1. 项目背景与需求解析在智慧园区监控系统中实时告警通知是保障园区安全运营的关键环节。我们团队基于FFmpeg的视频分析能力开发了一套智能监控告警系统但实际部署时遇到了一个典型问题不同企业使用的办公协作平台存在差异——有的使用企业微信有的偏好钉钉。更麻烦的是部分客户要求在工作时间外开启静默模式避免非紧急告警打扰员工休息。这个脚本的诞生源于三个实际痛点多平台切换成本高每次更换告警接收平台都需要手动修改配置并重启服务静默周期管理混乱非工作时间频繁收到低优先级告警引发大量投诉恢复通知缺失静默期结束后缺乏汇总报告运维人员对期间发生的告警一无所知2. 技术方案设计2.1 整体架构设计脚本采用模块化设计主要包含四个功能单元平台切换模块通过配置文件热加载实现企业微信/钉钉的无缝切换时间策略模块基于crontab规则实现静默周期管理告警分级模块结合FFmpeg分析结果区分紧急/非紧急告警通知缓冲模块静默期内缓存非紧急告警结束后生成汇总报告#!/bin/bash # 核心架构伪代码示意 function switch_platform() { # 平台切换逻辑 } function check_silent_period() { # 静默时间检测 } function alert_classification() { # 告警分级处理 } function buffer_manager() { # 告警缓冲与汇总 }2.2 关键技术创新点零停机切换通过信号量控制实现配置热更新无需重启监控服务动态时间窗支持工作日/节假日不同的静默策略配置智能缓冲采用环形缓冲区存储静默期告警内存占用恒定差异通知紧急告警突破静默限制非紧急告警延迟发送3. 详细实现步骤3.1 环境准备基础依赖清单FFmpeg 4.3需带libx264编码支持jq 1.6JSON处理工具curl 7.68HTTP请求工具cron定时任务服务安装示例Ubuntusudo apt update sudo apt install -y ffmpeg jq curl cron3.2 配置文件设计创建/etc/alert_switch/config.json{ current_platform: dingtalk, platforms: { wecom: { webhook: https://qyapi.weixin.qq.com/cgi-bin/webhook/send?keyxxx, msg_type: markdown }, dingtalk: { webhook: https://oapi.dingtalk.com/robot/send?access_tokenxxx, msg_type: text } }, silent_policy: { workday: [22:00-08:00], weekend: [00:00-24:00], holidays: [00:00-24:00] } }3.3 核心脚本实现完整脚本alert_switch.sh关键部分#!/bin/bash CONFIG_FILE/etc/alert_switch/config.json # 读取当前配置 get_config() { jq -r $1 $CONFIG_FILE } # 平台切换函数 switch_platform() { local platform$1 sed -i s/\current_platform\: \.*\/\current_platform\: \$platform\/ $CONFIG_FILE logger 告警平台已切换至 $platform } # 静默期检测 is_silent_period() { local now$(date %H:%M) local day_type$(date %u) # 1-7 local is_holiday0 # 需对接节假日API if [[ $is_holiday -eq 1 ]]; then silent_ranges$(get_config .silent_policy.holidays) elif [[ $day_type -ge 6 ]]; then silent_ranges$(get_config .silent_policy.weekend) else silent_ranges$(get_config .silent_policy.workday) fi # 时间范围检查逻辑 ... } # 告警发送主逻辑 send_alert() { local alert_level$1 local message$2 if [[ $alert_level critical ]] || ! is_silent_period; then send_immediate $message else buffer_alert $message fi }3.4 定时任务配置设置每日8:00的恢复通知# 添加crontab任务 (crontab -l 2/dev/null; echo 0 8 * * * /usr/local/bin/alert_switch.sh resume_notify) | crontab -4. 高级功能实现4.1 智能缓冲池设计采用SQLite实现持久化缓冲function init_buffer_db() { sqlite3 /var/lib/alert_buffer.db CREATE TABLE IF NOT EXISTS alerts ( id INTEGER PRIMARY KEY, timestamp DATETIME DEFAULT CURRENT_TIMESTAMP, message TEXT, level TEXT ); } function buffer_alert() { local msg$1 local level$2 sqlite3 /var/lib/alert_buffer.db INSERT INTO alerts (message, level) VALUES ($msg, $level); }4.2 恢复通知生成静默期结束后发送汇总报告function generate_summary() { local start_time$1 local end_time$2 local summary$(sqlite3 /var/lib/alert_buffer.db EOF .mode json SELECT strftime(%Y-%m-%d %H:%M, timestamp) as time, level, message FROM alerts WHERE timestamp BETWEEN $start_time AND $end_time ORDER BY timestamp EOF ) local count$(echo $summary | jq length) send_immediate 静默期告警汇总$count条:\n$summary # 清空已处理告警 sqlite3 /var/lib/alert_buffer.db DELETE FROM alerts WHERE timestamp $end_time; }5. 实际应用案例5.1 与FFmpeg监控系统集成典型视频分析告警场景#!/bin/bash # FFmpeg移动侦测示例 ffmpeg -i rtsp://camera_feed -vf \ movdetthreshold1000:show0 \ -f null - 21 | grep movdet | while read line; do # 触发告警 /usr/local/bin/alert_switch.sh send_alert \ warning \ 移动侦测告警 $(date %F %T) done5.2 企业微信特殊配置针对企业微信的Markdown消息优化function format_wecom_msg() { local content$1 cat EOF { msgtype: markdown, markdown: { content: $(echo $content | sed s//\\/g) } } EOF }6. 运维管理技巧6.1 性能优化建议连接池管理重用HTTP连接提升性能curl --keepalive-time 30 \ --connect-timeout 5 \ -X POST \ -H Content-Type: application/json \ -d $message \ $webhook_url日志轮转配置防止日志文件过大# /etc/logrotate.d/alert_switch /var/log/alert_switch.log { daily rotate 7 compress missingok notifempty }6.2 常见问题排查消息发送失败检查网络连通性curl -v https://qyapi.weixin.qq.com验证webhook密钥是否过期查看平台频控限制企业微信默认30条/分钟静默期不生效确认系统时区设置timedatectl status检查节假日标记API是否可达验证crontab服务运行状态缓冲池数据异常执行完整性检查sqlite3 /var/lib/alert_buffer.db PRAGMA integrity_check;检查磁盘空间df -h /var/lib7. 安全增强措施7.1 敏感信息保护配置文件加密# 使用openssl加密配置 openssl enc -aes-256-cbc -salt -in config.json -out config.enc # 运行时解密 openssl enc -d -aes-256-cbc -in config.enc | jq .最小权限原则sudo chown root:alertgroup /etc/alert_switch sudo chmod 750 /etc/alert_switch sudo setfacl -Rm u:monitoruser:r-x /etc/alert_switch7.2 审计日志配置增强型日志记录function log_alert_action() { local action$1 local target$2 logger -t alert_switch -p local3.notice \ [AUDIT] user$USER action$action target$target # 同时写入syslog和独立审计日志 }8. 扩展开发接口8.1 REST API支持添加HTTP控制接口#!/usr/bin/env python3 from flask import Flask, request import subprocess app Flask(__name__) app.route(/switch/platform, methods[POST]) def switch_platform(platform): result subprocess.run( [/usr/local/bin/alert_switch.sh, switch, platform], capture_outputTrue, textTrue ) return {status: result.returncode 0} if __name__ __main__: app.run(host0.0.0.0, port8080)8.2 多租户支持扩展配置文件结构{ tenants: { tenant1: { current_platform: dingtalk, webhooks: { ... } }, tenant2: { current_platform: wecom, webhooks: { ... } } } }9. 部署方案优化9.1 Docker化部署Dockerfile示例FROM ubuntu:22.04 RUN apt update apt install -y \ ffmpeg jq curl cron sqlite3 python3-flask COPY alert_switch.sh /usr/local/bin/ COPY config.json /etc/alert_switch/ CMD [cron, -f]9.2 Kubernetes配置Deployment示例片段apiVersion: apps/v1 kind: Deployment metadata: name: alert-switch spec: template: spec: volumes: - name: config secret: secretName: alert-config - name: buffer persistentVolumeClaim: claimName: alert-buffer-pvc10. 监控与维护10.1 健康检查配置定时自检脚本#!/bin/bash # 检查项清单 check_items( config_file_exists /etc/alert_switch/config.json db_file_not_corrupt /var/lib/alert_buffer.db webhook_reachable wecom cron_service_active ) for check in ${check_items[]}; do if ! $check; then send_alert critical 健康检查失败: $check fi done10.2 版本升级策略采用蓝绿部署模式# 旧版本停止 docker stop alert_switch_v1 # 新版本启动 docker run -d --name alert_switch_v2 \ -v /etc/alert_switch:/etc/alert_switch \ alert_switch:2.0 # 流量切换 docker network connect monitor_net alert_switch_v2 docker network disconnect monitor_net alert_switch_v1 1. 项目背景与需求解析在智慧园区监控系统中实时告警通知是保障园区安全运营的关键环节。我们团队基于FFmpeg的视频分析能力开发了一套智能监控告警系统但实际部署时遇到了一个典型问题不同企业使用的办公协作平台存在差异——有的使用企业微信有的偏好钉钉。更麻烦的是部分客户要求在工作时间外开启静默模式避免非紧急告警打扰员工休息。这个脚本的诞生源于三个实际痛点多平台切换成本高每次更换告警接收平台都需要手动修改配置并重启服务静默周期管理混乱非工作时间频繁收到低优先级告警引发大量投诉恢复通知缺失静默期结束后缺乏汇总报告运维人员对期间发生的告警一无所知2. 技术方案设计2.1 整体架构设计脚本采用模块化设计主要包含四个功能单元平台切换模块通过配置文件热加载实现企业微信/钉钉的无缝切换时间策略模块基于crontab规则实现静默周期管理告警分级模块结合FFmpeg分析结果区分紧急/非紧急告警通知缓冲模块静默期内缓存非紧急告警结束后生成汇总报告#!/bin/bash # 核心架构伪代码示意 function switch_platform() { # 平台切换逻辑 } function check_silent_period() { # 静默时间检测 } function alert_classification() { # 告警分级处理 } function buffer_manager() { # 告警缓冲与汇总 }2.2 关键技术创新点零停机切换通过信号量控制实现配置热更新无需重启监控服务动态时间窗支持工作日/节假日不同的静默策略配置智能缓冲采用环形缓冲区存储静默期告警内存占用恒定差异通知紧急告警突破静默限制非紧急告警延迟发送3. 详细实现步骤3.1 环境准备基础依赖清单FFmpeg 4.3需带libx264编码支持jq 1.6JSON处理工具curl 7.68HTTP请求工具cron定时任务服务安装示例Ubuntusudo apt update sudo apt install -y ffmpeg jq curl cron3.2 配置文件设计创建/etc/alert_switch/config.json{ current_platform: dingtalk, platforms: { wecom: { webhook: https://qyapi.weixin.qq.com/cgi-bin/webhook/send?keyxxx, msg_type: markdown }, dingtalk: { webhook: https://oapi.dingtalk.com/robot/send?access_tokenxxx, msg_type: text } }, silent_policy: { workday: [22:00-08:00], weekend: [00:00-24:00], holidays: [00:00-24:00] } }3.3 核心脚本实现完整脚本alert_switch.sh关键部分#!/bin/bash CONFIG_FILE/etc/alert_switch/config.json # 读取当前配置 get_config() { jq -r $1 $CONFIG_FILE } # 平台切换函数 switch_platform() { local platform$1 sed -i s/\current_platform\: \.*\/\current_platform\: \$platform\/ $CONFIG_FILE logger 告警平台已切换至 $platform } # 静默期检测 is_silent_period() { local now$(date %H:%M) local day_type$(date %u) # 1-7 local is_holiday0 # 需对接节假日API if [[ $is_holiday -eq 1 ]]; then silent_ranges$(get_config .silent_policy.holidays) elif [[ $day_type -ge 6 ]]; then silent_ranges$(get_config .silent_policy.weekend) else silent_ranges$(get_config .silent_policy.workday) fi # 时间范围检查逻辑 ... } # 告警发送主逻辑 send_alert() { local alert_level$1 local message$2 if [[ $alert_level critical ]] || ! is_silent_period; then send_immediate $message else buffer_alert $message fi }3.4 定时任务配置设置每日8:00的恢复通知# 添加crontab任务 (crontab -l 2/dev/null; echo 0 8 * * * /usr/local/bin/alert_switch.sh resume_notify) | crontab -4. 高级功能实现4.1 智能缓冲池设计采用SQLite实现持久化缓冲function init_buffer_db() { sqlite3 /var/lib/alert_buffer.db CREATE TABLE IF NOT EXISTS alerts ( id INTEGER PRIMARY KEY, timestamp DATETIME DEFAULT CURRENT_TIMESTAMP, message TEXT, level TEXT ); } function buffer_alert() { local msg$1 local level$2 sqlite3 /var/lib/alert_buffer.db INSERT INTO alerts (message, level) VALUES ($msg, $level); }4.2 恢复通知生成静默期结束后发送汇总报告function generate_summary() { local start_time$1 local end_time$2 local summary$(sqlite3 /var/lib/alert_buffer.db EOF .mode json SELECT strftime(%Y-%m-%d %H:%M, timestamp) as time, level, message FROM alerts WHERE timestamp BETWEEN $start_time AND $end_time ORDER BY timestamp EOF ) local count$(echo $summary | jq length) send_immediate 静默期告警汇总$count条:\n$summary # 清空已处理告警 sqlite3 /var/lib/alert_buffer.db DELETE FROM alerts WHERE timestamp $end_time; }5. 实际应用案例5.1 与FFmpeg监控系统集成典型视频分析告警场景#!/bin/bash # FFmpeg移动侦测示例 ffmpeg -i rtsp://camera_feed -vf \ movdetthreshold1000:show0 \ -f null - 21 | grep movdet | while read line; do # 触发告警 /usr/local/bin/alert_switch.sh send_alert \ warning \ 移动侦测告警 $(date %F %T) done5.2 企业微信特殊配置针对企业微信的Markdown消息优化function format_wecom_msg() { local content$1 cat EOF { msgtype: markdown, markdown: { content: $(echo $content | sed s//\\/g) } } EOF }6. 运维管理技巧6.1 性能优化建议连接池管理重用HTTP连接提升性能curl --keepalive-time 30 \ --connect-timeout 5 \ -X POST \ -H Content-Type: application/json \ -d $message \ $webhook_url日志轮转配置防止日志文件过大# /etc/logrotate.d/alert_switch /var/log/alert_switch.log { daily rotate 7 compress missingok notifempty }6.2 常见问题排查消息发送失败检查网络连通性curl -v https://qyapi.weixin.qq.com验证webhook密钥是否过期查看平台频控限制企业微信默认30条/分钟静默期不生效确认系统时区设置timedatectl status检查节假日标记API是否可达验证crontab服务运行状态缓冲池数据异常执行完整性检查sqlite3 /var/lib/alert_buffer.db PRAGMA integrity_check;检查磁盘空间df -h /var/lib7. 安全增强措施7.1 敏感信息保护配置文件加密# 使用openssl加密配置 openssl enc -aes-256-cbc -salt -in config.json -out config.enc # 运行时解密 openssl enc -d -aes-256-cbc -in config.enc | jq .最小权限原则sudo chown root:alertgroup /etc/alert_switch sudo chmod 750 /etc/alert_switch sudo setfacl -Rm u:monitoruser:r-x /etc/alert_switch7.2 审计日志配置增强型日志记录function log_alert_action() { local action$1 local target$2 logger -t alert_switch -p local3.notice \ [AUDIT] user$USER action$action target$target # 同时写入syslog和独立审计日志 }8. 扩展开发接口8.1 REST API支持添加HTTP控制接口#!/usr/bin/env python3 from flask import Flask, request import subprocess app Flask(__name__) app.route(/switch/platform, methods[POST]) def switch_platform(platform): result subprocess.run( [/usr/local/bin/alert_switch.sh, switch, platform], capture_outputTrue, textTrue ) return {status: result.returncode 0} if __name__ __main__: app.run(host0.0.0.0, port8080)8.2 多租户支持扩展配置文件结构{ tenants: { tenant1: { current_platform: dingtalk, webhooks: { ... } }, tenant2: { current_platform: wecom, webhooks: { ... } } } }9. 部署方案优化9.1 Docker化部署Dockerfile示例FROM ubuntu:22.04 RUN apt update apt install -y \ ffmpeg jq curl cron sqlite3 python3-flask COPY alert_switch.sh /usr/local/bin/ COPY config.json /etc/alert_switch/ CMD [cron, -f]9.2 Kubernetes配置Deployment示例片段apiVersion: apps/v1 kind: Deployment metadata: name: alert-switch spec: template: spec: volumes: - name: config secret: secretName: alert-config - name: buffer persistentVolumeClaim: claimName: alert-buffer-pvc10. 监控与维护10.1 健康检查配置定时自检脚本#!/bin/bash # 检查项清单 check_items( config_file_exists /etc/alert_switch/config.json db_file_not_corrupt /var/lib/alert_buffer.db webhook_reachable wecom cron_service_active ) for check in ${check_items[]}; do if ! $check; then send_alert critical 健康检查失败: $check fi done10.2 版本升级策略采用蓝绿部署模式# 旧版本停止 docker stop alert_switch_v1 # 新版本启动 docker run -d --name alert_switch_v2 \ -v /etc/alert_switch:/etc/alert_switch \ alert_switch:2.0 # 流量切换 docker network connect monitor_net alert_switch_v2 docker network disconnect monitor_net alert_switch_v1