CN102523126A - Method and device for sending alarm event - Google Patents

Method and device for sending alarm event Download PDF

Info

Publication number
CN102523126A
CN102523126A CN2011104511549A CN201110451154A CN102523126A CN 102523126 A CN102523126 A CN 102523126A CN 2011104511549 A CN2011104511549 A CN 2011104511549A CN 201110451154 A CN201110451154 A CN 201110451154A CN 102523126 A CN102523126 A CN 102523126A
Authority
CN
China
Prior art keywords
alarm
interval
alarm event
event
code
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN2011104511549A
Other languages
Chinese (zh)
Inventor
刘列波
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shenzhen Coship Electronics Co Ltd
Original Assignee
SHENZHEN TONGZHOU VIDEO MEDIA CO Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by SHENZHEN TONGZHOU VIDEO MEDIA CO Ltd filed Critical SHENZHEN TONGZHOU VIDEO MEDIA CO Ltd
Priority to CN2011104511549A priority Critical patent/CN102523126A/en
Publication of CN102523126A publication Critical patent/CN102523126A/en
Pending legal-status Critical Current

Links

Images

Abstract

The embodiment of the invention discloses a method and device for sending an alarm event, which are applied in the field of communication technologies. The method comprises the following steps: after receiving an alarm event trigger message, an agent device finds an interval maximum value and an interval minimum value corresponding to the alarm event according to included alarm codes and stored corresponding relation in the alarm event trigger message; if a variable parameter value of equipment or application in the alarm event trigger message is not in an interval of the found alarm event, an alarm message or an alarm clearing message is sent to network management equipment; and if the variable parameter value, and the interval maximum value and/or the interval minimum value of the found alarm event meet a preset strategy, the alarm event is filtered. Therefore, if the actual variable parameter value of the equipment or the application, and the interval maximum value and/or the interval minimum value meet certain relation, the agent device can filter the alarm event, and the times for sending the alarm event to the network management equipment by the agent device can be reduced, so that the alarm storm generated by a system is reduced.

Description

A kind of alarm event sending method and device
Technical field
The present invention relates to communication technical field, particularly alarm event sends and device.
Background technology
Alarm is mainly used in the abnormality of reflection equipment in the network management; When application apparatus breaks down; Agency (Agent) device will be based on Simple Network Management Protocol (Simple Network Management Protocol; SNMP), alarm (trap) message that produces is sent to Network Management Equipment through 161 ports, by Network Management Equipment according to the alarm information that receives; The alarm that produces different stage deposits database in, and the icon of modification reflection application apparatus state identifies the current fault of application apparatus.When application apparatus when malfunction is recovered; Agent apparatus can send to Network Management Equipment with the alarm clearance message that produces based on snmp protocol; Network Management Equipment can be according to the trap information that receives; To database, and the icon of revising reflection application apparatus state identifies application apparatus and returns to normal condition from malfunction with the alarm clearance information updating.
Suppose the online number of active user of an application (being application program) on the Network Management Equipment monitoring application apparatus; If using multipotency, this holds 100 users simultaneously; In the ordinary course of things, when the number of users of this application greater than 100 the time, agent apparatus can send alarm information and give Network Management Equipment; And after the number of users of this application was less than 100, agent apparatus can send alarm clearance message and give Network Management Equipment.Use the peak period in system, can ceaselessly have the user to login or nullify, if the active user's number that should use in the system ceaselessly changes between 100, then agent apparatus can ceaselessly send alarm information and alarm clearance message to Network Management Equipment.This will make agent apparatus send identical many times alarm event (such as alarm or alarm clearance) in a period of time, and the interface communication in the alarm event process of transmitting shakes system great consumption systems performance, produces alarm windstorm.
Summary of the invention
The embodiment of the invention provides alarm event sending method and device, the alarm windstorm that reduction system effectively produces.
The embodiment of the invention provides a kind of alarm event sending method, comprising:
Reception comprises in the said alarm event trigger messages being used to identify the alarm code of alarm event and the variable parameter value of said equipment or application to the alarm event trigger messages of equipment or application;
According to the alarm code in the said alarm event trigger messages, and the corresponding relation of the interval value of alarm code that presets and alarm event, search the interval value of the corresponding alarm event of the alarm code of said reception, said interval value comprises interval maximum and interval minimum value;
If said variable parameter value is compared with the interval maximum and/or the said interval minimum value of the said alarm event of searching, satisfy the strategy that presets, then filter the corresponding alarm event of said alarm event trigger messages; If said variable parameter value not in the interval of the said alarm event of searching, is then sent alarm information or alarm clearance message and is given said Network Management Equipment;
The said strategy that presets comprises: said variable parameter value is between said interval maximum and interval minimum value, or said variable parameter value is less than or equal to said interval maximum, or said variable parameter value is more than or equal to said interval minimum value.
The embodiment of the invention provides a kind of alarm event dispensing device, comprising:
The trigger messages receiving element is used to receive the alarm event trigger messages to equipment or application, comprises in the said alarm event trigger messages being used to identify the alarm code of alarm event and the variable parameter value of said equipment or application;
The unit is searched in the interval; Be used for alarm code according to the alarm event trigger messages of said trigger messages receiving element reception; And the corresponding relation of the interval value of alarm code that presets and alarm event; Search the interval value of the corresponding alarm event of the alarm code of said reception, said interval value comprises interval maximum and interval minimum value;
Filter element is used for searching the interval maximum and/or the interval minimum value of the alarm event of searching the unit with said interval and comparing when said variable parameter value, satisfies the strategy that presets, and then filters the corresponding alarm event of said alarm event trigger messages; The said strategy that presets comprises: said variable parameter value is between said interval maximum and interval minimum value, or said variable parameter value is less than or equal to said interval maximum, or said variable parameter value is more than or equal to said interval minimum value;
The incident transmitting element is used for working as said variable parameter value not in the interval of the alarm event of searching the unit is searched in said interval, then sends alarm information or alarm clearance message and gives said Network Management Equipment.
In the embodiment of the invention; Agent apparatus can be after receiving the alarm event trigger messages; According to comprising the corresponding relation of alarm code and the storage interval maximum and the interval minimum value of searching corresponding alarm event; And if the variable parameter value of equipment in the alarm event trigger messages or application is not in the interval of the alarm event of searching; Then send alarm information or alarm clearance message and give Network Management Equipment, if the interval maximum and/or the interval minimum value of variable parameter value and the alarm event of searching satisfy the strategy that presets, then filtering alarm incident.Limit agent apparatus transmission alarm event through an interval like this and comprise alarm information and alarm clearance message; If the actual variable parameter value of equipment or application with satisfy in this interval maximum and/or interval minimum value when necessarily concerning; Agent apparatus can filter this alarm event; With limit agent apparatus with a point in the prior art and send alarm event and compare; Method in the embodiment of the invention can reduce agent apparatus and send the number of times that alarm event is given Network Management Equipment, produces alarm windstorm thereby reduced system.
Description of drawings
In order to be illustrated more clearly in the embodiment of the invention or technical scheme of the prior art; To do to introduce simply to the accompanying drawing of required use in embodiment or the description of the Prior Art below; Obviously, the accompanying drawing in describing below only is some embodiments of the present invention, for those of ordinary skills; Under the prerequisite of not paying creative work property, can also obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 is the flow chart of a kind of alarm event sending method of providing of the embodiment of the invention;
Fig. 2 is the flow chart of the another kind of alarm event sending method that provides of the embodiment of the invention;
Fig. 3 is the structural representation of a kind of alarm event device in the embodiment of the invention;
Fig. 4 is a kind of flow chart of alarming sending method in the specific embodiment of the invention;
Fig. 5 is the flow chart of a kind of alarm clearance sending method in the specific embodiment of the invention;
Fig. 6 is the structural representation of another kind of alarm event device in the embodiment of the invention;
Fig. 7 is the structural representation of another kind of alarm event device in the embodiment of the invention.
Embodiment
To combine the accompanying drawing in the embodiment of the invention below, the technical scheme in the embodiment of the invention is carried out clear, intactly description, obviously, described embodiment only is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills are not making the every other embodiment that is obtained under the creative work prerequisite, all belong to the scope of the present invention's protection.
The embodiment of the invention provides a kind of alarm event sending method, and the alarm event that is mainly used in the network management sends, and wherein alarm event comprises alarm and alarm clearance, and as shown in Figure 1, the method for present embodiment is the performed method of agent apparatus, comprising:
Step 101 receives the alarm event trigger messages to equipment or application, wherein, comprises the alarm code that is used to identify alarm event in the alarm event trigger messages, and the variable parameter value of equipment (or application).
Be appreciated that when the application on device hardware or the equipment is broken down, can send the alarm event trigger messages and alarm to agent apparatus; When the application on device hardware or the equipment when malfunction returns to normal condition, also can send the alarm event trigger messages and carry out alarm clearance to agent apparatus.Can comprise that in the alarm event trigger messages indicating equipment (or application) is in the malfunction or the information of fault recovery state; Be used for the alarm code of unique identification alarm event and the variable parameter value of equipment (or application), wherein parametric variable can be logined the operational factor of universal business of used time or the like for fault time, failure recovery time, active user's number or the current user of equipment (or application); The information such as internet protocol address and SNMP port numbers that in the alarm event trigger messages, can also comprise agent apparatus.Here agent apparatus can be a logical block in the equipment that breaks down, and also can be the device independent and equipment that breaks down; And the alarm event trigger messages can be the Indication message of indication equipment (or application) fault, or the Indication message of indicating equipment (or application) recovered failure etc.
Step 102 according to the alarm code in the alarm event trigger messages, and the corresponding relation of the interval value of alarm code that presets and alarm event, is searched the interval value of the corresponding alarm event of the alarm code of reception, and this interval value comprises interval maximum and interval minimum value.
In agent apparatus, storing the information of multiple alarm event, comprising the corresponding alarm code of this alarm event, whether corresponding interval maximum and interval minimum value send the identification information of this alarm event etc. before the transmitting time of this alarm event reaches.When searching, agent apparatus can compare the alarm code in the corresponding relation of alarm code that receives and storage, from finding out corresponding interval value.
Step 103; Agent apparatus need compare the variable parameter value of equipment or application with the interval value that finds, if the variable parameter value of equipment or application is compared with the interval maximum and/or the interval minimum value of the alarm event of searching in the step 102; Satisfy the strategy that presets; Then execution in step 104, if in the interval of the alarm event that the variable parameter value of equipment or application is not searched in step 102, then execution in step 105.
Particularly; Here the strategy that presets comprises: variable parameter value (comprises that variable parameter value equals interval maximum or interval minimum value) between interval maximum and interval minimum value; Or variable parameter value is less than or equal to interval maximum, or variable parameter value is more than or equal to said interval minimum value etc.
Be appreciated that if also comprise the alarm indication in the alarm event trigger messages that receives in the step 101, when this alarm indication is used for indication needs transmission alarm information, execution in step 104 when variable parameter value is less than or equal to said interval maximum then; When this alarm indication is used for indication needs transmission alarm clearance message, then in variable parameter value execution in step 104 during more than or equal to said interval minimum value.And if do not comprise alarm indication, then execution in step 104 when variable parameter value is between said interval maximum and interval minimum value in the alarm event trigger messages that receives in the step 101.
Step 104, the alarm event that filtering alarm Event triggered message is corresponding.
Particularly, when the filtering alarm incident, can ignore processing to this alarm event trigger messages.
Step 105; Send alarm or alarm clearance message and give Network Management Equipment; Particularly, if alarm event trigger messages indicating equipment or application and trouble then send alarm information and give the network equipment; If alarm event trigger messages indicating equipment or application recovered failure are then sent alarm clearance message and are given Network Management Equipment.
For example; If alarm code is the universal service alarm of sign, and the variable parameter value of equipment or application comprises the universal professional actual operation parameters on the equipment, logins the used time etc. such as active user's numerical value or user; Then when the interval maximum of this actual operation parameters greater than the alarm event of searching; Then agent apparatus can send alarm information and give Network Management Equipment, when the interval minimum value of this actual operation parameters less than the alarm event of searching, then sends alarm clearance message and gives Network Management Equipment.Particularly; If the corresponding interval of this alarm code is [80,100], some transmission alarm in active user's number>100; But active user's number returns to [80 from 100; Do not send alarm clearance message during any one value 100], just send alarm clearance message, if will can not produce the alarm clearance message of a large amount of repetitions when active user's number is paced up and down like this between 100 up to being lower than at 80 o'clock.
Need to prove that agent apparatus can also be the current time according to the transmitting time of this alarm event that in system, stores execution of step 104 or at 105 o'clock.
It is thus clear that; In the embodiment of the invention; Agent apparatus can be after receiving the alarm event trigger messages; According to comprising the corresponding relation of alarm code and the storage interval maximum and the interval minimum value of searching corresponding alarm event, and if the variable parameter value of equipment in the alarm event trigger messages or application not in the interval of the alarm event of searching, then send alarm information or alarm clearance message and give Network Management Equipment; If variable parameter value satisfies the strategy that presets, then filtering alarm incident with the interval maximum and/or the interval minimum value of the alarm event of searching.Limit agent apparatus transmission alarm event through an interval like this and comprise alarm information and alarm clearance message; If the actual variable parameter value of equipment or application with satisfy in this interval maximum and/or interval minimum value when necessarily concerning; Agent apparatus can filter this alarm event; With limit agent apparatus with a point in the prior art and send alarm event and compare; Method in the embodiment of the invention can reduce agent apparatus and send the number of times that alarm event is given Network Management Equipment, produces alarm windstorm thereby reduced system.
With reference to shown in Figure 2, in a concrete embodiment, agent apparatus can also be carried out following step after carrying out above-mentioned steps 101:
Whether step 106 sends the corresponding alarm event of alarm code in the alarm event trigger messages before agent apparatus is judged, if, execution in step 107; If not, then carry out above-mentioned steps 102 to 105.
Be appreciated that; In system, storing the information of multiple alarm event; The interval value that comprises alarm code (Trap Code), this alarm event comprises interval maximum (Max value) and interval minimum value (Min value); Alarm flag bit (is Send Notification) of corresponding alarm event state (promptly whether producing before this alarm event) or the like with being used to indicate alarm code particularly, can store information as shown in table 1:
Table 1
Figure BDA0000126480500000061
When then whether agent apparatus sent the alarm event of alarm code correspondence in the alarm event trigger messages before judging; Can confirm the corresponding alarm flag bit of alarm code that stores in the system produces the corresponding alarm event of alarm code before whether indicating; If do not produce this alarm event before; Then the corresponding alarm flag bit of this alarm code that stores in can also update system of agent apparatus promptly upgrades alarm status for sending this alarm event.
Step 107 confirms that whether current time and last send interval between time of the corresponding alarm event of this alarm code greater than the time interval of presetting, if greater than the time interval of presetting, then execution in step 102 to 105; If be less than or equal to the time interval of presetting, then execution in step 104.
Be appreciated that; Agent apparatus is when having carried out step 107; No matter can also upgrade the transmitting time of the corresponding alarm event of alarm code, particularly, be to confirm to be greater than or less than or the corresponding transmitting time of this alarm code that time interval of equaling to preset stores in can update system is the current time.
In the present embodiment, if the current alarm event that need to send before sent, and time interval of current time and this alarm event of last time transmission when being less than or equal to the time interval of presetting, can filter this alarm event and not send this alarm event.Can reduce the transmission number of times of alarm event so further, thereby the reduction system produces the risk of alarm windstorm.
In another concrete embodiment; Agent apparatus adopts the form of alarm formation to send when in carrying out above-mentioned steps 105, sending alarm event; Alarm event buffer memory that then can alarm code is corresponding before sending alarm event becomes the alarm formation; If the alarm queue length of buffer memory is greater than the length that presets (such as 1000,1000 alarm events of ability buffer memory), the corresponding alarm event of alarm code that then will exceed presetting length stores into warning file.Wherein warning file can be the file of forms such as Excel database, text.
Be appreciated that if in a period of time, a plurality of alarm events produce in a large number, will cause agent apparatus to send a large amount of alarm events simultaneously, make the system consumption resource uprush, make a mistake easily to Network Management Equipment.Therefore, agent apparatus can become the alarm formation with the alarm event buffer memory that produces.Then specifically when carrying out above-mentioned steps 105, can sequentially from the alarm formation, read alarm event and mail to Network Management Equipment, and this alarm event of buffer memory in the deletion alarm formation, all send to Network Management Equipment up to the alarm event that will alarm in the formation.If the alarm formation is empty; Agent apparatus then can read the information of alarm event and construct an alarm information or alarm clearance message goes Network Management Equipment from the warning file that stores; And the information of this alarm event in the warning file that deletion stores is like this up to the alarm event in the warning file is all sent to Network Management Equipment.
Below with a concrete embodiment alarm event sending method in the embodiment of the invention is described; Agent apparatus in the present embodiment is that an independent equipment with faulty equipment is the alarm event dispensing device; Concrete structure is as shown in Figure 3; Comprise: trigger module, alarm filter (filter) module, alarm formation and warning processing module, wherein:
Trigger module is used for triggering alarm event, and the alarm event trigger messages when the equipment that receives faulty equipment or recovered failure sends can trigger the processing to alarm event;
The alarm filter module is to be used for filtering the unnecessary alarm event that sends to Network Management Equipment;
The alarm formation is used for buffer memory and need sends to the alarm event of Network Management Equipment;
The alarm module processing unit is to be used for reading the alarm event in the alarm formation and sending to Network Management Equipment.
With reference to shown in Figure 4, each module of alarm event dispensing device can be carried out the transmission of alarm information according to following flow process in the present embodiment, comprising:
201; Trigger module receiving alarm Event triggered message is logined information such as used time comprising to use warning information (app trap Info) be apptrapInfo.is Clear=mistake (false) the i.e. indication variable parameter value that needs transmission alarm information, equipment or application such as alarm code, alarm indication such as the active user's number or the user of universal business.
202; The alarm filter module finds the interval value (dbtrapInfo) of the corresponding alarm event of this alarm code in database according to alarm code wherein; If the variable parameter value of equipment or application greater than the interval maximum of searching, gets into step 203, the transmitting time of this alarm event that stores in the storehouse otherwise the alarm filter module can Update Information is the current time; And filter this alarm event, and process ends.
203, the corresponding alarm code flag bit of this alarm code that the alarm filter module searches stores in the database, thus whether sent the corresponding alarm event of this alarm code before confirming, if then enter into step 204; The alarm code flag bit of the alarm event that this alarm code that stores in the storehouse otherwise the alarm filter module can Update Information is corresponding is used for indicating and sent this alarm event, puts down in writing the transmitting time of this alarm event, and gets into step 205.
204; Whether the time interval that the alarm filter module is confirmed to send current time and last time this alarm event is greater than the time interval of presetting; If the transmitting time of the alarm event that this alarm code that stores in the storehouse that then Updates Information is corresponding is the current time, and get into step 205; Otherwise the alarm filter module can be filtered this alarm event, and transmitting time last time of the corresponding alarm event of this alarm code that stores in the storehouse that can also Update Information is the current time, and process ends.
205; The alarm filter module is confirmed the length (such as 1000) whether the alarm formation of current cache equals to preset; If equal, then that this alarm code is corresponding alarm event stores into warning file, and the wait warning processing module has been sent the alarm event in the alarm formation; And then handle this warning file, and process ends; If less than, then that this alarm code is corresponding alarm event is cached in the alarm formation, and sends the alarm event in the alarm formation by the warning processing module order.
With reference to shown in Figure 5, each module of alarm event dispensing device can be carried out the transmission of alarm clearance message according to following flow process in the present embodiment, comprising:
301; Trigger module receiving alarm Event triggered message is logined information such as used time comprising to use the indication information of warning information (app trap Info) such as alarm code, fault clearance be correct (true) the i.e. indication of apptrapInfo.is Clear=variable parameter value of needing transmission alarm clearance message, equipment or application such as the active user's number or the user of universal business.
302; The alarm filter module finds the interval value (dbtrapInfo) of the corresponding alarm event of this alarm code in database according to alarm code wherein; If the variable parameter value of equipment or application is less than the interval minimum value of searching; Then get into step 303, otherwise the alarm filter module can be filtered this alarm event, and process ends.
303; The corresponding alarm code flag bit of this alarm code that the alarm filter module searches stores in the database, thus the corresponding alarm event of this alarm code whether sent before confirming, if; Then sent the corresponding alarm of this alarm code before the explanation; The alarm flag bit of the alarm event that this alarm code that stores in the storehouse of can Updating Information is corresponding, this alarm event was not sent in indication, and got into step 304; Otherwise alarm filter module filtering alarm incident and process ends.
304; The alarm filter module is confirmed the length (such as 1000) whether the alarm formation of current cache equals to preset; If equal, then that this alarm code is corresponding alarm event stores into warning file, and the wait warning processing module has been sent the alarm event in the alarm formation; And then handle this warning file, and process ends; If less than, then that this alarm code is corresponding alarm event is cached in the alarm formation, and sends the alarm event in the alarm formation by the warning processing module order.
It is thus clear that; Limit the transmission alarm event through an interval in the embodiment of the invention and comprise alarm information and alarm clearance message; If the actual variable parameter value of equipment or application is less than or equal to interval maximum; Or variable parameter value can filter this alarm event during more than or equal to said interval minimum value, sends alarm event and compares with limiting with a point in the prior art; Device in the embodiment of the invention can reduce the number of times of the alarm event that sends invalid or repetition, produces alarm windstorm thereby reduced system.
And through the alarm event buffer memory being become the alarm formation, having avoided too much effectively, alarm event arrives Network Management Equipment simultaneously and makes a mistake in the present embodiment.
The embodiment of the invention also provides a kind of alarm event dispensing device, can be fault equipment, also can be an equipment that is independent of outside the faulty equipment, and structural representation is as shown in Figure 6, comprising:
Trigger messages receiving element 10; Be used to receive alarm event trigger messages to equipment or application; Comprise the alarm code that is used to identify alarm event in the said alarm event trigger messages; With the variable parameter value of said equipment or application, such as the information such as time of failure of active user's number, equipment or the application of using;
Unit 11 is searched in the interval; Be used for alarm code according to the alarm event trigger messages of said trigger messages receiving element 10 receptions; And the corresponding relation of the interval value of alarm code that presets and alarm event; Search the interval value of the corresponding alarm event of the alarm code of said reception, said interval value comprises interval maximum and interval minimum value;
Filter element 12 is used for searching the interval maximum and/or the interval minimum value of the alarm event of searching unit 11 with said interval and comparing when said variable parameter value, satisfies the strategy that presets, and then filters the corresponding alarm event of said alarm event trigger messages; The said strategy that presets comprises: said variable parameter value (comprises that variable parameter value equals interval maximum or interval minimum value) between said interval maximum and interval minimum value; Or said variable parameter value is less than or equal to said interval maximum, or said variable parameter value is more than or equal to said interval minimum value;
Incident transmitting element 13 is used for working as said variable parameter value not in the interval of the alarm event of searching unit 11 is searched in said interval, then sends alarm information or alarm clearance message and gives said Network Management Equipment.
Particularly; If the alarm code in the alarm event trigger messages that trigger messages receiving element 10 receives is the alarm of the universal business of sign; And the variable parameter value of equipment or application comprises that the actual operation parameters of universal business logins information such as used time such as active user's numerical value or user; Then incident transmitting element 13 is the interval maximums of searching the alarm event of searching unit 11 in actual operation parameters greater than the interval; Then send alarm information and give said Network Management Equipment,, then send alarm clearance message and give Network Management Equipment when actual operation parameters is searched the alarm event of searching unit 11 less than the interval interval minimum value.
Be appreciated that; Can also comprise the alarm indication in the alarm event trigger messages that trigger messages receiving element 10 receives; When being used for the indication needs, this alarm indication sends alarm information; Then filter element 12 is less than or equal to said interval maximum in variable parameter value, filters the corresponding alarm event of said alarm event trigger messages; Send alarm clearance message when this alarm indication is used for the indication needs, then filter element 12 more than or equal to said interval minimum value, then filters the corresponding alarm event of said alarm event trigger messages in variable parameter value.And if do not comprise the alarm indication in the alarm event trigger messages that trigger messages receiving element 10 receives, then filter element 12 be in variable parameter value between said interval maximum and interval minimum value, ability filtering alarm incident.
In the alarm event dispensing device of the embodiment of the invention; Trigger messages receiving element 10 is after receiving the alarm event trigger messages; The interval search unit 11 according to comprising the corresponding relation of alarm code and the storage interval maximum and the interval minimum value of searching corresponding alarm event; And if the variable parameter value of equipment in the alarm event trigger messages or application is not in the interval of the alarm event of searching; Then incident transmitting element 13 sends alarm informations or alarm clearance message is given Network Management Equipment, if the interval maximum and/or the interval minimum value of variable parameter value and the alarm event of searching satisfy the strategy that presets, then filter element 12 filtering alarm incidents.Limit the transmission alarm event through an interval like this and comprise alarm and alarm clearance; If the actual variable parameter value of equipment or application and this interval maximum and/or interval minimum value satisfy when necessarily concerning; Filter element 12 can filter this alarm event; Send alarm event and compare with limiting with a point in the prior art, the device in the embodiment of the invention can reduce and sends the number of times of alarm event to Network Management Equipment, thereby has reduced system's generation alarm windstorm.
With reference to shown in Figure 7; In a concrete embodiment; The alarm dispensing device can also comprise except can comprising structure as shown in Figure 6: incident judging unit 14, at interval definite unit 15, flag bit updating block 16, time updating block 17 and formation storage element 18, wherein:
Incident judging unit 14; Whether send the corresponding alarm event of said alarm code before being used to judge; Particularly; Incident judging unit 14 can confirm the corresponding alarm flag bit of alarm code that stores in the system produces the corresponding alarm event of alarm code before whether indicating, and this alarm flag bit is the state that is used to indicate the corresponding alarm event of said alarm code, promptly whether sends before this alarm event.
Confirm unit 15 at interval; Be used for when said incident judging unit 14 definite corresponding alarm events of said alarm code that send before, whether the interval between the time of the alarm event that then definite current time is corresponding with the said alarm code of last transmission is greater than the time interval of presetting.
Flag bit updating block 16 is used for before said incident judging unit 14 is confirmed, not sending the corresponding alarm event of said alarm code, upgrades the alarm flag bit of the corresponding alarm event of said alarm code.
Time updating block 17 is used to upgrade the transmitting time of the corresponding alarm event of said alarm code.
Formation storage element 18; Be used for the alarm event buffer memory that said alarm code is corresponding and become the alarm formation; If, then will exceeding the corresponding alarm event of said alarm code of presetting length greater than the length that presets, the length of the alarm formation of said buffer memory stores into warning file.
In the present embodiment; After receiving the alarm event trigger messages that comprises alarm code and variable parameter value when trigger messages receiving element 10; Whether sent the corresponding alarm event of this alarm code before can judging by incident judging unit 14 earlier; If not, then can send this alarm event for indication, and search unit 11 by the interval and search interval value through the alarm flag bit of this alarm event of storing in flag bit updating block 16 update system.If sent before; Then by confirming that at interval whether time interval that unit 15 is confirmed the current time and sent this alarm event last time is greater than the time interval of presetting; If greater than the time interval of presetting; Then search unit 11 and search interval value by the interval, and by the time of this alarm event of transmission that stores in time updating block 17 update system be the current time; If be less than or equal to the time interval of presetting,, and can it by the time of this alarm event of transmission that stores in time updating block 17 update system current time by the corresponding alarm event of filter element 12 Direct Filtration alarm event trigger messages.
And in the present embodiment, mail to the mistake that Network Management Equipment causes, before incident transmitting element 13 sends alarm event for fear of a large amount of alarm events; Can become the alarm formation by the alarm event buffer memory that formation storage element 18 will send; If the length of the alarm formation of buffer memory is greater than the length that presets, then that alarm code is corresponding alarm event stores into warning file, and then incident transmitting element 13 particularly; Can order from the alarm formation, read the corresponding alarm event of alarm code; And alarm event sent to Network Management Equipment, and the said alarm event of buffer memory in the deletion alarm formation, all send to Network Management Equipment up to the alarm event that will alarm in the formation.If the alarm formation is empty; 13 of incident transmitting elements can read the information of alarm event and construct an alarm information or alarm clearance message goes Network Management Equipment from the warning file that stores; And the information of this alarm event in the warning file that deletion stores is like this up to the alarm event in the warning file is all sent to Network Management Equipment.
Above-mentioned to carry out method that alarm event sends such as Fig. 1 or the corresponding embodiment of Fig. 2 like each unit in Fig. 6 or the alarm event dispensing device shown in Figure 7 said, do not give unnecessary details at this; And the structure of alarm event dispensing device also can be as shown in Figure 3, do not give unnecessary details at this.
One of ordinary skill in the art will appreciate that all or part of step in the whole bag of tricks of the foregoing description is to instruct relevant hardware to accomplish through program; This program can be stored in the computer-readable recording medium, and storage medium can comprise: read-only memory (ROM), random-access memory (ram), disk or CD etc.
More than to alarm event sending method and device that the embodiment of the invention provided; Carried out detailed introduction; Used concrete example among this paper principle of the present invention and execution mode are set forth, the explanation of above embodiment just is used for helping to understand method of the present invention and core concept thereof; Simultaneously, for one of ordinary skill in the art, according to thought of the present invention, the part that on embodiment and range of application, all can change, in sum, this description should not be construed as limitation of the present invention.

Claims (14)

1. an alarm event sending method is characterized in that, comprising:
Reception comprises in the said alarm event trigger messages being used to identify the alarm code of alarm event and the variable parameter value of said equipment or application to the alarm event trigger messages of equipment or application;
According to the alarm code in the said alarm event trigger messages, and the corresponding relation of the interval value of alarm code that presets and alarm event, search the interval value of the corresponding alarm event of the alarm code of said reception, said interval value comprises interval maximum and interval minimum value;
If said variable parameter value is compared with the interval maximum and/or the said interval minimum value of the said alarm event of searching, satisfy the strategy that presets, then filter the corresponding alarm event of said alarm event trigger messages; If said variable parameter value not in the interval of the said alarm event of searching, is then sent alarm information or alarm clearance message and is given said Network Management Equipment;
The said strategy that presets comprises: said variable parameter value is between said interval maximum and interval minimum value, or said variable parameter value is less than or equal to said interval maximum, or said variable parameter value is more than or equal to said interval minimum value.
2. the method for claim 1; It is characterized in that; Said alarm code is the alarm of the universal business of sign, and the variable parameter value of said equipment or application comprises the actual operation parameters of said universal business, if then said variable parameter value is not in the interval of the said alarm event of searching; Then send alarm information or alarm clearance message and give said Network Management Equipment, specifically comprise:
When the interval maximum of said actual operation parameters greater than the said alarm event of searching; Then send alarm information and give said Network Management Equipment; When the interval minimum value of said actual operation parameters, then send alarm clearance message and give said Network Management Equipment less than the said alarm event of searching.
3. the method for claim 1 is characterized in that, also comprises the alarm indication in the said alarm event trigger messages;
When being used for the indication needs, said alarm indication sends alarm information; If said variable parameter value is greater than said interval maximum; Send alarm information and give said Network Management Equipment; If said variable parameter value is less than or equal to said interval maximum, filter the corresponding alarm event of said alarm event trigger messages;
When being used for the indication needs, said alarm indication sends alarm clearance message; If said variable parameter value is less than said interval maximum; Send alarm clearance message and give said Network Management Equipment; If said variable parameter value, is filtered the corresponding alarm event of said alarm event trigger messages more than or equal to said interval minimum value.
4. the method for claim 1 is characterized in that, also comprises after the alarm event trigger messages of said reception to equipment or application:
Whether send the corresponding alarm event of said alarm code before judging, if confirm that whether interval between time of the alarm event that the current time is corresponding with the said alarm code of last transmission is greater than the time interval of presetting;
If greater than the time interval of presetting, then carry out said step of searching, if be less than or equal to the time interval of presetting, filter the corresponding alarm event of said alarm event trigger messages.
5. method as claimed in claim 4 is characterized in that,
If do not send the corresponding alarm event of said alarm code before judging, said method also comprises: upgrade the alarm flag bit of the corresponding alarm event of said alarm code, said alarm flag bit is used to indicate the state of the corresponding alarm event of said alarm code;
Whether send the corresponding alarm event of said alarm code before the said judgement, specifically comprise:
Confirm the corresponding alarm flag bit of said alarm code that stores in the system produces the corresponding alarm event of said alarm code before whether indicating.
6. method as claimed in claim 4 is characterized in that, said method also comprises:
Upgrade the transmitting time of the corresponding alarm event of said alarm code.
7. like right 1 to 6 each described method, it is characterized in that said transmission alarm information or alarm clearance message are given said Network Management Equipment, also comprise before:
The alarm event buffer memory that said alarm code is corresponding becomes the alarm formation, stores into warning file if the length of the alarm formation of said buffer memory, then will exceed the corresponding alarm event of said alarm code of presetting length greater than the length that presets.
8. method as claimed in claim 7 is characterized in that, said transmission alarm information or alarm clearance message specifically comprise for said Network Management Equipment:
Order reads the corresponding alarm event of alarm code from said alarm formation, and said alarm event is sent to Network Management Equipment, and deletes the said alarm event of buffer memory in the said alarm formation.
9. an alarm event dispensing device is characterized in that, comprising:
The trigger messages receiving element is used to receive the alarm event trigger messages to equipment or application, comprises in the said alarm event trigger messages being used to identify the alarm code of alarm event and the variable parameter value of said equipment or application;
The unit is searched in the interval; Be used for alarm code according to the alarm event trigger messages of said trigger messages receiving element reception; And the corresponding relation of the interval value of alarm code that presets and alarm event; Search the interval value of the corresponding alarm event of the alarm code of said reception, said interval value comprises interval maximum and interval minimum value;
Filter element is used for searching the interval maximum and/or the interval minimum value of the alarm event of searching the unit with said interval and comparing when said variable parameter value, satisfies the strategy that presets, and then filters the corresponding alarm event of said alarm event trigger messages; The said strategy that presets comprises: said variable parameter value is between said interval maximum and interval minimum value, or said variable parameter value is less than or equal to said interval maximum, or said variable parameter value is more than or equal to said interval minimum value;
The incident transmitting element is used for working as said variable parameter value not in the interval of the alarm event of searching the unit is searched in said interval, then sends alarm information or alarm clearance message and gives said Network Management Equipment.
10. device as claimed in claim 9 is characterized in that,
The incident transmitting element; Be used for searching greater than said interval the interval maximum of the alarm event of searching the unit in the actual operation parameters of universal business; Then send alarm information and give said Network Management Equipment; When said actual operation parameters is searched the alarm event of searching the unit less than said interval interval minimum value, then send alarm clearance message and give Network Management Equipment;
Said alarm code is the alarm of the said universal business of sign, and the variable parameter value of equipment or application comprises the actual operation parameters of said universal business.
11. device as claimed in claim 9 is characterized in that, also comprises:
Whether the incident judging unit sends the corresponding alarm event of said alarm code before being used to judge;
Confirm the unit at interval; Be used for before said incident judging unit is confirmed, sending the corresponding alarm event of said alarm code; Whether the interval between the time of the alarm event that then definite current time and the said alarm code of last transmission are corresponding is greater than the time interval of presetting; If greater than the said time interval of presetting; Notify said interval to search the unit and search,, notify said filter element to filter the corresponding alarm event of said alarm event trigger messages if be less than or equal to the time interval of presetting.
12. device as claimed in claim 11 is characterized in that, also comprises:
The flag bit updating block; Be used for before said incident judging unit is confirmed, not sending the corresponding alarm event of said alarm code; Upgrade the alarm flag bit of the corresponding alarm event of said alarm code, said alarm flag bit is the state that is used to indicate the corresponding alarm event of said alarm code;
Said judging unit is used for specifically confirming whether the corresponding alarm flag bit of alarm code that system stores indicates the alarm event that produces the alarm code correspondence before.
13. device as claimed in claim 11 is characterized in that, also comprises:
The time updating block is used to upgrade the transmitting time of the corresponding alarm event of said alarm code.
14. like each described device of claim 10 to 13, it is characterized in that, also comprise:
The formation storage element is used for the alarm event buffer memory that said alarm code is corresponding and becomes the alarm formation, stores into warning file if the length of the alarm formation of said buffer memory, then will exceed the corresponding alarm event of said alarm code of presetting length greater than the length that presets.
CN2011104511549A 2011-12-29 2011-12-29 Method and device for sending alarm event Pending CN102523126A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2011104511549A CN102523126A (en) 2011-12-29 2011-12-29 Method and device for sending alarm event

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2011104511549A CN102523126A (en) 2011-12-29 2011-12-29 Method and device for sending alarm event

Publications (1)

Publication Number Publication Date
CN102523126A true CN102523126A (en) 2012-06-27

Family

ID=46293925

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2011104511549A Pending CN102523126A (en) 2011-12-29 2011-12-29 Method and device for sending alarm event

Country Status (1)

Country Link
CN (1) CN102523126A (en)

Cited By (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103036723A (en) * 2012-12-14 2013-04-10 中兴通讯股份有限公司 Processing method and processing system for preventing alarming queue overflowing
CN105812247A (en) * 2016-05-04 2016-07-27 北京思特奇信息技术股份有限公司 Method and system for processing service alarm information through E-mail
CN108418697A (en) * 2017-02-09 2018-08-17 南京联成科技发展有限公司 A kind of realization framework of intelligentized safe O&M service cloud platform
CN103905271B (en) * 2014-03-12 2018-09-28 广东电网公司电力科学研究院 A kind of alarm windstorm suppressing method
CN109067591A (en) * 2018-08-28 2018-12-21 广州市净水有限公司 The alarm information pushing method and apparatus of equipment, sewage treatment plant central control system
CN109714636A (en) * 2018-12-21 2019-05-03 武汉瓯越网视有限公司 A kind of user identification method, device, equipment and medium
CN109795449A (en) * 2019-02-14 2019-05-24 成都路行通信息技术有限公司 A kind of method of vehicle vibration alarm
CN109933633A (en) * 2019-04-02 2019-06-25 北京睿至大数据有限公司 A kind of O&M knowledge mapping construction method based on time and scene dimension
CN110460470A (en) * 2019-08-15 2019-11-15 成都西加云杉科技有限公司 A kind of alarm and control system
CN113037533A (en) * 2019-12-25 2021-06-25 北京多点在线科技有限公司 Method, apparatus and storage medium for processing alarm notification

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101192332A (en) * 2006-11-23 2008-06-04 中兴通讯股份有限公司 Warning system and method
US20100033318A1 (en) * 2008-08-06 2010-02-11 Wf Technologies Llc Monitoring and alarming system and method
CN101661055A (en) * 2008-08-27 2010-03-03 中兴通讯股份有限公司 Current alarm method and current alarm device of active circuit

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101192332A (en) * 2006-11-23 2008-06-04 中兴通讯股份有限公司 Warning system and method
US20100033318A1 (en) * 2008-08-06 2010-02-11 Wf Technologies Llc Monitoring and alarming system and method
CN101661055A (en) * 2008-08-27 2010-03-03 中兴通讯股份有限公司 Current alarm method and current alarm device of active circuit

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
PQS: "Integrated electronic maximum-minimum thermometer,with factory programmed alarm,for vaccine refrigerators and freezers", 《PQS PERFORMANCE SPECIFICATION》 *
肖立中: "入侵检测系统中分层报警处理模型的研究", 《计算机应用研究》 *

Cited By (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103036723A (en) * 2012-12-14 2013-04-10 中兴通讯股份有限公司 Processing method and processing system for preventing alarming queue overflowing
CN103036723B (en) * 2012-12-14 2016-12-07 中兴通讯股份有限公司 A kind of processing method and system preventing from alerting queue overflow
CN103905271B (en) * 2014-03-12 2018-09-28 广东电网公司电力科学研究院 A kind of alarm windstorm suppressing method
CN105812247A (en) * 2016-05-04 2016-07-27 北京思特奇信息技术股份有限公司 Method and system for processing service alarm information through E-mail
CN108418697A (en) * 2017-02-09 2018-08-17 南京联成科技发展有限公司 A kind of realization framework of intelligentized safe O&M service cloud platform
CN109067591A (en) * 2018-08-28 2018-12-21 广州市净水有限公司 The alarm information pushing method and apparatus of equipment, sewage treatment plant central control system
CN109714636A (en) * 2018-12-21 2019-05-03 武汉瓯越网视有限公司 A kind of user identification method, device, equipment and medium
CN109714636B (en) * 2018-12-21 2021-04-23 武汉瓯越网视有限公司 User identification method, device, equipment and medium
CN109795449A (en) * 2019-02-14 2019-05-24 成都路行通信息技术有限公司 A kind of method of vehicle vibration alarm
CN109933633A (en) * 2019-04-02 2019-06-25 北京睿至大数据有限公司 A kind of O&M knowledge mapping construction method based on time and scene dimension
CN109933633B (en) * 2019-04-02 2021-02-05 北京睿至大数据有限公司 Operation and maintenance knowledge graph construction method based on time and scene dimension
CN110460470A (en) * 2019-08-15 2019-11-15 成都西加云杉科技有限公司 A kind of alarm and control system
CN113037533A (en) * 2019-12-25 2021-06-25 北京多点在线科技有限公司 Method, apparatus and storage medium for processing alarm notification

Similar Documents

Publication Publication Date Title
CN102523126A (en) Method and device for sending alarm event
CN102938710B (en) For supervisory control system and the method for large-scale server
CN103001824B (en) A kind of supervisory control system and method for supervising monitoring multiple servers
CN104935456B (en) The alarm information transmission of communication network warning system and processing method
CN103220173A (en) Alarm monitoring method and alarm monitoring system
CN109558301A (en) A kind of distributed system data monitoring method, device and relevant device
US20130177310A1 (en) Process method and apparatus for preventing alarm jitter
CN103179530A (en) Method and device for intercepting short messages
CN101388794B (en) Method and system for positioning network management system exception affair
CN112636979B (en) Cluster alarm method and related device
CN103514173A (en) Data processing method and node equipment
CN101150433A (en) A method for setting alarm filtering rule
CN102404141A (en) Method and device of alarm inhibition
CN111125230A (en) Data processing method and system of Internet of things platform based on rule engine
CN114006771A (en) Flow detection method and device
CN108877188B (en) Environment-friendly data concurrent acquisition and multi-network publishing method and device
CN103812840A (en) Method and system for identifying malicious web sites
CN101710863B (en) Method and system for restoring single board alarm
CN107231344B (en) Flow cleaning method and device
CN102148692B (en) Secondary filtering monitoring method and system for alarm information
CN101854263B (en) Method, system and management server for analysis processing of network topology
CN102201927A (en) Alarm information processing method and device
CN101217592B (en) A method and system applied in storm alarming suppression
CN111262731B (en) Alarm method, alarm device, server equipment and storage medium
CN102769495B (en) A kind of optical fiber access network equipment communication means, Apparatus and system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
ASS Succession or assignment of patent right

Owner name: SHENZHEN LONGSHI MEDIA CO., LTD.

Free format text: FORMER OWNER: SHENZHEN COSHIP VIDEO COMMUNICATION CO., LTD.

Effective date: 20130329

C41 Transfer of patent application or patent right or utility model
TA01 Transfer of patent application right

Effective date of registration: 20130329

Address after: 518057 District, Guangdong, Nanshan District hi tech Zone, the North Zone of the Fifth Industrial Zone, rainbow science and technology building, A2-3 District,

Applicant after: Shenzhen Longguan Media Co., Ltd.

Address before: 518057 rainbow science and Technology Building (North West Road), Nanshan District hi tech Zone, Shenzhen, Guangdong

Applicant before: Shenzhen Tongzhou Video Media Co., Ltd.

ASS Succession or assignment of patent right

Owner name: SHENZHEN TONGZHOU ELECTRONIC CO., LTD.

Free format text: FORMER OWNER: SHENZHEN LONGSHI MEDIA CO., LTD.

Effective date: 20140902

C41 Transfer of patent application or patent right or utility model
TA01 Transfer of patent application right

Effective date of registration: 20140902

Address after: 518057 Nanshan District hi tech park, Guangdong, North District Rainbow science and Technology Building

Applicant after: Shenzhen Tongzhou Electronic Co., Ltd.

Address before: 518057 District, Guangdong, Nanshan District hi tech Zone, the North Zone of the Fifth Industrial Zone, rainbow science and technology building, A2-3 District,

Applicant before: Shenzhen Longguan Media Co., Ltd.

AD01 Patent right deemed abandoned

Effective date of abandoning: 20151104

C20 Patent right or utility model deemed to be abandoned or is abandoned