CN101247269A - Method for automatically discovering association rule for judging redundant alarm - Google Patents
Method for automatically discovering association rule for judging redundant alarm Download PDFInfo
- Publication number
- CN101247269A CN101247269A CNA2008100827536A CN200810082753A CN101247269A CN 101247269 A CN101247269 A CN 101247269A CN A2008100827536 A CNA2008100827536 A CN A2008100827536A CN 200810082753 A CN200810082753 A CN 200810082753A CN 101247269 A CN101247269 A CN 101247269A
- Authority
- CN
- China
- Prior art keywords
- alarm
- subclass
- classification
- history
- alarms
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 23
- 230000000875 corresponding effect Effects 0.000 claims description 42
- 230000002596 correlated effect Effects 0.000 claims description 2
- 230000006835 compression Effects 0.000 abstract description 3
- 238000007906 compression Methods 0.000 abstract description 3
- 230000005764 inhibitory process Effects 0.000 abstract description 3
- 238000004364 calculation method Methods 0.000 abstract description 2
- 238000004458 analytical method Methods 0.000 description 8
- 230000000694 effects Effects 0.000 description 5
- RVRCFVVLDHTFFA-UHFFFAOYSA-N heptasodium;tungsten;nonatriacontahydrate Chemical compound O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.O.[Na+].[Na+].[Na+].[Na+].[Na+].[Na+].[Na+].[W].[W].[W].[W].[W].[W].[W].[W].[W].[W].[W] RVRCFVVLDHTFFA-UHFFFAOYSA-N 0.000 description 5
- 238000012545 processing Methods 0.000 description 5
- 238000007418 data mining Methods 0.000 description 3
- 238000012423 maintenance Methods 0.000 description 3
- 238000010219 correlation analysis Methods 0.000 description 2
- 238000012098 association analyses Methods 0.000 description 1
- 238000011263 association rule mining technique Methods 0.000 description 1
- 230000015572 biosynthetic process Effects 0.000 description 1
- 238000006243 chemical reaction Methods 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 239000012141 concentrate Substances 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 238000005194 fractionation Methods 0.000 description 1
- 230000007257 malfunction Effects 0.000 description 1
- 238000005065 mining Methods 0.000 description 1
- 238000005201 scrubbing Methods 0.000 description 1
- 238000012163 sequencing technique Methods 0.000 description 1
- 238000003786 synthesis reaction Methods 0.000 description 1
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
- Telephonic Communication Services (AREA)
Abstract
The present invention provides relating regular method of automatic finding judgment redundant alarm, which includes the following steps: (1) all history alarm is separated into some alarm subclass according to alarm class of all history alarm, each subclass correspond to a alarm class, then corresponding supporting degree and confidence degree of two alarm class is statistical according to random two alarm subclass, until all alarm class completes; (2) after completing all alarm statistical calculation between classes, listing relating alarm class in which supporting degree is bigger than prearranged threshold A and confidence degree is bigger than prearranged threshold B, adding to synthetic net management system, shielding or inhibition redundant alarm automatically. The present invention resolves calculate complexity degree problem of magnanimity history data, and can find relating rules of judging redundant alarm automatically in finite time, so compression rate of synthetic net management is improved greatly.
Description
Technical field
The present invention relates in the especially national provincial large-scale synthesis webmaster of telecommunicatioin network management to find automatically to judge the method for the correlation rule of redundant alarm by data mining.
Background technology
Integrated Network Management System is based upon on the basis of each professional network management system, by standard interface, realizes the centralized management and the analysis of each professional network management system data.Wherein reflect the activity alarm (Active Alarm) of network element device (NetworkElement) malfunction, need on fault management (FaultManagement) interface, present in real time, so that the attendant carries out corresponding regular maintenance according to these alarms, guarantee the stable operation of communication network.
But owing to reasons such as system designs, activity alarm on each professional webmaster all has certain data scale (the K order of magnitude), concentrate and to converge to behind the comprehensive network management its quantity just quite huge (the W order of magnitude), so many activity alarm both can't show effectively on the interface that the Operation and Maintenance personnel also can't handle.According to the operation experience of reality, the network element device that breaks down is a minority, and real effectively alarm also is a minority, because a network element device when breaking down, can produce the series of activities alarm, but not every movable alarm all shows failure cause.Therefore need carry out correlation analysis to these movable alarms, find out the basic reason that produces fault, the correlation rule that draws according to correlation analysis is alarmed compression then, processing such as the alarm to redundancy just merges, suppresses, abandons, to significantly reduce the movable alarm quantity in the comprehensive network management, the Operation and Maintenance personnel can alarm accurate fault location according to activity in a short period of time, distribute the Trouble ticket related personnel and carry out the network failure processing.
In present network management system, redundant alarm to be filtered on the processing logic or correlation rule that mainly is based upon customization, system analyzes correlation between the alarm according to these predefined correlation rules, filters redundant alarm.In the professional webmaster in the past, these correlation rules mainly are to be formulated according to corresponding business knowledge by the hardware expert, yet, comprehensive network management is managed each professional network element device, simple dependence expert provides correlation rule unrealistic, and workload is big, efficient is low, and regular number is also more limited.Thought according to data mining, effective means are exactly by a large amount of history alarm data that are stored in the database are carried out the association rule mining analysis, automatically find to be used to judge the correlation rule of redundant alarm, confirm that by professional expert typing network management system in back comes into force.The method of this automatic discovery correlation rule has significantly reduced workload, has improved operating efficiency.
But history alarm is a mass data, and data scale is more than hundred million grades mostly, must find a high efficiency analytical method, could finish the mining analysis to these history alarm data in finite time, finds out the correlation rule of decidable redundant alarm.
Summary of the invention
The technical problem to be solved in the present invention provides the method that the correlation rule of redundant alarm is judged in a kind of automatic discovery, utilizes existing magnanimity history alarm data, by data mining, finds to judge the correlation rule of redundant alarm automatically.
In order to address the above problem, the invention provides the method that the correlation rule of redundant alarm is judged in a kind of automatic discovery, may further comprise the steps:
(1) according to the Alarm Classification that exists in all history alarms, all history alarms are split into some alarm subclass, the corresponding a kind of Alarm Classification of each subclass, count the support and the confidence level of corresponding two kinds of Alarm Classifications again according to any two alarm subclass, until having added up all Alarm Classifications;
(2) after the statistical computation of finishing between all Alarm Classifications, list support greater than default thresholding A and confidence level greater than the related Alarm Classification of default thresholding B, add in the Integrated Network Management System, automatically shielding or suppress redundant alarm;
Further, in the described step (1), the described support that draws accounts for the percentage of all history alarm quantity for the alarm quantity that belongs to described two kinds of Alarm Classifications;
Further, in the described step (1), obtain the support of described any two kinds of Alarm Classifications, specifically may further comprise the steps:
(a), all history alarms are split into some subclass of independently alarming, the corresponding a kind of Alarm Classification of each subclass according to the Alarm Classification that exists in all history alarms;
(b) described all history alarm quantity of statistics, and count the alarm quantity in any two alarm subclass in the step (a) respectively, described two subclass are corresponding Alarm Classification x and y respectively;
(c) calculate support between described Alarm Classification x and y, be the alarm quantity sum in described two subclass and the ratio of all history alarm quantity;
Further, in the described step (1), the described confidence level that draws, gather the ratio P1 that interior alarm quantity accounts for the alarm quantity of wherein a kind of Alarm Classification x for the relevant alarm of any two kinds of Alarm Classification x and y, account for the ratio P2 of all history alarm quantity divided by the alarm quantity of this Alarm Classification x;
Further, obtain P1, specifically may further comprise the steps:
(i) according to the time of origin of all history alarms, all history alarms are split into some set A of independently alarming
i, each set comprises the whole history alarms that occur in the different period i respectively;
(ii) according to the Alarm Classification that exists in all history alarms, with each alarm set A
iSplit into some alarm subclass, the corresponding a kind of Alarm Classification of each subclass;
(iii), construct two relevant alarm set of alarming subclass in the selected period, and count the alarm quantity in the described relevant alarm set according to two alarm subclass of (ii) middle corresponding Alarm Classification x respectively of step and y;
(iv) count the interior alarm quantity of alarm subclass of corresponding Alarm Classification x;
(v) calculate P1 in the current period, ratio for the alarm quantity in the alarm subclass of the alarm quantity in the described relevant alarm set and corresponding Alarm Classification x, return step and (iii) carry out,, carry out next step until having added up all Alarm Classification and records in the selected period;
(vi) the statistics of all Alarm Classifications adds up in the day part to record, obtains a total P1;
Further, described step (iii) in, when constructing described relevant alarm set, at first travel through all alarms in the alarm subclass of corresponding x, be the alarm x of current period if wherein there is generation time
j, and in the alarm subclass of corresponding y, also have corresponding alarm y
k, make described two alarm x
jAnd y
kOccur on the same network element, the absolute value of time of origin difference and checkout time difference is less than factor T correlation time, then with x
jPut into relevant alarm set, and the alarm quantity in the alarm set of will being correlated with adds 1;
Further, obtain P2, specifically may further comprise the steps:
(I), all history alarms are split into some subclass of independently alarming, the corresponding a kind of Alarm Classification of each alarm subclass according to the Alarm Classification that exists in all history alarms;
(II) statistics obtains described all history alarm quantity, and the quantity of the interior alarm of alarm subclass of corresponding Alarm Classification x in the step (I);
(III) calculate P2, be the ratio of the alarm quantity in the alarm subclass of corresponding Alarm Classification x in the step (II) and all history alarm quantity.
Compared with prior art, the method of the invention has solved the computation complexity problem of mass historical data, can be in finite time (several hrs), automatically find out to judge the correlation rule of redundant alarm, largely improve the alarm compression ratio of comprehensive network management.
Description of drawings
Fig. 1 is a method flow diagram of finding the alarm association rule in the embodiment of the invention automatically.
Embodiment
The present invention is in order to solve the drawback that conventional solution exists, further set forth the method that the correlation rule of redundant alarm is judged in a kind of automatic discovery of the present invention by following specific embodiment, below embodiment is described in detail, but not as a limitation of the invention.
The core thinking of the technical solution adopted in the present invention:
(1) according to the Alarm Classification that exists in all history alarms, all history alarms are split into some alarm subclass, the corresponding a kind of Alarm Classification of each subclass, count the support and the confidence level of corresponding two kinds of Alarm Classifications again according to any two alarm subclass, until having added up all Alarm Classifications;
(2) after the statistical computation of finishing between all Alarm Classifications, list support greater than thresholding A and confidence level greater than the related Alarm Classification of thresholding B, add in the Integrated Network Management System, automatically shielding or suppress redundant alarm.
The Alarm Classification set that exists in the supposing the system is K={k
1, k
2, k
3..., k
n, at first carry out following processing:
1, calculates all and alarm total C;
2, mass alarm according to Alarm Classification K={k
1, k
2, k
3..., k
nBeing divided into the littler history alarm set of data volume, each gathers corresponding a kind of Alarm Classification;
3, travel through the alarm set of all Alarm Classification correspondences, calculate the alarm sum of each Alarm Classification: C
K1, C
K2, C
K3..., C
Kn
Any two Alarm Classification k
xk
yAssociation analysis relate to the calculating of following two index supports and confidence level, need to prove that support does not have strict sequencing with the calculating of degree of writing, in practical operation, handle earlier which can:
1, support support (k
xThe k of==＞
y)=P (k
x∪ k
y): k in the expression history alarm
x, k
yThe percentage that the alarm of two classes is shared, its value too little (as being lower than 1%) expression k
xk
yThe alarm frequency of occurrences is very little, can not determine both correlation degrees;
It is calculated as follows:
The corresponding Alarm Classification k that obtains according to statistics
xHistory alarm quantity C in the corresponding alarm set
x, and corresponding Alarm Classification k
yAlarm set in alarm quantity C
y, calculate support (k
xThe k of==＞
y)=P (k
x∪ k
y)=(C
x+ C
y)/C.
2, confidence level confidence (k
xThe k of==＞
y)=P (k
y| k
x): represent to have k on the same network element
xUnder the condition of alarm, there is k simultaneously
yThe conditional probability of alarm, its value is big more, and k is described
xk
yDegree of correlation is strong more, if exist on same network element and simultaneously, just can use k
xAlarm shield or inhibition k
yAlarm;
Two simultaneous criterions of alarm: the absolute value of the absolute value of time of origin difference and checkout time difference, less than factor T correlation time (specifying default value 1 minute according to concrete system situation).
Below, according to the countable additivity of conditional probability, if A
1, A
2, A
3... A
i... be the disjoint in twos incidents of row, then have:
Therefore, for reducing algorithm complex, history alarm is split as the less history alarm set A of a plurality of data volumes by time of origin
1, A
2, A
3... A
i..., A
m(A
iRepresent a fixedly interior history alarm set that takes place of period i);
Therefore, confidence level confidence (k
xThe k of==＞
y)=P (k
y| k
x) can do following conversion:
Wherein: k
Y, iExpression is the interior k of period i fixedly
yThe alarm set.
The calculating of confidence level just is converted into and calculates P (k respectively
x) and P (k
Y, i∩ k
x).
1) P (k
x) be calculated as follows: P (k
x)=C
x/ C.
2) the fixing P (k in the period i
Y, i∩ k
x) calculation procedure is as follows:
I) by time of origin all history alarms are split as the less history alarm set A of a plurality of data volumes
1, A
2, A
3... A
i..., A
m(A
iRepresent a fixedly set of the interior history alarm that takes place of period i);
Ii) press Alarm Classification K={k
1, k
2, k
3..., k
nThe set A of the history alarm that takes place in the fixing period i
iBe split as the less alarm subclass A of a plurality of data volumes
I, 1, A
I, 2, A
I, 3..., A
I, n(A
I, jRepresenting the interior Alarm Classification of current period i is k
jHistory alarm set), the corresponding a kind of Alarm Classification of each subclass;
Iii) according to alarm subclass A
I, x={ x
1, x
2, x
3, x
4..., A
I, y={ y
1, y
2, y
3, y
4..., construct k in the current period i
xk
yRelevant alarm set A
I, y|x, and calculate this k
xk
yRelevant alarm set quantity C
I, y|x:
At first traversal is alarmed subclass A
I, xAll the alarm x
jIf, x
jThe ground generation time is in the current period i;
And at A
I, yIn also have y
k, make x
jy
kTwo alarms are on same network element and have (simultaneous judgment principle as previously mentioned, the absolute value of time of origin difference and checkout time difference is less than factor T correlation time) simultaneously, so x
jPut into set A
I, y|x, and with k in the current period i
xk
yAlarm quantity C in the relevant alarm set
I, y|xAdd 1;
Iv) travel through corresponding Alarm Classification k
xAlarm subclass A
I, xAll interior history alarms, statistics k
xAlarm quantity C
x
V) calculate P (k
Y, i∩ k
x)=C
I, y|x/ C
x
3) according to last method, add up all Alarm Classifications in the current period i, add up all periods again, the statistics of day part is added up gather, obtain k
xk
yTotal associated confidence:
After the statistical computation of finishing between all Alarm Classifications, list support greater than certain thresholding (as: 1%) and confidence level related Alarm Classification greater than certain thresholding (as: 80%), add in the Integrated Network Management System and come into force, automatically shielding or inhibition redundant alarm.
Can see, support is that process is to finishing processing after the different fractionation of whole history alarms with the calculating of degree of writing, but do not need to be respectively these two kinds of method for splitting prepare codes in the practical operation, the unified use earlier split by the time, press the method that Alarm Classification splits again, unification at last just gathers and can finish, and below in conjunction with accompanying drawing and specific implementation method the present invention is described in further detail.
As shown in Figure 1: find that automatically the alarm association rule is realized by following steps, fixedly period i is that unit adds up with the sky:
Step S01: history alarm is put into tables of data HisAlarm, carry out data scrubbing then, mainly remove the alarm data of unusual alarm data of time of origin and repetition;
Step S02: create the analysis result day table Out_[yymmdd that is used to preserve statistic analysis result on the same day], this table is made of following field:
Class_x (Alarm Classification x)
Class_y (Alarm Classification y)
Count_x (the alarm sum of x)
Count_y|x (following the x alarm sum of y alarm)
Support_y|x (x, the related support of y)
Confidence_y|x (x, y associated confidence)
Step S03: from history alarm, search time of origin for the statistics alarm on day same day (need increase time range), generate alarm day table HisAlarm_[yymmdd] according to the time factor T in the algorithm;
Step S04: the alarm day of adding up day same day is shown HisAlarm_[yymmdd according to Alarm Classification] split into and a plurality of Alarm Classification day show HisAlarm_[yymmdd] _ [class], promptly travel through all Alarm Classifications, create tables of data according to all alarms that should classify in the alarm day table;
Step S05: the HisAlarm_[yymmdd of statistics Alarm Classification x correspondence] _ x, the statistics generation time is the statistics alarm sum C on day same day
x, be kept at Out_[yymmdd] the Count_x field;
Step S06: according to the corresponding HisAlarm_[yymmdd of Alarm Classification x] _ the corresponding HisAlarm_[yymmdd of x, Alarm Classification y] _ y, statistics x, the related alarm of y number C
Y|x, be kept at Out_[yymmdd] the Count_y|x field, concrete grammar is as follows:
Traversal HisAlarm_[yymmdd] _ all alarm record (supposing Record_x_i) among the x, if Record_x_i satisfies following two judgements, then count C
X|yAdd 1, otherwise constant:
1) whether the Record_x_i generation time is the statistics day same day;
2) at HisAlarm_[yymmdd] _ y search exist satisfy below the alarm (Record_y_j) of two conditions:
I.Record_x_i and Record_y_j are on same network element position;
The absolute value of ii.Record_x_i and Record_y_j time of origin difference is less than factor T correlation time;
Step S07: remove all middle table, comprising: show alarm day, show Alarm Classification day; Gather all analysis result day table and obtain final analysis table (field with analysis result day epiphase with) as a result, then according to Count_x, Count_y|x calculating Confidence_y|x, Support_y|x
The Class_x in the record of all Support_y|x＞=designated values (as: 1%) and Confidence_y|x＞=designated value (as: 80%) and the Alarm Classification x of Class_y correspondence, y has correlation, can correspondingly generate the alarm association rule.
Certainly; the present invention also can have other various embodiments; under the situation that does not deviate from spirit of the present invention and essence thereof; those of ordinary skill in the art can make various corresponding changes and distortion according to the present invention, but these corresponding changes and distortion all should belong to the protection range of the appended claim of the present invention.
Claims (7)
1, the method for the correlation rule of redundant alarm is judged in a kind of automatic discovery, it is characterized in that, may further comprise the steps:
(1) according to the Alarm Classification that exists in all history alarms, all history alarms are split into some alarm subclass, the corresponding a kind of Alarm Classification of each subclass, count the support and the confidence level of corresponding two kinds of Alarm Classifications again according to any two alarm subclass, until having added up all Alarm Classifications;
(2) after the statistical computation of finishing between all Alarm Classifications, list support greater than default thresholding A and confidence level greater than the related Alarm Classification of default thresholding B, add in the Integrated Network Management System, automatically shielding or suppress redundant alarm.
2, the method for claim 1 is characterized in that, in the described step (1), the described support that draws accounts for the percentage of all history alarm quantity for the alarm quantity that belongs to described two kinds of Alarm Classifications.
3, method as claimed in claim 2 is characterized in that, in the described step (1), obtains the support of described any two kinds of Alarm Classifications, specifically may further comprise the steps:
(a), all history alarms are split into some subclass of independently alarming, the corresponding a kind of Alarm Classification of each subclass according to the Alarm Classification that exists in all history alarms;
(b) described all history alarm quantity of statistics, and count the alarm quantity in any two alarm subclass in the step (a) respectively, described two subclass are corresponding Alarm Classification x and y respectively;
(c) calculate support between described Alarm Classification x and y, be the alarm quantity sum in described two subclass and the ratio of all history alarm quantity.
4, method as claimed in claim 3, it is characterized in that, in the described step (1), the described confidence level that draws, gather the ratio P1 that interior alarm quantity accounts for the alarm quantity of Alarm Classification x for the relevant alarm of any two kinds of Alarm Classification x and y, account for the ratio P2 of all history alarm quantity divided by the alarm quantity of this Alarm Classification x.
5, method as claimed in claim 4 is characterized in that, obtains P1, specifically may further comprise the steps:
(i) according to the time of origin of all history alarms, all history alarms are split into some set A of independently alarming
i, each set comprises the whole history alarms that occur in the different period i respectively;
(ii) according to the Alarm Classification that exists in all history alarms, with each alarm set A
iSplit into some alarm subclass, the corresponding a kind of Alarm Classification of each subclass;
(iii), construct two relevant alarm set of alarming subclass in the selected period, and count the alarm quantity in the described relevant alarm set according to two alarm subclass of (ii) middle corresponding Alarm Classification x respectively of step and y;
(iv) count the interior alarm quantity of alarm subclass of corresponding Alarm Classification x;
(v) calculate P1 in the current period, ratio for the alarm quantity in the alarm subclass of the alarm quantity in the described relevant alarm set and corresponding Alarm Classification x, return step and (iii) carry out,, carry out next step until having added up all Alarm Classification and records in the selected period;
(vi) the statistics of all Alarm Classifications adds up in the day part to record, obtains a total P1.
6, method as claimed in claim 5 is characterized in that, described step (iii) in, when constructing described relevant alarm set, at first travel through all alarms in the alarm subclass of corresponding x, be the alarm x of current period if wherein there is generation time
j, and in the alarm subclass of corresponding y, also have corresponding alarm y
k, make described two alarm x
jAnd y
kOccur on the same network element, the absolute value of time of origin difference and checkout time difference is less than factor correlation time, then with x
jPut into relevant alarm set, and the alarm quantity in the alarm set of will being correlated with adds 1.
7, method as claimed in claim 4 is characterized in that, obtains P2, specifically may further comprise the steps:
(I), all history alarms are split into some subclass of independently alarming, the corresponding a kind of Alarm Classification of each alarm subclass according to the Alarm Classification that exists in all history alarms;
(II) statistics obtains described all history alarm quantity, and the quantity of the interior alarm of alarm subclass of corresponding Alarm Classification x in the step (I);
(III) calculate P2, be the ratio of the alarm quantity in the alarm subclass of corresponding Alarm Classification x in the step (II) and all history alarm quantity.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2008100827536A CN101247269B (en) | 2008-03-05 | 2008-03-05 | Method for automatically discovering association rule for judging redundant alarm |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2008100827536A CN101247269B (en) | 2008-03-05 | 2008-03-05 | Method for automatically discovering association rule for judging redundant alarm |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101247269A true CN101247269A (en) | 2008-08-20 |
| CN101247269B CN101247269B (en) | 2010-09-01 |
Family
ID=39947495
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2008100827536A Expired - Fee Related CN101247269B (en) | 2008-03-05 | 2008-03-05 | Method for automatically discovering association rule for judging redundant alarm |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101247269B (en) |
Cited By (20)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101937447A (en) * | 2010-06-07 | 2011-01-05 | 华为技术有限公司 | Alarm association rule mining method, and rule mining engine and system |
| WO2011017955A1 (en) * | 2009-08-10 | 2011-02-17 | 中兴通讯股份有限公司 | Method for analyzing alarm data and system thereof |
| CN103916260A (en) * | 2013-01-08 | 2014-07-09 | 中国移动通信集团浙江有限公司 | Device and method for alarm correlation |
| CN106713049A (en) * | 2017-02-04 | 2017-05-24 | 杭州迪普科技股份有限公司 | Alarm method and device of monitor |
| CN106789347A (en) * | 2017-01-22 | 2017-05-31 | 山东浪潮商用系统有限公司 | A kind of method that alarm association and network fault diagnosis are realized based on alarm data |
| CN106789145A (en) * | 2016-03-30 | 2017-05-31 | 新华三技术有限公司 | A kind of warning information method for pushing and device |
| US9710364B2 (en) | 2015-09-04 | 2017-07-18 | Micron Technology Licensing, Llc | Method of detecting false test alarms using test step failure analysis |
| CN107707380A (en) * | 2017-07-31 | 2018-02-16 | 贵州白山云科技有限公司 | A kind of monitoring alarm method and apparatus |
| CN108156037A (en) * | 2017-12-29 | 2018-06-12 | 中国移动通信集团江苏有限公司 | Alarm correlation analysis method, device, equipment and medium |
| CN108737147A (en) * | 2017-04-25 | 2018-11-02 | 中国移动通信集团广东有限公司 | A kind of network alarm event-handling method and device |
| CN108804574A (en) * | 2018-05-23 | 2018-11-13 | 东软集团股份有限公司 | Alarm prompt method, apparatus, computer readable storage medium and electronic equipment |
| CN109189736A (en) * | 2018-08-01 | 2019-01-11 | 中国联合网络通信集团有限公司 | A kind of generation method and device of alarm association rule |
| CN109412867A (en) * | 2018-12-06 | 2019-03-01 | 国家电网有限公司信息通信分公司 | A kind of alarm association merging method, device, system, equipment and storage medium |
| WO2019080918A1 (en) * | 2017-10-26 | 2019-05-02 | 中兴通讯股份有限公司 | Method for suppressing redundant alarms, and network management device and storage medium |
| CN109768895A (en) * | 2019-03-29 | 2019-05-17 | 南京邮电大学 | A kind of network slice failure management method and system |
| CN109905270A (en) * | 2018-03-29 | 2019-06-18 | 华为技术有限公司 | Root is positioned because of the method, apparatus and computer readable storage medium of alarm |
| CN110391936A (en) * | 2019-07-25 | 2019-10-29 | 长沙学院 | A kind of novel clustering algorithm based on timing alarm |
| CN111267908A (en) * | 2020-02-26 | 2020-06-12 | 深圳市中兴系统集成技术有限公司 | Centralized alarm system and alarm processing method applied to rail transit |
| CN111526053A (en) * | 2020-04-20 | 2020-08-11 | 电子科技大学 | Network security alarm processing method based on confidence |
| CN113778783A (en) * | 2021-07-26 | 2021-12-10 | 北京芬香科技有限公司 | Intelligent alarm method and system based on monitoring data |
Family Cites Families (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6239699B1 (en) * | 1999-03-03 | 2001-05-29 | Lucent Technologies Inc. | Intelligent alarm filtering in a telecommunications network |
| US8314694B2 (en) * | 2004-06-28 | 2012-11-20 | Abb Research Ltd | System and method for suppressing redundant alarms |
| CN100362803C (en) * | 2004-10-15 | 2008-01-16 | 华中科技大学 | Network safety warning system based on cluster and relavance |
| CN100373350C (en) * | 2005-03-21 | 2008-03-05 | 华为技术有限公司 | Fault alarm reporting management method |
-
2008
- 2008-03-05 CN CN2008100827536A patent/CN101247269B/en not_active Expired - Fee Related
Cited By (33)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2011017955A1 (en) * | 2009-08-10 | 2011-02-17 | 中兴通讯股份有限公司 | Method for analyzing alarm data and system thereof |
| CN101997709A (en) * | 2009-08-10 | 2011-03-30 | 中兴通讯股份有限公司 | Root alarm data analysis method and system |
| CN101997709B (en) * | 2009-08-10 | 2014-03-12 | 中兴通讯股份有限公司南京分公司 | Root alarm data analysis method and system |
| CN101937447A (en) * | 2010-06-07 | 2011-01-05 | 华为技术有限公司 | Alarm association rule mining method, and rule mining engine and system |
| CN101937447B (en) * | 2010-06-07 | 2012-05-23 | 华为技术有限公司 | Alarm association rule mining method, and rule mining engine and system |
| CN103916260A (en) * | 2013-01-08 | 2014-07-09 | 中国移动通信集团浙江有限公司 | Device and method for alarm correlation |
| US9710364B2 (en) | 2015-09-04 | 2017-07-18 | Micron Technology Licensing, Llc | Method of detecting false test alarms using test step failure analysis |
| US10235277B2 (en) | 2015-09-04 | 2019-03-19 | Microsoft Technology Licensing, Llc | Method of detecting false test alarms using test step failure analysis |
| CN106789145A (en) * | 2016-03-30 | 2017-05-31 | 新华三技术有限公司 | A kind of warning information method for pushing and device |
| CN106789145B (en) * | 2016-03-30 | 2021-04-02 | 新华三技术有限公司 | Alarm information pushing method and device |
| CN106789347A (en) * | 2017-01-22 | 2017-05-31 | 山东浪潮商用系统有限公司 | A kind of method that alarm association and network fault diagnosis are realized based on alarm data |
| CN106713049A (en) * | 2017-02-04 | 2017-05-24 | 杭州迪普科技股份有限公司 | Alarm method and device of monitor |
| CN106713049B (en) * | 2017-02-04 | 2020-08-04 | 杭州迪普科技股份有限公司 | Monitoring alarm method and device |
| CN108737147B (en) * | 2017-04-25 | 2021-09-03 | 中国移动通信集团广东有限公司 | Network alarm event processing method and device |
| CN108737147A (en) * | 2017-04-25 | 2018-11-02 | 中国移动通信集团广东有限公司 | A kind of network alarm event-handling method and device |
| CN107707380B (en) * | 2017-07-31 | 2018-10-23 | 贵州白山云科技有限公司 | A kind of monitoring alarm method and apparatus |
| CN107707380A (en) * | 2017-07-31 | 2018-02-16 | 贵州白山云科技有限公司 | A kind of monitoring alarm method and apparatus |
| WO2019080918A1 (en) * | 2017-10-26 | 2019-05-02 | 中兴通讯股份有限公司 | Method for suppressing redundant alarms, and network management device and storage medium |
| CN108156037B (en) * | 2017-12-29 | 2020-12-15 | 中国移动通信集团江苏有限公司 | Alarm correlation analysis method, device, equipment and medium |
| CN108156037A (en) * | 2017-12-29 | 2018-06-12 | 中国移动通信集团江苏有限公司 | Alarm correlation analysis method, device, equipment and medium |
| CN109905270A (en) * | 2018-03-29 | 2019-06-18 | 华为技术有限公司 | Root is positioned because of the method, apparatus and computer readable storage medium of alarm |
| CN108804574A (en) * | 2018-05-23 | 2018-11-13 | 东软集团股份有限公司 | Alarm prompt method, apparatus, computer readable storage medium and electronic equipment |
| CN108804574B (en) * | 2018-05-23 | 2021-06-04 | 东软集团股份有限公司 | Alarm prompting method and device, computer readable storage medium and electronic equipment |
| CN109189736A (en) * | 2018-08-01 | 2019-01-11 | 中国联合网络通信集团有限公司 | A kind of generation method and device of alarm association rule |
| CN109412867A (en) * | 2018-12-06 | 2019-03-01 | 国家电网有限公司信息通信分公司 | A kind of alarm association merging method, device, system, equipment and storage medium |
| CN109412867B (en) * | 2018-12-06 | 2022-02-08 | 国家电网有限公司信息通信分公司 | Alarm association combination method, device, system, equipment and storage medium |
| CN109768895A (en) * | 2019-03-29 | 2019-05-17 | 南京邮电大学 | A kind of network slice failure management method and system |
| CN110391936A (en) * | 2019-07-25 | 2019-10-29 | 长沙学院 | A kind of novel clustering algorithm based on timing alarm |
| CN110391936B (en) * | 2019-07-25 | 2022-03-01 | 长沙学院 | Clustering method based on time sequence alarm |
| CN111267908A (en) * | 2020-02-26 | 2020-06-12 | 深圳市中兴系统集成技术有限公司 | Centralized alarm system and alarm processing method applied to rail transit |
| CN111526053A (en) * | 2020-04-20 | 2020-08-11 | 电子科技大学 | Network security alarm processing method based on confidence |
| CN113778783A (en) * | 2021-07-26 | 2021-12-10 | 北京芬香科技有限公司 | Intelligent alarm method and system based on monitoring data |
| CN113778783B (en) * | 2021-07-26 | 2023-12-12 | 北京芬香科技有限公司 | Intelligent alarm method and system based on monitoring data |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101247269B (en) | 2010-09-01 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101247269B (en) | Method for automatically discovering association rule for judging redundant alarm | |
| CN101997709B (en) | Root alarm data analysis method and system | |
| CN1992632B (en) | Communication network warning method and warning system | |
| CN104462121B (en) | Data processing method, apparatus and system | |
| US10225165B2 (en) | Apparatus and method for processing data streams in a communication network | |
| CN109597836A (en) | A kind of communication equipment alarm association rule digging method based on weighting matrix | |
| CN107577588A (en) | A kind of massive logs data intelligence operational system | |
| CN101632093A (en) | Be used to use statistical analysis to come the system and method for management of performance fault | |
| CN103902816A (en) | Electrification detection data processing method based on data mining technology | |
| CN104239437A (en) | Power-network-dispatching-oriented intelligent warning analysis method | |
| CN104376365A (en) | Method for constructing information system running rule libraries on basis of association rule mining | |
| CN101257399A (en) | Service system united safe platform | |
| CN104616092A (en) | Distributed log analysis based distributed mode handling method | |
| CN105917625A (en) | Classification of detected network anomalies using additional data | |
| CN112817834B (en) | Data table evaluation method and device | |
| CN106921507A (en) | The method and apparatus being predicted to customer complaint within a wireless communication network | |
| CN105930511A (en) | Answer big data subscription platform | |
| CN104991939A (en) | Transaction data monitoring method and system | |
| CN111062562A (en) | Community grid service linkage disposal control method and system | |
| CN107526820A (en) | A kind of more storehouse enterprise innovation monitoring big data normal data base construction methods of multi-source | |
| CN112381407A (en) | Credit weighting double-random supervision method based on random algorithm | |
| CN115766417A (en) | Unified monitoring management platform | |
| CN104978837B (en) | A kind of warning system and its implementation of user oriented end electric substation | |
| CN109995558A (en) | Failure information processing method, device, equipment and storage medium | |
| CN104734895A (en) | Service monitoring system and service monitoring method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20180705 Address after: California, USA Patentee after: Global innovation polymerization LLC Address before: 518057 Department of law, Zhongxing building, South hi tech Industrial Park, Nanshan District hi tech Industrial Park, Guangdong, Shenzhen Patentee before: ZTE Corp. |
|
| TR01 | Transfer of patent right | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20100901 |
|
| CF01 | Termination of patent right due to non-payment of annual fee |