CN108418710B

CN108418710B - Distributed monitoring system, method and device

Info

Publication number: CN108418710B
Application number: CN201810133125.XA
Authority: CN
Inventors: 冯浩; 刘俊晖
Original assignee: Beijing QIYI Century Science and Technology Co Ltd
Current assignee: Beijing QIYI Century Science and Technology Co Ltd
Priority date: 2018-02-09
Filing date: 2018-02-09
Publication date: 2021-03-26
Anticipated expiration: 2038-02-09
Also published as: CN108418710A

Abstract

The embodiment of the invention provides a distributed monitoring system, a method and a device, wherein in the distributed monitoring system, a proxy client acquires monitoring data of monitored equipment and sends the acquired monitoring data to a proxy server; the proxy server respectively sends the received monitoring data to the monitoring server and the data center server; the monitoring server generates an alarm event according to the received monitoring data and sends the generated alarm event to an alarm center server; the data center server receives and stores monitoring data; the alarm center server outputs alarm information according to the alarm event received from the monitoring server; and if the alarm event is detected not to be received from the monitoring server, acquiring the monitoring data from the data center server, generating the alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event. The method and the system can improve the real-time performance and accuracy of the network monitoring system alarm.

Description

Distributed monitoring system, method and device

Technical Field

The present invention relates to the field of network monitoring technologies, and in particular, to a distributed monitoring system, method, and apparatus.

Background

With the continuous development of computer network technology, more and more devices are provided in the network system, and whether each device operates normally directly affects the quality and efficiency of network services. Therefore, it is necessary to manage each device in the network system and report the network status to the manager in time by monitoring the devices. The network system is provided with a monitoring server, the monitoring server analyzes the monitoring data of each device, and the monitoring server is provided with functional software for analyzing the monitoring data, such as Zabbix, Nagios and the like.

A network system provided with a monitoring server may be referred to as a network monitoring system, and in order to implement monitoring analysis on different devices in multiple regions, the network monitoring system is often configured as a distributed network monitoring system, and distributed management of the network monitoring system is usually implemented by proxy servers, as shown in fig. 1, one proxy server 120 is placed in each region for collecting monitoring data acquired by the proxy clients 110 of each monitored device end in the region, and then the collected monitoring data is transmitted to the monitoring server 130, and the monitoring server 130 performs data analysis, generates an alarm event based on a data analysis result, and notifies an alarm event to a network manager.

However, in the above network monitoring system, if the monitoring server fails or a line delay occurs between the proxy server and the monitoring server, the alarm of the monitoring server is delayed or cannot be correctly alarmed, so that the real-time performance and accuracy of the alarm of the network monitoring system are poor.

Disclosure of Invention

The embodiment of the invention aims to provide a distributed monitoring system, a method and a device so as to improve the real-time performance and accuracy of the alarm of a network monitoring system. The specific technical scheme is as follows:

in a first aspect, an embodiment of the present invention provides a distributed monitoring system, where the distributed monitoring system includes: the monitoring system comprises an agent client, an agent server, a monitoring server, a data center server and an alarm center server which are arranged at a monitored equipment end;

the proxy client is used for acquiring monitoring data of the monitored equipment and sending the acquired monitoring data to the proxy server;

the proxy server is used for receiving the monitoring data sent by the proxy client and respectively sending the received monitoring data to the monitoring server and the data center server;

the monitoring server is used for generating an alarm event according to the received monitoring data and sending the generated alarm event to the alarm center server;

the data center server is used for receiving and storing the monitoring data sent by the proxy server;

the alarm center server is used for outputting alarm information according to the alarm event received from the monitoring server; and if the alarm event is detected not to be received from the monitoring server, acquiring monitoring data from the data center server, generating the alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event.

Optionally, the distributed monitoring system includes multiple monitoring paths, a data center server and an alarm center server, where the monitoring path is composed of an agent client, an agent server and a monitoring server;

each proxy client is specifically and respectively used for: sending the obtained monitoring data to a proxy server in a monitoring path where the proxy client is located;

each proxy server is specifically and respectively used for: respectively sending the received monitoring data to the data center server and a monitoring server in a monitoring path where the proxy server is located;

the data center server is specifically configured to: receiving and storing monitoring data sent by each proxy server;

the alarm center server is specifically configured to: after receiving the alarm events sent by each monitoring server, outputting alarm information according to preset rules according to the alarm events; and if the alarm event is detected not to be received from any monitoring server, acquiring monitoring data acquired by the agent client in the monitoring path where the monitoring server is located from the data center server, generating the alarm event according to the acquired monitoring data, and outputting alarm information according to the preset rule according to the alarm event.

Optionally, the alarm center server is specifically configured to:

if the monitored equipment monitored by the agent client in the monitoring path where any monitoring server is located is determined to be abnormal according to the alarm event, alarm information is output;

or,

and if the monitored equipment monitored by the agent client in the monitoring paths where all the monitoring servers are located is determined to be abnormal according to the alarm event, outputting alarm information.

Optionally, the distributed monitoring system includes multiple monitoring paths, multiple alarm center servers, and a data center server, where one monitoring path corresponds to one alarm center server one by one, where the monitoring path is composed of an agent client, one agent server, and one monitoring server;

each monitoring server is specifically and respectively used for: generating an alarm event according to the received monitoring data, and sending the generated alarm event to an alarm center server corresponding to a monitoring path where the monitoring server is located;

each alarm center server is specifically and respectively used for: outputting alarm information according to the received alarm event; and if the alarm event is detected not to be received from the monitoring server in the monitoring path corresponding to the alarm center server, acquiring the monitoring data acquired by the agent client in the monitoring path corresponding to the alarm center server from the data center server, generating the alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event.

In a second aspect, an embodiment of the present invention provides a distributed monitoring method, which is applied to a proxy server in a distributed monitoring system according to the first aspect of the embodiment of the present invention, where the distributed monitoring method includes:

receiving monitoring data sent by an agent client arranged at a monitored equipment end;

and respectively sending the received monitoring data to a monitoring server and a data center server.

Optionally, the number of the agent clients and the number of the monitoring servers are multiple, and the agent server, one agent client and one monitoring server form one monitoring path;

the receiving of the monitoring data sent by the agent client side arranged at the monitored device side includes:

receiving monitoring data sent by agent clients in the same monitoring path;

the monitoring data that will receive are sent to monitoring server and data center server respectively, include:

and respectively sending the received monitoring data to a monitoring server and a data center server which are in the same monitoring path.

In a third aspect, an embodiment of the present invention provides a distributed monitoring method, which is applied to a monitoring server in a distributed monitoring system according to the first aspect of the embodiment of the present invention, where the distributed monitoring method includes:

receiving monitoring data sent by a proxy server;

generating an alarm event according to the received monitoring data;

and sending the generated alarm event to an alarm center server.

Optionally, the number of the proxy servers is multiple, and the monitoring server and one proxy server are located in one monitoring path;

the receiving of the monitoring data sent by the proxy server includes:

and receiving monitoring data sent by the proxy servers in the same monitoring path.

Optionally, the number of the alarm center servers is multiple, and the monitoring servers correspond to one alarm center server one to one;

the sending of the generated alarm event to the alarm center server includes:

and sending the generated alarm event to a corresponding alarm center server.

In a fourth aspect, an embodiment of the present invention provides a distributed monitoring method, which is applied to a data center server in a distributed monitoring system according to the first aspect of the embodiment of the present invention, where the distributed monitoring method includes:

receiving monitoring data sent by a proxy server;

and storing the received monitoring data to a storage space.

Optionally, the number of the proxy servers is multiple;

the receiving of the monitoring data sent by the proxy server includes:

receiving monitoring data respectively transmitted by a plurality of proxy servers;

the storing the received monitoring data to a storage space includes:

and respectively storing the monitoring data sent by each proxy server to a storage space according to the corresponding relation between the proxy server and the monitoring data.

In a fifth aspect, an embodiment of the present invention provides a distributed monitoring method, which is applied to an alarm center server in a distributed monitoring system according to the first aspect of the embodiment of the present invention, where the distributed monitoring method includes:

detecting whether an alarm event is received from a monitoring server;

if the alarm event is detected to be received from the monitoring server, outputting alarm information according to the received alarm event;

and if the alarm event is detected not to be received from the monitoring server, acquiring monitoring data from the data center server, generating the alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event.

Optionally, the number of the monitoring servers is multiple, and one monitoring server corresponds to one agent client one to one;

the detecting whether an alarm event is received from the monitoring server includes:

detecting whether an alarm event is received from each monitoring server;

if the alarm event received from each monitoring server is detected, outputting alarm information according to the received alarm event, including:

outputting alarm information according to preset rules according to the alarm event;

if the alarm event is detected not to be received from any monitoring server, the monitoring data is obtained from the data center server, the alarm event is generated according to the obtained monitoring data, and alarm information is output according to the generated alarm event, wherein the alarm event comprises the following steps:

and acquiring monitoring data acquired by the agent client corresponding to the monitoring server from the data center server, generating an alarm event according to the acquired monitoring data, and outputting alarm information according to the alarm event and the preset rule.

Optionally, the outputting, according to the alarm event and according to the preset rule, alarm information includes:

if the monitored equipment monitored by the agent client corresponding to any monitoring server is determined to be abnormal according to the alarm event, alarm information is output;

or,

and if the monitored equipment monitored by the agent client corresponding to each monitoring server is determined to be abnormal according to the alarm event, outputting alarm information.

In a sixth aspect, an embodiment of the present invention provides a distributed monitoring apparatus, which is applied to a proxy server in the distributed monitoring system according to the first aspect of the embodiment of the present invention, where the distributed monitoring apparatus includes:

the receiving module is used for receiving monitoring data sent by an agent client side arranged at a monitored equipment side;

and the sending module is used for sending the received monitoring data to the monitoring server and the data center server respectively.

the receiving module is specifically configured to:

receiving monitoring data sent by agent clients in the same monitoring path;

the sending module is specifically configured to:

In a seventh aspect, an embodiment of the present invention provides a distributed monitoring apparatus, which is applied to a monitoring server in the distributed monitoring system according to the first aspect of the embodiment of the present invention, where the distributed monitoring apparatus includes:

the receiving module is used for receiving the monitoring data sent by the proxy server;

the generating module is used for generating an alarm event according to the received monitoring data;

and the sending module is used for sending the generated alarm event to the alarm center server.

the receiving module is specifically configured to:

the sending module is specifically configured to:

and sending the generated alarm event to a corresponding alarm center server.

In an eighth aspect, an embodiment of the present invention provides a distributed monitoring apparatus, which is applied to a data center server in a distributed monitoring system according to the first aspect of the present invention, where the distributed monitoring apparatus includes:

and the storage module is used for storing the received monitoring data to the storage space.

Optionally, the number of the proxy servers is multiple;

the receiving module is specifically configured to:

the storage module is specifically configured to:

In a ninth aspect, an embodiment of the present invention provides a distributed monitoring apparatus, which is applied to an alarm center server in a distributed monitoring system according to the first aspect of the present invention, where the distributed monitoring apparatus includes:

the detection module is used for detecting whether an alarm event is received from the monitoring server or not;

the output module is used for outputting alarm information according to the received alarm event if the alarm event received from the monitoring server is detected; and if the alarm event is detected not to be received from the monitoring server, acquiring monitoring data from the data center server, generating the alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event.

the detection module is specifically configured to:

detecting whether an alarm event is received from each monitoring server;

the output module is specifically configured to:

if the alarm event is detected to be received from each monitoring server, alarm information is output according to preset rules according to the alarm event;

and if the alarm event is detected not to be received from any monitoring server, acquiring monitoring data acquired by the agent client corresponding to the monitoring server from the data center server, generating the alarm event according to the acquired monitoring data, and outputting alarm information according to the alarm event and the preset rule.

Optionally, the output module is specifically configured to:

or,

In a tenth aspect, an embodiment of the present invention provides a proxy server, including a processor, a communication interface, a memory, and a communication bus, where the processor, the communication interface, and the memory complete communication with each other through the communication bus;

the memory is used for storing a computer program;

the processor is configured to implement the steps of the distributed monitoring method according to the second aspect of the embodiment of the present invention when executing the program stored in the memory.

In an eleventh aspect, an embodiment of the present invention provides a monitoring server, including a processor, a communication interface, a memory, and a communication bus, where the processor, the communication interface, and the memory complete communication with each other through the communication bus;

the memory is used for storing a computer program;

the processor is configured to implement the steps of the distributed monitoring method according to the third aspect of the embodiment of the present invention when executing the program stored in the memory.

In a twelfth aspect, an embodiment of the present invention provides a data center server, including a processor, a communication interface, a memory, and a communication bus, where the processor, the communication interface, and the memory complete mutual communication through the communication bus;

the memory is used for storing a computer program;

the processor is configured to implement the steps of the distributed monitoring method according to the fourth aspect of the embodiment of the present invention when executing the program stored in the memory.

In a thirteenth aspect, an embodiment of the present invention provides an alarm center server, including a processor, a communication interface, a memory, and a communication bus, where the processor, the communication interface, and the memory complete mutual communication through the communication bus;

the memory is used for storing a computer program;

the processor is configured to implement the steps of the distributed monitoring method according to the fifth aspect of the embodiment of the present invention when executing the program stored in the memory.

The embodiment of the invention provides a distributed monitoring system, a method and a device. In the distributed monitoring system, a proxy client arranged at a monitored device end acquires monitoring data of the monitored device, and transmits the obtained monitoring data to the proxy server, the proxy server transmits the received monitoring data to the monitoring server and the data center server respectively, the monitoring server generates an alarm event according to the received monitoring data, and sends the generated alarm event to an alarm center server, the data center server receives and stores the monitoring data sent by the proxy server, the alarm center server outputs alarm information according to the alarm event received from the monitoring server, if the alarm center server detects that the alarm event is not received from the monitoring server, the monitoring data is obtained from the data center server, and generating an alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event. In the distributed monitoring system, besides the proxy client, the proxy server and the monitoring server which are arranged at the monitored equipment end, the distributed monitoring system also comprises a data center server and an alarm center server, wherein the monitoring server does not output alarm information after generating the alarm event, but directly sends the alarm event to the alarm center server, and stores the monitoring data sent by the proxy server in the data center server, if the monitoring server is normal or the position between the proxy server and the monitoring server is normal, the alarm center server can directly output the alarm information according to the received alarm event, if the monitoring server fails or the time delay between the proxy server and the monitoring server is overlarge, the alarm center server acquires the monitoring data from the data center server and generates the alarm event according to the acquired monitoring data, And alarm information is output, so that the real-time performance and the accuracy of the alarm of the distributed monitoring system are improved.

Drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below.

FIG. 1 is a schematic diagram of a distributed network monitoring system according to the prior art;

FIG. 2 is a schematic structural diagram of a distributed monitoring system according to an embodiment of the present invention;

FIG. 3 is a flow chart of a distributed monitoring method according to an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a distributed monitoring system according to another embodiment of the present invention;

FIG. 5 is a flow chart of a distributed monitoring method according to another embodiment of the present invention;

FIG. 6 is a schematic structural diagram of a distributed monitoring system according to yet another embodiment of the present invention;

FIG. 7 is a flowchart illustrating a distributed monitoring method according to another embodiment of the present invention;

FIG. 8 is a flowchart illustrating a distributed monitoring method according to yet another embodiment of the present invention;

fig. 9 is a schematic structural diagram of a distributed monitoring apparatus applied to a proxy server according to an embodiment of the present invention;

fig. 10 is a schematic structural diagram of a distributed monitoring apparatus applied to a monitoring server according to an embodiment of the present invention;

fig. 11 is a schematic structural diagram of a distributed monitoring apparatus applied to a data center server according to an embodiment of the present invention;

fig. 12 is a schematic structural diagram of a distributed monitoring apparatus applied to an alarm center server according to an embodiment of the present invention;

FIG. 13 is a block diagram of a proxy server according to an embodiment of the present invention;

fig. 14 is a schematic structural diagram of a monitoring server according to an embodiment of the present invention;

FIG. 15 is a schematic structural diagram of a data center server according to an embodiment of the present invention;

fig. 16 is a schematic structural diagram of an alarm center server according to an embodiment of the present invention.

Detailed Description

The technical solution in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention.

In order to improve the real-time performance and accuracy of the alarm of the network monitoring system, embodiments of the present invention provide a distributed monitoring system, method, and apparatus, which are described in detail below.

As shown in fig. 2, the distributed monitoring system provided in the embodiment of the present invention may include the following devices: the monitoring system comprises a proxy client 210, a proxy server 220, a monitoring server 230, a data center server 240 and an alarm center server 250 which are arranged at the monitored equipment side.

First, a distributed monitoring method provided in an embodiment of the present invention is described from an interaction perspective of each device in the distributed monitoring system shown in fig. 2, and as shown in fig. 3, the distributed monitoring method may include the following steps:

s301, the agent client arranged at the monitored equipment end acquires the monitoring data of the monitored equipment.

The monitored device is a network device in a computer network, and in order to ensure quality and efficiency of network services, the devices need to be monitored, the proxy client is arranged at the monitored device and can directly obtain monitoring data of the monitored device, and the monitoring data reflects the operation condition of the monitored device, for example, the monitoring data may include an IP (Internet Protocol) address, an MAC (Media Access Control) address, information on whether a fault occurs, information on whether a normal connection occurs, and output parameters of the monitored device.

S302, the proxy client sends monitoring data to the proxy server.

The proxy server is used as a main device for realizing the distribution of the network monitoring system, and the proxy server is arranged in a region and used for collecting the monitoring data of the proxy client in the region, so that the resource waste caused by the need of building a monitoring server in each region is avoided.

And S303, the proxy server sends the received monitoring data to the monitoring server.

S304, the monitoring server generates an alarm event according to the received monitoring data.

S305, the monitoring server sends the generated alarm event to an alarm center server.

The method comprises the steps that if a monitoring server can normally receive monitoring data, the monitoring server can perform data analysis on the received monitoring data to generate an alarm event, wherein the alarm event can comprise abnormal equipment parameters of abnormal monitored equipment, and the alarm event can also comprise normal equipment parameters of normal monitored equipment; of course, based on an understanding of the alarm, only the device anomaly parameters of the anomalous monitored device may be included in the alarm event. The difference from the prior art is that after the alarm event is generated, the monitoring server does not output alarm information, namely does not perform alarm processing, but performs delivery of the alarm event, namely, the generated alarm event is sent to the alarm center server, and the alarm center server performs alarm processing.

S306, the proxy server sends the received monitoring data to the data center server.

Based on the schematic structural diagram of the network monitoring system in the prior art shown in fig. 1, the distributed monitoring system in this embodiment includes a data center server and an alarm center server in addition to a proxy client, a proxy server and a monitoring server, and after receiving monitoring data, the proxy server not only sends the monitoring data to the monitoring server, but also analyzes the monitoring data by the monitoring server, and sends the monitoring data to the data center server. The monitoring server may also have a fault due to a relatively large delay or a fault of a line between the proxy server and the monitoring server, and the data center server may be a conventional database device, such as a data storage medium, and the monitoring data collected by the proxy server may be backed up in the data center server.

The execution sequence of S303 and S306 is not limited, and may be parallel execution, that is, the proxy server sends the monitoring data to the data center server while sending the monitoring data to the monitoring server; or the proxy server sends the monitoring data to the monitoring server and then to the data center server; or the proxy server sends the monitoring data to the data center server and then to the monitoring server.

S307, the data center server stores the received monitoring data to a storage space.

In this embodiment, the function of the data center server is equivalent to that of a database, that is, monitoring data collected by the proxy server is stored and backed up, the proxy server directly sends the monitoring data to the data center server after receiving the monitoring data sent by the proxy client, and the data center server stores the monitoring data in a storage space, so that when the monitoring server fails and/or a line between the proxy server and the monitoring server fails, the alarm center server realizes alarm compensation.

S308, the alarm center server detects whether an alarm event is received from the monitoring server, if so, S309 is executed, and if not, S310 to S311 are executed.

The alarm center server is used as a device for performing alarm processing in the distributed monitoring system of this embodiment, and in order to cope with the occurrence of a monitoring server fault and/or a line fault between the proxy server and the monitoring server, it is necessary to detect whether an alarm event is received from the monitoring server, if it is detected that the alarm event is received from the monitoring server, it indicates that the monitoring server and the line between the proxy server and the monitoring server are normal, and if it is detected that the alarm event is not received from the monitoring server, it indicates that the monitoring server fault and/or the line between the proxy server and the monitoring server are faulty.

If the alarm event only includes the abnormal device parameter of the abnormal monitored device, the detection means of the alarm center server detecting whether the alarm event is received from the monitoring server may be: setting a time length threshold, if the alarm event is not received after the time length threshold is exceeded, determining that the alarm event cannot be received from the monitoring server, wherein the time length threshold can be set to be longer for ensuring accuracy, and can be set to be shorter for ensuring real-time performance; if the alarm event includes both the abnormal device parameter of the abnormal monitored device and the normal device parameter of the normal monitored device, and because the alarm event is periodically sent regardless of whether the monitored device is abnormal, the detection means of the alarm center server detecting whether the alarm event is received from the monitoring server may be: and directly judging whether an alarm event is received.

And S309, the alarm center server outputs alarm information according to the received alarm event.

Aiming at the condition that the monitoring server and the lines between the proxy server and the monitoring server are all normal, the alarm center server can directly analyze abnormal equipment parameters of the monitored equipment with abnormity carried in the alarm event according to the received alarm event and output alarm information, the alarm information can be sent to network management personnel in a mail mode, and the alarm information can comprise abnormal equipment parameters such as an IP address, an MAC address and specific abnormal information of the monitored equipment with abnormity.

And S310, the alarm center server acquires the monitoring data from the data center server.

Aiming at the condition of monitoring server failure and/or line failure between the proxy server and the monitoring server, the alarm center server cannot normally receive the alarm event from the monitoring server, and the data center server stores the monitoring data acquired by the proxy client, so the alarm center server can actively acquire the monitoring data from the data center server.

And S311, the alarm center server generates an alarm event according to the acquired monitoring data and outputs alarm information according to the generated alarm event.

The alarm center server can generate an alarm event according to the acquired monitoring data after acquiring the monitoring data from the data center server, and can output alarm information by analyzing abnormal equipment parameters of the abnormal monitored equipment carried in the alarm event according to the generated alarm event.

The distributed monitoring system in this embodiment may be a Zabbix system, which is a distributed system that implements a computer network monitoring function, and the monitoring of the network device is implemented mainly by Zabbix Agent, Zabbix Proxy and Zabbix Server in the Zabbix system structure, where Zabbix Agent is a Proxy client in the Zabbix system, Zabbix Proxy is a Proxy Server in the Zabbix system, and Zabbix Server is a monitoring Server in the Zabbix system, and taking the Zabbix system as an example, on the basis of the structure of the Zabbix system in the prior art, a data center Server and an alarm center Server are added. The interaction process of each device in the Zabbix system is shown as S301 to S311 in fig. 3, and is not described here again.

By applying the embodiment, in the distributed monitoring system, the agent client arranged at the monitored device end acquires the monitoring data of the monitored device, and transmits the obtained monitoring data to the proxy server, the proxy server transmits the received monitoring data to the monitoring server and the data center server respectively, the monitoring server generates an alarm event according to the received monitoring data, and sends the generated alarm event to an alarm center server, the data center server receives and stores the monitoring data sent by the proxy server, the alarm center server outputs alarm information according to the alarm event received from the monitoring server, if the alarm center server detects that the alarm event is not received from the monitoring server, the monitoring data is obtained from the data center server, and generating an alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event. In the distributed monitoring system, besides the proxy client, the proxy server and the monitoring server which are arranged at the monitored equipment end, the distributed monitoring system also comprises a data center server and an alarm center server, wherein the monitoring server does not output alarm information after generating the alarm event, but directly sends the alarm event to the alarm center server, and stores the monitoring data sent by the proxy server in the data center server, if the monitoring server is normal or the position between the proxy server and the monitoring server is normal, the alarm center server can directly output the alarm information according to the received alarm event, if the monitoring server fails or the time delay between the proxy server and the monitoring server is overlarge, the alarm center server acquires the monitoring data from the data center server and generates the alarm event according to the acquired monitoring data, And alarm information is output, so that the real-time performance and the accuracy of the alarm of the distributed monitoring system are improved.

The distributed monitoring system of the embodiment shown in fig. 2 may also perform horizontal capacity expansion, that is, the distributed monitoring system may include a plurality of agent clients, a plurality of agent servers, and a plurality of monitoring servers, for convenience of understanding, the distributed monitoring system is expanded to include 2 agent clients, 2 agent servers, 2 monitoring servers, 1 data center server, and 1 alarm center server, as shown in fig. 4, for example, the distributed monitoring system after horizontal capacity expansion is described, the distributed monitoring system includes a first agent client 410, a first agent server 420, a first monitoring server 430, a second agent client single point 440, a second agent server 450, a second monitoring server 460, a data center server 470, and an alarm center server 480, the first agent client 410, the first agent server 420, and the first monitoring server 430 form a first monitoring path, the second agent customer single point 440, the second agent server 450 and the second monitoring server 460 form a second monitoring path, the first path and the second path are both connected to the alarm center server 480, that is, 2 sets of monitoring paths are adopted, and each monitoring data is reported, and finally, the monitoring data is collected to the alarm center server in a unified manner.

In the following, from the perspective of interaction among devices in the distributed monitoring system shown in fig. 4, a distributed monitoring method provided in the embodiment of the present invention is described, as shown in fig. 5, the distributed monitoring method may include the following steps:

s501, a first agent client arranged at a monitored device side acquires monitoring data of the monitored device.

S502, the first proxy client sends monitoring data to the first proxy server.

S503, the first proxy server sends the received monitoring data to the first monitoring server and the data center server respectively.

S504, the first monitoring server generates an alarm event according to the received monitoring data.

And S505, the first monitoring server sends the generated alarm event to an alarm center server.

S506, the second agent client arranged at the monitored equipment end obtains the monitoring data of the monitored equipment.

S507, the second agent client sends the monitoring data to the second agent server.

And S508, the second proxy server sends the received monitoring data to the second monitoring server and the data center server respectively.

And S509, the second monitoring server generates an alarm event according to the received monitoring data.

And S510, the second monitoring server sends the generated alarm event to an alarm center server.

S511, the alarm center server detects whether an alarm event is received from the first monitoring server and the second monitoring server, if it is detected that the alarm event is received from the first monitoring server and the second monitoring server, S512 is executed, and if it is detected that the alarm event is not received from the first monitoring server or the second monitoring server, S513 to S514 are executed.

S501 to S511 in this embodiment are the same as or similar to S301 to S308 in the embodiment shown in fig. 3, and the execution process is as shown in fig. 3, which is not repeated herein.

And S512, the alarm center server outputs alarm information according to the received alarm event and a preset rule.

If the alarm center server receives the alarm events sent by the first monitoring server and the second monitoring server, it indicates that the devices in the first monitoring path and the second monitoring path are normal, the alarm center server can directly analyze the abnormal device parameters of the abnormal monitored device carried in the alarm event according to the received alarm event, and output alarm information according to the preset rule, the alarm information can be sent to the network administrator in the form of a mail, and the alarm information can include the abnormal device parameters such as the IP address, the MAC address, the specific abnormal information and the like of the abnormal monitored device.

Optionally, the step of outputting the alarm information according to the preset rule according to the received alarm event may include:

or,

The alarm center server may output the alarm information in different conditions according to the result obtained by the analysis, for example, output the alarm information in a highest-level manner, that is, output the alarm information if there is an abnormality in the monitored device corresponding to one monitoring path, or output the alarm information in a low-level manner, that is, output the alarm information if all the monitored devices corresponding to the monitoring paths are abnormal. Of course, for a distributed monitoring system with more monitoring paths, the number of monitoring paths in which the abnormality of the monitored device occurs may be set by itself, and is related to the actual application scenario of the system, and will not be described herein again.

S513, the alarm center server obtains the monitoring data obtained by the agent client corresponding to the first monitoring server or the second monitoring server which cannot receive the alarm event from the data center server.

If the alarm center server cannot receive the alarm event sent by the first monitoring server or the second monitoring server, the fault of the first monitoring server and/or the fault of the line between the first proxy server and the first monitoring server is illustrated, or the fault of the second monitoring server and/or the fault of the line between the second proxy server and the second monitoring server is illustrated, taking the example that the alarm center server cannot receive the alarm event sent by the first monitoring server, because the alarm center server cannot normally receive the alarm event from the first monitoring server, and the data center server stores the monitoring data obtained by the first proxy client, the alarm center server can actively obtain the monitoring data obtained by the first proxy client from the data center server.

And S514, the alarm center server generates an alarm event according to the acquired monitoring data, and outputs alarm information according to preset rules according to the alarm event.

After the alarm center server acquires the monitoring data from the data center server, an alarm event can be generated according to the acquired monitoring data. And then, according to the normally received alarm event and the alarm event generated according to the monitoring data acquired from the data center server, analyzing the abnormal parameters of the abnormal monitored equipment carried in the alarm event, and outputting alarm information according to a preset rule.

As in the optional embodiment of S512, optionally, the step of outputting alarm information according to the preset rule based on the alarm event in S514 may include:

or,

The distributed monitoring system in this embodiment may be a Zabbix system after horizontal expansion, and the Zabbix system after horizontal expansion includes multiple Zabbix agents, multiple Zabbix Proxy, multiple Zabbix servers, a data center server, and an alarm center server. The interaction process of each device in the Zabbix system after horizontal expansion is shown as S501 to S514 in fig. 5, and details are not described here.

By applying the embodiment, in the distributed monitoring system, the agent client arranged at the monitored device end acquires the monitoring data of the monitored device, and transmits the obtained monitoring data to the proxy server, the proxy server transmits the received monitoring data to the monitoring server and the data center server respectively, the monitoring server generates an alarm event according to the received monitoring data, and sends the generated alarm event to an alarm center server, the data center server receives and stores the monitoring data sent by the proxy server, the alarm center server outputs alarm information according to the alarm event received from the monitoring server, if the alarm center server detects that the alarm event is not received from the monitoring server, the monitoring data is obtained from the data center server, and generating an alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event. In the distributed monitoring system, besides the proxy client, the proxy server and the monitoring server which are arranged at the monitored equipment end, the distributed monitoring system also comprises a data center server and an alarm center server, wherein the monitoring server does not output alarm information after generating the alarm event, but directly sends the alarm event to the alarm center server, and stores the monitoring data sent by the proxy server in the data center server, if the monitoring server is normal or the position between the proxy server and the monitoring server is normal, the alarm center server can directly output the alarm information according to the received alarm event, if the monitoring server fails or the time delay between the proxy server and the monitoring server is overlarge, the alarm center server acquires the monitoring data from the data center server and generates the alarm event according to the acquired monitoring data, And alarm information is output, so that the real-time performance and the accuracy of the alarm of the distributed monitoring system are improved. And 2 sets of monitoring channels are taken as an example, the distributed monitoring system is subjected to horizontal capacity expansion, and the accuracy of alarming is ensured.

Based on the embodiment of the distributed monitoring system shown in fig. 4, in the distributed monitoring system, the number of the alarm center servers may also be multiple, and one monitoring path corresponds to one alarm center server one to one, so that one alarm center server is only responsible for the alarm processing of one monitoring path, the processing pressure of each alarm center server is reduced, and the processing efficiency of each alarm center server is improved The first agent client 610, the first agent server 620 and the first monitoring server 630 form a first monitoring path, the second agent client single-point 650, the second agent server 660 and the second monitoring server 670 form a second monitoring path, the first path is connected to the first alarm center server 640, and the second path is connected to the second alarm center server 680.

Next, from the interaction perspective of each device in the distributed monitoring system shown in fig. 6, the distributed monitoring method provided in the embodiment of the present invention is introduced, and as shown in fig. 7, a schematic flow diagram of the distributed monitoring method corresponding to the first path and the first alarm center server may include the following steps:

s701, a first agent client arranged at a monitored device end acquires monitoring data of the monitored device.

S702, the first proxy client sends monitoring data to the first proxy server.

And S703, the first proxy server respectively sends the received monitoring data to the first monitoring server and the data center server.

S704, the first monitoring server generates an alarm event according to the received monitoring data.

S705, the first monitoring server sends the generated alarm event to a first alarm center server.

S706, the first alarm center server detects whether an alarm event is received from the first monitoring server, if it is detected that the alarm event is received from the first monitoring server, S707 is executed, and if it is detected that the alarm event is not received from the first monitoring server, S708 to S709 are executed.

And S707, the first alarm center server outputs alarm information according to the received alarm event.

S708, the first alarm center server obtains the monitoring data obtained by the first agent client from the data center server.

And S709, the first alarm center server generates an alarm event according to the acquired monitoring data, and outputs alarm information according to the generated alarm event.

As shown in fig. 8, a schematic flow chart of a distributed monitoring method corresponding to a second path and a second alarm center server may include the following steps:

s801, a second agent client arranged at a monitored device end acquires monitoring data of the monitored device.

S802, the second agent client sends the monitoring data to the second agent server.

And S803, the second proxy server sends the received monitoring data to the second monitoring server and the data center server respectively.

And S804, the second monitoring server generates an alarm event according to the received monitoring data.

And S805, the second monitoring server sends the generated alarm event to a second alarm center server.

S806, the second alarm center server detects whether an alarm event is received from the second monitoring server, if it is detected that the alarm event is received from the second monitoring server, S807 is performed, and if it is detected that the alarm event is not received from the second monitoring server, S808 to S809 are performed.

And S807, the second alarm center server outputs alarm information according to the received alarm event.

And S808, the second alarm center server acquires the monitoring data acquired by the second agent client from the data center server.

And S809, the second alarm center server generates an alarm event according to the acquired monitoring data and outputs alarm information according to the generated alarm event.

The data center server in the embodiment shown in fig. 7 is the same as the data center server in the embodiment shown in fig. 8. And the steps in the embodiments shown in fig. 7 and 8 correspond to the steps in the embodiment shown in fig. 3, and are not described again here.

By applying the embodiment, in the distributed monitoring system, the agent client arranged at the monitored device end acquires the monitoring data of the monitored device, and transmits the obtained monitoring data to the proxy server, the proxy server transmits the received monitoring data to the monitoring server and the data center server respectively, the monitoring server generates an alarm event according to the received monitoring data, and sends the generated alarm event to an alarm center server, the data center server receives and stores the monitoring data sent by the proxy server, the alarm center server outputs alarm information according to the alarm event received from the monitoring server, if the alarm center server detects that the alarm event is not received from the monitoring server, the monitoring data is obtained from the data center server, and generating an alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event. In the distributed monitoring system, besides the proxy client, the proxy server and the monitoring server which are arranged at the monitored equipment end, the distributed monitoring system also comprises a data center server and an alarm center server, wherein the monitoring server does not output alarm information after generating the alarm event, but directly sends the alarm event to the alarm center server, and stores the monitoring data sent by the proxy server in the data center server, if the monitoring server is normal or the position between the proxy server and the monitoring server is normal, the alarm center server can directly output the alarm information according to the received alarm event, if the monitoring server fails or the time delay between the proxy server and the monitoring server is overlarge, the alarm center server acquires the monitoring data from the data center server and generates the alarm event according to the acquired monitoring data, And alarm information is output, so that the real-time performance and the accuracy of the alarm of the distributed monitoring system are improved. Moreover, when the distributed monitoring system is expanded, the number of the alarm center servers can be set to be multiple, and one monitoring channel corresponds to one alarm center server one to one, so that one alarm center server is only responsible for alarm processing of one monitoring channel, the processing pressure of each alarm center server is reduced, and the processing efficiency of each alarm center server is improved.

Corresponding to the foregoing method embodiment, an embodiment of the present invention provides a distributed monitoring apparatus, which is applied to a proxy server in the distributed monitoring system in the embodiment shown in fig. 2, and as shown in fig. 9, the distributed monitoring apparatus may include:

a receiving module 910, configured to receive monitoring data sent by an agent client disposed at a monitored device;

the sending module 920 is configured to send the received monitoring data to the monitoring server and the data center server, respectively.

the receiving module 910 may specifically be configured to:

receiving monitoring data sent by agent clients in the same monitoring path;

the sending module 920 may be specifically configured to:

Corresponding to the foregoing method embodiment, an embodiment of the present invention provides a distributed monitoring apparatus, which is applied to a monitoring server in the distributed monitoring system in the embodiment shown in fig. 2, and as shown in fig. 10, the distributed monitoring apparatus may include:

a receiving module 1010, configured to receive monitoring data sent by the proxy server;

a generating module 1020, configured to generate an alarm event according to the received monitoring data;

a sending module 1030, configured to send the generated alarm event to the alarm center server.

the receiving module 1010 may be specifically configured to:

the sending module 1030 may be specifically configured to:

and sending the generated alarm event to a corresponding alarm center server.

Corresponding to the foregoing method embodiment, an embodiment of the present invention provides a distributed monitoring apparatus, which is applied to a data center server in the distributed monitoring system in the embodiment shown in fig. 2, and as shown in fig. 11, the distributed monitoring apparatus may include:

a receiving module 1110, configured to receive monitoring data sent by a proxy server;

the storage module 1120 is configured to store the received monitoring data in a storage space.

Optionally, the number of the proxy servers is multiple;

the receiving module 1110 may be specifically configured to:

the storage module 1120 may be specifically configured to:

Corresponding to the foregoing method embodiment, an embodiment of the present invention provides a distributed monitoring apparatus, which is applied to an alarm center server in a distributed monitoring system in the embodiment shown in fig. 2, and as shown in fig. 12, the distributed monitoring apparatus may include:

a detection module 1210 for detecting whether an alarm event is received from the monitoring server;

an output module 1220, configured to output alarm information according to the received alarm event if it is detected that the alarm event is received from the monitoring server; and if the alarm event is detected not to be received from the monitoring server, acquiring monitoring data from the data center server, generating the alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event.

the detection module 1210 may be specifically configured to:

detecting whether an alarm event is received from each monitoring server;

the output module 1220 may specifically be configured to:

Optionally, the output module 1220 may be specifically configured to:

or,

By the embodiment of the device, in the distributed monitoring system, the agent client arranged at the monitored equipment end acquires the monitoring data of the monitored equipment, and transmits the obtained monitoring data to the proxy server, the proxy server transmits the received monitoring data to the monitoring server and the data center server respectively, the monitoring server generates an alarm event according to the received monitoring data, and sends the generated alarm event to an alarm center server, the data center server receives and stores the monitoring data sent by the proxy server, the alarm center server outputs alarm information according to the alarm event received from the monitoring server, if the alarm center server detects that the alarm event is not received from the monitoring server, the monitoring data is obtained from the data center server, and generating an alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event. In the distributed monitoring system, besides the proxy client, the proxy server and the monitoring server which are arranged at the monitored equipment end, the distributed monitoring system also comprises a data center server and an alarm center server, wherein the monitoring server does not output alarm information after generating the alarm event, but directly sends the alarm event to the alarm center server, and stores the monitoring data sent by the proxy server in the data center server, if the monitoring server is normal or the position between the proxy server and the monitoring server is normal, the alarm center server can directly output the alarm information according to the received alarm event, if the monitoring server fails or the time delay between the proxy server and the monitoring server is overlarge, the alarm center server acquires the monitoring data from the data center server and generates the alarm event according to the acquired monitoring data, And alarm information is output, so that the real-time performance and the accuracy of the alarm of the distributed monitoring system are improved.

An embodiment of the present invention further provides a proxy server, as shown in fig. 13, a proxy server 1300 may include a processor 1301, a communication interface 1302, a memory 1303, and a communication bus 1304, where the processor 1301, the communication interface 1302, and the memory 1303 complete communication with each other through the communication bus 1304;

the memory 1303 is used for storing computer programs;

the processor 1301 is configured to implement all steps of the distributed monitoring method applied to the proxy server according to the embodiment of the present invention when the program stored in the memory 1303 is executed.

In addition, corresponding to the distributed monitoring method applied to the proxy server provided in the foregoing embodiment, an embodiment of the present invention provides a computer-readable storage medium, which is included in the proxy server 1300 shown in fig. 13, and the computer-readable storage medium stores therein a computer program, and the computer program, when executed by a processor, implements all the steps of the distributed monitoring method applied to the proxy server according to the embodiment of the present invention.

As shown in fig. 14, a monitoring server 1400 may include a processor 1401, a communication interface 1402, a memory 1403, and a communication bus 1404, where the processor 1401, the communication interface 1402, and the memory 1403 complete communication with each other through the communication bus 1404;

the memory 1403 for storing a computer program;

the processor 1401 is configured to implement all the steps of the distributed monitoring method applied to the monitoring server according to the embodiment of the present invention when executing the program stored in the memory 1403.

In addition, corresponding to the distributed monitoring method applied to the monitoring server provided in the foregoing embodiment, an embodiment of the present invention provides a computer-readable storage medium, which is included in the monitoring server 1400 shown in fig. 14, and the computer-readable storage medium stores a computer program, and the computer program, when executed by a processor, implements all the steps of the distributed monitoring method applied to the monitoring server according to the embodiment of the present invention.

As shown in fig. 15, a data center server 1500 may include a processor 1501, a communication interface 1502, a memory 1503, and a communication bus 1504, where the processor 1501, the communication interface 1502, and the memory 1503 complete communication with each other through the communication bus 1504;

the memory 1503 is used for storing computer programs;

the processor 1501 is configured to implement all the steps of the distributed monitoring method applied to the data center server according to the embodiment of the present invention when executing the program stored in the memory 1503.

In addition, corresponding to the distributed monitoring method applied to the data center server provided in the foregoing embodiment, an embodiment of the present invention provides a computer-readable storage medium, which is included in the data center server 1500 shown in fig. 15, and the computer-readable storage medium stores a computer program, and the computer program, when executed by a processor, implements all the steps of the distributed monitoring method applied to the data center server according to the embodiment of the present invention.

As shown in fig. 16, the alarm center server 1600 may include a processor 1601, a communication interface 1602, a memory 1603, and a communication bus 1604, where the processor 1601, the communication interface 1602, and the memory 1603 complete communication with each other through the communication bus 1604;

the memory 1603 is used for storing computer programs;

the processor 1601 is configured to implement all the steps of the distributed monitoring method applied to the alarm center server according to the embodiment of the present invention when executing the program stored in the memory 1603.

In addition, corresponding to the distributed monitoring method applied to the alarm center server provided in the foregoing embodiment, an embodiment of the present invention provides a computer-readable storage medium, which is included in the alarm center server 1600 shown in fig. 16, and the computer-readable storage medium stores a computer program, and the computer program, when executed by a processor, implements all the steps of the distributed monitoring method applied to the alarm center server according to the embodiment of the present invention.

The communication bus may be a PCI (Peripheral Component Interconnect) bus, an EISA (Extended Industry Standard Architecture) bus, or the like. The communication bus may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown, but this does not mean that there is only one bus or one type of bus.

The communication interface is used for communication between each device and other devices.

The Memory may include a RAM (Random Access Memory) or an NVM (Non-Volatile Memory), such as at least one disk Memory. Optionally, the memory may also be at least one memory device located remotely from the processor.

The Processor may be a general-purpose Processor, including a Central Processing Unit (CPU), a Network Processor (NP), and the like; but also a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array) or other Programmable logic device, discrete Gate or transistor logic device, discrete hardware component.

In the above embodiments, the implementation may be wholly or partially realized by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. The procedures or functions according to the embodiments of the invention are brought about in whole or in part when the computer program instructions are loaded and executed on a computer. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored in a computer readable storage medium or transmitted from one computer readable storage medium to another, for example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by wire (e.g., coaxial cable, fiber optic, Digital Subscriber Line (DSL)) or wirelessly (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device, such as a server, a data center, etc., that incorporates one or more of the available media. The usable medium may be a magnetic medium (e.g., a floppy Disk, a hard Disk, a magnetic tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., an SSD (Solid State Disk)), etc.

Through the operations of the proxy server 1300, the monitoring server 1400, the data center server 1500 and the alarm center server 1600, the following can be realized: in the distributed monitoring system, besides the proxy client, the proxy server and the monitoring server which are arranged at the monitored equipment end, the distributed monitoring system also comprises a data center server and an alarm center server, wherein the monitoring server does not output alarm information after generating the alarm event, but directly sends the alarm event to the alarm center server, and stores the monitoring data sent by the proxy server in the data center server, if the monitoring server is normal or the position between the proxy server and the monitoring server is normal, the alarm center server can directly output the alarm information according to the received alarm event, if the monitoring server fails or the time delay between the proxy server and the monitoring server is overlarge, the alarm center server acquires the monitoring data from the data center server and generates the alarm event according to the acquired monitoring data, And alarm information is output, so that the real-time performance and the accuracy of the alarm of the distributed monitoring system are improved.

The computer-readable storage medium stores an application program that executes the distributed monitoring method provided by the embodiment of the present invention when running, so that the following can be implemented: in the distributed monitoring system, besides the proxy client, the proxy server and the monitoring server which are arranged at the monitored equipment end, the distributed monitoring system also comprises a data center server and an alarm center server, wherein the monitoring server does not output alarm information after generating the alarm event, but directly sends the alarm event to the alarm center server, and stores the monitoring data sent by the proxy server in the data center server, if the monitoring server is normal or the position between the proxy server and the monitoring server is normal, the alarm center server can directly output the alarm information according to the received alarm event, if the monitoring server fails or the time delay between the proxy server and the monitoring server is overlarge, the alarm center server acquires the monitoring data from the data center server and generates the alarm event according to the acquired monitoring data, And alarm information is output, so that the real-time performance and the accuracy of the alarm of the distributed monitoring system are improved.

It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.

All the embodiments in the present specification are described in a related manner, and the same and similar parts among the embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, for the system embodiment, since it is substantially similar to the method embodiment, the description is simple, and for the relevant points, reference may be made to the partial description of the method embodiment.

The above description is only for the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention shall fall within the protection scope of the present invention.

Claims

1. A distributed monitoring system, the distributed monitoring system comprising: the monitoring system comprises an agent client, an agent server, a monitoring server, a data center server and an alarm center server which are arranged at a monitored equipment end;

2. The distributed monitoring system according to claim 1, wherein the distributed monitoring system comprises a plurality of monitoring paths, a data center server and an alarm center server, wherein the monitoring paths comprise an agent client, an agent server and a monitoring server;

3. The distributed monitoring system according to claim 2, wherein the alarm center server is specifically configured to:

or,

4. The distributed monitoring system according to claim 1, wherein the distributed monitoring system comprises a plurality of monitoring paths, a plurality of alarm center servers and a data center server, one monitoring path corresponds to one alarm center server one by one, wherein the monitoring path is composed of one agent client, one agent server and one monitoring server;

5. A distributed monitoring method is applied to a proxy server in a distributed monitoring system, and the distributed monitoring system comprises: the monitoring system comprises an agent client, an agent server, a monitoring server, a data center server and an alarm center server which are arranged at a monitored equipment end; the distributed monitoring method comprises the following steps:

the proxy server receives the monitoring data sent by the proxy client and respectively sends the received monitoring data to the monitoring server and the data center server; the monitoring server generates an alarm event according to the received monitoring data and sends the generated alarm event to the alarm center server; the proxy client acquires monitoring data of monitored equipment and sends the acquired monitoring data to the proxy server; the data center server receives and stores the monitoring data sent by the proxy server; the alarm center server outputs alarm information according to the alarm event received from the monitoring server; and if the alarm event is detected not to be received from the monitoring server, acquiring monitoring data from the data center server, generating the alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event.

6. The distributed monitoring method according to claim 5, wherein the number of the agent clients and the monitoring servers is plural, and the agent server, one agent client and one monitoring server form a monitoring path;

receiving monitoring data sent by agent clients in the same monitoring path;

7. A distributed monitoring method is applied to a monitoring server in a distributed monitoring system, and the distributed monitoring system comprises: the monitoring system comprises an agent client, an agent server, a monitoring server, a data center server and an alarm center server which are arranged at a monitored equipment end; the distributed monitoring method comprises the following steps:

the monitoring server receives the monitoring data sent by the proxy server, generates an alarm event according to the received monitoring data, and sends the generated alarm event to the alarm center server; so that the alarm center server outputs alarm information according to the alarm event received from the monitoring server; if the alarm event is detected not to be received from the monitoring server, acquiring monitoring data from the data center server, generating an alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event; the proxy client is used for acquiring monitoring data of the monitored equipment and sending the acquired monitoring data to the proxy server; the proxy server receives the monitoring data sent by the proxy client and respectively sends the received monitoring data to the monitoring server and the data center server; and the data center server receives and stores the monitoring data sent by the proxy server.

8. The distributed monitoring method according to claim 7, wherein the number of the proxy servers is plural, and the monitoring server is located in a monitoring path with one proxy server;

the receiving of the monitoring data sent by the proxy server includes:

9. The distributed monitoring method according to claim 8, wherein the number of the alarm center servers is multiple, and the monitoring servers correspond to one alarm center server one to one;

the sending of the generated alarm event to the alarm center server includes:

and sending the generated alarm event to a corresponding alarm center server.

10. A distributed monitoring method is applied to a data center server in a distributed monitoring system, and the distributed monitoring system comprises: the monitoring system comprises an agent client, an agent server, a monitoring server, a data center server and an alarm center server which are arranged at a monitored equipment end; the distributed monitoring method comprises the following steps:

the data center server receives the monitoring data sent by the proxy server and stores the received monitoring data in a storage space; the proxy client acquires monitoring data of monitored equipment and sends the acquired monitoring data to the proxy server; the proxy server receives the monitoring data sent by the proxy client and respectively sends the received monitoring data to the monitoring server and the data center server; the monitoring server generates an alarm event according to the received monitoring data and sends the generated alarm event to the alarm center server; the alarm center server outputs alarm information according to the alarm event received from the monitoring server; and if the alarm event is detected not to be received from the monitoring server, acquiring monitoring data from the data center server, generating the alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event.

11. The distributed monitoring method according to claim 10, wherein the number of the proxy servers is plural;

the receiving of the monitoring data sent by the proxy server includes:

the storing the received monitoring data to a storage space includes:

12. A distributed monitoring method is characterized in that the method is applied to an alarm center server in a distributed monitoring system, and the distributed monitoring system comprises the following steps: the monitoring system comprises an agent client, an agent server, a monitoring server, a data center server and an alarm center server which are arranged at a monitored equipment end; the distributed monitoring method comprises the following steps:

the alarm center device outputs alarm information according to the alarm event received from the monitoring server; if the alarm event is detected not to be received from the monitoring server, acquiring monitoring data from the data center server, generating an alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event; the proxy client acquires monitoring data of monitored equipment and sends the acquired monitoring data to the proxy server; the proxy server receives the monitoring data sent by the proxy client and respectively sends the received monitoring data to the monitoring server and the data center server; the monitoring server generates an alarm event according to the received monitoring data and sends the generated alarm event to the alarm center server; and the data center server receives and stores the monitoring data sent by the proxy server.

13. The distributed monitoring method according to claim 12, wherein the number of the monitoring servers is plural, and one monitoring server corresponds to one agent client one to one;

detecting whether an alarm event is received from each monitoring server;

if the alarm event is detected not to be received from any monitoring server, acquiring monitoring data from the data center server, generating the alarm event according to the acquired monitoring data, and outputting alarm information according to the generated alarm event, wherein the alarm event comprises the following steps:

14. The distributed monitoring method according to claim 13, wherein the outputting alarm information according to the preset rule according to the alarm event comprises:

or,

15. A distributed monitoring apparatus, applied to a proxy server in a distributed monitoring system, the distributed monitoring system comprising: the monitoring system comprises an agent client, an agent server, a monitoring server, a data center server and an alarm center server which are arranged at a monitored equipment end; the distributed monitoring apparatus includes:

16. The distributed monitoring apparatus according to claim 15, wherein the number of the agent clients and the monitoring servers is plural, and the agent server forms a monitoring path with one agent client and one monitoring server;

the receiving module is specifically configured to:

receiving monitoring data sent by agent clients in the same monitoring path;

the sending module is specifically configured to:

17. A distributed monitoring apparatus, applied to a monitoring server in a distributed monitoring system, the distributed monitoring system comprising: the monitoring system comprises an agent client, an agent server, a monitoring server, a data center server and an alarm center server which are arranged at a monitored equipment end; the distributed monitoring apparatus includes:

18. The distributed monitoring apparatus according to claim 17, wherein the number of the proxy servers is plural, and the monitoring server is located in a monitoring path with one proxy server;

the receiving module is specifically configured to:

19. The distributed monitoring apparatus according to claim 18, wherein the number of the alarm center servers is plural, and the monitoring servers correspond to one alarm center server one to one;

the sending module is specifically configured to:

and sending the generated alarm event to a corresponding alarm center server.

20. A distributed monitoring device is applied to a data center server in a distributed monitoring system, and the distributed monitoring system comprises: the monitoring system comprises an agent client, an agent server, a monitoring server, a data center server and an alarm center server which are arranged at a monitored equipment end; the distributed monitoring apparatus includes:

21. The distributed monitoring apparatus of claim 20, wherein the number of the proxy servers is plural;

the receiving module is specifically configured to:

the storage module is specifically configured to:

22. A distributed monitoring device is applied to an alarm center server in a distributed monitoring system, and the distributed monitoring system comprises: the monitoring system comprises an agent client, an agent server, a monitoring server, a data center server and an alarm center server which are arranged at a monitored equipment end; the distributed monitoring apparatus includes:

23. The distributed monitoring apparatus according to claim 22, wherein the number of the monitoring servers is plural, and one monitoring server corresponds to one agent client;

the detection module is specifically configured to:

detecting whether an alarm event is received from each monitoring server;

the output module is specifically configured to:

24. The distributed monitoring apparatus according to claim 23, wherein the output module is specifically configured to:

or,

25. A proxy server is characterized by comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory are communicated with each other through the communication bus;

the memory is used for storing a computer program;

the processor, when executing the program stored in the memory, implementing the method steps of any of claims 5-6.

26. A monitoring server is characterized by comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory are communicated with each other through the communication bus;

the memory is used for storing a computer program;

the processor, when executing the program stored in the memory, implementing the method steps of any of claims 7-9.

27. A data center server is characterized by comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory are communicated with each other through the communication bus;

the memory is used for storing a computer program;

the processor, when executing the program stored in the memory, is configured to perform the method steps of any of claims 10-11.

28. The alarm center server is characterized by comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory are communicated with each other through the communication bus;

the memory is used for storing a computer program;

the processor, when executing the program stored in the memory, is configured to perform the method steps of any of claims 12-14.