CN105827418A - Communication network alarm correlation method and communication network alarm correlation device - Google Patents
Communication network alarm correlation method and communication network alarm correlation device Download PDFInfo
- Publication number
- CN105827418A CN105827418A CN201510002925.4A CN201510002925A CN105827418A CN 105827418 A CN105827418 A CN 105827418A CN 201510002925 A CN201510002925 A CN 201510002925A CN 105827418 A CN105827418 A CN 105827418A
- Authority
- CN
- China
- Prior art keywords
- node
- alarm information
- pending
- node set
- threshold value
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention relates to a communication network alarm correlation method and a communication network alarm correlation device. The method comprises the following steps: receiving an alarm message conforming to correlation rules; and selecting a node from a node set according to the current load of each node in the node set to carry out alarm correlation for the alarm message, wherein all the nodes in the node set are used for alarm correlation. Through the method provided by the invention, the efficiency of alarm correlation is improved.
Description
Technical field
The present invention relates to the communications field, particularly relate to a kind of communication network warning correlating method and device.
Background technology
Communication network warning processes or the difficult point of troubleshooting is fault diagnosis.In the case of the size of the communication network gradually expanded and isomery degree is continuously increased, the equipment alarm message of different majors gets more and more, and adds the complexity of professional's alarming processing while providing abundant alarm information.Generally, in alarming processing, it is by collecting all kinds of alarm informations, by skilled addressee according to alarm information failure judgement reason, and determines to take which kind of processing method.This process is really an alarm association process, is i.e. analyzed the alarm information set received processing, removes redundant alarm and multi-level alarm is carried out conceptual explanation, obtaining failure cause.This process is realized by node, it will be greatly improved efficiency and the accuracy of alarm association, reduce intensity and the cost of artificial treatment, and the effective management to alarm information set can be realized.
In prior art, node is mainly based upon the correlation rule pre-defined and is associated alarm information processing.Concrete, as it is shown in figure 1, the schematic diagram of the processing mode for realizing alarm association in prior art.When there being alarm information to produce, first determine whether whether this alarm information meets correlation rule, if, then alarm information is added in pending alarm information queue, then by multiple association process tasks obtain from pending alarm information queue alarm information be associated process, each association process task obtains next alarm information from pending alarm information queue after having processed an alarm information and carries out alarm association.Owing to along with the development of network, the quantity of alarm information gets more and more, transfers to different nodes to perform the association process task in Fig. 1, wherein can include at least one node in a computer.Different computers all goes same pending alarm information queue to take task.Further, the correlation rule of each node application is fixing, namely a computer only processes the alarm information belonging to fixing.
As fully visible, in prior art, owing to the correlation rule of each node processing is fixing, when alarm information amount pending for node A is few, and alarm information amount pending for node B is many, cause the load weight of node B, the load of node A is light, so node processing resource can not effectively be utilized；Furthermore, when node B fault, the alarm information that node B is responsible for just can not be processed in time.Above phenomenon all shows: in prior art, the efficiency of alarm association is low.
Summary of the invention
It is an object of the invention to provide a kind of communication network warning correlating method and device, to overcome the inefficient problem of alarm association in prior art.
On the one hand, the present invention provides a kind of communication network warning correlating method, including:
Receive the alarm information meeting correlation rule；
According to the present load of node each in node set, selecting a node from described node set, for described alarm information is carried out alarm association, wherein, each node in described node set is used to carry out alarm association.
On the other hand, the present invention provides a kind of communication network warning associated apparatus, including:
Receiver module, for receiving the alarm information meeting correlation rule；
Selecting module, for the present load according to node each in node set, select a node from described node set, for described alarm information is carried out alarm association, wherein, each node in described node set is used to carry out alarm association.
The present invention at least has the advantages that by distributing alarm information dynamically, alarm information need not be processed by the node fixed, the method of hinge structure alarm association, the embodiment of the present invention can effectively utilize the process resource of alarm association, improves the efficiency of alarm association.In addition, in the embodiment of the present invention, the current load situation of each node is determined by two predetermined threshold value, when there is the node of light load, it is assigned to alarm information apply the node of correlation rule described in this alarm information, thus realize being assigned to the alarm information belonging to same correlation rule in a node process, improve alarm association efficiency；Furthermore, the embodiment of the present invention is by being assigned to alarm information in the node of most lightly loaded or in node that handling duration is the shortest, it is achieved improve the efficiency of alarm association.Other node processing fully it are fitted on, it is achieved that disaster tolerance is protected by the alarm information of the node by sending fault.
It should be appreciated that it is only exemplary and explanatory that above general description and details hereinafter describe, the present invention can not be limited.
Accompanying drawing explanation
Fig. 1 is the schematic diagram of the processing mode of communication network warning association in prior art；
Fig. 2 is one of exemplary process diagram of processing method of communication network warning association in the embodiment of the present invention；
Fig. 3 be in the embodiment of the present invention communication network warning association processing method exemplary process diagram two；
Fig. 4 is one of schematic diagram of processing means of communication network warning association in the embodiment of the present invention；
Fig. 5 be in the embodiment of the present invention communication network warning association processing means schematic diagram two.
Detailed description of the invention
Below in conjunction with accompanying drawing, embodiments of the invention are illustrated, it will be appreciated that embodiment described herein is merely to illustrate and explains the present invention, is not intended to limit the present invention.
Here will illustrate exemplary embodiment in detail, its example represents in the accompanying drawings.When explained below relates to accompanying drawing, unless otherwise indicated, the same numbers in different accompanying drawings represents same or analogous key element.Embodiment described in following exemplary embodiment does not represent all embodiments consistent with the present invention.On the contrary, they only with describe in detail in appended claims, the present invention some in terms of the example of consistent apparatus and method.
The embodiment of the present invention provides a kind of communication network warning correlating method, is that the load according to node distributes alarm information for each node dynamically, in order to each node carries out alarm association to alarm information in the method.The fixing alarm information that can process according to each node in hinge structure, distributes alarm information for each node, it is possible to increase the utilization rate of the process resource of each node, and then improves the treatment effeciency of alarm association.
Below the communication network warning correlating method provided in the embodiment of the present invention is described in detail.
Embodiment one
As in figure 2 it is shown, be the exemplary process diagram of communication network warning correlating method in the embodiment of the present invention, the method comprises the following steps:
Step 201: receive the alarm information meeting correlation rule.
Step 202: according to the present load of node each in node set, selects a node from described node set, and for described alarm information is carried out alarm association, wherein, each node in described node set is used to carry out alarm association.
Wherein, a node is the process unit carrying out alarm association, can include at least one node in a computer.
Wherein, in one embodiment, in node set, each node can share a pending alarm information queue, when specifically performing, each alarm information in the pending alarm information queue shared can distinguish a corresponding node identification, and node identification is for characterizing node identification this alarm information of corresponding node processing.When a complete alarm information of node processing, obtain next alarm information from shared pending alarm information queue and carry out alarm association, concrete, each node is to obtain the alarm information corresponding with the node identification of self from shared pending alarm information queue to be associated processing.
Further, can there is at least two pending alarm information queue, concrete, corresponding pending alarm information queue of each node in described node set；The most now, perform after step 202, then described alarm information is sent in the pending alarm information queue that the node that selects is corresponding, then each node obtains alarm information from the pending alarm information queue of self and is associated process.Compared with prior art, each node can not pass through Network Capture alarm information, the most each node obtains the process of alarm information then will not be affected by network, such as will not cause because network busy or network speed are low obtaining alarm information failure, or acquisition speed is slower such that it is able to improve the efficiency of alarm association further.
Further, in order to more reasonably equalize the load of each node, improve the efficiency of alarm association, the embodiment of the present invention can use two predetermined threshold value, it is determined that the current load situation of each node, and then select the node for processing alarm information, concrete:
1), when the alarm information quantity in the pending alarm information queue that node each in described node set is corresponding is respectively less than the first predetermined threshold value, step 202 can be according to following methods selection node:
Step A1: search the node currently applying the correlation rule belonging to described alarm information from described node set.
Step A2: if finding the node currently applying the correlation rule belonging to described alarm information, then select the node found.
Preferably, each pending alarm information queue has a queue number, characterizes a queue for unique, and each queue has the ID (Identity of the correlation rule being currently in use of correspondence, mark), i.e. each node has the ID of the corresponding correlation rule being currently in use.When implementing, when the ID of the correlation rule that the ID of the correlation rule belonging to alarm information is the most applying with node is identical, then find the node at the message place belonging to same correlation rule with alarm information, then this alarm information can be assigned in this node, in order to this node carries out alarm association to the alarm information belonging to same correlation rule.Additionally, in order to meet real-time, can be with the ID of the correlation rule being currently in use corresponding to each node of real-time update, to improve the accuracy searched.
Step A3: if not finding the node currently applying the correlation rule belonging to described alarm information, then select the node of alarm information minimum number in pending alarm information queue.
When the alarm information quantity in the pending alarm information queue that each node is corresponding is respectively less than the first predetermined threshold value, show the light load of each node, each node all can carry more alarm association task, therefore, by step A2, the alarm information belonging to same correlation rule can be assigned to a node go to process, so can improve the efficiency of alarm association.And when searching less than result, the load of each node so can be equalized by the node of the alarm information minimum number (i.e. most lightly loaded) in one the pending alarm information queue of selection of step A3, improve the efficiency of alarm association.
2), further, when the alarm information quantity existed in described node set in pending alarm information queue is less than at least one node of the first predetermined threshold value, step 202 can be according to following methods selection node:
Step B1: search the node currently applying the correlation rule belonging to described alarm information from least one node described.
Step B2: if finding the node currently applying the correlation rule belonging to described alarm information, then select the node found.
Step B3: if not finding the node currently applying the correlation rule belonging to described alarm information, then select the node of alarm information minimum number in pending alarm information queue from least one node described.
At least one node above-mentioned, i.e. the node general name of light load in node set.Such as node set and have 5 nodes, respectively node 1, node 2, node 3, node 4 and node 5.Wherein, only the alarm information quantity in each self-corresponding pending alarm information queue of node 2, node 3 and node 4 is less than the first predetermined threshold value, then constituted at least one node by node 2, node 3 and node 4.When selecting node, owing to the node load at least one node is relatively light, and the heavier loads of other node, then from least one node of light load, select node.So, such scheme achieves by being preferentially assigned in same node by the alarm information belonging to same correlation rule, improves the efficiency of alarm association；Or, by being assigned in the node of most lightly loaded by alarm information, improve the efficiency of alarm association.
3), further, it is all higher than equal to the first predetermined threshold value and less than the second predetermined threshold value when the alarm information quantity in the pending alarm information queue that node each in described node set is corresponding；Or, alarm information quantity in the pending alarm information queue that in node set, part of nodes is corresponding is all higher than equal to the first predetermined threshold value and less than the second predetermined threshold value, and the alarm information quantity in pending alarm information queue corresponding to remaining node is when being all higher than equal to the second predetermined threshold value, step 202 can select node according to following methods: selects the node of alarm information minimum number in pending alarm information queue from described node set.
Preferably, when the alarm information quantity in the pending alarm information queue that part of nodes in node set is corresponding is all higher than equal to the first predetermined threshold value and less than the second predetermined threshold value, and the alarm information quantity in pending alarm information queue corresponding to remaining node is when being all higher than equal to the second predetermined threshold value, for improving the efficiency selecting node, can first get rid of the node more than or equal to the second predetermined threshold value, and only from residue node, select node processing alarm information.Concrete, such as, totally 5 nodes, respectively node 1, node 2, node 3, node 4 and node 5 in node set.Wherein, alarm information quantity in node 1 and each self-corresponding pending alarm information queue of node 2 is all higher than equal to the first predetermined threshold value and less than the second predetermined threshold value, and the alarm information quantity in each self-corresponding pending alarm information queue of node 3, node 4 and node 5 is all higher than equal to the second predetermined threshold value, then can preferentially get rid of node 3, node 4 and node 5, and from node 1, node 2, select the node of alarm information minimum number.
In the method for this selection node, the heavier loads of each node is described when the alarm information quantity in the pending alarm information queue that each node is corresponding is all higher than equal to the first predetermined threshold value and is less than the second predetermined threshold value, by being assigned in the node of most lightly loaded by alarm information, improve the efficiency of alarm association.
4), further, when the alarm information quantity in the pending alarm information queue that node each in described node set is corresponding is all higher than equal to the second predetermined threshold value, step 202 can be according to following methods selection node:
Step C1: for each node in described node set, calculate the handling duration needed for all alarm informations in the pending alarm information queue of the complete correspondence of this node processing.
Step C2: select the node that required handling duration is the shortest from described node set.
Wherein, illustrate that the load of each node is the heaviest when the alarm information quantity in the pending alarm information queue that node each in described node set is corresponding is all higher than equal to the second predetermined threshold value, therefore, by calculating handling duration, may determine which node can complete task the soonest, therefore alarm information is distributed to complete the soonest the node of task, thus realizes improving the efficiency of alarm association.
Concrete, can calculate handling duration by the following method:
Step D1: alarm information carries out according to each node the process record of alarm association, calculates the processing speed of this node, this processing speed represents by the quantity processing alarm information in the unit interval.
Step D2: for each node, calculates the quantity of all alarm informations in the pending alarm information queue that this node is corresponding and the ratio of the processing speed of this node, and this ratio result is the handling duration needed for this node.
Wherein, further, for each node in node set, when this one malfunctions, the alarm information in the pending alarm information queue of this node is re-assigned to other node and carries out alarm association, to realize disaster tolerance protection.Concrete distribution method is referred to above-mentioned 1)-4) described in method choice node, do not repeat them here.
To sum up, by distributing alarm information dynamically in the embodiment of the present invention so that alarm information need not be processed by the node fixed, the method for hinge structure alarm association, the embodiment of the present invention can effectively utilize the process resource of alarm association, improves the efficiency of alarm association.In addition, in the embodiment of the present invention, the current load situation of each node is determined by two predetermined threshold value, when there is the node of light load, it is assigned to alarm information apply the node of correlation rule described in this alarm information, thus realize being assigned to the alarm information belonging to same correlation rule in a node process, improve alarm association efficiency；Furthermore, the embodiment of the present invention is by being assigned to alarm information in the node of most lightly loaded or in node that handling duration is the shortest, it is achieved improve the efficiency of alarm association.Other node processing fully it are fitted on, it is achieved that disaster tolerance is protected by the alarm information of the node by sending fault.
Embodiment two
So that node set to have 3 nodes, each node is performed by a computer, and as a example by 3 nodes correspondence computer 1, computer 2 and computers 3 respectively, illustrates the communication network warning correlating method in the embodiment of the present invention, as it is shown on figure 3, the method comprises the following steps:
Step 301: receiving the alarm information A meeting correlation rule, the correlation rule belonging to alarm information A is M.
Step 302: determine the current load situation of each computer according to the alarm information quantity in 3 respective pending alarm information queues of computer.
Step 303: when the alarm information quantity existed in 3 computers in pending alarm information queue is less than at least one computer of the first predetermined threshold value, search whether to exist just at the computer of association rule M from this at least one computer, if, then perform step 304, if it is not, then perform step 305:
Step 304: alarm information A is sent to just in the pending alarm information queue of the computer of association rule M.
Wherein, such as, computer 1, just in association rule M, then alarm information A is sent in computer 1.
Step 305: alarm information A is sent in the computer of the alarm information minimum number in pending alarm information queue.
Wherein, such as alarm information quantity in each self-corresponding pending alarm information queue of computer 1, computer 2 and computer 3 is followed successively by 3,1,5, then the alarm information minimum number in the pending alarm information queue of computer 2 correspondence, then be sent to alarm information A in the pending alarm information queue of computer 2 correspondence.
Step 306: when the alarm information quantity in self-corresponding pending alarm information queue each in 3 computers is all higher than equal to the first predetermined threshold value and is less than the second predetermined threshold value, alarm information A is sent in the computer of the alarm information minimum number in pending alarm information queue.
Step 307: when the alarm information quantity in each self-corresponding pending alarm information queue of the partial computer in 3 computers is all higher than equal to the first predetermined threshold value and less than the second predetermined threshold value, and the alarm information quantity in pending alarm information queue corresponding to remaining computer is when being all higher than equal to the second predetermined threshold value, alarm information A is sent in the computer of the alarm information minimum number in pending alarm information queue.
Wherein, such as alarm information quantity in each self-corresponding pending alarm information queue of computer 1 and computer 2 is all higher than equal to the first predetermined threshold value and less than the second predetermined threshold value, and the alarm information quantity in the pending alarm information queue of computer 3 correspondence is all higher than equal to the second predetermined threshold value, then from computer 1 and computer 2, select a computer of alarm information minimum number in pending alarm information queue.
Step 308: when the alarm information quantity in the pending alarm information queue that computer each in 3 computers is corresponding is all higher than equal to the second predetermined threshold value, calculate 3 computers and each processed the handling duration needed for all alarm informations in the pending alarm information queue of correspondence, perform step 309 afterwards.
Wherein, the such as second predetermined threshold value is 30, and the alarm information quantity in the pending alarm information queue of computer 1 correspondence is 100, and processing speed is 10/second；Alarm information quantity in the pending alarm information queue of computer 2 correspondence is 60, and processing speed is 20/second；Alarm information quantity in the pending alarm information queue of computer 3 correspondence is 200, processing speed is 15/second, the then handling duration needed for computer 1, computer 2, computer 3, is followed successively by: 10 seconds (100/10=10), 3 seconds (60/20=3), 13.3 seconds (200/15=13.3).
Step 309: alarm information A is sent in the pending alarm information queue that the shortest computer of required handling duration is corresponding.
Wherein, the result calculated according to step 308 citing, then alarm information A is sent to the pending alarm information queue of computer 2 correspondence.
Step 310: each computer carries out alarm association to the alarm information in each self-corresponding process alarm information queue.
The embodiment of the present invention, it is achieved according to the loading condition of each computer, feel to process the computer of alarm information A, in compared to existing technology, it is only capable of the computer that alarm information A is assigned to be fixed, such as the method in the computer 3 of heavier loads, it is possible to increase the efficiency of alarm association.
Based on identical inventive concept, the embodiment of the present invention also provides for a kind of communication network warning associated apparatus, and as shown in Figure 4, described device includes:
Receiver module 401, for receiving the alarm information meeting correlation rule；
Selecting module 402, for the present load according to node each in node set, select a node from described node set, for described alarm information is carried out alarm association, wherein, each node in described node set is used to carry out alarm association.
Further, as it is shown in figure 5, described device also includes:
Sending module 403, the corresponding pending alarm information queue of each node in described node set；Described selection module, according to the present load of each node in node set, selects after a node from described node set, is sent to by described alarm information in the pending alarm information queue that the node that selects is corresponding.
Further, as it is shown in figure 5, described selection module 402 specifically includes:
Search unit 404, for when the alarm information quantity existed in described node set in pending alarm information queue is less than at least one node of the first predetermined threshold value, searching the node currently applying the correlation rule belonging to described alarm information from least one node described；
First selects unit 405, if for finding the node currently applying the correlation rule belonging to described alarm information, then selecting the node found；
Second selects unit 406, if for not finding the node currently applying the correlation rule belonging to described alarm information, then selects the node of alarm information minimum number in pending alarm information queue from least one node described.
Further, as it is shown in figure 5, described selection module 402 specifically includes:
3rd selects unit 407, for being all higher than equal to the first predetermined threshold value and less than the second predetermined threshold value when the alarm information quantity in the pending alarm information queue that node each in described node set is corresponding；Or, alarm information quantity in the pending alarm information queue that in node set, part of nodes is corresponding is all higher than equal to the first predetermined threshold value and less than the second predetermined threshold value, and the alarm information quantity in pending alarm information queue corresponding to remaining node is when being all higher than equal to the second predetermined threshold value, from described node set, select the node of alarm information minimum number in pending alarm information queue.
Further, as it is shown in figure 5, described selection module 402 specifically includes:
Duration calculation unit 408, for when the alarm information quantity in the pending alarm information queue that node each in described node set is corresponding is all higher than equal to the second predetermined threshold value, for each node in described node set, calculate the handling duration needed for all alarm informations in the pending alarm information queue of the complete correspondence of this node processing；
4th selects unit 409, is used for the node selecting required handling duration the shortest from described node set.
Further, as it is shown in figure 5, described device also includes:
Reallocation module 410, for for each node in node set, when this one malfunctions, is reassigned to other node by the alarm information in the pending alarm information queue of this node and carries out alarm association.
About the device in above-described embodiment, the concrete mode that wherein modules performs to operate has been described in detail in about the embodiment of the method, and explanation will be not set forth in detail herein.
Those skilled in the art are it should be appreciated that embodiments of the invention can be provided as method, system or node procedure product.Therefore, the form of the embodiment in terms of the present invention can use complete hardware embodiment, complete software implementation or combine software and hardware.And, the present invention can use the form at one or more upper node procedure products implemented of node usable storage medium (including but not limited to disk memory, CD-ROM, optical memory etc.) wherein including node usable program code.
The present invention is to describe with reference to method, equipment (system) and the flow chart of node procedure product according to embodiments of the present invention and/or block diagram.It should be understood that can be by the flow process in each flow process in node procedure instruction flowchart and/or block diagram and/or square frame and flow chart and/or block diagram and/or the combination of square frame.The processor that these node procedures instruct universal nodes, dedicated node, Embedded Processor or other programmable data processing device can be provided to produce a machine so that the instruction performed by the processor of node or other programmable data processing device is produced for realizing the device of function specified in one flow process of flow chart or multiple flow process and/or one square frame of block diagram or multiple square frame.
The instruction of these node procedures may be alternatively stored in can be in the node readable memory that works in a specific way of guiding node or other programmable data processing device, the instruction making to be stored in this node readable memory produces the manufacture including command device, and this command device realizes the function specified in one flow process of flow chart or multiple flow process and/or one square frame of block diagram or multiple square frame.
The instruction of these node procedures also can be loaded in node or other programmable data processing device, make to perform sequence of operations step on node or other programmable device to produce the process that node realizes, thus the instruction performed on node or other programmable device provides for realizing the step of function specified in one flow process of flow chart or multiple flow process and/or one square frame of block diagram or multiple square frame.
Although preferred embodiments of the present invention have been described, but those skilled in the art once know basic creative concept, then these embodiments can be made other change and amendment.So, claims are intended to be construed to include preferred embodiment and fall into all changes and the amendment of the scope of the invention.
Obviously, those skilled in the art can carry out various change and modification without departing from the spirit and scope of the present invention to the present invention.So, if these amendments of the present invention and modification belong within the scope of the claims in the present invention and equivalent technologies thereof, then the present invention is also intended to comprise these change and modification.
Claims (12)
1. a communication network warning correlating method, it is characterised in that described method includes:
Receive the alarm information meeting correlation rule；
According to the present load of node each in node set, selecting a node from described node set, for described alarm information is carried out alarm association, wherein, each node in described node set is used to carry out alarm association.
Method the most according to claim 1, it is characterised in that
The corresponding pending alarm information queue of each node in described node set；
The described present load according to each node in node set, after selecting a node from described node set, described method also includes:
Described alarm information is sent in pending alarm information queue corresponding to node selected.
Method the most according to claim 2, it is characterized in that, when the alarm information quantity existed in described node set in pending alarm information queue is less than at least one node of the first predetermined threshold value, the described present load according to node each in node set, from described node set, select a node, specifically include:
The node currently applying the correlation rule belonging to described alarm information is searched from least one node described；
If finding the node currently applying the correlation rule belonging to described alarm information, then select the node found；
If not finding the node currently applying the correlation rule belonging to described alarm information, then from least one node described, select the node of alarm information minimum number in pending alarm information queue.
Method the most according to claim 3, it is characterised in that when the alarm information quantity in the pending alarm information queue that node each in described node set is corresponding is all higher than equal to the first predetermined threshold value and less than the second predetermined threshold value；Or, alarm information quantity in the pending alarm information queue that in node set, part of nodes is corresponding is all higher than equal to the first predetermined threshold value and less than the second predetermined threshold value, and the alarm information quantity in pending alarm information queue corresponding to remaining node is when being all higher than equal to the second predetermined threshold value, the described present load according to node each in node set, from described node set, select a node, specifically include:
The node of alarm information minimum number in pending alarm information queue is selected from described node set.
Method the most according to claim 4, it is characterized in that, when the alarm information quantity in the pending alarm information queue that node each in described node set is corresponding is all higher than equal to the second predetermined threshold value, the described present load according to node each in node set, from described node set, select a node, specifically include:
For each node in described node set, calculate the handling duration needed for all alarm informations in the pending alarm information queue of the complete correspondence of this node processing；
The node that required handling duration is the shortest is selected from described node set.
6. according to described method arbitrary in claim 1-5, it is characterised in that described method also includes:
For each node in node set, when this one malfunctions, the alarm information in the pending alarm information queue of this node is reassigned to other node and carries out alarm association.
7. a communication network warning associated apparatus, it is characterised in that described device includes:
Receiver module, for receiving the alarm information meeting correlation rule；
Selecting module, for the present load according to node each in node set, select a node from described node set, for described alarm information is carried out alarm association, wherein, each node in described node set is used to carry out alarm association.
Device the most according to claim 7, it is characterised in that described device also includes:
Sending module, the corresponding pending alarm information queue of each node in described node set；Described selection module, according to the present load of each node in node set, selects after a node from described node set, is sent to by described alarm information in the pending alarm information queue that the node that selects is corresponding.
Device the most according to claim 8, it is characterised in that described selection module specifically includes:
Search unit, for when the alarm information quantity existed in described node set in pending alarm information queue is less than at least one node of the first predetermined threshold value, searching the node currently applying the correlation rule belonging to described alarm information from least one node described；
First selects unit, if for finding the node currently applying the correlation rule belonging to described alarm information, then selecting the node found；
Second selects unit, if for not finding the node currently applying the correlation rule belonging to described alarm information, then selects the node of alarm information minimum number in pending alarm information queue from least one node described.
Device the most according to claim 9, it is characterised in that described selection module specifically includes:
3rd selects unit, for being all higher than equal to the first predetermined threshold value and less than the second predetermined threshold value when the alarm information quantity in the pending alarm information queue that node each in described node set is corresponding；Or, alarm information quantity in the pending alarm information queue that in node set, part of nodes is corresponding is all higher than equal to the first predetermined threshold value and less than the second predetermined threshold value, and the alarm information quantity in pending alarm information queue corresponding to remaining node is when being all higher than equal to the second predetermined threshold value, from described node set, select the node of alarm information minimum number in pending alarm information queue.
11. devices according to claim 10, it is characterised in that described selection module specifically includes:
Duration calculation unit, for when the alarm information quantity in the pending alarm information queue that node each in described node set is corresponding is all higher than equal to the second predetermined threshold value, for each node in described node set, calculate the handling duration needed for all alarm informations in the pending alarm information queue of the complete correspondence of this node processing；
4th selects unit, is used for the node selecting required handling duration the shortest from described node set.
12. according to described device arbitrary in claim 7-11, it is characterised in that described device also includes:
Reallocation module, for for each node in node set, when this one malfunctions, is reassigned to other node by the alarm information in the pending alarm information queue of this node and carries out alarm association.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510002925.4A CN105827418B (en) | 2015-01-04 | 2015-01-04 | A kind of communication network warning correlating method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510002925.4A CN105827418B (en) | 2015-01-04 | 2015-01-04 | A kind of communication network warning correlating method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105827418A true CN105827418A (en) | 2016-08-03 |
| CN105827418B CN105827418B (en) | 2019-07-05 |
Family
ID=56513324
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510002925.4A Active CN105827418B (en) | 2015-01-04 | 2015-01-04 | A kind of communication network warning correlating method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105827418B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113810208A (en) * | 2020-06-12 | 2021-12-17 | 阿里巴巴集团控股有限公司 | Alarm processing method, device and system, electronic equipment and computer storage medium |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101018157A (en) * | 2007-02-14 | 2007-08-15 | 华为技术有限公司 | Alarm processing method and alarming system |
| CN101697545A (en) * | 2009-10-29 | 2010-04-21 | 成都市华为赛门铁克科技有限公司 | Security incident correlation method and device as well as network server |
| CN102546216A (en) * | 2010-12-30 | 2012-07-04 | 中国移动通信集团山东有限公司 | Method for processing alarm messages in network management system and network management system |
| CN102625350A (en) * | 2012-03-09 | 2012-08-01 | 浪潮通信信息系统有限公司 | Mobile communication network management automatic dispatch based on alarm correlation |
| CN103309738A (en) * | 2013-05-31 | 2013-09-18 | 中国联合网络通信集团有限公司 | User job scheduling method and device |
| CN103346912A (en) * | 2013-06-29 | 2013-10-09 | 华为技术有限公司 | Method, device and system for conducting warning correlation analysis |
| CN103607291A (en) * | 2013-10-25 | 2014-02-26 | 北京科东电力控制系统有限责任公司 | Alarm analysis merging method for power secondary system intranet security monitoring platform |
| US20140181839A1 (en) * | 2012-02-09 | 2014-06-26 | Tencent Technology (Shenzhen) Company Limited | Capacity-based multi-task scheduling method, apparatus and system |
-
2015
- 2015-01-04 CN CN201510002925.4A patent/CN105827418B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101018157A (en) * | 2007-02-14 | 2007-08-15 | 华为技术有限公司 | Alarm processing method and alarming system |
| CN101697545A (en) * | 2009-10-29 | 2010-04-21 | 成都市华为赛门铁克科技有限公司 | Security incident correlation method and device as well as network server |
| CN102546216A (en) * | 2010-12-30 | 2012-07-04 | 中国移动通信集团山东有限公司 | Method for processing alarm messages in network management system and network management system |
| US20140181839A1 (en) * | 2012-02-09 | 2014-06-26 | Tencent Technology (Shenzhen) Company Limited | Capacity-based multi-task scheduling method, apparatus and system |
| CN102625350A (en) * | 2012-03-09 | 2012-08-01 | 浪潮通信信息系统有限公司 | Mobile communication network management automatic dispatch based on alarm correlation |
| CN103309738A (en) * | 2013-05-31 | 2013-09-18 | 中国联合网络通信集团有限公司 | User job scheduling method and device |
| CN103346912A (en) * | 2013-06-29 | 2013-10-09 | 华为技术有限公司 | Method, device and system for conducting warning correlation analysis |
| CN103607291A (en) * | 2013-10-25 | 2014-02-26 | 北京科东电力控制系统有限责任公司 | Alarm analysis merging method for power secondary system intranet security monitoring platform |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113810208A (en) * | 2020-06-12 | 2021-12-17 | 阿里巴巴集团控股有限公司 | Alarm processing method, device and system, electronic equipment and computer storage medium |
| CN113810208B (en) * | 2020-06-12 | 2022-11-08 | 阿里巴巴集团控股有限公司 | Alarm processing method, device and system, electronic equipment and computer storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105827418B (en) | 2019-07-05 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108595157B (en) | Block chain data processing method, device, equipment and storage medium | |
| CN105677462A (en) | Distributed task system based on internet of things and business processing method | |
| CN105488892B (en) | A kind of method and server for robot queuing management | |
| US9853906B2 (en) | Network prioritization based on node-level attributes | |
| CN106712981B (en) | Node change notification method and device | |
| CN103309738A (en) | User job scheduling method and device | |
| CN111147538B (en) | Service function chain path selection method and system | |
| CN106130960B (en) | Judgement system, load dispatching method and the device of steal-number behavior | |
| CN111082960A (en) | Data processing method and device | |
| CN107623731A (en) | A kind of method for scheduling task, client, service cluster and system | |
| CN110875838B (en) | Resource deployment method, device and storage medium | |
| CN105487928A (en) | Control method and device and Hadoop system | |
| CN103581273A (en) | Service executing method, device and system for distributed system | |
| Machida et al. | Performability analysis of adaptive drone computation offloading with fog computing | |
| CN106878356B (en) | Scheduling method and computing node | |
| CN107634978B (en) | Resource scheduling method and device | |
| CN105335376A (en) | Stream processing method, device and system | |
| CN105827418A (en) | Communication network alarm correlation method and communication network alarm correlation device | |
| CN109818767B (en) | Method and device for adjusting Redis cluster capacity and storage medium | |
| CN108520025B (en) | Service node determination method, device, equipment and medium | |
| CN106547611A (en) | Method for scheduling task and device based on Business Stream | |
| KR101577265B1 (en) | Apparatus for resource management and operation method of the same | |
| CN109344573A (en) | A kind of Activiation method and device | |
| CN117135151B (en) | Fault detection method of GPU cluster, electronic equipment and storage medium | |
| CN104734923B (en) | The execution control method and system of application task, message server |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |