CN105207822A - Electric power communication equipment alarm information processing method and device - Google Patents
Electric power communication equipment alarm information processing method and device Download PDFInfo
- Publication number
- CN105207822A CN105207822A CN201510661190.6A CN201510661190A CN105207822A CN 105207822 A CN105207822 A CN 105207822A CN 201510661190 A CN201510661190 A CN 201510661190A CN 105207822 A CN105207822 A CN 105207822A
- Authority
- CN
- China
- Prior art keywords
- warning information
- alarm information
- configuration data
- information
- accident analysis
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0604—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
Abstract
The invention provides an electric power communication equipment alarm information processing method and device. The method includes the steps that original alarm information is acquired from a communication network, and network configuration data corresponding to the original alarm information are determined; format unification is conducted on the original alarm information for forming the original alarm information of the unified format; repeated alarm information and stroboscopic alarm information in the original alarm information of the unified format are filtered; the filtered alarm information and network configuration data are imported into a fault analysis engine; the fault analysis engine calls a predetermined fault analysis rule base, root alarm information corresponding to the designated fault type is analyzed out from the filtered alarm information through the fault analysis rule base and the network configuration data; the root alarm information and the designated fault type are displayed. By means of the electric power communication equipment alarm information processing method and device, the root alarm information corresponding to the designated fault type can be analyzed out from a great number of alarms, so that maintenance personnel can be liberated from the great amount of alarm information.
Description
Technical field
The present invention relates to technical field of data processing, be specifically related to a kind of alarm information processing method and device of electric power communication device.
Background technology
When the communication network of electric power communication device breaks down (such as cable breakout etc.), numerous warning information will be produced in communication network, for safeguarding the communication network broken down, therefore numerous warning information is processed, thus out of order type is located from numerous warning information, seem particularly necessary.
The processing mode of current warning information is mainly: by network interface techniques (as SNMP, SOCKET, CORBA etc.), the warning information produced in communication network is collected concentrated in supervisory control system presenting, then concentrate the warning information presented to analyze by attendant to supervisory control system, thus navigate to the type of fault; In the processing mode of existing warning information, supervisory control system is just concentrated and is presented gathered warning information, lack depth analysis process to warning information, the delayed quick position response time of attendant to fault, the long-term stability for communication network is run and is brought certain potential safety hazard.
Summary of the invention
In view of this, the embodiment of the present invention provides a kind of alarm information processing method and device of electric power communication device, to carry out depth analysis process to warning information, the root warning information corresponding to the fault type of specifying is analyzed from mass alarm, navigate to the basic place of fault, attendant is freed from numerous warning information, shortens the time that fault occurs to fault discovery, for timely handling failure, reduction fault effects provide possibility.
For achieving the above object, the embodiment of the present invention provides following technical scheme:
An alarm information processing method for electric power communication device, comprising:
From communication network, gather original alarm information, and determine the network configuration data corresponding to described original alarm information;
Described original alarm information is carried out uniform format, generates the original alarm information of consolidation form;
To repeating warning information in the original alarm information of described consolidation form and stroboscopic warning information filters, obtain the warning information after filtering;
Warning information after described filtration and described network configuration data are imported accident analysis engine;
Transfer preset accident analysis rule base by described accident analysis engine, by described accident analysis rule base and described network configuration data, from the warning information after described filtration, analyze the root warning information corresponding to specified fault type;
Represent described warning information and described specified fault type.
Wherein, described to repeating warning information in the original alarm information of described consolidation form and stroboscopic warning information filters, obtain the warning information after filtering and comprise:
In the original alarm information of the consolidation form at the appointed time collected, the repetition warning information periodically sent is carried out duplicate removal, a warning information in the repetition warning information that retention periods sends, and indicate the warning information of alarm and cleared alarm to carry out duplicate removal by repeating in the original alarm information of consolidation form, retain a warning information repeating to indicate in the warning information of alarm and cleared alarm.
Wherein, described accident analysis rule base records the alarm feature content of each fault type corresponding to all types of network configuration data; Described by described accident analysis rule base and described network configuration data, from the warning information after described filtration, analyze the root warning information corresponding to specified fault type comprise:
The alarm feature content of each fault type corresponding to described network configuration data is determined from described accident analysis rule base;
From the alarm feature content of the corresponding each fault type of described network configuration data, determine the target alarms feature corresponding to described specified fault type;
Analyze in the warning information after described filtration and whether there is the content corresponding to described target alarms feature;
If so, from the warning information after described filtration, then extract the content warning information corresponding to described target alarms feature, obtain the root warning information corresponding to described specified fault type.
Wherein, described specified fault type comprises: network element failure, or line fault, or based on the traffic failure of circuit, or client's dependent failure.
Wherein, describedly described original alarm information carried out uniform format comprise:
Determine the unique encodings in described original alarm information, the warning content type definition form corresponding according to prerecorded unique encodings, extracts the content-data of the corresponding each warning content type of the warning content type definition form corresponding to described unique encodings from described original alarm information;
According to preset consolidation form, described content-data is generated the warning information corresponding to described consolidation form, obtains the original alarm information of consolidation form.
Wherein, described method also comprises:
Index operational factor in collection communication network;
Judge whether described index operational factor exceedes preset thresholding;
If so, described index operational factor and corresponding network configuration data are imported accident analysis engine;
Transfer preset accident analysis rule base by described accident analysis engine, by described accident analysis rule base and described network configuration data, analyze the fault type that described index operational factor is corresponding.
Wherein, described accident analysis rule base records the index operational factor content of each fault type corresponding to all types of network configuration data; Described by described accident analysis rule base and described network configuration data, the fault type analyzing described index operational factor corresponding comprises:
The index operational factor content of each fault type corresponding to described network configuration data is determined from described accident analysis rule base;
From the index operational factor content of the corresponding each fault type of described network configuration data, determine and the fault type that described index operational factor is mated, obtain the fault type that described index operational factor is corresponding.
Wherein, described method also comprises:
In preset network topology structure figure, determine the fault point that described warning information is corresponding;
Fault is there is with fault point described in specific alerting pattern prompting user in described network topology structure figure.
Wherein, the described original alarm information that gathers from communication network comprises:
Judge whether the content of the warning information gathered conforms to the content in fault signature warning information storehouse;
If so, at the appointed time from communication network, original alarm information is gathered.
The embodiment of the present invention also provides a kind of warning information processing unit of electric power communication device, comprising:
Original alarm information acquisition module, for gathering original alarm information from communication network;
Network configuration data determination module, for determining the network configuration data corresponding to described original alarm information;
Uniform format module, for described original alarm information is carried out uniform format, generates the original alarm information of consolidation form;
Filtering module, for repeating warning information in the original alarm information of described consolidation form and stroboscopic warning information filters, obtains the warning information after filtering;
First imports module, for the warning information after described filtration and described network configuration data are imported accident analysis engine;
Accident analysis engine modules, for transferring preset accident analysis rule base by described accident analysis engine, by described accident analysis rule base and described network configuration data, from the warning information after described filtration, analyze the root warning information corresponding to specified fault type;
Represent module, for representing described warning information and described specified fault type.
Based on technique scheme, the embodiment of the present invention is when gathering original alarm information, also together acquire corresponding network configuration data, uniform format is carried out to original alarm information, after filtration, the embodiment of the present invention is by accident analysis engine, based on accident analysis rule base and described network configuration data, the root warning information corresponding to specified fault type is analyzed from the warning information after filtration, thus from mass alarm, analyze the root warning information corresponding to the fault type of specifying, navigate to the basic place of fault, attendant is freed from numerous warning information, shorten the time that fault occurs to fault discovery, for timely handling failure, reduce fault effects and provide possibility.
Accompanying drawing explanation
In order to be illustrated more clearly in the embodiment of the present invention or technical scheme of the prior art, be briefly described to the accompanying drawing used required in embodiment or description of the prior art below, apparently, accompanying drawing in the following describes is only embodiments of the invention, for those of ordinary skill in the art, under the prerequisite not paying creative work, other accompanying drawing can also be obtained according to the accompanying drawing provided.
The flow chart of the alarm information processing method of the electric power communication device that Fig. 1 provides for the embodiment of the present invention;
Method flow diagram original alarm information being carried out uniform format that Fig. 2 provides for the embodiment of the present invention;
Fig. 3 is the maintenance schematic diagram of accident analysis rule base;
The method flow diagram analyzing root warning information from the warning information after filtration that Fig. 4 provides for the embodiment of the present invention;
Another flow chart of the alarm information processing method of the electric power communication device that Fig. 5 provides for the embodiment of the present invention;
The schematic diagram of the warning information processing procedure that Fig. 6 provides for the embodiment of the present invention;
Fig. 7 is the schematic diagram that fault point is reminded;
The structured flowchart of the warning information processing unit of the electric power communication device that Fig. 8 provides for the embodiment of the present invention;
The structured flowchart of the filtering module that Fig. 9 provides for the embodiment of the present invention;
The structured flowchart of the accident analysis engine modules that Figure 10 provides for the embodiment of the present invention;
Another structured flowchart of the warning information processing unit of the electric power communication device that Figure 11 provides for the embodiment of the present invention;
A structured flowchart again of the warning information processing unit of the electric power communication device that Figure 12 provides for the embodiment of the present invention.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the present invention, be clearly and completely described the technical scheme in the embodiment of the present invention, obviously, described embodiment is only the present invention's part embodiment, instead of whole embodiments.Based on the embodiment in the present invention, those of ordinary skill in the art, not making the every other embodiment obtained under creative work prerequisite, belong to the scope of protection of the invention.
The flow chart of the alarm information processing method of the electric power communication device that Fig. 1 provides for the embodiment of the present invention, the method can be applicable to monitoring alarm information and represents in the supervisory control system of warning information, and with reference to Fig. 1, the method can comprise:
Step S100, from communication network, gather original alarm information, and determine the network configuration data corresponding to described original alarm information;
Optionally, the embodiment of the present invention can at the appointed time in (as one day etc.) from communication network, gather original alarm information;
Preferably, for make gathered original alarm information be supervisory control system the warning information of energy analyzing and processing, whether warning information is there is in embodiment of the present invention Sampling network capable of circulation, and when there is warning information, carry out the collection of warning information, if the content of warning information gathered conforms to the content in fault signature warning information storehouse, then illustrate that warning information is supervisory control system the warning information of energy analyzing and processing, thus at the appointed time interiorly from communication network, gather original alarm information; Fault signature warning information storehouse records the feature of the warning information of system energy analyzing and processing;
Warning information is generally sent (object is as equipment, network element, port etc.) by the object in network, in power communication system, object in network may derive from different producers, producer belonging to the original alarm information that instruction gathers, the embodiment of the present invention can when gathering original alarm information, together gather the network configuration data corresponding to described original alarm information, network configuration data has the content of producer belonging to the object that indicates and send alarm.
Step S110, described original alarm information is carried out uniform format, generate the original alarm information of consolidation form;
Because the object sending warning information may derive from different producers, therefore the form of multiple original alarm information may not be identical, the consolidation form of embodiment of the present invention install beforehand warning information, carries out uniform format to the original alarm information gathered.
Step S120, to repeating warning information in the original alarm information of described consolidation form and stroboscopic warning information filters, obtain the warning information after filtering;
Object in network may just periodically send with a warning information, as 3 minutes once send with a warning information, the repetition warning information periodically sent will be there is in the original alarm information of therefore at the appointed time collecting, after carrying out uniform format to original alarm information, the embodiment of the present invention can carry out duplicate removal to the repetition warning information periodically sent;
Stroboscopic warning information ceaselessly sends alarm but the information of cleared alarm, and after carrying out uniform format to original alarm information, the embodiment of the present invention also needs to carry out duplicate removal to stroboscopic warning information.
Step S130, the warning information after described filtration and described network configuration data are imported accident analysis engine;
Accident analysis engine be the embodiment of the present invention arrange for carrying out accident analysis to warning information, orient the processing engine of root warning information.
Step S140, transfer preset accident analysis rule base by described accident analysis engine, by described accident analysis rule base and described network configuration data, from the warning information after described filtration, analyze the root warning information corresponding to specified fault type;
Accident analysis rule base is the network maintenance experience that user sums up in daily network operation process, and generally these experiences are just kept in the brains of attendant or in maintain documents, is a kind of abstract experience, lacks continuity and management; And the embodiment of the present invention carries out structuring by the mode of software modeling to these abstract maintenance experiences, define a nested structure and complete, abundant information, the accident analysis rule base that ALARA Principle is safeguarded;
Concrete, the feature of the warning information that each object that accident analysis rule base can record each producer sends under a certain fault type, as the object of producer A under network element failure the feature of warning information that sends, the feature of the warning information that the object of producer B sends under network element failure, the feature etc. of the warning information that the object of producer A sends under line fault;
By the network configuration data of original alarm information, the embodiment of the present invention can navigate to the feature of the warning information that producer sends under each fault type belonging to original alarm information in accident analysis rule base; User can specify the fault type (i.e. specified fault type) of current Water demand, the warning information of this specified fault type is root warning information, other warning information are then accompanying alarm information, and then can by the warning information after filtration, mate with the feature of the warning information sent under specified fault type, determine root warning information corresponding to specified fault type in the warning information after filtration, thus navigate to the basic guilty culprit of specified fault type.
Step S150, represent described warning information and described specified fault type.
The alarm information processing method of the electric power communication device that the embodiment of the present invention provides, comprising: from communication network, gather original alarm information, and determines the network configuration data corresponding to described original alarm information; Described original alarm information is carried out uniform format, generates the original alarm information of consolidation form; To repeating warning information in the original alarm information of described consolidation form and stroboscopic warning information filters, obtain the warning information after filtering; Warning information after described filtration and described network configuration data are imported accident analysis engine; Transfer preset accident analysis rule base by described accident analysis engine, by described accident analysis rule base and described network configuration data, from the warning information after described filtration, analyze the root warning information corresponding to specified fault type; Represent described warning information and described specified fault type.
Can find out, the embodiment of the present invention is when gathering original alarm information, also together acquire corresponding network configuration data, uniform format is carried out to original alarm information, after filtration, the embodiment of the present invention is by accident analysis engine, based on accident analysis rule base and described network configuration data, the root warning information corresponding to specified fault type is analyzed from the warning information after filtration, thus from mass alarm, analyze the root warning information corresponding to the fault type of specifying, navigate to the basic place of fault, attendant is freed from numerous warning information, shorten the time that fault occurs to fault discovery, for timely handling failure, reduce fault effects and provide possibility.
Optionally, Fig. 2 shows method flow diagram original alarm information being carried out uniform format that the embodiment of the present invention provides, and with reference to Fig. 2, the method can comprise:
Step S200, the unique encodings determined in described original alarm information, the warning content type definition form corresponding according to prerecorded unique encodings, extracts the content-data of the corresponding each warning content type of the warning content type definition form corresponding to described unique encodings from described original alarm information;
The information of producer belonging to the object that unique encodings sends alarm for instruction, pass through unique encodings, the embodiment of the present invention can determine which producer is original alarm information belong to, what kind of the content-defined form of this producer to warning information be, thus from original alarm information, extract the corresponding content of each warning content type definition form;
When specific implementation, the warning content type definition form that each unique encodings of embodiment of the present invention install beforehand is corresponding, Ji Ge producer defines the content format of warning information, thus after extracting the unique encodings carried in original alarm information, warning content type definition form that can be corresponding according to prerecorded unique encodings, determine the warning content type definition form that described unique encodings is corresponding, and then according to this warning content type definition form, from original alarm information, extract the content-data of each warning content type.
Step S210, according to preset consolidation form, described content-data is generated the warning information corresponding to described consolidation form, obtains the original alarm information of consolidation form.
After the content-data extracting each warning content type in original alarm information, the embodiment of the present invention by the content-data of each warning content type, can be carried out information establishment according to consolidation form, obtains the original alarm information of consolidation form.
Uniform format is carried out in the original alarm information of being collected the fixed time, after obtaining the original alarm information of the consolidation form that the fixed time collects, in the original alarm information of the consolidation form that the embodiment of the present invention can at the appointed time be collected, the repetition warning information periodically sent is carried out duplicate removal, a warning information in the repetition warning information that retention periods sends, and indicate the warning information of alarm and cleared alarm to carry out duplicate removal by repeating in the original alarm information of consolidation form, retain a warning information repeating to indicate in the warning information of alarm and cleared alarm, realize the filtration to the original alarm information of consolidation form.
Optionally, accident analysis rule base records the alarm feature content of each fault type corresponding to all types of network configuration data, what all types of network configuration data represented is all types of objects belonging to producer, table 1 illustrates the optional signal of the record content of accident analysis rule base, Fig. 3 shows the maintenance schematic diagram of accident analysis rule base, can together reference;
Table 1
Can find out, the embodiment of the present invention, when judging line fault, considers alarm signal flow relation, improves the accuracy of failure diagnosis; Such as, when the two fine fault of Huawei's equipment occurs, the upstream and downstream equipment of this circuit is owing to can not receive light signal, and terminal device may produce R_LOS alarm, pretection switch occurs simultaneously.
Optionally, Fig. 4 shows the method flow diagram analyzing root warning information from the warning information after filtration that the embodiment of the present invention provides, and with reference to Fig. 4, the method can comprise:
Step S300, from described accident analysis rule base, determine the alarm feature content of each fault type corresponding to described network configuration data;
Because accident analysis rule base records the alarm feature content of each fault type corresponding to all types of network configuration data, according to the corresponding network configuration data of original alarm information, the alarm feature content of each fault type that producer is corresponding belonging to the object can determining to send warning information.
Step S310, from the alarm feature content of the corresponding each fault type of described network configuration data, determine the target alarms feature corresponding to described specified fault type;
Specified fault type is specified by user, and be the fault type of the current Water demand of system, namely information corresponding to specified fault type in warning information be root warning information, and other warning information dug up the roots in warning information outside warning information are then accompanying alarm information;
Specified fault type comprises: network element failure, or line fault, or based on the traffic failure of circuit, or client's dependent failure; Concrete, if choosing network element failure is specified fault type, then in warning information, namely the corresponding information of network element failure be root warning information, other line fault, is namely accompanying alarm information based on the traffic failure of circuit, the corresponding warning information of client's dependent failure.
Step S320, analyze described filtration after warning information in whether there is the content corresponding to described target alarms feature;
Step S330, if so, from the warning information after described filtration, then extract the content warning information corresponding to described target alarms feature, obtain the root warning information corresponding to described specified fault type.
Optionally, if when the index operational factor in communication network is abnormal, the embodiment of the present invention also can adopt accident analysis engine to determine to cause the fault type of index operational factor exception;
Accordingly, on the basis of method shown in Fig. 1, Fig. 5 shows another flow chart of the alarm information processing method of the electric power communication device that the embodiment of the present invention provides, and with reference to Fig. 5, the method can comprise:
Index operational factor in step S400, collection communication network;
Index operational factor is the performance data of the network management system of producer's object composition in communication network, as power index etc.
Step S410, judge whether described index operational factor exceedes preset thresholding;
Step S420, if so, described index operational factor and corresponding network configuration data are imported accident analysis engine;
Step S430, transfer preset accident analysis rule base by described accident analysis engine, by described accident analysis rule base and described network configuration data, analyze the fault type that described index operational factor is corresponding.
Concrete, accident analysis rule base can record the index operational factor content of each fault type corresponding to all types of network configuration data; The embodiment of the present invention can determine the index operational factor content of each fault type corresponding to described network configuration data from accident analysis rule base, from the index operational factor content of the corresponding each fault type of described network configuration data, determine and the fault type that described index operational factor is mated, obtain the fault type that described index operational factor is corresponding.
Fig. 6 shows the schematic diagram of the warning information processing procedure that the embodiment of the present invention provides, and can refer to; As shown in Figure 6, the original alarm information collected from producer's webmaster of the communication network of electric power communication device is 100%; After original alarm information gathering, after filtering repetition and stroboscopic warning information, compress, the quantity of warning information is about 40% of original alarm information; Afterwards by after the process of accident analysis engine, the root alarm quantity obtained is 0.3% of original alarm quantity, and this greatly reduces the quantity of the warning information of presenting to user, and user can be freed from mass alarm;
On the other hand, from the index operational factor that producer's webmaster is collected, the judgement of threshold value need be carried out, if exceed, then be considered as index operational factor abnormal, need alarm, caused the fault type of index operational factor exception simultaneously by accident analysis engine analysis;
Also need to provide this accident analysis engine from the network configuration data of network collection, so that accident analysis engine carries out analyzing and processing.
Optionally, after root warning information is analyzed out, the topology informations such as the interval that fault occurs can be determined, therefore the embodiment of the present invention can collect the circuit of various network system, equipment and the logical relation data between circuit and equipment, thus generating network topology diagram, so that in network topology structure figure, navigate to the fault point of root warning information;
Concrete, after obtaining root warning information, the embodiment of the present invention in preset network topology structure figure, can determine the fault point that described warning information is corresponding, thus there is fault with fault point described in specific alerting pattern prompting user in described network topology structure figure;
Can carry the data that instruction sends the object of warning information in root warning information, by these data, the embodiment of the present invention can navigate to fault point corresponding to root warning information in network topology structure figure; Optionally, alerting pattern can be highlighted, acousto-optic-electric prompting etc.; Fig. 7 shows the alternate view that fault point is reminded, and can refer to.
The embodiment of the present invention is failed to diagnose out of order warning information, the embodiment of the present invention carries out the artificial analysis of warning information by the assist trouble diagnostic function that system provides, thus must be out of order and the new regulation of failure diagnosis, and be recorded in accident analysis rule base.
The alarm information processing method that the embodiment of the present invention provides, by the technology by warning information and business information binding analysis, follow the trail of the Root alarm causing large area alarm, thus reach high original alarm compression ratio (<1%), network original alarm is effectively separated with network failure, attendant is freed from numerous warning information, the basic guilty culprit in network can be directly acquainted with by network analysis, shorten the time that fault occurs to fault discovery, for timely handling failure, reduce fault effects and provide possibility, meanwhile, adopt the analytical method based on accident analysis rule base, analysis is carried out to network failure alarm and judges, can support to navigate to network failure fast, accurately, accident analysis rule base supports the continuous accumulation to network operation maintenance knowledge, experience, and its specification is turned to the decision rule in accident analysis experience storehouse, enhances the unceasing study ability of system.
Be introduced the warning information processing unit of the electric power communication device that the embodiment of the present invention provides below, the warning information processing unit of electric power communication device described below can corresponding reference mutual to the alarm information processing method of above-described electric power communication device.
The structured flowchart of the warning information processing unit of the electric power communication device that Fig. 8 provides for the embodiment of the present invention, this device can be applicable in supervisory control system, and with reference to Fig. 8, this device can comprise:
Original alarm information acquisition module 100, for gathering original alarm information from communication network;
Network configuration data determination module 200, for determining the network configuration data corresponding to described original alarm information;
Uniform format module 300, for described original alarm information is carried out uniform format, generates the original alarm information of consolidation form;
Filtering module 400, for repeating warning information in the original alarm information of described consolidation form and stroboscopic warning information filters, obtains the warning information after filtering;
First imports module 500, for the warning information after described filtration and described network configuration data are imported accident analysis engine;
Accident analysis engine modules 600, for transferring preset accident analysis rule base by described accident analysis engine, by described accident analysis rule base and described network configuration data, from the warning information after described filtration, analyze the root warning information corresponding to specified fault type;
Represent module 700, for representing described warning information and described specified fault type.
Optionally, Fig. 9 shows a kind of alternate configurations of the filtering module 400 that the embodiment of the present invention provides, and with reference to Fig. 9, filtering module 400 can comprise:
First duplicate removal unit 410, in the original alarm information of consolidation form of at the appointed time collecting, carries out duplicate removal by the repetition warning information periodically sent, a warning information in the repetition warning information that retention periods sends;
Second duplicate removal unit 420, for indicating the warning information of alarm and cleared alarm to carry out duplicate removal by repeating in the original alarm information of consolidation form, retains a warning information repeating to indicate in the warning information of alarm and cleared alarm.
Optionally, described accident analysis rule base records the alarm feature content of each fault type corresponding to all types of network configuration data; Corresponding, Figure 10 shows a kind of alternate configurations of the accident analysis engine modules 600 that the embodiment of the present invention provides, and with reference to Figure 10, accident analysis engine modules 600 can comprise:
First determining unit 610, for determining the alarm feature content of each fault type corresponding to described network configuration data from described accident analysis rule base;
Second determining unit 620, in the alarm feature content from the corresponding each fault type of described network configuration data, determines the target alarms feature corresponding to described specified fault type;
Analyze judging unit 630, for whether there is the content corresponding to described target alarms feature in the warning information after analyzing described filtration;
Extraction unit 640, for if so, then extracting the content warning information corresponding to described target alarms feature from the warning information after described filtration, obtains the root warning information corresponding to described specified fault type.
Optionally, specified fault type can comprise: network element failure, or line fault, or based on the traffic failure of circuit, or client's dependent failure.
Optionally, uniform format module 300 specifically can be used for, determine the unique encodings in described original alarm information, the warning content type definition form corresponding according to prerecorded unique encodings, extracts the content-data of the corresponding each warning content type of the warning content type definition form corresponding to described unique encodings from described original alarm information; According to preset consolidation form, described content-data is generated the warning information corresponding to described consolidation form, obtains the original alarm information of consolidation form.
Optionally, Figure 11 shows another structured flowchart of the warning information processing unit of the electric power communication device that the embodiment of the present invention provides, and shown in composition graphs 8 and Figure 11, this device can also comprise:
Parameter acquisition module 800, for the index operational factor in collection communication network;
Threshold decision block 900, for judging whether described index operational factor exceedes preset thresholding;
Second imports module 1000, for if so, described index operational factor and corresponding network configuration data being imported accident analysis engine;
Corresponding, accident analysis engine modules 600 also can be used for, and transfers preset accident analysis rule base by described accident analysis engine, by described accident analysis rule base and described network configuration data, analyzes the fault type that described index operational factor is corresponding;
Concrete, described accident analysis rule base also can record the index operational factor content of each fault type corresponding to all types of network configuration data; Accident analysis engine modules 600 specifically can be used for, and determines the index operational factor content of each fault type corresponding to described network configuration data from described accident analysis rule base;
From the index operational factor content of the corresponding each fault type of described network configuration data, determine and the fault type that described index operational factor is mated, obtain the fault type that described index operational factor is corresponding.
Optionally, Figure 12 shows a structured flowchart again of the warning information processing unit of the electric power communication device that the embodiment of the present invention provides, and shown in composition graphs 8 and Figure 12, this device can also comprise:
Fault point determination module 1100, in preset network topology structure figure, determines the fault point that described warning information is corresponding;
, for there is fault with fault point described in specific alerting pattern prompting user in described network topology structure figure in prompting module 1200.
Optionally, original alarm information acquisition module 100 can be specifically for, judges whether the content of the warning information gathered conforms to the content in fault signature warning information storehouse; If so, just at the appointed time from communication network, original alarm information is gathered.
The warning information processing unit that the embodiment of the present invention provides, attendant can be made to free from numerous warning information, the basic guilty culprit in network can be directly acquainted with by network analysis, shorten the time that fault occurs to fault discovery, for timely handling failure, reduction fault effects provide possibility.
In this specification, each embodiment adopts the mode of going forward one by one to describe, and what each embodiment stressed is the difference with other embodiments, between each embodiment identical similar portion mutually see.For device disclosed in embodiment, because it corresponds to the method disclosed in Example, so description is fairly simple, relevant part illustrates see method part.
Professional can also recognize further, in conjunction with unit and the algorithm steps of each example of embodiment disclosed herein description, can realize with electronic hardware, computer software or the combination of the two, in order to the interchangeability of hardware and software is clearly described, generally describe composition and the step of each example in the above description according to function.These functions perform with hardware or software mode actually, depend on application-specific and the design constraint of technical scheme.Professional and technical personnel can use distinct methods to realize described function to each specifically should being used for, but this realization should not thought and exceeds scope of the present invention.
The software module that the method described in conjunction with embodiment disclosed herein or the step of algorithm can directly use hardware, processor to perform, or the combination of the two is implemented.Software module can be placed in the storage medium of other form any known in random asccess memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable ROM, register, hard disk, moveable magnetic disc, CD-ROM or technical field.
To the above-mentioned explanation of the disclosed embodiments, professional and technical personnel in the field are realized or uses the present invention.To be apparent for those skilled in the art to the multiple amendment of these embodiments, General Principle as defined herein can without departing from the spirit or scope of the present invention, realize in other embodiments.Therefore, the present invention can not be restricted to these embodiments shown in this article, but will meet the widest scope consistent with principle disclosed herein and features of novelty.
Claims (10)
1. an alarm information processing method for electric power communication device, is characterized in that, comprising:
From communication network, gather original alarm information, and determine the network configuration data corresponding to described original alarm information;
Described original alarm information is carried out uniform format, generates the original alarm information of consolidation form;
To repeating warning information in the original alarm information of described consolidation form and stroboscopic warning information filters, obtain the warning information after filtering;
Warning information after described filtration and described network configuration data are imported accident analysis engine;
Transfer preset accident analysis rule base by described accident analysis engine, by described accident analysis rule base and described network configuration data, from the warning information after described filtration, analyze the root warning information corresponding to specified fault type;
Represent described warning information and described specified fault type.
2. the alarm information processing method of electric power communication device according to claim 1, is characterized in that, described to repeating warning information in the original alarm information of described consolidation form and stroboscopic warning information filters, and obtains the warning information after filtering and comprises:
In the original alarm information of the consolidation form at the appointed time collected, the repetition warning information periodically sent is carried out duplicate removal, a warning information in the repetition warning information that retention periods sends, and indicate the warning information of alarm and cleared alarm to carry out duplicate removal by repeating in the original alarm information of consolidation form, retain a warning information repeating to indicate in the warning information of alarm and cleared alarm.
3. the alarm information processing method of electric power communication device according to claim 1 and 2, is characterized in that, described accident analysis rule base records the alarm feature content of each fault type corresponding to all types of network configuration data; Described by described accident analysis rule base and described network configuration data, from the warning information after described filtration, analyze the root warning information corresponding to specified fault type comprise:
The alarm feature content of each fault type corresponding to described network configuration data is determined from described accident analysis rule base;
From the alarm feature content of the corresponding each fault type of described network configuration data, determine the target alarms feature corresponding to described specified fault type;
Analyze in the warning information after described filtration and whether there is the content corresponding to described target alarms feature;
If so, from the warning information after described filtration, then extract the content warning information corresponding to described target alarms feature, obtain the root warning information corresponding to described specified fault type.
4. the alarm information processing method of electric power communication device according to claim 1, is characterized in that, described specified fault type comprises: network element failure, or line fault, or based on the traffic failure of circuit, or client's dependent failure.
5. the alarm information processing method of electric power communication device according to claim 1, is characterized in that, describedly described original alarm information is carried out uniform format comprises:
Determine the unique encodings in described original alarm information, the warning content type definition form corresponding according to prerecorded unique encodings, extracts the content-data of the corresponding each warning content type of the warning content type definition form corresponding to described unique encodings from described original alarm information;
According to preset consolidation form, described content-data is generated the warning information corresponding to described consolidation form, obtains the original alarm information of consolidation form.
6. the alarm information processing method of electric power communication device according to claim 1, is characterized in that, described method also comprises:
Index operational factor in collection communication network;
Judge whether described index operational factor exceedes preset thresholding;
If so, described index operational factor and corresponding network configuration data are imported accident analysis engine;
Transfer preset accident analysis rule base by described accident analysis engine, by described accident analysis rule base and described network configuration data, analyze the fault type that described index operational factor is corresponding.
7. the alarm information processing method of electric power communication device according to claim 6, is characterized in that, described accident analysis rule base records the index operational factor content of each fault type corresponding to all types of network configuration data; Described by described accident analysis rule base and described network configuration data, the fault type analyzing described index operational factor corresponding comprises:
The index operational factor content of each fault type corresponding to described network configuration data is determined from described accident analysis rule base;
From the index operational factor content of the corresponding each fault type of described network configuration data, determine and the fault type that described index operational factor is mated, obtain the fault type that described index operational factor is corresponding.
8. the alarm information processing method of electric power communication device according to claim 1, is characterized in that, described method also comprises:
In preset network topology structure figure, determine the fault point that described warning information is corresponding;
Fault is there is with fault point described in specific alerting pattern prompting user in described network topology structure figure.
9. the alarm information processing method of electric power communication device according to claim 1, is characterized in that, the described original alarm information that gathers from communication network comprises:
Judge whether the content of the warning information gathered conforms to the content in fault signature warning information storehouse;
If so, at the appointed time from communication network, original alarm information is gathered.
10. a warning information processing unit for electric power communication device, is characterized in that, comprising:
Original alarm information acquisition module, for gathering original alarm information from communication network;
Network configuration data determination module, for determining the network configuration data corresponding to described original alarm information;
Uniform format module, for described original alarm information is carried out uniform format, generates the original alarm information of consolidation form;
Filtering module, for repeating warning information in the original alarm information of described consolidation form and stroboscopic warning information filters, obtains the warning information after filtering;
First imports module, for the warning information after described filtration and described network configuration data are imported accident analysis engine;
Accident analysis engine modules, for transferring preset accident analysis rule base by described accident analysis engine, by described accident analysis rule base and described network configuration data, from the warning information after described filtration, analyze the root warning information corresponding to specified fault type;
Represent module, for representing described warning information and described specified fault type.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510661190.6A CN105207822A (en) | 2015-10-14 | 2015-10-14 | Electric power communication equipment alarm information processing method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510661190.6A CN105207822A (en) | 2015-10-14 | 2015-10-14 | Electric power communication equipment alarm information processing method and device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN105207822A true CN105207822A (en) | 2015-12-30 |
Family
ID=54955275
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510661190.6A Pending CN105207822A (en) | 2015-10-14 | 2015-10-14 | Electric power communication equipment alarm information processing method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105207822A (en) |
Cited By (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105912571A (en) * | 2016-03-30 | 2016-08-31 | 广东凯通软件开发有限公司 | Alarm processing method and alarm processing device |
| CN106506194A (en) * | 2016-10-17 | 2017-03-15 | 武汉丰天鼎业信息网络有限公司 | The method of dissimilar or model device alarm by snmp protocol automatic identification |
| CN106778873A (en) * | 2016-12-19 | 2017-05-31 | 北京市天元网络技术股份有限公司 | A kind of warning information classification method of disposal and device based on white list rule |
| CN106777392A (en) * | 2017-02-23 | 2017-05-31 | 国家电网公司 | The real-time processing method of the Wind turbines scada data based on stream calculation |
| CN106789354A (en) * | 2017-02-09 | 2017-05-31 | 北京市天元网络技术股份有限公司 | A kind of method for diagnosing faults and device based on railway communication |
| CN107645414A (en) * | 2017-09-16 | 2018-01-30 | 广西电网有限责任公司电力科学研究院 | A kind of power transmission and transformation equipment state alarming processing system |
| CN107769967A (en) * | 2017-10-16 | 2018-03-06 | 中国电子科技集团公司第五十四研究所 | A kind of inter-network system trouble correlation analytic method in knowledge based storehouse |
| CN108183814A (en) * | 2017-12-08 | 2018-06-19 | 囯网河北省电力有限公司电力科学研究院 | The malfunction elimination method and apparatus of the communication channel of power information acquisition system |
| CN108243063A (en) * | 2017-12-28 | 2018-07-03 | 北京市天元网络技术股份有限公司 | The determining method and system of electric power terminal communication access net root alarm |
| CN108306677A (en) * | 2017-12-28 | 2018-07-20 | 北京市天元网络技术股份有限公司 | Cable's Fault recognition methods and system in power telecom network |
| CN108833148A (en) * | 2018-06-04 | 2018-11-16 | 北京天元创新科技有限公司 | Communication network warning information processing method and system |
| CN110096410A (en) * | 2019-03-15 | 2019-08-06 | 中国平安人寿保险股份有限公司 | Alarm information processing method, system, computer installation and readable storage medium storing program for executing |
| CN113726555A (en) * | 2021-08-02 | 2021-11-30 | 华迪计算机集团有限公司 | System and method suitable for auxiliary analysis alarm of data communication network |
| CN114500227A (en) * | 2020-11-13 | 2022-05-13 | 中国移动通信集团安徽有限公司 | Alarm analysis method, device, equipment and computer storage medium |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101022366A (en) * | 2007-03-21 | 2007-08-22 | Ut斯达康通讯有限公司 | Trouble correlation analytic system and method |
| US7721152B1 (en) * | 2004-12-21 | 2010-05-18 | Symantec Operating Corporation | Integration of cluster information with root cause analysis tool |
| CN104009870A (en) * | 2014-05-30 | 2014-08-27 | 浙江大学城市学院 | WLAN wireless intrusion alarm aggregation method |
-
2015
- 2015-10-14 CN CN201510661190.6A patent/CN105207822A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7721152B1 (en) * | 2004-12-21 | 2010-05-18 | Symantec Operating Corporation | Integration of cluster information with root cause analysis tool |
| CN101022366A (en) * | 2007-03-21 | 2007-08-22 | Ut斯达康通讯有限公司 | Trouble correlation analytic system and method |
| CN104009870A (en) * | 2014-05-30 | 2014-08-27 | 浙江大学城市学院 | WLAN wireless intrusion alarm aggregation method |
Non-Patent Citations (3)
| Title |
|---|
| 杨红瑛，等: "智能电网通信管理系统的研究与设计", 《信息系统工程》 * |
| 邓晓刚,等: "电力通信综合网管系统设计与开发", 《重庆电力高等专科学校学报》 * |
| 黄涤: "电力通信网告警相关性分析模块的设计与实现", 《中国优秀硕士学位论文全文数据库（电子期刊）•信息科技辑》 * |
Cited By (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105912571A (en) * | 2016-03-30 | 2016-08-31 | 广东凯通软件开发有限公司 | Alarm processing method and alarm processing device |
| CN106506194A (en) * | 2016-10-17 | 2017-03-15 | 武汉丰天鼎业信息网络有限公司 | The method of dissimilar or model device alarm by snmp protocol automatic identification |
| CN106778873A (en) * | 2016-12-19 | 2017-05-31 | 北京市天元网络技术股份有限公司 | A kind of warning information classification method of disposal and device based on white list rule |
| CN106778873B (en) * | 2016-12-19 | 2019-09-27 | 北京市天元网络技术股份有限公司 | A kind of warning information classification method of disposal and device based on white list rule |
| CN106789354A (en) * | 2017-02-09 | 2017-05-31 | 北京市天元网络技术股份有限公司 | A kind of method for diagnosing faults and device based on railway communication |
| CN106777392A (en) * | 2017-02-23 | 2017-05-31 | 国家电网公司 | The real-time processing method of the Wind turbines scada data based on stream calculation |
| CN107645414A (en) * | 2017-09-16 | 2018-01-30 | 广西电网有限责任公司电力科学研究院 | A kind of power transmission and transformation equipment state alarming processing system |
| CN107769967A (en) * | 2017-10-16 | 2018-03-06 | 中国电子科技集团公司第五十四研究所 | A kind of inter-network system trouble correlation analytic method in knowledge based storehouse |
| CN108183814A (en) * | 2017-12-08 | 2018-06-19 | 囯网河北省电力有限公司电力科学研究院 | The malfunction elimination method and apparatus of the communication channel of power information acquisition system |
| CN108243063A (en) * | 2017-12-28 | 2018-07-03 | 北京市天元网络技术股份有限公司 | The determining method and system of electric power terminal communication access net root alarm |
| CN108306677A (en) * | 2017-12-28 | 2018-07-20 | 北京市天元网络技术股份有限公司 | Cable's Fault recognition methods and system in power telecom network |
| CN108306677B (en) * | 2017-12-28 | 2020-04-24 | 北京市天元网络技术股份有限公司 | Optical cable fault identification method and system in power communication network |
| CN108833148A (en) * | 2018-06-04 | 2018-11-16 | 北京天元创新科技有限公司 | Communication network warning information processing method and system |
| CN110096410A (en) * | 2019-03-15 | 2019-08-06 | 中国平安人寿保险股份有限公司 | Alarm information processing method, system, computer installation and readable storage medium storing program for executing |
| CN114500227A (en) * | 2020-11-13 | 2022-05-13 | 中国移动通信集团安徽有限公司 | Alarm analysis method, device, equipment and computer storage medium |
| CN114500227B (en) * | 2020-11-13 | 2023-11-21 | 中国移动通信集团安徽有限公司 | Alarm analysis method, device, equipment and computer storage medium |
| CN113726555A (en) * | 2021-08-02 | 2021-11-30 | 华迪计算机集团有限公司 | System and method suitable for auxiliary analysis alarm of data communication network |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105207822A (en) | Electric power communication equipment alarm information processing method and device | |
| CN108763957B (en) | Database security audit system, method and server | |
| CN108335449B (en) | A kind of electrical fire interconnected monitoring system based on cloud platform | |
| CN109361573B (en) | Flow log analysis method, system and computer readable storage medium | |
| CN105989427B (en) | Equipment state trend analysis and early warning method based on data mining | |
| CN103324128B (en) | Primary equipment fault warning comprehensive compression method in power dispatching automation system | |
| CN103200050A (en) | Server hardware state monitoring method and server hardware state monitoring system | |
| CN106202511A (en) | A kind of alarm method based on log analysis and system | |
| CN103596208A (en) | Method and system for judging fault of network element | |
| CN102546274A (en) | Alarm monitoring method and alarm monitoring equipment in communication service | |
| CN109005162B (en) | Industrial control system security audit method and device | |
| CN107679713A (en) | A kind of power transmission and transformation equipment state alert processing method | |
| CN111078455A (en) | Abnormal behavior sequence correlation processing method and device based on time axis, equipment and storage medium | |
| CN103441868A (en) | Warning method based on power communication transmission networks | |
| CN108711114A (en) | A kind of extraction of power monitoring information intelligent and classification processing method | |
| CN104574191A (en) | Situation assessment and visualized presentation method for safe production | |
| CN110808864A (en) | Communication early warning method, device and system | |
| CN114707363B (en) | Problem data processing method and system for distribution network engineering management | |
| CN107645414A (en) | A kind of power transmission and transformation equipment state alarming processing system | |
| CN115269438A (en) | Automatic testing method and device for image processing algorithm | |
| CN107317708B (en) | Monitoring method and device for court business application system | |
| CN111124859A (en) | Log processing method, device, equipment and storage medium | |
| CN103517292A (en) | Mobile terminal information reporting method and apparatus | |
| CN112737124B (en) | Method and device for constructing power equipment monitoring terminal | |
| CN112117756A (en) | Integrated operation and maintenance method and system for scheduling control system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20151230 |