CN104408890A - Alarm handling method and device of electric power system - Google Patents
Alarm handling method and device of electric power system Download PDFInfo
- Publication number
- CN104408890A CN104408890A CN201410637347.7A CN201410637347A CN104408890A CN 104408890 A CN104408890 A CN 104408890A CN 201410637347 A CN201410637347 A CN 201410637347A CN 104408890 A CN104408890 A CN 104408890A
- Authority
- CN
- China
- Prior art keywords
- alarm
- alarm metadata
- composition
- metadata
- rule
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 41
- 238000004458 analytical method Methods 0.000 claims abstract description 23
- 239000000203 mixture Substances 0.000 claims description 111
- 238000012098 association analyses Methods 0.000 claims description 46
- 230000008569 process Effects 0.000 claims description 28
- 238000003672 processing method Methods 0.000 claims description 11
- 230000008878 coupling Effects 0.000 claims description 7
- 238000010168 coupling process Methods 0.000 claims description 7
- 238000005859 coupling reaction Methods 0.000 claims description 7
- 230000013011 mating Effects 0.000 claims description 6
- 238000012545 processing Methods 0.000 abstract description 5
- 238000010219 correlation analysis Methods 0.000 abstract 2
- 238000007670 refining Methods 0.000 abstract 1
- 238000004364 calculation method Methods 0.000 description 5
- 238000012544 monitoring process Methods 0.000 description 5
- 238000010586 diagram Methods 0.000 description 4
- 238000012423 maintenance Methods 0.000 description 4
- 238000005516 engineering process Methods 0.000 description 2
- 230000002688 persistence Effects 0.000 description 2
- 238000009825 accumulation Methods 0.000 description 1
- 230000015556 catabolic process Effects 0.000 description 1
- 239000012141 concentrate Substances 0.000 description 1
- 238000012217 deletion Methods 0.000 description 1
- 230000037430 deletion Effects 0.000 description 1
- 238000007306 functionalization reaction Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 239000000463 material Substances 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000002203 pretreatment Methods 0.000 description 1
- 238000012216 screening Methods 0.000 description 1
- 230000001960 triggered effect Effects 0.000 description 1
- 239000002699 waste material Substances 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q10/00—Administration; Management
- G06Q10/06—Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
- G06Q10/063—Operations research, analysis or management
- G06Q10/0635—Risk analysis of enterprise or organisation activities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q50/00—Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism
- G06Q50/06—Energy or water supply
Landscapes
- Business, Economics & Management (AREA)
- Human Resources & Organizations (AREA)
- Engineering & Computer Science (AREA)
- Economics (AREA)
- Strategic Management (AREA)
- Tourism & Hospitality (AREA)
- Physics & Mathematics (AREA)
- Health & Medical Sciences (AREA)
- Theoretical Computer Science (AREA)
- Marketing (AREA)
- Entrepreneurship & Innovation (AREA)
- General Physics & Mathematics (AREA)
- General Business, Economics & Management (AREA)
- Operations Research (AREA)
- Development Economics (AREA)
- Quality & Reliability (AREA)
- Educational Administration (AREA)
- Game Theory and Decision Science (AREA)
- Public Health (AREA)
- Water Supply & Treatment (AREA)
- General Health & Medical Sciences (AREA)
- Primary Health Care (AREA)
- Remote Monitoring And Control Of Power-Distribution Networks (AREA)
- Alarm Systems (AREA)
Abstract
The invention provides an alarm handling method and a device of an electric power system. The method comprises the steps: analyzing alarm information according to the contents of the preset rules, refining alarm metadata and combining the alarm metadata to form alarm metadata combinations; performing correlation analysis processing on the alarm metadata combinations according to the preconfigured correlation rules of representing the correlation between the alarm metadata combinations, and obtaining correction analysis results, wherein the objects of correlation analysis processing comprises a root alarm metadata combination of the alarm metadata combination and/or an impact alarm metadata combination. According to the alarm handling method and the device of the electric power system, the time-consuming and inconvenience in the alarm handling of the electric power system can be solved.
Description
Technical field
The present invention relates to electric power treatment technology, in particular to a kind of alert processing method and device of electric system.
Background technology
The monitoring warning system of power information system is the important leverage of power information system high-performance, high reliability, high availability and high quality-of-service, can detect rapidly and accurately by this monitoring warning system, locate and fix a breakdown, reduce the loss because fault causes, the availability of guarantee system and reliability, and can trouble-saving generation to a certain extent.
Existing monitoring warning system mainly pays close attention to promptness and the accuracy of alarm, general employing real time propelling movement, the mode of real-time exhibition and notice allows monitor staff and the current alarm details of the real-time understanding of relevant responsible official, the promptness of alarm is ensured with this, then verified by artificial mode, get rid of the alarm of wrong report, improve the accuracy of alarm.
Along with the expansion of network size, alarm quantity also day by day huge, if still get rid of wrong report information according to the experience of oneself accumulation by operation maintenance personnel from the warning information of magnanimity, find out the root of alarm, will need to drop into more manpower and materials and time loss, and be difficult to the stable operation of auxiliary power infosystem timely.
Monitoring alarm substantial amounts for power information system in correlation technique is difficult to the problem accurately got rid of wrong report information, find out the root of alarm, not yet proposes effective solution at present.
Summary of the invention
The invention provides a kind of alert processing method and device of electric system, to waste time and energy problem with the alarming processing at least solving electric system.
According to an aspect of the present invention, provide a kind of alert processing method of electric system, comprising: resolve warning information according to the Rule content preset, refinement goes out alarm metadata and combines, and obtains alarm metadata composition; According to the correlation rule of incidence relation between pre-configured expression alarm metadata composition, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, described association analysis process comprises the Root alarm metadata composition of described alarm metadata composition and/or affects alarm metadata composition.
Alternatively, also comprise: generate the unique Rule content of an overall situation corresponding to each alarm metadata; According to the determinant attribute of alarm metadata, the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding.
Alternatively, the Rule content that described basis presets resolves warning information, refinement goes out alarm metadata and combines, obtain alarm metadata composition, comprise: by java DataBase combining JDBC poll access rule database, obtain the Rule content that alarm metadata is corresponding, from described warning information, separate the current alarm metadata that need process by the coupling of described Rule content; Based on the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding, obtain alarm metadata composition.
Alternatively, the described correlation rule according to incidence relation between pre-configured expression alarm metadata composition, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, comprise: obtain predefined correlation rule, alarm metadata composition and predefined correlation rule are carried out mating and filters, obtain the Root alarm metadata composition of this alarm metadata composition and affect alarm metadata composition.
Alternatively, also comprise: show described association analysis result.
According to another aspect of the present invention, provide a kind of alarm treatment device of electric system, comprise: analysis module and correlation rule module, wherein, correlation rule module, for preserving the Rule content and correlation rule that preset, described correlation rule represents the correlation rule of incidence relation between alarm metadata composition; Analysis module, for resolving warning information according to the Rule content preset in described correlation rule module, refinement goes out alarm metadata and combines, and obtains alarm metadata composition; And, according to the described correlation rule be pre-configured in described correlation rule module, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, described association analysis process comprises the Root alarm metadata composition of described alarm metadata composition and/or affects alarm metadata composition.
Alternatively, described correlation rule module, also generates the unique Rule content of an overall situation for corresponding to each alarm metadata; According to the determinant attribute of alarm metadata, the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding.
Alternatively, described analysis module, for resolving warning information according to the Rule content preset in described correlation rule module, refinement goes out alarm metadata and combines, obtain alarm metadata composition, comprise: access the rule database in described correlation rule module by JDBC poll, obtain the Rule content that alarm metadata is corresponding, from warning information, separate the current alarm metadata that need process by the coupling of Rule content; Based on the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding, obtain alarm metadata composition.
Alternatively, described analysis module, the described correlation rule in described correlation rule module is pre-configured in for basis, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, comprise: obtain predefined correlation rule, alarm metadata composition and predefined correlation rule are carried out mating and filters, obtain the Root alarm metadata composition of this alarm metadata composition and affect alarm metadata composition.
Alternatively, also comprise: display module, for showing the association analysis result that described analysis module obtains.
Pass through the present invention, obtain alarm metadata by refinement warning information and combine, the correlation rule preset based on monitor staff again obtains the association analysis result of alarm set of metadata, the root that alarm produces effectively can be found out from a large amount of alarms, automatically complete the association analysis of alarm, get rid of secondary related alarm, orientation problem root, the coverage of indication problem, and impact analysis can be carried out to the alarm of current generation, early warning is carried out to by issuable event, effective auxiliary operation maintenance personnel finds and deals with problems, thus can the high-performance of sound assurance electric system, high reliability, high availability and high quality-of-service.
Accompanying drawing explanation
Accompanying drawing described herein is used to provide a further understanding of the present invention, and form a application's part, schematic description and description of the present invention, for explaining the present invention, does not form inappropriate limitation of the present invention.In the accompanying drawings:
Fig. 1 is the alert processing method process flow diagram according to the embodiment of the present invention;
Fig. 2 is the alarm treatment device structural drawing according to the embodiment of the present invention;
Fig. 3 is the Rotating fields schematic diagram of the alarm treatment device according to the embodiment of the present invention.
Embodiment
It should be noted that, when not conflicting, the embodiment in the application and the feature in embodiment can combine mutually.Below with reference to the accompanying drawings and describe the present invention in detail in conjunction with the embodiments.
Embodiments provide a kind of alert processing method of power information, Fig. 1 is the method flow diagram according to the embodiment of the present invention, as shown in Figure 1, comprises following step:
Step S202: resolve warning information according to the Rule content preset, refinement goes out alarm metadata and combines, and obtains alarm metadata composition;
Step S204: according to the correlation rule of incidence relation between pre-configured expression alarm metadata composition, association analysis process is carried out to described alarm metadata composition, obtains association analysis result.
Wherein, described association analysis process comprises the Root alarm metadata composition of described alarm metadata composition and/or affects alarm metadata composition.
Concrete, before step S202, can also comprise the steps: that corresponding to each alarm metadata generates the unique Rule content of an overall situation; According to the determinant attribute of alarm metadata, the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding.This step is realized by correlation rule module, that is, by correlation rule module composition rule content, and forms association analysis rule, when resolving warning information for analysis module.
Here, Rule content corresponding to alarm metadata completes initialization and renewal by timer-triggered scheduler task poll.Concrete, combination alarm metadata forms association analysis rule; The generation of correlation rule is generated by monitor staff's manual intervention.The empirical combination metadata that monitor staff accumulates according to daily monitoring generates the correlation rule representing incidence relation between alarm metadata composition, such as, correlation rule can be { alarm metadata 1, alarm metadata 2 ... come from/affect { alarm metadata 3, alarm metadata 4 ....
Step S202 and S204 is performed by analysis module, and after analysis module obtains its warning information generated from the monitored object of power information system, resolve warning information according to the above-mentioned Rule content pre-set, refinement goes out alarm metadata.And then rule query can be carried out by the alarm metadata that fine granularity is higher and screening obtains association analysis result.Concrete, by JDBC poll access rule database, obtain the Rule content that alarm metadata is corresponding, from described warning information, separate the current alarm metadata that need process by the coupling of described Rule content; Based on the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding, obtain alarm metadata composition.
Concrete, analysis module obtains predefined correlation rule, alarm metadata composition and predefined correlation rule is carried out mating and filters, and obtains the Root alarm metadata composition of this alarm metadata composition and affects alarm metadata composition.
After step S204, can also comprise: show described association analysis result.
It should be noted that, above-mentioned alarm metadata is by monitored object model and alarm model combination producing, such as, as " ip=xx.xx.xx.xx ' switch create ' alarm type=3 ', ' alarm level=serious ", wherein, monitored object model is as main process equipment, switch, router and the unique identification to monitored object, the IP of such as switch, the host name of main process equipment, the Instance Name, place server ip etc. of database; Alarm model is as alarm level, Alarm Classification etc.; Alarm model is kept at alarm storehouse, and monitored object model is kept at resources bank.
The embodiment of the present invention additionally provides a kind of alarm treatment device, and this device may be used for realizing said method.Fig. 2 is the composition structural drawing of the alarm treatment device according to the embodiment of the present invention, as shown in Figure 2, comprising:
Correlation rule module 21, for preserving the Rule content and correlation rule that preset, described correlation rule represents the correlation rule of incidence relation between alarm metadata composition.
Analysis module 22, for resolving warning information according to the Rule content preset in described correlation rule module, refinement goes out alarm metadata and combines, and obtains alarm metadata composition; And, according to the described correlation rule be pre-configured in described correlation rule module, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, described association analysis process comprises the Root alarm metadata composition of described alarm metadata composition and/or affects alarm metadata composition.
Wherein, correlation rule module 21, also generates the unique Rule content of an overall situation for corresponding to each alarm metadata; According to the determinant attribute of alarm metadata, the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding.
Concrete, described analysis module 22, for resolving warning information according to the Rule content preset in described correlation rule module, refinement goes out alarm metadata and combines, obtain alarm metadata composition, comprise: access the rule database in described correlation rule module by JDBC poll, obtain the Rule content that alarm metadata is corresponding, from warning information, separate the current alarm metadata that need process by the coupling of Rule content; Based on the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding, obtain alarm metadata composition.
Concrete, described analysis module 22, the described correlation rule in described correlation rule module is pre-configured in for basis, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, comprise: obtain predefined correlation rule, alarm metadata composition and predefined correlation rule are carried out mating and filters, obtain the Root alarm metadata composition of this alarm metadata composition and affect alarm metadata composition.
Described alarm treatment device can also comprise: display module 23, for showing the association analysis result that described analysis module 22 obtains.
It should be noted that, the alarm treatment device described in device embodiment corresponds to above-mentioned embodiment of the method, and its concrete implementation procedure carried out detailed description in embodiment of the method, did not repeat them here.
In order to make technical scheme of the present invention and implementation method clearly, below in conjunction with preferred embodiment, its implementation procedure is described in detail.
In practical application, software layer structure as shown in Figure 3 can be adopted to realize said method of the present invention and device.Concrete, this software layer structure can comprise three layers, respectively: presentation layer, processing layer and data persistence layer.
Wherein, presentation layer has been mainly used in the part needing man-machine interaction, comprise the part of rule database maintenance and the part of association analysis result displaying, the service portion of rule database is as a part for correlation rule module, for monitor staff, the correlation rule Sum fanction content in rule database upgraded, configure and the operation such as deletion, the part that association analysis result is shown is the display module of alarm treatment device of the present invention, for the association analysis obtained result is shown to supervisory user, is convenient to supervisory user and checks.
Processing layer comprises inference engine, this inference engine is a part for analysis module, for completing the matching treatment of data, concrete, by JDBC (Java Data Base Connectivity, java DataBase combining) rule database of poll access correlation rule module, obtain the Rule content that alarm metadata is corresponding, from warning information, separate the alarm metadata when pre-treatment by the coupling of Rule content and combine; Then from the rule database of correlation rule module, obtain predefined correlation rule, alarm metadata composition is mated with predefined correlation rule and filters, obtain the Root alarm metadata composition of this alarm metadata composition and affect alarm metadata composition.
Data persistence layer is mainly used for preserving data, as another part of correlation rule module, can comprise: rule database, alarm metadatabase, resources bank and alarm storehouse, rule database preserves the Rule content and correlation rule that are configured by the rule database service portion of presentation layer for monitor staff, and preserves the association analysis result that inference engine obtains.Association analysis result in rule database is shown to user by presentation layer.Preserve the alarm metadata that inference engine obtains in alarm metadatabase, in resources bank, preserve the monitored object model of composition alarm metadata, in alarm storehouse, preserve the alarm model of composition alarm metadata.
It should be noted that, can perform in the computer system of such as one group of computer executable instructions in the step shown in the process flow diagram of accompanying drawing, and, although show logical order in flow charts, but in some cases, can be different from the step shown or described by order execution herein.
In sum, according to the abovementioned embodiments of the present invention, the present invention utilizes the basic theoretical knowledge of rule-based reasoning to achieve the alert analysis process of power information system, by the empirical system of monitor staff, functionalization, obtain alarm metadata by refinement warning information and combine, the correlation rule preset based on monitor staff again obtains the association analysis result of alarm set of metadata, the root that alarm produces effectively can be found out from a large amount of alarms, automatically complete the association analysis of alarm, get rid of secondary related alarm, orientation problem root, the coverage of indication problem, and impact analysis can be carried out to the alarm of current generation, early warning is carried out to by issuable event, effective auxiliary operation maintenance personnel finds and deals with problems, thus can the high-performance of sound assurance electric system, high reliability, high availability and high quality-of-service.
Obviously, those skilled in the art should be understood that, above-mentioned of the present invention each module or each step can realize with general calculation element, they can concentrate on single calculation element, or be distributed on network that multiple calculation element forms, alternatively, they can realize with the executable program code of calculation element, thus, they can be stored and be performed by calculation element in the storage device, or they are made into each integrated circuit modules respectively, or the multiple module in them or step are made into single integrated circuit module to realize.Like this, the present invention is not restricted to any specific hardware and software combination.
The foregoing is only the preferred embodiments of the present invention, be not limited to the present invention, for a person skilled in the art, the present invention can have various modifications and variations.Within the spirit and principles in the present invention all, any amendment done, equivalent replacement, improvement etc., all should be included within protection scope of the present invention.
Claims (10)
1. an alert processing method for electric system, is characterized in that comprising:
Resolve warning information according to the Rule content preset, refinement goes out alarm metadata and combines, and obtains alarm metadata composition;
According to the correlation rule of incidence relation between pre-configured expression alarm metadata composition, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, described association analysis process comprises the Root alarm metadata composition of described alarm metadata composition and/or affects alarm metadata composition.
2. alert processing method according to claim 1, is characterized in that, also comprises:
The unique Rule content of an overall situation is generated corresponding to each alarm metadata;
According to the determinant attribute of alarm metadata, the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding.
3. alert processing method according to claim 2, is characterized in that, the Rule content that described basis presets resolves warning information, and refinement goes out alarm metadata and combines, and obtains alarm metadata composition, comprising:
By java DataBase combining JDBC poll access rule database, obtain the Rule content that alarm metadata is corresponding, from described warning information, separate the current alarm metadata that need process by the coupling of described Rule content;
Based on the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding, obtain alarm metadata composition.
4. alert processing method according to claim 1, is characterized in that,
The described correlation rule according to incidence relation between pre-configured expression alarm metadata composition, carries out association analysis process to described alarm metadata composition, obtains association analysis result, comprising:
Obtain predefined correlation rule, alarm metadata composition and predefined correlation rule are carried out mating and filters, obtain the Root alarm metadata composition of this alarm metadata composition and affect alarm metadata composition.
5. the alert processing method according to claim 1 or 4, is characterized in that, also comprises: show described association analysis result.
6. an alarm treatment device for electric system, is characterized in that comprising: analysis module and correlation rule module, wherein,
Correlation rule module, for preserving the Rule content and correlation rule that preset, described correlation rule represents the correlation rule of incidence relation between alarm metadata composition;
Analysis module, for resolving warning information according to the Rule content preset in described correlation rule module, refinement goes out alarm metadata and combines, and obtains alarm metadata composition; And, according to the described correlation rule be pre-configured in described correlation rule module, association analysis process is carried out to described alarm metadata composition, obtain association analysis result, described association analysis process comprises the Root alarm metadata composition of described alarm metadata composition and/or affects alarm metadata composition.
7. alarm treatment device according to claim 6, is characterized in that,
Described correlation rule module, also generates the unique Rule content of an overall situation for corresponding to each alarm metadata; According to the determinant attribute of alarm metadata, the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding.
8. alarm treatment device according to claim 7, is characterized in that, described analysis module, for resolving warning information according to the Rule content preset in described correlation rule module, refinement goes out alarm metadata and combines, and obtains alarm metadata composition, comprising:
Access the rule database in described correlation rule module by JDBC poll, obtain the Rule content that alarm metadata is corresponding, from warning information, separate the current alarm metadata that need process by the coupling of Rule content;
Based on the Rule content that alarm unit item number, alarm metadata elements and the alarm metadata of predefine composition alarm metadata composition are corresponding, obtain alarm metadata composition.
9. alarm treatment device according to claim 6, is characterized in that,
Described analysis module, is pre-configured in the described correlation rule in described correlation rule module, carries out association analysis process, obtain association analysis result, comprising described alarm metadata composition for basis:
Obtain predefined correlation rule, alarm metadata composition and predefined correlation rule are carried out mating and filters, obtain the Root alarm metadata composition of this alarm metadata composition and affect alarm metadata composition.
10. the alarm treatment device according to claim 6 or 9, is characterized in that, also comprises: display module, for showing the association analysis result that described analysis module obtains.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201410637347.7A CN104408890B (en) | 2014-11-05 | 2014-11-05 | The alert processing method and device of power system |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201410637347.7A CN104408890B (en) | 2014-11-05 | 2014-11-05 | The alert processing method and device of power system |
Publications (2)
Publication Number | Publication Date |
---|---|
CN104408890A true CN104408890A (en) | 2015-03-11 |
CN104408890B CN104408890B (en) | 2017-10-27 |
Family
ID=52646516
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201410637347.7A Active CN104408890B (en) | 2014-11-05 | 2014-11-05 | The alert processing method and device of power system |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN104408890B (en) |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN104866310A (en) * | 2015-05-20 | 2015-08-26 | 百度在线网络技术(北京)有限公司 | Knowledge data processing method and system |
CN105095048A (en) * | 2015-07-23 | 2015-11-25 | 上海新炬网络信息技术有限公司 | Processing method for alarm correlation of monitoring system based on business rules |
CN113448763A (en) * | 2021-07-16 | 2021-09-28 | 广东电网有限责任公司 | Dynamic expansion grouping alarm service method for full life cycle management |
Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1964392A (en) * | 2006-11-08 | 2007-05-16 | 华为技术有限公司 | A method and device to display warning information |
CN101039209A (en) * | 2006-03-13 | 2007-09-19 | 中国电信股份有限公司 | Method for analyzing root warning for multi-manufacturer DWDM network management system |
CN101355451A (en) * | 2008-09-09 | 2009-01-28 | 中兴通讯股份有限公司 | Method and system for analyzing alarm correlativity |
CA2533034C (en) * | 2005-02-17 | 2011-01-11 | At&T Corp. | Determining firewall rules for reverse firewalls |
KR20140035678A (en) * | 2012-09-14 | 2014-03-24 | 한국전자통신연구원 | Learning-based dns analyzer and analysis method |
CN103929326A (en) * | 2014-03-18 | 2014-07-16 | 烽火通信科技股份有限公司 | Communication network transmission type alarm uniform analysis device and method |
-
2014
- 2014-11-05 CN CN201410637347.7A patent/CN104408890B/en active Active
Patent Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CA2533034C (en) * | 2005-02-17 | 2011-01-11 | At&T Corp. | Determining firewall rules for reverse firewalls |
CN101039209A (en) * | 2006-03-13 | 2007-09-19 | 中国电信股份有限公司 | Method for analyzing root warning for multi-manufacturer DWDM network management system |
CN1964392A (en) * | 2006-11-08 | 2007-05-16 | 华为技术有限公司 | A method and device to display warning information |
CN101355451A (en) * | 2008-09-09 | 2009-01-28 | 中兴通讯股份有限公司 | Method and system for analyzing alarm correlativity |
KR20140035678A (en) * | 2012-09-14 | 2014-03-24 | 한국전자통신연구원 | Learning-based dns analyzer and analysis method |
CN103929326A (en) * | 2014-03-18 | 2014-07-16 | 烽火通信科技股份有限公司 | Communication network transmission type alarm uniform analysis device and method |
Non-Patent Citations (1)
Title |
---|
张现飞等: "电力通信网监控系统告警关联分析", 《电力系统通信》 * |
Cited By (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN104866310A (en) * | 2015-05-20 | 2015-08-26 | 百度在线网络技术(北京)有限公司 | Knowledge data processing method and system |
CN104866310B (en) * | 2015-05-20 | 2018-07-13 | 百度在线网络技术(北京)有限公司 | The processing method and system of knowledge data |
CN105095048A (en) * | 2015-07-23 | 2015-11-25 | 上海新炬网络信息技术有限公司 | Processing method for alarm correlation of monitoring system based on business rules |
CN105095048B (en) * | 2015-07-23 | 2018-07-10 | 上海新炬网络信息技术股份有限公司 | A kind of monitoring system alarm association processing method based on business rule |
CN113448763A (en) * | 2021-07-16 | 2021-09-28 | 广东电网有限责任公司 | Dynamic expansion grouping alarm service method for full life cycle management |
CN113448763B (en) * | 2021-07-16 | 2022-07-26 | 广东电网有限责任公司 | Dynamic expansion grouping alarm service method for full life cycle management |
Also Published As
Publication number | Publication date |
---|---|
CN104408890B (en) | 2017-10-27 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN102611565B (en) | Regular-expression-based alarm correlation analysis method for monitoring system | |
CN110855473B (en) | Monitoring method, device, server and storage medium | |
CN110149327B (en) | Network security threat warning method and device, computer equipment and storage medium | |
CN106778253A (en) | Threat context aware information security Initiative Defense model based on big data | |
CN103716173B (en) | A kind of method for storing monitoring system and monitoring alarm issue | |
CN106888194A (en) | Intelligent grid IT assets security monitoring systems based on distributed scheduling | |
JP2022118108A (en) | Log auditing method, device, electronic apparatus, medium and computer program | |
CN105556526A (en) | Hierarchical threat intelligence | |
CN104348667A (en) | Fault positioning method based on warning information | |
US10685043B2 (en) | Event analysis in network management event streams | |
Bauman et al. | Using social sensors for detecting emergency events: a case of power outages in the electrical utility industry | |
CN106301823A (en) | The fault alarming method of a kind of key component, device and big data management system | |
CN104574557A (en) | Alarm-based site polling method, alarm-based site polling manipulation device and alarm-based site polling system | |
CN110708316A (en) | Method and system architecture for enterprise network security operation management | |
CN103944763A (en) | Network-assistant management system and method of electrical power system | |
CN104408890A (en) | Alarm handling method and device of electric power system | |
CN105553691A (en) | Monitoring alarm realization method based on electric power supervision information | |
Itria et al. | Identification of critical situations via event processing and event trust analysis | |
CN103854230A (en) | Electric power security risk management and control system and method | |
CN105739408A (en) | Business monitoring method used for power scheduling system and business monitoring system | |
JP2024514625A (en) | Inference of Complex Events through Temporal Logic | |
CN105373888A (en) | Transmission line physical information fusion multi-layer management and control method and system | |
CN112104507B (en) | Method, system, equipment and medium for monitoring network security of power generation enterprise | |
CN103714433A (en) | Hidden danger troubleshooting internet-of-things trusted terminal and hidden danger troubleshooting method | |
CN104914813B (en) | The multi-platform synchronous method of prepared auto restart model in static security analysis system |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |