CN102882700A - Warning information management method and device of network management system - Google Patents
Warning information management method and device of network management system Download PDFInfo
- Publication number
- CN102882700A CN102882700A CN201210275248XA CN201210275248A CN102882700A CN 102882700 A CN102882700 A CN 102882700A CN 201210275248X A CN201210275248X A CN 201210275248XA CN 201210275248 A CN201210275248 A CN 201210275248A CN 102882700 A CN102882700 A CN 102882700A
- Authority
- CN
- China
- Prior art keywords
- alarm
- warning information
- index
- warning
- new
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Abstract
The invention relates to a warning information management method and warning information management equipment of a network management system. The network management system maintains a movable warning database, and generated and unrecovered warning information is stored in the movable warning database. The warning information management method comprises the steps as follows: whether the received warning information is a new warning or not is judged according to the warning information stored in the movable warning database; a warning index is created for the new warning under the condition that the received warning information is the new warning, and is inserted into a warning index queue; the warning index is read from the warning index queue, and whether the warning corresponding to the current read warning index is recovered or not is detected; and warning clearing is executed under the condition of the recovery of the warning. According to the invention, the warning state of the network element is regularly detected after the warning information is received, whether the network element warning is recovered or not can be surely monitored under the condition that the warning clearing information cannot received because of various reasons, thereby providing more accurate network management.
Description
Technical field
The present invention relates to the network management technology field, relate in particular to warning information management method and equipment in a kind of network management system.
Background technology
Development along with computer and the communication technology, computer network has become the pillar of information age today, information-intensive society is to the dependence of computer network, so that the reliability of operation of computer network own becomes most important, effect and the status of network management also become increasingly conspicuous, and alarm management is the basis of network management.
Alarms Correlation Analysis System mainly comprises managed element, alarm collection unit, alarming processing unit, four parts of record alert database.Wherein, the alarm collection unit directly links to each other with managed element, is used for collecting alarm and storing corresponding record alert database into; Record alert database comprises activity record alert database and history alarm database, and the activity record alert database is used for storage and has occured and unrecovered alarm, and the history alarm database is used for the alarm that storage has recovered; The alarming processing unit is used for receiving the laggard line correlation processing of alarm at alarm collection module.During network element generation alarm, can be by the alarm report unit initiatively to alarm collection server report and alarm information, the alarm collection unit deposits the warning information of collecting in the activity record alert database; For a part of alarm type, after network element recovers normally from alarm status, can initiatively remove information to alarm collection server report and alarm by the alarm report unit, the alarm collection unit matches the alarm clearance information of collection and the warning information in the activity record alert database, and the warning information of correspondence is moved on to the history alarm database.
By above-mentioned alarm device workflow as seen, alarm clearance mainly relies on alarm source transmission alarm clearance information to carry out.This mechanism realizes simple, but the alarm collection server lacks initiative, alarm clearance information that can only passive reception reported by network elements.For the alarm of some types, network element can't send alarm clearance information behind alarm clearing, so network management system can't know whether network element alarming recovers; And for the alarm of other type, network element can send alarm clearance information behind alarm clearing, in case but the situation of generation alarm clearance information dropout in the transmission course, network management system can not be learnt the change of alarm status, and both of these case all can provide wrong warning information to network manager.
China's CN102083091A patent disclosure a kind of network management alarm management method and device, the method just gathers a warning information to each network element device every scheduled duration, the warning information that collects and the warning information in the record alert database and alarm clearing information are compared and then database is revised, thereby prevent the situation that warning information is lost.But said method is managed network element to all and adopts the fixed cycle inquiry, can not take different query strategies to different alarms according to user's request.In addition in actual device, in the situation that network element does not have to recover in alarm, can the periodic report warning information, and the probability that each warning information is all lost is very little, the meaning of therefore warning information of reported by network elements being carried out cycle detection is not very large.
Summary of the invention
The purpose of this invention is to provide warning information management method and equipment in a kind of network management system that can overcome defects.
In first aspect, the invention provides the warning information management method in a kind of network management system, safeguard an activity record alert database in the described network management system, storing in the described activity record alert database and occur but unrecovered warning information still, described method comprises: judge according to the warning information of storing in the described activity record alert database whether the warning information that receives is new alarm; Be to set up the alarm index for described new alarm in the situation of new alarm at the warning information that receives, and be inserted into the alarm index queue; From described alarm index queue, read the alarm index, detect current alarm corresponding to described alarm index of reading and whether recover; And in the situation that alarm has recovered, carry out alarm clearance.
In second aspect, the invention provides the warning information management equipment in a kind of network management system, comprise alarm collection unit, alarming processing unit, movable alarm data storehouse memorizer, alarm index queue memory, wherein: described movable alarm data storehouse memorizer is used for that storage has occured but unrecovered warning information still; Described alarm index queue memory is used for the form storage alarm index with formation; Described alarm collection unit, the warning information that is used for storing according to described activity record alert database judges whether the warning information that receives is new alarm, and be to set up the alarm index for described new alarm in the situation of new alarm at the warning information that receives, and be inserted into described alarm index queue; And described alarming processing unit, be used for reading the alarm index from described alarm index queue, detect current alarm corresponding to described alarm index of reading and whether recover, and in the situation that alarm has recovered, carry out alarm clearance.
Whether the present invention regularly detects by the alarm status to network element after receiving warning information, guarantee can monitor network element alarming and recover, thereby more accurately network management is provided because a variety of causes does not receive in the situation of alarm clearance information.
Description of drawings
Fig. 1 is the structural representation according to the alarm management equipment in the network management system of the embodiment of the invention;
Fig. 2 is the flow chart according to the alarm index generation of the embodiment of the invention;
Fig. 3 is the alarming processing flow chart based on the alarm index according to the embodiment of the invention; And
Fig. 4 is the workflow diagram according to the alarm clearance of the embodiment of the invention.
Embodiment
Below by drawings and Examples, technical scheme of the present invention is described in further detail.
Fig. 1 is the structural representation according to the alarm management equipment in the network management system of the embodiment of the invention.
As shown in Figure 1, comprise alarm collection unit 101, activity record alert database 102, history alarm database 103, alarm index queue 104 and alarming processing unit 105 according to the alarm management equipment in the network management system of the embodiment of the invention.
Activity record alert database 102 is used for that storage has occured but unrecovered warning information still, and wherein, the warning information that has occured refers to that network element has sent warning information to the alarm collection unit; Still the corresponding following several situations of unrecovered warning information possibility have occured: alarm is not yet removed, be that network element does not send alarm clearance information, perhaps behind the alarm clearing of some type, network element does not send alarm clearance information, perhaps the alarm clearance information of network element transmission after alarm is removed is not known by network management system owing to a variety of causes is lost.
Safeguard the current alarm index in the alarm index queue 104, wherein can comprise one or more alarm index.
Poll alarm index queue is responsible in alarming processing unit 105, reads an alarm index from the alarm index queue.Then, according to the alarm detection cycle information in the alarm index, create and carry out the alarm status sense command.According to alarm status sense command judge in the situation that alarm corresponding to certain bar alarm index recovered, alarm index corresponding to this alarm also can be deleted in alarming processing unit 105 from alarm index queue 104, and the warning information of correspondence is deleted from the activity record alert database, the warning information of correspondence is added in the history alarm database.
Can find out, carry out alarm clearance thereby detect by the state to network element alarming, further realize the warning information management, and the impact that is not subjected to the alarm clearance loss of learning or loses.
Fig. 2 is according to the flow chart of the alarm index generation of the embodiment of the invention, is carried out by the alarm collection unit, and this flow process comprises the following steps.
Flow process begins,
In step 201, the alarm collection unit receives the warning information of reported by network elements, and flow process forwards step 202 to;
In step 202, judge according to the warning information that receives whether its corresponding alarm is new alarm, if new alarm, then flow process forwards step 203 to, otherwise flow process forwards step 204 to;
In step 203, the warning information that is judged as new alarm to be added in the activity record alert database, flow process forwards step 205 to;
In step 204, renewal activity record alert database, flow process forwards step 201 to;
Owing to before the alarm status of network element recovers, can periodically send a warning message to the alarm collection server.Therefore to the same alarm, the warning information of repetition may be received in the alarm collection unit.In the situation of the alarm that the alarm collection unit has existed in receiving the activity record alert database, can renewal activity record alert database, for example the alarm number of times with the corresponding alarm of recording in the activity record alert database adds 1;
In step 205, according to Information generation alarm index such as the alarm source IP that comprises in the warning information, alarm type, alarm detection cycles, flow process forwards step 206 to;
In step 206, the alarm index that generates in the step 205 is inserted the alarm index queue;
Flow process finishes.
Fig. 3 is the alarming processing flow chart based on the alarm index according to the embodiment of the invention, is carried out by the alarming processing unit, and this flow process may further comprise the steps.
Flow process begins,
In step 301, every index in the alarming processing unit poll alarm index queue whenever reads an index, and flow process forwards step 302 to;
In step 302, the alarm detection cycle in the search index, judge whether to reach the detection time of this index, if reach, then flow process forwards step 303 to, otherwise flow process forwards step 301 to;
In step 303, by alarm type, alarm source IP information, structure is also carried out the alarm status sense command, flow process forwards step 304 to, the structure of alarm status sense command and execution can be adopted the corresponding command among the Simple Network Management Protocol SNMP, carry out according to the every terms of information in the alarm index;
In step 304, obtain the execution result of alarm status sense command from the corresponding network element that sends this alarm, flow process forwards step 305 to;
In step 305, according to the execution result of the alarm status sense command in the step 304, judge whether this alarm recovers, as recovering, then flow process forwards step 306 to), otherwise flow process forwards step 301 to;
In step 306, carry out the alarm clearance flow process;
Flow process finishes.
Fig. 4 is the flow chart according to the alarm clearance of the embodiment of the invention, is carried out by the alarming processing unit, and this flow process may further comprise the steps.
Flow process begins,
In step 401, this alarm index of deletion from the alarm index queue, flow process forwards step 402 to;
In step 402, increase this alarm record to the history alarm database, flow process forwards step 403 to;
In step 403, this alarm record of deletion from the activity record alert database;
Flow process finishes.
Should be pointed out that the alarm clearance flow process described in Fig. 4 is intended to the alarm index in alarm index queue, history alarm database and the activity record alert database and corresponding alarm record are adjusted, it can be finished with the step order that includes but not limited to Fig. 4.
In sum, the present invention uses the maintenance of alarm index queue to occur and unrecovered alarm, and whether the regular detection of the alarm in the formation recovered, thereby realized the initiatively state information of collection activity alarm of alarming processing unit, avoided network element alarming to remove loss of learning or lose the problem that the alarm that brings can not removed; Preferably, periodic monitoring can be by the control of alarm status monitoring periods, described alarm status sense cycle can be set by the user in network management system, thereby alarm or the larger shorter sense cycle of alarm setting of losing probability that can relatively be concerned about the user improve the accuracy of warning information.
The professional should further recognize, unit and the algorithm steps of each example of describing in conjunction with embodiment disclosed herein, can realize with electronic hardware, computer software or the combination of the two, for the interchangeability of hardware and software clearly is described, composition and the step of each example described in general manner according to function in the above description.These functions are carried out with hardware or software mode actually, depend on application-specific and the design constraint of technical scheme.The professional and technical personnel can specifically should be used for realizing described function with distinct methods to each, but this realization should not thought and exceeds scope of the present invention.
The method of describing in conjunction with embodiment disclosed herein or the step of algorithm can use the software module of hardware, processor execution, and perhaps the combination of the two is implemented.Software module can place the storage medium of any other form known in random asccess memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable ROM, register, hard disk, moveable magnetic disc, CD-ROM or the technical field.
Above-described embodiment; purpose of the present invention, technical scheme and beneficial effect are further described; institute is understood that; the above only is the specific embodiment of the present invention; the protection range that is not intended to limit the present invention; within the spirit and principles in the present invention all, any modification of making, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.
Claims (10)
1. the warning information management method in the network management system is safeguarded an activity record alert database in the described network management system, is storing in the described activity record alert database to occur but unrecovered warning information still, and described method comprises:
Judge according to the warning information of storing in the described activity record alert database whether the warning information that receives is new alarm;
Be to set up the alarm index for described new alarm in the situation of new alarm at the warning information that receives, and be inserted into the alarm index queue;
From described alarm index queue, read the alarm index, detect current alarm corresponding to described alarm index of reading and whether recover; And
In the situation that alarm has recovered, carry out alarm clearance.
2. method according to claim 1, wherein, described method also comprises: under the warning information that receives is the situation of new alarm the described warning information that receives is added in the described activity record alert database.
3. method according to claim 1, wherein, described warning information comprises alarm source IP and/or alarm type, is that the step of setting up the alarm index for described new alarm in the situation of new alarm comprises at the warning information that receives: generate the alarm index according to described alarm source IP and/or alarm type.
4. method according to claim 1, wherein, described warning information also comprises the alarm detection cycle,
Warning information in reception is that the step of setting up the alarm index for described new alarm in the situation of new alarm comprises: according to described alarm detection cycle generation alarm index;
Read described alarm index, detecting the step whether alarm corresponding to described alarm index recovered comprises: the detection time that judges whether to reach described alarm index according to the described alarm detection cycle, in the situation of the detection time that reaches described alarm index, detect alarm corresponding to described alarm index and whether recover.
5. method according to claim 1, wherein, the step of execution alarm clearance comprises in the situation that alarm has recovered: delete the described current alarm index that reads and described current warning information corresponding to alarm index that reads of deletion from described activity record alert database from described alarm index queue.
6. method according to claim 1, wherein, safeguard a history alarm database in the described network management system, storing the warning information that has recovered in the described history alarm database, described method also comprises: the warning information that the alarm that has recovered is corresponding adds described history alarm database to.
7. method according to claim 4, wherein, the described alarm detection cycle can be carried out different preseting according to alarm type by the user of network management system.
8. the warning information management equipment in the network management system comprises alarm collection unit, alarming processing unit, movable alarm data storehouse memorizer, alarm index queue memory, wherein:
Described movable alarm data storehouse memorizer is used for that storage has occured but unrecovered warning information still;
Described alarm index queue memory is used for the form storage alarm index with formation;
Described alarm collection unit, the warning information that is used for storing according to described activity record alert database judges whether the warning information that receives is new alarm, and be to set up the alarm index for described new alarm in the situation of new alarm at the warning information that receives, and be inserted into described alarm index queue; And
Whether described alarming processing unit is used for reading the alarm index from described alarm index queue, detect current alarm corresponding to described alarm index of reading and recover, and carry out alarm clearance in the situation that alarm has recovered.
9. equipment according to claim 8, wherein, described alarming processing unit also is used for adding the described warning information that receives to described activity record alert database under the warning information that receives is the situation of new alarm.
10. equipment according to claim 8 also comprises: the history alarm archival memory, be used for the warning information that storage has recovered, and described alarming processing unit also is used for the warning information that the alarm that has recovered is corresponding and adds described history alarm database to.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210275248.XA CN102882700B (en) | 2012-08-03 | 2012-08-03 | Warning information management method in a kind of network management system and equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210275248.XA CN102882700B (en) | 2012-08-03 | 2012-08-03 | Warning information management method in a kind of network management system and equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102882700A true CN102882700A (en) | 2013-01-16 |
| CN102882700B CN102882700B (en) | 2016-07-06 |
Family
ID=47483854
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210275248.XA Expired - Fee Related CN102882700B (en) | 2012-08-03 | 2012-08-03 | Warning information management method in a kind of network management system and equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102882700B (en) |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106452905A (en) * | 2016-10-27 | 2017-02-22 | 腾讯科技（深圳）有限公司 | Message processing method and device |
| CN109324947A (en) * | 2018-09-12 | 2019-02-12 | 郑州云海信息技术有限公司 | Trap alarm clearing method and apparatus based on SNMP |
| CN109918269A (en) * | 2019-03-18 | 2019-06-21 | 成都西加云杉科技有限公司 | Warning information sweep-out method and device |
| CN111564027A (en) * | 2020-05-08 | 2020-08-21 | 北京深演智能科技股份有限公司 | Alarm information processing method and device |
| CN113220538A (en) * | 2021-06-04 | 2021-08-06 | 中富通集团股份有限公司 | Method for transmitting monitoring state of operating environment of machine room power equipment |
| CN114710394A (en) * | 2022-03-30 | 2022-07-05 | 亚信科技（中国）有限公司 | Alarm synchronization method and device, electronic equipment and readable storage medium |
| CN115150247A (en) * | 2022-05-27 | 2022-10-04 | 山东浪潮科学研究院有限公司 | Alarm elimination method and device |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1735038A (en) * | 2004-08-02 | 2006-02-15 | 华为技术有限公司 | Method for increasing alarm data processing speed in pipe network system |
| CN101350735A (en) * | 2007-07-20 | 2009-01-21 | 中兴通讯股份有限公司 | Method for synchronization of alarm |
| CN102014035A (en) * | 2009-09-04 | 2011-04-13 | 中兴通讯股份有限公司 | Networking method and device based on Ethernet ring |
| CN102083091A (en) * | 2009-11-27 | 2011-06-01 | 中国移动通信集团贵州有限公司 | Network management alarm managing method and system, and alarm collecting server |
| CN102281168A (en) * | 2011-05-10 | 2011-12-14 | 中兴通讯股份有限公司 | Link fault processing method and device based on OAM (Operation Administration and Maintenance) alarm detection |
-
2012
- 2012-08-03 CN CN201210275248.XA patent/CN102882700B/en not_active Expired - Fee Related
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1735038A (en) * | 2004-08-02 | 2006-02-15 | 华为技术有限公司 | Method for increasing alarm data processing speed in pipe network system |
| CN101350735A (en) * | 2007-07-20 | 2009-01-21 | 中兴通讯股份有限公司 | Method for synchronization of alarm |
| CN102014035A (en) * | 2009-09-04 | 2011-04-13 | 中兴通讯股份有限公司 | Networking method and device based on Ethernet ring |
| CN102083091A (en) * | 2009-11-27 | 2011-06-01 | 中国移动通信集团贵州有限公司 | Network management alarm managing method and system, and alarm collecting server |
| CN102281168A (en) * | 2011-05-10 | 2011-12-14 | 中兴通讯股份有限公司 | Link fault processing method and device based on OAM (Operation Administration and Maintenance) alarm detection |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106452905A (en) * | 2016-10-27 | 2017-02-22 | 腾讯科技（深圳）有限公司 | Message processing method and device |
| CN109324947A (en) * | 2018-09-12 | 2019-02-12 | 郑州云海信息技术有限公司 | Trap alarm clearing method and apparatus based on SNMP |
| CN109918269A (en) * | 2019-03-18 | 2019-06-21 | 成都西加云杉科技有限公司 | Warning information sweep-out method and device |
| CN111564027A (en) * | 2020-05-08 | 2020-08-21 | 北京深演智能科技股份有限公司 | Alarm information processing method and device |
| CN113220538A (en) * | 2021-06-04 | 2021-08-06 | 中富通集团股份有限公司 | Method for transmitting monitoring state of operating environment of machine room power equipment |
| CN114710394A (en) * | 2022-03-30 | 2022-07-05 | 亚信科技（中国）有限公司 | Alarm synchronization method and device, electronic equipment and readable storage medium |
| CN115150247A (en) * | 2022-05-27 | 2022-10-04 | 山东浪潮科学研究院有限公司 | Alarm elimination method and device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102882700B (en) | 2016-07-06 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102882700A (en) | Warning information management method and device of network management system | |
| WO2019070915A1 (en) | Partial database restoration | |
| CN102279775A (en) | Method for processing failure of hard disk under Linux system | |
| CN102612065B (en) | Quick fault-tolerance detection method for monitoring abnormal event by wireless sensor network | |
| JP2015106334A (en) | Fault symptom detection method, information processing apparatus, and program | |
| CN105224888B (en) | A kind of data of magnetic disk array protection system based on safe early warning technology | |
| CN109034423B (en) | Fault early warning judgment method, device, equipment and storage medium | |
| JP2015028700A (en) | Failure detection device, failure detection method, failure detection program and recording medium | |
| CN112612669A (en) | Infrastructure monitoring and early warning method and system based on situation awareness | |
| CN108259202A (en) | A kind of CA monitoring and pre-alarming methods and CA monitoring and warning systems | |
| CN103532943A (en) | Web application firewall device and asynchronous security protection log processing method | |
| JP6413537B2 (en) | Predictive failure notification device, predictive notification method, predictive notification program | |
| CN112528279B (en) | Method and device for establishing intrusion detection model | |
| JP3085844B2 (en) | Fault indication method in centralized monitoring system | |
| CN109150869A (en) | A kind of exchanger information acquisition analysis system and method | |
| CN111367747B (en) | Index abnormal detection early warning device based on time annotation | |
| CN102111788A (en) | Alarm processing method and alarm management system | |
| CN113836160B (en) | Data stream state monitoring alarm system based on master-slave synchronization | |
| CN115561546A (en) | Abnormity detection and alarm system for power system | |
| KR101444250B1 (en) | System for monitoring access to personal information and method therefor | |
| CN114154035A (en) | Data processing system for dynamic loop monitoring | |
| CN109471765A (en) | A kind of hard disk quality detecting system and method | |
| TWI591489B (en) | Intelligent monitoring and warning device and method for distributed software defined storage system | |
| CN111064957B (en) | Equipment state monitoring method and device | |
| CN115640158A (en) | Detection analysis method and device based on database |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20160706 |