CN101917296A - Alarm system and network manager - Google Patents
Alarm system and network manager Download PDFInfo
- Publication number
- CN101917296A CN101917296A CN2010102652088A CN201010265208A CN101917296A CN 101917296 A CN101917296 A CN 101917296A CN 2010102652088 A CN2010102652088 A CN 2010102652088A CN 201010265208 A CN201010265208 A CN 201010265208A CN 101917296 A CN101917296 A CN 101917296A
- Authority
- CN
- China
- Prior art keywords
- alarm
- filtercondition
- operational order
- sender
- recipient
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses an alarm system which comprises an alarm sender and an alarm receiver. The alarm receiver is used for constructing an operation instruction for operating filter conditions, packaging and setting the related information of the filter conditions to be processed into a special parameter of the operation instruction and sending the operation instruction to the alarm sender which is used for analyzing the related information of the filter conditions from the special parameter of the received operation instruction and processing the filter conditions according to the requirements of the operation instruction. The invention can decrease the integration cost between the alarm receiver and the alarm sender.
Description
Technical field
The present invention relates to the warning technology in the technologies of telecommunications network management, especially a kind of warning system and network manager.
Background technology
In technologies of telecommunications network management field, the notification procedure of alarm is exactly that the alarm sender who alarms initiatively sends to the process of alarming the recipient to alarm.General, the alarm sender of alarm is by guard system, and the alarm recipient of alarm is a management system, after having detected the fault generation, is sent alarm notification immediately to management system by guard system.
Warning content generally comprises: alarm source, alarm type, alarm time, alarm severity level, possible cause, particular problem, maintenance suggestion or the like.
General alarm is divided into following type:
Fault warning--the generation of reflection fault;
Cleared alarm--the recovery of reflection fault;
Change alarm--the variation of reflection fault, for example more serious.
Corresponding alarm notification is called fault warning notice, cleared alarm notice and change alarm notification.
Traditional, alarm can be filtered according to content.For example alarming the recipient can filter according to alarm source, alarm severity level, alarm type or other warning content, promptly requires the alarm sender again the switch fault report of given content feature not to be alarmed the recipient to this.
Angle from the alarm recipient, the process feature that reports about the various alarm notifications of specific fault has reflected the behavioral characteristics of alarm sender's fault, for example the frequency of fault warning notice has reflected the frequency that fault produces, and the frequency that fault warning notice and cleared alarm notice alternately occur has reflected the cycle that fault produces and recovers.
The method that discloses a kind of correlation of based on context alarm in the prior art and filtered is called for short the method that alarm correlation filters.For example, repeat alarm filtering method, i.e. the fault warning of identical content is with certain frequency, report to alarm recipient several times continuously after, the alarm recipient thinks this alarm for repeating alarm, thereby the fault warning that the sender does not report identical content is again alarmed in requirement.Again for example, the flash alarm filter method, the fault and the corresponding recovery thereof that are identical content are alarmed with certain frequency, after reporting to alarm recipient several times continuously, the alarm recipient thinks that this alarm is a flash alarm, thereby requires the alarm sender not report this fault warning and corresponding recovery alarm thereof again.
In such cases, need to set up corresponding operation-interface for every kind of alarm correlation filter type specially between alarm recipient and the alarm sender, comprising creating interface, delete interface, query interface etc.The alarm recipient is by creating interface to being sent instructions by under the guard system, be provided with the alarm sender in this interface and want the static nature (for example certain reason cause alarm) of filtering alarm and dynamic condition (for example repeat to alarm it may be noted that in the time period of appointment the alarm number of times of permission appearance) at most, after the alarm sender receives this interface instruction, directly new alarm is filtered according to the static nature and the dynamic filtration condition of interface instruction.Afterwards, the alarm recipient creates new delete interface and query interface is deleted and query manipulation the alarm correlation filtercondition again.
But there is following defective in the method for prior art:
Need to set up operation-interface between alarm recipient and the alarm sender according to certain specific warnings correlation filter type, and because the diversity of alarm correlation, the diversity that causes the alarm correlation filter type, therefore management system need be set up different operation-interfaces at every kind of alarm correlation filter type, causes management system need use different interfaces to create, delete, check different correlation filterconditions like this.Be accompanied by the continuous understanding of deepening of alarm recipient for alarm correlation, may sum up increasing correlation filtercondition, so according to existing scheme, between alarm recipient and alarm sender, create new operation-interface with requiring for new correlation filtercondition, be used for setting up, delete, inquire about this correlation filtercondition, the alarm sender it must be understood that also the instruction of these new operation-interfaces just can carry out correct filtration; Therefore, existing scheme makes that the interactive interface between alarm recipient and the alarm sender is too complicated, may be and in fact alarm the recipient and alarm the sender by different vendor's exploitation separately, complex interface will cause alarming cost integrated between recipient and the alarm sender than higher like this.
Summary of the invention
In view of this, main purpose of the present invention is to provide a kind of warning system, to reduce the integrated cost between alarm recipient and the alarm sender.
In order to realize the foregoing invention purpose, the invention provides a kind of warning system, comprising: alarm sender and alarm recipient communicate by northbound interface between this alarm sender and this alarm recipient; Above-mentioned alarm recipient is used to construct the operational order that filtercondition is operated, with filtercondition relevant information to be processed packing be set in the special parameter in this operational order, and send this operational order to above-mentioned alarm sender; Above-mentioned alarm sender is used for parsing the filtercondition relevant information from the special parameter of the operational order of being received, handles at this filtercondition according to the requirement of this operational order.
The present invention also provides a kind of network manager, comprising: be used to construct the operational order that filtercondition is operated, with filtercondition relevant information to be processed packing be set to unit in the special parameter in this operational order; Be used to send the unit of this operational order to NE Explorer.
The present invention is owing to adopt unified operation-interface to operations such as being created, delete, check by the various filterconditions of guard system in management system, in the packaged parameter that is set in the operational order of the relevant information of filtercondition, after the alarm sender receives operational order, relevant parameters is resolved, obtain this operational order filtering conditional information to be processed, according to operational order this filtercondition is handled then, thereby the alarm sender handles follow-up alarm according to the requirement of filtercondition.Like this, the different filtercondition that can make is handed down to the alarm sender by unified operational order, the alarm sender has the ability of resolving this operational order, thereby make the interactive interface between alarm sender and the alarm recipient simplify greatly, reduced the integrated cost between alarm sender and the alarm recipient.
Description of drawings
Fig. 1 is the flow chart of the method for the invention;
Fig. 2 is the schematic diagram of a kind of management interface of the applied telecom network management system of the present invention;
Fig. 3 creates the flow chart of alarm correlation filtercondition for the present invention;
Fig. 4 alarms the flow chart that the recipient deletes the alarm correlation filtercondition for the present invention;
Fig. 5 A is a flow chart of checking alarm correlation filtercondition sign;
Fig. 5 B is a flow chart of checking alarm correlation filtercondition details;
Fig. 6 is for hanging up the operational flowchart of alarm correlation filtercondition;
Fig. 7 is for recovering the operational flowchart of alarm correlation filtercondition;
Fig. 8 is the operational flowchart that obtains the alarm that is filtered out by alarm correlation filtercondition;
Fig. 9 A is that the type of alarm correlation filtercondition is the process chart when repeating to alarm;
Fig. 9 B is to recovering the process chart of alarm;
Process chart when Figure 10 is flash alarm for the type of alarm correlation filtercondition;
Process chart when Figure 11 is of short duration alarm for the type of alarm correlation filtercondition;
Figure 12 is the type of the alarm correlation filtercondition process chart during for obstinate alarm.
Embodiment
Below by specific embodiments and the drawings the present invention is described in further details.
Fig. 1 is the flow chart of the method for the invention.Referring to Fig. 1, core technology scheme of the present invention is:
The operational order that step 11, alarm recipient structure are operated filtercondition is set to institute's filtercondition relevant information packing to be processed in the special parameter in this operational order, and sends this operational order to alarming the sender;
Technical scheme of the present invention goes for the switch fault report interface of the alarm subsystem of telecom network management system.Fig. 2 is the schematic diagram of a kind of management interface of telecom network management system.Referring to Fig. 2, generally all there is the switch fault report interface between guard system and the corresponding management system thereof in the communication network, for example interface 2, interface 4 and interface 6; Generally also there is the switch fault report interface between the local terminal of arbitrary system and correspondence thereof, for example interface 1, interface 3, interface 5, interface 7.The present invention can be applied to the interface 1～interface 7 in the telecom network management system shown in Figure 2.
The sender of alarm described in following examples is the NE Explorer (EMS) in the telecom network management system, described alarm recipient is the network manager (NMS) in the telecom network management system, method of the present invention is particularly useful for the interface between EMS and the NMS, i.e. 3G north orientation (Itf-N) interface.
Among the present invention, " filtration " operation in described " alarm correlation filtration " is not simple " removal ", promptly not reporting the alarm that is filtered to the alarm recipient, also may be alarm to be converted to non-alarm notification report, thereby avoids causing the unnecessary vigilance of alarm recipient.For example repeating alarm may not report in " fault warning " mode, but reports in the mode of " change alarm-alarm frequency increases ".Perhaps will be filtered to alarm to convert to alarm to change to notify and send to the alarm recipient.(for example alarming the notice of severity level rising or decline etc.).Filter operation in following examples is that example describes to remove (promptly not to the alarm Receiver Report).
The described filtercondition of present embodiment is a kind of alarm correlation filtercondition, the alarm recipient needs based on context to alarm in advance and alarm sender's the definite correlation filtercondition of alarming of ability, wherein mainly comprises alarm static nature and dynamic correlation filtercondition.
Described alarm static nature can be:
1) the subobject set in the managed object in the specified scope, perhaps whole subobjects of managed object, for example, on 3G north orientation (Itf-N) interface, the definition of concrete alarm source referring among third generation collaborative project tissue (3GPP) the TS 32.111-2 about the description scheme of object grade (objectClass) and object instance (objectInstance).
2) specified notification type: for example, on 3G Itf-N interface, the definition of concrete notification type sees also among the 3GPP TS 32.111-2 description scheme about notification type (notification Type).
3) fixed time section: for example, on 3G Itf-N interface, the definition of concrete time period sees also among the 3GPPTS 32.111-2 description scheme about event time (eventTime).
4) specify alarm type: for example, on 3G Itf-N interface, concrete alarm type definition sees also among the 3GPP TS 32.111-2 description scheme about alarm type (alarmType).
5) specify possible cause: for example, on 3G Itf-N interface, concrete possible cause definition sees also among the 3GPP TS 32.111-2 description scheme about possible cause (probableCause).
6) specify alarm level: for example, on 3G Itf-N interface, concrete alarm level definition sees also the description scheme of 3GPP TS 32.111-2 about perceivedSeverity.
7) above combination of features.
8) other possible static natures.
General, when the definition warning content, need to specify the content in each territory of alarm whether can filter, referring to 3GPP 32.111-2 alarm integrated reference point information service standard.But above-mentioned alarm static nature need be specified the fixed range of the value of these alarm filtered field.For example: but the alarm filtered field 1 (being assumed to be the time period) value in scope X, but and the value of alarm filtered field 2 (being assumed to be alarm level) not in scope Y, but perhaps the alarm filtered field 3 (being assumed to be possible cause) value equal Z.Wherein X, Y, Z do not change with alarm is different.
The dynamic correlation of above-mentioned alarm can be but be not limited to:
1) repeat alarm: fault is before recovery, and the fault warning of identical content is reporting that continuously number of times is more than or equal to designated value in a period of time arbitrarily.
2) flash alarm: fault produces continuously and recovers, and fault warning and correspondence are recovered alarm and reported that continuously number of times is more than or equal to designated value in a period of time arbitrarily.
3) of short duration alarm: fault produces the interval between recovering, i.e. fault warning and the corresponding report interval of alarm of recovering thereof are smaller or equal to designated value.
4) the obstinate alarm: fault produces after manual the recovery immediately once more, and recovery alarm that promptly manual recovery fault causes and the report between the new fault warning are at interval smaller or equal to designated value.
5) principal and subordinate alarm: promptly, need to check whether alarm satisfies the static nature of main alarm, or any static nature, reexamine principal and subordinate's alarm and whether satisfy certain relation if satisfy from alarm carrying out correlation when filtering, satisfied then filter out this alarm.
6) other possible feature.
7) above-mentioned combination of features.
Logical relation between the filtered thresholding that above-mentioned dynamic correlation filtercondition is two or more alarms.For example: but the filtered field 1 (being assumed to be the time period) of alarm A but the two the difference of value of value and the filtered field 2 (being assumed to be the time period) of alarm B in specified scope, but perhaps alarm A filtered field 3 (being assumed to be alarm level) but value smaller or equal to the filtered field 4 (being assumed to be alarm level) of alarm B but value and if alarm A filtered field 4 (being assumed to be alarm cause) but value be that the value that X then alarms the filtered field 6 (being assumed to be alarm cause) of B is Y.
The method for expressing of described alarm correlation filtercondition is:
As shown in table 1, the alarm correlation filtercondition comprises a sign, an alarm correlation filtercondition type optionally comprises a relevant correlation filtercondition version, and the dynamic correlation filtercondition tabulation of tabulation of one group of alarm static nature and alarm.
| Sign |
| Alarm correlation filtercondition type |
| Alarm correlation filtercondition version |
| The tabulation of alarm static nature |
| The tabulation of alarm correlation filtercondition |
| The tabulation of alarm static nature |
| The tabulation of alarm correlation filtercondition |
| …… |
Table 1
Concrete, below with repeat to alarm, flash alarm, of short duration alarm, obstinate alarm and principal and subordinate's alarm be the expression mode that example specifies the alarm correlation filtercondition.
1) it is as follows to repeat the alarm correlation filtercondition type content alarmed:
Alarm correlation filtercondition type is: repeat alarm;
The tabulation of alarm static nature is: { { comprising a static nature that alarm is relevant } }, promptly when carrying out the correlation filtration, only need to check whether alarm is satisfied this and alarmed static nature.
The dynamic correlation filtercondition list content that repeats to alarm is as follows:
Tabulation={ wherein the N minimum value is 1 to the alarm correlation filtercondition for time window width=M, number of repetition＞=N}.Wherein the time window width is assumed to be M minute herein for the predetermined amount of time before the alarm time that satisfies the new alarm of alarming static nature.
The information content of the table 2 alarm correlation filtercondition of giving an example for example: be " slightly " for alarm level, come from " No. 1, logical links ", the alarm of " communication failure " if occurred in 5 minutes (comprising 3 times) more than 3 times, is then filtered.
Table 2
2) theing contents are as follows of the alarm correlation filtercondition of flash alarm:
Alarm correlation filtercondition type is: flash alarm;
The tabulation of alarm static nature is: { { comprising a static nature that alarm is relevant } }, promptly when carrying out the correlation filtration, only need to check whether alarm satisfies this alarm static nature.
The dynamic correlation filtercondition tabulation of flash alarm is: { wherein the N minimum value is 1 for time window width=M, number of repetition＞=N}.Time window width wherein is M minute for the predetermined amount of time before the alarm time that satisfies the new alarm of alarming static nature herein.
3) theing contents are as follows of the alarm correlation filtercondition of of short duration alarm:
Alarm correlation filtercondition type is: of short duration alarm;
The tabulation of alarm static nature is: { { comprising a static nature that alarm is relevant } }.
The dynamic correlation filtercondition tabulation of of short duration alarm is: { wherein the N minimum value is 0 for time window width=M, number of repetition＞=N}.The time period of time window width wherein for being waited for after the alarm time that satisfies the new alarm of alarming static nature is M minute herein.
4) theing contents are as follows of the alarm correlation filtercondition of obstinate alarm:
Alarm correlation filtercondition type is: obstinate alarm;
The tabulation of alarm static nature is: { { comprising a static nature that alarm is relevant } }.
The dynamic correlation filtercondition tabulation of obstinate alarm is: { wherein the N minimum value is 1 for time window width=M, number of repetition＞=N}.Wherein the predetermined amount of time between the recovery alarmed for the alarm time of the new alarm of satisfying the alarm static nature and last related content of time window width is M minute herein.
5) theing contents are as follows of the alarm correlation filtercondition of principal and subordinate's alarm:
Alarm correlation filtercondition type is: principal and subordinate's alarm;
The tabulation of alarm static nature is: { { main alarm static nature }, { from alarming 1 static nature }, { from alarm i static nature } ..., { from alarm n static nature } }, at this moment, the alarm static nature is tabulated and may be comprised the relevant static nature of a plurality of alarms, need check when filtering whether alarm satisfies the relevant static nature of these alarms, when carrying out the correlation filtration, need to check whether alarm satisfies the static nature of main alarm, or any static nature from alarm.
In view of the dynamic correlation filtercondition more complicated of principal and subordinate's alarm, only provide the object lesson of dynamic tropism's filtercondition herein:
{ { source of trouble of main alarm is bottom physical link example 1} and { is upper layer logic link example 2} and { alarm time of main alarm and from the interval between the fault time of alarm＜=M second } and { severity level of main alarm＞=from the severity level of alarm } from alarming 1 the source of trouble }.
In step 12, the alarm recipient constructs the described operational order that the alarm filter condition is operated, and comprises in this operational order: action name (for example: creation operation, deletion action, search filtercondition sign operation, the operation of searching the filtercondition detailed content, pending operation, recovery operation, obtain the alarm operation that is filtered) and the relevant parameter of this operational order.
The described operation that the alarm correlation filtercondition is carried out can be divided into: creation operation, deletion action, search filtercondition sign operation, search filtercondition detailed content information operation, pending operation, recovery operation, obtain the alarm operation that is filtered.Below respectively every kind of operation is described.
Fig. 3 is for creating the flow chart of alarm correlation filtercondition.Referring to Fig. 3, this flow process comprises:
Step 31, alarm recipient based on context alarm feature determine the alarm correlation filtercondition, and the relevant information packing of alarm correlation filtercondition is set in the special parameter of creating alarm correlation filtercondition operational order (abbreviate as and create instruction).
Step 32, alarm recipient send described establishment instruction to the alarm sender.
After step 33, alarm sender receive described establishment instruction, learn that according to action name this instruction is for creating the instruction of alarm correlation filtercondition; Resolve described special parameter, therefrom obtain this instruction the relevant information of alarm correlation filtercondition to be processed, comprise described static nature and described dynamic correlation filtercondition.
The dynamic correlation filtercondition and the optional static nature of appointment during if step 34～step 35 alarm sender can correctly accept to instruct, then alarm the sender optional static nature and corresponding dynamic correlation filtercondition are set in this locality, the recipient returns success response to alarm, wherein carry expression the sign of alarm correlation filtercondition successfully is set; Otherwise return failure response.
If do not specify static nature in the described alarm correlation filtering information, then specified alarm correlation filtercondition is applicable to any alarm with identical static nature; If specified the alarm static nature, then specified alarm correlation filtercondition is applicable to have the alarm of specifying static nature.
Step 36, alarm sender are after successfully being provided with alarm dynamic correlation filtercondition, in case there is alarm need report to the alarm recipient, whether satisfy local dynamic correlation filtercondition and the described static nature (if any) that is provided with judging alarm, if, then carry out filter operation, for example can be not send this alarm to the alarm recipient herein, otherwise, do not carry out filter operation, for example directly send this alarm to the alarm recipient.
If comprise the information that indication alarm correlation filtercondition comes into force in the described establishment instruction, then alarm the sender and after the alarm correlation filtercondition is set, carry out immediately new alarm is filtered according to this filtercondition.Otherwise, after receiving the recovery instruction, carry out again.
Fig. 4 deletes the flow chart of alarm correlation filtercondition for the alarm recipient.Referring to Fig. 4, this flow process comprises:
The alarm correlation filtercondition that step 44, deletion find.
Whether step 45, inspection exist the alarm that is filtered out by alarm correlation that deleted filtercondition, if then execution in step 46; Otherwise, process ends.
Above-mentioned steps 45 to step 48 is an optional step, can be indicated by the alarm recipient and carry out or alarm sender self setting execution.
The step of alarm that the step of above-mentioned deletion alarm correlation filtercondition and replenish to send is fallen by this condition filter and corresponding recovery alarm thereof can transpose, promptly at first replenish to send and waited to delete alarm and the recovery alarm (if any) thereof that the alarm correlation filtercondition is filtered out, delete this alarm correlation filtercondition then.
Fig. 5 is a flow chart of checking the alarm correlation filtercondition.
Fig. 5 A is a flow chart of checking alarm correlation filtercondition sign.This operation of checking alarm correlation filtercondition sign can be before deletion action, pending operation, recovery operation, checking the operation of alarm correlation filtercondition details or obtain the alarm operation that is filtered out by alarm correlation filtercondition, referring to Fig. 5 A, this operating process comprises:
Step 5A1～step 5A2, alarm recipient structure are checked the instruction (instruction of condition sign checked in abbreviation) that the alarm correlation filtercondition identifies and are sent to alarm sender, the sign that requires to check the alarm correlation filtercondition of alarming sender's Set For Current.Action name wherein is: check alarm correlation filtercondition sign.
Step 5A3, alarm sender inquire about all alarm correlation filterconditions of local Set For Current, return the sign of all alarm correlation filterconditions of Set For Current.
Fig. 5 B is a flow chart of checking alarm correlation filtercondition details.Referring to Fig. 5 A, this flow process comprises:
Step 5B1～step 5B2, alarm recipient structure are checked the instruction (instruction of condition details checked in abbreviation) of alarm correlation filtercondition details and are sent to the alarm sender, the details of the alarm correlation filtercondition of alarm sender Set For Current, the sign of carrying the alarm correlation filtercondition of being checked in the parameter of particular filter condition relevant information are wherein checked in requirement.
After step 5B3, alarm sender receive and check the instruction of filtercondition details, from designated parameters, parse specified alarm correlation filtercondition sign, in the alarm correlation filtercondition of Set For Current, search the alarm correlation filtercondition of checking specified sign in the instruction of condition details, if the detailed content information that finds then in the response of returning, carry the alarm correlation filtercondition, otherwise return failure response, indicate the current alarm correlation filtercondition that designated identification is not set.
Fig. 6 is for hanging up the operational flowchart of alarm correlation filtercondition.But this pending operation is the selection operation between alarm recipient and the alarm sender.Referring to Fig. 6, this flow process comprises:
Step 61～step 62, alarm recipient construct the order (be called for short and hang up instruction) of the alarm correlation filtercondition of hanging up appointment and send to the alarm sender, the sign of carrying the alarm correlation filtercondition of being hung up in the given filter conditional parameter wherein requires the alarm sender not re-use this alarm correlation filtercondition new alarm is filtered.
After step 63, alarm sender receive and hang up instruction, from designated parameters, parse specified alarm correlation filtercondition sign, no longer the alarm correlation filtercondition that this designated identification is used in new alarm filters, but does not delete this alarm correlation filtercondition.
Fig. 7 is for recovering the operational flowchart of alarm correlation filtercondition.But recovery operation is used to the alarm correlation filtercondition that recovers to be suspended for the selection operation between alarm recipient and the alarm sender.Referring to Fig. 7, this flow process comprises:
Step 71～step 72, alarm recipient construct the order (be called for short and recover instruction) of the alarm correlation filtercondition that recovers appointment and send to the alarm sender, carry the sign of the alarm correlation filtercondition that will recover in the given filter conditional parameter wherein, require the alarm sender to use this alarm correlation filtercondition that new alarm is filtered.
After step 73, alarm sender accept to recover instruction, from designated parameters, parse specified alarm correlation filtercondition sign, remove the suspended state of the alarm correlation filtercondition of this designated identification, this alarm correlation filtercondition is used in new alarm filtered.
Fig. 8 is the operational flowchart that obtains the alarm (promptly carrying out the alarm of filtration treatment) that is filtered out by alarm correlation filtercondition.Referring to Fig. 8, this flow process comprises:
Step 81～step 82, alarm recipient structure obtain the instruction (abbreviation obtains the alarm command that filters out) of the alarm that designated alarm correlation filtercondition filters out and send to the alarm sender, carry the alarm correlation filtercondition sign of appointment in the given filter conditional parameter wherein.
Step 83～step 84, the alarm sender accept described obtain the instruction that filters out alarm after, from designated parameters, parse specified alarm correlation filtercondition sign, whether have alarm by this alarm correlation filtercondition filtered out, if having then return the alarm that these are filtered to the alarm recipient if checking; Otherwise, return failure response and give the alarm recipient.
Special, if in the filtercondition parameter of described appointment, do not carry alarm correlation filtercondition sign, after then alarming the sender and taking orders, whether check has alarm to be filtered out by any alarm correlation filtercondition, if have then return the alarm that is filtered and give the alarm recipient, give the alarm recipient otherwise return failure response.
How the sender filters new alarm according to filtercondition for alarm, and different alarm correlation filtercondition types have different processing procedures, below specific implementation method by four concrete alarm correlation filterconditions be that example describes.
Fig. 9 A is that the type of alarm correlation filtercondition is the process chart when repeating to alarm.The circulation in the alarm sender of this flow process is carried out, and referring to Fig. 9 A, this flow process comprises:
Whether step 9A1, detection have is specified the new alarm of static nature to produce in the alarm correlation filtercondition, then execution in step 9A2 is arranged.
Need afterwards to check whether new alarm satisfies the dynamic correlation condition that repeats to alarm:
Step 9A2, alarm sender judge whether to exist the not recovery alarm of identical content, are execution in step 9A3 then; Otherwise, execution in step 9A4.
Step 9A3, judge in the fixed time section before this new alarm that identical not recovery alarm frequency of occurrence is execution in step 9A4 then whether in pre-determined number (promptly whether smaller or equal to pre-determined number or less than pre-determined number); Otherwise execution in step 9A5.
Step 9A4, the described new alarm recipient of transmission finish this circulation, return step 9A1.
Step 9A5, described new alarm filter is fallen, promptly do not send this and newly alarm the recipient, finish this circulation, return step 9A1.
Special, if the described time period is appointed as " endless ", and pre-determined number is 1, so when new alarm be when occurring for the second time, if last time alarm was not resumed, then new alarm will be filtered.
After fault warning was filtered, the recovery of this fault warning correspondence alarm also needed to be filtered.But the alarm of being reported when not being employed for the alarm correlation filtercondition, then corresponding recovery alarm still needs report.
Fig. 9 B is to recovering the process chart of alarm.Referring to Fig. 9 B, this flow process comprises:
Whether step 9B1, detection have the alarm of recovery to produce, and then execution in step 9B2 is arranged.
Step 9B2, inquire about the corresponding not recovery fault warning of this recovery alarm.
Step 9B3, judging whether this corresponding fault warning is filtered, is execution in step 9B5 then; Otherwise, execution in step 9B4.
Step 9B4, the described recovery alarm of transmission finish this circulation, return step 9B1.
Step 9B5, described recovery alarm filter is fallen, finish this circulation, return step 9B1.
Process chart when Figure 10 is flash alarm for the type of alarm correlation filtercondition.The circulation in the alarm sender of this flow process is carried out, and referring to Figure 10, this flow process comprises:
Whether step 101, detection have is specified the new alarm of static nature to produce in the alarm correlation filtercondition, then execution in step 102 is arranged.
Following steps check for the alarm sender whether new alarm satisfies the method for flash alarm dynamic correlation filtercondition.
Special, if described fixed time section is appointed as " endless ", and the occurrence number thresholding is 1, so when new alarm be when occurring for the second time, if last time alarm recovered, new alarm will be filtered.
After fault warning was filtered, corresponding recovery alarm also needed to be filtered, and idiographic flow sees also shown in Fig. 9 B.But the alarm of being reported when not being employed for the alarm correlation filtercondition, then corresponding recovery alarm still needs report.
Process chart when Figure 11 is of short duration alarm for the type of alarm correlation filtercondition.The circulation in the alarm sender of this flow process is carried out, and referring to Figure 11, this flow process comprises:
Whether step 111, detection have is specified the new alarm of static nature to produce in the alarm correlation filtercondition, then execution in step 112 is arranged.
Following steps check for the alarm sender whether new alarm satisfies the method for of short duration alarm dynamic correlation filtercondition.
Step 112, judging whether the number of the alarm of the identical content deposited surpasses predetermined number, is execution in step 113 then; Otherwise execution in step 115.
Step 113, predetermined a period of time (being the time window width) of wait.
Step 114, in this scheduled time, judge whether that corresponding recovery alarm produces, be execution in step 116 then; Otherwise; Execution in step 115.
Step 115, the described new alarm of transmission finish this circulation, return step 101.
Step 116, described new alarm filter is fallen, finish this circulation, return step 101.
Special, if the predetermined threshold of the alarm number of the identical content of having deposited is set to " 0 ", so when the new alarm with specific characteristic occurs, always to wait for one period fixed time, occur in this fixed time if recover alarm, just think that new alarm is of short duration alarm, and be filtered.
After fault warning was filtered, corresponding recovery alarm also needed to be filtered, and idiographic flow sees also shown in Fig. 9 B.But the alarm of being reported when not being employed for the alarm correlation filtercondition, then corresponding recovery alarm still needs report.
Figure 12 is the type of the alarm correlation filtercondition process chart during for obstinate alarm.The circulation in the alarm sender of this flow process is carried out, and referring to Figure 12, this flow process comprises:
Whether step 121, detection have is specified the new alarm of static nature to produce in the alarm correlation filtercondition, then execution in step 122 is arranged.
Following steps check for the alarm sender whether new alarm satisfies the method for obstinate alarm dynamic correlation filtercondition.
The recovery time of step 123, the last identical content alarm of inquiry.
Special, if above-mentioned " time period " is designated as endless, as long as that deposited surpass thresholding with alarm number new alarm identical content, so new alarm just is filtered so.
After fault warning was filtered, corresponding recovery alarm also needed to be filtered, and idiographic flow sees also shown in Fig. 9 B.But the alarm of being reported when not being employed for the alarm correlation filtercondition, then corresponding recovery alarm still needs report.
The above; only for the preferable embodiment of the present invention, but protection scope of the present invention is not limited thereto, and anyly is familiar with the people of this technology in the disclosed technical scope of the present invention; the variation that can expect easily or replacement all should be encompassed within protection scope of the present invention.
Claims (29)
1. a warning system is characterized in that, comprising: alarm sender and alarm recipient;
Described alarm recipient is used to construct the operational order that filtercondition is operated, with filtercondition relevant information to be processed packing be set in the special parameter in this operational order, and send this operational order to described alarm sender;
Described alarm sender is used for parsing the filtercondition relevant information from the special parameter of the operational order received, handles at this filtercondition according to the requirement of this operational order.
2. warning system according to claim 1 is characterized in that,
Described operational order is for creating the operational order of filtercondition;
Described filtercondition relevant information specifically comprises: the content of the sign of this filtercondition, type and predetermined filtercondition;
Described alarm sender is further used for, and described filtercondition sign and the corresponding filtercondition content that parses is provided with storage, and according to set filtercondition filter operation is carried out in alarm.
3. warning system according to claim 2 is characterized in that, the content of described filtercondition comprises: based on context alarm determined alarm dynamic correlation filtercondition.
4. warning system according to claim 3 is characterized in that the content of described filtercondition further comprises the static nature of alarm.
5. warning system according to claim 4 is characterized in that,
Described alarm dynamic correlation filtercondition type is: repeat alarm;
Described alarm sender is further used for, when generation has the alarm of specifying static nature in the filtercondition, if there has been the not recovery alarm of identical content in this alarm sender, in the fixed time section of judgement before this alarm, whether identical not recovery alarm frequency of occurrence in predetermined number of iterations, if in predetermined number of iterations, then sends the described described alarm recipient that alarms, if not in predetermined number of iterations, then filter operation is carried out in described alarm; Perhaps
When generation has the alarm of specifying static nature in the filtercondition,, then send the described described alarm recipient that alarms if there is not the not recovery alarm of identical content in this alarm sender.
6. warning system according to claim 4 is characterized in that,
The type of described alarm dynamic correlation filtercondition is: flash alarm;
Described alarm sender is further used for, when generation has the alarm of specifying static nature in the filtercondition, if there has been the alarm of recovery of identical content, in the fixed time length of judgement before alarm, whether the occurrence number that the recovering of identical content alarmed in pre-determined number, if in pre-determined number, then sends the described described alarm recipient that alarms, if not in pre-determined number, then filter operation is carried out in described alarm; Perhaps,
When generation had the alarm of specifying static nature in the filtercondition, the if there is no recovery of identical content alarm then sent the described described alarm recipient that alarms.
7. warning system according to claim 4 is characterized in that,
The type of described alarm dynamic correlation filtercondition is: the moment alarm;
Described alarm sender is further used for, when generation has the alarm of specifying static nature in the filtercondition, if the number of the alarm of the identical content of having deposited surpasses predetermined number, after predetermined section in the time, judge whether that the corresponding recovery alarm of described alarm produces,, then filter operation is carried out in described alarm if there is the corresponding recovery alarm of described alarm to produce, if do not have the corresponding recovery alarm of described alarm to produce, then send the described described alarm recipient that alarms; Perhaps,
When generation has the alarm of specifying static nature in the filtercondition,, then send the described described alarm recipient that alarms if the number of the alarm of the identical content of having deposited does not surpass predetermined number.
8. warning system according to claim 4 is characterized in that,
The type of described alarm dynamic correlation filtercondition is: obstinate alarm;
Described alarm sender is further used for, when generation has the alarm of specifying static nature in the filtercondition, if there is the alarm number of the identical content of having deposited to surpass predetermined thresholding, then inquire about the recovery time of last identical content alarm, interval between the recovery time of judging this last identical content alarm and this new raising Time whether at the appointed time section in, if at the appointed time in the section, then filter operation is carried out in described alarm, if not at the appointed time the section in, then send the described new described alarm recipient that alarms;
When generation has the alarm of specifying static nature in the filtercondition,, otherwise send the described described alarm recipient that alarms if the alarm number of the identical content of not deposited surpasses predetermined thresholding.
9. according to claim 5,6,7 or 8 described warning systems, it is characterized in that,
Described alarm sender is further used for, and when having the alarm of recovery to produce, inquire about the corresponding fault warning of this recovery alarm, and judge whether this corresponding fault warning is filtered, be then filter operation to be carried out in described recovery alarm; Otherwise, send described recovery and alarm described alarm recipient.
10. warning system according to claim 2 is characterized in that, described establishment instruction also comprises: the indication information whether filter operation is carried out immediately;
Described alarm sender is further used for, if the indication of described indication information is carried out immediately, then after described filtercondition is set, according to this filtercondition filter operation is carried out in alarm immediately; Carry out immediately if described indication information indication is non-, then when receiving the recovery instruction, according to this filtercondition filter operation is carried out in alarm again.
11. warning system according to claim 2 is characterized in that, described filtercondition relevant information also comprises: the version information of this filtercondition.
12. warning system according to claim 1 is characterized in that,
Described operational order is the operational order of deletion filtercondition;
Described filtercondition relevant information comprises: the sign of this filtercondition;
Described alarm sender is further used for, and searches the filtercondition of specified sign in the delete instruction according to the requirement of described operational order in the filtercondition of Set For Current, if find, then deletes the filtercondition that finds; If do not find, then return the deletion failure response and give described alarm recipient, indicate the current filtercondition that specified deletion is not set.
13. warning system according to claim 12, it is characterized in that described alarm sender is further used for, behind the filtercondition that described deletion finds, if be checked through the alarm that existence is filtered out by filtercondition that deleted, then replenish transmission by the described alarm that filters out; If the alarm that is filtered out by filtercondition that deleted is resumed, then replenish the recovery alarm that sends the described alarm correspondence that is filtered.
14. warning system according to claim 1 is characterized in that, described operational order is an operational order of checking the filtercondition detailed content;
Described filtercondition relevant information is: the sign of filtercondition;
Described alarm sender is further used for, and inquires about the filtercondition of indicated sign in the described operational order of local Set For Current according to the requirement of described operational order, returns the detailed content information of this filtercondition and gives described alarm recipient.
15. warning system according to claim 1 is characterized in that, described operational order is for hanging up the operational order of filtercondition;
Described filtercondition relevant information specifically comprises: the sign of filtercondition;
Described alarm sender is further used for, and no longer the filtercondition of designated identification in this operational order of alarm application is carried out filter operation according to the requirement of described operational order.
16. warning system according to claim 1 is characterized in that, described operational order is for recovering the operational order of filtercondition;
Described filtercondition relevant information specifically comprises: the sign of filtercondition;
Described alarm sender is further used for, and removes the suspended state of the filtercondition of designated identification in this operational order according to the requirement of described operational order, this filtercondition is used in alarm again carried out filter operation.
17. warning system according to claim 1 is characterized in that, described operational order is to obtain the operational order that carries out the alarm of filtration treatment;
Described filtercondition relevant information specifically comprises: the sign of filtercondition;
Whether described alarm sender is further used for, have alarm to be carried out filter operation by the filtercondition according to designated identification in this operational order according to the requirement inspection of described operational order, if having, then returns described alarm to described alarm recipient; Give described alarm recipient if no, then return failure response.
18. according to claim 12,14,15,16 or 17 described warning systems, it is characterized in that,
Described alarm recipient is further used for, and before the operational order that structure is operated filtercondition, structure is checked the operational order of filtercondition sign, and sends this operational order to described alarm sender;
Described alarm sender is further used for, and after receiving the above-mentioned operational order of checking filtercondition sign, inquires about all filterconditions of local Set For Current, return Set For Current all filterconditions be identified to described alarm recipient.
19. according to claim 2,5,6,7,8,9,10,15,16 or 17 each described warning systems, it is characterized in that, described alarm sender is further used for, and converts the relevant notice of non-alarm to and sends to described alarm recipient being filtered alarm; Perhaps will be filtered to alarm to convert to alarm to change to notify and send to described alarm recipient; Perhaps do not send the described alarm that is filtered to described alarm recipient.
20. warning system according to claim 1 is characterized in that, described warning system is the alarm subsystem in the telecom network management system.
21. warning system according to claim 1 is characterized in that, described alarm sender is a NE Explorer, and described alarm recipient is a network manager, communicates by northbound interface between described NE Explorer and the network manager.
22. a network manager is characterized in that, comprising:
Be used to construct the operational order that filtercondition is operated, with filtercondition relevant information to be processed packing be set to unit in the special parameter in this operational order; With
Be used to send the unit of this operational order to NE Explorer.
23. network manager according to claim 22 is characterized in that,
Described operational order comprises: create the operational order of the operational order of filtercondition, the operational order of deletion filtercondition, the operational order of checking the filtercondition detailed content, the operational order of hanging up filtercondition, recovery filtercondition or obtain the operational order that carries out the alarm of filtration treatment.
24. network manager according to claim 23, it is characterized in that, when the operational order of described operational order for the establishment filtercondition, described filtercondition relevant information specifically comprises: the content of the sign of this filtercondition, type and predetermined filtercondition.
25. network manager according to claim 24 is characterized in that, the content of described filtercondition comprises: based on context alarm determined alarm dynamic correlation filtercondition.
26. network manager according to claim 25 is characterized in that, the content of described filtercondition further comprises the static nature of alarm.
27. network manager according to claim 23, it is characterized in that, when described operational order is the operational order or described operational order or the operational order of described hang-up filtercondition or the operational order or the described operational order that carries out the alarm of filtration treatment that obtains of described recovery filtercondition of checking the filtercondition detailed content of described deletion filtercondition, then described filtercondition relevant information is: the sign of filtercondition.
28. network manager according to claim 27, it is characterized in that, described network manager also comprises: be used for before the operational order that structure is operated filtercondition, structure is checked the unit of the operational order that filtercondition identifies and is used to send this and checks the unit of operational order of filtercondition sign to described NE Explorer.
29. network manager according to claim 23 is characterized in that, described filtercondition relevant information also comprises: the version information of this filtercondition.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2010102652088A CN101917296B (en) | 2006-01-27 | 2006-01-27 | Alarm system and network manager |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2010102652088A CN101917296B (en) | 2006-01-27 | 2006-01-27 | Alarm system and network manager |
Related Parent Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2006100022947A Division CN101009586B (en) | 2006-01-27 | 2006-01-27 | Processing method for alarm filtering condition in the alarming system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101917296A true CN101917296A (en) | 2010-12-15 |
| CN101917296B CN101917296B (en) | 2012-08-15 |
Family
ID=43324693
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2010102652088A Active CN101917296B (en) | 2006-01-27 | 2006-01-27 | Alarm system and network manager |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101917296B (en) |
Cited By (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102594590A (en) * | 2012-02-06 | 2012-07-18 | 烽火通信科技股份有限公司 | Inhibition method of oscillation alarms in alarm active reports |
| CN106878101A (en) * | 2016-12-14 | 2017-06-20 | 神华集团有限责任公司 | The treating method and apparatus of alert information in monitoring system |
| CN109215309A (en) * | 2018-09-30 | 2019-01-15 | 康美中药材数据信息服务有限公司 | A kind of production of crude drugs environmental warning method, electronic equipment and storage medium |
| CN109254897A (en) * | 2018-09-11 | 2019-01-22 | 郑州云海信息技术有限公司 | A kind of alarm method and device |
| CN109360394A (en) * | 2018-09-30 | 2019-02-19 | 康美中药材数据信息服务有限公司 | A kind of production of crude drugs environment early warning system |
| CN109523751A (en) * | 2018-09-30 | 2019-03-26 | 康美中药材数据信息服务有限公司 | A kind of production of crude drugs soil environment method for early warning, electronic equipment and storage medium |
| CN109523113A (en) * | 2018-09-30 | 2019-03-26 | 康美中药材数据信息服务有限公司 | A kind of environmental warning method, electronic equipment and the storage medium of production of crude drugs |
| CN109523112A (en) * | 2018-09-30 | 2019-03-26 | 康美中药材数据信息服务有限公司 | A kind of environmental warning method, electronic equipment and the storage medium of production of crude drugs |
| CN110311799A (en) * | 2018-03-27 | 2019-10-08 | 华为技术有限公司 | A kind of communication means and device |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1278516C (en) * | 2002-05-27 | 2006-10-04 | 华为技术有限公司 | Treatment method of flash cut worning in network management system |
-
2006
- 2006-01-27 CN CN2010102652088A patent/CN101917296B/en active Active
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102594590A (en) * | 2012-02-06 | 2012-07-18 | 烽火通信科技股份有限公司 | Inhibition method of oscillation alarms in alarm active reports |
| CN102594590B (en) * | 2012-02-06 | 2015-01-14 | 烽火通信科技股份有限公司 | Inhibition method of oscillation alarms in alarm active reports |
| CN106878101A (en) * | 2016-12-14 | 2017-06-20 | 神华集团有限责任公司 | The treating method and apparatus of alert information in monitoring system |
| CN106878101B (en) * | 2016-12-14 | 2020-06-19 | 神华集团有限责任公司 | Method and device for processing alarm information in monitoring system |
| CN110311799A (en) * | 2018-03-27 | 2019-10-08 | 华为技术有限公司 | A kind of communication means and device |
| CN109254897A (en) * | 2018-09-11 | 2019-01-22 | 郑州云海信息技术有限公司 | A kind of alarm method and device |
| CN109215309A (en) * | 2018-09-30 | 2019-01-15 | 康美中药材数据信息服务有限公司 | A kind of production of crude drugs environmental warning method, electronic equipment and storage medium |
| CN109360394A (en) * | 2018-09-30 | 2019-02-19 | 康美中药材数据信息服务有限公司 | A kind of production of crude drugs environment early warning system |
| CN109523751A (en) * | 2018-09-30 | 2019-03-26 | 康美中药材数据信息服务有限公司 | A kind of production of crude drugs soil environment method for early warning, electronic equipment and storage medium |
| CN109523113A (en) * | 2018-09-30 | 2019-03-26 | 康美中药材数据信息服务有限公司 | A kind of environmental warning method, electronic equipment and the storage medium of production of crude drugs |
| CN109523112A (en) * | 2018-09-30 | 2019-03-26 | 康美中药材数据信息服务有限公司 | A kind of environmental warning method, electronic equipment and the storage medium of production of crude drugs |
| CN109360394B (en) * | 2018-09-30 | 2020-11-27 | 康美药业股份有限公司 | Medicinal material production environment early warning system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101917296B (en) | 2012-08-15 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101009586B (en) | Processing method for alarm filtering condition in the alarming system | |
| CN101917296B (en) | Alarm system and network manager | |
| CN101145969B (en) | A method and system for reducing quantity of alarms reported by network elements | |
| CN101360001B (en) | Apparatus and method for processing alarm by network manager at upper layer | |
| CN101741615B (en) | Server-based alarm filtering system and method | |
| CN100486175C (en) | Method for filtering alarm between network management system and network element management system | |
| CN101128001B (en) | Processing method for surge alarm of network element management system | |
| CN101150433A (en) | A method for setting alarm filtering rule | |
| CN100499497C (en) | Method and system for quick processing warning | |
| CN101916499A (en) | Intelligent alarm device and intelligent alarm method | |
| CN102111788A (en) | Alarm processing method and alarm management system | |
| CN101247265A (en) | Alarm processing method, device and system | |
| CN113285840B (en) | Storage network fault root cause analysis method and computer readable storage medium | |
| CN101924661B (en) | Alarm processing method and device | |
| CN100550769C (en) | The unify method of filtering alarm between the Element management system of NMS | |
| CN101141751A (en) | Alarm message reporting system | |
| CN101854263B (en) | Method, system and management server for analysis processing of network topology | |
| CN101137159B (en) | Alarm information reporting method | |
| CN101132589B (en) | Oscillation alarm processing method | |
| CN107979495B (en) | Gradient processing method for alarm storm in network management system | |
| CN101917284B (en) | Based on the alarm method of OMG CORBA northbound interface, the network equipment and system | |
| CN114070711A (en) | Alarm information processing method and device, electronic equipment and storage medium | |
| CN101217592B (en) | A method and system applied in storm alarming suppression | |
| CN103248510B (en) | The method and apparatus that a kind of business recovers reactivation automatically | |
| JP2008244902A (en) | Failure recovery apparatus, failure recovery method, and failure recovery system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |