CN102201928A - Alarm level processing method and alarm server - Google Patents

Alarm level processing method and alarm server Download PDF

Info

Publication number
CN102201928A
CN102201928A CN201010140142XA CN201010140142A CN102201928A CN 102201928 A CN102201928 A CN 102201928A CN 201010140142X A CN201010140142X A CN 201010140142XA CN 201010140142 A CN201010140142 A CN 201010140142A CN 102201928 A CN102201928 A CN 102201928A
Authority
CN
China
Prior art keywords
alarm
server
described alarm
rank
information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201010140142XA
Other languages
Chinese (zh)
Inventor
董波
王巍
胡刚
丁丽洁
张玲东
陈子晔
刘晓宇
伏晓海
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to CN201010140142XA priority Critical patent/CN102201928A/en
Priority to PCT/CN2010/079837 priority patent/WO2011116615A1/en
Publication of CN102201928A publication Critical patent/CN102201928A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0604Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
    • H04L41/0622Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time based on time

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Alarm Systems (AREA)

Abstract

The invention discloses an alarm level processing method and an alarm server. The method comprises the following steps of: pre-configuring information of alarm level adjustment; receiving an alarm and making a record by using the alarm server; and adjusting the level of the alarm according to recorded information and the pre-configured information of the alarm level adjustment by using the alarm server. By adopting the alarm level processing method and the alarm server, the system security is enhanced.

Description

Alarm level processing method and alarm server
Technical field
The present invention relates to the communications field, in particular to a kind of alarm level processing method and alarm server.
Background technology
Fault Management System is mainly by observing and analyze the state information of each network element report, finds abnormal conditions, fault location, isolated fault and solve fault exactly in the network operation timely and accurately.
Most important function is an alarm function in the Fault Management System, this function generally is after receiving the alarm of alarm source by alarm collection process at present, be transmitted to alarm server, after alarm server is received the alarm that alarm collection process forwards, add the alarm buffering area, after handling by analysis, upgrade record alert database, send out client end interface such as message informing WEB simultaneously and carry out real-time update and show.
In the existing fault management system, every kind of alarm is all according to its influence to whole system, (for example be set to accordingly fixedly alarm level, corresponding relation can write in the alarm configuration storehouse), alarm server is for the alarm code of collecting, read the alarm configuration storehouse and mate this corresponding relation, upgrade the current alarm storehouse, send out client end interface such as message informing WEB simultaneously and refresh demonstration in real time.
From the above, in the existing fault management system, the alarm level of every kind of alarm code is all fixed.There is the rank of some alarms lower, even should alarm occur repeatedly, also be easy to be left in the basket, but recurrent lower priority alarm may mean the important situation that taken place, for example, illegal molecule malice Brute Force system assignment is given the password (alarm level of password mistake is not high) of ancillary equipment, in the existing fault management system, be easy to ignore this recurrent alarm, thereby make system have potential safety hazard.
Summary of the invention
Main purpose of the present invention is to provide a kind of alarm level processing scheme, one of to address the above problem at least.
According to an aspect of the present invention, provide a kind of alarm level processing method, this method may further comprise the steps: the information that pre-configured alarm level is adjusted; Alarm server receives alarm, the line item of going forward side by side; The rank that the information adjustment that alarm server is adjusted according to the information and the pre-configured alarm level of record is alarmed.
Further, alarm server receives alarm, and recorder is to the number of times of alarm, and arrives at number of times under the situation of pre-configured threshold value, adjusts the rank of alarm.
Further, alarm server recorder comprises to the number of times of alarm: alarm server judges whether the time interval between current alarm that receives and the preceding alarm that once receives satisfy predetermined condition, and be under the situation that is in judged result, alarm server increases the number of times of record, otherwise it is constant to keep the number of times of record.
Further, alarm server receives alarm, and recorder is to the time of alarm, and determines and the preceding time interval that once receives alarm according to the time, satisfies the rank of adjusting alarm under the situation in the pre-configured time interval in the time interval.
Further, alarm server comprises according to the rank of the information adjustment alarm of the information of record and pre-configured alarm level adjustment: other threshold value of level of the pre-configured alarm of alarm server, and whether the rank of judging adjusted alarm surpasses threshold value, surpassing under the situation of threshold value, the rank of alarm is set to threshold value.
Further, said method also comprises: after alarm server determined to adjust the rank of alarm, alarm server sent to the alarm client with alarm.
According to a further aspect in the invention, also provide a kind of alarm server, having comprised: configuration module is used to dispose the information that alarm level is adjusted; Logging modle is used for receiving alarm, the line item of going forward side by side; And adjusting module, be used for the rank of alarming according to the information adjustment that the information and the pre-configured alarm level of record are adjusted.
Further, logging modle recorder is to the number of times of alarm, and adjusting module arrives at number of times under the situation of pre-configured threshold value, adjusts the rank of alarm.
Further, above-mentioned alarm server also comprises: judge module is used to judge whether the time interval between current alarm that receives and the preceding alarm that once receives satisfy predetermined condition; Logging modle is under the situation that is in the judged result of judge module, the number of times of record is increased, otherwise it is constant to keep the number of times of record.
Further, logging modle recorder is to the time of alarm, and adjusting module determines and the preceding time interval that once receives alarm according to the time, and satisfies the rank of adjusting alarm under the situation in the pre-configured time interval in the time interval.
By the present invention, adopt alarm server to receive alarm, and write down the information of this reception operation; Alarm server has solved in the correlation technique because alarm level is fixed and may cause system to have the problem of potential safety hazard according to the rank of information adjustment alarm.Also realized and can the adjustment information of alarm level be configured, made the processing of alarm more flexible.Strengthened security of system by the present invention.
Description of drawings
Accompanying drawing described herein is used to provide further understanding of the present invention, constitutes the application's a part, and illustrative examples of the present invention and explanation thereof are used to explain the present invention, do not constitute improper qualification of the present invention.In the accompanying drawings:
Fig. 1 is the flow chart according to the alarm level processing method of the embodiment of the invention;
Fig. 2 is the structured flowchart according to the alarm level processing unit of the embodiment of the invention;
Fig. 3 is the alarm level processing unit preferred construction block diagram according to the embodiment of the invention;
Fig. 4 is that the construction module according to the alarm level treatment system of the embodiment of the invention concerns schematic diagram;
Fig. 5 is the business realizing flow chart according to the embodiment of the invention; And
Fig. 6 is the flow chart according to the operation of the configuration of the embodiment of the invention.
Embodiment
Hereinafter will describe the present invention with reference to the accompanying drawings and in conjunction with the embodiments in detail.Need to prove that under the situation of not conflicting, embodiment and the feature among the embodiment among the application can make up mutually.
Fig. 1 is the flow chart according to the alarm level processing method of the embodiment of the invention, and as shown in Figure 1, this flow process may further comprise the steps:
Step S102, the information that the configuration alarm level is adjusted;
Step S104, alarm server receives alarm, the line item of going forward side by side, for example, in this step, alarm server recorder also can be write down the information of this alarm itself to time of this alarm, number of times etc., as the temporal information of carrying in alarming etc.;
Step S106, the rank that the information adjustment that alarm server is adjusted according to the information and the pre-configured alarm level of record is alarmed, for example, the information that receives same alarm and/or the current information that receives this alarm of record before the information of this record can comprise.
To step S106, alarm server can be adjusted the rank of this alarm dynamically according to the situation that receives this alarm by above-mentioned steps S102.For the rank of alarm of the prior art is fixed, can avoid the alarm that rank is low to ignore, the fail safe of system is provided.In addition,, can dispose flexibly, thereby can improve the flexibility ratio that alarm server is handled alarm according to the information of actual conditions to the alarm level adjustment by above-mentioned steps.
Preferably, alarm server can arrive the number of times of alarm by recorder, and arrives at number of times under the situation of pre-configured threshold value, adjusts the rank of alarm.
Adopt number of times can effectively handle recurrent alarm as other foundation of the level of adjusting alarm.For example, can in time find the password of illegal molecule malice Brute Force system assignment to ancillary equipment.
Preferably, alarm server also can be by the time of recorder to alarm, and according to current time in the definite and preceding time interval that once receives alarm that receives this alarm, and adjust the rank of alarm according to the time interval, for example, can a pre-configured time interval, satisfy in the time interval that receives this alarm under the situation in the pre-configured time interval, adjust the rank of this alarm, wherein, satisfying the pre-configured time interval can be to be greater than or less than the pre-configured time interval, perhaps, also can equal the pre-configured time interval.
Adjusting the rank of alarm at interval according to time of reception, can be the rank that improves the alarm that frequently receives in the short time, also can reduce the rank of the alarm that does not all receive for a long time.For example,, surpassed 12 hours, so just can reduce the rank of this alarm if receive the time interval of alarm for twice if the time interval of the alarm that receives for twice in 1 minute, is then improved the rank of this alarm.Need to prove that the time of reception of alarm can be the time that alarm server receives this alarm, for example, the alarm collection process in the alarm server is collected the time of this alarm; The time of reception of this alarm also can be the time that this alarm itself is carried, for example, and the time of carrying in this alarm.
Certainly, also can carry out combination in conjunction with top adjustment mode, for example, alarm server judges whether the time interval between current alarm that receives and the preceding alarm that once receives satisfy predetermined condition, and be under the situation that is in judged result, alarm server increases the number of times of record, otherwise it is constant to keep the number of times of record.When number of times is accumulated to certain value, adjust the rank of alarm.Can make the statistics of alarm number of times more effective like this.
Rank for fear of alarm is heightened or is turned down by unconfined, alarm server can be provided with other threshold value of level of alarm, and whether the rank of judging adjusted alarm surpass threshold value, surpassing under the situation of above-mentioned threshold value, and the rank of alarm is set to threshold value.
Preferably, alarm server can send to alarm the alarm client again after determine adjusting the rank of this alarm, can reduce mutual between alarm server and the alarm client like this.
In addition, after alarm clearing, for example, alarm server can revert to default level with the rank of this alarm after receiving the corresponding alarm recovery message of alarm.
Each above-mentioned embodiment can realize by increasing the alarm level management module, this alarm level management module can be provided with alarm server in.Can set up alarm level on their own by the user, for be the user more scheme to the alarm rank manage, this module can comprise that following two part: Fig. 2 are according to the structured flowchart of the alarm level processing unit of the embodiment of the invention, are explained below in conjunction with Fig. 2 on function.
First, dynamically promote the configuration section (configuration module 22) of alarm level, this part can carry out following configuration one of at least: can promote other alarm code selections of level, the initial alarm level of alarm code, alarm code alarm increase progressively the alarm level upper limit that grade, alarm code can promote, alarm code alarm update time at interval thresholding, alarm code alarm upgrade frequency thresholding, whether enable sign.
If this alarm code has disposed the information that needs dynamically to promote alarm level, and be in the configuration initiate mode, alarm server can be according to this information, in conjunction with the current alarm situation, send out message to the alarm client after dynamically adjusting alarm level, the alarm client is according to the message of receiving, real-time update shows.
This configuration section provides friendly user interface, and external interface is provided, and also the configuration for the user provides interface.Warning system is suitable for more flexibly, can better satisfies user's demand, improve product competitiveness.
Second portion dynamically promotes the business realizing part (or being called the alarm level processing unit) of alarm level, and as shown in Figure 2, this device comprises: logging modle 24 is used for receiving alarm, the line item of going forward side by side; Adjusting module 26 is connected to logging modle 24, is used for adjusting according to the information of the information of record and pre-configured alarm level adjustment the rank of this alarm.
Logging modle 24 can recorder arrive the number of times of alarm, and adjusting module 26 arrives at number of times under the situation of threshold value, adjusts the rank of alarm.Fig. 3 is the preferred structure block diagram according to the alarm level processing unit of the embodiment of the invention, this device can also comprise: judge module 32 is connected to logging modle 24, is used to judge whether the time interval between current alarm that receives and the preceding alarm that once receives satisfy predetermined condition; Logging modle 24 is under the situation that is in the judged result of judge module 32, the number of times of record is increased, otherwise it is constant to keep the number of times of record.
Logging modle 24 can also recorders to the time of alarm, adjusting module 26 determines and the preceding time interval that once receives alarm according to the time, and satisfies the rank of adjusting this alarm under the situation in the pre-configured time interval in this time interval.
By said apparatus, alarm server can add the alarm buffering area after receiving alarm information, and whether needs promote according to fixed this alarm level of the up-to-date dynamic lifting alarm level allocation list that gets access to and current alarm voting.Promote if desired, then revise and send out message behind the alarm level and carry out the interface real-time update to client and show, upgrade record alert database simultaneously, thereby reach the purpose of dynamic lifting alarm level.And, pass through said apparatus, can and promote the compartment analysis contrast the lifting thresholding of repeatedly warning information of receiving and configuration, that confirms lifting just sends out message to alarm client real-time update interface, alarm server upgrades the Real-time Alarm storehouse more simultaneously, reduced alarm server and alarm client like this, the interaction times between alarm server and the record alert database, thus reduced the impact that frequent alarm causes system.
Below employed table in the present embodiment being illustrated, certainly, also can adjusting the content in these tables according to the actual needs, is exemplary illustration below, and the present invention is not limited to this.
Dynamically promote the alarm level allocation list: this table is imported in order to the demand that recording user promotes alarm level, comprising: alarm code, initially alarm grade, alarm increases progressively grade, the alarm level upper limit that can promote, the alarm update time is thresholding at interval, alarm upgrading frequency thresholding.Wherein, alarm code can be used as the unique index of this table.
The current alarm table: this table comprises in order to record current alarm sign indicating number: alarm description, the frequency takes place, current alarm grade, net element information in time of origin.
History alarm table: in order to the alarm code that record has recovered, alarm description, time of origin, recovery time, net element information.
Alarm configuration table: in order to the one-to-one relationship of record alarm code and alarm description.
Fig. 4 is that the construction module according to the alarm level treatment system of the embodiment of the invention concerns schematic diagram, and this system comprises as lower module:
Alarm source 101: by the equipment that is distributed in everywhere, each module such as service node is formed jointly, when they break down or need alarm report, can send alarm information to alarm collection process 102, this alarm information content can comprise: information such as alarm code, module self identification, alarm theme, alarm level, alarm time.
Alarm collection process 102: compile the alarm of reception from the alarm source 101 everywhere that distributes, be transmitted to alarm server 103, wherein, alarm collection process 102 can be arranged in the alarm server 103; Simultaneously, this process can avoid a large amount of alarms to impact alarm server 103, and the alarm pooling feature is arranged.
Alarm server 103: be the professional core processing module of fault management system, main responsible reception is also handled from alarm collection process 102 and is compiled the warning information that forwards.
Alarm server 103 adds the alarm buffering area after receiving alarm information, and according to up-to-date dynamic lifting alarm level allocation list and the current alarm table that gets access to, determine whether this alarm level needs to promote, promote if desired, a message carries out interface real-time update demonstration for alarm client 104 after then revising alarm level, upgrade the current alarm table in the record alert database 105 simultaneously, thereby reach the purpose of dynamic lifting alarm level.
Alarm client 104: friendly user interface (for example, the WEB page, alarm box etc.) is provided, and this alarm client is the external interface of realizing, also is the interchange approach that the user realizes own demand.The function that this alarm client 104 provides comprises:
1. the interface configurations of dynamic lifting alarm level is provided to the user.
After the user determine to revise configuration operation, with the dynamic lifting alarm level allocation list of this config update in the record alert database 105; After the user carries out synchronous configuration operation, send out message and give alarm server 103.After alarm server 103 is received this message, upgrade the dynamic lifting alarm level allocation list in the self EMS memory.
With the form at interface to warning information such as the real-time display alarm sign indicating number of user, module self identification, alarm theme, alarm level, alarm times.
3. the query history alarm function is provided.
Record alert database 105: alarm configuration data, current alarm, the storage container of information such as history alarm.The function that this record alert database 105 provides comprises:
1. receive current alarm update request, and upgrade the current alarm table from alarm server 103.
2. current alarm information and the dynamic query requests that promotes information such as alarm level configuration when receiving from alarm server 103 startups, and corresponding data is provided.
3. receive dynamic lifting alarm level config update request, and upgrade dynamically lifting alarm level allocation list from alarm client 104.
4. the inquiry that receives from alarm client 104 dynamically promotes the alarm level configuration, requests such as history alarm, and corresponding data is provided.
Fig. 5 is the business realizing flow chart according to the embodiment of the invention, and this flow process comprises the steps:
Step S501 after alarm collection process is received the alarm of alarm source, is transmitted to alarm server, impacts alarm server for avoiding a large amount of alarms, can alarm buffering; Alarm server adds the alarm buffering area after receiving the alarm that alarm collection process forwards;
Step S502, in the last synchronizing information of alarm client, the information in the dynamic lifting alarm level allocation list that alarm server will get access to has been updated in the internal memory;
Step S503 in the information that alarm server obtains, judges whether the dynamic lifting alarm level function of this alarm code enables, if not enabled begins common alarm processing from step S502; If enable, execution in step S504 then;
Step S504, whether alarm server is retrieved this alarm code and is existed according to the current alarm table information in the internal memory, if there is no, and execution in step S505 then, if exist, alarm server obtains all current alarm information of this alarm code, execution in step S506;
Step S505, alarm server is alarmed according to the initial alarm level that dynamically promotes this alarm code in the alarm level allocation list;
Step S506, step S503 and S504 get access under the situation of information, and alarm server contrasts both information, judge that this alarm code alarm time interval or the frequency surpass the thresholding of configuration, if be no more than then execution in step S505; If surpass, execution in step S507 then;
Step S507, when this alarm code alarm time at interval or the frequency when surpassing the thresholding of configuration, alarm server promotes the alarm of disposing and increases progressively rank on current alarm rank basis.Promote the back and compare,, then adopt the alarm level after promoting if less than the upper limit with the alarm level upper limit that disposes; If more than or equal to the upper limit, then adopt the alarm level higher limit;
Step S508, the information such as alarm level that alarm server is handled step 5 well are sent out message and are carried out interface real-time update demonstration to client, upgrade record alert database simultaneously.
Fig. 6 is the flow chart according to the operation of the configuration of the embodiment of the invention, and this flow process comprises the steps:
Step S601, the user who has dynamic lifting alarm level configuration operation authority logins the alarm management client, and the configuration information before the alarm client can read from the dynamic lifting alarm level allocation list of record alert database also is presented on the interface;
Step S602, user select to promote the alarm code of alarm level, and the interface can show the alarm theme of alarm code correspondence therewith, so that the user confirms the correctness selected;
Step S603, according to user's request, the alarm code of on the alarm client end interface, selecting at step S602 continue to revise the alarm level upper limit that initial alarm level, alarm increase progressively grade, can promote, alarm update time at interval thresholding, alarm upgrading frequency threshold information, whether enable etc.;
Step S604, after the modification of completing steps S603 or the interpolation operation, the user clicks confirming button, and the alarm client can be with this configuration information update in the dynamic lifting alarm level allocation list of record alert database;
Step S605, after the operation of completing steps S604, the user clicks lockage button, and the alarm client can send to alarm server with the form of message with this configuration information;
Information in the dynamic lifting alarm level allocation list that step S606, alarm server will get access to is updated in the internal memory, prepares follow-up business flow processing.
Below in conjunction with a preferred examples the foregoing description is described.
The user is alarming client configuration shown in following table one.
Table one
Alarm code Alarm description Initial alarm level Alarm increases progressively grade The alarm level upper limit that can promote The alarm update time is thresholding at interval Alarm upgrading frequency thresholding Whether enable
201 0 The ESME Bind Failed Warning alarm (1 grade) 1 grade Minor alarm { 2 grades } 3 minutes 2 times Be
Need to prove that alarm code and alarm description are one-to-one relationships, this corresponding relation is that alarm source consults with the alarm client, is stored in the alarm configuration table of record alert database.When the user selected alarm code, the alarm client can be according to this alarm code, inquired corresponding alarm description information in the alarm configuration table to be shown to the user.
Describe below in conjunction with a pair of handling process of last table, this handling process comprises the steps:
Step S701, the assumed fault management system does not have the alarm of " alarm code 2010--ESME Bind Failed " at present;
Step S702, alarm server receives alarm code 2010 the 1st time, promotes configuration information according to alarm, and the alarm enhanced feature of this alarm code is an initiate mode, so alarm server can be retrieved the current alarm table information in the internal memory, but find that this alarm code does not exist yet; Alarm server is sent out message and is carried out interface display for the alarm client, upgrades record alert database (alarm code 2012, alarm grade: 1 grade) simultaneously; After handling successfully, the alarm frequency that alarm server inside will be received puts 0;
Step S703, step S702 handle in back 3 minutes, and alarm server is received alarm code 2010 the 2nd time, promote configuration information according to alarm, find that alarm server does not process less than alarm update time interval thresholding;
After step S704, step S703 handled back 3 minutes, alarm server was received alarm code 2010 the 3rd time, promoted configuration information according to alarm, found greater than alarm update time interval thresholding, the alarm frequency+1 that alarm server inside will be received; Promote configuration information according to alarm, find that alarm server does not process less than alarm upgrading frequency thresholding;
After step S705, step S704 handled back 3 minutes, alarm server the 4th was received alarm code 2010, promoted configuration information according to alarm, found greater than alarm update time interval thresholding, the alarm frequency+1 that alarm server inside will be received; Promote configuration information according to alarm, find to equal alarm upgrading frequency thresholding (2 times); Promote configuration information according to alarm, alarm server finds that current alarm rank (1 grade) is less than the alarm level upper limit that can promote (2 grades), alarm server is sent out message and is carried out interface display for the alarm client, upgrades record alert database (alarm code 2012, alarm grade: 2 grades) simultaneously; After handling successfully, the alarm frequency that alarm server inside will be received puts 0;
After step S706, step S705 handled back 3 minutes, alarm server the 5th was received alarm code 2010, promoted configuration information according to alarm, found greater than alarm update time interval thresholding, the alarm frequency+1 that alarm server inside will be received; Promote configuration information according to alarm, find that alarm server does not process less than alarm upgrading frequency thresholding;
After step S707, step S706 handled back 3 minutes, alarm server was received alarm code 2010 the 6th time, promoted configuration information according to alarm, found greater than alarm update time interval thresholding, the alarm frequency+1 that alarm server inside will be received; Promote configuration information according to alarm, find to equal alarm upgrading frequency thresholding (2 times); Promote configuration information according to alarm, alarm server finds that current alarm rank (2 grades) equals the alarm level upper limit (2 grades) that can promote, and alarm server does not process;
Step S708, receive the alarm recovery message of alarm code 2010 when alarm server after, alarm server is sent out message and is carried out interface display for the alarm client, upgrades record alert database (alarm code 2012, alarm clearing) simultaneously; After handling successfully, the alarm frequency that alarm server inside will be received puts 0.This moment, flow process revert to step S701 again.
In sum, by the above embodiment of the present invention, solved in the correlation technique and to have ignored the lower alarm of rank easily because alarm level is fixed and cause system to have the problem of potential safety hazard, and then reached the effect that enhances system security.
Obviously, those skilled in the art should be understood that, above-mentioned each module of the present invention or each step can realize with the general calculation device, they can concentrate on the single calculation element, perhaps be distributed on the network that a plurality of calculation element forms, alternatively, they can be realized with the executable program code of calculation element, thereby, they can be stored in the storage device and carry out by calculation element, and in some cases, can carry out step shown or that describe with the order that is different from herein, perhaps they are made into each integrated circuit modules respectively, perhaps a plurality of modules in them or step are made into the single integrated circuit module and realize.Like this, the present invention is not restricted to any specific hardware and software combination.
The above is the preferred embodiments of the present invention only, is not limited to the present invention, and for a person skilled in the art, the present invention can have various changes and variation.Within the spirit and principles in the present invention all, any modification of being done, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.

Claims (10)

1. an alarm level processing method is characterized in that, may further comprise the steps:
The information that pre-configured alarm level is adjusted;
Alarm server receives alarm, the line item of going forward side by side; And
Described alarm server is adjusted the rank of described alarm according to the information of the information of record and pre-configured described alarm level adjustment.
2. method according to claim 1 is characterized in that described alarm server receives described alarm, and recorder is to the number of times of described alarm, and arrives at described number of times under the situation of pre-configured threshold value, adjusts the rank of described alarm.
3. method according to claim 2 is characterized in that, described alarm server recorder comprises to the number of times of described alarm:
Described alarm server judges whether the time interval between current described alarm that receives and the preceding described alarm that once receives satisfy predetermined condition, and be under the situation that is in judged result, the described number of times that described alarm server will write down increases, otherwise it is constant to keep the described number of times of record.
4. method according to claim 1, it is characterized in that, described alarm server receives described alarm, and recorder is to the time of described alarm, and determine and the preceding time interval that once receives described alarm according to the described time, satisfy the rank of adjusting described alarm under the situation in the pre-configured time interval in the described time interval.
5. according to each described method in the claim 1 to 4, it is characterized in that the rank that described alarm server is adjusted described alarm according to the information of the described information of record and pre-configured described alarm level adjustment comprises:
Other threshold value of level of the pre-configured described alarm of described alarm server, and judge whether the rank of adjusted described alarm surpasses described threshold value, is surpassing under the situation of described threshold value, and the rank of described alarm is set to described threshold value.
6. according to each described method in the claim 1 to 4, it is characterized in that, also comprise: after alarm server determined to adjust the rank of described alarm, described alarm server sent to the alarm client with described alarm.
7. an alarm server is characterized in that, comprising:
Configuration module is used to dispose the information that alarm level is adjusted;
Logging modle is used for receiving alarm, the line item of going forward side by side; And
Adjusting module is used for adjusting according to the information of the information of record and pre-configured described alarm level adjustment the rank of described alarm.
8. alarm server according to claim 7 is characterized in that, described logging modle recorder is to the number of times of described alarm, and described adjusting module arrives under the situation of pre-configured threshold value at described number of times, adjusts the rank of described alarm.
9. alarm server according to claim 8 is characterized in that, also comprises: judge module is used to judge whether the time interval between current described alarm that receives and the preceding described alarm that once receives satisfy predetermined condition;
Described logging modle is under the situation that is in the judged result of described judge module, the described number of times of record is increased, otherwise it is constant to keep the described number of times of record.
10. alarm server according to claim 7, it is characterized in that, described logging modle recorder is to the time of described alarm, described adjusting module determines and the preceding time interval that once receives described alarm according to the described time, and satisfies the rank of adjusting described alarm under the situation in the pre-configured time interval in the described time interval.
CN201010140142XA 2010-03-24 2010-03-24 Alarm level processing method and alarm server Pending CN102201928A (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN201010140142XA CN102201928A (en) 2010-03-24 2010-03-24 Alarm level processing method and alarm server
PCT/CN2010/079837 WO2011116615A1 (en) 2010-03-24 2010-12-15 Processing method for alarm level and alarm server

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201010140142XA CN102201928A (en) 2010-03-24 2010-03-24 Alarm level processing method and alarm server

Publications (1)

Publication Number Publication Date
CN102201928A true CN102201928A (en) 2011-09-28

Family

ID=44662335

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201010140142XA Pending CN102201928A (en) 2010-03-24 2010-03-24 Alarm level processing method and alarm server

Country Status (2)

Country Link
CN (1) CN102201928A (en)
WO (1) WO2011116615A1 (en)

Cited By (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102724074A (en) * 2012-06-20 2012-10-10 江苏亿通高科技股份有限公司 Method for judging abnormal restart of EOC local side device
CN103826108A (en) * 2014-03-18 2014-05-28 江苏苏大大数据科技有限公司 Post-loan monitoring method and system based on video image
CN104243184A (en) * 2013-06-06 2014-12-24 中国移动通信集团河北有限公司 Alarm information processing method and apparatus
CN104867292A (en) * 2015-03-26 2015-08-26 青岛海尔智能家电科技有限公司 Intelligent alarm method and device
CN104954178A (en) * 2015-05-29 2015-09-30 北京奇虎科技有限公司 Method and device for optimizing system alarm
CN106961352A (en) * 2017-03-29 2017-07-18 努比亚技术有限公司 Monitoring system and monitoring method
CN107483268A (en) * 2017-09-20 2017-12-15 深圳市中润四方信息技术有限公司 A kind of alert processing method and system
CN108111333A (en) * 2017-11-22 2018-06-01 链家网(北京)科技有限公司 A kind of flow limitation method and system based on WEB
CN108427608A (en) * 2017-02-15 2018-08-21 腾讯科技(深圳)有限公司 Event alarm method and event alarm device
CN109383561A (en) * 2018-10-30 2019-02-26 刘立金 A kind of cargo train barrier early warning feedback system
WO2019091028A1 (en) * 2017-11-10 2019-05-16 华为技术有限公司 Method and terminal for application software malicious behavior dynamic alarm
CN110650036A (en) * 2019-08-30 2020-01-03 中国人民财产保险股份有限公司 Alarm processing method and device and electronic equipment
CN111010290A (en) * 2019-11-22 2020-04-14 泰康保险集团股份有限公司 Service log processing method and device, electronic equipment and storage medium
CN111354174A (en) * 2018-12-24 2020-06-30 中移(杭州)信息技术有限公司 Alarm method, device, server and readable storage medium
CN111540143A (en) * 2020-04-22 2020-08-14 深圳市欣横纵技术股份有限公司 Intelligent analysis method for physical protection alarm event
WO2021056537A1 (en) * 2019-09-29 2021-04-01 深圳迈瑞生物医疗电子股份有限公司 Adaptive alarm system, method and apparatus, and internet of things system
CN113949590A (en) * 2021-12-21 2022-01-18 济南市康养事业发展中心 Method, system and terminal for determining safety alarm event level
CN113965452A (en) * 2021-11-02 2022-01-21 烽火通信科技股份有限公司 Equipment switching state obtaining method and device
CN114124585A (en) * 2022-01-28 2022-03-01 奇安信科技集团股份有限公司 Security defense method, device, electronic equipment and medium
CN115242611A (en) * 2022-07-21 2022-10-25 北京天一恩华科技股份有限公司 Network fault alarm level management method, device, equipment and storage medium

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101102217A (en) * 2006-07-07 2008-01-09 中兴通讯股份有限公司 Processing method for duplicate alert and discontinuous reporting and monitoring in telecom network management system
CN101222361A (en) * 2008-01-22 2008-07-16 中兴通讯股份有限公司 Alarm frequency monitor and alarm processing method
WO2009003339A1 (en) * 2007-06-29 2009-01-08 Topharman Shanghai Co., Ltd. A preparation method of candesartan cilexetil and intermediates thereof
WO2009033391A1 (en) * 2007-09-04 2009-03-19 Huawei Technologies Co., Ltd. Method, managing equipment, managed equipment and system for controlling alarm flow
CN101577035A (en) * 2008-05-02 2009-11-11 通用电气公司 Method for managing alarms in a physiological monitoring system

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100498267C (en) * 2004-03-30 2009-06-10 华为技术有限公司 Optical fiber fault automatic monitoring method
CN100485565C (en) * 2007-10-10 2009-05-06 上海可鲁系统软件有限公司 Distributed digital centralized control system
CN101605053B (en) * 2009-07-02 2011-07-13 中兴通讯股份有限公司 Method and system for dumping monitoring data and playing back dumped data

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101102217A (en) * 2006-07-07 2008-01-09 中兴通讯股份有限公司 Processing method for duplicate alert and discontinuous reporting and monitoring in telecom network management system
WO2009003339A1 (en) * 2007-06-29 2009-01-08 Topharman Shanghai Co., Ltd. A preparation method of candesartan cilexetil and intermediates thereof
WO2009033391A1 (en) * 2007-09-04 2009-03-19 Huawei Technologies Co., Ltd. Method, managing equipment, managed equipment and system for controlling alarm flow
CN101222361A (en) * 2008-01-22 2008-07-16 中兴通讯股份有限公司 Alarm frequency monitor and alarm processing method
CN101577035A (en) * 2008-05-02 2009-11-11 通用电气公司 Method for managing alarms in a physiological monitoring system

Cited By (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102724074B (en) * 2012-06-20 2015-01-07 江苏亿通高科技股份有限公司 Method for judging abnormal restart of EOC local side device
CN102724074A (en) * 2012-06-20 2012-10-10 江苏亿通高科技股份有限公司 Method for judging abnormal restart of EOC local side device
CN104243184B (en) * 2013-06-06 2018-01-30 中国移动通信集团河北有限公司 A kind of processing method and processing device of warning information
CN104243184A (en) * 2013-06-06 2014-12-24 中国移动通信集团河北有限公司 Alarm information processing method and apparatus
CN103826108A (en) * 2014-03-18 2014-05-28 江苏苏大大数据科技有限公司 Post-loan monitoring method and system based on video image
CN103826108B (en) * 2014-03-18 2017-09-19 江苏苏大大数据科技有限公司 Monitoring method and system after loan based on video image
CN104867292A (en) * 2015-03-26 2015-08-26 青岛海尔智能家电科技有限公司 Intelligent alarm method and device
CN104867292B (en) * 2015-03-26 2021-03-26 青岛海尔智能家电科技有限公司 Intelligent alarm method and device
CN104954178B (en) * 2015-05-29 2019-02-15 北京奇虎科技有限公司 The method and device of optimization system alarm
CN104954178A (en) * 2015-05-29 2015-09-30 北京奇虎科技有限公司 Method and device for optimizing system alarm
CN108427608A (en) * 2017-02-15 2018-08-21 腾讯科技(深圳)有限公司 Event alarm method and event alarm device
CN108427608B (en) * 2017-02-15 2020-12-01 腾讯科技(深圳)有限公司 Event warning method and event warning device
CN106961352A (en) * 2017-03-29 2017-07-18 努比亚技术有限公司 Monitoring system and monitoring method
CN107483268A (en) * 2017-09-20 2017-12-15 深圳市中润四方信息技术有限公司 A kind of alert processing method and system
WO2019091028A1 (en) * 2017-11-10 2019-05-16 华为技术有限公司 Method and terminal for application software malicious behavior dynamic alarm
CN110447215A (en) * 2017-11-10 2019-11-12 华为技术有限公司 The dynamic alarm method and terminal of application software malicious act
CN108111333A (en) * 2017-11-22 2018-06-01 链家网(北京)科技有限公司 A kind of flow limitation method and system based on WEB
CN109383561A (en) * 2018-10-30 2019-02-26 刘立金 A kind of cargo train barrier early warning feedback system
CN111354174A (en) * 2018-12-24 2020-06-30 中移(杭州)信息技术有限公司 Alarm method, device, server and readable storage medium
CN110650036A (en) * 2019-08-30 2020-01-03 中国人民财产保险股份有限公司 Alarm processing method and device and electronic equipment
WO2021056537A1 (en) * 2019-09-29 2021-04-01 深圳迈瑞生物医疗电子股份有限公司 Adaptive alarm system, method and apparatus, and internet of things system
CN114072048A (en) * 2019-09-29 2022-02-18 深圳迈瑞生物医疗电子股份有限公司 Self-adaptive alarm system, method and device and Internet of things system
CN111010290A (en) * 2019-11-22 2020-04-14 泰康保险集团股份有限公司 Service log processing method and device, electronic equipment and storage medium
CN111010290B (en) * 2019-11-22 2022-11-29 泰康保险集团股份有限公司 Service log processing method and device, electronic equipment and storage medium
CN111540143A (en) * 2020-04-22 2020-08-14 深圳市欣横纵技术股份有限公司 Intelligent analysis method for physical protection alarm event
CN113965452A (en) * 2021-11-02 2022-01-21 烽火通信科技股份有限公司 Equipment switching state obtaining method and device
CN113965452B (en) * 2021-11-02 2023-11-03 烽火通信科技股份有限公司 Equipment switching state acquisition method and device
CN113949590A (en) * 2021-12-21 2022-01-18 济南市康养事业发展中心 Method, system and terminal for determining safety alarm event level
CN113949590B (en) * 2021-12-21 2022-07-01 济南市康养事业发展中心 Method, system and terminal for determining safety alarm event grade
CN114124585A (en) * 2022-01-28 2022-03-01 奇安信科技集团股份有限公司 Security defense method, device, electronic equipment and medium
CN115242611A (en) * 2022-07-21 2022-10-25 北京天一恩华科技股份有限公司 Network fault alarm level management method, device, equipment and storage medium
CN115242611B (en) * 2022-07-21 2023-10-03 北京天一恩华科技股份有限公司 Network fault alarm level management method, device, equipment and storage medium

Also Published As

Publication number Publication date
WO2011116615A1 (en) 2011-09-29

Similar Documents

Publication Publication Date Title
CN102201928A (en) Alarm level processing method and alarm server
CN102929220B (en) Distributed monitoring system and database server, fault processing device and fault processing method thereof
CN109643268B (en) Vehicle-mounted device and log collection system
CN102291430B (en) Method for processing allocation information of Internet of things, Internet of things platform and system
CN105512283A (en) Data quality management and control method and device
CN103593376A (en) Method and device for collecting user behavior data
CN102918534A (en) Query pipeline
CN103069413A (en) Customizing content displayed for a user based on user preferences of another user
CN102045192A (en) Apparatus and system for estimating network configuration
CN105589782A (en) User behavior collection method based on browser
CN111262822B (en) File storage method, device, block link point and system
CN103186600A (en) Specific analysis method and device of Internet public sentiment
CN104301130A (en) Method and system of collecting monitoring data as well as task distribution server and collection device
US9697078B2 (en) Method and device for auto recovery storage of JBOD array
CN102143150A (en) Method, device and system for obtaining media contents
US20180136854A1 (en) System and method for receiving and writing incoming data writes based on data write latency
CN105138927A (en) Privacy data protection method and apparatus
CN109542894B (en) User data centralized storage method, device, medium and computer equipment
CN104753712A (en) Alarming report method, alarming report node and alarming report system
CN105187554A (en) Method and system for monitoring server performance
CN101467132B (en) Method and system for distributing data processing units in a communication network
US10009220B2 (en) In-vehicle information system and information processing method thereof
CN108877188A (en) A kind of environment protection digital concurrently acquires and Multi net voting dissemination method and device
CN102148692A (en) Secondary filtering monitoring method and system for alarm information
CN104702647A (en) Information request method and information request system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C02 Deemed withdrawal of patent application after publication (patent law 2001)
WD01 Invention patent application deemed withdrawn after publication

Application publication date: 20110928