CN100433647C - Warning managing method and system - Google Patents
Warning managing method and system Download PDFInfo
- Publication number
- CN100433647C CN100433647C CNB200510109282XA CN200510109282A CN100433647C CN 100433647 C CN100433647 C CN 100433647C CN B200510109282X A CNB200510109282X A CN B200510109282XA CN 200510109282 A CN200510109282 A CN 200510109282A CN 100433647 C CN100433647 C CN 100433647C
- Authority
- CN
- China
- Prior art keywords
- alarm
- father
- child
- warning information
- correlation
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
- 238000000034 method Methods 0.000 title description 12
- 238000007726 management method Methods 0.000 claims abstract description 21
- 238000011084 recovery Methods 0.000 claims description 11
- 230000010365 information processing Effects 0.000 claims description 8
- 230000000694 effects Effects 0.000 abstract description 2
- 230000002349 favourable effect Effects 0.000 abstract 1
- 238000004891 communication Methods 0.000 description 12
- 238000012423 maintenance Methods 0.000 description 8
- 238000005457 optimization Methods 0.000 description 5
- 238000004458 analytical method Methods 0.000 description 4
- 238000003745 diagnosis Methods 0.000 description 4
- 230000001364 causal effect Effects 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 2
- 238000012163 sequencing technique Methods 0.000 description 2
- 230000015556 catabolic process Effects 0.000 description 1
- 230000000295 complement effect Effects 0.000 description 1
- 238000010219 correlation analysis Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 230000008030 elimination Effects 0.000 description 1
- 238000003379 elimination reaction Methods 0.000 description 1
- 230000007257 malfunction Effects 0.000 description 1
- 230000009897 systematic effect Effects 0.000 description 1
Images
Abstract
The present invention discloses an alarm management method and a system thereof, and in the present invention, the parent-child relationship between alarms is set based on that the connection between the alarms are analyzed. When the alarms are reported to be processed, if a parent alarm exists, a corresponding child alarm is not reported. Therefore, the realization of the present invention can effectively reduce the number of the alarms, and the parent alarm is reported to maintain the integrality of the alarm function and is favorable for searching for a fault source, so that the effect that the alarms are simplified and optimized is achieved, and the default is convenient to diagnose and maintain.
Description
Technical field
The present invention relates to the data processing in the network management, relate in particular to a kind of alarm management method and system.
Background technology
Communication network is made up of various network communication equipment, needs collaborative work to realize the corresponding communication business between each network communication equipment.For guaranteeing the operate as normal of network communication equipment, need adopt necessary maintenance service to safeguard to it.Wherein, the communication equipment alarm is a kind of important maintenance service at the network equipment, is realized by communication equipment each department management system usually.
Described communication equipment alarm and control system mainly is made up of the two large divisions:
1, alarm produces and reporting equipment: be used to produce the also warning information of report network communication equipment; All belong to alarm generation equipment such as communication network devices such as GPRS (GPRS) serving GPRS support node SGSN, GPRS GGSN GGSN, simultaneously every kind of equipment all with the alarm report that produces to alarm and control system.
2, alarm and control system: accept the warning information that alarm produces and reporting equipment (as each network element) reports, and provide various alarm management operations, simultaneously, finish the function that issues the alarm management order to each network element to the user.
Usually, alarm is by the timely ruuning situation of display system intuitively of modes such as acousto-optic, for work such as subscriber equipment maintenance, the network optimization, business diagnosis provide the data foundation.The fault warning item that alarm subsystem shows is used to the attendant of the equipment that offers, so that the attendant carries out relevant maintaining operation, alarm subsystem is the core part of network failure management; For guaranteeing the high availability of described fault warning item, require corresponding data must pay attention to practicality for the client.
Yet problems such as the warning system ubiquity of network communication equipment alarm at present is too many, frequency is too high, emphasis is not outstanding.Therefore, be unfavorable for user's positioning equipment source of trouble quickly and effectively, and carry out follow-up diagnosis, maintenance work at fault.
, need simplify, to eliminate the problems such as too much, that emphasis is outstanding of alarming alarm for this reason.
The too much means of now widely used elimination alarm are alarm shields.By configuration shielding processing is carried out in certain class alarm, in case this type of alarm takes place in the system, then mask without exception, report and alarm is not given the user.Because alarm is all shielded, be equivalent to the reporting functions of having closed this type of alarm, though alarm quantity is to have reduced, can't reflect the feature of certain type systematic fault again, be unfavorable for the maintenance of user to equipment.
Summary of the invention
In view of above-mentioned existing in prior technology problem, the purpose of this invention is to provide a kind of alarm management method and system, thereby can effectively reduce alarm quantity, the easy-to-look-up source of trouble and do not lose alarm function integrality alarm management method.
The objective of the invention is to be achieved through the following technical solutions:
The invention provides a kind of alarm management method, comprise the steps:
Each alarm that has correlation in A, the network is set to father's alarm and corresponding child alarm according to the causality between the alarm respectively;
B, according to the correlation of described father alarm and corresponding child alarm, warning information is handled, described warning information is treated to: if produce in the preset time of described father alarm after the child alarm that is not resumed produces, then the described child alarm that is not resumed is carried out correlation and recover, described correlation is recovered to be specially: owing to the existence of described father's alarm the described child alarm that is not resumed is shielded.
Father's alarm and corresponding child alarm correlation setting in the described steps A are stored in the stored data base of configuration, and provide the management interface that it is upgraded.
Father in described steps A alarm and correlation between the child alarm comprise that the father alarms and will inevitably cause corresponding child alarm, and described father alarm comprises combination father alarm, and described combination father alarm is that a plurality of fathers that occur simultaneously alarm and constitute; When this combination father alarm certainly leads to child alarm when occurring.
Among the present invention, when determining to report child alarm,, then do not report this child alarm if its corresponding father alarm exists.
Among the present invention, described warning information is handled also comprises: when father's alarm clearing, if child alarm does not still recover, then report this child alarm.
Among the present invention, described warning information is handled also comprises: during the group alarm clearing, if father's alarm does not still recover, then report child alarm to recover message.
Among the present invention,, then the correlation of child alarm is recovered to be updated to normal recovery if father's alarm does not also recover when child alarm normally recovers.
The invention also discloses a kind of alarm and control system, comprise warning information receiver module and warning information sending module, it is characterized in that described system also comprises the warning information processing module, wherein
The warning information processing module, the alarm with correlation that is used for the warning information that will receive is set to father's alarm and corresponding child alarm respectively according to the causality between alarm;
Described warning information processing module further comprises the correlation processing module, described correlation processing module, be used for correlation according to the warning information that sets in advance, warning information is shielded and reports, described warning information is shielded is owing to the existence of described father's alarm the described child alarm that is not resumed to be shielded.
As seen from the above technical solution provided by the invention, the present invention is provided with the set membership between the alarm on the basis that the contact between the alarm is analyzed, the inevitable child alarm that also produce when promptly producing the father and alarming, and when handling, alarm report do not report child alarm to reduce alarm quantity, report the father to alarm and help searching the source of trouble with the integrality that keeps alarm function, simplify optimization effect thereby reached alarm, make things convenient for Fault Diagnosis and maintenance.
Wherein set membership can be stored in the database between the alarm, and father's alarm can be a kind of combination father alarm, i.e. this combination father alarm is the combination by a plurality of alarms, therefore, this record alert database just can comprise set memberships all between the alarm and promptly alarms all positive causal relationship between the generation.Like this, by analysis to alarm correlation, to a plurality of alarms of positive causal relationship are arranged, only report the father to alarm, minimizing equipment reports user's alarm quantity, helps the effective positioning equipment source of trouble of user, finds the father to alarm rapidly, carry out consequent malfunction diagnosis, Breakdown Maintenance work at father's alarm, improved alarm practicality and plant maintenance efficient.
In addition, by the relevant corresponding supplementary measures in the alarm report processing procedure, it is more perfect, convenient and practical to make network management alarm report of the present invention handle optimization method.
Description of drawings
Fig. 1 is the handling process schematic diagram of method of the present invention;
Fig. 2 is the structural representation of system of the present invention.
Embodiment
Core concept of the present invention is the set membership that is provided with on the basis that the contact between the alarm is analyzed between the alarm, promptly determine the correlation between each alarm, and when alarm report is handled, carrying out alarm report according to described correlation handles, be specially:, then do not report child alarm with the minimizing uploading alarm quantity, and only report the father to alarm if the father alarms when existing, with the integrality that keeps alarm function and help searching the source of trouble, thereby reached the purpose that optimization is simplified in alarm.
As can be seen, for realizing the correlation setting of purpose of the present invention between need in system, reasonably alarming.Understand for the present invention being had better, will at first analyze explanation below the correlation between the alarm among the present invention:
The alarm example that reports in communication equipment is not isolated the existence, for example, if the fault of a bottom function takes place, what can cause the upper strata also can't operate as normal based on other functions of this function, so actual in the just existing bottom fault warning of the alarm example of reporting of user, the upper strata fault warning is also arranged.As can be seen, have causality between these alarms, be provided with among the present invention: as A alarm must causing B alarm, then these alarms are called the correlation alarm, and the A alarm is father's alarm of B alarm, and the B alarm is the child alarm of A alarm.
In the physical fault location, as long as analyze the reason of father's alarm, and get rid of this fault, all relevant alarms all can be resumed so.Therefore, can be utilized father's alarm shield or be recovered child alarm by the correlation between warning system analysis alarm example, the minimizing system reports user's alarm quantity, and helps user's positioning equipment source of trouble effectively.
Described alarm correlation is the relation between the alarm example.For example certain the link chain rupture on the subsystem A can cause being based upon the channel interruption on this link, and there are correlation in alarm a of the chain rupture on this subsystem and channel interruption alarm b so; If fault has also taken place in the channel on the subsystem B at this moment, reported channel interruption alarm c, this channel interruption is just alarmed and chain rupture alarm a has not had correlation.
Therefore, judge whether the alarm example exists correlation, and concrete implementation comprises:
(1) judge whether the alarm item exists the basis of correlation:
There is in logic related in alarm as chain rupture alarm and channel interruption, can think that there is the basis of correlation in they, just not has the basis of correlation for the alarm item that does not have logic association;
(2) judge whether the determinant attribute of alarming example exists logic association:
The determinant attribute of alarm example has determined which fault this alarm example comes from, if there is the correlation basis in two alarm items of alarming the example correspondences, and their determinant attribute is complementary, and just can really judge to have correlative relationship between them.
The above analysis, if there is the alarm item on correlation basis in predefined, and clearly define the alarm attributes that this correlation need be mated, just can on the alarm example, give the correct time, judge the correlative relationship of alarming between example according to the alarm correlation rule of definition, child alarm is carried out follow-up shielding processing.
The present invention is described in further detail below in conjunction with accompanying drawing.
The specific implementation of method of the present invention may further comprise the steps as shown in Figure 1:
Step 100: the set membership in database between the configuration alarm, promptly dispose the correlation between father's alarm and the child alarm.
Set membership between the alarm is set in database, is to be based upon on the basis of alarm correlation analysis, and can variation according to circumstances changes and upgrade or reconfigure.
Meet the situation that certainly leads to another alarm when an alarm produces for the correlation between two alarms in layoutprocedure, then last alarm can be called father's alarm, back one alarm is called child alarm.
When an alarm produces, must have a plurality of alarms and produce, then can set up a plurality of set memberships;
If just certainly lead to another alarm when a plurality of alarms occur simultaneously, then can only set up a many-to-one set membership, call combination father alarm to father's alarm this moment; When one or more alarm in this combination does not occur simultaneously, child alarm must not appear.Therefore, if combination father alarms when certainly leading to a plurality of alarm when producing, can set up a plurality of many-to-one set memberships.
Like this, through the configuration of step 101, the various positive causal relationship between the alarm can be decomposed into one to one or many-to-one father and son's corresponding relation, and, each corresponding relation can carry out stored configuration easily with the form of database, and revises and upgrade.
Configure after the set membership between the alarm, just can be applied to them in the optimization process of alarm report and go;
Step 101: wait for receiving new alarm/recovery message;
Step 102: after receiving new alarm/recovery message, will judge that at first what receive is new alarm or recovery message, if what receive is new alarm, then execution in step 103, otherwise, execution in step 107:
Step 103: further judge whether to exist the father's alarm that is not resumed, if exist, then execution in step 105, otherwise, execution in step 104;
Step 104: normally report this warning information, and execution in step 105;
Step 105: judge whether to exist that (perhaps other can think that the father alarms the time range that produces simultaneously even more early produce with child alarm in 10 seconds before this, and this 10 second time also can be adjusted according to actual needs, promptly be not fixed as 10 seconds) child alarm that produces and be not resumed, if, then execution in step 106, otherwise process finishes, and execution in step 101 again.
, need to prove: described two sequencings of judging execution of step 103 and step 105 can be changed, and certainly, its measures areput is the order of transposing simultaneously also herein.In a word, if there is the father's alarm that is not resumed, then do not report new alarm; The father's alarm that if there is no is not resumed then normally reports new alarm.If there is the child alarm that is not resumed in 10 seconds before this, then execution in step 106; Otherwise, do not need special processing;
Step 106: this child alarm is carried out correlation recover, process finishes, and waits for and receives execution in step 101 after new alarm/recovery message again;
Described correlation is recovered to be meant: owing to the existence of father's alarm child alarm is shielded.
Step 107: if judge in the step 104 that what receive is not new alarm, but the recovery message of alarm will judge also then whether the alarm of this recovery message correspondence reports, if then execution in step 108, otherwise, execution in step 111;
Step 108: judge whether the correspondence alarm that has reported is in the state that correlation is recovered, if the father's alarm that then shows corresponding alarm needs execution in step 109 adopting correlation recovery measure stepfather alarm not recover yet, otherwise, execution in step 110;
Step 109: the correlation of corresponding fault is recovered to be updated to normal recovery, and execution in step 111;
Step 110: normally report recovery message, and execution in step 111;
Step 111: whether the child alarm of judging corresponding alarm recovers, if then execution in step 112, otherwise process finishes, and execution in step 101 again;
, need to prove: the sequencing of described two the judgment processing processes of step 107 and step 111 also can be changed herein, and certainly, its measures areput is the order of transposing simultaneously also.
Step 112: the child alarm of judging corresponding alarm does not still recover, and then activates this child alarm, reports this child alarm again.
The present invention also provides a kind of alarm and control system, shown in Figure 2, comprise the warning information receiver module that is used for receiving alarm information, be used for warning information processing module that warning information is handled and the warning information sending module that is used for report and alarm information, simultaneously, in this system, add the correlation processing module, be specially in described warning information processing module, to increase the correlation processing module is set, be used for correlation according to the warning information that sets in advance, warning information is shielded accordingly and reports, concrete shielding and report the processing mode front to describe is so locate no longer to describe in detail.
In sum, the present invention passes through the analysis at each alarm correlation, thereby has effectively simplified the alarm amount that reports in the webmaster process, and can guarantee the reliable realization of alarm function, therefore, realization of the present invention can improve the maintainability of alarm practicality and equipment.
The above; only for the preferable embodiment of the present invention, but protection scope of the present invention is not limited thereto, and anyly is familiar with those skilled in the art in the technical scope that the present invention discloses; the variation that can expect easily or replacement all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion with the protection range of claim.
Claims (8)
1, a kind of alarm management method is characterized in that, comprises the steps:
The alarm that respectively has correlation in A, the network is set to father's alarm and corresponding child alarm according to the causality between alarm respectively;
B, according to the correlation of described father alarm and corresponding child alarm, warning information is handled, described warning information is treated to: if produce in the preset time of described father alarm after the child alarm that is not resumed produces, then the described child alarm that is not resumed is carried out correlation and recover, described correlation is recovered to be specially: owing to the existence of described father's alarm the described child alarm that is not resumed is shielded.
2, alarm management method according to claim 1 is characterized in that, father's alarm and corresponding child alarm correlation setting in the described steps A are stored in the stored data base of configuration, and provide the management interface that it is upgraded.
3, alarm management method according to claim 1, it is characterized in that, father in described steps A alarm and correlation between the child alarm comprise that the father alarms and will inevitably cause corresponding child alarm, and described father's alarm comprises combination father alarm, and described combination father alarm is that a plurality of father's alarms that occur simultaneously constitute; When this combination father alarm certainly leads to child alarm when occurring.
4, alarm management method according to claim 1 is characterized in that, described warning information is handled also comprises: when determining to report child alarm, if its corresponding father alarm exists, then do not report this child alarm.
5, alarm management method according to claim 1 is characterized in that, described warning information is handled also comprises: when father's alarm clearing, if child alarm does not still recover, then report this child alarm.
6, alarm management method according to claim 1 is characterized in that, described warning information is handled also comprises: during the group alarm clearing, if father's alarm does not still recover, then report child alarm to recover message.
7, alarm management method according to claim 1 is characterized in that, described warning information is handled also comprises: if father's alarm does not also recover when child alarm normally recovers, then the correlation of child alarm is recovered to be updated to normal recovery.
8, a kind of alarm and control system comprises warning information receiver module and warning information sending module, it is characterized in that described system also comprises the warning information processing module, wherein
The warning information processing module, the alarm with correlation that is used for the warning information that will receive is set to father's alarm and corresponding child alarm respectively according to the causality between alarm;
Described warning information processing module further comprises the correlation processing module, described correlation processing module, be used for correlation according to the warning information that sets in advance, warning information is shielded and reports, described warning information is shielded is owing to the existence of described father's alarm the described child alarm that is not resumed to be shielded.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB200510109282XA CN100433647C (en) | 2005-10-20 | 2005-10-20 | Warning managing method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB200510109282XA CN100433647C (en) | 2005-10-20 | 2005-10-20 | Warning managing method and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN1863080A CN1863080A (en) | 2006-11-15 |
| CN100433647C true CN100433647C (en) | 2008-11-12 |
Family
ID=37390413
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNB200510109282XA Expired - Fee Related CN100433647C (en) | 2005-10-20 | 2005-10-20 | Warning managing method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN100433647C (en) |
Families Citing this family (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102111788A (en) * | 2009-12-29 | 2011-06-29 | 中兴通讯股份有限公司 | Alarm processing method and alarm management system |
| CN102136922B (en) * | 2010-01-22 | 2014-04-16 | 华为技术有限公司 | Correlation analysis method, equipment and system |
| CN102387035B (en) * | 2011-09-13 | 2014-02-05 | 瑞斯康达科技发展股份有限公司 | Alarm processing method and alarm processing device |
| CN102832998B (en) * | 2012-09-12 | 2015-09-02 | 上海斐讯数据通信技术有限公司 | A kind of alarm shield collocation method |
| CN104009854B (en) * | 2013-02-21 | 2019-01-22 | 中兴通讯股份有限公司 | A kind of alert processing method and device, alarm association information setting method |
| CN103209096A (en) * | 2013-04-01 | 2013-07-17 | 大唐移动通信设备有限公司 | Method and device for alarm processing |
| CN103607295A (en) * | 2013-10-31 | 2014-02-26 | 南京中兴新软件有限责任公司 | Alarm processing method and alarm system |
| CN106730196B (en) * | 2016-12-12 | 2019-11-15 | 北京怡和嘉业医疗科技股份有限公司 | A kind of alarm method, device and ventilator |
| CN107690774B (en) * | 2016-12-28 | 2019-01-15 | 深圳力维智联技术有限公司 | Alert processing method and device |
| CN110138609A (en) * | 2019-05-10 | 2019-08-16 | 江西山水光电科技股份有限公司 | A kind of alarm correlation suppressing method in optical transfer network OTN |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1462130A (en) * | 2002-05-27 | 2003-12-17 | 华为技术有限公司 | Treatment method of flash cut worning in network management system |
| CN1474542A (en) * | 2002-08-06 | 2004-02-11 | 华为技术有限公司 | Telecommunication equipment fault information managing method |
| US6707795B1 (en) * | 1999-04-26 | 2004-03-16 | Nortel Networks Limited | Alarm correlation method and system |
| CN1492624A (en) * | 2002-10-22 | 2004-04-28 | 华为技术有限公司 | Processing method of communication network warning and relatively analysis management device |
-
2005
- 2005-10-20 CN CNB200510109282XA patent/CN100433647C/en not_active Expired - Fee Related
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6707795B1 (en) * | 1999-04-26 | 2004-03-16 | Nortel Networks Limited | Alarm correlation method and system |
| CN1462130A (en) * | 2002-05-27 | 2003-12-17 | 华为技术有限公司 | Treatment method of flash cut worning in network management system |
| CN1474542A (en) * | 2002-08-06 | 2004-02-11 | 华为技术有限公司 | Telecommunication equipment fault information managing method |
| CN1492624A (en) * | 2002-10-22 | 2004-04-28 | 华为技术有限公司 | Processing method of communication network warning and relatively analysis management device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN1863080A (en) | 2006-11-15 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN100433647C (en) | Warning managing method and system | |
| US8799722B2 (en) | Business to business network management event detection and response system and method | |
| US6792269B2 (en) | System, method and apparatus for tracking deployment of cellular telephone network sites | |
| US7080144B2 (en) | System enabling access to obtain real-time information from a cell site when an emergency event occurs at the site | |
| US7259666B1 (en) | Method and system for displaying status indications from communications network | |
| US7945817B1 (en) | Method and system for automatically recognizing alarm patterns in a communications network | |
| US7301448B1 (en) | Method and system for deduplicating status indications in a communications network | |
| US6788933B2 (en) | System, method and apparatus for capturing and processing call processing failures occurring at a digital wireless switch | |
| US6807265B2 (en) | System, method and apparatus for court-ordered surveillance of call records | |
| CN102624554B (en) | Comprehensive network management method combining equipment management mode with service management mode | |
| US7099660B2 (en) | System, method and apparatus for a network-organized repository of data | |
| WO2007143943A1 (en) | Method, system and network device of centralized maintenance of multiple devices | |
| US7295829B2 (en) | System, apparatus and method for managing telephone call records | |
| CN104838620A (en) | Event management in telecommunications networks | |
| CN101388794B (en) | Method and system for positioning network management system exception affair | |
| CN101150433A (en) | A method for setting alarm filtering rule | |
| US6975705B2 (en) | System, method and apparatus for capturing and processing call processing failures occurring at a telephone switch control processor | |
| CN117041120A (en) | Distributed full-link service monitoring system | |
| CN105763371A (en) | Alarm processing method and apparatus | |
| CN102223659A (en) | Method and device for shielding redundancy history alarms | |
| CN100414883C (en) | Method for obtaining information by network manager at upper layer | |
| CN114257621B (en) | Abnormal signal processing method, device, equipment and storage medium | |
| US11862007B2 (en) | Method for automatically analyzing and filtering out redundant alarms in the fault management system of radio transceiver stations | |
| JP2004363946A (en) | Failure handling system and failure factor specifying method | |
| KR100307321B1 (en) | Method for processing data from switching system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20081112 |
|
| CF01 | Termination of patent right due to non-payment of annual fee |