CN115733722A - Method and device for realizing primary and secondary alarm association of universal network - Google Patents
Method and device for realizing primary and secondary alarm association of universal network Download PDFInfo
- Publication number
- CN115733722A CN115733722A CN202211420500.1A CN202211420500A CN115733722A CN 115733722 A CN115733722 A CN 115733722A CN 202211420500 A CN202211420500 A CN 202211420500A CN 115733722 A CN115733722 A CN 115733722A
- Authority
- CN
- China
- Prior art keywords
- alarm
- activity
- association
- father
- needs
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a method and a device for realizing primary and secondary alarm correlation of a general network, wherein the method comprises the following steps: acquiring an alarm from a real-time alarm queue and storing the alarm into an active alarm table or a historical alarm table; if the alarm is an activity alarm, storing the alarm in an associated activity alarm table and associating the alarm, wherein the associated time range is a time range before and after the current time; if the alarm needs to be derived, the derived new alarm is stored in the activity alarm table and the associated activity alarm table; if the alarm is a clear alarm, the corresponding activity alarm is moved from the associated activity alarm table to the associated history alarm table; judging whether a father alarm needs to be cleared or not, if so, moving the father alarm from the association activity alarm table to the association history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table.
Description
Technical Field
The invention relates to the field of computer communication core networks, in particular to a method and a device for realizing primary and secondary alarm correlation of a general network.
Background
In the 2G/3G/4G era, the primary and secondary alarm correlation functions in the alarm system of the core network generally mainly perform time-interval correlation for alarms in the current active alarm library, as shown in fig. 1, the correlation steps are as follows:
1. firstly, selecting the activity alarm in a time range before the current time from an activity alarm table and storing the activity alarm in an alarm cache;
2. selecting an alarm from an alarm cache;
3. reading all association rules according to the alarm type, and storing the association rules in association rule cache;
4. selecting an association rule from the association rule cache;
5. according to the association rule, associating the alarm with all alarms in the alarm cache;
6. judging whether to derive alarms (for example, if some association rules are a father alarm derived together after a plurality of alarms are associated, the father alarm needs to be derived) according to the association rules;
7. if the alarm needs to be derived, checking whether the activity alarm table has related derived alarms or not, and storing the derived new alarm into the activity alarm table;
8. otherwise, selecting a father alarm according to the association rule for association (selecting a father alarm according to the association rule, and appointing the father alarm type in the association rule);
9. storing the association relation of the parent and the child to a parent and child association relation alarm table;
10. if the rule analysis is not finished, continuing to step 4;
11. if the alarm is not analyzed, continuing the step 2;
12. and (4) jumping to the step 1 after the alarms in the alarm cache are analyzed.
The following disadvantages and shortcomings mainly exist in the current scheme:
1. the alarm selection association time segment is too hard and has no continuity, so that the problems that the parent-child association relation is scattered, the real alarm state of the current service cannot be accurately reflected and the like can occur;
2. the active alarm table is used as an association source, a section of data needs to be fished and loaded into a cache for association each time, the active alarm table is used as an alarm main table at first, the function of the whole alarm system can be influenced, and some alarms can be received in a delayed mode to cause the condition of delayed storage, so that the association of some alarms can be lost when the data is obtained from the active alarm table.
Disclosure of Invention
In order to solve the above disadvantages and shortcomings in the current scheme, the invention provides a method and a device for realizing primary and secondary alarm association of a general network, wherein an associated alarm source is directly obtained from a real-time alarm queue of a current network processing layer, thereby ensuring the timeliness and integrity of association; setting a related activity alarm table and a related history alarm table, and distinguishing a related operation table from an alarm main table, so that the main service is not influenced, and the performance of related alarm and the performance of the alarm main table are ensured; the association time range can be flexibly configured for inquiry, and the association activity alarm table can be put in various fields, so that the association rule setting is more flexible, and the expandability is higher.
In order to realize the purpose, the invention adopts the following technical scheme:
in an embodiment of the present invention, a method for implementing primary and secondary alarm association in a general network is provided, where the method includes:
acquiring an alarm from a real-time alarm queue and storing the alarm into an active alarm table or a historical alarm table;
if the alarm is an activity alarm, storing the alarm in an associated activity alarm table and associating the alarm, wherein the associated time range is a time range before and after the current time; if the alarm needs to be derived, the derived new alarm is stored in the activity alarm table and the associated activity alarm table;
if the alarm is a clear alarm, the corresponding activity alarm is moved from the associated activity alarm table to the associated history alarm table; and judging whether a father alarm needs to be cleared or not, if so, moving the father alarm from the associated activity alarm table to the associated history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table.
Further, if the alarm is an active alarm, storing the alarm into an associated active alarm table and associating the alarm, wherein the associated time range is a time range before and after the current time; if the alarm needs to be derived, the derived new alarm is stored in an activity alarm table and an associated activity alarm table, and the method comprises the following steps:
if the alarm is an active alarm, storing the alarm into an associated active alarm table, reading all association rules of the alarm according to the type of the alarm, and storing the association rules into an association rule cache;
selecting an association rule from the association rule cache, and associating the alarm with an association activity alarm table according to the association rule, wherein the association time range is a time range before and after the current time;
judging whether a new alarm needs to be derived according to the association rule, if the alarm needs to be derived, checking whether a related derived alarm exists in the activity alarm table, and simultaneously storing the derived new alarm in the activity alarm table and the association activity alarm table; otherwise, selecting a father alarm according to the association rule and storing the father-son association relation to the father-son association relation alarm table.
Further, if the alarm is a clear alarm, the corresponding activity alarm is moved from the associated activity alarm table to the associated history alarm table; judging whether a father alarm needs to be cleared, if the father alarm needs to be cleared, moving the father alarm from the association activity alarm table to the association history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table, wherein the method comprises the following steps:
if the alarm is a clear alarm, inquiring an activity alarm corresponding to the clear alarm from the associated activity alarm table, and moving the activity alarm from the associated activity alarm table to the associated historical alarm table;
inquiring whether a father alarm exists in the father-son association relation alarm table, if so, judging whether the father alarm needs to be cleared, if so, moving the father alarm from the association activity alarm table to the association history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table.
Further, determining whether a purge is needed includes:
and if the child alarms under the parent alarm are all in a clear state after the child alarms are cleared, judging that the parent alarm needs to be cleared.
In an embodiment of the present invention, a device for implementing primary and secondary alarm association in a general network is further provided, where the device includes:
the alarm real-time acquisition module is used for acquiring an alarm from the real-time alarm queue and storing the alarm into the active alarm table or the historical alarm table;
the alarm correlation analysis module is used for storing the alarm into a correlation activity alarm table and performing correlation if the alarm is an activity alarm, wherein the correlation time range is a time range before and after the current time; if the alarm needs to be derived, the derived new alarm is stored in the activity alarm table and the associated activity alarm table; if the alarm is a clear alarm, the corresponding activity alarm is moved from the associated activity alarm table to the associated history alarm table; and judging whether a father alarm needs to be cleared or not, if so, moving the father alarm from the associated activity alarm table to the associated history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table.
Further, if the alarm is an active alarm, storing the alarm into an associated active alarm table and associating the alarm, wherein the associated time range is a time range before and after the current time; if the alarm needs to be derived, the derived new alarm is stored in an activity alarm table and an associated activity alarm table, and the method comprises the following steps:
if the alarm is an active alarm, storing the alarm in an associated active alarm table, reading all association rules of the alarm according to the type of the alarm, and storing the association rules into an association rule cache;
selecting an association rule from the association rule cache, and associating the alarm with an association activity alarm table according to the association rule, wherein the association time range is a time range before and after the current time;
judging whether a new alarm needs to be derived according to the association rule, if the alarm needs to be derived, checking whether a related derived alarm exists in the activity alarm table, and simultaneously storing the derived new alarm in the activity alarm table and the association activity alarm table; otherwise, selecting a father alarm according to the association rule and storing the father-son association relation to the father-son association relation alarm table.
Further, if the alarm is a clear alarm, the corresponding activity alarm is moved from the associated activity alarm table to the associated history alarm table; judging whether a father alarm needs to be cleared, if the father alarm needs to be cleared, moving the father alarm from the association activity alarm table to the association history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table, wherein the method comprises the following steps:
if the alarm is a clear alarm, inquiring an activity alarm corresponding to the clear alarm from the associated activity alarm table, and moving the activity alarm from the associated activity alarm table to the associated historical alarm table;
inquiring whether a father alarm exists in the father-son association relation alarm table, if so, judging whether the father alarm needs to be cleared, if so, moving the father alarm from the association activity alarm table to the association history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table.
Further, determining whether a purge is needed includes:
and if the child alarms under the parent alarm are all in a clear state after the child alarms are cleared, judging that the parent alarm needs to be cleared.
In an embodiment of the present invention, a computer device is further provided, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and when the processor executes the computer program, the method for implementing primary and secondary alarm association in a universal network is implemented.
In an embodiment of the present invention, a computer-readable storage medium is further provided, where a computer program for executing the method for implementing primary and secondary alarm association in a universal network is stored in the computer-readable storage medium.
Has the advantages that:
1. the association alarm of the invention is obtained from the current network real-time alarm queue, the alarm association is timely, the alarm can not be discarded, and the integrity of the alarm association is ensured.
2. The invention adds the association activity alarm table and the association history alarm table, so that the association query is only carried out in the association table, the alarm main table is not influenced, and the association efficiency is improved.
3. The association rule configuration of the invention is more flexible, and the association time range can be selected from a period of time before and after the current time, so that the invention is suitable for more alarm association scenes.
Drawings
FIG. 1 is a schematic diagram of a 2G/3G/4G core network primary and secondary alarm association process;
FIG. 2 is a flow chart of a method for implementing primary and secondary alarm association in a universal network according to the present invention;
FIG. 3 is a schematic structural diagram of a primary and secondary alarm association implementation apparatus of a universal network according to the present invention;
FIG. 4 is a schematic diagram of the computer device structure of the present invention.
Detailed Description
The principles and spirit of the present invention will be described below with reference to several exemplary embodiments, which should be understood to be presented only to enable those skilled in the art to better understand and implement the present invention, and not to limit the scope of the present invention in any way. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.
As will be appreciated by one skilled in the art, embodiments of the present invention may be embodied as a system, apparatus, device, method, or computer program product. Accordingly, the present disclosure may be embodied in the form of: entirely hardware, entirely software (including firmware, resident software, micro-code, etc.), or a combination of hardware and software.
According to the embodiment of the invention, the method and the device for realizing the primary and secondary alarm correlation of the general network are provided, the correlated alarm source is directly obtained from the real-time alarm queue of the current network processing layer, and the timeliness and the integrity of the correlation are ensured; setting a related activity alarm table and a related history alarm table, and distinguishing a related operation table from an alarm main table, so that the main service is not influenced, and the performance of related alarm and the performance of the alarm main table are ensured; the associated time range can be flexibly configured for inquiry, and the associated activity alarm table can be put in various fields, so that the association rule setting is more flexible and the expandability is higher.
The principles and spirit of the present invention are explained in detail below with reference to several representative embodiments of the invention.
FIG. 2 is a flow diagram of a method for implementing primary and secondary alarm association in a universal network according to the present invention. As shown in fig. 2, the method includes:
1. acquiring an alarm from the real-time alarm queue, judging whether the alarm is an active alarm, if so, storing the alarm in an active alarm table, and otherwise, storing the alarm in a historical alarm table;
2. carrying out alarm correlation analysis on the alarm;
3. if the alarm is active, storing the alarm table into a related activity alarm table, and continuing the next step, otherwise, skipping to the step 14 of clearing the alarm;
4. reading all association rules of the alarm according to the type of the alarm, and storing the association rules into an association rule cache;
5. selecting an association rule from the association rule cache;
6. according to the association rule, the alarm is associated with the association activity alarm table, and the association time range can be widened to a time range before and after the current time;
7. judging whether a new alarm needs to be derived according to the association rule;
8. if the alarm needs to be derived, checking whether the active alarm library has related derived alarms;
9. otherwise, selecting a father alarm to be correlated according to the correlation rule (the father alarm type is specified in the correlation rule);
10. the derived new alarms are stored in an activity alarm table and an associated activity alarm table;
11. storing the association relationship of the parent-child alarm to a parent-child association relationship alarm table;
12. if the association rule is not analyzed, continuing to step 5;
13. if the alarm is not checked, continuing the step 2;
14. entering a clear alarm correlation flow;
15. inquiring the activity alarm corresponding to the clear alarm from the associated activity alarm table, and moving the activity alarm from the associated activity alarm table to the associated history alarm table;
16. inquiring whether a father alarm exists in a father-son association relation alarm table, if so, judging whether the father alarm needs to be cleared, and if the son alarm is cleared, and if all the son alarms under the father alarm are in a clearing state, judging that the father alarm needs to be cleared;
17. if the alarm needs to be cleared, the father alarm is moved from the association activity alarm table to the association history alarm table;
18. and correspondingly, the parent alarm is required to be moved from the active alarm table to the historical alarm table.
In the scheme, the activity alarm table can be understood as a formal activity alarm table, the table data of the activity alarm table is a main table of the current alarm system, the data is complete, and the activity alarm table can be used for various operations such as presentation, order dispatching and the like; the associated active alarm table can be understood as an informal temporary table, the table data of which is only used for associated alarm, the alarm in the table is not as complete as in the formal active alarm table, and the data can not be used for requirements of presentation, order dispatching and the like and can only be provided for associated programs for use.
In the above scheme, the history alarm table may be understood as a formal history alarm table, the table data of which is a main table of the current alarm system is complete and can be used for various operations such as presentation and dispatching, while the associated history alarm table may be understood as an informal temporary table, the table data of which is only used for associated alarms, and the alarms in the table are not as complete as in the formal history alarm table, and the data cannot be used for the requirements such as presentation and dispatching, and can only be provided for associated programs for use.
It should be noted that although the operations of the method of the present invention have been described in the above embodiments and the accompanying drawings in a particular order, this does not require or imply that these operations must be performed in this particular order or that all of the illustrated operations must be performed to achieve desirable results. Additionally or alternatively, certain steps may be omitted, multiple steps combined into one step execution, and/or one step broken down into multiple step executions.
For a clearer explanation of the implementation method of the primary and secondary alarm association in the general network, a specific embodiment is described below, but it should be noted that the embodiment is only for better explaining the present invention, and is not to be construed as an undue limitation to the present invention.
The embodiment of the associated alarm comprises the following steps:
1. firstly, an association rule is formulated:
the alarm A and the alarm B need to be correlated, the correlation condition is that the network element names are the same, and the alarm type A is used as a main alarm;
2. acquiring an activity alarm A from the real-time alarm queue, and storing the activity alarm A into an activity alarm table and an associated activity alarm table;
3. simultaneously, carrying out alarm correlation analysis on the active alarm A;
4. reading all association rules of the type of the active alarm A;
5. selecting the association rule formulated in the step 1, and associating A and B;
6. detecting that only an activity alarm A exists in the associated activity alarm table, and no alarm is associated;
7. acquiring an activity alarm B from the real-time alarm queue, and storing the activity alarm B into an activity alarm table and an associated activity alarm table;
8. simultaneously, carrying out alarm correlation analysis on the active alarm B;
9. loading all association rules of the type B of the active alarm;
10. selecting the association rule formulated in the step 1, and associating A and B;
11. detecting that activity alarms A and B are just related in the related activity alarm table;
12. the judgment rule is that A is used as a main alarm and does not need to derive an alarm;
13. performing parent-child alarm association, and storing the association relationship between A and B;
14. acquiring a clearing alarm B from the real-time alarm queue;
15. clearing the alarm after looking up the active alarm B from the active alarm table, and moving the alarm into the historical alarm table;
16. clearing the alarm after looking up the activity alarm B from the associated activity alarm table, and moving the alarm into the associated history alarm table;
17. searching a parent alarm A of the alarm B in a parent-child association relation alarm table aiming at the clear alarm;
18. after the alarm B is cleared, the parent alarm A of the alarm B is found to be B only with 1 child alarm, and the B is also cleared, so all child alarms are cleared, and the parent alarm A meets the clearing condition and needs to be cleared;
19. clearing the alarm after the father alarm A is searched from the active alarm table, and moving the father alarm A into the history alarm table;
20. and clearing the alarm after the father alarm A is searched from the associated activity alarm table, and transferring the father alarm A into the associated history alarm table.
Based on the same invention concept, the invention also provides a device for realizing the association of the primary alarm and the secondary alarm of the general network. The implementation of the device can be referred to the implementation of the method, and repeated details are not repeated. The term "module," as used below, may be a combination of software and/or hardware that implements a predetermined function. Although the means described in the embodiments below are preferably implemented in software, an implementation in hardware or a combination of software and hardware is also possible and contemplated.
FIG. 3 is a schematic structural diagram of a device for implementing primary and secondary alarm association in a universal network according to the present invention. As shown in fig. 3, the apparatus includes:
an alarm real-time acquisition module 101, configured to acquire an alarm from a real-time alarm queue and store the alarm in an active alarm table or a historical alarm table;
the alarm correlation analysis module 102 is configured to store the alarm in a correlation activity alarm table and perform correlation if the alarm is an activity alarm, where a correlation time range is a time range before or after a current time; if the alarm needs to be derived, the derived new alarm is stored in the activity alarm table and the associated activity alarm table; if the alarm is a clear alarm, the corresponding activity alarm is moved from the associated activity alarm table to the associated history alarm table; judging whether a father alarm needs to be cleared, if the father alarm needs to be cleared, moving the father alarm from the association activity alarm table to the association history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table; the method comprises the following specific steps:
if the alarm is an active alarm, storing the alarm in an associated active alarm table, reading all association rules of the alarm according to the type of the alarm, and storing the association rules into an association rule cache;
selecting an association rule from the association rule cache, and associating the alarm with an association activity alarm table according to the association rule, wherein the association time range is a time range before and after the current time;
judging whether a new alarm needs to be derived according to the association rule, if the alarm needs to be derived, checking whether a related derived alarm exists in the activity alarm table, and simultaneously storing the derived new alarm in the activity alarm table and the association activity alarm table; otherwise, selecting a father alarm according to the association rule and storing the father-son association relation to the father-son association relation alarm table.
If the alarm is a clear alarm, inquiring an activity alarm corresponding to the clear alarm from the associated activity alarm table, and moving the activity alarm from the associated activity alarm table to the associated historical alarm table;
inquiring whether a father alarm exists in a father-son association relation alarm table, if so, judging whether the father alarm needs to be cleared, and if the son alarm is cleared, and if all the son alarms under the father alarm are in a clearing state, judging that the father alarm needs to be cleared;
if the alarm needs to be cleared, the father alarm is moved from the associated activity alarm table to the associated history alarm table, and meanwhile, the father alarm is moved from the activity alarm table to the history alarm table.
It should be noted that although several modules of the generic network primary and secondary alarm correlation implementation apparatus are mentioned in the above detailed description, such division is merely exemplary and not mandatory. Indeed, the features and functionality of two or more of the modules described above may be embodied in one module according to embodiments of the invention. Conversely, the features and functions of one module described above may be further divided into embodiments by a plurality of modules.
Based on the aforementioned inventive concept, as shown in fig. 4, the present invention further provides a computer device 200, which includes a memory 210, a processor 220, and a computer program 230 stored on the memory 210 and operable on the processor 220, wherein the processor 220 implements the aforementioned implementation method for primary and secondary alarm association of the general network when executing the computer program 230.
Based on the above inventive concept, the present invention further provides a computer readable storage medium storing a computer program for executing the method for implementing primary and secondary alarm association in a universal network.
The method and the device for realizing the primary and secondary alarm correlation of the general network, provided by the invention, can acquire the correlated alarm from the current network real-time alarm queue, the alarm correlation is timely, the alarm cannot be discarded, and the integrity of the alarm correlation is ensured; the association activity alarm table and the association history alarm table are added, so that association query is only carried out in the association table, an alarm main table is not influenced, and association efficiency is improved; the association rule configuration is more flexible, the association time range can be selected from a current time period before and after the current time period, and more alarm association scenes are adapted.
While the spirit and principles of the invention have been described with reference to several particular embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, nor is the division of aspects, which is for convenience only as the features in such aspects may not be combined to benefit. The invention is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims.
The present invention is not limited to the above embodiments, and it should be understood by those skilled in the art that various modifications and changes may be made without inventive changes in the technical solutions of the present invention.
Claims (10)
1. A method for realizing primary and secondary alarm association of a general network is characterized by comprising the following steps:
acquiring an alarm from the real-time alarm queue and storing the alarm into an active alarm table or a historical alarm table;
if the alarm is an active alarm, storing the alarm into an associated active alarm table and associating the alarm, wherein the associated time range is a time range before and after the current time; if the alarm needs to be derived, the derived new alarm is stored in the activity alarm table and the associated activity alarm table;
if the alarm is a clear alarm, the corresponding activity alarm is moved from the associated activity alarm table to the associated history alarm table; and judging whether a father alarm needs to be cleared or not, if so, moving the father alarm from the associated activity alarm table to the associated history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table.
2. The method of claim 1, wherein if the alarm is an active alarm, storing the alarm in an associated active alarm table and associating the alarm, wherein the associated time range is a period of time before or after the current time; if the alarm needs to be derived, the derived new alarm is stored in an activity alarm table and an associated activity alarm table, and the method comprises the following steps:
if the alarm is an active alarm, storing the alarm into an associated active alarm table, reading all association rules of the alarm according to the type of the alarm, and storing the association rules into an association rule cache;
selecting an association rule from the association rule cache, and associating the alarm with an association activity alarm table according to the association rule, wherein the association time range is a time range before and after the current time;
judging whether a new alarm needs to be derived according to the association rule, if the alarm needs to be derived, checking whether a related derived alarm exists in the activity alarm table, and simultaneously storing the derived new alarm in the activity alarm table and the association activity alarm table; otherwise, selecting a father alarm according to the association rule and storing the father-son association relation to the father-son association relation alarm table.
3. The method of claim 1, wherein if the alarm is a clear alarm, the corresponding active alarm is moved from the associated active alarm table to the associated historical alarm table; judging whether a father alarm needs to be cleared, if the father alarm needs to be cleared, moving the father alarm from the association activity alarm table to the association history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table, wherein the method comprises the following steps:
if the alarm is a clear alarm, inquiring an activity alarm corresponding to the clear alarm from the associated activity alarm table, and moving the activity alarm from the associated activity alarm table to the associated history alarm table;
inquiring whether a father alarm exists in the father-son association relation alarm table, if so, judging whether the father alarm needs to be cleared, if so, moving the father alarm from the association activity alarm table to the association history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table.
4. The method of claim 3, wherein determining whether the clearing is required comprises:
and if the child alarms under the parent alarm are all in a clear state after the child alarms are cleared, judging that the parent alarm needs to be cleared.
5. A device for realizing primary and secondary alarm association in a universal network is characterized by comprising:
the alarm real-time acquisition module is used for acquiring an alarm from the real-time alarm queue and storing the alarm into the active alarm table or the historical alarm table;
the alarm correlation analysis module is used for storing the alarm into a correlation activity alarm table and performing correlation if the alarm is an activity alarm, wherein the correlation time range is a time range before and after the current time; if the alarm needs to be derived, the derived new alarm is stored in an activity alarm table and an associated activity alarm table; if the alarm is a clear alarm, the corresponding activity alarm is moved from the associated activity alarm table to the associated history alarm table; and judging whether a father alarm needs to be cleared or not, if so, moving the father alarm from the associated activity alarm table to the associated history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table.
6. The apparatus of claim 5, wherein if the alarm is an active alarm, storing the alarm in an associated active alarm table and associating the alarm, wherein the associated time range is a time range before or after the current time; if the alarm needs to be derived, the derived new alarm is stored in an activity alarm table and an associated activity alarm table, and the method comprises the following steps:
if the alarm is an active alarm, storing the alarm into an associated active alarm table, reading all association rules of the alarm according to the type of the alarm, and storing the association rules into an association rule cache;
selecting an association rule from the association rule cache, and associating the alarm with an association activity alarm table according to the association rule, wherein the association time range is a time range before and after the current time;
judging whether a new alarm needs to be derived according to the association rule, if the alarm needs to be derived, checking whether a related derived alarm exists in an activity alarm table, and storing the derived new alarm into the activity alarm table and an associated activity alarm table; otherwise, selecting a father alarm according to the association rule and storing the father-son association relation to the father-son association relation alarm table.
7. The apparatus of claim 5, wherein if the alarm is a clear alarm, the corresponding active alarm is moved from the associated active alarm table to the associated historical alarm table; judging whether a father alarm needs to be cleared, if the father alarm needs to be cleared, moving the father alarm from the association activity alarm table to the association history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table, wherein the method comprises the following steps:
if the alarm is a clear alarm, inquiring an activity alarm corresponding to the clear alarm from the associated activity alarm table, and moving the activity alarm from the associated activity alarm table to the associated historical alarm table;
inquiring whether a father alarm exists in the father-son association relation alarm table, if so, judging whether the father alarm needs to be cleared, if so, moving the father alarm from the association activity alarm table to the association history alarm table, and simultaneously moving the father alarm from the activity alarm table to the history alarm table.
8. The apparatus for implementing primary and secondary alarm correlation in a general network according to claim 7, wherein determining whether to clear comprises:
and if the child alarms under the parent alarm are all in a clear state after the child alarms are cleared, judging that the parent alarm needs to be cleared.
9. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the processor implements the method of any of claims 1-4 when executing the computer program.
10. A computer-readable storage medium, characterized in that the computer-readable storage medium stores a computer program for performing the method of any one of claims 1-4.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211420500.1A CN115733722A (en) | 2022-11-14 | 2022-11-14 | Method and device for realizing primary and secondary alarm association of universal network |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211420500.1A CN115733722A (en) | 2022-11-14 | 2022-11-14 | Method and device for realizing primary and secondary alarm association of universal network |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN115733722A true CN115733722A (en) | 2023-03-03 |
Family
ID=85295606
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211420500.1A Pending CN115733722A (en) | 2022-11-14 | 2022-11-14 | Method and device for realizing primary and secondary alarm association of universal network |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115733722A (en) |
-
2022
- 2022-11-14 CN CN202211420500.1A patent/CN115733722A/en active Pending
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107506451B (en) | Abnormal information monitoring method and device for data interaction | |
| CN110457277B (en) | Service processing performance analysis method, device, equipment and storage medium | |
| US7051034B1 (en) | Dynamic optimization for processing a restartable sub-tree of a query execution plan | |
| US7945543B2 (en) | Method and system for deferred maintenance of database indexes | |
| US20060048155A1 (en) | Organizing transmission of repository data | |
| JP6996812B2 (en) | How to process data blocks in a distributed database, programs, and devices | |
| US20120246520A1 (en) | Monitoring method, information processing apparatus, and computer-readable medium storing monitoring program | |
| CN113836163A (en) | Data association query method, device, equipment and storage medium | |
| CN113608969A (en) | Service system operation monitoring system and method | |
| CN111125213A (en) | Data acquisition method, device and system | |
| CN111314158A (en) | Big data platform monitoring method, device, equipment and medium | |
| CN111221890B (en) | Automatic monitoring and early warning method and device for universal index class | |
| CN109189343B (en) | Metadata disk-dropping method, device, equipment and computer-readable storage medium | |
| US20150269171A1 (en) | Information storage system | |
| CN112395307A (en) | Statement execution method, statement execution device, server and storage medium | |
| CN111782679A (en) | Method and device for supervising data processing process, computer equipment and storage medium | |
| CN115733722A (en) | Method and device for realizing primary and secondary alarm association of universal network | |
| CN109032940B (en) | Test scene input method, device, equipment and storage medium | |
| CN111124650A (en) | Streaming data processing method and device | |
| CN111159022A (en) | Interrupt data access conflict detection method and device based on univariate access sequence mode | |
| CN112527497B (en) | Serialized multithreaded data processing system | |
| CN112685370B (en) | Log collection method, device, equipment and medium | |
| CN111506422B (en) | Event analysis method and system | |
| JP2009217617A (en) | Method and device for identifying memory leak place | |
| CN109902067B (en) | File processing method and device, storage medium and computer equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |