CN102111788A - Alarm processing method and alarm management system - Google Patents
Alarm processing method and alarm management system Download PDFInfo
- Publication number
- CN102111788A CN102111788A CN2009102607145A CN200910260714A CN102111788A CN 102111788 A CN102111788 A CN 102111788A CN 2009102607145 A CN2009102607145 A CN 2009102607145A CN 200910260714 A CN200910260714 A CN 200910260714A CN 102111788 A CN102111788 A CN 102111788A
- Authority
- CN
- China
- Prior art keywords
- alarm
- incidence relation
- control system
- shield
- masked state
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Abstract
The invention discloses an alarm processing method and an alarm management system. The method comprises the following steps of: pre-establishing a correlation relation among a plurality of alarms and a condition for the correlation relation in the alarm management system; after the alarm management system receives one of the alarms, shielding the alarm if the alarm is judged to be a sub-alarm of the other alarms received by the alarm management system according to the locally-stored correlation relation and if the condition for the correlation relation between the alarm and the other alarms is met, otherwise, not shielding. The system arranged in network element equipment comprises a storage unit, a receiving unit and a judging unit. In the invention, according to the characteristics of correlation and derivability of the respective alarms, an alarm correlation report decision device is implemented, a source alarm is reported preferentially, the correlation for a derivative alarm is shielded, the redundancy of alarm information can be reduced effectively and the quantity of the alarms can be reduced greatly; moreover, the source information of a fault is highlighted and the efficiency of problem positioning is improved.
Description
Technical field
The present invention relates to network resource management system, relate in particular to a kind of alert processing method and alarm and control system.
Background technology
In wireless communication system, adopt a cover Integrated Network Management System to manage whole network usually.When network element device broke down, equipment alarm information can be reported to network management system by network management path, thereby finished the condition monitoring and the fault management of network element device.When network element device breaks down at present, owing to reasons such as system's correlation in the communication system and testing mechanisms, tend to report a plurality of relevant alarms, this is comprising the root alarm of fault point and other alarm that is caused by this root alarm.Continuous expansion along with network size, the increase of network element device quantity in the network is reported to the alarm quantity of webmaster sharply to increase, and this will cause the user to be difficult in time analyze a large amount of warning information, therefrom find the source of trouble, produce the reason of fault with accurate navigation system.At this situation, the correlation analysis between network management system needs to alarm masks other alarm that the root alarm is derived, so that rapid orientation problem.
Usually all comprise an alarm and control system in the network element device, this system is used to manage the alarm that this network element device produces.The practices well of alarm association shielding at present is: alarm and control system is according to the generation of the incidence relation between existing alarm alarm association relational tree as shown in Figure 1, father alarm (as the node A among Fig. 1) exists as root node, and child alarm is (as the Node B among Fig. 1～J) as minor matters point or leaf node existence.When receiving when alarm, whether there is father's alarm of this alarm in the association process module query relation tree in this system, if exist then shield this alarm; Otherwise report this alarm.
But there is following problem in present way:
1. the association process module can only be handled the fixed correlation relation (for example, alarm A is father's alarm of alarm B, and alarm C is father's alarm of alarm D etc.) between the alarm, judges by father's alarm status of query warning whether this alarm should conductively-closed.But the incidence relation for complexity just can't have been handled.For example, alarm C only exists and alarm B just should shield when not existing at alarm A, and alarm E only could just can not have been shielded with present way realization by situations such as alarming the D shielding under specific configuring condition;
2. present alarm association is handled and is thought that child alarm derived by father's alarm, and father's alarm should receive prior to the associated processing module of child alarm so in theory.But in fact because complexity, each alarm detection point realization mechanism of communication system, the difference that detects granularity and report factor such as mechanism, this sequential can't guarantee, may occur that child alarm is received prior to father's alarm or father's alarm clearing after child alarm situation about can't in time recover.This just might cause the generation of redundant alarm, when father's alarm plays pendulum, may cause the generation of a large amount of invalid alarms;
3. existing alarm association is handled the general fixing alarm association relation that adopts, and does not support customization, in case the product issue just can't be revised poor expandability.
Summary of the invention
The invention provides a kind of alert processing method and alarm and control system, can't handle the defective of complicated incidence relation to overcome alarm and control system in the prior art.
For addressing the above problem, the invention provides a kind of processing method of alarm, comprising:
Be preset with the condition that incidence relation between a plurality of alarms and incidence relation are set up in the alarm and control system; This alarm and control system is after receiving alarm, if the incidence relation of preserving according to this locality is judged the child alarm of other alarm that this alarm received for described alarm and control system, and the condition of being somebody's turn to do the incidence relation establishment between alarm and described other alarm is satisfied, then shields this alarm; Otherwise do not shield this alarm.
Further, said method also can have following feature:
Be provided with cache pool in the described alarm and control system; All alarms that described alarm and control system will receive are put into described cache pool and are carried out buffer memory;
Described alarm and control system shields described alarm and is meant: described alarm and control system is arranged to the masked state of described alarm to shield, and the transmit status of described alarm is set to not send;
Described alarm and control system does not shield described alarm and is meant: described alarm and control system is arranged to the masked state of described alarm not shield, and the transmit status of described alarm is set to not send.
Further, said method also can have following feature:
Incidence relation in the described alarm and control system between a plurality of alarms adopts the mode of directed graph to represent, connect by a directed edge between two alarms of relevant relation, and the attribute weights of this directed edge are used to represent whether the condition that this incidence relation is set up is satisfied.
Further, said method also can comprise:
After the masked state of the alarm in the described cache pool of described alarm and control system is set to not shield, through after one section delay duration again masked state and the transmit status to this alarm judge, as judge this alarm and be in and do not shield attitude and transmit status not, then give described network management system, and the transmit status that should alarm is set to send with this alarm report.
Further, said method also can comprise:
Described alarm and control system is after receiving described alarm, the condition set up of incidence relation between a plurality of alarms of preserving according to this locality and incidence relation also, judge whether this locality is preserved the condition that incidence relation is set up between satisfied and this alarm and be in the not child alarm of masked state, if any, then the masked state of this child alarm is set to shield.
Further, said method also can have following feature:
The masked state that described alarm and control system calculates each alarm in the cache pool is the time difference of another kind of state from a kind of state exchange, and with the reference value of this time difference as the delay duration of follow-up same alarm.
Further, said method also can comprise:
Described alarm and control system is after receiving alarm clearing, if the transmit status of judging this alarm then send corresponding alarm clearing to network management system, and the transmit status of this this alarm is set to not send for sending.
Further, said method also can comprise:
Described alarm and control system is after receiving alarm clearing, and the condition that exists incidence relation and incidence relation to set up in the also described cache pool and between this alarm has satisfied is in that the masked state of the child alarm of masked state is set to not shield.
Further, said method also can comprise:
Described alarm and control system as is judged and is not locally had identical incidence relation when receiving the order of the new incidence relation of increase that the user sends by network management system, judges then whether described initiate incidence relation can make described directed graph constitute the loop; If not can, then this incidence relation is added in the described directed graph, upgrade simultaneously the masked state of relevant alarm in the described cache pool according to new directed graph;
Described alarm and control system is when receiving the order of the deletion incidence relation that the user sends by network management system, whether inquiry has this incidence relation to exist in the directed graph that preserve this locality, if have, then delete this incidence relation, and upgrade the masked state of relevant alarm in the cache pool according to this new directed graph.
The present invention also provides a kind of alarm and control system, is arranged in the network element device, comprises memory cell, receiving element and decision unit;
Be preset with the condition that incidence relation between a plurality of alarms and incidence relation are set up in the described memory cell;
Described receiving element is used to receive the alarm that described network element device produces;
Described decision unit is used for judging the child alarm that the described alarm that receives is other alarm of having received of described alarm and control system at the incidence relation of preserving according to described memory cell, and when the condition that the incidence relation between this alarm and described other alarm is set up has satisfied, shield this alarm; Otherwise do not shield this alarm.
Further, said system also can have following feature:
Incidence relation in the memory cell between a plurality of alarms adopts the mode of directed graph to represent, connect by a directed edge between two alarms of relevant relation, and the attribute weights of this directed edge is used to represent whether the condition that this incidence relation is set up is satisfied.
Further, said system also can have following feature:
Also be provided with cache pool in the described alarm and control system, described cache pool is used for all alarms that the described receiving element of buffer memory receives;
Described decision unit shields described alarm and is meant: described decision unit is arranged to the masked state of alarming described in the described cache pool to shield, and the transmit status of described alarm is set to not send;
Described decision unit does not shield described alarm and is meant: described decision unit is arranged to the masked state of alarming described in the described cache pool not shield, and the transmit status of described alarm is set to not send.
Described receiving element also is used for receiving alarm and recovers;
After the masked state that described decision unit also is used for the alarm of described cache pool is set to not shield, through after one section delay duration again masked state and the transmit status to this alarm judge, as judge this alarm and be in and do not shield attitude and transmit status not, then also be used for giving described network management system, and the transmit status that should alarm is set to send with this alarm report; Also be used for after receiving described alarm, condition according to incidence relation between a plurality of alarms of preserving in the described memory module and incidence relation establishment, judge whether preserve the condition that incidence relation is set up between satisfied and this alarm in the described alarm and control system and be in the not child alarm of masked state, if any, the masked state that then also is used for this child alarm is set to shield; Also be used in the transmit status of judging the related alarm of this alarm clearing send corresponding alarm clearing to described network management system, and the transmit status that should alarm being set to not send when sending; The condition that described judging module also is used for existing between described cache pool and this alarm incidence relation and incidence relation to set up has satisfied is in that the masked state of the child alarm of masked state is set to not shield; The masked state that described memory module also is used to calculate each alarm in the described cache pool is the time difference of another kind of state from a kind of state exchange, and this time difference has been preserved the reference value of the delay duration that is used as follow-up same alarm.
The present invention realizes that according to the correlation of each alarm, derivative feature alarm association reports decision making device.Preferentially report Root alarm, for the then related shielding of the alarm of deriving.Can effectively reduce the redundancy of warning information, significantly reduce alarm quantity.Give prominence to the source information of fault simultaneously, improve the efficient of orientation problem.
Description of drawings
Fig. 1 is the structural representation of alarm association relational tree in the prior art;
Fig. 2 is the structural representation of alarm association directed graph in the embodiment of the invention;
The flow chart that Fig. 3 reports for alarm association in the embodiment of the invention;
Fig. 4 is alarm association pond scanning report flow figure in the embodiment of the invention.
Embodiment
Below in conjunction with drawings and Examples technical scheme of the present invention is described in detail.
The basic design of the method for the invention is: be preset with the condition that incidence relation between a plurality of alarms and incidence relation are set up in the alarm and control system; This alarm and control system is after receiving alarm, if the incidence relation of preserving according to this locality is judged the child alarm that this alarm is other alarm of having received of this system, and the condition of being somebody's turn to do the incidence relation establishment between alarm and above-mentioned other alarm is satisfied, then shields this alarm.
In this article, all the subordinate's alarms under the father alarms all are called the child alarm of this father's alarm.
For the ease of alarm is handled, in alarm and control system, set up cache pool.All alarms that alarm and control system receives all will be put into cache pool earlier and be carried out buffer memory before reporting network management system, alarm and control system is safeguarded the state of each alarm in the cache pool.If judging certain alarm meets above-mentioned shielding condition (i.e. this alarm is the child alarm of other alarm of having received of this system, and the condition of being somebody's turn to do the incidence relation establishment between alarm and above-mentioned other alarm is satisfied), then shielding this alarm then can realize by the mode that the masked state of this alarm in the cache pool is arranged to shield, and the transmit status that should alarm is set to not send, this alarm is trapped in the cache pool, does not report network management system; Otherwise, the masked state of this alarm in the cache pool to be arranged to not shield, the transmit status of this alarm is set to not send.
Between each function element in the network element device and the functional module very big correlation is arranged, device or functional module break down, and tend to cause relative device or functional module to report relevant alarm.Therefore between the alarm very big incidence relation is arranged.Can put out the atomic relation of related alarm in order according to this correlation information.
The atomic relation of alarm can be described as A, B, C}, if the expression condition C is set up, alarm A will shield B and report network management system.Incidence relation has certain transitivity.Suppose and exist A, B, C1}, { two atomic relations of C2} then can be released when condition C 1, C2 set up simultaneously for B, D, and A is also with shield alarm D in alarm.When having only C1 to set up, alarm A is meeting shield alarm B only.When having only alarm C2 to set up, alarm A not only can not shield B, can shield alarm D yet.
Atomic relation according to alarm can generate the alarm association directed graph.Each alarm association atomic relation A, and B, a directed edge in the corresponding directed graph of C}, A is a starting point, and B is a terminal point, and C is that { A, the attribute of B} are used to determine the weights of this edge on the limit.When condition C was set up, the weights on limit were zero, and when being false, the weights on limit are 1.By the different condition C of combination definition, can realize complicated incidence relation.The directed graph that generates according to atomic relation as shown in Figure 2, each node among the figure is represented an alarm.
Therefore when specific implementation, incidence relation between a plurality of alarms in the alarm and control system can adopt the mode of directed graph to represent, be to connect by a directed edge between two alarms of relevant relation, the weights of this directed edge are used to represent whether the condition that this incidence relation is set up is satisfied.Comprise information such as warning information keyword, status poll function, example buffer area pointer in each alarm in the directed graph.Wherein, the warning information keyword is used for this alarm of unique sign, and the status poll function is used for the state of the query caching pond alarm identical with this alarm, and example buffer area pointer is used for representing the memory location of the alarm identical with this alarm at cache pool.
In addition, thereby for fear of receiving the problem that causes the redundant alarm generation because child alarm is alarmed by the alarm management system prior to the father, reporting of alarm taked time-delay mechanism, the masked state that is the alarm in the alarm and control system cache pool is set to not shield, after transmit status is set to not send, need through again the state of this alarm being judged after one section time-delay, as judge this alarm and still be in not shielding and transmit status not, then this alarm report is given network management system, and the transmit status that will alarm is updated to and sends.Mode or self study mode assignment that this delay duration can the employing system be provided with.The generation of each alarm and recovery and concrete environment have certain relation in the system.Under varying environment, father's alarm clearing recovers to child alarm, and child alarm produces the time difference difference that the father alarms generation.Therefore if adopt the self study mode, the time difference between the masked state that alarm and control system can calculate each alarm in the cache pool changes, and with the reference value of this time difference as the delay duration of follow-up corresponding identical alarm.
Alarm and control system is after receiving alarm, whether satisfy the shielding condition except that judging this alarm, the condition that incidence relation between a plurality of alarms that also need to preserve according to this locality and incidence relation are set up, judge whether preserve the condition that incidence relation is set up between satisfied and this alarm in the cache pool and be in the not child alarm of masked state, if any, then the masked state of this child alarm is set to shield.
After adopting this mode to add that delay reports mechanism, since each not the alarm of conductively-closed all need just can be reported to network management system through after a while delay, therefore, receive father's alarm of a certain alarm in the cache pool as alarm and control system in this delay duration, then can directly this be in not shielding and not the alarm shield of transmit status fall, be trapped in the cache pool, promptly can effectively avoid child alarm to alarm the problem that is received and is reported to network management system, reduce reporting of redundant alarm prior to the father.
Alarm and control system is after receiving alarm clearing, if the transmit status of judging this alarm then send corresponding alarm clearing to network management system, and the transmit status that should alarm is set to not send for sending.
In addition, alarm and control system is after receiving alarm clearing, to travel through this alarm child node, upgrade the masked state of child node alarm example, be converted into the alarm of non-shielding attitude by the shielding attitude for masked state, to start above-mentioned time-delay and report mechanism, when the delay duration that reaches separately, whether will report by the state decision of judging this child alarm.Judgment rule is identical with above-mentioned alarm report rule, promptly still is in not shielding and not during transmit status, this child alarm is reported to network management system, and the transmit status of this child alarm is set to send when this child alarm.
In addition, the user can also safeguard the condition of incidence relation between the alarm on one or more network element devices of this network management system management and incidence relation establishment by network management system, can increase, delete, change operation to above-mentioned data, storage after the renewal is in database or file, so that network element device can also come into force after restarting.Below convenient for statement, the condition that the incidence relation between the alarm and incidence relation are set up abbreviates correlation rule as.
When the user increases correlation rule, alarm and control system will travel through existing directed graph, if had dependency relation then will be to the user prompt error message.If there is no, judge in advance then whether the correlation rule that judgement will add can make directed graph constitute the loop.If can not constitute the loop, then this correlation rule is added in the directed graph, upgrade the masked state of relevant alarm in the cache pool simultaneously according to new directed graph.
When the user deletes correlation rule, { C} will inquire about in directed graph at first whether this rule existence is arranged, if exist, then delete this correlation rule, and upgrade the relevant masked state of alarming in cache pool according to this new directed graph for A, B such as deletion rule; Otherwise, to the user prompt error message.
Following mask body is introduced the idiographic flow that alarm association reports, and as shown in Figure 3, mainly may further comprise the steps:
After an alarm is received by step 301, alarm association system, in directed graph, search whether there is matched node.If there is no matched node illustrates that then this alarm need not to do related shielding and reports, and directly alarm is sent to network management system, finishes; If inquire matched node, illustrate that then this alarm need do related shielding judgement, enter step 302;
Carry out breadth First traversal according to directed graph, the masked state of child alarm that meets this alarm of shielding condition in the cache pool is set to shield;
Whether the delay duration of step 306, judgement alarm is zero, if be zero then this alarm of expression does not need to do delay reports, need report immediately, then enter step 307, if it is non-vanishing, expression alarm need be in cache pool the buffer memory fixed time, whether have the father to alarm arrival to check, directly end process.
Through above association process, will judge whether alarm needs to send to network management system according to the masked state of existing alarm to the alarm report flow process.To directly send to network management system for the alarm that does not need to shield.If the alarm conductively-closed maybe needs time-delay to report, alarm will reside in the cache pool, for follow-up alarm scanning flow processing.
Alarm scanning flow process is in order to handle because of father's alarm clearing, condition change or the father alarms incident generations such as time-delay arrivals, and need be dealt into the situation of network management system from cache pool again.As shown in Figure 4, it mainly comprises following flow process:
The time-delay counting of step 401, renewal alarm, in above-mentioned steps 307, the alarm that the needs time-delay is reported is trapped in the cache pool, and for this alarm has distributed delay duration, will carry out from subtracting this delay duration with a delay counter in this step;
The transmit status that should alarm in step 404, the query caching pond, if be in not transmit status, then this flow process finishes.Otherwise, carry out next step;
The transmit status of alarming in step 407, the query caching pond, if be in transmit status, then this flow process finishes.Otherwise, need send this alarm to network management system.This situation illustrates this alarm because reasons such as father's alarm clearing or configuration change need resend to network management system;
The transmit status that should alarm in step 409, the renewal cache pool, the transmit status of this alarm is set to send.
By the processing of this alarm association screening arrangement, can realize association analysis is carried out in alarm, significantly reduced reporting of the alarm of deriving, reduced the redundancy of report and alarm from the source, improved the efficient of fault location.
The present invention also provides a kind of alarm and control system, is arranged in the network element device, comprises memory cell, receiving element and decision unit;
Be preset with the condition that incidence relation between a plurality of alarms and incidence relation are set up in the described memory cell;
Described receiving element is used to receive the alarm that described network element device produces;
Described decision unit is used for judging the child alarm that the described alarm that receives is other alarm of having received of described alarm and control system at the incidence relation of preserving according to described memory cell, and when the condition that the incidence relation between this alarm and described other alarm is set up has satisfied, shield this alarm; Otherwise do not shield this alarm.
Wherein, incidence relation in the memory cell between a plurality of alarms can adopt the mode of directed graph to represent, connect by a directed edge between two alarms of relevant relation, and the attribute weights of this directed edge are used to represent whether the condition that this incidence relation is set up is satisfied.
Also can be provided with cache pool in the described alarm and control system, this cache pool is used for all alarms that the buffer memory receiving element receives;
Decision unit shields described alarm and is meant: decision unit is arranged to the masked state of alarming in the cache pool to shield, and the transmit status of alarm is set to not send;
Decision unit not shield alarm is meant: decision unit is arranged to the masked state of alarming in the cache pool not shield, and the transmit status of alarm is set to not send.
Receiving element also is used for receiving alarm and recovers;
After the masked state that decision unit also is used for the alarm of cache pool is set to not shield, through after one section delay duration again masked state and the transmit status to this alarm judge, as judge this alarm and be in and do not shield attitude and transmit status not, then also be used for giving network management system, and the transmit status that should alarm is set to send with this alarm report; Also be used for after receiving described alarm, condition according to incidence relation between a plurality of alarms of preserving in the memory module and incidence relation establishment, judge whether preserve the condition that incidence relation is set up between satisfied and this alarm in the alarm and control system and be in the not child alarm of masked state, if any, the masked state that then also is used for this child alarm is set to shield; Also be used in the transmit status of judging the related alarm of this alarm clearing send corresponding alarm clearing to network management system, and the transmit status that should alarm being set to not send when sending; The condition that judging module also is used for existing between cache pool and this alarm incidence relation and incidence relation to set up has satisfied is in that the masked state of the child alarm of masked state is set to not shield; The masked state that memory module also is used to calculate each alarm in the cache pool is the time difference of another kind of state from a kind of state exchange, and this time difference has been preserved the reference value of the delay duration that is used as follow-up same alarm.
Certainly; the present invention also can have other various embodiments; under the situation that does not deviate from spirit of the present invention and essence thereof; those of ordinary skill in the art work as can make various corresponding changes and distortion according to the present invention, but these corresponding changes and distortion all should belong to the protection range of the appended claim of the present invention.
Claims (12)
1. the processing method of an alarm is characterized in that,
Be preset with the condition that incidence relation between a plurality of alarms and incidence relation are set up in the alarm and control system; This alarm and control system is after receiving alarm, if the incidence relation of preserving according to this locality is judged the child alarm of other alarm that this alarm received for described alarm and control system, and the condition of being somebody's turn to do the incidence relation establishment between alarm and described other alarm is satisfied, then shields this alarm; Otherwise do not shield this alarm.
2. the method for claim 1 is characterized in that,
Be provided with cache pool in the described alarm and control system; All alarms that described alarm and control system will receive are put into described cache pool and are carried out buffer memory;
Described alarm and control system shields described alarm and is meant: described alarm and control system is arranged to the masked state of described alarm to shield, and the transmit status of described alarm is set to not send;
Described alarm and control system does not shield described alarm and is meant: described alarm and control system is arranged to the masked state of described alarm not shield, and the transmit status of described alarm is set to not send.
3. the method for claim 1 is characterized in that,
Incidence relation in the described alarm and control system between a plurality of alarms adopts the mode of directed graph to represent, connect by a directed edge between two alarms of relevant relation, and the attribute weights of this directed edge are used to represent whether the condition that this incidence relation is set up is satisfied.
4. method as claimed in claim 2 is characterized in that, also comprises:
After the masked state of the alarm in the described cache pool of described alarm and control system is set to not shield, through after one section delay duration again masked state and the transmit status to this alarm judge, as judge this alarm and be in and do not shield attitude and transmit status not, then give described network management system, and the transmit status that should alarm is set to send with this alarm report.
5. the method for claim 1 is characterized in that, also comprises:
Described alarm and control system is after receiving described alarm, the condition set up of incidence relation between a plurality of alarms of preserving according to this locality and incidence relation also, judge whether this locality is preserved the condition that incidence relation is set up between satisfied and this alarm and be in the not child alarm of masked state, if any, then the masked state of this child alarm is set to shield.
6. as claim 4 or 5 described methods, it is characterized in that,
The masked state that described alarm and control system calculates each alarm in the cache pool is the time difference of another kind of state from a kind of state exchange, and with the reference value of this time difference as the delay duration of follow-up same alarm.
7. as claim 2 or 4 described methods, it is characterized in that, also comprise:
Described alarm and control system is after receiving alarm clearing, if the transmit status of judging this alarm then send corresponding alarm clearing to network management system, and the transmit status of this this alarm is set to not send for sending.
8. method as claimed in claim 7 is characterized in that, also comprises:
Described alarm and control system is after receiving alarm clearing, and the condition that exists incidence relation and incidence relation to set up in the also described cache pool and between this alarm has satisfied is in that the masked state of the child alarm of masked state is set to not shield.
9. method as claimed in claim 3 is characterized in that, also comprises:
Described alarm and control system as is judged and is not locally had identical incidence relation when receiving the order of the new incidence relation of increase that the user sends by network management system, judges then whether described initiate incidence relation can make described directed graph constitute the loop; If not can, then this incidence relation is added in the described directed graph, upgrade simultaneously the masked state of relevant alarm in the described cache pool according to new directed graph;
Described alarm and control system is when receiving the order of the deletion incidence relation that the user sends by network management system, whether inquiry has this incidence relation to exist in the directed graph that preserve this locality, if have, then delete this incidence relation, and upgrade the masked state of relevant alarm in the cache pool according to this new directed graph.
10. an alarm and control system is arranged in the network element device, it is characterized in that, comprises memory cell, receiving element and decision unit;
Be preset with the condition that incidence relation between a plurality of alarms and incidence relation are set up in the described memory cell;
Described receiving element is used to receive the alarm that described network element device produces;
Described decision unit is used for judging the child alarm that the described alarm that receives is other alarm of having received of described alarm and control system at the incidence relation of preserving according to described memory cell, and when the condition that the incidence relation between this alarm and described other alarm is set up has satisfied, shield this alarm; Otherwise do not shield this alarm.
11. system as claimed in claim 10 is characterized in that,
Incidence relation in the memory cell between a plurality of alarms adopts the mode of directed graph to represent, connect by a directed edge between two alarms of relevant relation, and the attribute weights of this directed edge is used to represent whether the condition that this incidence relation is set up is satisfied.
12. system as claimed in claim 10 is characterized in that,
Also be provided with cache pool in the described alarm and control system, described cache pool is used for all alarms that the described receiving element of buffer memory receives;
Described decision unit shields described alarm and is meant: described decision unit is arranged to the masked state of alarming described in the described cache pool to shield, and the transmit status of described alarm is set to not send;
Described decision unit does not shield described alarm and is meant: described decision unit is arranged to the masked state of alarming described in the described cache pool not shield, and the transmit status of described alarm is set to not send.
Described receiving element also is used for receiving alarm and recovers;
After the masked state that described decision unit also is used for the alarm of described cache pool is set to not shield, through after one section delay duration again masked state and the transmit status to this alarm judge, as judge this alarm and be in and do not shield attitude and transmit status not, then also be used for giving described network management system, and the transmit status that should alarm is set to send with this alarm report; Also be used for after receiving described alarm, condition according to incidence relation between a plurality of alarms of preserving in the described memory module and incidence relation establishment, judge whether preserve the condition that incidence relation is set up between satisfied and this alarm in the described alarm and control system and be in the not child alarm of masked state, if any, the masked state that then also is used for this child alarm is set to shield; Also be used in the transmit status of judging the related alarm of this alarm clearing send corresponding alarm clearing to described network management system, and the transmit status that should alarm being set to not send when sending; The condition that described judging module also is used for existing between described cache pool and this alarm incidence relation and incidence relation to set up has satisfied is in that the masked state of the child alarm of masked state is set to not shield; The masked state that described memory module also is used to calculate each alarm in the described cache pool is the time difference of another kind of state from a kind of state exchange, and this time difference has been preserved the reference value of the delay duration that is used as follow-up same alarm.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2009102607145A CN102111788A (en) | 2009-12-29 | 2009-12-29 | Alarm processing method and alarm management system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2009102607145A CN102111788A (en) | 2009-12-29 | 2009-12-29 | Alarm processing method and alarm management system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN102111788A true CN102111788A (en) | 2011-06-29 |
Family
ID=44175779
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2009102607145A Pending CN102111788A (en) | 2009-12-29 | 2009-12-29 | Alarm processing method and alarm management system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102111788A (en) |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102938708A (en) * | 2012-11-05 | 2013-02-20 | 国网电力科学研究院 | Alarm transmission mode based alarm correlation analysis system and analysis method thereof |
| CN104009854A (en) * | 2013-02-21 | 2014-08-27 | 中兴通讯股份有限公司 | Alarm processing method and apparatus, alarm associated information setting method |
| CN104767630A (en) * | 2014-01-03 | 2015-07-08 | 中国移动通信集团浙江有限公司 | Alarm correlation-based sheet dispatching method and device |
| WO2016095408A1 (en) * | 2014-12-18 | 2016-06-23 | 中兴通讯股份有限公司 | Controller and method for processing alarm relevance |
| CN107633307A (en) * | 2017-09-08 | 2018-01-26 | 国家计算机网络与信息安全管理中心 | Power supply-distribution system Root alarm detection method, device, terminal and computer-readable storage medium |
| CN108206747A (en) * | 2016-12-16 | 2018-06-26 | 中国移动通信集团山西有限公司 | Method for generating alarm and system |
| CN109039740A (en) * | 2018-08-01 | 2018-12-18 | 平安科技（深圳）有限公司 | A kind of method and apparatus handling O&M monitoring alarm |
| CN114706371A (en) * | 2022-04-13 | 2022-07-05 | 中国第一汽车股份有限公司 | Complete vehicle network non-dormancy diagnosis method and device, electronic equipment and storage medium |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1492624A (en) * | 2002-10-22 | 2004-04-28 | 华为技术有限公司 | Processing method of communication network warning and relatively analysis management device |
| CN1863080A (en) * | 2005-10-20 | 2006-11-15 | 华为技术有限公司 | Warning managing method and system |
| CN1874249A (en) * | 2005-05-31 | 2006-12-06 | 华为技术有限公司 | Method for treating relativity of alarm based on parent-child relationship |
-
2009
- 2009-12-29 CN CN2009102607145A patent/CN102111788A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1492624A (en) * | 2002-10-22 | 2004-04-28 | 华为技术有限公司 | Processing method of communication network warning and relatively analysis management device |
| CN1874249A (en) * | 2005-05-31 | 2006-12-06 | 华为技术有限公司 | Method for treating relativity of alarm based on parent-child relationship |
| CN1863080A (en) * | 2005-10-20 | 2006-11-15 | 华为技术有限公司 | Warning managing method and system |
Cited By (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102938708B (en) * | 2012-11-05 | 2016-03-30 | 国网电力科学研究院 | Based on alarm correlation analysis system and the analytical method thereof of alarm propagation pattern |
| CN102938708A (en) * | 2012-11-05 | 2013-02-20 | 国网电力科学研究院 | Alarm transmission mode based alarm correlation analysis system and analysis method thereof |
| US9788218B2 (en) | 2013-02-21 | 2017-10-10 | Xi'an Zhongxing New Software Co., Ltd. | Alarm processing method and device, alarm associated information setting method |
| CN104009854A (en) * | 2013-02-21 | 2014-08-27 | 中兴通讯股份有限公司 | Alarm processing method and apparatus, alarm associated information setting method |
| WO2014127621A1 (en) * | 2013-02-21 | 2014-08-28 | 中兴通讯股份有限公司 | Alarm processing method and device, alarm associated information setting method |
| EP2933949A4 (en) * | 2013-02-21 | 2016-05-04 | Zte Corp | Alarm processing method and device, alarm associated information setting method |
| CN104009854B (en) * | 2013-02-21 | 2019-01-22 | 中兴通讯股份有限公司 | A kind of alert processing method and device, alarm association information setting method |
| CN104767630A (en) * | 2014-01-03 | 2015-07-08 | 中国移动通信集团浙江有限公司 | Alarm correlation-based sheet dispatching method and device |
| WO2016095408A1 (en) * | 2014-12-18 | 2016-06-23 | 中兴通讯股份有限公司 | Controller and method for processing alarm relevance |
| CN105790972A (en) * | 2014-12-18 | 2016-07-20 | 中兴通讯股份有限公司 | Controller and alarm correlation processing method |
| CN105790972B (en) * | 2014-12-18 | 2020-09-29 | 南京中兴软件有限责任公司 | Controller and alarm correlation processing method |
| CN108206747A (en) * | 2016-12-16 | 2018-06-26 | 中国移动通信集团山西有限公司 | Method for generating alarm and system |
| CN108206747B (en) * | 2016-12-16 | 2021-09-03 | 中国移动通信集团山西有限公司 | Alarm generation method and system |
| CN107633307A (en) * | 2017-09-08 | 2018-01-26 | 国家计算机网络与信息安全管理中心 | Power supply-distribution system Root alarm detection method, device, terminal and computer-readable storage medium |
| CN107633307B (en) * | 2017-09-08 | 2021-08-31 | 国家计算机网络与信息安全管理中心 | Power supply and distribution system root alarm detection method, device, terminal and computer storage medium |
| CN109039740A (en) * | 2018-08-01 | 2018-12-18 | 平安科技（深圳）有限公司 | A kind of method and apparatus handling O&M monitoring alarm |
| CN114706371A (en) * | 2022-04-13 | 2022-07-05 | 中国第一汽车股份有限公司 | Complete vehicle network non-dormancy diagnosis method and device, electronic equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102111788A (en) | Alarm processing method and alarm management system | |
| CN109756364B (en) | Micro-service performance optimization system and analysis method based on log analysis | |
| CN100589418C (en) | The generation method and the generation system of alarm correlation rule | |
| CN112653586B (en) | Time-space big data platform application performance management method based on full link monitoring | |
| CN105099783B (en) | A kind of method and system for realizing operation system alarm emergency disposal automation | |
| CN108197261A (en) | A kind of wisdom traffic operating system | |
| CN111339175B (en) | Data processing method, device, electronic equipment and readable storage medium | |
| CN102938710B (en) | For supervisory control system and the method for large-scale server | |
| CN105183860B (en) | Method of data synchronization and system | |
| CN1992632B (en) | Communication network warning method and warning system | |
| US20210390422A1 (en) | Knowledge-Base Information Sensing Method And System For Operations And Maintenance Of Data Center | |
| CN107272535A (en) | The linkage and interlock method of a kind of intelligent building management system | |
| CN109785595A (en) | A kind of vehicle abnormality track real-time identification method based on machine learning | |
| CN109088773B (en) | Fault self-healing method and device, server and storage medium | |
| US9210057B2 (en) | Cross-cutting event correlation | |
| CN104486109A (en) | Fault detection and recovery methods and devices | |
| CN111881011A (en) | Log management method, platform, server and storage medium | |
| CN105917625A (en) | Classification of detected network anomalies using additional data | |
| US10346651B2 (en) | Low cost, wide area RFID system | |
| CN111581056B (en) | Software engineering database maintenance and early warning system based on artificial intelligence | |
| CN111581232B (en) | ELK-based slow SQL real-time analysis method and system | |
| CN111782672A (en) | Multi-field data management method and related device | |
| CN103248522A (en) | Performance data reporting method and device | |
| CN100413257C (en) | Network element warning data obtaining method | |
| CN109818795A (en) | The failure analysis methods and system that a kind of IN service dynamic is switched |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C12 | Rejection of a patent application after its publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20110629 |