CN113835961B - Alarm information monitoring method, device, server and storage medium - Google Patents
Alarm information monitoring method, device, server and storage medium Download PDFInfo
- Publication number
- CN113835961B CN113835961B CN202111118165.5A CN202111118165A CN113835961B CN 113835961 B CN113835961 B CN 113835961B CN 202111118165 A CN202111118165 A CN 202111118165A CN 113835961 B CN113835961 B CN 113835961B
- Authority
- CN
- China
- Prior art keywords
- alarm
- predicted
- time
- alarm information
- determining
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
- G06F11/3006—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3051—Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
- G06F11/324—Display of status information
- G06F11/327—Alarm or error message display
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- Quality & Reliability (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computing Systems (AREA)
- Mathematical Physics (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Alarm Systems (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides an alarm information monitoring method, a device, a server and a storage medium, wherein the method comprises the following steps: inputting the time to be predicted into an alarm quantity prediction model to obtain a predicted alarm quantity corresponding to the time to be predicted, and determining a dynamic time window according to the predicted alarm quantity; and acquiring the actual alarm quantity corresponding to the time to be predicted according to the dynamic time window, and determining the alarm information on-off result corresponding to the time to be predicted according to the actual alarm quantity. And predicting a dynamic time window corresponding to the time to be predicted by the trained warning quantity prediction model, and acquiring an actual warning quantity corresponding to the time to be predicted by the dynamic time window to judge the warning information on-off result corresponding to the time to be predicted, thereby improving the accuracy of warning information on-off monitoring.
Description
Technical Field
The present invention relates to the field of wireless communications technologies, and in particular, to a method, an apparatus, a server, and a storage medium for monitoring alarm information.
Background
The network operation system comprises a plurality of network elements, and the network management server is responsible for collecting the alarm information of the network elements and forwarding the alarm information to the alarm information management server, so that the alarm information management server monitors the operation conditions of all the network elements in the network according to the collected alarm information.
In the prior art, in order to ensure the accuracy of network monitoring, a heartbeat monitoring mechanism at two sides of an interface is generally adopted to monitor the on-off condition of alarm information transmission. By periodically sending heartbeat messages and monitoring the receiving condition of opposite side messages through programs on two sides of interfaces of the network management server and the alarm information management server, corresponding alarms are generated if the opposite side messages do not arrive according to the agreed time interval or mode, and faults of the alarm information transmission terminal are found in time.
However, in the prior art, in the network operation process, due to the hardware limitation of some network element devices, the network element devices cannot provide a special heartbeat monitoring mechanism interface, so that the heartbeat monitoring mechanism cannot be used for monitoring the interruption of the transmission of the alarm information to all the network elements, and the accuracy of on-off monitoring of the alarm information is affected.
Disclosure of Invention
The invention provides an alarm information monitoring method, an alarm information monitoring device, a server and a storage medium.
In a first aspect, the present invention provides a method for monitoring alarm information, including:
inputting the time to be predicted into an alarm quantity prediction model to obtain a predicted alarm quantity corresponding to the time to be predicted, wherein the alarm quantity prediction model is obtained according to historical alarm data training, and the historical alarm data comprises time identifiers and alarm quantities corresponding to each time identifier; determining a dynamic time window according to the predicted alarm quantity; and acquiring the actual alarm quantity corresponding to the time to be predicted according to the dynamic time window, and determining an alarm information on-off result corresponding to the time to be predicted according to the actual alarm quantity.
In one possible design, the obtaining, according to the dynamic time window, the actual alarm amount corresponding to the time to be predicted includes: determining all prediction time periods according to the time to be predicted and the dynamic time window; acquiring the alarm quantity corresponding to each prediction time period, and determining the actual alarm quantity corresponding to the time to be predicted according to the alarm quantity corresponding to all the time periods; correspondingly, the determining the alarm information on-off result corresponding to the time to be predicted according to the actual alarm quantity comprises the following steps: and determining the on-off result of the alarm information of each predicted time period according to the alarm quantity corresponding to each predicted time period.
In one possible design, the determining the alarm information on-off result of each predicted time period according to the alarm amount corresponding to each predicted time period includes: if the alarm quantity corresponding to the predicted time period is not zero, judging that the on-off result of the alarm information in the predicted time period is normal; and if the alarm quantity corresponding to the predicted time period is zero, judging that the on-off result of the alarm information in the predicted time period is abnormal.
In one possible design, before the time to be predicted is input into the alarm quantity prediction model to obtain the predicted alarm quantity corresponding to the time to be predicted, the method further includes: obtaining a target alarm information type and determining a target alarm quantity prediction model corresponding to the target alarm information type; inputting the time to be predicted into an alarm quantity prediction model to obtain a predicted alarm quantity corresponding to the time to be predicted, wherein the method comprises the following steps: and inputting the time to be predicted into the target alarm quantity prediction model to obtain the predicted alarm quantity corresponding to the target alarm information type, wherein the predicted alarm quantity corresponds to the time to be predicted.
In one possible design, before the determining the target alarm amount prediction model corresponding to the target alarm information type, the method further includes: acquiring historical alarm data corresponding to the alarm information type from a database according to the alarm information type; training a preset model according to the historical alarm data corresponding to the alarm information type to obtain an alarm quantity prediction model corresponding to the alarm information type.
In one possible design, the alert information types include a general type field and a specific type field; the general type field contains at least one of a network element name, a header, an occurrence time, and a clearing time, and the specific type field contains at least one of a region identification, a network element type, a client name, and a circuit number.
In one possible design, the determining a dynamic time window according to the predicted alert quantity includes: and determining a predicted alarm period according to the predicted alarm quantity, and determining a dynamic time window according to the predicted alarm period.
In one possible design, the determining a dynamic time window according to the predicted alert period includes: and determining a dynamic time window according to the preset percentage and the predicted alarm period.
In one possible design, after the alarm information on-off result corresponding to the time to be predicted is determined according to the actual alarm amount, the method further includes: and sending the alarm information on-off result corresponding to the time to be predicted to a display terminal, so that the display terminal generates a monitoring interface according to an interface definition rule, and a manager manages the on-off condition of alarm data according to the monitoring interface.
In a second aspect, the present invention provides an alarm information monitoring apparatus, including: the input module is used for inputting the time to be predicted into the alarm quantity prediction model to obtain the predicted alarm quantity corresponding to the time to be predicted, wherein the alarm quantity prediction model is obtained according to the training of historical alarm data, and the historical alarm data comprises time identifiers and alarm quantities corresponding to each time identifier; the determining module is used for determining a dynamic time window according to the predicted alarm quantity; the acquisition module is used for acquiring the actual alarm quantity corresponding to the time to be predicted according to the dynamic time window, and determining the alarm information on-off result corresponding to the time to be predicted according to the actual alarm quantity.
In a third aspect, the present invention provides a server comprising: at least one processor and memory;
the memory stores computer-executable instructions;
the at least one processor executes computer-executable instructions stored in the memory, causing the at least one processor to perform the alert information monitoring method as described above in the first aspect and the various possible designs of the first aspect.
In a fourth aspect, the present invention provides a computer storage medium, in which computer-executable instructions are stored, which when executed by a processor, implement the alarm information monitoring method according to the first aspect and the various possible designs of the first aspect.
According to the alarm information monitoring method, the device, the server and the storage medium, the predicted alarm quantity corresponding to the time to be predicted is predicted through the trained alarm quantity prediction model, the dynamic time window is determined according to the predicted alarm quantity, the actual alarm quantity corresponding to the time to be predicted is obtained through the dynamic time window, the alarm information on-off result corresponding to the time to be predicted is judged, and the alarm information on-off monitoring accuracy is improved.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions of the prior art, the drawings that are needed in the embodiments or the description of the prior art will be briefly described below, it will be obvious that the drawings in the following description are some embodiments of the present invention, and that other drawings can be obtained according to these drawings without inventive effort to a person skilled in the art.
Fig. 1 is a schematic diagram of an application scenario of an alarm information monitoring method provided by an embodiment of the present invention;
FIG. 2 is a flowchart of a method for monitoring alarm information according to an embodiment of the present invention;
FIG. 3 is a second flowchart of an alarm information monitoring method according to an embodiment of the present invention;
FIG. 4 is a schematic structural diagram of an alarm information monitoring device according to an embodiment of the present invention;
fig. 5 is a schematic hardware structure of a server according to an embodiment of the present invention.
Detailed Description
For the purpose of making the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention, and it is apparent that the described embodiments are some embodiments of the present invention, but not all embodiments of the present invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
The collection of alarm information in a network operation system is generally performed through unified comprehensive network management and retrograde processing. The alarm information collected by the comprehensive network management system has complex sources and more related layers, and a typical network operation system structure comprises a plurality of network elements, a network management server and an alarm information management server from bottom to top. The network management server is responsible for collecting the alarm information of the network elements and transmitting the alarm information to the alarm information management server, and the alarm information management server monitors the operation conditions of all the network elements in the network according to the collected alarm information. Problems can occur in all links in the whole process, and accordingly the problem links and the alarm acquisition of downstream equipment thereof are interrupted. In the prior art, in order to discover the on-off condition of the alarm in time, the current alarm on-off detection technology adopts a heartbeat detection mechanism at two sides of an interface, namely, programs at two sides of the interface periodically send heartbeat messages and monitor the receiving condition of opposite side messages, and if the opposite side messages do not arrive according to a stipulated time interval or mode, corresponding alarms are generated. However, in the prior art, in the network operation process, due to the hardware limitation of some network element devices, the network element devices cannot provide an interface dedicated to the heartbeat monitoring mechanism, so that the heartbeat monitoring mechanism cannot be used for monitoring the interruption of the alarm information transmission of all the network elements, and the accuracy of network monitoring is affected.
In order to solve the technical problems, the embodiment of the invention provides the following technical scheme that the predicted alarm quantity corresponding to the time to be predicted is predicted by the trained alarm quantity prediction model, a dynamic time window is determined according to the predicted alarm quantity, the actual alarm quantity corresponding to the time to be predicted is obtained through the dynamic time window, and the alarm information on-off result corresponding to the time to be predicted is judged, so that the accuracy of alarm information on-off monitoring is improved. The following will explain in detail the embodiments.
Fig. 1 is a schematic diagram of an application scenario of an alarm information monitoring method according to an embodiment of the present invention. As shown in fig. 1, the network operation system includes a plurality of network elements, a network management server, and an alarm information management server. The network management server is responsible for collecting the alarm information of the network elements and transmitting the alarm information to the alarm information management server, and the alarm information management server monitors the operation conditions of all the network elements in the network according to the collected alarm information.
Fig. 2 is a schematic flow chart of an alarm information monitoring method according to an embodiment of the present invention, where the execution subject of the embodiment may be the alarm information management server in the embodiment shown in fig. 1, and the embodiment is not limited herein. As shown in fig. 2, the method includes:
s201: and inputting the time to be predicted into an alarm quantity prediction model to obtain a predicted alarm quantity corresponding to the time to be predicted, wherein the alarm quantity prediction model is obtained according to historical alarm data training, and the historical alarm data comprises time identifiers and alarm quantities corresponding to the time identifiers.
In the embodiment of the invention, a machine learning model is established by using the acquired historical data and the selected algorithm, so that the trained model can predict the acquired alarm amount. Specifically, the historical alarm data includes time identifiers and alarm amounts corresponding to each time identifier. The database is queried, the alarm data quantity of each 1 hour within 15 days of history is obtained and is stored as a data set to serve as input data, namely 360 pieces of data are generated as history alarm data after the establishment is completed, and the neural network model is trained by utilizing the history alarm data. Specifically, the time mark is used as a characteristic of the model, and the actual warning quantity is used as a predicted label, so that the trained model can realize the purpose of predicting the warning quantity at a specific moment. After the trained warning amount prediction model is obtained, the time to be predicted is input into the warning amount prediction model to obtain the predicted warning amount corresponding to the time to be predicted.
S202: and determining a dynamic time window according to the predicted alarm quantity.
In the embodiment of the invention, for example, a dynamic time window corresponding to the predicted time can be determined according to the predicted alarm amount corresponding to the time to be predicted, that is, at least one piece of alarm information can be received in the dynamic time window. For example, a predicted alert period may be determined based on the predicted alert amount and a dynamic time window may be determined based on the predicted alert period. Specifically, if the time to be predicted obtained according to S201 is 8: the alarm amount of 00 is 6, i.e. predicted 8:00 to 9: if the number of alarm information within one hour of 00 is 6, the predicted alarm period is determined to be 10 minutes, and if the dynamic time window is determined to be 10 minutes according to the predicted alarm period. If the dynamic time window is determined to be 10 minutes, it can be determined that if the transmission process of the alarm information has no problem, the process goes from 8: at least one alarm message can be received within 10 minutes of 00. Although the transmission of the alarm information is not necessarily uniformly dispersed at a plurality of moments, the model trained according to the historical data of the alarm information transmission can be matched with the rule and the characteristics of the alarm information transmission, namely, the dynamic time window determined according to the prediction model can be used for judging the transmission on-off condition of the alarm information, namely, the alarm information is not received in the dynamic time window, and the possibility of failure occurrence of the current alarm information transmission is high.
Illustratively, the dynamic time window is also determined according to a preset percentage and a predicted alert period, and illustratively, the preset percentage is set to 15%, and then the dynamic time window is determined to be 11 minutes and 30 seconds according to the preset percentage of 15% and the predicted alert period of 10 minutes.
S203: and acquiring the actual alarm quantity corresponding to the time to be predicted according to the dynamic time window, and determining the alarm information on-off result corresponding to the time to be predicted according to the actual alarm quantity.
In the embodiment of the invention, illustratively, all the prediction time periods are determined according to the time to be predicted and the dynamic time window; and acquiring the alarm quantity corresponding to each prediction time period, and determining the actual alarm quantity corresponding to the time to be predicted according to the alarm quantity corresponding to all the time periods. And determining the on-off result of the alarm information in each predicted time period according to the alarm quantity corresponding to each predicted time period.
Specifically, from 8:00 starts, and monitors the alarm amount received every 10 minutes to make statistics, namely statistics 8:00 to 9: alarm amount in 6 dynamic time windows after 00. If the alarm amount corresponding to the predicted time period is not zero, judging that the on-off result of the alarm information in the predicted time period is normal; if the alarm quantity corresponding to the predicted time period is zero, judging that the on-off result of the alarm information in the predicted time period is abnormal. If no alarm information is received in the dynamic time window, the possibility of failure occurrence of the transmission of the current alarm information is judged to be higher.
According to the alarm information monitoring method, the prediction model capable of predicting the alarm amount is obtained through training according to the historical alarm data, the predicted alarm amount corresponding to the time to be predicted is obtained by inputting the time to be predicted into the alarm amount prediction model, the dynamic time window is determined according to the predicted alarm amount, the time window is the minimum time interval for collecting alarm information, namely, the alarm information can be collected in the time interval by default, the actual alarm amount corresponding to the time to be predicted is obtained according to the dynamic time window, and finally the alarm information on-off result corresponding to the time to be predicted is determined according to the actual alarm amount, so that the accuracy for judging the on-off condition of the alarm information is improved.
Fig. 3 is a schematic flow chart of an alarm information monitoring method according to an embodiment of the present invention. Based on the embodiment provided in fig. 2, the embodiment of the invention describes another specific implementation method of the alarm information monitoring method in detail. As shown in fig. 3, the method includes:
s301: and acquiring historical alarm data corresponding to the alarm information type from the database according to the alarm information type.
Illustratively, the alert information type includes a general type field and a specific type field; the general type field contains at least one of a network element name, a header, an occurrence time, a clear time, and the specific type field contains at least one of a region identification, a network element type, a client name, and a circuit number.
In the embodiment of the invention, the meanings of the alarm information sent out by different network elements are different. By counting the types of the alarm information, early warning can be carried out on the on-off conditions of various different alarm information. Illustratively, the alert information type includes a general type field and a specific type field; the general type field contains at least one of a network element name, a header, an occurrence time, a clear time, and the specific type field contains at least one of a region identification, a network element type, a client name, and a circuit number. The historical alarm data corresponding to the alarm information type can be obtained by screening the alarm information type from the historical data stored in the database.
S302: training the preset model according to the historical alarm data corresponding to the alarm information type to obtain an alarm quantity prediction model corresponding to the alarm information type.
On the basis that the historical alarm data corresponding to different alarm information types are obtained in S301, training the model by utilizing the historical alarm data corresponding to the different alarm information types to obtain an alarm quantity prediction model corresponding to the different alarm information types.
S303: and obtaining the target alarm information type and determining a target alarm quantity prediction model corresponding to the target alarm information type.
In the embodiment of the invention, an upper computer interface is set in the client device for receiving the target alarm information type corresponding to the network element to be monitored, which is input by the user. After the alarm quantity prediction models corresponding to all the alarm information types are obtained, the target alarm information types to be monitored, which are sent by the client equipment, are received, and the target alarm quantity prediction models corresponding to the target alarm information types are determined.
S304: and inputting the time to be predicted into a target alarm quantity prediction model to obtain a predicted alarm quantity corresponding to the type of the target alarm information, wherein the predicted alarm quantity corresponds to the time to be predicted.
S305: and determining a dynamic time window according to the predicted alarm quantity.
S306: and acquiring the actual alarm quantity corresponding to the time to be predicted according to the dynamic time window, and determining the alarm information on-off result corresponding to the time to be predicted according to the actual alarm quantity.
In the embodiment of the present invention, the steps S304 to S306 correspond to the steps S201 to S203, and are not described herein.
According to the alarm information monitoring method provided by the embodiment, the model is trained by using the historical alarm data corresponding to different alarm information types, so that the alarm quantity prediction model corresponding to the different alarm information types is obtained, the prediction of the on-off condition of the different alarm information can be realized by using the alarm quantity prediction model corresponding to the different alarm information types, and the universality of the alarm information monitoring method is improved.
In one possible implementation manner, the on-off result of the alarm information corresponding to the time to be predicted is sent to the display terminal, so that the display terminal generates a monitoring interface according to the interface definition rule, and a manager manages the on-off condition of the alarm data according to the monitoring interface.
Specifically, if the alarm amount corresponding to the predicted time period is not zero, displaying a green icon on the monitoring interface, wherein the on-off result of the alarm information in the predicted time period is normal; if the alarm quantity corresponding to the predicted time period is zero, displaying a red icon on the monitoring interface, wherein the red icon indicates that the on-off result of the alarm information in the predicted time period is abnormal, and the transmission of the current alarm information fails.
According to the alarm information monitoring method, the alarm information on-off results are represented by icons with different colors on the monitoring interface, so that the visual alarm information monitoring interface is provided, and the alarm information monitoring efficiency is improved.
Fig. 4 is a schematic structural diagram of an alarm information monitoring device according to an embodiment of the present invention. As shown in fig. 4, the alarm information monitoring apparatus includes: an input module 401, a determination module 402 and an acquisition module 403.
The input module 401 is configured to input a time to be predicted into an alarm amount prediction model to obtain a predicted alarm amount corresponding to the time to be predicted, where the alarm amount prediction model is obtained by training historical alarm data, and the historical alarm data includes time identifiers and alarm amounts corresponding to each time identifier;
a determining module 402, configured to determine all target base stations included in each target grid according to a preset grid map and the N target grid identifiers, obtain base station information of all target base stations, and determine all base stations to be opened included in each grid according to the base station information of each target base station, where the preset grid map is a map including M square grids, and M is a positive integer;
the obtaining module 403 is configured to obtain an actual alarm amount corresponding to the time to be predicted according to the dynamic time window, and determine an alarm information on-off result corresponding to the time to be predicted according to the actual alarm amount.
In a possible implementation manner, the obtaining module 403 is specifically configured to determine all prediction time periods according to the time to be predicted and the dynamic time window; the alarm quantity corresponding to each prediction time period is obtained, the actual alarm quantity corresponding to the time to be predicted is determined according to the alarm quantity corresponding to all the time periods, and the alarm information on-off result of each prediction time period is determined according to the alarm quantity corresponding to each prediction time period.
In a possible implementation manner, the obtaining module 403 is specifically configured to determine that the on-off result of the alarm information in the predicted time period is normal if the alarm amount corresponding to the predicted time period is not zero; and if the alarm quantity corresponding to the predicted time period is zero, judging that the on-off result of the alarm information in the predicted time period is abnormal.
In a possible implementation manner, the alarm information monitoring device further includes an obtaining module, where the obtaining module is specifically configured to obtain a target alarm information type, determine a target alarm amount prediction model corresponding to the target alarm information type, and correspondingly, the input module 401 is specifically configured to input a time to be predicted into the target alarm amount prediction model, and obtain a predicted alarm amount corresponding to the target alarm information type, where the predicted alarm amount corresponds to the time to be predicted.
In one possible implementation manner, the alarm information monitoring device further includes a training module, where the training module is specifically configured to obtain, from a database, historical alarm data corresponding to an alarm information type according to the alarm information type; training a preset model according to the historical alarm data corresponding to the alarm information type to obtain an alarm quantity prediction model corresponding to the alarm information type.
In one possible implementation, the determining module 402 is specifically configured to determine a predicted alert period according to the predicted alert amount, and determine a dynamic time window according to the predicted alert period.
In one possible implementation, the determining module 402 is specifically configured to determine a dynamic time window according to a preset percentage and the predicted alert period.
In a possible implementation manner, the alarm information monitoring device further includes a sending module, where the sending module is specifically configured to send an alarm information on-off result corresponding to the time to be predicted to a display terminal, so that the display terminal generates a monitoring interface according to an interface definition rule, and a manager manages on-off conditions of alarm data according to the monitoring interface.
The device provided in this embodiment may be used to implement the technical solution of the foregoing method embodiment, and its implementation principle and technical effects are similar, and this embodiment will not be described herein again.
Fig. 5 is a schematic hardware structure of a server according to an embodiment of the present invention. As shown in fig. 5, the server of the present embodiment includes: a processor 501 and a memory 502; wherein the method comprises the steps of
A memory 502 for storing computer-executable instructions;
the processor 501 is configured to execute computer-executable instructions stored in the memory to implement the steps executed by the server in the above embodiment. Reference may be made in particular to the relevant description of the embodiments of the method described above.
Alternatively, the memory 502 may be separate or integrated with the processor 501.
When the memory 502 is provided separately, the server further comprises a bus 503 for connecting said memory 502 and the processor 501.
The embodiment of the invention also provides a computer storage medium, wherein computer execution instructions are stored in the computer storage medium, and when a processor executes the computer execution instructions, the alarm information monitoring method is realized.
The embodiment of the invention also provides a computer program product, which comprises a computer program, wherein the computer program realizes the alarm information monitoring method when being executed by a processor.
In the several embodiments provided by the present invention, it should be understood that the disclosed apparatus and method may be implemented in other ways. For example, the above-described embodiments of the apparatus are merely illustrative, and for example, the division of the modules is merely a logical function division, and there may be additional divisions when actually implemented, for example, multiple modules may be combined or integrated into another system, or some features may be omitted or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be an indirect coupling or communication connection via some interfaces, devices or modules, which may be in electrical, mechanical, or other forms.
The modules described as separate components may or may not be physically separate, and components shown as modules may or may not be physical units, may be located in one place, or may be distributed over multiple network units. Some or all of the modules may be selected according to actual needs to implement the solution of this embodiment.
In addition, each functional module in the embodiments of the present invention may be integrated in one processing unit, or each module may exist alone physically, or two or more modules may be integrated in one unit. The units formed by the modules can be realized in a form of hardware or a form of hardware and software functional units.
The integrated modules, which are implemented in the form of software functional modules, may be stored in a computer readable storage medium. The software functional modules described above are stored in a storage medium and include instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or processor to perform some of the steps of the methods described in various embodiments of the present application.
It should be understood that the above processor may be a central processing unit (Central Processing Unit, abbreviated as CPU), but may also be other general purpose processors, digital signal processors (Digital Signal Processor, abbreviated as DSP), application specific integrated circuits (Application Specific Integrated Circuit, abbreviated as ASIC), etc. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of a method disclosed in connection with the present invention may be embodied directly in a hardware processor for execution, or in a combination of hardware and software modules in a processor for execution.
The memory may comprise a high-speed RAM memory, and may further comprise a non-volatile memory NVM, such as at least one magnetic disk memory, and may also be a U-disk, a removable hard disk, a read-only memory, a magnetic disk or optical disk, etc.
The bus may be an industry standard architecture (Industry Standard Architecture, ISA) bus, an external device interconnect (Peripheral Component Interconnect, PCI) bus, or an extended industry standard architecture (Extended Industry Standard Architecture, EISA) bus, among others. The buses may be divided into address buses, data buses, control buses, etc. For ease of illustration, the buses in the drawings of the present application are not limited to only one bus or one type of bus.
The storage medium may be implemented by any type or combination of volatile or nonvolatile memory devices such as Static Random Access Memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic or optical disk. A storage media may be any available media that can be accessed by a general purpose or special purpose computer.
An exemplary storage medium is coupled to the processor such the processor can read information from, and write information to, the storage medium. In the alternative, the storage medium may be integral to the processor. The processor and the storage medium may reside in an application specific integrated circuit (Application Specific Integrated Circuits, ASIC for short). It is also possible that the processor and the storage medium reside as discrete components in an electronic device or a master device.
Those of ordinary skill in the art will appreciate that: all or part of the steps for implementing the method embodiments described above may be performed by hardware associated with program instructions. The foregoing program may be stored in a computer readable storage medium. The program, when executed, performs steps including the method embodiments described above; and the aforementioned storage medium includes: various media that can store program code, such as ROM, RAM, magnetic or optical disks.
Finally, it should be noted that: the above embodiments are only for illustrating the technical solution of the present invention, and not for limiting the same; although the invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical scheme described in the foregoing embodiments can be modified or some or all of the technical features thereof can be replaced by equivalents; such modifications and substitutions do not depart from the spirit of the invention.
Claims (8)
1. The alarm information monitoring method is characterized by comprising the following steps:
inputting the time to be predicted into an alarm quantity prediction model to obtain a predicted alarm quantity corresponding to the time to be predicted, wherein the alarm quantity prediction model is obtained according to historical alarm data training, and the historical alarm data comprises time identifiers and alarm quantities corresponding to each time identifier;
determining a dynamic time window according to the predicted alarm quantity;
acquiring an actual alarm quantity corresponding to the time to be predicted according to the dynamic time window, and determining an alarm information on-off result corresponding to the time to be predicted according to the actual alarm quantity;
the step of obtaining the actual alarm quantity corresponding to the time to be predicted according to the dynamic time window comprises the following steps:
determining all prediction time periods according to the time to be predicted and the dynamic time window;
acquiring the alarm quantity corresponding to each prediction time period, and determining the actual alarm quantity corresponding to the time to be predicted according to the alarm quantity corresponding to all the time periods;
correspondingly, the determining the alarm information on-off result corresponding to the time to be predicted according to the actual alarm quantity comprises the following steps:
determining an alarm information on-off result of each predicted time period according to the alarm quantity corresponding to each predicted time period;
the determining the alarm information on-off result of each predicted time period according to the alarm quantity corresponding to each predicted time period comprises the following steps:
if the alarm quantity corresponding to the predicted time period is not zero, judging that the on-off result of the alarm information in the predicted time period is normal;
if the alarm quantity corresponding to the predicted time period is zero, judging that the on-off result of the alarm information in the predicted time period is abnormal;
the determining a dynamic time window according to the predicted alarm quantity comprises the following steps:
and determining a predicted alarm period according to the predicted alarm quantity, and determining a dynamic time window according to a preset percentage and the predicted alarm period.
2. The method according to claim 1, further comprising, before the inputting the time to be predicted into the alarm amount prediction model to obtain the predicted alarm amount corresponding to the time to be predicted:
obtaining a target alarm information type and determining a target alarm quantity prediction model corresponding to the target alarm information type;
inputting the time to be predicted into an alarm quantity prediction model to obtain a predicted alarm quantity corresponding to the time to be predicted, wherein the method comprises the following steps:
and inputting the time to be predicted into the target alarm quantity prediction model to obtain the predicted alarm quantity corresponding to the target alarm information type, wherein the predicted alarm quantity corresponds to the time to be predicted.
3. The method of claim 2, further comprising, prior to said determining the target alert quantity prediction model for the target alert information type:
acquiring historical alarm data corresponding to the alarm information type from a database according to the alarm information type;
training a preset model according to the historical alarm data corresponding to the alarm information type to obtain an alarm quantity prediction model corresponding to the alarm information type.
4. The method of claim 3, wherein the alert information type includes a general type field and a specific type field;
the general type field contains at least one of a network element name, a header, an occurrence time, and a clearing time, and the specific type field contains at least one of a region identification, a network element type, a client name, and a circuit number.
5. The method according to any one of claims 1 to 4, further comprising, after the determining, according to the actual alarm amount, an alarm information on-off result corresponding to the time to be predicted:
and sending the alarm information on-off result corresponding to the time to be predicted to a display terminal, so that the display terminal generates a monitoring interface according to an interface definition rule, and a manager manages the on-off condition of alarm data according to the monitoring interface.
6. An alarm information monitoring apparatus, comprising:
the input module is used for inputting the time to be predicted into the alarm quantity prediction model to obtain the predicted alarm quantity corresponding to the time to be predicted, wherein the alarm quantity prediction model is obtained according to the training of historical alarm data, and the historical alarm data comprises time identifiers and alarm quantities corresponding to each time identifier;
the determining module is used for determining a dynamic time window according to the predicted alarm quantity;
the acquisition module is used for acquiring the actual alarm quantity corresponding to the time to be predicted according to the dynamic time window, and determining an alarm information on-off result corresponding to the time to be predicted according to the actual alarm quantity;
the acquisition module is specifically configured to determine all prediction time periods according to the time to be predicted and the dynamic time window; acquiring the alarm quantity corresponding to each prediction time period, and determining the actual alarm quantity corresponding to the time to be predicted according to the alarm quantity corresponding to all the time periods; determining an alarm information on-off result of each predicted time period according to the alarm quantity corresponding to each predicted time period;
the acquisition module is specifically configured to determine that an alarm information on-off result of the predicted time period is normal if an alarm amount corresponding to the predicted time period is not zero; if the alarm quantity corresponding to the predicted time period is zero, judging that the on-off result of the alarm information in the predicted time period is abnormal;
the determining module is specifically configured to determine a predicted alarm period according to the predicted alarm amount, and determine a dynamic time window according to a preset percentage and the predicted alarm period.
7. A server, comprising: at least one processor and memory;
the memory stores computer-executable instructions;
the at least one processor executing computer-executable instructions stored in the memory causes the at least one processor to perform the alarm information monitoring method of any one of claims 1 to 5.
8. A computer storage medium having stored therein computer executable instructions which, when executed by a processor, implement the alarm information monitoring method of any one of claims 1 to 5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111118165.5A CN113835961B (en) | 2021-09-23 | 2021-09-23 | Alarm information monitoring method, device, server and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111118165.5A CN113835961B (en) | 2021-09-23 | 2021-09-23 | Alarm information monitoring method, device, server and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113835961A CN113835961A (en) | 2021-12-24 |
| CN113835961B true CN113835961B (en) | 2023-05-16 |
Family
ID=78969675
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111118165.5A Active CN113835961B (en) | 2021-09-23 | 2021-09-23 | Alarm information monitoring method, device, server and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113835961B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117455209B (en) * | 2023-12-26 | 2024-03-12 | 山东智慧云通网络科技有限公司 | Intelligent traffic police management service system and method based on geographic position |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2006277115A (en) * | 2005-03-28 | 2006-10-12 | Fujitsu Ten Ltd | Abnormality detection program and abnormality detection method |
| CN101557384A (en) * | 2008-04-09 | 2009-10-14 | 北京闻言科技有限公司 | Flexible application program exception management method |
| CN106034051A (en) * | 2015-03-12 | 2016-10-19 | 腾讯科技（深圳）有限公司 | Network monitoring data processing method and network monitoring data processing device |
| WO2016166900A1 (en) * | 2015-04-17 | 2016-10-20 | 三菱電機株式会社 | Information processing device, information processing method, and information processing program |
| CN107402835A (en) * | 2017-07-25 | 2017-11-28 | 广东欧珀移动通信有限公司 | Abnormality eliminating method, device and the storage medium and mobile terminal of application program |
| CN107741902A (en) * | 2016-12-23 | 2018-02-27 | 腾讯科技（深圳）有限公司 | Program application detection method and program application detection means |
| CN110083476A (en) * | 2019-04-23 | 2019-08-02 | 努比亚技术有限公司 | Application control method, terminal and computer readable storage medium |
| CN111124840A (en) * | 2019-12-02 | 2020-05-08 | 北京天元创新科技有限公司 | Method and device for predicting alarm in business operation and maintenance and electronic equipment |
| WO2020259421A1 (en) * | 2019-06-28 | 2020-12-30 | 深圳前海微众银行股份有限公司 | Method and apparatus for monitoring service system |
| WO2021003923A1 (en) * | 2019-07-08 | 2021-01-14 | 平安科技（深圳）有限公司 | Freeswitch monitoring method, device, storage medium, and apparatus |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8745759B2 (en) * | 2011-01-31 | 2014-06-03 | Bank Of America Corporation | Associated with abnormal application-specific activity monitoring in a computing network |
| CN108804299B (en) * | 2017-04-26 | 2023-04-07 | 腾讯科技（深圳）有限公司 | Application program exception handling method and device |
-
2021
- 2021-09-23 CN CN202111118165.5A patent/CN113835961B/en active Active
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2006277115A (en) * | 2005-03-28 | 2006-10-12 | Fujitsu Ten Ltd | Abnormality detection program and abnormality detection method |
| CN101557384A (en) * | 2008-04-09 | 2009-10-14 | 北京闻言科技有限公司 | Flexible application program exception management method |
| CN106034051A (en) * | 2015-03-12 | 2016-10-19 | 腾讯科技（深圳）有限公司 | Network monitoring data processing method and network monitoring data processing device |
| WO2016166900A1 (en) * | 2015-04-17 | 2016-10-20 | 三菱電機株式会社 | Information processing device, information processing method, and information processing program |
| CN107741902A (en) * | 2016-12-23 | 2018-02-27 | 腾讯科技（深圳）有限公司 | Program application detection method and program application detection means |
| CN107402835A (en) * | 2017-07-25 | 2017-11-28 | 广东欧珀移动通信有限公司 | Abnormality eliminating method, device and the storage medium and mobile terminal of application program |
| CN110083476A (en) * | 2019-04-23 | 2019-08-02 | 努比亚技术有限公司 | Application control method, terminal and computer readable storage medium |
| WO2020259421A1 (en) * | 2019-06-28 | 2020-12-30 | 深圳前海微众银行股份有限公司 | Method and apparatus for monitoring service system |
| WO2021003923A1 (en) * | 2019-07-08 | 2021-01-14 | 平安科技（深圳）有限公司 | Freeswitch monitoring method, device, storage medium, and apparatus |
| CN111124840A (en) * | 2019-12-02 | 2020-05-08 | 北京天元创新科技有限公司 | Method and device for predicting alarm in business operation and maintenance and electronic equipment |
Non-Patent Citations (1)
| Title |
|---|
| 基于Zabbix的应用监控系统;李晓晖;;价值工程(第28期);260-262 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113835961A (en) | 2021-12-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10585774B2 (en) | Detection of misbehaving components for large scale distributed systems | |
| US20180239658A1 (en) | Programatically classifying alarms from distributed applications | |
| CN104796273A (en) | Method and device for diagnosing root of network faults | |
| US10983855B2 (en) | Interface for fault prediction and detection using time-based distributed data | |
| CN110362455B (en) | Data processing method and data processing device | |
| CN103220173A (en) | Alarm monitoring method and alarm monitoring system | |
| CN101206569A (en) | Method, system and program product for dynamically identifying components contributing to service degradation | |
| CN112395156A (en) | Fault warning method and device, storage medium and electronic equipment | |
| CN113176978A (en) | Monitoring method, system and device based on log file and readable storage medium | |
| CN114064196A (en) | System and method for predictive assurance | |
| CN109992473A (en) | Monitoring method, device, equipment and the storage medium of application system | |
| CN112380089A (en) | Data center monitoring and early warning method and system | |
| WO2019057363A1 (en) | Apparatus and method for rare failure prediction | |
| CN113037562A (en) | Gateway fault assessment method and device and server | |
| CN113835961B (en) | Alarm information monitoring method, device, server and storage medium | |
| CN115860729A (en) | IT operation and maintenance integrated management system | |
| CN109818808B (en) | Fault diagnosis method and device and electronic equipment | |
| CN112860504A (en) | Monitoring method and device, computer storage medium and electronic equipment | |
| CN106878096B (en) | VNF state detection notification method, device and system | |
| CN114328107A (en) | Monitoring method and system for optomagnetic fusion storage server cluster and electronic equipment | |
| CN102308309A (en) | Technologies for mapping a set of criteria | |
| CN113010375B (en) | Equipment alarm method and related equipment | |
| CN112131090B (en) | Service system performance monitoring method, device, equipment and medium | |
| CN114595135A (en) | Log data processing method, device, equipment, storage medium and program product | |
| US10917203B2 (en) | Estimate bit error rates of network cables |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |