machine being 192.168.0.6.

Step C9: when the control center receives the response of the checking process, whether the current second type process is successfully stopped is judged according to the response of the checking process, and if yes, the step C11 is executed; otherwise, executing step C10;

the operation method of this step is the same as that of step B9, and is not described again.

Step C10: the control center sends the current second type process stop failure warning information to the administrator, waits for the administrator to process and ends;

step C11: the control center obtains a starting process instruction from the instruction library, sends the starting process instruction containing the current second type process name to the monitored machine, judges whether the starting is successful, if so, executes the step C13, otherwise, executes the step C12;

the operation method of this step is the same as that of step B11, and is not described again.

Step C12: and the control center sends the current second-class process starting failure warning information to the administrator, waits for the administrator to process and finishes.

Step C13: the control center judges whether the next second type process exists according to the scanning process response, if so, the step C14 is executed; otherwise, ending;

step C14: the control center obtains the next second class process name, takes the next second class process name as the current second class process name, and returns to the step C4.

A method of performing a three-level monitoring process, as shown in particular in fig. 7, comprises,

step 113-1: the control center obtains the current system time of the control center, obtains the processing third-level monitoring time, judges whether recounting is needed according to the current system time and the processing third-level monitoring time, if yes, the step 113-2 is executed; otherwise, executing step 113-11;

in the embodiment, the specific step of judging whether recounting is needed according to the current system time and the processing three-level monitoring time is to calculate the time interval between the current system time and the processing three-level monitoring time, judge whether the time interval reaches the preset duration, and recount the time interval if the time interval reaches the preset duration; otherwise recounting is not required.

Preferably, the preset time is 24 hours;

step 113-2: the control center processes a first type of process in the monitored machine;

step 113-3: the control center acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate acquisition instruction to the monitored machine, waits for receiving a system performance response returned by the monitored machine, and executes the step 113-4;

specifically, the control center sends a resource occupancy rate acquisition instruction to the monitored machine, judges whether a system performance response returned by the monitored machine is received within a third preset time, and executes the step 113-4 if the system performance response is received within the third preset time; otherwise, the control center sends a system performance response unknown report to the administrator, waits for receiving the system performance response sent by the administrator, and executes the step 113-4;

in this embodiment, the control center sends a system performance response unknown report to the administrator, waits for receiving a system performance response sent by the administrator, executes step 113-4, and may also obtain a restart system instruction from the instruction library for the control center, send the restart system instruction to the monitored machine, determine whether to restart the monitored machine, and if yes, return to step 113-3; otherwise, sending a system restart failure alarm message to the administrator to wait for the administrator to process.

Step 113-4: when the control center receives the system performance response, the control center acquires the resource occupancy rate from the system performance response;

step 113-5: the control center judges whether the resource occupancy rate reaches the third-level monitoring, if so, the step 113-6 is executed; otherwise, returning to the step 108;

step 113-6: the control center processes a second type of process in the monitored machine;

step 113-7: the control center acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate acquisition instruction to the monitored machine, waits for receiving a system performance response returned by the monitored machine, and executes the step 113-8;

the operation method of this step is the same as that of step 113-3, and is not described again.

Step 113-8: when the control center receives the system performance response, the control center acquires the resource occupancy rate from the system performance response;

step 113-9: the control center judges whether the resource occupancy rate reaches the third-level monitoring, if so, the step 113-10 is executed; otherwise, returning to the step 108;

step 113-10: the control center processes the third type of process in the monitored machine, takes the current system time as the updated processing three-level monitoring time, sets the third counting value as 1, and returns to the step 108;

preferably, the initial value of the third count value is 0.

Step 113-11: the control center judges whether the third counting value is smaller than the preset value, if so, the step 113-12 is executed; otherwise, executing the step 113-21;

preferably, the preset value is 3.

Step 113-12: the control center processes a first type of process in the monitored machine;

step 113-13: the control center acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate acquisition instruction to the monitored machine, waits for receiving a system performance response returned by the monitored machine, and executes the step 113-14;

Step 113-14: when the control center receives the system performance response, the control center acquires the resource occupancy rate from the system performance response;

step 113-15: the control center judges whether the resource occupancy rate reaches the third-level monitoring, if so, the step 113-16 is executed; otherwise, returning to the step 108;

step 113-16: the control center processes a second type of process in the monitored machine;

step 113-17: the control center obtains the resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, waits for receiving a system performance response returned by the monitored machine, and executes the step 113-18;

Step 113-18: when the control center receives the system performance response, the control center acquires the resource occupancy rate from the system performance response;

and step 113-19: the control center judges whether the resource occupancy rate reaches the third-level monitoring, if so, the step 113-20 is executed; otherwise, returning to the step 108;

step 113-20: the control center processes the third type of process in the monitored machine, takes the current system time as the updated processing third-level monitoring time, updates the third counting value and returns to the step 108;

in this embodiment, the third count value is updated by taking the result of adding or subtracting the preset step length to the third count value as the updated third count value; preferably, the result of adding 1 to the third count value is used as the updated third count value.

Step 113-21: and the control center sends information that the processing three-level monitoring times reach a preset value to the administrator, clears the third counting value, clears the processing three-level monitoring time, waits for the administrator to process, and ends.

In this embodiment, the second type of process in the monitored machine processed in step 113-6 may be a third type of process in the monitored machine; the third type of process in the monitored machine processed in the step 113-10 may be a second type of process in the monitored machine; the second type of process in the monitored machine processed in step 113-16 may be a third type of process in the monitored machine processed; the third type of process in processing the monitored machine in steps 113-20 may be a process of the second type in processing the monitored machine.

The step 113-2 of processing the first type of process in the monitored machine may also be processing a second type of process in the monitored machine or processing a third type of process in the monitored machine;

when the first class of processes in the monitored machine processed in the step 113-2 is the second class of processes in the monitored machine, the second class of processes in the monitored machine processed in the step 113-6 may be the third class of processes in the monitored machine; the third type of process in the monitored machine processed in the step 113-10 may be a second type of process in the monitored machine; the first type of process in the monitored machine processed in step 113-12 may be a second type of process in the monitored machine processed; the second type of process in the monitored machine processed in step 113-16 may be a third type of process in the monitored machine processed; the third type of process in processing the monitored machine in steps 113-20 may be a process of the second type in processing the monitored machine.

When the first type of process in the monitored machine processed in the step 113-2 is the second type of process in the monitored machine, the second type of process in the monitored machine processed in the step 113-6 may be the first type of process in the monitored machine; the first type of process in the monitored machine processed in step 113-12 may be a second type of process in the monitored machine processed; the second type of process in processing the monitored machine in steps 113-16 may be a process of the first type in processing the monitored machine.

When the first type of process in the monitored machine processed in the step 113-2 is the third type of process in the monitored machine, the second type of process in the monitored machine processed in the step 113-6 may be the first type of process in the monitored machine; the third type of process in the monitored machine processed in the step 113-10 may be a second type of process in the monitored machine; the first type of process in the monitored machine processed in step 113-12 may be a third type of process in the monitored machine processed; the second type of process in the monitored machine processed in step 113-16 may be the first type of process in the monitored machine processed; the third type of process in processing the monitored machine in steps 113-20 may be a process of the second type in processing the monitored machine.

When the first type of process in the monitored machine processed in the step 113-2 is the third type of process in the monitored machine, the third type of process in the monitored machine processed in the step 113-10 may be the first type of process in the monitored machine; the first type of process in the monitored machine processed in step 113-12 may be a third type of process in the monitored machine processed; the third type of process in processing the monitored machine in steps 113-20 may be the first type of process in processing the monitored machine.

Further, a method of stopping a third class of processes in a monitored machine, as shown in fig. 8, includes,

step D1: the control center acquires a scanning connection instruction from the instruction library, sends the scanning connection instruction to the monitored machine, and waits for receiving a scanning connection response returned by the monitored machine;

specifically, the control center sends a scan connection instruction to the monitored machine, and after waiting for receiving a scan connection response returned by the monitored machine, the method further includes determining whether the scan connection response returned by the monitored machine is received within a third preset time, and if yes, executing step D2; otherwise, the control center sends a scanning connection response unknown report to the administrator, and the process is finished;

in this embodiment, the control center sends a scanning connection response unknown report to the administrator, and the process is finished, or the control center obtains a restart system instruction from the instruction library, sends the restart system instruction to the monitored machine, determines whether the monitored machine is restarted successfully, and if yes, returns to step D1; otherwise, sending a system restart failure alarm message to the administrator to wait for the administrator to process.

For example, the control center obtains the scan connection instruction as a netstat-ntpo | grep-v sshd instruction from a Linux instruction library corresponding to the monitored machine with the machine IP of 192.168.0.6, sends the netstat-ntpo | grep-v sshd instruction to the monitored machine with the machine IP of 192.168.0.6, and waits for receiving a scan connection response returned by the monitored machine. The netstat-ntpo | grep-v sshd instruction is used to obtain tcp connection records for all non-ssh.

Step D2: when the control center receives the scanning connection response, judging whether a connection process exists according to the scanning connection response, if so, executing the step D3; otherwise, executing step A1;

for example, there is a recording action in the scan connection response,

tcp 0 0 192.168.0.26:80 192.168.3.126:53453 ESTABLISHED24782；

tcp 00192.168.0.26: 80192.168.23.42: 22524 ESTABLISHED 24782; indicating that a connected process exists;

step D3: the control center acquires a first process serial number according to the scanning connection response, and the first process serial number is used as a current process serial number;

specifically, the control center acquires a process sequence number 24782 from the first record line, and takes 24782 as the current process sequence number;

step D4: the control center acquires a process stopping instruction from the instruction library and sends the process stopping instruction containing the serial number of the current process to the monitored machine;

in this embodiment, the method for the control center to obtain the instruction for stopping the process from the instruction library is the same as that in step B7, and is not described again.

For example, the control center obtains a kill-9| grep instruction as a stop process instruction from a Linux instruction library corresponding to a monitored machine with machine IP of 192.168.0.6, and sends a kill-9| grep24782 instruction to a monitored machine with machine IP of 192.168.0.6, wherein the kill-9| grep24782 instruction is used for stopping a process with process serial number of 24782.

Step D5: the control center acquires a viewing process instruction from the instruction library, sends the viewing process instruction containing the current process serial number to the monitored machine, and waits for receiving a viewing process response returned by the monitored machine;

Step D6: when the control center receives the response of the checking process, whether the current process is stopped successfully is judged according to the response of the checking process, and if yes, the step D8 is executed; otherwise, executing step D7;

step D7: the control center sends the current process stop failure warning information to the administrator, waits for the administrator to process and ends;

step D8: the control center judges whether the next process exists according to the scanning connection response, if so, the step D9 is executed; otherwise, ending;

step D9: and D4 is returned to by the control center, the next process sequence number is obtained according to the scanning connection response and is used as the current process sequence number.

Example 2

This embodiment 2 provides a working method of a monitoring system, which specifically includes,

step 201: firstly, the control center reads the configuration information of the monitored machine and automatically connects the monitored machine according to the configuration information;

the operation method in this step is the same as that in step 101 and is not described again.

Step 202: the control center sends a request for establishing monitoring connection to the monitored machine, judges whether the monitoring connection can be established with the monitored machine or not, and executes step 204 if the monitoring connection can be established with the monitored machine; otherwise, executing step 203;

the operation method in this step is the same as that in step 102, and is not described here again.

Step 203: the control center acquires the machine IP of the monitored machine which is not connected with the monitoring from the configuration information, sends the alarm information of the connection which is not established to the administrator, waits for the processing of the administrator and finishes;

the operation method in this step is the same as that in step 103, and is not described herein again.

Step 204: the control center judges whether the configuration information designates the operating system name of the monitored machine which has established the monitoring connection, if yes, step 207 is executed; otherwise, go to step 205;

the operation method in this step is the same as that in step 104, and is not described herein again.

Step 205: the control center sends a system platform retrieval instruction to the monitored machine with the established monitoring connection, waits for receiving a system platform response returned by the monitored machine, and executes step 206;

the operation method in this step is the same as that in step 105, and is not described herein again.

Step 206: when the control center receives the system platform response returned by the monitored machine, the control center obtains the operating system name from the system platform response, writes the operating system name into the corresponding configuration information, and executes step 207;

the operation method in this step is the same as that in step 106, and is not described herein again.

Step 207: the control center loads an instruction library corresponding to the name of the operating system of the monitored machine, defines a processing mode index value and executes the step 208;

the operation method in this step is the same as that in step 107, and is not described herein again.

Step 208: the control center obtains the resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, waits for receiving the system performance response returned by the monitored machine, and executes step 209;

the operation method in this step is the same as that in step 108, and is not described herein again.

Step 209: when the control center receives the system performance response, the control center obtains the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches the early warning range, if so, executes step 210; otherwise, waiting for a first preset time, and returning to the step 208;

the operation method in this step is the same as that in step 109, and is not described herein again.

Step 210: the control center judges whether there is a processing mode corresponding to the processing mode index value in the configuration information, if yes, step 212 is executed; otherwise, go to step 211;

step 211: restarting the monitored machine, clearing the index value of the processing mode, and returning to the step 208;

in this embodiment, the method for restarting the monitored machine is the same as the method described in embodiment 1, and is not described herein again.

Step 212: acquiring the processing mode corresponding to the processing mode index value from the configuration information, processing by adopting the processing mode, updating the processing mode index value, and returning to the step 208;

in this embodiment, the processing manner specifically includes processing a first type of process in the monitored machine and/or processing a second type of process in the monitored machine and/or processing a third type of process in the monitored machine.

The method for processing the first type of process in the monitored machine, the method for processing the second type of process in the monitored machine, and the method for processing the third type of process in the monitored machine are respectively the same as the methods described in the embodiments, and are not described herein again.

Example 3

Embodiment 3 provides a working method of a monitoring system, which specifically includes,

step 301: firstly, the control center reads the configuration information of the monitored machine and automatically connects the monitored machine according to the configuration information;

the operation method of this step is the same as that of step 101 in embodiment 1, and is not described here again.

Step 302: the control center sends a request for establishing monitoring connection to the monitored machine, judges whether the monitoring connection can be established with the monitored machine, if so, executes step 304; otherwise, go to step 303;

the operation method of this step is the same as that of step 102 in embodiment 1, and is not described again.

Step 303: the control center acquires the machine IP of the monitored machine which is not connected with the monitoring from the configuration information, sends the alarm information of the connection which is not established to the administrator, waits for the processing of the administrator and finishes;

the operation method of this step is the same as that of step 103 in embodiment 1, and is not described again.

Step 304: the control center judges whether the configuration information designates the operating system name of the monitored machine which has established the monitoring connection, if yes, step 307 is executed; otherwise, go to step 305;

step 305: the control center sends a system platform retrieval instruction to the monitored machine which has established the monitoring connection, waits for receiving a system platform response returned by the monitored machine, and executes step 306;

the operation method of this step is the same as that of step 105 in embodiment 1, and is not described again.

Step 306: when the control center receives the system platform response returned by the monitored machine, the control center obtains the operating system name from the system platform response, writes the operating system name into the corresponding configuration information, and executes step 307;

the operation method of this step is the same as that of step 106 in embodiment 1, and is not described again.

Step 307: the control center loads an instruction library corresponding to the name of the operating system of the monitored machine and executes step 308;

the operation method of this step is the same as that of step 107 in embodiment 1, and is not described again.

Step 308: the control center obtains the resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, waits for receiving a system performance response returned by the monitored machine, and executes step 309;

the operation method of this step is the same as that of step 108 in embodiment 1, and is not described again.

Step 309: when the control center receives the system performance response, the control center acquires the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches the early warning range, and executes the step 310 if the resource occupancy rate reaches the early warning range; otherwise, waiting for a first preset time, and returning to the step 308;

in this embodiment, the early warning range is 90%.

Step 310: the control center processes the first type of process in the monitored machine, and executes step 311;

step 311: the control center acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, and waits for receiving a system performance response returned by the monitored machine;

step 312: when the control center receives the system performance response, the control center acquires the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches the early warning range, and executes the step 313 if the resource occupancy rate reaches the early warning range; otherwise, returning to the step 308;

step 313: the control center processes the second type of process in the monitored machine and executes step 314;

step 314: the control center acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, and waits for receiving a system performance response returned by the monitored machine;

step 315: when the control center receives the system performance response, the control center acquires the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches the early warning range, and executes the step 316 if the resource occupancy rate reaches the early warning range; otherwise, returning to the step 308;

step 316: the control center restarts the monitored machine and returns to step 308;

before the step, the control center processes a third type of process in the monitored machine, acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, waits for receiving a system performance response returned by the monitored machine, acquires the resource occupancy rate from the system performance response when the control center receives the system performance response, judges whether the resource occupancy rate reaches an early warning range, and executes a step 316 if the resource occupancy rate reaches the early warning range; otherwise, returning to the step 308;

in this embodiment, the method of processing the first type of process in the monitored machine is the same as the method described in embodiment 1; the method of handling the second type of process in the monitored machine is the same as described in example 1; the method of handling the third class of processes in the monitored machine is the same as described in example 1; the method for restarting the monitored machine is the same as the method described in embodiment 1, and is not described herein again.

It should be noted that, the order and the order of processing the first type process, the second type process and the third type process in the monitored machine may be arbitrarily interchanged, step 310 is also included before,

the control center obtains the current system time of the control center, obtains the processing monitoring time, judges whether recounting is needed, if yes, executes step 310; otherwise, go to step 310';

step 310': judging whether the count value is smaller than a preset value, if so, processing a first type of process in the monitored machine by the control center, acquiring a resource occupancy rate instruction from the instruction library, sending the resource occupancy rate instruction to the monitored machine, waiting for receiving a system performance response returned by the monitored machine, and executing step 311'; otherwise, the control center sends the monitored machine alarm information to the administrator, clears the count value, clears the processing monitoring time, waits for the administrator to process and ends;

step 311': the control center obtains the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches the early warning range, if so, the control center processes the second type of process in the monitored machine, obtains the resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, waits for receiving the system performance response returned by the monitored machine, and executes step 312'; otherwise, returning to the step 308;

step 312': the control center obtains the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches the early warning range, if so, the control center restarts the monitored machine, and returns to the step 308; otherwise, returning to the step 308;

correspondingly, the step 316 further includes setting the count value to 1 and using the current system time as the updated processing monitoring time after the control center restarts the monitored machine. The above embodiments can also achieve the object of the present invention.

The above description is only for the specific embodiments of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present invention, and all the changes or substitutions should be covered within the scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A method of operating a monitoring system, comprising,

step S7: the control center obtains the resource occupancy rate from the system performance response, judges whether the resource occupancy rate reaches the early warning range, if so, the control center restarts the monitored machine, and returns to the step S3; otherwise, returning to the step S3;

wherein, in the step S7, the control center restarts the monitored machine specifically,

step M2: the control center judges whether the monitored machine is restarted successfully or not, if so, the monitored machine is restarted for operation, and the operation is finished; otherwise, executing step M3;

2. The method according to claim 1, wherein the automatically connecting to the monitored machine according to the configuration information is specifically that the control center sends a monitoring connection establishment request including a machine account number and a machine password to the monitored machine, determines whether an authorization response returned by the monitored machine is received within a first preset time, and if so, the connection is successful; otherwise, sending the warning information of the connection not established to the administrator to wait for the administrator to process.

3. The method as claimed in claim 1, wherein in step S2, the loading the corresponding instruction library according to the operating system name specifically includes,

4. The method of claim 1, wherein the resource occupancy instruction is obtained from the instruction library and sent to the monitored machine, awaiting receipt of a system performance response returned by the monitored machine, in particular,

5. The method of claim 4, wherein sending a report to an administrator that a system performance response is unknown, waiting to receive a system performance response sent by an administrator, is further operable for the control center to restart the monitored machine.

6. The method of claim 1, wherein said step S7 further comprises, before said control center rebooting said monitored machine,

7. The method of claim 6, wherein processing the third class of processes in the monitored machine specifically comprises,

8. The method according to claim 7, wherein said step R2 is in particular,

9. The method according to claim 6, wherein in step S5, the control center processes a first class of processes in the monitored machine, and instead, the control center processes a second class of processes in the monitored machine; in the step S6, the control center processes the second type of process in the monitored machine, and instead, the control center processes the first type of process in the monitored machine; or,

10. The method as claimed in claim 1, wherein said determining in said step M2 whether said monitored machine is successfully restarted includes,

step N1: starting a timer to start timing;

11. The method of claim 1, wherein said processing a first class of processes in the monitored machine specifically comprises,

12. The method according to claim 11, wherein the step P2 is specifically that the control center determines whether there is a first class process according to the scan process response, and if so, acquires a first class process from the scan process response, and executes step P3 with the first class process as a current first class process; otherwise, processing the second type of process in the monitored machine.

13. The method according to claim 1, characterized in that said processing of processes of a second type in said monitored machine, in particular,

14. The method according to claim 13, wherein the step Q2 is specifically that the control center determines whether there is a second class process in the scanning process response, and if so, acquires a first second class process from the scanning process response, and executes step Q3 with the first second class process as a current second class process; otherwise, processing the third type process in the monitored machine.

15. The method as claimed in claim 1, wherein the step S5 is preceded by the step of the control center obtaining the current system time of the control center, obtaining the processing monitoring time, determining whether recounting is needed, if yes, executing step S5; otherwise, executing step S5';

16. A method of operating a monitoring system, comprising,

the processing mode specifically comprises the steps of processing a first type of process in the monitored machine and/or processing a second type of process in the monitored machine and/or processing a third type of process in the monitored machine;

wherein, the resource occupancy rate instruction is obtained from the instruction library, and is sent to the monitored machine, and waits for receiving the system performance response returned by the monitored machine, specifically,

the control center acquires a resource occupancy rate instruction from the instruction library, sends the resource occupancy rate instruction to the monitored machine, judges whether a system performance response returned by the monitored machine is received within third preset time, and continues to execute if the system performance response is received; otherwise, the control center restarts the monitored machine;

the control center restarts the monitored machine specifically,

17. The method according to claim 16, wherein the automatically connecting to the monitored machine according to the configuration information is specifically that the control center sends a request for establishing a monitoring connection including a machine account number and a machine password to the monitored machine, determines whether an authorization response returned by the monitored machine is received within a first preset time, and if so, the connection is successful; otherwise, sending the warning information of the connection not established to the administrator to wait for the administrator to process.

18. The method as claimed in claim 16, wherein said loading a corresponding instruction library in said control center according to said operating system name in said step W2 specifically includes,

19. The method of claim 16, wherein the control center reboots the monitored machine, and further wherein the control center sends a system performance response unknown report to an administrator waiting to receive the system performance response sent by the administrator.

20. The method of claim 16, wherein processing the first class of processes in the monitored machine specifically includes,

21. The method according to claim 20, wherein the step P2 'is specifically that the control center determines whether there is a first class process according to the scan process response, and if so, obtains a first class process name from the scan process response, and executes step P3' with the first class process name as the current first class process; otherwise, processing the second type of process in the monitored machine.

22. The method of claim 16, wherein processing the second type of process in the monitored machine is embodied as,

23. The method according to claim 22, wherein the step Q2 'is specifically that the control center determines whether there is a second class process in the scanning process response, and if so, obtains a first second class process name from the scanning process response, and executes step Q3' with the first second class process name as the current second class process; otherwise, processing the third type process in the monitored machine.

24. The method of claim 16, wherein the processing of the third class of processes in the monitored machine specifically comprises,

25. The method according to claim 24, wherein said step R2' is in particular,

26. The method as claimed in claim 16, wherein said determining of whether said monitored machine is successfully restarted in said step M2' includes,

step N1': starting a timer to start timing;

27. The method according to claim 16, wherein said step W2 further includes the control center defining a processing mode index value;