# US 12,001,275 B2 · Data processing method, apparatus, database system, electronic device, and storage medium > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,001,275 B2 - Document ID: US12001275B2 - Status: Granted - Kind: B2 - Application number: 17/861,134 - Filed: 2022-07-08 - Published: 2022-10-27 - Granted: 2024-06-04 - Earliest claimed: 2020-01-23 - Assignees: Alibaba Group Holding Limited - Applicants: Alibaba Group Holding Limited - Inventors: Zheng Yin - Web page: https://patentgrep.com/patent/US12001275B2 ## CPC - G06F 11/079: {Root cause analysis, i.e. error or fault diagnosis (in a hardware test environment G06F11/22; in a software test environment G06F11/36)} - G06F 11/0709: {in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems} - G06F 11/0727: {in a storage system, e.g. in a DASD or network based storage system (drivers for digital recording or reproducing units G06F3/06; circuits for error detection or correction within digital recording or reproducing units G11B20/18; for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS], H04L67/1097)} - G06F 11/0751: {Error or fault detection not based on redundancy (power supply failures G06F1/30; network fault management H04L41/06)} - G06F 11/0769: {Readable error formats, e.g. cross-platform generic formats, human understandable formats} - G06F 11/0772: {Means for error signaling, e.g. using interrupts, exception flags, dedicated error registers} - G06F 11/302: {where the computing system component is a software system} - G06F 11/327: {Alarm or error message display} - G06F 11/3409: {for performance assessment} - G06F 11/3466: {Performance evaluation by tracing or monitoring} - G06F 16/215: Improving data quality; Data cleansing, e.g. de-duplication, removing invalid entries or correcting typographical errors - G06F 2201/865: Monitoring of software - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A data processing method, an apparatus, a database system, an electronic device, and a storage medium are disclosed. The data processing method includes obtaining problem analysis result data generated according to abnormality indicators of a database system, wherein the problem analysis results include associated abnormality indicators that are related in abnormality indicators and abnormality propagation relationships between the associated abnormality indicators; generating a directed alert graph used for displaying causal relationships between causes of abnormality corresponding to the associated abnormality indicators and abnormal phenomena based on the associated abnormality indicators and the abnormality propagation relationships between the associated abnormality indicators; and displaying the directed alert graph for giving an alert. Using the embodiments of the present disclosure can give an alert more intuitively and efficiently. ## Claims ### Claim 1 A method implemented by a computing device, the method comprising: obtaining problem analysis result data generated according to abnormality indicators of a database system, wherein the problem analysis result data includes associated abnormality indicators that are related in a plurality of abnormality indicators and abnormality propagation relationships between the associated abnormality indicators; and generating a directed alert graph used for displaying causal relationships between causes of abnormality corresponding to the associated abnormality indicators and abnormal phenomena based on the associated abnormality indicators and the abnormality propagation relationships between the associated abnormality indicators, wherein a cause of abnormality of the causes of abnormality comprises at least one of: an abnormal instance workload, a host problem and an external operation problem, and the abnormal instance workload comprises at least one of: a central processing unit (CPU) intensive workload, an input/output (IO) intensive workload, and a faulty structured query statement. ### Claim 2 (depends on 1) The method according to claim 1, wherein generating the directed alert graph used for displaying the causal relationships between the causes of abnormality corresponding to the associated abnormality indicators and the abnormal phenomena based on the associated abnormality indicators and the abnormality propagation relationships between the associated abnormality indicators comprises: determining a root abnormality indicator and remaining abnormality indicators in the associated abnormality indicators according to the abnormality propagation relationships between the associated abnormality indicators; determining the cause of abnormality corresponding to the root abnormality indicator according to category information to which the root abnormality indicator belongs; determining abnormal phenomena corresponding to the remaining abnormality indicators and propagation directions between the abnormal phenomena according to respective category information to which the remaining abnormality indicators belong and propagation directions between the remaining abnormality indicators; and generating the directed alert graph used for displaying the causal relationships between the causes of abnormality and the abnormal phenomena based on the cause of abnormality corresponding to the root abnormality indicator, the abnormal phenomena corresponding to the remaining abnormality indicators, and the propagation directions between the abnormal phenomena. ### Claim 3 (depends on 2) The method according to claim 2, wherein: the directed alert graph comprises a first visualization object corresponding to the cause of abnormality, and second visualization objects corresponding to the remaining causes in preset candidate causes other than the cause of abnormality, the first visualization object being distinguished from the second visualization objects; and/or the directed alert graph further comprises a third visualization object corresponding to an abnormal phenomenon of the abnormal phenomena and fourth visualization objects corresponding to remaining phenomena in preset candidate phenomena other than the abnormal phenomenon, the third visualization object being distinguished from the fourth visualization objects. ### Claim 4 (depends on 3) The method according to claim 3, further comprising: receiving a triggering operation for the first visualization object or the third visualization object in the directed alert graph displayed; and displaying information of an abnormality indicator corresponding to a cause of abnormality indicated by the triggered first visualization object, or information of an abnormality indicator corresponding to an abnormal phenomenon indicated by the triggered third visualization object according to the triggering operation. ### Claim 5 (depends on 4) The method according to claim 4, wherein the information of the abnormality indicator comprises at least one of: an identification of the abnormality indicator and an identification of fluctuation used for representing a direction of abnormal fluctuation of the abnormality indicator. ### Claim 6 (depends on 1) The method according to claim 1, wherein the host problem comprises at least one of: a host CPU bottleneck, a host IO bottleneck, a host memory bottleneck, a host network bottleneck, a host storage bottleneck, and a host hardware problem. ### Claim 7 (depends on 1) The method according to claim 1, wherein the external operation problem comprises at least one of: an instance parameter adjustment problem, an instance master/slaveswitch operations problem, an instance migration/backuptasks problem, and a host operation tasks problem. ### Claim 8 (depends on 1) The method according to claim 1, wherein the abnormal phenomena comprise at least one of: a sudden increase in instance CPU, a sudden increase in instance IO, an instance memory overflow, a host CPU resource preemption, a host IO resource preemption, a host memory resource preemption, a host network resource preemption, an abnormal change in host space, a sudden increase of number of sessions, a sudden increase in transmission control protocol (TCP) response time, and a decrease in service traffic. ### Claim 9 One or more computer readable media storing executable instructions that, when executed by one or more processors, cause the one or more processors to perform acts comprising: obtaining problem analysis result data generated according to abnormality indicators of a database system, wherein the problem analysis result data includes associated abnormality indicators that are related in a plurality of abnormality indicators and abnormality propagation relationships between the associated abnormality indicators; and generating a directed alert graph used for displaying causal relationships between causes of abnormality corresponding to the associated abnormality indicators and abnormal phenomena based on the associated abnormality indicators and the abnormality propagation relationships between the associated abnormality indicators, wherein a cause of abnormality of the causes of abnormality comprises at least one of: an abnormal instance workload, a host problem and an external operation problem, and the external operation problem comprises at least one of: an instance parameter adjustment problem, an instance master/slaveswitch operations problem, an instance migration/backuptasks problem, and a host operation tasks problem. ### Claim 10 (depends on 9) The one or more computer readable media according to claim 9, wherein generating the directed alert graph used for displaying the causal relationships between the causes of abnormality corresponding to the associated abnormality indicators and the abnormal phenomena based on the associated abnormality indicators and the abnormality propagation relationships between the associated abnormality indicators comprises: determining a root abnormality indicator and remaining abnormality indicators in the associated abnormality indicators according to the abnormality propagation relationships between the associated abnormality indicators; determining the cause of abnormality corresponding to the root abnormality indicator according to category information to which the root abnormality indicator belongs; determining abnormal phenomena corresponding to the remaining abnormality indicators and propagation directions between the abnormal phenomena according to respective category information to which the remaining abnormality indicators belong and propagation directions between the remaining abnormality indicators; and generating the directed alert graph used for displaying the causal relationships between the causes of abnormality and the abnormal phenomena based on the cause of abnormality corresponding to the root abnormality indicator, the abnormal phenomena corresponding to the remaining abnormality indicators, and the propagation directions between the abnormal phenomena. ### Claim 11 (depends on 10) The one or more computer readable media according to claim 10, wherein: the directed alert graph comprises a first visualization object corresponding to the cause of abnormality, and second visualization objects corresponding to the remaining causes in preset candidate causes other than the cause of abnormality, the first visualization object being distinguished from the second visualization objects; and/or the directed alert graph further comprises a third visualization object corresponding to an abnormal phenomenon of the abnormal phenomena and fourth visualization objects corresponding to remaining phenomena in preset candidate phenomena other than the abnormal phenomenon, the third visualization object being distinguished from the fourth visualization objects. ### Claim 12 (depends on 11) The one or more computer readable media according to claim 11, the acts further comprising: receiving a triggering operation for the first visualization object or the third visualization object in the directed alert graph displayed; and displaying information of an abnormality indicator corresponding to a cause of abnormality indicated by the triggered first visualization object, or information of an abnormality indicator corresponding to an abnormal phenomenon indicated by the triggered third visualization object according to the triggering operation. ### Claim 13 (depends on 12) The one or more computer readable media according to claim 12, wherein the information of the abnormality indicator comprises at least one of: an identification of the abnormality indicator and an identification of fluctuation used for representing a direction of abnormal fluctuation of the abnormality indicator. ### Claim 14 (depends on 9) The one or more computer readable media according to claim 9, wherein: the abnormal instance workload comprises at least one of: a CPU intensive workload, an IO intensive workload, and a faulty structured query statement; the host problem comprises at least one of: a host CPU bottleneck, a host IO bottleneck, a host memory bottleneck, a host network bottleneck, a host storage bottleneck, and a host hardware problem. ### Claim 15 (depends on 9) The one or more computer readable media according to claim 9, wherein the abnormal phenomena comprise at least one of: a sudden increase in instance CPU, a sudden increase in instance IO, an instance memory overflow, a host CPU resource preemption, a host IO resource preemption, a host memory resource preemption, a host network resource preemption, an abnormal change in host space, a sudden increase of number of sessions, a sudden increase in transmission control protocol (TCP) response time, and a decrease in service traffic. ### Claim 16 A database system comprising: a processing component comprising one or more processors, the processing component being configured to obtain data of a problem analysis result generated according to a plurality of abnormality indicators of the database system, wherein the problem analysis result includes the associated abnormality indicators that are related in the plurality of abnormality indicators and abnormality propagation relationships between the associated abnormality indicators; and an interactive display interface configured to display a directed alert graph, the alert graph being generated based on the associated abnormality indicators and the abnormality propagation relationships between the associated abnormality indicators, wherein the directed alert graph is displayed in the interactive display interface through a multi-layer display interface, the multi-layer display interface includes a plurality of display layers, the display layers are used to display a cause of abnormality or abnormal phenomenon of a corresponding layer in the directed alert graph, and the corresponding layer of the cause of abnormality or the abnormal phenomenon is determined according to the abnormality propagation relationships.