CN104125087A - Alarm information processing method and device - Google Patents
Alarm information processing method and device Download PDFInfo
- Publication number
- CN104125087A CN104125087A CN201310154388.6A CN201310154388A CN104125087A CN 104125087 A CN104125087 A CN 104125087A CN 201310154388 A CN201310154388 A CN 201310154388A CN 104125087 A CN104125087 A CN 104125087A
- Authority
- CN
- China
- Prior art keywords
- warning information
- alarm
- general warning
- information
- general
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
- Alarm Systems (AREA)
Abstract
The invention discloses an alarm information processing method and device. The scheme can be done without the participation of labors, and thus the processing efficiency of the alarming information can be effectively improved. The method specifically comprises the following step: obtaining a general alarm information set formed by at least one first general alarm information and at least one second general alarm information, wherein the alarm identification of any first general alarm information and the alarm identification of any second general alarm information meet the following condition: the alarm identification is matched and consistent with any alarm identification included in preset cross-major association rules, the cross-major association rules comprising alarm identification of general alarm information in different majors and needing to participate in association relation analysis; judging whether the first general alarm information meets the conditions for establishing an alarm association relation with the second general alarm information; and if so, outputting result information for expressing an association relation exists between the first general alarm information and the second general alarm information.
Description
Technical field
The present invention relates to field of network management, relate in particular to a kind of alarm information processing method and device.
Background technology
Continuous expansion along with communication network scale, the fusion of multi-modulation scheme, many producers, multi-service, multi-specialized network makes mobile communications network increasingly sophisticated, business service support simultaneously and user have also proposed higher demand to communication network quality, and this has brought great challenge just to the centralized monitor work of communication network.Current communication network management system is comprehensive not to monitoring, analysis and the location of a large amount of warning information of a plurality of specialties such as traffic, transmission, data, the monitor data that is mainly reflected in each professional network management system is isolated, and a series of multi-disciplinary network alarm that cannot realize being caused by certain specialized network failure cause carries out association analysis.In prior art, when there is relevant alarm in each professional network management system, conventionally need each professional Network Management and Maintenance personnel in conjunction with O&M experience, from a plurality of O&M systems or instrument, extract Various types of data respectively and analyze and judge, the present situation of this minute special maintenance warning information causes the treatment effeciency of alarm low.
Summary of the invention
The embodiment of the present invention provides a kind of alarm information processing method and device, in order to solve, has the low problem of warning information treatment effeciency in prior art.
The embodiment of the present invention is by the following technical solutions:
An alarm information processing method, comprising: obtain the general warning information set consisting of at least one the first general warning information and at least one second general warning information; Wherein, the alarm identifier of any the first general warning information and any the second general warning information all meets: consistent with the arbitrary alarm identifier coupling comprising in the multi-disciplinary correlation rule setting in advance; The alarm identifier that described multi-disciplinary correlation rule comprises the general warning information in the different majors that need to participate in incidence relation analysis; Judge whether the first general warning information meets the condition of setting up alarm association relation with the second general warning information; Judgment result is that while being, output is for characterizing the results messages that has incidence relation between the first general warning information and the second general warning information.
A warning information processing unit, comprising: general warning information acquiring unit, for obtaining the general warning information set being formed by least one the first general warning information and at least one second general warning information; Wherein, the alarm identifier of any the first general warning information and any the second general warning information all meets: consistent with the arbitrary alarm identifier coupling comprising in the multi-disciplinary correlation rule setting in advance; The alarm identifier that described multi-disciplinary correlation rule comprises the general warning information in the different majors that need to participate in incidence relation analysis; Alarm matching judgment unit, for judging whether the first general warning information of the general warning information set that described general warning information acquiring unit obtains meets the condition of setting up alarm association relation with the second general warning information; Results messages output unit, while for obtaining judgment result is that in described alarm matching judgment unit being, output is for characterizing the results messages that has incidence relation between the first general warning information and the second general warning information.
The beneficial effect of the embodiment of the present invention is as follows:
The such scheme that the embodiment of the present invention provides, without artificial participation, therefore can effectively improve the treatment effeciency of alarm information of the entire network, reduces and distributes work order quantity and find fast alarm main contributor.
Accompanying drawing explanation
The specific implementation flow chart of a kind of alarm information processing method that Fig. 1 provides for the embodiment of the present invention;
Fig. 2 in actual communication network for realizing the concrete structure schematic diagram of the warning information treatment system of the method that the embodiment of the present invention provides;
The particular flow sheet that Fig. 3 is the method implementing the embodiment of the present invention based on warning information treatment system and provide;
The concrete structure schematic diagram of a kind of warning information processing unit that Fig. 4 provides for the embodiment of the present invention.
Embodiment
Inventor finds by the research to prior art, current supervisory control system is comprehensive not to the monitoring of a large amount of warning information of a plurality of specialties such as voice network, transmission network, analysis and location, the monitor data of each professional network management system is isolated, cannot realize a series of multi-disciplinary network alarm that certain specialized network failure cause is caused and carry out association analysis, and be merged into one group of alarm concentrate present and associated group singly.Therefore, according to prior art, when relevant alarm appears in each professional network management system, also need each professional attendant in conjunction with O&M experience, from a plurality of O&M systems or instrument, extract Various types of data respectively and comprehensively analyze and judge.Visible, the warning information processing scheme that prior art adopts exists personnel's dependence larger, lack towards the whole network, service-oriented and the monitoring of customer-oriented integrated information and data relation analysis, thereby need a large amount of O&M manpowers, and the defect of O&M Efficiency Decreasing.
At present, the above-mentioned defect existing for warning information processing scheme, has following several solution:
1, for the warning information processing scheme based on alarm association rule of single specialty.
Such as the relation between the different warning information by the single specialty of simple excavation is determined the alarm association rule between different warning information; Or topological relation Network Based storehouse, analyzes the correlation between different warning information in single specialty, and sets up alarm association rule; Or the resource model based on setting up for single specialty is analyzed the correlation between different warning information in single specialty, and sets up alarm correlation rule;
2, for the processing scheme of the warning information of part specialty.Take part specialty as voice network, transmission network and rotating ring net be example, the relevance that the enforcement principle of this scheme is the base station title that comprises according to the warning information in different majors, the warning information producing from these three specialties respectively, filter out to some of appointment and possess each other the warning information that the base station of incidence relation is relevant, again according to the causality between each warning information filtering out and the sequencing of warning information generation time, each warning information filtering out is carried out to correlation analysis afterwards.
The defect that such scheme 1 exists is, for the processing of warning information, only limits to a specialty; The defect that such scheme 2 exists is, first need to warning information be filtered the relevant database based on base station title, this method is limited by database, be therefore difficult to the variation of adaptation information (as information such as base station titles), thereby flexibility and extensibility is all poor.
Although above method can solve the problem of simple network monitoring from different perspectives preferably, but do not consider the feature that faces multi-modulation scheme, multi-specialized, many equipment and multi-service qos requirement in real network operation, not yet from the whole network angle, set up warning information monitoring view and the incidence relation of the whole network alarm is analyzed, realizing the omnibearing monitoring of each specialized network ruuning situation.
And the embodiment of the present invention is for the shortcoming of prior art, a kind of novel alarm information processing method and device have been proposed.Whether this scheme meets the condition of setting up alarm association relation by judging between different warning information, determines between different warning information, whether there is incidence relation.This scheme, without artificial participation, therefore can effectively improve the treatment effeciency of alarm information of the entire network, reduces and distributes work order quantity and find fast alarm main contributor.And this scheme is not limited to database, thereby flexibility and extensibility are all higher.
Below in conjunction with Figure of description, embodiments of the invention are described, should be appreciated that embodiment described herein, only for description and interpretation the present invention, is not limited to the present invention.And in the situation that not conflicting, the embodiment in this explanation and the feature of embodiment can be interosculated.
First, the embodiment of the present invention provides a kind of alarm information processing method, and the specific implementation flow chart of the method as shown in Figure 1, mainly comprises the steps:
Step 11: obtain the general warning information set being formed by least one the first general warning information and at least one second general warning information;
Wherein, the alarm identifier of any the first general warning information and any the second general warning information all meets: consistent with the arbitrary alarm identifier coupling comprising in the multi-disciplinary correlation rule setting in advance.
In the embodiment of the present invention, the alarm identifier that this multi-disciplinary correlation rule comprises the general warning information in a plurality of different majors that need to participate in incidence relation analysis.Wherein, said alarm identifier can be the alarm title of general warning information here, can be also the keyword in alarm title, can also be the alarm id of general warning information, can be even sign of the corresponding alarm equipment of general warning information etc.
It should be noted that, the alarm identifier comprising in this multi-disciplinary correlation rule is not limited in the alarm identifier of the general warning information in a certain specialty, but can comprise the alarm identifier of the general warning information in a plurality of specialties.Like this can be so that this scheme that the embodiment of the present invention provides can the compatible processing realizing the warning information across a plurality of specialties.Wherein, across the warning information general satisfaction of a plurality of specialties: generate the alarm equipment of this warning information and take this warning information as trigger condition has generated in the alarm equipment of other warning information, have at least two alarm equipments to lay respectively in different majors.
In the embodiment of the present invention, the warning information directly obtaining from each specialty can be called original alarm information.Owing to producing, the different alarm equipment manufacturer of original alarm information is different, and the original alarm information that therefore different alarm equipments produce is often different aspect information format.The different original alarm information of form is difficult to be unified processing, therefore, can, according to the information transformation rule setting in advance, original alarm information be converted to the warning information that meets appointed information form.For convenience of description, in the embodiment of the present invention, the warning information that possesses this appointed information form is called to " general warning information ".
In the embodiment of the present invention, above-mentioned the first general warning information and hereinafter the second general warning information of mentioning all can be carried out respectively to above-mentioned conversion and be obtained corresponding the first original alarm information and the second original alarm information.
Step 12: judge whether the first general warning information meets the condition of setting up alarm association relation with the second general warning information; Judgment result is that while being, execution step 13, otherwise can process ends.
In the embodiment of the present invention, set up in the condition of alarm association relation and can comprise the condition of setting up primary and secondary association.Take two warning information A, B is example, if claim, the incidence relation between these two warning information is that primary and secondary is associated, its implication can occur for warning information A and warning information B within the scope of certain hour simultaneously, and the generation reason of warning information B is caused by warning information A, be that logical relation between them is set membership or other relations, warning information A is main warning information, and warning information B is time warning information.The definition of primary and secondary association and concrete example can be with reference to following tables 1.Particularly, the first general warning information meets and sets up the associated condition of primary and secondary with the second general warning information, can refer to that the first general warning information and the second general warning information meet following 3 aspects simultaneously:
1, the corresponding professional resources data of the first general warning information are associated with the corresponding professional resources data of the second general warning information.Wherein, here said professional resources data can be the information that produces the resource topology relations such as equipment of warning information, and the resource location information that resource incidence relation can comprise from general warning information text is directly obtained or indirectly inquired about and obtain by professional network management system or comprehensive resources system.Such as, can further inquire about the resource data in professional network management system according to the base station numbering in wireless professional warning information text, obtain corresponding base station rotating ring machine room title, if identical with the base station rotating ring machine room title in rotating ring specialty alarm text, illustrate first, second warning information institute respectively the professional resources data of correspondence be associated.
2, the alarm identifier of the alarm identifier of the first general warning information and the second general warning information corresponds respectively to the alarm identifier of main alarm in multi-disciplinary correlation rule and the alarm identifier of time alarm, or corresponds respectively to time alarm identifier of alarm and the alarm identifier of main alarm;
3, the time interval length of the generation of the first general warning information constantly and between the generation of the second general warning information is constantly no more than the first stipulated time length.
In the embodiment of the present invention, set up in the condition of alarm association relation and can comprise the derivative associated condition of setting up.With T bar warning information A1, A2 ... AN ... AT is example, if within the scope of certain region or equipment, when warning information AN arrives, forward search time window, if reach quantity or ratio or the frequency, produce a new warning information B, its implication can be warning information A1, A2 ... AN triggering for generating warning information B; Set up after incidence relation, backward the alarm AN+1 in time window ... AT continues to be articulated under derivative alarm B, and claims T bar warning information associated for deriving with the incidence relation between warning information B; The alarm AT+1 that has exceeded time window can not continue association.Derivative associated definition and concrete example can be with reference to following table 1.Particularly, the first general warning information (A1) and the second general warning information (A1, A2 ... AN ... AT) meet and set up derivative associated condition, can refer to that the first general warning information and the second general warning information meet following several aspect simultaneously:
1, the feature of all general warning information in general warning information set is identical with regulation feature;
Wherein, this feature described here can be the alarm identifier of described all general warning information, and the total quantity of described all general warning information; Or
This is characterized as the alarm identifier of described all general warning information, and the quantity of specific general warning information and the ratio of described total quantity in described all general warning information; Or
This is characterized as the alarm identifier of described all general warning information, and the generation frequency value of described all general warning information.
2, the corresponding professional resources data of the first general warning information are associated with the corresponding professional resources data of the second general warning information.Wherein, here said professional resources data can be the information that produces the resource topology relations such as equipment of warning information, and the resource location information that resource incidence relation can comprise from general warning information text is directly obtained or indirectly inquired about and obtain by professional network management system or comprehensive resources system;
3, the time interval length of the generation of the first general warning information constantly and between the generation of described the second general warning information is constantly no more than the first stipulated time length.
Table 1:
Step 13: output is for characterizing the results messages that has incidence relation between the first general warning information and the second general warning information.
In the embodiment of the present invention, when judge the first general warning information by step 12, meet while setting up the condition of derivative incidence relation with the second general warning information, can also further carry out following step:
The information content that the information content comprising according to the first general warning information, the second general warning information comprise, and the data format requirement that generates derivative warning information, generate derivative warning information.
Whether the method that the embodiment of the present invention provides meets the condition of setting up alarm association relation by judging between different warning information, determines between different warning information, whether there is incidence relation.This scheme, without artificial participation, therefore can effectively improve the treatment effeciency of warning information.
In practice one of the said method providing with the embodiment of the present invention below has particular application as example, describes the realization flow of the method and the technique effect that can reach thereof in detail.
In actual communication network, the concrete structure schematic diagram of warning information treatment system as shown in Figure 2.In Fig. 2, warning information treatment system is from being divided in logic warning information modular converter, rule match filtering module, incidence relation analysis module and association results adaptation module.
This system based on as shown in Figure 2, from the warning information gathering from different majors is input to this system, to this system, export for characterizing the whole handling process of the results messages that has incidence relation between warning information and mainly comprise following step as shown in Figure 3:
Step 31: image data from existing network, comprise and gather original alarm information etc., and by the original alarm input information warning information treatment system collecting.
Step 32: warning information treatment system obtains after the original alarm information of input self, and the warning information modular converter in warning information treatment system carries out conversion process to the original alarm information collecting.
Particularly, warning information modular converter carries out conversion process to the original alarm information collecting and mainly comprises: convert original alarm information to general warning information.Wherein, due to the form of original alarm information and equipment original that generate original alarm information arrange relevant, and this original setting equipment vendor's definition often, so original alarm information also can be described as equipment vendor's warning information.In general, the form of equipment vendor's warning information is predetermined by corresponding equipment vendor.Although the form of equipment vendor's warning information of different equipment manufacturer defined is often different, the equipment vendor's warning information that possesses different-format often all can comprise the represented field of field name as shown in table 2.
Table 2:
By the different equipment manufacturer warning information that comprises the represented field of field name as shown in table 2 is changed respectively, can obtain possessing the general warning information of specified format.Particularly, can set up in advance " equipment vendor's warning information model ", and based on this model, different equipment vendor's warning information relationship maps is become to general warning information, thereby effectively shield the difference that different equipment manufacturer warning information may exist in alarm information formats, warning information rank, warning information classification each side, thereby reduce the complexity of O&M work.
In the present embodiment, general warning information model can be represented by following table 3.
Table 3:
Step 33: every general warning information that rule match filtering module is converted to for warning information modular converter is carried out respectively following operation:
The content in can the field of a general warning information of unique expression such as " the network management alarm ID " based on comprising in this general warning information and/or " alarm title ", according to correlation rule pre-configured in the rule base setting in advance, judge whether this general warning information participates in incidence relation analysis, if judgment result is that, be, this general warning information is carried out to buffer memory, and send results messages to incidence relation analysis module, to trigger incidence relation analysis module, implement the analysis to the general warning information of buffer memory.
In the present embodiment, in the rule base setting in advance, can configure various information as shown in table 4 below.
Table 4:
The information of some concrete correlation rules that comprise in rule base can be as shown in table 5.With second of table 5, classifying example as can find out: 1, the name of this correlation rule is called " [primary and secondary is associated] rotating ring alarm causes base station service quit "; 2, the corresponding warning information that meets this correlation rule has shown that rotating ring net and these two specialties of wireless network exist incidence relation; 3, the corresponding warning information that meets this correlation rule is produced by " rotating ring alarm causes that base station service quit alarm occurs " often; 4, the interrelational form meeting between the corresponding warning information of this correlation rule is " primary and secondary "; 5, meet in the title of main warning information of this correlation rule and include " NodeB moves back clothes/base station service quit " such content; 6, meet in the title of inferior warning information of this correlation rule and include " batteries total voltage is low, principal, civil power have or not (power failure) " such content.
Table 5:
Below further illustrate some conventional correlation rules:
1, the correlation rule that causes signaling link to interrupt by relaying fault.Meet in the title of warning information of this correlation rule and generally there will be " MTP link failure ", " WEPI E1 remote alarm ", " WEPI E1 Frame Alignment Loss ", " WEPI E1 receives sliding frame alarm ", " WEPI E1 sends sliding frame alarm " or " WEPIE1 dropout ".Main warning information may be prescribed as in title the warning information that includes " MTP link failure ".
2, because MTP route is unavailable, cause the inaccessible correlation rule of MTP destination signaling point.Meet in the text of warning information of this correlation rule and generally there will be " MTP destination signaling point is unreachable ", " MTP link failure ", " MTP route is unavailable " or " SCCP destination signaling point is forbidden ".Main warning information may be prescribed as in text the warning information that includes " MTP destination signaling point is unreachable ".
Step 34: incidence relation analysis module, after receiving the above results message that rule match filtering module sends, is carried out the analysis to the general warning information of buffer memory, and according to analysis result, generate affiliated partner and send to association results adaptation module.
Particularly, incidence relation analysis module can comprise following content to the analysis of the general warning information of buffer memory:
Incidence relation analysis module is beginning timing from receiving the above results message, and according to coordinate interrelation information (such as need to directly obtaining from general warning information text or indirectly inquiring about by professional network management system/comprehensive resources system the resource information obtaining), in a period of time that judgement starts from timing, in the general warning information of buffer memory, whether there is meeting the warning information of " triggering associated condition " as shown in Table 6 below.If the determination result is YES, incidence relation analysis module generates affiliated partner according to the warning information that meets " triggering associated condition " in the general warning information of buffer memory, and this affiliated partner is sent to association results adaptation module.Wherein, difference according to the actual requirements, can only comprise the relevant information that meets the warning information of " triggering associated condition " in the general warning information of buffer memory in this affiliated partner; Also can further comprise the information of the concrete interrelational form between the warning information that meets " triggering associated condition " for characterizing the general warning information of buffer memory, and the information that comprises " triggering associated condition " that those general warning information specifically meet etc.The resource location information that resource incidence relation can comprise from general warning information text is directly obtained or is indirectly inquired about and obtain by professional network management system or comprehensive resources system
In the present embodiment, in incidence relation analysis module, can set in advance " associated stand-by period window ".This " associated stand-by period window " refers to the length value of a period of time, the i.e. length value of previously described " a period of time starting from timing ".In addition, in incidence relation analysis module, can also set in advance derivative alarm triggered threshold value.
It should be noted that, the correlation rule in previously described rule base can be only from timing, start to equal to timing duration " associated stand-by period window " during this period of time in effective.Under such scene, rule match filtering module also can be take the short transmission cycle that this " associated stand-by period window " is results messages, sending once described results messages and waiting for after the time span that is not shorter than this " associated stand-by period window ", just carry out the transmission of next results messages.And when incidence relation analysis module receives the results messages of rule match filtering module transmission, just start reclocking.
Optionally, in incidence relation analysis module described in the present embodiment, rule judgment submodule can also be set, this submodule for from incidence relation analysis module, start timing to timing duration equal " associated stand-by period window " during this period of time in, if judge in the general warning information of buffer memory and have the warning information that meets " triggering associated condition ", generate affiliated partner and send to association results adaptation module.
Table 6:
For " triggering associated condition " in upper table 6, it should be noted that: in the present embodiment, difference based on collection of resources mode, can utilize the text of the general warning information being converted to or the resource data that collects dynamically generates in real time those and triggers associated condition.
Step 35: association results adaptation module is after receiving affiliated partner, according to the relevant information of the warning information that meets " triggering associated condition " comprising in affiliated partner, generate the results messages the output that for characterizing, between those warning information, have incidence relation.
Further, association results adaptation module can also require to generate derivative alarm information output according to the data format of the derivative alarm triggered threshold value setting in advance and derivative alarm.Such as, when the warning information comprising in affiliated partner meets this derivative alarm triggered threshold value, association results adaptation module just can, according to the data format of the information content of those warning information and above-mentioned derivative alarm, generate derivative warning information.Such as, when the number of the warning information comprising surpasses 10 this derivative alarm triggered threshold value, generate derivative warning information in affiliated partner.
The method providing by the embodiment of the present invention above-mentioned application flow in practice can find out, this scheme is by judging between different warning information whether meet the condition of setting up alarm association relation, determines between different warning information, whether there is incidence relation.This scheme, without artificial participation, therefore can effectively improve the treatment effeciency of warning information.
For the identical inventive concept of above-mentioned alarm information processing method providing with the embodiment of the present invention, the embodiment of the present invention also provides a kind of warning information processing unit, in order to solve the low problem of warning information treatment effeciency existing in prior art.The concrete structure schematic diagram of this device as shown in Figure 4, mainly comprises following function unit:
General warning information acquiring unit 41, for obtaining the general warning information set consisting of at least one the first general warning information and at least one second general warning information; Wherein, the alarm identifier of any the first general warning information and any the second general warning information all meets: consistent with the arbitrary alarm identifier coupling comprising in the multi-disciplinary correlation rule setting in advance; The alarm identifier that described multi-disciplinary correlation rule comprises the general warning information in the different majors that need to participate in incidence relation analysis;
Alarm matching judgment unit 42, for judging whether the first general warning information of the general warning information set that general warning information acquiring unit 41 obtains meets the condition of setting up alarm association relation with the second general warning information;
Results messages output unit 43, while for obtaining judgment result is that in alarm matching judgment unit 42 being, output is for characterizing the results messages that has incidence relation between the first general warning information and the second general warning information.
Optionally, the said apparatus that the embodiment of the present invention provides can also comprise:
Derivative alarm generation unit, for go out the first general warning information of the general warning information set that general warning information acquiring unit 41 obtains in alarm matching judgment unit judges, meet with the second general warning information and set up while deriving associated condition, the information content that the information content comprising according to the first general warning information, the second general warning information comprise, and the data format requirement that generates derivative warning information, generate derivative warning information.
Optionally, general warning information acquiring unit 41 specifically can be divided into following functions subelement, comprising:
Warning information gathers subelement, for gathering the first original alarm information and the second original alarm information of collection;
Warning information conversion subelement, the information transformation rule setting in advance for basis, warning information is gathered to the first original alarm information that subelement collects and be converted to the first general warning information, warning information is gathered to the second original alarm information that subelement collects and be converted to the second general warning information.
Optionally, warning information gather subelement specifically can be for: from the first specialty, gather the first original alarm information; And according to the information gathering rule that at least gathers a second original alarm information from be different from the second major of the first specialty, gather the second original alarm information.
The such scheme that the embodiment of the present invention provides application in practice shows, this scheme exists following technical advantage:
1, can realize warning information collection towards the whole network, process and present.
2, can realize the association analysis of alarm information of the entire network, effectively eliminate redundancy warning information (warning information that there is no incidence relation with other warning information), locates failure cause fast, reduces O&M cost.
3, owing to can realizing the association of different warning information, and for meet set up primary and secondary Correlation Criteria warning information only needs generate the work order for main warning information, for warning information that meet to set up derivative Correlation Criteria only needs generate a work order, thereby can effectively reduce work order growing amount, suppress time alarm group single.
Those skilled in the art should understand, embodiments of the invention can be provided as method, system or computer program.Therefore, the present invention can adopt complete hardware implementation example, implement software example or in conjunction with the form of the embodiment of software and hardware aspect completely.And the present invention can adopt the form that wherein includes the upper computer program of implementing of computer-usable storage medium (including but not limited to magnetic disc store, CD-ROM, optical memory etc.) of computer usable program code one or more.
The present invention is with reference to describing according to flow chart and/or the block diagram of the method for the embodiment of the present invention, equipment (system) and computer program.Should understand can be in computer program instructions realization flow figure and/or block diagram each flow process and/or the flow process in square frame and flow chart and/or block diagram and/or the combination of square frame.Can provide these computer program instructions to the processor of all-purpose computer, special-purpose computer, Embedded Processor or other programmable data processing device to produce a machine, the instruction of carrying out by the processor of computer or other programmable data processing device is produced for realizing the device in the function of flow process of flow chart or a plurality of flow process and/or square frame of block diagram or a plurality of square frame appointments.
These computer program instructions also can be stored in energy vectoring computer or the computer-readable memory of other programmable data processing device with ad hoc fashion work, the instruction that makes to be stored in this computer-readable memory produces the manufacture that comprises command device, and this command device is realized the function of appointment in flow process of flow chart or a plurality of flow process and/or square frame of block diagram or a plurality of square frame.
These computer program instructions also can be loaded in computer or other programmable data processing device, make to carry out sequence of operations step to produce computer implemented processing on computer or other programmable devices, thereby the instruction of carrying out is provided for realizing the step of the function of appointment in flow process of flow chart or a plurality of flow process and/or square frame of block diagram or a plurality of square frame on computer or other programmable devices.
Although described the preferred embodiments of the present invention, once those skilled in the art obtain the basic creative concept of cicada, can make other change and modification to these embodiment.So claims are intended to all changes and the modification that are interpreted as comprising preferred embodiment and fall into the scope of the invention.
Obviously, those skilled in the art can carry out various changes and modification and not depart from the spirit and scope of the present invention the present invention.Like this, if within of the present invention these are revised and modification belongs to the scope of the claims in the present invention and equivalent technologies thereof, the present invention is also intended to comprise these changes and modification interior.
Claims (10)
1. an alarm information processing method, is characterized in that, comprising:
Obtain the general warning information set being formed by least one the first general warning information and at least one second general warning information; Wherein, the alarm identifier of any the first general warning information and any the second general warning information all meets: consistent with the arbitrary alarm identifier coupling comprising in the multi-disciplinary correlation rule setting in advance; The alarm identifier that described multi-disciplinary correlation rule comprises the general warning information in the different majors that need to participate in incidence relation analysis;
Judge whether the first general warning information meets the condition of setting up alarm association relation with the second general warning information;
Judgment result is that while being, output is for characterizing the results messages that has incidence relation between the first general warning information and the second general warning information.
2. the method for claim 1, is characterized in that, in the described condition of setting up alarm association relation, comprises the condition of setting up primary and secondary association, and the condition of setting up primary and secondary association comprises:
The alarm identifier of the alarm identifier of described the first general warning information and described the second general warning information corresponds respectively to the alarm identifier of main alarm in described multi-disciplinary correlation rule and the alarm identifier of time alarm, or corresponds respectively to time alarm identifier of alarm and the alarm identifier of main alarm; And
The corresponding professional resources data of described the first general warning information are associated with the corresponding professional resources data of the second general warning information;
The time interval length of the generation of the first general warning information constantly and between the generation of described the second general warning information is constantly no more than the first stipulated time length;
In the described condition of setting up alarm association relation, also comprise and set up derivative associated condition, and set up derivative associated condition and comprise:
The feature of all general warning information in described general warning information set is identical with regulation feature; And
The corresponding professional resources data of the first general warning information are associated with the corresponding professional resources data of described the second general warning information; And
The time interval length of the generation of the first general warning information constantly and between the generation of described the second general warning information is constantly no more than the first stipulated time length;
Wherein, described in, be characterized as the alarm identifier of described all general warning information and the total quantity of described all general warning information; Or
The described alarm identifier that is characterized as described all general warning information, and the quantity of specific general warning information and the ratio of described total quantity in described all general warning information; Or
The described alarm identifier that is characterized as described all general warning information, and the generation frequency value of described all general warning information.
3. method as claimed in claim 2, is characterized in that, when judging the condition that the first general warning information is satisfied and described the second general warning information foundation is derivative associated, described method also comprises:
The information content that the information content comprising according to the first general warning information, described the second general warning information comprise, and the data format requirement that generates derivative warning information, generate derivative warning information.
4. the method for claim 1, is characterized in that, obtains the first general warning information and specifically comprises:
Gather the first original alarm information;
According to the information transformation rule setting in advance, the first original alarm information collecting is converted to the first general warning information;
Obtaining the second general warning information specifically comprises:
Gather the second original alarm information;
According to the information transformation rule setting in advance, the second original alarm information collecting is converted to the second general warning information.
5. method as claimed in claim 4, is characterized in that, gathers the first original alarm information, specifically comprises:
From the first specialty, gather the first original alarm information;
Gather the second original alarm information, specifically comprise:
Information gathering rule according at least gather a second original alarm information from be different from the second major of the first specialty, gathers the second original alarm information.
6. a warning information processing unit, is characterized in that, comprising:
General warning information acquiring unit, for obtaining the general warning information set consisting of at least one the first general warning information and at least one second general warning information; Wherein, the alarm identifier of any the first general warning information and any the second general warning information all meets: consistent with the arbitrary alarm identifier coupling comprising in the multi-disciplinary correlation rule setting in advance; The alarm identifier that described multi-disciplinary correlation rule comprises the general warning information in the different majors that need to participate in incidence relation analysis;
Alarm matching judgment unit, for judging whether the first general warning information of the general warning information set that described general warning information acquiring unit obtains meets the condition of setting up alarm association relation with the second general warning information;
Results messages output unit, while for obtaining judgment result is that in described alarm matching judgment unit being, output is for characterizing the results messages that has incidence relation between the first general warning information and the second general warning information.
7. device as claimed in claim 6, is characterized in that, in the described condition of setting up alarm association relation, comprises the condition of setting up primary and secondary association, and the condition of setting up primary and secondary association comprises:
The alarm identifier of the alarm identifier of described the first general warning information and described the second general warning information corresponds respectively to the alarm identifier of main alarm in described multi-disciplinary correlation rule and the alarm identifier of time alarm, or corresponds respectively to time alarm identifier of alarm and the alarm identifier of main alarm; And
The corresponding professional resources data of described the first general warning information are associated with the corresponding professional resources data of the second general warning information; And
The time interval length of the generation of the first general warning information constantly and between the generation of described the second general warning information is constantly no more than the first stipulated time length;
In the described condition of setting up alarm association relation, also comprise and set up derivative associated condition, and set up derivative associated condition and comprise:
The feature of all general warning information in described general warning information set is identical with regulation feature; And
The corresponding professional resources data of the first general warning information are associated with the corresponding professional resources data of described the second general warning information; And
The time interval length of the generation of the first general warning information constantly and between the generation of described the second general warning information is constantly no more than the first stipulated time length;
Wherein, described in, be characterized as the alarm identifier of described all general warning information and the total quantity of described all general warning information; Or
The described alarm identifier that is characterized as described all general warning information, and the quantity of specific general warning information and the ratio of described total quantity in described all general warning information; Or
The described alarm identifier that is characterized as described all general warning information, and the generation frequency value of described all general warning information.
8. device as claimed in claim 7, is characterized in that, described device also comprises:
Derivative alarm generation unit, for go out the first general warning information of the general warning information set that described general warning information acquiring unit obtains in alarm matching judgment unit judges, meet with the second general warning information and set up while deriving associated condition, the information content that the information content that the first general warning information obtaining according to described general warning information acquiring unit comprises, described the second general warning information comprise, and the data format requirement that generates derivative warning information, generate derivative warning information.
9. device as claimed in claim 6, is characterized in that, described general warning information acquiring unit specifically comprises:
Warning information gathers subelement, for gathering the first original alarm information and the second original alarm information of collection;
Warning information conversion subelement, the information transformation rule setting in advance for basis, the first original alarm information that described warning information collection subelement is collected is converted to the first general warning information, and the second original alarm information that described warning information collection subelement is collected is converted to the second general warning information.
10. device as claimed in claim 9, is characterized in that, warning information gather subelement specifically for: from the first specialty, gather the first original alarm information; And according to the information gathering rule that at least gathers a second original alarm information from be different from the second major of the first specialty, gather the second original alarm information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310154388.6A CN104125087B (en) | 2013-04-28 | 2013-04-28 | A kind of alarm information processing method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310154388.6A CN104125087B (en) | 2013-04-28 | 2013-04-28 | A kind of alarm information processing method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104125087A true CN104125087A (en) | 2014-10-29 |
| CN104125087B CN104125087B (en) | 2017-10-24 |
Family
ID=51770359
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310154388.6A Active CN104125087B (en) | 2013-04-28 | 2013-04-28 | A kind of alarm information processing method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104125087B (en) |
Cited By (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105049253A (en) * | 2015-07-28 | 2015-11-11 | 浪潮通信信息系统有限公司 | Method for obtaining mobile network fault location and fault early warning |
| CN106170947A (en) * | 2015-02-12 | 2016-11-30 | 华为技术有限公司 | A kind of alarm information processing method, relevant device and system |
| CN106446941A (en) * | 2016-09-14 | 2017-02-22 | 河海大学 | Unconventional emergency dynamic priority method based on model matching |
| CN107332718A (en) * | 2017-08-16 | 2017-11-07 | 国网江苏省电力公司南京供电公司 | A kind of power communication is with matching somebody with somebody electric terminal real-time linkage Fault Locating Method |
| CN108021492A (en) * | 2016-11-04 | 2018-05-11 | 华为技术有限公司 | One kind alarm merging method and equipment |
| CN108256722A (en) * | 2017-11-16 | 2018-07-06 | 国网河北省电力有限公司信息通信分公司 | A kind of communicating for power information worksheet processing handheld terminal |
| CN110147980A (en) * | 2019-04-03 | 2019-08-20 | 口碑(上海)信息技术有限公司 | Worksheet method and device |
| CN110289998A (en) * | 2019-06-19 | 2019-09-27 | 北京市天元网络技术股份有限公司 | A kind of disconnected alarm method and the device of standing in derivation base station |
| CN111327438A (en) * | 2018-12-14 | 2020-06-23 | 中国移动通信集团北京有限公司 | Alarm data processing method and device and readable medium |
| CN111814999A (en) * | 2020-07-08 | 2020-10-23 | 上海燕汐软件信息科技有限公司 | Fault work order generation method, device and equipment |
| CN112564949A (en) * | 2020-11-27 | 2021-03-26 | 中盈优创资讯科技有限公司 | Analysis method and device based on cross-professional alarm association rule |
| CN112583643A (en) * | 2020-12-14 | 2021-03-30 | 浪潮云信息技术股份公司 | Cross-device alarm correlation method |
| CN112735103A (en) * | 2020-12-16 | 2021-04-30 | 中盈优创资讯科技有限公司 | Alarm correlation identification method, device and equipment |
| CN113568991A (en) * | 2021-09-22 | 2021-10-29 | 北京必示科技有限公司 | Alarm processing method and system based on dynamic risk |
| CN114708717A (en) * | 2022-04-18 | 2022-07-05 | 中国银行股份有限公司 | Association alarm method and device for system monitoring |
| CN114710532A (en) * | 2022-04-02 | 2022-07-05 | 中国科学院水生生物研究所 | Museum safety electricity utilization alarm suppression method and device |
| CN116560937A (en) * | 2023-03-27 | 2023-08-08 | 中国华能集团有限公司北京招标分公司 | Alarm engine using method |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1984170A (en) * | 2005-12-15 | 2007-06-20 | 中国移动通信集团公司 | Method for processing network alerting information |
| CN101651576A (en) * | 2009-08-28 | 2010-02-17 | 曙光信息产业(北京)有限公司 | Alarm information processing method and system |
| CN101808015A (en) * | 2009-02-18 | 2010-08-18 | 普天信息技术研究院有限公司 | Analytical method and device for relevance of alarm information |
| CN102142983A (en) * | 2010-11-24 | 2011-08-03 | 华为技术有限公司 | Alarm correlation analysis method and device |
-
2013
- 2013-04-28 CN CN201310154388.6A patent/CN104125087B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1984170A (en) * | 2005-12-15 | 2007-06-20 | 中国移动通信集团公司 | Method for processing network alerting information |
| CN101808015A (en) * | 2009-02-18 | 2010-08-18 | 普天信息技术研究院有限公司 | Analytical method and device for relevance of alarm information |
| CN101651576A (en) * | 2009-08-28 | 2010-02-17 | 曙光信息产业(北京)有限公司 | Alarm information processing method and system |
| CN102142983A (en) * | 2010-11-24 | 2011-08-03 | 华为技术有限公司 | Alarm correlation analysis method and device |
Non-Patent Citations (1)
| Title |
|---|
| 石永革等: "通信网告警影响性分析机制的研究与应用", 《微计算机信息》 * |
Cited By (26)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US10771323B2 (en) | 2015-02-12 | 2020-09-08 | Huawei Technologies Co., Ltd. | Alarm information processing method, related device, and system |
| CN106170947A (en) * | 2015-02-12 | 2016-11-30 | 华为技术有限公司 | A kind of alarm information processing method, relevant device and system |
| CN105049253B (en) * | 2015-07-28 | 2018-06-01 | 浪潮天元通信信息系统有限公司 | A kind of method for obtaining mobile network's fault location and fault pre-alarming |
| CN105049253A (en) * | 2015-07-28 | 2015-11-11 | 浪潮通信信息系统有限公司 | Method for obtaining mobile network fault location and fault early warning |
| CN106446941A (en) * | 2016-09-14 | 2017-02-22 | 河海大学 | Unconventional emergency dynamic priority method based on model matching |
| CN108021492A (en) * | 2016-11-04 | 2018-05-11 | 华为技术有限公司 | One kind alarm merging method and equipment |
| CN108021492B (en) * | 2016-11-04 | 2021-01-29 | 华为技术有限公司 | Alarm merging method and equipment |
| CN107332718A (en) * | 2017-08-16 | 2017-11-07 | 国网江苏省电力公司南京供电公司 | A kind of power communication is with matching somebody with somebody electric terminal real-time linkage Fault Locating Method |
| CN107332718B (en) * | 2017-08-16 | 2022-08-09 | 国网江苏省电力公司南京供电公司 | Real-time linkage fault positioning method for power communication and power distribution and utilization terminal |
| CN108256722A (en) * | 2017-11-16 | 2018-07-06 | 国网河北省电力有限公司信息通信分公司 | A kind of communicating for power information worksheet processing handheld terminal |
| CN111327438B (en) * | 2018-12-14 | 2022-08-23 | 中国移动通信集团北京有限公司 | Alarm data processing method and device and readable medium |
| CN111327438A (en) * | 2018-12-14 | 2020-06-23 | 中国移动通信集团北京有限公司 | Alarm data processing method and device and readable medium |
| CN110147980A (en) * | 2019-04-03 | 2019-08-20 | 口碑(上海)信息技术有限公司 | Worksheet method and device |
| CN110289998A (en) * | 2019-06-19 | 2019-09-27 | 北京市天元网络技术股份有限公司 | A kind of disconnected alarm method and the device of standing in derivation base station |
| CN111814999A (en) * | 2020-07-08 | 2020-10-23 | 上海燕汐软件信息科技有限公司 | Fault work order generation method, device and equipment |
| CN111814999B (en) * | 2020-07-08 | 2024-01-16 | 上海燕汐软件信息科技有限公司 | Fault work order generation method, device and equipment |
| CN112564949A (en) * | 2020-11-27 | 2021-03-26 | 中盈优创资讯科技有限公司 | Analysis method and device based on cross-professional alarm association rule |
| CN112583643A (en) * | 2020-12-14 | 2021-03-30 | 浪潮云信息技术股份公司 | Cross-device alarm correlation method |
| CN112735103A (en) * | 2020-12-16 | 2021-04-30 | 中盈优创资讯科技有限公司 | Alarm correlation identification method, device and equipment |
| CN113568991A (en) * | 2021-09-22 | 2021-10-29 | 北京必示科技有限公司 | Alarm processing method and system based on dynamic risk |
| CN114710532A (en) * | 2022-04-02 | 2022-07-05 | 中国科学院水生生物研究所 | Museum safety electricity utilization alarm suppression method and device |
| CN114710532B (en) * | 2022-04-02 | 2023-10-03 | 中国科学院水生生物研究所 | Method and device for suppressing security electricity utilization alarm of museum |
| CN114708717A (en) * | 2022-04-18 | 2022-07-05 | 中国银行股份有限公司 | Association alarm method and device for system monitoring |
| CN114708717B (en) * | 2022-04-18 | 2024-07-19 | 中国银行股份有限公司 | Correlation alarm method and device for system monitoring |
| CN116560937A (en) * | 2023-03-27 | 2023-08-08 | 中国华能集团有限公司北京招标分公司 | Alarm engine using method |
| CN116560937B (en) * | 2023-03-27 | 2024-02-27 | 中国华能集团有限公司北京招标分公司 | Alarm engine using method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104125087B (en) | 2017-10-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104125087A (en) | Alarm information processing method and device | |
| CN105790990B (en) | A kind of method and its system for supervising adapted telecommunication business | |
| CN114189444B (en) | Method for nano-tube industrial end equipment, time sensitive network controller and system | |
| CN103902537A (en) | Multi-service log data storage processing and inquiring system and method thereof | |
| WO2010138286A2 (en) | Distributed information storage and retrieval of communication network performance data | |
| CN102820993A (en) | Network resource monitoring system and network resource monitoring method | |
| CN104820890B (en) | A kind of power scheduling device model and power network production equipment information fusion method | |
| CN104065496A (en) | Network topology generating method and device | |
| CN111127250B (en) | Power data monitoring event analysis system and method | |
| EP2590363A1 (en) | Method and system for collecting performance statistics data | |
| CN113054743A (en) | Internet of things terminal data access system and method suitable for power distribution cloud master station | |
| CN111404800B (en) | Hybrid networking communication system and method | |
| CN103458021A (en) | Event-driven state-oriented self-adaptive sensor organizational method | |
| CN114301818A (en) | Service flow detection method, device, system, terminal and storage medium | |
| CN104254095A (en) | Method and device for positioning transmission fault causing large-scale base station service failure | |
| CN103843218A (en) | Wireless communication system of power supply-and-demand control and control method of same | |
| CN102375912B (en) | Data integration device and method among different engineering software systems | |
| CN102355373A (en) | Method and device for automatically troubleshooting large convergent point hidden troubles of transmission network | |
| CN103973489A (en) | Centralized monitoring system for heterogeneous devices | |
| CN101893876A (en) | Control network design for large-scale distributed control system | |
| CN111476547A (en) | Method for analyzing assets of distribution network line ring-out point arrangement in user | |
| CN109687985B (en) | Automatic configuration method and system for process level network of transformer substation | |
| CN102045154B (en) | Method and system for synchronizing data of power equipment as well as power resource management server | |
| CN104243218A (en) | Power system communication mode bill compilation method based on multi-scheduling constraints | |
| CN104244293A (en) | Network node alarming method and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |