CN104244293B - Network node alarm method and system - Google Patents
Network node alarm method and system Download PDFInfo
- Publication number
- CN104244293B CN104244293B CN201310222555.6A CN201310222555A CN104244293B CN 104244293 B CN104244293 B CN 104244293B CN 201310222555 A CN201310222555 A CN 201310222555A CN 104244293 B CN104244293 B CN 104244293B
- Authority
- CN
- China
- Prior art keywords
- network node
- alarm
- warning information
- network
- rule
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The present invention, which provides a kind of network node alarm method and system, the network node alarm method, to be included：Obtain the warning information of all alarm network nodes；The warning information is associated, obtains multiple first alarm network nodes with same fault source network node；The warning information of the multiple first alarm network node is polymerize, generates the new warning information of a failure source network node；Export the new warning information.The present invention can realize the alarm auto-associating between multiple network node, directly show the warning information of failure source network node.
Description
Technical field
The present invention relates to core network technology field, more particularly to a kind of network node alarm method and system.
Background technology
For mobile communication voice service, the catastrophe failure of speech core net can cause the perception of batch user to be subject to shadow
It rings.Network failure is found by alarm monitoring in time, is the groundwork of network management personnel.All the time, alarm prison
The intelligence of control means is all the target that carrier network is pursued, while it is also complexity, express network high reliability, high existence
The inevitable requirement of property.
The network node alarm method of speech core net of the prior art mainly includes following steps：
（1）Gather network data；
（2）Alarm judgement is carried out to each network node independence；
（3）Directly show the alarm of each network node.
Above-mentioned alarm method does not account for a kind of fault scenes often occurred in existing net：When a certain network node is sent out
During raw serious failure, multiple relevant network nodes can all alert simultaneously.When encountering the above situation, existing alarm
Method can all show all alarms.For the maintenance personnel being lacking in experience, it is seen that whole network goes out simultaneously
During existing a large amount of alarms, often There is no way to begin, so as to can not quickly determine that source network node occurs for failure, thus can not be quick
Implement fault restoration and removal of obstacle.
The content of the invention
In view of this, the present invention provides a kind of network node alarm method and system, to solve to go out because of a network node
When existing failure causes a large amount of network nodes to alert, the problem of can not quickly determining failure generation source network node.
To solve the above problems, the present invention provides a kind of network node alarm method, including：
Obtain the warning information of all alarm network nodes；
The warning information is associated, obtains multiple first alarm network sections with same fault source network node
Point；
The warning information of the multiple first alarm network node is polymerize, generates a failure source network section
The new warning information of point；
Export the new warning information.
Preferably, it is described that the warning information is associated, obtain multiple the with same fault source network node
The step of one alarm network node, specifically includes：
The warning information is associated, judges whether the multiple alarm network nodes for meeting the first rule,
In, first rule is：It is multiple alarm network nodes have same correspondent network node, and be respectively provided be related to it is described right
Hold the warning information of network node；
If it is present meet multiple alarm network nodes of the first rule described in judging for the described first alarm network section
Point, and the correspondent network node is the failure source network node.
Preferably, it is described that the warning information is associated, obtain multiple the with same fault source network node
The step of one alarm network node, specifically further includes：
The warning information is associated, judges whether the multiple alarm network nodes for meeting Second Rule,
In, the Second Rule is：Multiple alarm network nodes have same upper level network node, and be respectively provided be related to it is described
The warning information of upper level network node；
If it is present meet multiple alarm network nodes of Second Rule described in judging for the described first alarm network section
Point, and the upper level network node is the failure source network node.
Preferably, it is described that the warning information is associated, obtain multiple the with same fault source network node
The step of one alarm network node, specifically further includes：
The warning information is associated, judges whether the multiple alarm network nodes for meeting three sigma rule,
In, the three sigma rule is：One carrying network element of multiple alarm network nodes and same IP bearer networks is physically connected to, and is had
Relate to the warning information of the carrying network element；
If it is present meet multiple alarm network nodes of three sigma rule described in judging for the described first alarm network section
Point, and the carrying network element is the failure source network node.
Preferably, it is described that the warning information is associated, obtain multiple the with same fault source network node
The step of one alarm network node, specifically further includes：
The warning information is associated, judges whether the multiple alarm network nodes for meeting three sigma rule,
In, the three sigma rule is：One carrying network element of multiple alarm network nodes and same IP bearer networks is physically connected to, and is had
Relate to the warning information of the carrying network element；
If it is present meet multiple alarm network nodes of three sigma rule described in judging for the described first alarm network section
Point, and the carrying network element is the failure source network node.
Preferably, it is described that the warning information is associated, obtain multiple the with same fault source network node
It is further included after the step of one alarm network node：
Export the warning information of other alarm network nodes in addition to the described first alarm network node.
The present invention also provides a kind of network node warning system, including：
Warning information acquisition module, for obtaining the warning information of all alarm network nodes；
Relating module for being associated to the warning information, is obtained multiple with same fault source network node
First alarm network node；
Generation module is alerted, is polymerize for the warning information to the multiple first alarm network node, generation one
The new warning information of failure source network node described in item；
First alarm output module, for exporting the new warning information.
Preferably, the relating module includes：
First association submodule for being associated the warning information, judges whether to meet the first rule
Multiple alarm network nodes, wherein, first rule is：Multiple alarm network nodes have same correspondent network node,
And it is respectively provided with the warning information for being related to the correspondent network node；If it is present meet the more of the first rule described in judging
A alarm network node is the described first alarm network node, and the correspondent network node is the failure source network node.
Preferably, the relating module further includes：
Second association submodule, for being associated the warning information, judges whether to meet Second Rule
Multiple alarm network nodes, wherein, the Second Rule is：Multiple alarm network nodes have same upper level network section
Point, and it is respectively provided with the warning information for being related to the upper level network node；If it is present meet Second Rule described in judging
Multiple alarm network nodes for described first alarm network node, and the upper level network node be the failure source network
Node.
Preferably, the relating module further includes：
3rd association submodule, for being associated the warning information, judges whether to meet three sigma rule
Multiple alarm network nodes, wherein, the three sigma rule is：One carrying of multiple alarm network nodes and same IP bearer networks
Network element is physically connected to, and is respectively provided with the warning information for being related to the carrying network element；If it is present meet the 3rd described in judging
Multiple alarm network nodes of rule are the described first alarm network node, and the carrying network element is the failure source network section
Point.
Preferably, the relating module further includes：
3rd association submodule, for being associated the warning information, judges whether to meet three sigma rule
Multiple alarm network nodes, wherein, the three sigma rule is：One carrying of multiple alarm network nodes and same IP bearer networks
Network element is physically connected to, and is respectively provided with the warning information for being related to the carrying network element；If it is present meet the 3rd described in judging
Multiple alarm network nodes of rule are the described first alarm network node, and the carrying network element is the failure source network section
Point.
Preferably, the network node warning system further includes：
Second alarm output module, for exporting other alarm network nodes in addition to the described first alarm network node
Warning information.
The invention has the advantages that：
It can realize the alarm auto-associating between multiple network node, directly show the alarm letter of failure source network node
Breath.When multiple network node in face of single network node catastrophe failure, is caused to occur the complex scene alerted simultaneously, experience is short of
Maintenance personnel by this technology, can also carry out fault location；Even if for network management expert, their events can be also improved
Hinder the efficiency of positioning.
Description of the drawings
Fig. 1 is the flow diagram of the network node alarm method of the embodiment of the present invention one；
Fig. 2 is the flow diagram of the network node alarm method of the embodiment of the present invention two；
Fig. 3 is a flow diagram of the correlating method of the warning information of the embodiment of the present invention two；
Fig. 4 is another flow diagram of the correlating method of the warning information of the embodiment of the present invention two；
Fig. 5 is the another flow diagram of the correlating method of the warning information of the embodiment of the present invention two；
Fig. 6 is the structure diagram of the network node warning system of the embodiment of the present invention three.
Specific embodiment
For solve because the failure of network node cause a large amount of network nodes to alert when, can not quickly determine former
The problem of source network node, occurs for barrier, in the embodiment of the present invention, each network node is analyzed, generates alarm independent
On the basis of information, intelligent association is carried out to the warning information that network node is respectively alerted in network, polymerize relevant alarm, for
Multiple alarm network nodes with same fault source network node only generate an announcement that source network node occurs on failure
Alert information, and maintenance personnel is presented to, so that maintenance personnel can be with Rapid Implementation fault restoration.
With reference to the accompanying drawings and examples, the specific embodiment of the present invention is described in further detail.
Embodiment one
Please refer to Fig.1, Fig. 1 be the embodiment of the present invention one network node alarm method flow diagram, this method bag
Include following steps：
Step 101, the warning information of all alarm network nodes is obtained.
Step 102, the warning information is associated, obtains multiple first with same fault source network node and accuse
Alert network node.
Step 103, the warning information of the multiple first alarm network node is polymerize, generates a failure
The new warning information of source network node.
Step 104, the new warning information is exported.
The method provided by above-described embodiment, for multiple alarm network sections with same fault source network node
Point only generates a warning information that source network node occurs on failure, and maintenance personnel can be caused quickly to determine failure hair
Source of students network node, so as to Rapid Implementation fault restoration.
In the embodiment of the present invention, the warning information can be associated by following several method, obtaining has phase
With multiple first alarm network nodes of failure source network node：
Method one：
The warning information is associated, judges whether the multiple alarm network nodes for meeting the first rule,
In, first rule is：It is multiple alarm network nodes have same correspondent network node, and be respectively provided be related to it is described right
Hold the warning information of network node；If it is present the multiple alarm network nodes for meeting the first rule described in judging are described
First alarm network node, and the correspondent network node is the failure source network node.
Method two：The warning information is associated, judges whether the multiple alarm networks for meeting Second Rule
Node, wherein, the Second Rule is：Multiple alarm network nodes have same upper level network node, and are respectively provided with and relate to
And the warning information to the upper level network node；If it is present meet multiple alarm nets of Second Rule described in judging
Network node is the described first alarm network node, and the upper level network node is the failure source network node.
Method three：The warning information is associated, judges whether the multiple alarm networks for meeting three sigma rule
Node, wherein, the three sigma rule is：Multiple alarm network nodes carry network element physics phase with the one of same IP bearer networks
Connect, and be respectively provided with the warning information for being related to the carrying network element；If it is present meet the multiple of three sigma rule described in judging
Network node is alerted as the described first alarm network node, and the carrying network element is the failure source network node.
In some embodiments of the invention, can independently be searched using above-mentioned three kinds of methods with same fault
Multiple first alarm network nodes of source network node, can also be searched using any combination of above-mentioned three kinds of methods with phase
With multiple first alarm network nodes of failure source network node.
For example, can first application method one found out from all alarm network nodes and meet multiple the of rule one
One alarm network node, then reuse method two is found out from all alarm network nodes meets multiple the first of rule two
Network node is alerted, finally, reuse method three is found out from all alarm network nodes meets multiple the first of rule one
Alert network node.
Or can first application method one found out from all alarm network nodes and meet multiple the first of rule one
Network node is alerted, then deletes the multiple first alarm network nodes for meeting rule one from all alarm network nodes,
Assuming that remaining n1 alarm network node, reuse method two is found out from remaining n1 alarm network node meets rule
Two multiple first alarms network nodes, then again from remaining n1 alarm network node by meet regular two multiple the
One alarm network node is deleted, it is assumed that remaining n2 alarm network node, finally, reuse method three is alerted from remaining n2
The multiple first alarm network nodes for meeting rule one are found out in network node.
When being used in any combination, the sequencing performed can also be selected arbitrarily above-mentioned three kinds of methods.For example, method
One and method two when being applied in combination, can first application method one, then reuse method two, can also first application method two, then
Application method one.
In addition, in above-described embodiment, in order not to generate the omission of warning information, except needing that nets will be alerted with multiple first
Outside the new warning information output of the associated failure source network node of network node, it is also necessary to institute will be removed in all alarm network nodes
State other alarm network nodes outside the first alarm network node（I.e. no associated alarm network node）Warning information
Output.
Embodiment two
Please refer to Fig.2, as Fig. 2 be the embodiment of the present invention two network node alarm method flow diagram, this method
Comprise the following steps：
Step 201, the warning information for whole alarm network nodes that sometime scanning network obtains is obtained, and this is accused
Alert information is converted into the representation of a five-tuple, is added to after converting in set InputAlarmSet, as initial defeated
Enter；Set OutputAggAlarmSet is initialized, as output result.
The representation of five-tuple is (Name, Time, NE, DestNE, Context).Wherein, the meaning of each field is such as
Under：
Name：Alarm name embodies the general contents and severity level of alarm.
Time：Alert the time occurred.
NE：Alert the source network node occurred.
DestNE：Alert the correspondent network node for being related to, influencing（It can be sky）.If the correspondent network node being related to
Quantity more than one, then value is MultipleNEs.
Detail：The details of alarm are the supplementary notes to alarm name（It can be sky）.When attribute DestNE=
During MultipleNEs, Detail will include the Verbose Listing of correspondent network nodename.In addition, the detailed description on alarm,
It can be included in Detail attributes.
Step 202, the warning information of all alarm network nodes in InputAlarmSet is associated, sentenced successively
Disconnected whether there is alerts network nodes with the first rule, Second Rule or three sigma rule matched multiple first, if there is symbol
Multiple first alarm network nodes of certain rule are closed, then no longer by the multiple first alarm network node and remaining rule
It is matched, and the warning information of multiple first alarm network nodes of the first rule, Second Rule or three sigma rule will be met
Polymerization, the new warning information of the failure source network node of the multiple first alarm network node of generation one, and go to step
203, if alarm network node cannot be matched with any rule, go to step 204.
Step 203, OutputAggAlarmSet increases the new warning information of failure source network node；InputAlarmSet
The warning information of matched multiple first alarm network nodes is cut, and goes to step 202 and continues to execute.
Step 204, the warning information in output set OutputAggAlarmSet, the result as alarm association.
Remaining warning information in InputAlarmSet, is considered as what cannot be associated, can also export.
The following detailed description of each rule.
First rule：
If multiple alarm network nodes have same correspondent network node, and the plurality of alarm network node is respectively provided with
It is related to the warning information of the correspondent network node, then polymerize these correlation alarms, generates one of failure source network node
New warning information.
It please refers to Fig.3, Fig. 3 is a flow diagram of the correlating method of the warning information of the embodiment of the present invention two, specifically
It may comprise steps of：
Step 301, n warning information, A are inputted1,A2,A3,......An。
Step 302, for i≤n, judge that whether all following if clause is true：
if(A1.DestNE=A2.DestNE=…Ai.DestNE=NE_)（That is A1,A2,...AiWith same correspondent network
Node NE_）；
if(A1.Name=A2.Name=…Ai.Name=Name_)（That is A1,A2,...AiWith same warning information）；
If so, going to step 303, otherwise terminate the judgement of the first rule.
Step 303, A is associated1,A2,...AiWarning information, generate the new alarm letter of failure source network node NE_
Cease aggAlarm:
aggAlarm.Name=Name_
aggAlarm.NE=NE_
aggAlarm.DestNE=MultipleNEs
aggAlarm.Detail={A1,A2,...Ai}
Announcement of the alarm name of the new warning information aggAlarm still with associated multiple first alarm network nodes
Alert title is identical, but the value of NE attributes has made failure source network node NE_ into.The DestNE attribute values of alarm are
It is multiple to represent that affected correspondent network node has by MultipleNEs.Specific opposite end net is described in Detail attributes
Network node listing, list correspond to the NE attributes of associated multiple first alarm network nodes.
Second Rule：
If multiple alarm network nodes have same upper level network node connected in logic, and the plurality of alarm
Network node has the warning information for being related to the upper level network node, then polymerize these correlation alarms, generate the source of trouble
One new warning information of network node.
It please refers to Fig.4, Fig. 4 is another flow diagram of the correlating method of the warning information of the embodiment of the present invention two, is had
Body comprises the following steps：
Step 401, n warning information, A are inputted1,A2,A3,......An。
Step 402, for i≤n, judge that whether all following if clause is true：
if（UL（A1.NE）=UL（A2.NE）=…UL（Ai.NE）=NE_)（That is A1,A2,...AiIt is same with what is be connected in logic
One upper level network node NE_）；
if（A1.Name=A2.Name=…Ai.Name=Name_)（That is A1,A2,...AiWith same warning information）；
If so, going to step 403, otherwise terminate the judgement of Second Rule.
Step 403, A is associated1,A2,...AiWarning information, generate the new alarm letter of failure source network node NE_
Cease aggAlarm:
aggAlarm.Name=Name_
aggAlarm.NE=NE_
aggAlarm.DestNE=MultipleNEs
aggAlarm.Detail={A1,A2,...Ai}
Announcement of the alarm name of the new warning information aggAlarm still with associated multiple first alarm network nodes
Alert title is identical, but the value of NE attributes has made failure source network node NE_ into.The DestNE attribute values of alarm are
It is multiple to represent that affected network node has by MultipleNEs（Those network nodes under NE_）.It is retouched in Detail attributes
The Verbose Listing of associated multiple first alarm network nodes is stated.
Three sigma rule：
If a carrying network element of multiple alarm network nodes and same IP bearer networks is physically connected to, and is respectively provided with and is related to
To the warning information of the carrying network element, then it polymerize these correlation alarms, a new alarm letter of generation failure source network node
Breath.
Fig. 5 is refer to, Fig. 5 is the another flow diagram of the correlating method of the warning information of the embodiment of the present invention two, is had
Body comprises the following steps：
Step 501, n warning information, A are inputted1,A2,A3,......An。
Step 502, for i≤n, judge that whether all following if clause is true：
if（DC（A1.NE）=DC（A2.NE）=…DC（Ai.NE）=NE_）（That is A1,A2,...AiWith same IP bearer networks
One carrying network element NE_ is physically connected to）；
if（A1.Name=A2.Name=…Ai.Name=Name_）（That is A1,A2,...AiWith same warning information）；
If so, going to step 503, otherwise, terminate the judgement of three sigma rule.
Step 503, A is associated1,A2,...AiWarning information, generate the new alarm letter of failure source network node NE_
Cease aggAlarm:
aggAlarm.Name=Name_
aggAlarm.NE=NE_
aggAlarm.DestNE=MultipleNEs
aggAlarm.Detail={A1,A2,...Ai}
Announcement of the alarm name of the new warning information aggAlarm still with associated multiple first alarm network nodes
Alert title is identical, but the value of NE attributes has made failure source network node NE_ into.The DestNE attribute values of alarm are
It is multiple to represent that affected network node has by MultipleNEs（Those direct-connected network nodes with NE_）.Detail attributes
In describe the Verbose Listings of associated multiple first alarms network nodes.
Network node alarm method method in above-described embodiment is suitable for multiple network, such as speech core net etc..
Embodiment three
It refer to Fig. 6, Fig. 6 is the structure diagram of the network node warning system of the embodiment of the present invention three, the network section
Point warning system includes：
Warning information acquisition module 601, for obtaining the warning information of all alarm network nodes；
Relating module 602 for being associated to the warning information, is obtained more with same fault source network node
A first alarm network node；
Generation module 603 is alerted, polymerize for the warning information to the multiple first alarm network node, generates
The new warning information of one failure source network node；
First alarm output module 604, for exporting the new warning information.
The system provided by above-described embodiment, for multiple alarm network sections with same fault source network node
Point only generates a warning information that source network node occurs on failure, and maintenance personnel can be caused quickly to determine failure hair
Source of students network node, so as to Rapid Implementation fault restoration.
Further, it is in the block any one or more can to include following submodule for the relating module 602：
First association submodule for being associated the warning information, judges whether to meet the first rule
Multiple alarm network nodes, wherein, first rule is：Multiple alarm network nodes have same correspondent network node,
And it is respectively provided with the warning information for being related to the correspondent network node；If it is present meet the more of the first rule described in judging
A alarm network node is the described first alarm network node, and the correspondent network node is the failure source network node.
Second association submodule, for being associated the warning information, judges whether to meet Second Rule
Multiple alarm network nodes, wherein, the Second Rule is：Multiple alarm network nodes have same upper level network section
Point, and it is respectively provided with the warning information for being related to the upper level network node；If it is present meet Second Rule described in judging
Multiple alarm network nodes for described first alarm network node, and the upper level network node be the failure source network
Node.
3rd association submodule, for being associated the warning information, judges whether to meet three sigma rule
Multiple alarm network nodes, wherein, the three sigma rule is：One carrying of multiple alarm network nodes and same IP bearer networks
Network element is physically connected to, and is respectively provided with the warning information for being related to the carrying network element；If it is present meet the 3rd described in judging
Multiple alarm network nodes of rule are the described first alarm network node, and the carrying network element is the failure source network section
Point.
In addition, in above-described embodiment, in order not to generate the omission of warning information, except needing that nets will be alerted with multiple first
Outside the new warning information output of the associated failure source network node of network node, it is also necessary to institute will be removed in all alarm network nodes
State other alarm network nodes outside the first alarm network node（I.e. no associated alarm network node）Warning information
Output.That is, described network node warning system further includes：Second alarm output module, for exporting except the described first alarm net
The warning information of other alarm network nodes outside network node.
To sum up, the embodiment of the present invention has the following advantages：
It can realize the alarm auto-associating between multiple network node, directly show the alarm letter of failure source network node
Breath.When multiple network node in face of single network node catastrophe failure, is caused to occur the complex scene alerted simultaneously, experience is short of
Maintenance personnel by this technology, can also carry out fault location；Even if for network management expert, their events can be also improved
Hinder the efficiency of positioning.
The above is only the preferred embodiment of the present invention, it is noted that for the ordinary skill people of the art
For member, without departing from the principle of the present invention, several improvements and modifications can also be made, these improvements and modifications also should
It is considered as protection scope of the present invention.
Claims (6)
1. a kind of network node alarm method, which is characterized in that including：
Obtain the warning information of all alarm network nodes；
The warning information is associated, obtains multiple first alarm network nodes with same fault source network node；
The warning information of the multiple first alarm network node is polymerize, one failure source network node of generation
New warning information；
Export the new warning information；Wherein, described that the warning information is associated, obtaining has same fault source network
Multiple first alarm network nodes of node, specifically include：
The warning information is associated, judges whether the multiple alarm network nodes for meeting the first rule, wherein, institute
Stating the first rule is：Multiple alarm network nodes have same correspondent network node, and are respectively provided with and are related to the opposite end net
The warning information of network node；
If it is present meet multiple alarm network nodes of the first rule described in judging for the described first alarm network node,
And the correspondent network node is the failure source network node；
It is described that the warning information is associated, obtain multiple first alarm network sections with same fault source network node
The step of point, specifically further includes：
The warning information is associated, judges whether the multiple alarm network nodes for meeting Second Rule, wherein, institute
Stating Second Rule is：Multiple alarm network nodes have same upper level network node, and are respectively provided with and are related to described upper one
The warning information of grade network node；
If it is present meet multiple alarm network nodes of Second Rule described in judging for the described first alarm network node,
And the upper level network node is the failure source network node；
It is described that the warning information is associated, obtain multiple first alarm network sections with same fault source network node
The step of point, specifically further includes：
The warning information is associated, judges whether the multiple alarm network nodes for meeting three sigma rule, wherein, institute
Stating three sigma rule is：One carrying network element of multiple alarm network nodes and same IP bearer networks is physically connected to, and is respectively provided with and is related to
And the warning information to the carrying network element；
If it is present meet multiple alarm network nodes of three sigma rule described in judging for the described first alarm network node,
And the carrying network element is the failure source network node.
2. network node alarm method as described in claim 1, which is characterized in that described to be closed to the warning information
Connection is obtained and specifically further included the step of having multiple the first of same fault source network node to alert network node：
The warning information is associated, judges whether the multiple alarm network nodes for meeting three sigma rule, wherein, institute
Stating three sigma rule is：One carrying network element of multiple alarm network nodes and same IP bearer networks is physically connected to, and is respectively provided with and is related to
And the warning information to the carrying network element；
If it is present meet multiple alarm network nodes of three sigma rule described in judging for the described first alarm network node,
And the carrying network element is the failure source network node.
3. network node alarm method as described in claim 1, which is characterized in that described to be closed to the warning information
Connection further includes after obtaining the step of having multiple the first of same fault source network node to alert network node：
Export the warning information of other alarm network nodes in addition to the described first alarm network node.
4. a kind of network node warning system, which is characterized in that including：
Warning information acquisition module, for obtaining the warning information of all alarm network nodes；
Relating module for being associated to the warning information, obtains multiple first with same fault source network node
Alert network node；
Generation module is alerted, polymerize for the warning information to the multiple first alarm network node, generates an institute
State the new warning information of failure source network node；
First alarm output module, for exporting the new warning information；
Wherein, the relating module includes the first association submodule, and the first association submodule is used for the warning information
It is associated, judges whether the multiple alarm network nodes for meeting the first rule, wherein, first rule is：It is multiple
Alerting network node has same correspondent network node, and is respectively provided with the warning information for being related to the correspondent network node；
If it is present meet multiple alarm network nodes of the first rule described in judging for the described first alarm network node, and institute
Correspondent network node is stated as the failure source network node；
The relating module further includes：
Second association submodule, for being associated the warning information, judges whether to meet the multiple of Second Rule
Network node is alerted, wherein, the Second Rule is：Multiple alarm network nodes have same upper level network node, and
It is respectively provided with the warning information for being related to the upper level network node；If it is present meet the more of Second Rule described in judging
A alarm network node is the described first alarm network node, and the upper level network node is the failure source network section
Point；
The relating module further includes：
3rd association submodule, for being associated the warning information, judges whether to meet the multiple of three sigma rule
Network node is alerted, wherein, the three sigma rule is：One carrying network element of multiple alarm network nodes and same IP bearer networks
It is physically connected to, and is respectively provided with the warning information for being related to the carrying network element；If it is present meet three sigma rule described in judging
Multiple alarm network nodes for described first alarm network node, and it is described carrying network element be the failure source network node.
5. network node warning system as claimed in claim 4, which is characterized in that the relating module further includes：
3rd association submodule, for being associated the warning information, judges whether to meet the multiple of three sigma rule
Network node is alerted, wherein, the three sigma rule is：One carrying network element of multiple alarm network nodes and same IP bearer networks
It is physically connected to, and is respectively provided with the warning information for being related to the carrying network element；If it is present meet three sigma rule described in judging
Multiple alarm network nodes for described first alarm network node, and it is described carrying network element be the failure source network node.
6. network node warning system as claimed in claim 4, which is characterized in that further include：
Second alarm output module, for exporting the announcement of other alarm network nodes in addition to the described first alarm network node
Alert information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310222555.6A CN104244293B (en) | 2013-06-06 | 2013-06-06 | Network node alarm method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310222555.6A CN104244293B (en) | 2013-06-06 | 2013-06-06 | Network node alarm method and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104244293A CN104244293A (en) | 2014-12-24 |
| CN104244293B true CN104244293B (en) | 2018-05-22 |
Family
ID=52231458
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310222555.6A Active CN104244293B (en) | 2013-06-06 | 2013-06-06 | Network node alarm method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104244293B (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105117315B (en) * | 2015-08-06 | 2018-07-20 | 上海携程商务有限公司 | Alarming processing system and method based on CEP |
| CN105183619B (en) * | 2015-09-29 | 2018-03-27 | 北京奇艺世纪科技有限公司 | A kind of system failure method for early warning and system |
| CN113162810A (en) * | 2021-05-14 | 2021-07-23 | 中央军委后勤保障部信息中心 | Event data processing method and device |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1984170A (en) * | 2005-12-15 | 2007-06-20 | 中国移动通信集团公司 | Method for processing network alerting information |
| CN101022366A (en) * | 2007-03-21 | 2007-08-22 | Ut斯达康通讯有限公司 | Trouble correlation analytic system and method |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| ATE547858T1 (en) * | 2005-07-06 | 2012-03-15 | Telecom Italia Spa | METHOD AND SYSTEM FOR IDENTIFYING ERRORS IN COMMUNICATION NETWORKS |
-
2013
- 2013-06-06 CN CN201310222555.6A patent/CN104244293B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1984170A (en) * | 2005-12-15 | 2007-06-20 | 中国移动通信集团公司 | Method for processing network alerting information |
| CN101022366A (en) * | 2007-03-21 | 2007-08-22 | Ut斯达康通讯有限公司 | Trouble correlation analytic system and method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104244293A (en) | 2014-12-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US7043661B2 (en) | Topology-based reasoning apparatus for root-cause analysis of network faults | |
| CN100479385C (en) | Integral maintaining method and system for multi-equipment | |
| DE602004001356T2 (en) | System and method for error diagnosis by means of distributed alarm correlation | |
| CN105991332A (en) | Alarm processing method and device | |
| CN108206757A (en) | It is wirelessly transferred fault warning processing method and processing device | |
| CN104244293B (en) | Network node alarm method and system | |
| JP2002525943A (en) | Interface system for integrated monitoring and management of network devices in telecommunication networks | |
| CN105809299A (en) | Processing method of notification service of service flow management and service flow management engine | |
| Wang et al. | Identification of faulty links in dynamic-routed networks | |
| WO2016061957A1 (en) | Method and apparatus for evaluating service traffic in lte network | |
| US10050853B2 (en) | Neural network learning methods to identify network ports responsible for packet loss or delay | |
| CN111210029A (en) | Device and method for auxiliary analysis of service and related equipment | |
| CN104092577A (en) | Network alarm notifying system and notifying method thereof | |
| CN105790972A (en) | Controller and alarm correlation processing method | |
| CN104468232B (en) | The method and system of network equipments configuration are completed using xml document and mib | |
| CN102412996A (en) | Method for carrying out rapid checking and verification on service information based on XML (extensive makeup language) NE (network element) dynamic script information | |
| CN111262624B (en) | Optical cable fault monitoring method and device | |
| CN110266777A (en) | The robot of intelligent cloud platform alarms and session method | |
| CN106506194A (en) | The method of dissimilar or model device alarm by snmp protocol automatic identification | |
| CN102045186B (en) | Event analysis method and system | |
| CN108667648A (en) | A kind of alarm sequential pattern mining method based on network and time-constrain | |
| CN108921756A (en) | A kind of joint emergency response system, method and computer readable storage medium | |
| CN111045757B (en) | Visual display system and method for IT resource running state and storage medium | |
| CN115865695A (en) | 5G private network resource topology generation method and device based on cross-professional data association | |
| CN106411566A (en) | MIB alarm analysis method and system based on XML technology |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |