1. A data processing method, comprising:

carrying out anomaly detection on original data acquired from a data source, and determining the original data detected as having anomaly in the original data as anomalous data;

generating an abnormal pushing message according to the abnormal data in the original data;

and sending the abnormal push message to a client of the user.

2. The data processing method according to claim 1, wherein the performing anomaly detection on the raw data acquired from the data source comprises:

acquiring a target field of the original data;

and when the value of the target field is within a preset threshold range, determining the original data to which the target subsegment belongs as the abnormal data.

3. The data processing method according to claim 1, wherein the performing anomaly detection on the raw data acquired from the data source comprises:

forming the original data into a sequence according to the time sequence;

and carrying out abnormity detection on the sequence.

4. The data processing method of claim 1, wherein prior to said detecting anomalies in raw data obtained from a data source, the method further comprises:

acquiring a logic expression which is preset by a user and is formed by combining a plurality of detection conditions, wherein the abnormal detection of the original data acquired from the data source comprises the following steps:

inputting the raw data to the logical expression;

and determining the abnormal data in the original data according to the output result of the logic expression.

5. The data processing method according to any one of claims 1 to 4, wherein the sending the exception push message to the client of the user comprises:

determining one or more users associated with the keywords according to the keywords in the abnormal push message;

and sending the abnormal push message to the client of the one or more users.

6. The data processing method according to any one of claims 1 to 4, wherein said generating an exception push message from said exception data comprises:

generating message components for the exception data, wherein the message components include one or more of a line graph component, a bar graph component, a pie graph component, a scatter plot component, a title component, a paragraph component, and a footnote component;

and combining the message components to generate the abnormal push message.

7. The data processing method according to any one of claims 1 to 4,

the data source comprises one or more of a relational database, a non-relational database, a system interface and a docking log.

8. The data processing method of claim 7, wherein prior to said obtaining raw data from said data source, said method further comprises:

receiving a trigger signal for initiating an anomaly detection operation,

wherein the trigger signal comprises one or more of a timing trigger signal, a message trigger signal, a manual trigger signal and a hypertext transfer protocol trigger.

9. A data processing apparatus, comprising:

the detection module is used for carrying out anomaly detection on original data acquired from a data source and determining the original data detected as having anomaly in the original data as anomalous data;

the push message generation module is used for generating an abnormal push message according to the abnormal data in the original data;

and the sending module is used for sending the abnormal push message to a client of a user.

10. The data processing apparatus according to claim 9, wherein the performing anomaly detection on the raw data obtained from the data source comprises:

acquiring a target field of the original data;

and when the value of the target field is within a preset threshold range, determining the original data to which the target subsegment belongs as the abnormal data.

11. The data processing apparatus according to claim 9, wherein the performing anomaly detection on the raw data obtained from the data source comprises:

forming the original data into a sequence according to the time sequence;

and carrying out abnormity detection on the sequence.

12. The data processing apparatus of claim 9, further comprising:

an obtaining module for obtaining a logic expression formed by combining a plurality of detection conditions and preset by a user, and

the detection module is used for:

inputting the raw data into the logical expression obtained by the obtaining module;

and determining the abnormal data in the original data according to the output result of the logic expression.

13. The data processing apparatus according to any of claims 9 to 12, wherein the sending module comprises:

the user determining unit is used for determining one or more users related to the keywords according to the keywords in the abnormal push message;

and the sending unit is used for sending the abnormal push message to the client sides of the one or more users according to the determination result of the user determination unit.

14. The data processing apparatus according to any of claims 9 to 12, wherein the push message generation module comprises:

the message component generating unit is used for generating message components aiming at the abnormal data, wherein the message components comprise one or more of a line graph component, a bar graph component, a pie graph component, a scatter diagram component, a title component, a paragraph component and a footnote component;

and the combining unit is used for combining the message components to generate the abnormal push message.

15. The data processing apparatus according to any one of claims 9 to 12,

the data source comprises one or more of a relational database, a non-relational database, a system interface and a docking log.

16. The data processing apparatus of claim 15, further comprising:

a signal receiving module for receiving a trigger signal for starting an abnormality detection operation,

wherein the trigger signal comprises one or more of a timing trigger signal, a message trigger signal, a manual trigger signal and a hypertext transfer protocol trigger.

17. An electronic device, comprising:

a memory for storing a program;

a processor for executing the program stored in the memory, the program when executed performing the data processing method of any one of claims 1 to 8.

18. A computer-readable storage medium, on which a computer program executable by a processor is stored, wherein the program, when executed by the processor, implements a data processing method as claimed in any one of claims 1 to 8.

Background

With the rapid development of information technology, data systems for providing services to users become increasingly large. More and more time is consumed for searching useful data from mass data by a user, and particularly for low-frequency events such as data abnormity and the like, abnormal data are often acquired in a manual monitoring mode in the prior art, so that the working efficiency is low and the accuracy is poor.

Disclosure of Invention

The embodiment of the application provides a data processing method and device, electronic equipment and a computer readable storage medium, so as to overcome the defects of low efficiency and poor accuracy of manually acquiring abnormal data in the prior art.

In order to achieve the above object, an embodiment of the present application provides a data processing method, including:

carrying out anomaly detection on original data acquired from a data source, and determining the original data detected as having anomaly in the original data as anomalous data;

generating an abnormal pushing message according to the abnormal data in the original data;

and sending the abnormal push message to a client of the user.

An embodiment of the present application further provides a data processing apparatus, including:

the detection module is used for carrying out anomaly detection on original data acquired from a data source and determining the original data detected as having anomaly in the original data as anomalous data;

the push message generation module is used for generating an abnormal push message according to the abnormal data in the original data;

and the sending module is used for sending the abnormal push message to a client of a user.

An embodiment of the present application further provides an electronic device, including:

a memory for storing a program;

and the processor is used for operating the program stored in the memory, and the program executes the data processing method when running.

The embodiment of the application also provides a computer readable storage medium, on which a computer program executable by a processor is stored, wherein the program is executed by the processor by the data processing method.

According to the data processing method and device, the electronic device and the computer readable storage medium, when abnormal data are detected, the corresponding push message is generated and is actively pushed to the user, so that the user does not need to manually monitor to determine the abnormal data, and the data processing efficiency is improved.

The foregoing description is only an overview of the technical solutions of the present application, and the present application can be implemented according to the content of the description in order to make the technical means of the present application more clearly understood, and the following detailed description of the present application is given in order to make the above and other objects, features, and advantages of the present application more clearly understandable.

Drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The drawings are only for purposes of illustrating the preferred embodiments and are not to be construed as limiting the application. Also, like reference numerals are used to refer to like parts throughout the drawings. In the drawings:

fig. 1 is a schematic view of a scene of a data processing method according to an embodiment of the present application;

FIG. 2 is a flow chart of one embodiment of a data processing method provided herein;

FIG. 3 is a flow chart of another embodiment of a data processing method provided herein;

FIG. 4 is a schematic diagram of an embodiment of a data processing apparatus provided in the present application;

fig. 5 is a schematic structural diagram of an embodiment of an electronic device provided in the present application.

Detailed Description

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

The data processing method provided by the embodiment of the application can be applied to any system with data processing capacity. Fig. 1 is a scene schematic diagram of a data processing method according to an embodiment of the present application. In the scenario shown in fig. 1, a large amount of transaction data is generated as internet-based transactions, such as online sales, proceed. Various transaction data is typically retrieved by a data source, for example, through various types of databases and stored. In this embodiment, a data source, such as a database, may perform certain preprocessing on the transaction data, such as data cleansing or noise removal, before storing the transaction data, and then store the transaction data after preprocessing.

In the prior art, data stored in a data source is usually monitored by professional data personnel so as to inform a user in time when an abnormality occurs in transaction data. However, as internet technology develops, online transactions become larger and larger, and the size of generated transaction data also increases explosively. In such cases, tremendous pressure is also placed on manually monitoring the transaction data. In particular, anomalous data is typically a low frequency event, i.e., an event that is not frequent. Therefore, under the condition that the data volume of the transaction data is not large, the effect of manual monitoring can still be satisfied for the user. However, in the case of such explosive increase of transaction data, it becomes difficult to manually monitor a large amount of transaction data to find abnormal data, and even false reports or false reports occur. From the perspective of the user, it is desirable to be able to obtain timely and accurate reports of abnormal situations of the transaction data related to the user in time. Therefore, a scheme capable of accurately and timely finding abnormal data and transmitting the abnormal data to a user is required.

As shown in fig. 1, in the embodiment of the present application, the data processing system may obtain transaction data from a data source storing the transaction data, specifically, the data of the data source may be from various transactions generating the transaction data, for example, the transactions may be generated by an application running on a server shown in fig. 1, may be generated due to data usage in a data center, or may be generated due to a virtual machine or various online services running on a cloud platform. Transaction data herein may be referred to as raw data, which is data generated by a user's transaction when executed, such as online sales data. The data processing system may perform anomaly detection on the transaction data after the transaction data is acquired. In the embodiment of the present application, the exception detection may be processing in which the data processing system checks data according to rules built in the system to determine whether an exception exists. For example, the data processing system may determine sales transaction data for which sales are above a predetermined threshold as anomalous data and thus need to be reported to the customer. After such anomalous data is determined, an anomalous push message can be generated from the anomalous data. In the embodiment of the present application, an exception push message meeting reporting requirements of users (e.g., user 1 to user n shown in fig. 1) may be generated based on detected exception data in a predetermined form. For example, when abnormal sales data with an excessively high sales amount or sales quantity is detected, users targeted by the abnormal sales data may be grouped based on the abnormal sales data so as to send the data to corresponding users to remind the users of the abnormal sales data. For example, if the users 2 to 4 shown in fig. 1 belong to the same user group 1, the same exception push message may be sent to each user in the user group 1. On this basis, various message components such as a line graph, a bar graph and the like can also be generated based on the abnormal sales data, and the data and the generated message components are combined to generate the final abnormal push message. In this case, such a message can have a richer format than simply sending the exception data to the user, so that the user can more clearly understand the exception transaction.

Finally, the data processing system of the embodiment of the application may send the generated exception push message to a user, for example, to a client of the user. In particular, in the embodiment of the present application, as described above, the push messages may be grouped by users when being generated, and therefore, the push messages may be transmitted by different users when being transmitted.

Therefore, according to the data processing scheme provided by the embodiment of the application, when abnormal data is detected, the corresponding push message is generated and actively pushed to the user, so that the user does not need to manually monitor to determine the abnormal data, and the data processing efficiency is improved.

The above embodiments are illustrations of technical principles and exemplary application frameworks of the embodiments of the present application, and specific technical solutions of the embodiments of the present application are further described in detail below through a plurality of embodiments.

Fig. 2 is a flowchart of an embodiment of a data processing method provided in the present application. The execution subject of the method can be various terminal or server devices with data processing capability, and can also be devices or chips integrated on the devices. As shown in fig. 2, the data processing method includes the following steps.

S201, carrying out anomaly detection on the original data acquired from the data source, and determining the original data detected as having anomaly in the original data as anomalous data.

In the embodiment of the application, when a user's online transaction generates a large amount of transaction data, various databases as data sources can store the transaction data. In embodiments of the present application, the data source may be a variety of databases storing data, including one or more of a relational database, a non-relational database, a system interface, and a docking log. Therefore, a data source such as a database may perform certain preprocessing on the transaction data, such as data cleansing or denoising, before storing the transaction data, and then store the transaction data after preprocessing.

In the embodiment of the present application, the above-mentioned transaction data may be referred to as raw data, and the anomaly detection performed on these raw data may be processing of checking the data according to a preset rule to determine whether an anomaly exists. For example, sales transaction data for which sales are above a predetermined threshold may be determined to be anomalous data, i.e., data that needs to be reported to the customer.

S202, generating an abnormal pushing message according to abnormal data in the original data.

After the anomalous data in the raw data is determined in step S201, an anomaly push message may be generated from the anomalous data determined in step S201. In addition to paying attention to the overall situation of the transaction data, the abnormal data in the transaction data is very important for users, and the timeliness of the knowledge of the abnormal data is also very important. In other words, when the online transaction of the user generates abnormal data, for example, an excessively high sales volume, which is likely to be caused by a price setting error of a certain commodity, if such abnormal data cannot be immediately pushed to the client, the client may have been lost greatly by waiting for the client to find it by browsing the transaction data of the day in its entirety. Therefore, in the embodiment of the present application, it is possible to perform anomaly detection on the transaction data stored in the data source in real time by using step S201, and generate an anomaly push message for reporting the anomaly to the user according to the detected anomaly data in step S202.

In the embodiment of the present application, an exception push message meeting the user report requirement may be generated based on the detected exception data in a predetermined form. For example, when abnormal sales data with an excessively high sales amount or sales quantity is detected, users targeted by the abnormal sales data may be grouped based on the abnormal sales data so as to send the data to corresponding users to remind the users of the abnormal sales data.

In addition, various message components, such as line graphs, bar graphs, etc., may also be generated based on the exception data, and the data and generated message components are combined to generate a final exception push message. In embodiments of the present application, such message components may include one or more of a line graph component, a bar graph component, a pie graph component, a scatter graph component, a title component, a paragraph component, and a footnote component.

S203, the abnormal push message is sent to the client of the user.

Therefore, according to the data processing scheme provided by the embodiment of the application, when abnormal data is detected, the corresponding push message is generated and actively pushed to the user, so that the user does not need to manually monitor to determine the abnormal data, and the data processing efficiency is improved.

Fig. 3 is a flowchart of another embodiment of a data processing method provided in the present application. As shown in fig. 3, the data processing method includes the following steps.

S3012, a logic expression which is preset by a user and is formed by combining a plurality of detection conditions is obtained.

In the embodiment of the application, the difference of detection requirements of different users on the transaction data of the users is considered, so that the detection conditions preset by the users can be obtained before the original data of the data source is subjected to abnormal detection, and particularly, a logic expression combined by a plurality of detection conditions can be obtained. For example, for the case of abnormal sales, a combination condition that the sales price is lower than the historical sales price and the sales volume exceeds a preset sales volume threshold may be obtained, so that abnormal data more meeting the actual needs of the user can be detected for the user in the subsequent detection process.

S3021, inputting the original data to the logical expression.

And S3022, determining abnormal data in the original data according to the output result of the logic expression.

In the case where the logical expression of the detection condition set in advance by the user is acquired in step S3012, in the embodiment of the present application, the original data acquired from the data source may be input into the acquired logical expression to perform anomaly detection. When the input raw data meets the detection condition represented by the logical expression, it can be determined that the raw data belongs to abnormal data.

Further, since the abnormality detection needs to consume a calculation resource, a trigger condition is set for the start of the abnormality detection. For example, in the scheme of the present application, the method may further include:

s3011, receives a trigger signal for starting an abnormality detection operation.

In the embodiment of the application, by receiving the trigger signal, the abnormality detection can be selectively performed according to actual needs. For example, the trigger signal may comprise one or more of a timing trigger, a message trigger, a manual trigger, a hypertext transfer protocol trigger. In the embodiment of the present application, the abnormality detection may be performed periodically by a timing start signal. This is often suitable for the case where the transaction data volume is very large, for example, the anomaly detection is triggered every other hour, so that the accumulation of transaction data can be avoided, and the normal online transaction is not affected. Furthermore, in embodiments of the present application, the anomaly detection may be triggered based on a specific message, which may take advantage of the experience of monitoring personnel, setting some known messages reflecting anomalies as trigger messages, so that the anomaly detection is immediately initiated when such a message occurs.

In addition to the above detection method, the data processing method according to the embodiment of the present application may further include the following steps to perform the detection process.

S3031, a target field of the original data is obtained.

S3032, when the value of the target field is within the preset threshold range, determining that the original data to which the target sub-segment belongs is abnormal data.

In the embodiment of the application, whether the data is abnormal data or not can be determined by detecting the value of a specific field in the original data. For example, when it is determined whether the sales transaction data is abnormal, the sales field or the buyer field in the sales transaction data may be detected, and the transaction data is determined to be abnormal data by determining whether the value of the specific field meets a preset detection condition, for example, whether the sales field value, that is, whether the sales exceeds one hundred thousand or million yuan. Therefore, the value of the specific field can be determined more specifically.

In addition to the above detection method, the data processing method according to the embodiment of the present application may further include the following steps to perform the detection process.

S3041, the original data is arranged into a sequence in time order.

S3042, abnormality detection is performed on the log sequence.

As online transactions evolve, many transactions become very complex, and thus anomaly detection of the transaction data they generate also requires more complex and comprehensive consideration. For example, in the transaction of online sales, abnormal sales may not be reflected from a single sales data, but a series of sales data in a period of time needs to be considered, and then whether an abnormality exists is determined by judging the trend of the series of sales data. Therefore, in the embodiment of the present application, when the original data is detected, a certain amount of original data may be arranged in a sequence in time, and the formed sequence is further detected, for example, a change trend thereof is determined, so as to determine whether there is an abnormality. In this way, more comprehensive detection of the raw data is possible.

After the determined abnormal data, the data processing method of the embodiment of the present application may next include the following steps to generate a push message regarding the abnormal data.

S3051, generating a message component aiming at the abnormal data.

S3052, combining the message components to generate an abnormal push message.

In addition to paying attention to the overall situation of the transaction data, the abnormal data in the transaction data is very important for users, and the timeliness of the knowledge of the abnormal data is also very important. In other words, when the online transaction of the user generates abnormal data, for example, an excessively high sales volume, which is likely to be caused by a price setting error of a certain commodity, if such abnormal data cannot be immediately pushed to the client, the client may have been lost greatly by waiting for the client to find it by browsing the transaction data of the day in its entirety. Therefore, in the embodiment of the present application, it is possible to perform abnormality detection on the transaction data stored in the data source in real time by using steps S3021 to S3022, S3031 to S3032, or S3041 to S3042, and generate an abnormality push message for reporting the abnormality to the user according to the detected abnormality data in the steps S3051 to S3052.

In the embodiment of the present application, an exception push message meeting the user report requirement may be generated based on the detected exception data in a predetermined form. For example, when abnormal sales data with an excessively high sales amount or sales quantity is detected, users targeted by the abnormal sales data may be grouped based on the abnormal sales data so as to send the data to corresponding users to remind the users of the abnormal sales data.

Accordingly, various message components, such as line graphs, bar graphs, etc., may be generated based on the abnormal data detected in the detecting step through step S3051, and the data and the generated message components are combined to generate a final abnormal push message in step S3052. In embodiments of the present application, such message components may include one or more of a line graph component, a bar graph component, a pie graph component, a scatter graph component, a title component, a paragraph component, and a footnote component. Therefore, different forms of message components are generated according to the abnormal data, and the complete push message is generated by means of rendering in a splicing component mode, so that a message body form with rich formats can be obtained. Particularly, in the embodiment of the application, an interactive interface can also be provided, and the user configures various forms of message components meeting the requirements of the user by dragging and the like.

In addition, in the embodiment of the application, different forms of message components can be combined according to the type of the client of the user to generate different forms of exception push messages. For example, the adaptation may be performed according to a screen of the user client, and when the user client is a mobile phone, the pushed message may not include the histogram component; when the user client is the smart watch, only simple text messages can be pushed.

S3061, determining one or more users related to the keywords according to the keywords in the abnormal push message.

S3062, send the exception push message to the clients of the one or more users.

In the embodiment of the present application, after the push message is generated in steps S3051-S3052, the push message may be further grouped according to the client to which the original data belongs, and sent to the corresponding client according to the grouping.

In the embodiment of the application, when the abnormal push message is sent to the client, the client can be controlled to perform related prompt on the user. For example, in the case where the client is configured with a display screen, various prompt information may be controlled to be displayed on the display screen of the client, or the luminance of the display screen of the client may be controlled to be high, thereby prompting the user's attention. In the case where the client is provided with a speaker, the speaker of the client may be controlled to emit various sounds, such as a beep or a voice announcement, to alert the user of the abnormal information. In addition, in the case that the client is configured with the vibration component, the vibration component of the client can be controlled to start vibration when the abnormal message push is received, so that the user can be reminded by making the user feel the vibration.

Therefore, according to the data processing scheme provided by the embodiment of the application, when abnormal data is detected, the corresponding push message is generated and actively pushed to the user, so that the user does not need to manually monitor to determine the abnormal data, and the data processing efficiency is improved.

Fig. 4 is a schematic structural diagram of an embodiment of a data processing apparatus provided in the present application. May be used to perform the method steps as shown in fig. 2. As shown in fig. 4, the data processing apparatus may include: a detection module 41, a push message generation module 42 and a sending module 43.

The detection module 41 may be configured to perform anomaly detection on raw data acquired from a data source, and determine, as anomalous data, raw data detected as having an anomaly in the raw data.

In the embodiment of the application, when a user's online transaction generates a large amount of transaction data, various databases as data sources can store the transaction data. In embodiments of the present application, the data source may be a variety of databases storing data, including one or more of a relational database, a non-relational database, a system interface, and a docking log. Therefore, a data source such as a database may perform certain preprocessing on the transaction data, such as data cleansing or denoising, before storing the transaction data, and then store the transaction data after preprocessing.

In the embodiment of the present application, the above-mentioned transaction data may be referred to as raw data, and the anomaly detection performed on these raw data may be processing of checking the data according to a preset rule to determine whether an anomaly exists. For example, sales transaction data for which sales are above a predetermined threshold may be determined to be anomalous data, i.e., data that needs to be reported to the customer.

For example, in this case, the data processing apparatus according to the embodiment of the present application may further include an obtaining module 44, and the obtaining module 44 may be configured to obtain a logical expression, which is preset by a user and is composed of a plurality of detection conditions.

In the embodiment of the application, the difference of detection requirements of different users on the transaction data of the users is considered, so that the detection conditions preset by the users can be obtained before the original data of the data source is subjected to abnormal detection, and particularly, a logic expression combined by a plurality of detection conditions can be obtained. For example, for the case of abnormal sales, a combination condition that the sales price is lower than the historical sales price and the sales volume exceeds a preset sales volume threshold may be obtained, so that abnormal data more meeting the actual needs of the user can be detected for the user in the subsequent detection process.

Therefore, the detection module 41 may be further configured to input the raw data into the logic expression, and determine the abnormal data in the raw data according to the output result of the logic expression.

In the case where the obtaining module 44 obtains the logical expression of the detection condition set in advance by the user, in the embodiment of the present application, the detecting module 41 may be configured to input the raw data obtained from the data source into the logical expression obtained by the obtaining module 44 to perform the anomaly detection. When the input raw data meets the detection condition represented by the logical expression, the detection module 41 may determine that the raw data belongs to abnormal data.

In addition, the data processing apparatus of the present application may further include a signal receiving module 45, where the signal receiving module 45 may be configured to receive a trigger signal for starting an abnormality detection operation,

in the embodiment of the application, by receiving the trigger signal, the abnormality detection can be selectively performed according to actual needs. For example, the trigger signal may comprise one or more of a timing trigger, a message trigger, a manual trigger, a hypertext transfer protocol trigger. In the embodiment of the present application, the abnormality detection may be performed periodically by a timing start signal. This is often suitable for the case where the transaction data volume is very large, for example, the anomaly detection is triggered every other hour, so that the accumulation of transaction data can be avoided, and the normal online transaction is not affected. Furthermore, in embodiments of the present application, the anomaly detection may be triggered based on a specific message, which may take advantage of the experience of monitoring personnel, setting some known messages reflecting anomalies as trigger messages, so that the anomaly detection is immediately initiated when such a message occurs.

Furthermore, in the embodiment of the present application, the detection module 41 may be further configured to perform the following processes: and acquiring a target field of the original data, and determining the original data to which the target sub-segment belongs as the abnormal data when the value of the target field is within a preset threshold range.

In the embodiment of the application, whether the data is abnormal data or not can be determined by detecting the value of a specific field in the original data. For example, when it is determined whether the sales transaction data is abnormal, the sales field or the buyer field in the sales transaction data may be detected, and the transaction data is determined to be abnormal data by determining whether the value of the specific field meets a preset detection condition, for example, whether the sales field value, that is, whether the sales exceeds one hundred thousand or million yuan. Therefore, the value of the specific field can be determined more specifically.

In addition to the above detection manner, the detection module 41 of the embodiment of the present application may be further configured to perform the following processing: and forming a sequence of the original data according to time sequence, and carrying out anomaly detection on the sequence of the original data.

As online transactions evolve, many transactions become very complex, and thus anomaly detection of the transaction data they generate also requires more complex and comprehensive consideration. For example, in the transaction of online sales, abnormal sales may not be reflected from a single sales data, but a series of sales data in a period of time needs to be considered, and then whether an abnormality exists is determined by judging the trend of the series of sales data. Therefore, in the embodiment of the present application, when the detection module 41 detects raw data, a certain amount of raw data may be arranged in a sequence in time order, and then the formed sequence is detected, for example, a change trend or the like is determined, so as to determine whether there is an abnormality. In this way, more comprehensive detection of the raw data is possible.

The push message generating module 42 may be configured to generate an exception push message according to the exception data in the raw data.

The push message generation module 42 may generate an exception push message according to the exception data determined by the detection module 41. In addition to paying attention to the overall situation of the transaction data, the abnormal data in the transaction data is very important for users, and the timeliness of the knowledge of the abnormal data is also very important. In other words, when the online transaction of the user generates abnormal data, for example, an excessively high sales volume, which is likely to be caused by a price setting error of a certain commodity, if such abnormal data cannot be immediately pushed to the client, the client may have been lost greatly by waiting for the client to find it by browsing the transaction data of the day in its entirety. Therefore, in the embodiment of the present application, the detection module 41 can perform anomaly detection on the transaction data stored in the data source in real time, and the push message generation module 42 generates an anomaly push message for reporting the anomaly to the user according to the anomaly data detected by the detection module 41.

In the embodiment of the present application, the push message generating module 42 may further include a message component generating unit 421 and a combining unit 422.

The message component generating unit 421 may be configured to generate a message component for the exception data, and the combining unit 422 may be configured to combine the message components to generate the exception push message.

In the embodiment of the present application, the push message generation module 42 may generate an abnormal push message meeting the user report requirement based on the detected abnormal data in a predetermined form. For example, when the detection module 41 detects abnormal sales data with too high sales or sales amount, the push message generation module 42 may group users for which the abnormal sales data is intended, so as to send data to corresponding users to remind the users of attention.

Accordingly, various message components, such as a line graph, a bar graph, and the like, may be generated by the message component generating unit 421 based on the abnormal data detected in the detecting step, and a final abnormal push message may be generated by combining the data and the generated message components by the combining unit 422. In embodiments of the present application, such message components may include one or more of a line graph component, a bar graph component, a pie graph component, a scatter graph component, a title component, a paragraph component, and a footnote component. Therefore, different forms of message components are generated according to the abnormal data, and the complete push message is generated by means of rendering in a splicing component mode, so that a message body form with rich formats can be obtained. Particularly, in the embodiment of the application, an interactive interface can also be provided, and the user configures various forms of message components meeting the requirements of the user by dragging and the like.

In addition, in this embodiment of the application, the combining unit 422 may combine different forms of message components according to the type of the client of the user to generate different styles of exception push messages. For example, the adaptation may be performed according to a screen of the user client, and when the user client is a mobile phone, the pushed message may not include the histogram component; when the user client is the smart watch, only simple text messages can be pushed.

The sending module 43 may be configured to send the exception push message to the client of the user. Since online transactions often involve different transactions of many users, and the acquisition module 44 acquires the original data often according to the generation sequence of the original data when acquiring the original data, the original data of many different users may be mixed together and detected by the detection module 41. Therefore, in the embodiment of the present application, the sending module 43 may further include a user determining unit 431 and a sending unit 432.

The user determining unit 431 may be configured to determine one or more users associated with the keyword according to the keyword in the abnormal push message.

The sending unit 432 may be configured to send the exception push message to the clients of the one or more users according to the determination result of the user determining unit 431.

In this embodiment of the application, when the sending unit 432 sends the abnormal push message to the client, the client may be controlled to perform related prompt on the user. For example, in the case where the client is configured with a display screen, various prompt information may be controlled to be displayed on the display screen of the client, or the luminance of the display screen of the client may be controlled to be high, thereby prompting the user's attention. In the case where the client is provided with a speaker, the speaker of the client may be controlled to emit various sounds, such as a beep or a voice announcement, to alert the user of the abnormal information. In addition, in the case that the client is configured with the vibration component, the vibration component of the client can be controlled to start vibration when the abnormal message push is received, so that the user can be reminded by making the user feel the vibration.

Therefore, the data processing device provided by the embodiment of the application can generate the corresponding push message and actively push the push message to the user when the abnormal data is detected, so that the user does not need to manually monitor to determine the abnormal data, and the data processing efficiency is improved.

The internal functions and structure of the data processing apparatus, which can be implemented as an electronic device, are described above. Fig. 5 is a schematic structural diagram of an embodiment of an electronic device provided in the present application. As shown in fig. 5, the electronic device includes a memory 51 and a processor 52.

The memory 51 stores programs. In addition to the above-described programs, the memory 51 may also be configured to store other various data to support operations on the electronic device. Examples of such data include instructions for any application or method operating on the electronic device, contact data, phonebook data, messages, pictures, videos, and so forth.

The memory 51 may be implemented by any type or combination of volatile or non-volatile memory devices, such as Static Random Access Memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic or optical disks.

The processor 52 is not limited to a Central Processing Unit (CPU), but may be a processing chip such as a Graphic Processing Unit (GPU), a Field Programmable Gate Array (FPGA), an embedded neural Network Processor (NPU), or an Artificial Intelligence (AI) chip. A processor 52, coupled to the memory 51, for executing programs stored in the memory 51 for:

carrying out anomaly detection on original data acquired from a data source, and determining the original data detected as having anomaly in the original data as anomalous data;

generating an abnormal pushing message according to the abnormal data in the original data;

and sending the abnormal push message to a client of the user.

Further, as shown in fig. 5, the electronic device may further include: communication components 53, power components 54, audio components 55, display 56, and other components. Only some of the components are schematically shown in fig. 5, and it is not meant that the electronic device comprises only the components shown in fig. 5.

The communication component 53 is configured to facilitate wired or wireless communication between the electronic device and other devices. The electronic device may access a wireless network based on a communication standard, such as WiFi, 2G, 3G, 4G, or 5G, or a combination thereof. In an exemplary embodiment, the communication component 53 receives a broadcast signal or broadcast related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 53 further comprises a Near Field Communication (NFC) module to facilitate short-range communication. For example, the NFC module may be implemented based on Radio Frequency Identification (RFID) technology, infrared data association (IrDA) technology, Ultra Wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.

A power supply component 54 provides power to the various components of the electronic device. The power components 54 may include a power management system, one or more power sources, and other components associated with generating, managing, and distributing power for an electronic device.

The audio component 55 is configured to output and/or input audio signals. For example, the audio component 55 includes a Microphone (MIC) configured to receive external audio signals when the electronic device is in an operational mode, such as a call mode, a recording mode, and a voice recognition mode. The received audio signal may further be stored in the memory 51 or transmitted via the communication component 53. In some embodiments, audio assembly 55 also includes a speaker for outputting audio signals.

The display 56 includes a screen, which may include a Liquid Crystal Display (LCD) and a Touch Panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive an input signal from a user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundary of a touch or slide action, but also detect the duration and pressure associated with the touch or slide operation.

Those of ordinary skill in the art will understand that: all or a portion of the steps of implementing the above-described method embodiments may be performed by hardware associated with program instructions. The program may be stored in a computer-readable storage medium. When executed, the program performs steps comprising the method embodiments described above; and the aforementioned storage medium includes: various media that can store program codes, such as ROM, RAM, magnetic or optical disks.

Finally, it should be noted that: the above embodiments are only used for illustrating the technical solutions of the present application, and not for limiting the same; although the present application has been described in detail with reference to the foregoing embodiments, it should be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and the modifications or the substitutions do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present application.