CN114500229B - Network alarm positioning and analyzing method based on space-time information - Google Patents
Network alarm positioning and analyzing method based on space-time information Download PDFInfo
- Publication number
- CN114500229B CN114500229B CN202111657985.1A CN202111657985A CN114500229B CN 114500229 B CN114500229 B CN 114500229B CN 202111657985 A CN202111657985 A CN 202111657985A CN 114500229 B CN114500229 B CN 114500229B
- Authority
- CN
- China
- Prior art keywords
- alarm
- alarms
- root
- time
- trees
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 41
- 239000013598 vector Substances 0.000 claims description 28
- 230000002457 bidirectional effect Effects 0.000 claims description 18
- 238000004364 calculation method Methods 0.000 claims description 16
- 238000004458 analytical method Methods 0.000 claims description 11
- 238000007781 pre-processing Methods 0.000 claims description 4
- 230000001960 triggered effect Effects 0.000 claims description 3
- 238000012545 processing Methods 0.000 abstract description 15
- 238000004891 communication Methods 0.000 description 9
- 238000012423 maintenance Methods 0.000 description 4
- 230000007547 defect Effects 0.000 description 3
- 238000012544 monitoring process Methods 0.000 description 3
- 230000003287 optical effect Effects 0.000 description 3
- 230000009286 beneficial effect Effects 0.000 description 2
- 230000008030 elimination Effects 0.000 description 2
- 238000003379 elimination reaction Methods 0.000 description 2
- 230000002950 deficient Effects 0.000 description 1
- 210000001503 joint Anatomy 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000003672 processing method Methods 0.000 description 1
- 238000012216 screening Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/22—Indexing; Data structures therefor; Storage structures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/24—Querying
- G06F16/245—Query processing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0604—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
- H04L41/0609—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time based on severity or priority
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
- H04L41/0636—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis based on a decision tree analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
Abstract
The invention provides a network alarm positioning and analyzing method based on space-time information. The multiple alarms in the alarm database are sequenced according to the alarm time, and the association relation between every two alarms in the alarm database is calculated and analyzed. The alarm with the earliest time is preferentially selected and defined as a root alarm, other alarms associated with the alarm with the earliest time are combined to form an alarm tree, and the alarms in the database are repeatedly combined to form the alarm tree. And analyzing and comparing root alarms in the plurality of alarm trees, combining two alarm trees with the root alarms in mutual association to form a new alarm tree, and finally taking the root alarms in the formed alarm tree as alarms which are processed preferentially. The invention can screen and sort the alarm information in the database so as to determine the alarm source and facilitate the improvement of the processing efficiency of the subsequent alarm processing.
Description
Technical Field
The invention belongs to the technical field of network communication, and particularly relates to a network alarm positioning and analyzing method based on space-time information.
Background
The power communication network is an important foundation for power grid production control and company operation management, and is an important supporting platform for guaranteeing safe and stable operation of a power system. The electric power communication network has more network layers, complex technical system and numerous devices, and the service cross-network bearing and the network cross-level butt joint exist in the operation process. In the network management process, the alarm is a very important and effective means for finding and positioning the problem, after the network generates the alarm, the alarm is stored in an alarm pool, then the stored alarm is distributed to each alarm output terminal according to the request of each alarm output terminal, and network operation maintenance personnel can position the network fault by checking the alarm output by each alarm output terminal and take measures to eliminate the fault in time.
When the electric power communication network is defective, the network management system and the monitoring system can generate a large amount of alarm information. The communication equipment in the power communication network has the relations of optical path interconnection, service access, equipment power supply, resource sharing and the like, so the alarm information has derivative relations. At present, when the alarm information is eliminated, the alarm information needs to be processed one by one, the processing process is complicated, the alarm processing workload is large, the labor intensity of staff is increased, and the alarm processing efficiency is affected.
Disclosure of Invention
The invention aims to provide a network alarm positioning and analyzing method based on space-time information, which aims to solve the technical problem that the alarm processing efficiency is greatly affected by the alarm processing workload when the electric power communication network has defects in the prior art.
In order to achieve the above purpose, the invention adopts the following technical scheme: the utility model provides a network alarm positioning and analyzing method based on space-time information, which comprises the following steps:
step 1: extracting the occurrence time of individual alarms in an alarm database, and sorting according to time;
step 2: carrying out association relation calculation on all alarms in the database, preprocessing the data of the alarms as a subsequent calculation basis;
step 3: analyzing information of the alarms in a database, defining the alarm with the earliest occurrence time as a root alarm, and combining the root alarm with the rest of alarms associated with the root alarm to form an alarm tree;
step 4: repeating the step 3 for the rest single alarms in the database to finally obtain a plurality of alarm trees;
step 5: and carrying out mutual calculation and analysis on the root alarms in the alarm trees to judge whether an association relation exists or not, merging the alarm trees in the root alarms which are associated with each other to form a new alarm tree, and finally forming the root alarms in the alarm tree as the alarms needing to be processed preferentially.
As another embodiment of the present application, step 3 further includes:
analyzing the number of the alarms with the earliest occurrence time, if the number of the alarms with the earliest occurrence time is a plurality of alarms, generating a plurality of alarm trees by taking the alarms with the earliest occurrence time as root alarms, calculating and analyzing leaf nodes in the plurality of alarm trees, and merging the leaf nodes to generate a plurality of root trees with a plurality of root alarms if the leaf nodes are the same.
As another embodiment of the present application, the process in step 2 includes:
constructing an association vector for representing two or more alarm association degrees and derivative relations;
if the two alarms are the same alarm object, the association vector of the two alarms is a bidirectional relationship;
if the two alarms are alarm objects with mutual association in the front and the rear, the association vectors of the two alarms are in a unidirectional relationship, and the front alarm is directed to the rear alarm;
if the two alarms are different in starting time, the association vectors of the two alarms are in a unidirectional relationship, and the alarm with the early starting time points to the alarm with the late starting time.
As another embodiment of the present application, when two alarms are the same object and the start times of the two alarms are different, then the alarm whose start time is early points to the alarm whose start time is late.
In another embodiment of the present application, if the two objects of the alarms are the same object, the alarm with the high level points to the alarm with the low level, and if the two alarm levels are the same, the two alarms are in a bidirectional relationship.
As another embodiment of the application, when two alarms and the alarm tree are combined, the two alarms and the alarm tree are combined according to the direction of the association vector between the alarms.
As another embodiment of the application, when the subsequent alarms triggered by the two alarms are consistent, the two alarms are in a bidirectional relationship.
In another embodiment of the present application, when the association vectors of the two root alarms are in a bidirectional relationship, the two alarm trees are merged, and two parallel root alarms exist in the merged alarm tree.
In another embodiment of the present application, when the association vectors of the two root alarms are in a bidirectional relationship and the objects of the two root alarms are different, the two alarm trees are separately established and are not merged.
As another embodiment of the present application, the network alarm positioning and analyzing method based on the space-time information further includes:
step 6: and (3) re-executing the step (5) for the plurality of newly generated alarm trees in the step (5) until no new alarm tree is generated, thereby obtaining a final root alarm.
In another embodiment of the present application, if there are multiple alarms with earliest time in the alarm database and the alarms associated with the multiple alarms with earliest time are the same, an alarm tree with the multiple alarms with earliest time as the root alarm is formed.
The network alarm positioning and analyzing method based on the space-time information has the beneficial effects that: compared with the prior art, the method has the advantages that the alarm information generated by the network management system and the monitoring system is concentrated into the database, the occurrence time of alarms in the database is ordered, and the association relation between every two alarms in the database is calculated and analyzed. The earliest alarm occurring in the database is extracted and defined as the root alarm. And then, the rest alarm information associated with the root alarm is associated with the root alarm together according to the association sequence, and is combined to form a group of alarm trees. And executing step 3 again on the rest alarms in the database, and then enabling the alarms in the database to form a corresponding alarm tree by the alarms with the earliest occurrence time, wherein the step 3 is repeatedly executed for a plurality of times until the alarms in the database cannot be combined to form the corresponding alarm tree. And then comparing the association relations of the root alarms in the alarm trees, if the corresponding association relation exists between the two alarm trees, combining the two alarm trees to form a new alarm tree, and finally forming the root alarms in the alarm tree as the alarms which can be processed preferentially. The most original alarm can be selected from a large number of alarms in the database to be used as the root alarm for priority treatment. In this way, after the root alarm processing is completed, some subsequent alarm information related to the root alarm can be solved along with the elimination of the root alarm, so that the processing amount of the alarm in the database can be reduced, the alarm information in the database can be rapidly processed, the alarm processing efficiency is improved, and the faults and defects in the power communication network can be rapidly solved.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings that are needed in the embodiments or the description of the prior art will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and that other drawings can be obtained according to these drawings without inventive effort for a person skilled in the art.
Fig. 1 is a flowchart of a network alarm positioning and analyzing method based on space-time information according to an embodiment of the present invention.
Detailed Description
In order to make the technical problems, technical schemes and beneficial effects to be solved more clear, the invention is further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the scope of the invention.
Referring to fig. 1, a method for positioning and analyzing network alarms based on time-space information provided by the present invention will now be described. The network alarm positioning and analyzing method based on the space-time information comprises the following steps:
step 1: extracting the occurrence time of individual alarms in an alarm database, and sorting according to time;
step 2: carrying out association relation calculation on all alarms in the database, preprocessing the data of the alarms as a subsequent calculation basis;
step 3: analyzing information of alarms in a database, defining the alarm with the earliest occurrence time as a root alarm, and combining the root alarm with other alarms associated with the root alarm to form an alarm tree;
step 4: repeating the step 3 for the rest individual alarms in the database to finally obtain a plurality of alarm trees;
step 5: and carrying out mutual calculation and analysis on root alarms in the alarm trees to judge whether an association relation exists or not, judging an analysis result, merging the alarm trees in the root alarms which are associated with each other to form a new alarm tree, and finally forming the root alarms in the alarm tree as alarms needing to be processed preferentially.
Compared with the prior art, the network alarm positioning and analyzing method based on the space-time information, provided by the embodiment, has the advantages that the alarm information generated by the network management system and the monitoring system is concentrated into the database, the occurrence time of alarms in the database is sequenced, and the association relation between every two alarms in the database is calculated and analyzed. The earliest alarm occurring in the database is extracted and defined as the root alarm. And then, the rest alarm information associated with the root alarm is associated with the root alarm together according to the association sequence, and is combined to form a group of alarm trees. And executing step 3 again on the rest alarms in the database, and then enabling the alarms in the database to form a corresponding alarm tree by the alarms with the earliest occurrence time, wherein the step 3 is repeatedly executed for a plurality of times until the alarms in the database cannot be combined to form the corresponding alarm tree. And then comparing the association relations of the root alarms in the alarm trees, if the corresponding association relation exists between the two alarm trees, combining the two alarm trees to form a new alarm tree, and finally forming the root alarms in the alarm tree as the alarms which can be processed preferentially. The most original alarm can be selected from a large number of alarms in the database to be used as the root alarm for priority treatment. In this way, after the root alarm processing is completed, some subsequent alarm information related to the root alarm is solved along with the elimination of the root alarm, so that the processing amount of the alarm in the database can be reduced, the alarm information in the database can be rapidly processed, the alarm processing efficiency is improved, and the faults and defects in the power communication network can be rapidly solved by adopting the alarm processing method in the invention.
Specifically, in this embodiment, after an alarm information appears on one object, the alarm information herein easily causes an alarm to appear on a plurality of subsequent objects, so that when the first alarm that occurs, that is, the root alarm, is released, the subsequent alarm associated with the root alarm can also be released when the root alarm is released. The occurrence time of the alarms generated by the preceding object is earlier than the occurrence time of the alarms generated by the following object, so that the root alarms can be more effectively found out by screening the root alarms in the database according to the generation time of the alarms.
In the implementation, in the step 2, association relation calculation is performed on all alarms in the alarm database, every two alarms. And preprocessing the data of the original alarm as the basis of subsequent calculation.
As a specific implementation manner of the network alarm positioning and analyzing method based on space-time information provided by the invention, please refer to fig. 1, in step 3, the method further includes analyzing the number of alarms with earliest occurrence time, if the number of alarms with earliest occurrence time is multiple, generating multiple alarm trees by taking each alarm with earliest occurrence time as a root alarm, performing calculation and analysis on leaf nodes in the multiple alarm trees, and if the leaf nodes are the same, merging the leaf nodes to generate multiple root trees with multiple root alarms. When a plurality of alarms exist at the earliest same time, the alarms can be associated with the alarms to form a plurality of alarm trees, at the moment, calculation analysis is needed to be carried out on leaf nodes in the plurality of alarm trees, if the leaf nodes are the same, the two alarm trees are combined to form a plurality of root alarm trees consisting of a plurality of root alarms. When alarms on the alarm tree are eliminated, multiple root alarms on the alarm tree need to be eliminated simultaneously. So as to avoid that when the leaf node is simultaneously on two alarm trees, the root alarm which causes the leaf node alarm cannot be found accurately.
In this embodiment, the leaf node is the rest of the alarms that occur later in time than the root alarm and are associated with the root alarm.
In this embodiment, the final determination of the association relationship direction between alarms refers to that the alarms need to be compared between every two alarms, and is generated by fitting calculation of an alarm object, alarm starting time, alarm level, optical path interconnection relationship, service access relationship, equipment power supply relationship, resource sharing relationship and the like, so as to determine whether the alarms are unidirectional or bidirectional.
As a specific implementation manner of the network alarm positioning and analysis method based on space-time information provided by the invention, referring to fig. 1, the process in step 2 includes constructing an association vector for representing association degree and derivative relationship of two or more alarms; if the two alarms are the same alarm object, the association vector of the two alarms is a bidirectional relationship; if the two alarms are alarm objects which are related to each other in the front and the rear, the related vectors of the two alarms are in a one-way relationship, and the front alarm is directed to the rear alarm; if the two alarms start time is different, the association vector of the two alarms is a unidirectional relationship, and the alarm with the early start time points to the alarm with the late start time.
In the present embodiment, use is made ofThe associated vector representing the alarm is expressed in g x And g is equal to y Representing two separate alarms. />The size of (2) represents the alarm g x And alarm g y The association degree is generated by fitting calculation of an alarm object, alarm starting time, alarm grade, optical path interconnection relation, service access relation, equipment power supply relation, resource sharing relation and the like according to the alarm type. When alarm g x And alarm g y When there is no association between them, the person is allowed to go up>Is 0.
In the present embodiment of the present invention,is a direction indication alarm g x And alarm g y Derived relationship between, e.g. in alarm g x And alarm g y In the case of the same alarm object,alarm g x And alarm g y Is a two-way relationship; in case of alarm g x And alarm g y When being an alarm object related to each other in the front-back sequence, and alarms g x Is positioned at the alarm g y And (f) alarming g x Directional alarm g y In case of alarm g x And alarm g y Alarm g when merging y Is incorporated into alarm g x Rear of (1), alarm g x As a root alert.
In this embodiment, when the association vectors of the two alarms are in a bidirectional relationship, if the start times of the two alarms are different, the alarm with the early start time points to the alarm with the late start time. Alarm g x And alarm g y In a bi-directional relationship, but alarm g x Is earlier than the alarm g y Time of occurrence of (g) alarm g x And alarm g y Alarm g when merging y Incorporated into alarm g x Behind (1) to give an alarm g x As a root alert. Due to the alarm g x If the occurrence time of (a) is relatively early, giving an alarm g y Is due to the alarm g x Is caused by the occurrence of (a) so that g will be alerted x Notice as root alarm, priority process alarm g x Convenient to give an alarm g y And eliminating the components together.
In this embodiment, the two alarms are in a context relationship including when alarm g y Is an alarm g x When a service of an alarm object is accessed to a device,in one-way relationship, by warning g x Directional alarm g y The method comprises the steps of carrying out a first treatment on the surface of the Or when alarming g y The alarm object is alarm g x When the alarm object is powered up, the alarm object is added with->In one-way relationship, by warning g x Directional alarm g y 。
As a specific implementation manner of the network alarm positioning and analysis method based on space-time information provided by the invention, please refer to fig. 1, when two alarms are the same object and the starting time of the two alarms is different, the alarm with the early starting time points to the alarm with the late starting time. When the objects of the alarms are the same, if the starting time of the two alarms is different, the two alarms are also in a unidirectional relation, the alarms with the later starting time are combined into the alarms with the earlier starting time, and the alarms with the earlier starting time are taken as root alarms. By adopting the method, alarms can be combined according to the derivative relation and the occurrence time relation among the alarm objects so as to form an alarm tree to find out the most original root alarm, and the root alarm is preferentially solved.
In this embodiment, if two alarm objects are the same object and the alarm levels are the same, if the start times of the two alarms are different, the alarm with the early start time points to the alarm with the late start time.
As a specific implementation manner of the network alarm positioning and analyzing method based on space-time information provided by the invention, please refer to fig. 1, if two alarm objects are the same object, the alarm with high level points to the alarm with low level, and if two alarm levels are the same, the two alarms are in a bidirectional relationship. The alarm can be classified into serious alarm, primary alarm, secondary alarm and warning alarm according to the grades. The serious alarm is an alarm which interrupts the service and needs to be immediately subjected to fault maintenance. The main alarm is an alarm which affects the service and needs immediate fault maintenance; secondary alarms, which do not affect existing services, but require maintenance to prevent deteriorated alarms; warning alarms, which do not affect the existing service, but develop alarms that may affect the service and take measures as needed. When alarms with multiple grades appear on the same object, the alarms with high grades are preferentially processed, and the alarms with low grades are processed together when the alarms with high grades are processed, for example, when the alarms can be released only when the alarms are damaged when the alarms are replaced, the alarms with parts worn out are also existed in the object, and the alarms with low grades which do not affect the existing service in the alarms can be eliminated together when the alarms are replaced, so that the alarms with low grades are not processed one by one, the processing capacity of the alarms is reduced, and the processing efficiency of the alarms is improved.
As provided by the invention based on space-time informationReferring to fig. 1, in one embodiment of a network alarm positioning and analyzing method, two alarms and alarm trees are combined according to the direction of the association vector between the alarms. When two alarms and alarm trees are combined, the alarms g are combined according to the vector relation of the alarms or the root alarms of the alarm trees x And alarm g y When merging, if alarm g x Directional alarm g y Then, at the time of merging, alarm g x Will trigger an alarm g y Is to occur. Alarm g when merging y Incorporated into alarm g x Rear of (1), alarm g x Alarm g as root alarm y She Gaojing.
As a specific implementation manner of the network alarm positioning and analysis method based on space-time information provided by the invention, please refer to fig. 1, when the subsequent alarms triggered by the two alarms are consistent, the two alarms are in a bidirectional relationship. And when the association vectors of the two subsequent alarms point to the same subsequent alarms, the two alarms are in a bidirectional relationship, the initiated subsequent alarms are one of the two alarms, and the two alarms are parallel as root alarms when being combined, so that a plurality of alarm trees are formed. Both alarms need to be handled.
As a specific implementation manner of the network alarm positioning and analyzing method based on space-time information provided by the invention, please refer to fig. 1, when the association vectors of two root alarms are in a bidirectional relationship, two alarm trees are combined, and two parallel root alarms exist in the combined alarm tree. When the alarm trees are combined, if the association vector between the root alarms of the two alarm trees is a bidirectional relationship, after the two alarm trees are combined, the two root alarms are used as the root alarms of the new alarm tree and are treated as the alarms which are processed preferentially.
As a specific embodiment of the network alarm positioning and analyzing method based on space-time information provided by the invention, referring to fig. 1, when the association vectors of two root alarms are in a bidirectional relationship and the objects of the two root alarms are different, two alarm trees are independently established and are not combined. When the alarm trees are combined, if the association vector between the root alarms of the two alarm trees is a bidirectional relationship, the two alarm trees are not combined, and the root alarms in each alarm tree are taken as alarms which are processed preferentially.
As a specific embodiment of the method for positioning and analyzing network alarms based on spatio-temporal information provided by the present invention, please refer to fig. 1, the method for positioning and analyzing network alarms based on spatio-temporal information further includes step 6: and (3) re-executing the step (5) for the plurality of newly generated alarm trees in the step (5) until no new alarm tree is generated, thereby obtaining the final root alarm. When merging among a plurality of alarm trees, the root alarms in the alarm trees need to be repeatedly merged. For different alarm trees T x 、T y G of root alarm is calculated x 、g y Is (are) alarm association vectorIf->If not 0, the alarm tree T is set x 、T y Is combined into a warning tree T Z The method comprises the steps of carrying out a first treatment on the surface of the And then the newly generated root alarm g in the alarm tree z And carrying out calculation analysis on the root alarms in other alarm trees, and judging whether the correlation relation exists or not until no new alarm tree is generated finally. Finding the root alarm of the final alarm tree as the root alarm which needs to be processed preferentially.
In this embodiment, the alarm tree T is merged Z The root alarm in (1) can enable a new root alarm g z May also be a original alarm tree T x 、T y Root alert g in x 、g y 。
In this embodiment, the multiple alarm trees formed in step 4 are aggregated to form a first round of alarm tree set, and related alarm elements related to the first round of alarm tree set are deleted in the database, whether the number of alarms in the database is 0 is detected, if the number of alarms in the database is 0, the operation in step 5 is performed, and if the number of alarms in the database is not 0, the operation in step 3 is performed again.
In this embodiment, if there are no other related alarms in the database, the alarm is used as the root alarm to be an alarm tree independently when the alarm is used as the alarm with the earliest occurrence time, so as to prevent the wireless circulation in the database from operating in step 3.
The foregoing description of the preferred embodiments of the invention is not intended to be limiting, but rather is intended to cover all modifications, equivalents, and alternatives falling within the spirit and principles of the invention.
Claims (9)
1. A network alarm positioning and analyzing method based on space-time information is characterized by comprising the following steps:
step 1: extracting the occurrence time of individual alarms in an alarm database, and sorting according to time;
step 2: carrying out association relation calculation on all alarms in the database, preprocessing the data of the alarms as a subsequent calculation basis;
step 3: analyzing information of the alarms in a database, defining the alarm with the earliest occurrence time as a root alarm, and combining the root alarm with the rest of alarms associated with the root alarm to form an alarm tree;
step 4: repeating the step 3 for the rest single alarms in the database to finally obtain a plurality of alarm trees;
step 5: performing mutual calculation analysis on the root alarms in the alarm trees to judge whether an association relation exists or not, judging an analysis result, merging the alarm trees in the root alarms which are associated with each other to form a new alarm tree, and finally forming the root alarms in the alarm tree to be the alarms needing to be processed preferentially;
the process in the step 2 comprises the following steps:
constructing an association vector for representing two or more alarm association degrees and derivative relations;
if the two alarms are the same alarm object, the association vector of the two alarms is a bidirectional relationship;
if the two alarms are alarm objects with mutual association in the front and the rear, the association vectors of the two alarms are in a unidirectional relationship, and the front alarm is directed to the rear alarm;
if the two alarms are different in starting time, the association vectors of the two alarms are in a unidirectional relationship, and the alarm with the early starting time points to the alarm with the late starting time.
2. The method for locating and analyzing network alarms based on time-space information according to claim 1, further comprising in step 3:
analyzing the number of the alarms with the earliest occurrence time, if the number of the alarms with the earliest occurrence time is a plurality of alarms, generating a plurality of alarm trees by taking the alarms with the earliest occurrence time as root alarms, calculating and analyzing leaf nodes in the plurality of alarm trees, and merging the leaf nodes to generate a plurality of root trees with a plurality of root alarms if the leaf nodes are the same.
3. The method for locating and analyzing network alarms based on time-space information according to claim 1, wherein when two alarms are the same object and the starting times of the two alarms are different, the alarm having the early starting time points to the alarm having the late starting time.
4. The method for locating and analyzing network alarms based on time-space information according to claim 1, wherein if two objects of said alarms are the same object, the alarm with high level points to the alarm with low level, and if two said alarms are the same level, the two said alarms are in a bi-directional relationship.
5. The method for locating and analyzing network alarms based on time-space information according to claim 1, wherein when two alarms and the alarm tree are combined, the combination is performed according to the direction of the association vector between the alarms.
6. The method for locating and analyzing network alarms based on time-space information according to claim 1, wherein when the subsequent alarms triggered by two alarms are identical, the two alarms are in a bidirectional relationship.
7. The method for positioning and analyzing network alarms based on time-space information according to claim 1, wherein when the association vectors of two root alarms are in a bidirectional relationship, the two alarm trees are combined and two parallel root alarms exist in the combined alarm tree.
8. The method for positioning and analyzing network alarms based on time-space information according to claim 1, wherein when the association vectors of two root alarms are in a two-way relationship and the objects of two root alarms are different, the two alarm trees are established independently and are not combined.
9. The method for locating and analyzing network alarms based on time-space information according to claim 1, wherein the method for locating and analyzing network alarms based on time-space information further comprises:
step 6: and (3) re-executing the step (5) for the plurality of newly generated alarm trees in the step (5) until no new alarm tree is generated, thereby obtaining a final root alarm.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111657985.1A CN114500229B (en) | 2021-12-30 | 2021-12-30 | Network alarm positioning and analyzing method based on space-time information |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111657985.1A CN114500229B (en) | 2021-12-30 | 2021-12-30 | Network alarm positioning and analyzing method based on space-time information |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114500229A CN114500229A (en) | 2022-05-13 |
| CN114500229B true CN114500229B (en) | 2024-02-02 |
Family
ID=81508209
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111657985.1A Active CN114500229B (en) | 2021-12-30 | 2021-12-30 | Network alarm positioning and analyzing method based on space-time information |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114500229B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117411773A (en) * | 2022-07-08 | 2024-01-16 | 中兴通讯股份有限公司 | Fault root cause alarm positioning method, fault alarm mode construction method and equipment |
Citations (23)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6253339B1 (en) * | 1998-10-28 | 2001-06-26 | Telefonaktiebolaget Lm Ericsson (Publ) | Alarm correlation in a large communications network |
| US6604208B1 (en) * | 2000-04-07 | 2003-08-05 | Telefonaktiebolaget Lm Ericsson (Publ) | Incremental alarm correlation method and apparatus |
| CN101022366A (en) * | 2007-03-21 | 2007-08-22 | Ut斯达康通讯有限公司 | Trouble correlation analytic system and method |
| CN101938366A (en) * | 2009-06-30 | 2011-01-05 | 中兴通讯股份有限公司 | Method and device for realizing associated alarm |
| CN102136949A (en) * | 2011-03-24 | 2011-07-27 | 国网电力科学研究院 | Method and system for analyzing alarm correlation based on network and time |
| CN102291247A (en) * | 2010-06-18 | 2011-12-21 | 中兴通讯股份有限公司 | Alarm association diagram generation method and device and association alarm determination method and device |
| CN102368714A (en) * | 2011-11-09 | 2012-03-07 | 华为技术有限公司 | Network alarm processing method, apparatus and system thereof |
| CN102938708A (en) * | 2012-11-05 | 2013-02-20 | 国网电力科学研究院 | Alarm transmission mode based alarm correlation analysis system and analysis method thereof |
| CN103929326A (en) * | 2014-03-18 | 2014-07-16 | 烽火通信科技股份有限公司 | Communication network transmission type alarm uniform analysis device and method |
| CN105677759A (en) * | 2015-12-30 | 2016-06-15 | 国家电网公司 | Alarm correlation analysis method in communication network |
| CN106250288A (en) * | 2016-07-29 | 2016-12-21 | 浪潮软件集团有限公司 | Root alarm analysis and identification method based on data mining |
| CN106713017A (en) * | 2016-12-08 | 2017-05-24 | 国网北京市电力公司 | Alarm information processing method and apparatus |
| CN107196804A (en) * | 2017-06-01 | 2017-09-22 | 国网山东省电力公司信息通信公司 | Power system terminal communication access network Centralized Alarm Monitoring system and method |
| CN108243063A (en) * | 2017-12-28 | 2018-07-03 | 北京市天元网络技术股份有限公司 | The determining method and system of electric power terminal communication access net root alarm |
| CN109787817A (en) * | 2018-12-28 | 2019-05-21 | 武汉船舶通信研究所（中国船舶重工集团公司第七二二研究所） | Network fault diagnosis method, device and computer readable storage medium |
| CN111010297A (en) * | 2019-12-04 | 2020-04-14 | 国网山东省电力公司信息通信公司 | Intelligent analysis method and system for supporting cross-professional faults in power communication network |
| CN112395170A (en) * | 2020-12-07 | 2021-02-23 | 平安普惠企业管理有限公司 | Intelligent fault analysis method, device, equipment and storage medium |
| WO2021057576A1 (en) * | 2019-09-29 | 2021-04-01 | 中兴通讯股份有限公司 | Method for constructing cloud network alarm root cause relational tree model, device, and storage medium |
| CN112787860A (en) * | 2020-12-30 | 2021-05-11 | 广东电网有限责任公司电力调度控制中心 | Root alarm analysis and identification method and device |
| CN112948436A (en) * | 2021-03-01 | 2021-06-11 | 创新奇智(成都)科技有限公司 | Alarm work order merging method, device, equipment and storage medium |
| CN113381890A (en) * | 2021-06-08 | 2021-09-10 | 中国电信股份有限公司 | Alarm information association method and device, electronic equipment and readable storage medium |
| CN113542039A (en) * | 2021-09-16 | 2021-10-22 | 浩鲸云计算科技股份有限公司 | Method for positioning 5G network virtualization cross-layer problem through AI algorithm |
| CN113849513A (en) * | 2021-09-26 | 2021-12-28 | 中国地质大学（武汉） | Data center operation and maintenance alarm information merging method and system |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR100357636B1 (en) * | 2000-12-01 | 2002-10-25 | 삼성전자 주식회사 | Method for managing alarm information in nms |
-
2021
- 2021-12-30 CN CN202111657985.1A patent/CN114500229B/en active Active
Patent Citations (23)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6253339B1 (en) * | 1998-10-28 | 2001-06-26 | Telefonaktiebolaget Lm Ericsson (Publ) | Alarm correlation in a large communications network |
| US6604208B1 (en) * | 2000-04-07 | 2003-08-05 | Telefonaktiebolaget Lm Ericsson (Publ) | Incremental alarm correlation method and apparatus |
| CN101022366A (en) * | 2007-03-21 | 2007-08-22 | Ut斯达康通讯有限公司 | Trouble correlation analytic system and method |
| CN101938366A (en) * | 2009-06-30 | 2011-01-05 | 中兴通讯股份有限公司 | Method and device for realizing associated alarm |
| CN102291247A (en) * | 2010-06-18 | 2011-12-21 | 中兴通讯股份有限公司 | Alarm association diagram generation method and device and association alarm determination method and device |
| CN102136949A (en) * | 2011-03-24 | 2011-07-27 | 国网电力科学研究院 | Method and system for analyzing alarm correlation based on network and time |
| CN102368714A (en) * | 2011-11-09 | 2012-03-07 | 华为技术有限公司 | Network alarm processing method, apparatus and system thereof |
| CN102938708A (en) * | 2012-11-05 | 2013-02-20 | 国网电力科学研究院 | Alarm transmission mode based alarm correlation analysis system and analysis method thereof |
| CN103929326A (en) * | 2014-03-18 | 2014-07-16 | 烽火通信科技股份有限公司 | Communication network transmission type alarm uniform analysis device and method |
| CN105677759A (en) * | 2015-12-30 | 2016-06-15 | 国家电网公司 | Alarm correlation analysis method in communication network |
| CN106250288A (en) * | 2016-07-29 | 2016-12-21 | 浪潮软件集团有限公司 | Root alarm analysis and identification method based on data mining |
| CN106713017A (en) * | 2016-12-08 | 2017-05-24 | 国网北京市电力公司 | Alarm information processing method and apparatus |
| CN107196804A (en) * | 2017-06-01 | 2017-09-22 | 国网山东省电力公司信息通信公司 | Power system terminal communication access network Centralized Alarm Monitoring system and method |
| CN108243063A (en) * | 2017-12-28 | 2018-07-03 | 北京市天元网络技术股份有限公司 | The determining method and system of electric power terminal communication access net root alarm |
| CN109787817A (en) * | 2018-12-28 | 2019-05-21 | 武汉船舶通信研究所（中国船舶重工集团公司第七二二研究所） | Network fault diagnosis method, device and computer readable storage medium |
| WO2021057576A1 (en) * | 2019-09-29 | 2021-04-01 | 中兴通讯股份有限公司 | Method for constructing cloud network alarm root cause relational tree model, device, and storage medium |
| CN111010297A (en) * | 2019-12-04 | 2020-04-14 | 国网山东省电力公司信息通信公司 | Intelligent analysis method and system for supporting cross-professional faults in power communication network |
| CN112395170A (en) * | 2020-12-07 | 2021-02-23 | 平安普惠企业管理有限公司 | Intelligent fault analysis method, device, equipment and storage medium |
| CN112787860A (en) * | 2020-12-30 | 2021-05-11 | 广东电网有限责任公司电力调度控制中心 | Root alarm analysis and identification method and device |
| CN112948436A (en) * | 2021-03-01 | 2021-06-11 | 创新奇智(成都)科技有限公司 | Alarm work order merging method, device, equipment and storage medium |
| CN113381890A (en) * | 2021-06-08 | 2021-09-10 | 中国电信股份有限公司 | Alarm information association method and device, electronic equipment and readable storage medium |
| CN113542039A (en) * | 2021-09-16 | 2021-10-22 | 浩鲸云计算科技股份有限公司 | Method for positioning 5G network virtualization cross-layer problem through AI algorithm |
| CN113849513A (en) * | 2021-09-26 | 2021-12-28 | 中国地质大学（武汉） | Data center operation and maintenance alarm information merging method and system |
Non-Patent Citations (1)
| Title |
|---|
| WCDMA-RNC告警相关性研究;张玉玲;哈尔滨工程大学;1-14 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114500229A (en) | 2022-05-13 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| KR20210019564A (en) | Operation maintenance system and method | |
| CN111176879A (en) | Fault repairing method and device for equipment | |
| CN111162949A (en) | Interface monitoring method based on Java byte code embedding technology | |
| CN109501834A (en) | A kind of point machine failure prediction method and device | |
| CN109034580B (en) | Information system overall health degree evaluation method based on big data analysis | |
| CN111160791A (en) | Abnormal user identification method based on GBDT algorithm and factor fusion | |
| CN105894177A (en) | Decision-making-tree-algorithm-based analysis and evaluation method for operation risk of power equipment | |
| CN115809183A (en) | Method for discovering and disposing information-creating terminal fault based on knowledge graph | |
| CN114500229B (en) | Network alarm positioning and analyzing method based on space-time information | |
| CN111913824B (en) | Method for determining data link fault cause and related equipment | |
| CN109448154A (en) | A kind of transmission line of electricity personnel method for inspecting and device | |
| CN115733762A (en) | Monitoring system with big data analysis capability | |
| CN111080484A (en) | Method and device for monitoring abnormal data of power distribution network | |
| Zhou et al. | Robustness analysis of power system dynamic process and repair strategy | |
| CN109523422A (en) | A kind of method for digging of distribution network failure influence factor | |
| CN110888850B (en) | Data quality detection method based on electric power Internet of things platform | |
| CN109634808B (en) | Chain monitoring event root cause analysis method based on correlation analysis | |
| CN116232695A (en) | Network security operation and maintenance association analysis system | |
| CN109617229A (en) | A kind of smart substation equipment void loop state appraisal procedure and assessment system | |
| CN112446619B (en) | Power distribution network rush-repair processing method and device | |
| CN115529219A (en) | Alarm analysis method and device, computer readable storage medium and electronic equipment | |
| CN114765574B (en) | Network anomaly delimitation positioning method and device | |
| CN115100592A (en) | Method and device for identifying hidden danger of external damage of power transmission channel and storage medium | |
| CN113064812A (en) | Project development process quality defect prediction method, device and medium | |
| CN112488873A (en) | Intelligent mining construction method for health codes and state tracks of power supply and utilization equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |