CN104408890A - Alarm handling method and device of electric power system - Google Patents

Alarm handling method and device of electric power system Download PDF

Info

Publication number
CN104408890A
CN104408890A CN201410637347.7A CN201410637347A CN104408890A CN 104408890 A CN104408890 A CN 104408890A CN 201410637347 A CN201410637347 A CN 201410637347A CN 104408890 A CN104408890 A CN 104408890A
Authority
CN
China
Prior art keywords
alarm
alarm metadata
composition
metadata
rule
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201410637347.7A
Other languages
Chinese (zh)
Other versions
CN104408890B (en
Inventor
雷晓萍
刘世良
王蔚青
苏蔚
马惠萍
王有虎
李鹏
张广德
张译
马君
王国庆
梁亦昭
侯利春
李宏波
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
State Grid Corp of China SGCC
State Grid Qinghai Electric Power Co Ltd
Information and Telecommunication Branch of State Grid Qinghai Electric Power Co Ltd
Original Assignee
State Grid Corp of China SGCC
State Grid Qinghai Electric Power Co Ltd
Information and Telecommunication Branch of State Grid Qinghai Electric Power Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by State Grid Corp of China SGCC, State Grid Qinghai Electric Power Co Ltd, Information and Telecommunication Branch of State Grid Qinghai Electric Power Co Ltd filed Critical State Grid Corp of China SGCC
Priority to CN201410637347.7A priority Critical patent/CN104408890B/en
Publication of CN104408890A publication Critical patent/CN104408890A/en
Application granted granted Critical
Publication of CN104408890B publication Critical patent/CN104408890B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00Administration; Management
    • G06Q10/06Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
    • G06Q10/063Operations research, analysis or management
    • G06Q10/0635Risk analysis of enterprise or organisation activities
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q50/00Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism
    • G06Q50/06Energy or water supply

Landscapes

  • Business, Economics & Management (AREA)
  • Human Resources & Organizations (AREA)
  • Engineering & Computer Science (AREA)
  • Economics (AREA)
  • Strategic Management (AREA)
  • Tourism & Hospitality (AREA)
  • Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • Theoretical Computer Science (AREA)
  • Marketing (AREA)
  • Entrepreneurship & Innovation (AREA)
  • General Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • Operations Research (AREA)
  • Development Economics (AREA)
  • Quality & Reliability (AREA)
  • Educational Administration (AREA)
  • Game Theory and Decision Science (AREA)
  • Public Health (AREA)
  • Water Supply & Treatment (AREA)
  • General Health & Medical Sciences (AREA)
  • Primary Health Care (AREA)
  • Remote Monitoring And Control Of Power-Distribution Networks (AREA)
  • Alarm Systems (AREA)

Abstract

The invention provides an alarm handling method and a device of an electric power system. The method comprises the steps: analyzing alarm information according to the contents of the preset rules, refining alarm metadata and combining the alarm metadata to form alarm metadata combinations; performing correlation analysis processing on the alarm metadata combinations according to the preconfigured correlation rules of representing the correlation between the alarm metadata combinations, and obtaining correction analysis results, wherein the objects of correlation analysis processing comprises a root alarm metadata combination of the alarm metadata combination and/or an impact alarm metadata combination. According to the alarm handling method and the device of the electric power system, the time-consuming and inconvenience in the alarm handling of the electric power system can be solved.

Description

The alert processing method of electric system and device
Technical field
The present invention relates to electric power treatment technology, in particular to a kind of alert processing method and device of electric system.
Background technology
The monitoring warning system of power information system is the important leverage of power information system high-performance, high reliability, high availability and high quality-of-service, can detect rapidly and accurately by this monitoring warning system, locate and fix a breakdown, reduce the loss because fault causes, the availability of guarantee system and reliability, and can trouble-saving generation to a certain extent.
Existing monitoring warning system mainly pays close attention to promptness and the accuracy of alarm, general employing real time propelling movement, the mode of real-time exhibition and notice allows monitor staff and the current alarm details of the real-time understanding of relevant responsible official, the promptness of alarm is ensured with this, then verified by artificial mode, get rid of the alarm of wrong report, improve the accuracy of alarm.
Along with the expansion of network size, alarm quantity also day by day huge, if still get rid of wrong report information according to the experience of oneself accumulation by operation maintenance personnel from the warning information of magnanimity, find out the root of alarm, will need to drop into more manpower and materials and time loss, and be difficult to the stable operation of auxiliary power infosystem timely.
Monitoring alarm substantial amounts for power information system in correlation technique is difficult to the problem accurately got rid of wrong report information, find out the root of alarm, not yet proposes effective solution at present.
Summary of the invention
The invention provides a kind of alert processing method and device of electric system, to waste time and energy problem with the alarming processing at least solving electric system.
According to an aspect of the present invention, provide a kind of alert processing method of electric system, comprising: resolve warning information according to the Rule content preset, refinement goes out alarm metadata and combines, and obtains alarm metadata composition; According to the correlation rule of incidence relation between pre-configured expression alarm metadata composition, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, described association analysis process comprises the Root alarm metadata composition of described alarm metadata composition and/or affects alarm metadata composition.
Alternatively, also comprise: generate the unique Rule content of an overall situation corresponding to each alarm metadata; According to the determinant attribute of alarm metadata, the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding.
Alternatively, the Rule content that described basis presets resolves warning information, refinement goes out alarm metadata and combines, obtain alarm metadata composition, comprise: by java DataBase combining JDBC poll access rule database, obtain the Rule content that alarm metadata is corresponding, from described warning information, separate the current alarm metadata that need process by the coupling of described Rule content; Based on the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding, obtain alarm metadata composition.
Alternatively, the described correlation rule according to incidence relation between pre-configured expression alarm metadata composition, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, comprise: obtain predefined correlation rule, alarm metadata composition and predefined correlation rule are carried out mating and filters, obtain the Root alarm metadata composition of this alarm metadata composition and affect alarm metadata composition.
Alternatively, also comprise: show described association analysis result.
According to another aspect of the present invention, provide a kind of alarm treatment device of electric system, comprise: analysis module and correlation rule module, wherein, correlation rule module, for preserving the Rule content and correlation rule that preset, described correlation rule represents the correlation rule of incidence relation between alarm metadata composition; Analysis module, for resolving warning information according to the Rule content preset in described correlation rule module, refinement goes out alarm metadata and combines, and obtains alarm metadata composition; And, according to the described correlation rule be pre-configured in described correlation rule module, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, described association analysis process comprises the Root alarm metadata composition of described alarm metadata composition and/or affects alarm metadata composition.
Alternatively, described correlation rule module, also generates the unique Rule content of an overall situation for corresponding to each alarm metadata; According to the determinant attribute of alarm metadata, the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding.
Alternatively, described analysis module, for resolving warning information according to the Rule content preset in described correlation rule module, refinement goes out alarm metadata and combines, obtain alarm metadata composition, comprise: access the rule database in described correlation rule module by JDBC poll, obtain the Rule content that alarm metadata is corresponding, from warning information, separate the current alarm metadata that need process by the coupling of Rule content; Based on the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding, obtain alarm metadata composition.
Alternatively, described analysis module, the described correlation rule in described correlation rule module is pre-configured in for basis, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, comprise: obtain predefined correlation rule, alarm metadata composition and predefined correlation rule are carried out mating and filters, obtain the Root alarm metadata composition of this alarm metadata composition and affect alarm metadata composition.
Alternatively, also comprise: display module, for showing the association analysis result that described analysis module obtains.
Pass through the present invention, obtain alarm metadata by refinement warning information and combine, the correlation rule preset based on monitor staff again obtains the association analysis result of alarm set of metadata, the root that alarm produces effectively can be found out from a large amount of alarms, automatically complete the association analysis of alarm, get rid of secondary related alarm, orientation problem root, the coverage of indication problem, and impact analysis can be carried out to the alarm of current generation, early warning is carried out to by issuable event, effective auxiliary operation maintenance personnel finds and deals with problems, thus can the high-performance of sound assurance electric system, high reliability, high availability and high quality-of-service.
Accompanying drawing explanation
Accompanying drawing described herein is used to provide a further understanding of the present invention, and form a application's part, schematic description and description of the present invention, for explaining the present invention, does not form inappropriate limitation of the present invention.In the accompanying drawings:
Fig. 1 is the alert processing method process flow diagram according to the embodiment of the present invention;
Fig. 2 is the alarm treatment device structural drawing according to the embodiment of the present invention;
Fig. 3 is the Rotating fields schematic diagram of the alarm treatment device according to the embodiment of the present invention.
Embodiment
It should be noted that, when not conflicting, the embodiment in the application and the feature in embodiment can combine mutually.Below with reference to the accompanying drawings and describe the present invention in detail in conjunction with the embodiments.
Embodiments provide a kind of alert processing method of power information, Fig. 1 is the method flow diagram according to the embodiment of the present invention, as shown in Figure 1, comprises following step:
Step S202: resolve warning information according to the Rule content preset, refinement goes out alarm metadata and combines, and obtains alarm metadata composition;
Step S204: according to the correlation rule of incidence relation between pre-configured expression alarm metadata composition, association analysis process is carried out to described alarm metadata composition, obtains association analysis result.
Wherein, described association analysis process comprises the Root alarm metadata composition of described alarm metadata composition and/or affects alarm metadata composition.
Concrete, before step S202, can also comprise the steps: that corresponding to each alarm metadata generates the unique Rule content of an overall situation; According to the determinant attribute of alarm metadata, the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding.This step is realized by correlation rule module, that is, by correlation rule module composition rule content, and forms association analysis rule, when resolving warning information for analysis module.
Here, Rule content corresponding to alarm metadata completes initialization and renewal by timer-triggered scheduler task poll.Concrete, combination alarm metadata forms association analysis rule; The generation of correlation rule is generated by monitor staff's manual intervention.The empirical combination metadata that monitor staff accumulates according to daily monitoring generates the correlation rule representing incidence relation between alarm metadata composition, such as, correlation rule can be { alarm metadata 1, alarm metadata 2 ... come from/affect { alarm metadata 3, alarm metadata 4 ....
Step S202 and S204 is performed by analysis module, and after analysis module obtains its warning information generated from the monitored object of power information system, resolve warning information according to the above-mentioned Rule content pre-set, refinement goes out alarm metadata.And then rule query can be carried out by the alarm metadata that fine granularity is higher and screening obtains association analysis result.Concrete, by JDBC poll access rule database, obtain the Rule content that alarm metadata is corresponding, from described warning information, separate the current alarm metadata that need process by the coupling of described Rule content; Based on the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding, obtain alarm metadata composition.
Concrete, analysis module obtains predefined correlation rule, alarm metadata composition and predefined correlation rule is carried out mating and filters, and obtains the Root alarm metadata composition of this alarm metadata composition and affects alarm metadata composition.
After step S204, can also comprise: show described association analysis result.
It should be noted that, above-mentioned alarm metadata is by monitored object model and alarm model combination producing, such as, as " ip=xx.xx.xx.xx ' switch create ' alarm type=3 ', ' alarm level=serious ", wherein, monitored object model is as main process equipment, switch, router and the unique identification to monitored object, the IP of such as switch, the host name of main process equipment, the Instance Name, place server ip etc. of database; Alarm model is as alarm level, Alarm Classification etc.; Alarm model is kept at alarm storehouse, and monitored object model is kept at resources bank.
The embodiment of the present invention additionally provides a kind of alarm treatment device, and this device may be used for realizing said method.Fig. 2 is the composition structural drawing of the alarm treatment device according to the embodiment of the present invention, as shown in Figure 2, comprising:
Correlation rule module 21, for preserving the Rule content and correlation rule that preset, described correlation rule represents the correlation rule of incidence relation between alarm metadata composition.
Analysis module 22, for resolving warning information according to the Rule content preset in described correlation rule module, refinement goes out alarm metadata and combines, and obtains alarm metadata composition; And, according to the described correlation rule be pre-configured in described correlation rule module, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, described association analysis process comprises the Root alarm metadata composition of described alarm metadata composition and/or affects alarm metadata composition.
Wherein, correlation rule module 21, also generates the unique Rule content of an overall situation for corresponding to each alarm metadata; According to the determinant attribute of alarm metadata, the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding.
Concrete, described analysis module 22, for resolving warning information according to the Rule content preset in described correlation rule module, refinement goes out alarm metadata and combines, obtain alarm metadata composition, comprise: access the rule database in described correlation rule module by JDBC poll, obtain the Rule content that alarm metadata is corresponding, from warning information, separate the current alarm metadata that need process by the coupling of Rule content; Based on the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding, obtain alarm metadata composition.
Concrete, described analysis module 22, the described correlation rule in described correlation rule module is pre-configured in for basis, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, comprise: obtain predefined correlation rule, alarm metadata composition and predefined correlation rule are carried out mating and filters, obtain the Root alarm metadata composition of this alarm metadata composition and affect alarm metadata composition.
Described alarm treatment device can also comprise: display module 23, for showing the association analysis result that described analysis module 22 obtains.
It should be noted that, the alarm treatment device described in device embodiment corresponds to above-mentioned embodiment of the method, and its concrete implementation procedure carried out detailed description in embodiment of the method, did not repeat them here.
In order to make technical scheme of the present invention and implementation method clearly, below in conjunction with preferred embodiment, its implementation procedure is described in detail.
In practical application, software layer structure as shown in Figure 3 can be adopted to realize said method of the present invention and device.Concrete, this software layer structure can comprise three layers, respectively: presentation layer, processing layer and data persistence layer.
Wherein, presentation layer has been mainly used in the part needing man-machine interaction, comprise the part of rule database maintenance and the part of association analysis result displaying, the service portion of rule database is as a part for correlation rule module, for monitor staff, the correlation rule Sum fanction content in rule database upgraded, configure and the operation such as deletion, the part that association analysis result is shown is the display module of alarm treatment device of the present invention, for the association analysis obtained result is shown to supervisory user, is convenient to supervisory user and checks.
Processing layer comprises inference engine, this inference engine is a part for analysis module, for completing the matching treatment of data, concrete, by JDBC (Java Data Base Connectivity, java DataBase combining) rule database of poll access correlation rule module, obtain the Rule content that alarm metadata is corresponding, from warning information, separate the alarm metadata when pre-treatment by the coupling of Rule content and combine; Then from the rule database of correlation rule module, obtain predefined correlation rule, alarm metadata composition is mated with predefined correlation rule and filters, obtain the Root alarm metadata composition of this alarm metadata composition and affect alarm metadata composition.
Data persistence layer is mainly used for preserving data, as another part of correlation rule module, can comprise: rule database, alarm metadatabase, resources bank and alarm storehouse, rule database preserves the Rule content and correlation rule that are configured by the rule database service portion of presentation layer for monitor staff, and preserves the association analysis result that inference engine obtains.Association analysis result in rule database is shown to user by presentation layer.Preserve the alarm metadata that inference engine obtains in alarm metadatabase, in resources bank, preserve the monitored object model of composition alarm metadata, in alarm storehouse, preserve the alarm model of composition alarm metadata.
It should be noted that, can perform in the computer system of such as one group of computer executable instructions in the step shown in the process flow diagram of accompanying drawing, and, although show logical order in flow charts, but in some cases, can be different from the step shown or described by order execution herein.
In sum, according to the abovementioned embodiments of the present invention, the present invention utilizes the basic theoretical knowledge of rule-based reasoning to achieve the alert analysis process of power information system, by the empirical system of monitor staff, functionalization, obtain alarm metadata by refinement warning information and combine, the correlation rule preset based on monitor staff again obtains the association analysis result of alarm set of metadata, the root that alarm produces effectively can be found out from a large amount of alarms, automatically complete the association analysis of alarm, get rid of secondary related alarm, orientation problem root, the coverage of indication problem, and impact analysis can be carried out to the alarm of current generation, early warning is carried out to by issuable event, effective auxiliary operation maintenance personnel finds and deals with problems, thus can the high-performance of sound assurance electric system, high reliability, high availability and high quality-of-service.
Obviously, those skilled in the art should be understood that, above-mentioned of the present invention each module or each step can realize with general calculation element, they can concentrate on single calculation element, or be distributed on network that multiple calculation element forms, alternatively, they can realize with the executable program code of calculation element, thus, they can be stored and be performed by calculation element in the storage device, or they are made into each integrated circuit modules respectively, or the multiple module in them or step are made into single integrated circuit module to realize.Like this, the present invention is not restricted to any specific hardware and software combination.
The foregoing is only the preferred embodiments of the present invention, be not limited to the present invention, for a person skilled in the art, the present invention can have various modifications and variations.Within the spirit and principles in the present invention all, any amendment done, equivalent replacement, improvement etc., all should be included within protection scope of the present invention.

Claims (10)

1. an alert processing method for electric system, is characterized in that comprising:
Resolve warning information according to the Rule content preset, refinement goes out alarm metadata and combines, and obtains alarm metadata composition;
According to the correlation rule of incidence relation between pre-configured expression alarm metadata composition, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, described association analysis process comprises the Root alarm metadata composition of described alarm metadata composition and/or affects alarm metadata composition.
2. alert processing method according to claim 1, is characterized in that, also comprises:
The unique Rule content of an overall situation is generated corresponding to each alarm metadata;
According to the determinant attribute of alarm metadata, the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding.
3. alert processing method according to claim 2, is characterized in that, the Rule content that described basis presets resolves warning information, and refinement goes out alarm metadata and combines, and obtains alarm metadata composition, comprising:
By java DataBase combining JDBC poll access rule database, obtain the Rule content that alarm metadata is corresponding, from described warning information, separate the current alarm metadata that need process by the coupling of described Rule content;
Based on the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding, obtain alarm metadata composition.
4. alert processing method according to claim 1, is characterized in that,
The described correlation rule according to incidence relation between pre-configured expression alarm metadata composition, carries out association analysis process to described alarm metadata composition, obtains association analysis result, comprising:
Obtain predefined correlation rule, alarm metadata composition and predefined correlation rule are carried out mating and filters, obtain the Root alarm metadata composition of this alarm metadata composition and affect alarm metadata composition.
5. the alert processing method according to claim 1 or 4, is characterized in that, also comprises: show described association analysis result.
6. an alarm treatment device for electric system, is characterized in that comprising: analysis module and correlation rule module, wherein,
Correlation rule module, for preserving the Rule content and correlation rule that preset, described correlation rule represents the correlation rule of incidence relation between alarm metadata composition;
Analysis module, for resolving warning information according to the Rule content preset in described correlation rule module, refinement goes out alarm metadata and combines, and obtains alarm metadata composition; And, according to the described correlation rule be pre-configured in described correlation rule module, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, described association analysis process comprises the Root alarm metadata composition of described alarm metadata composition and/or affects alarm metadata composition.
7. alarm treatment device according to claim 6, is characterized in that,
Described correlation rule module, also generates the unique Rule content of an overall situation for corresponding to each alarm metadata; According to the determinant attribute of alarm metadata, the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding.
8. alarm treatment device according to claim 7, is characterized in that, described analysis module, for resolving warning information according to the Rule content preset in described correlation rule module, refinement goes out alarm metadata and combines, and obtains alarm metadata composition, comprising:
Access the rule database in described correlation rule module by JDBC poll, obtain the Rule content that alarm metadata is corresponding, from warning information, separate the current alarm metadata that need process by the coupling of Rule content;
Based on the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding, obtain alarm metadata composition.
9. alarm treatment device according to claim 6, is characterized in that,
Described analysis module, is pre-configured in the described correlation rule in described correlation rule module, carries out association analysis process, obtain association analysis result, comprising described alarm metadata composition for basis:
Obtain predefined correlation rule, alarm metadata composition and predefined correlation rule are carried out mating and filters, obtain the Root alarm metadata composition of this alarm metadata composition and affect alarm metadata composition.
10. the alarm treatment device according to claim 6 or 9, is characterized in that, also comprises: display module, for showing the association analysis result that described analysis module obtains.
CN201410637347.7A 2014-11-05 2014-11-05 The alert processing method and device of power system Active CN104408890B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201410637347.7A CN104408890B (en) 2014-11-05 2014-11-05 The alert processing method and device of power system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410637347.7A CN104408890B (en) 2014-11-05 2014-11-05 The alert processing method and device of power system

Publications (2)

Publication Number Publication Date
CN104408890A true CN104408890A (en) 2015-03-11
CN104408890B CN104408890B (en) 2017-10-27

Family

ID=52646516

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410637347.7A Active CN104408890B (en) 2014-11-05 2014-11-05 The alert processing method and device of power system

Country Status (1)

Country Link
CN (1) CN104408890B (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104866310A (en) * 2015-05-20 2015-08-26 百度在线网络技术(北京)有限公司 Knowledge data processing method and system
CN105095048A (en) * 2015-07-23 2015-11-25 上海新炬网络信息技术有限公司 Processing method for alarm correlation of monitoring system based on business rules
CN113448763A (en) * 2021-07-16 2021-09-28 广东电网有限责任公司 Dynamic expansion grouping alarm service method for full life cycle management

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1964392A (en) * 2006-11-08 2007-05-16 华为技术有限公司 A method and device to display warning information
CN101039209A (en) * 2006-03-13 2007-09-19 中国电信股份有限公司 Method for analyzing root warning for multi-manufacturer DWDM network management system
CN101355451A (en) * 2008-09-09 2009-01-28 中兴通讯股份有限公司 Method and system for analyzing alarm correlativity
CA2533034C (en) * 2005-02-17 2011-01-11 At&T Corp. Determining firewall rules for reverse firewalls
KR20140035678A (en) * 2012-09-14 2014-03-24 한국전자통신연구원 Learning-based dns analyzer and analysis method
CN103929326A (en) * 2014-03-18 2014-07-16 烽火通信科技股份有限公司 Communication network transmission type alarm uniform analysis device and method

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CA2533034C (en) * 2005-02-17 2011-01-11 At&T Corp. Determining firewall rules for reverse firewalls
CN101039209A (en) * 2006-03-13 2007-09-19 中国电信股份有限公司 Method for analyzing root warning for multi-manufacturer DWDM network management system
CN1964392A (en) * 2006-11-08 2007-05-16 华为技术有限公司 A method and device to display warning information
CN101355451A (en) * 2008-09-09 2009-01-28 中兴通讯股份有限公司 Method and system for analyzing alarm correlativity
KR20140035678A (en) * 2012-09-14 2014-03-24 한국전자통신연구원 Learning-based dns analyzer and analysis method
CN103929326A (en) * 2014-03-18 2014-07-16 烽火通信科技股份有限公司 Communication network transmission type alarm uniform analysis device and method

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
张现飞等: "电力通信网监控系统告警关联分析", 《电力系统通信》 *

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104866310A (en) * 2015-05-20 2015-08-26 百度在线网络技术(北京)有限公司 Knowledge data processing method and system
CN104866310B (en) * 2015-05-20 2018-07-13 百度在线网络技术(北京)有限公司 The processing method and system of knowledge data
CN105095048A (en) * 2015-07-23 2015-11-25 上海新炬网络信息技术有限公司 Processing method for alarm correlation of monitoring system based on business rules
CN105095048B (en) * 2015-07-23 2018-07-10 上海新炬网络信息技术股份有限公司 A kind of monitoring system alarm association processing method based on business rule
CN113448763A (en) * 2021-07-16 2021-09-28 广东电网有限责任公司 Dynamic expansion grouping alarm service method for full life cycle management
CN113448763B (en) * 2021-07-16 2022-07-26 广东电网有限责任公司 Dynamic expansion grouping alarm service method for full life cycle management

Also Published As

Publication number Publication date
CN104408890B (en) 2017-10-27

Similar Documents

Publication Publication Date Title
CN102611565B (en) Regular-expression-based alarm correlation analysis method for monitoring system
CN110855473B (en) Monitoring method, device, server and storage medium
CN110149327B (en) Network security threat warning method and device, computer equipment and storage medium
CN106778253A (en) Threat context aware information security Initiative Defense model based on big data
CN103716173B (en) A kind of method for storing monitoring system and monitoring alarm issue
CN106888194A (en) Intelligent grid IT assets security monitoring systems based on distributed scheduling
JP2022118108A (en) Log auditing method, device, electronic apparatus, medium and computer program
CN105556526A (en) Hierarchical threat intelligence
CN104348667A (en) Fault positioning method based on warning information
US10685043B2 (en) Event analysis in network management event streams
Bauman et al. Using social sensors for detecting emergency events: a case of power outages in the electrical utility industry
CN106301823A (en) The fault alarming method of a kind of key component, device and big data management system
CN104574557A (en) Alarm-based site polling method, alarm-based site polling manipulation device and alarm-based site polling system
CN110708316A (en) Method and system architecture for enterprise network security operation management
CN103944763A (en) Network-assistant management system and method of electrical power system
CN104408890A (en) Alarm handling method and device of electric power system
CN105553691A (en) Monitoring alarm realization method based on electric power supervision information
Itria et al. Identification of critical situations via event processing and event trust analysis
CN103854230A (en) Electric power security risk management and control system and method
CN105739408A (en) Business monitoring method used for power scheduling system and business monitoring system
JP2024514625A (en) Inference of Complex Events through Temporal Logic
CN105373888A (en) Transmission line physical information fusion multi-layer management and control method and system
CN112104507B (en) Method, system, equipment and medium for monitoring network security of power generation enterprise
CN103714433A (en) Hidden danger troubleshooting internet-of-things trusted terminal and hidden danger troubleshooting method
CN104914813B (en) The multi-platform synchronous method of prepared auto restart model in static security analysis system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant