CN109714180A - Pressure subtracts method, relevant device and the storage medium of redundant alarm - Google Patents
Pressure subtracts method, relevant device and the storage medium of redundant alarm Download PDFInfo
- Publication number
- CN109714180A CN109714180A CN201711010992.6A CN201711010992A CN109714180A CN 109714180 A CN109714180 A CN 109714180A CN 201711010992 A CN201711010992 A CN 201711010992A CN 109714180 A CN109714180 A CN 109714180A
- Authority
- CN
- China
- Prior art keywords
- alarm
- data
- history
- alarm data
- preset
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G08—SIGNALLING
- G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G08B29/00—Checking or monitoring of signalling or alarm systems; Prevention or correction of operating errors, e.g. preventing unauthorised operation
- G08B29/02—Monitoring continuously signalling or alarm systems
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0604—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
- H04L41/0622—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time based on time
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Telephonic Communication Services (AREA)
- Alarm Systems (AREA)
- Maintenance And Management Of Digital Transmission (AREA)
Abstract
The invention discloses method, relevant device and storage mediums that a kind of pressure subtracts redundant alarm, and the method includes obtaining the history alarm data stored in preset time period in the preset default detection node for executing the period；Extract the preset attribute of each history alarm data obtained；According to the attribute of each history alarm data of extraction, the parameter of regularity in preset decompression rule is determined.The present invention can have found alarm pests occurrence rule automatically, and automatically configure decompression rule, and be adaptive to different networks, different office point, different periods, so that the pressure reached for redundant alarm subtracts maximization.
Description
Technical field
The present invention relates to communication technique field, presses the method for subtracting redundant alarm, relevant device more particularly to a kind of and deposit
Storage media.
Background technique
With the sharply expansion of transmission network scale, the increasingly various and operator of bearer service is for network management to save
For the requirement of unit centralization deployment, the alarm quantity that network management needs to monitor is more and more.Due to the business feature of transmission device,
Significant alarm will be flooded by easily generating redundant alarms, a large amount of redundant alarms such as shake alarm, hit alarm, to increase prison
The O&M difficulty of control personnel.
Currently, it is manually to set, and parameter of regularity etc. is all static formulation that the pressure of redundant alarm, which subtracts rule, and it is different
Network, different office points, at the time of different, alarm pests occurrence rule is different, needs to be arranged different parameter of regularity, static rule
Parameter of regularity can not be voluntarily adjusted with different rules, cause redundant alarm decompression that can not maximize.
Summary of the invention
In order to overcome drawbacks described above, the technical problem to be solved in the present invention is to provide it is a kind of press subtract redundant alarm method,
Relevant device and storage medium, the pressure to improve existing redundant alarm technology subtract degree.
In order to solve the above technical problems, one of present invention pressure subtracts the method for redundant alarm, comprising:
In the preset default detection node for executing the period, the history alarm data stored in preset time period are obtained；
Extract the preset attribute of each history alarm data obtained；
According to the attribute of each history alarm data of extraction, the parameter of regularity in preset decompression rule is determined, it is described
Decompression rule subtracts redundant alarm data in the execution period for pressing.
In order to solve the above technical problems, one of present invention Network Management Equipment, including memory and processor；The storage
Device is stored with pressure and subtracts redundant alarm computer program, and the processor executes the computer program, to realize side as described above
The step of method.
In order to solve the above technical problems, one of present invention computer readable storage medium, is stored with pressure and subtracts redundancy announcement
Alert computer program, when the computer program is executed by least one processor, the step of to realize method as described above.
The present invention has the beneficial effect that:
Method, relevant device and storage medium in the present invention obtain pre- in the preset default detection node for executing the period
If the history alarm data stored in the period, and the preset attribute of each history alarm data of acquisition is extracted, and then basis
The attribute for each history alarm data extracted determines the parameter of regularity in preset decompression rule, so as to find to accuse automatically
Alert pests occurrence rule, and decompression rule is automatically configured, and be adaptive to different networks, different office points, different periods, thus
The pressure reached for redundant alarm subtracts maximization.
Detailed description of the invention
Fig. 1 is the method flow diagram that pressure subtracts redundant alarm in the embodiment of the present invention；
Fig. 2 is " hit alarm " pests occurrence rule curve graph in the embodiment of the present invention；
Fig. 3 is a kind of structural schematic diagram of Network Management Equipment in the embodiment of the present invention.
Specific embodiment
In order to solve problems in the prior art, the present invention provides it is a kind of press subtract the method for redundant alarm, relevant device and
Storage medium, below in conjunction with attached drawing and embodiment, the present invention will be described in further detail.It should be appreciated that this place is retouched
It states that specific examples are only used to explain the present invention, does not limit the present invention.
Embodiment one
The embodiment of the present invention provides a kind of method pressed and subtract redundant alarm, which comprises
S101 obtains the history alarm number stored in preset time period in the preset default detection node for executing the period
According to；
S102 extracts the preset attribute of each history alarm data of acquisition；
S103 determines the parameter of regularity in preset decompression rule according to the attribute of each history alarm data of extraction,
The decompression rule subtracts redundant alarm data in the execution period for pressing.
The embodiment of the present invention obtains the history stored in preset time period in the preset default detection node for executing the period
Alarm data, and the preset attribute of each history alarm data of acquisition is extracted, and then according to each history alarm number of extraction
According to attribute, determine that the parameter of regularity in preset decompression rule and automatically configures so as to find alarm pests occurrence rule automatically
Decompression rule, and it is adaptive to different networks, different office points, different periods, to reach the pressure for redundant alarm
Subtract maximization.
Execution period, detection node in the embodiment of the present invention, preset time period can be arranged according to the actual situation；Example
Such as the decompression rule that (i.e. execution period) executes weekly, parameter of regularity is determined from 6 points of morning (i.e. detection node) on every Sundays execution,
Use nearest 7 days (i.e. preset time period) history alarm data on every Sundays as analysis data (the history number obtained
According to).
When attribute may include that position, alarm code, alarm time of origin, alarm disappearance occur for alarm in the embodiment of the present invention
Between etc..
The shake alarm decompression rule and hit that rule includes shake redundant alarm data are depressurized in the embodiment of the present invention
The hit alarm decompression rule of redundant alarm data.
Parameter of regularity includes shake interval in shake alarm decompression rule, hit alarm decompression rule in the embodiment of the present invention
Middle alarm delay time etc..
Above-described embodiment is described in detail below by way of an alternative embodiment.
Pressure subtracts the method for redundant alarm in this alternative embodiment, comprising:
Step 1, creation data mining timed task, the setting task execution period (such as daily/weekly/monthly ...) and
It executes moment (i.e. detection node)；Setting uses nearest 7 days history alarm data as mining data.
Step 2, data mining task is executed, and Result is automatically applied in alarm decompression rule.
For example, step 21, obtains the history alarm data of stipulated time section from history alarm library；
Step 22, data prediction includes:
Extract the important attribute in history alarm data: alarm generation position, alarm code, alarm time of origin, alarm disappear
Lose the time；
The duration of every history alarm data is calculated, i.e. alarm duration=alarm extinction time-alarm generates
Time, the basis as excavation " hit alarm " rule；
Calculate the origination interval of same historical bar alarm data, so-called same historical bar alarm refer to Data Identification (such as
Position, alarm code occurs) identical alarm.Specifically, the alarm of identical generation position and identical alarm code is individually looked into first
Out, according to alarm time of origin sequence, this history alarm data is then calculated and (are accused in the difference of this and last time time of origin
Alert origination interval), the basis as excavation " shake alarm " rule.
The following data information obtained from: alarm occurs position (can be referred to as position in the embodiment of the present invention), accuses
Alert code, alarm time of origin, alarm extinction time, alarm duration, alarm origination interval (can letters in the embodiment of the present invention
It is referred to as spaced).Wherein alarm origination interval refers to: the alarm time of origin of this alarm alarm code identical as a upper same position
Interval.
Step 23, statistics alarm pests occurrence rule:
For the alarm duration, the alarm duration threshold x that threshold parameter 1 is history alarm data can be seti；
It is best alarm duration threshold that optimal threshold parameter 1, which is arranged,.To obtain statistical result sequence to all history alarm data
Arrange (xi, yi%) i=1,2,3..., i.e., persistently xiThe y of the total alarm amount of alarm amount Zhan within timei%.To obtain " hit
The pests occurrence rule of alarm ".
Statistical result sequence is shown for the alarm duration to all alarms, as shown in table 1, when indicating that alarm continues
Between to be that alarm Zhan in how many second has always been alerted percent how many.
Table 1
| Alert total amount | Alert pests occurrence rule |
| 60000 | (1s, 2%) (3s, 4%) ... (20s, 41.6%) |
For alarm origination interval, threshold parameter 2 can be set between each alarm generation of same history alarm data
Every qi、qj；The best alarm origination interval that optimal threshold parameter 2 is the history alarm data is set.To same to all same positions
TOPn is discharged by alarm amount in the alarm of alarm code, then for every kind of alarm in TOPn, all obtains one group of statistical result sequence,
For example the alarm rule of TOP1 is (qi, si%) i=1,2,3..., it indicates to be spaced q with a upper alarmiAlarm within time
Amount accounts for the s of the total alarm amount of the alarmi%；The alarm rule of TOP2 is (qj, sj%) j=1,2,3..., it indicates and upper one alarm
It is spaced qjAlarm amount within time accounts for the s of the total alarm amount of the alarmj%；Successively obtain " the shake announcement of the alarm of all TOPn
The pests occurrence rule of police ".Wherein n is default extraction quantity, is natural number, can be arranged according to the actual situation.
For alarm origination interval, a TOPn is arranged by alarm amount first against same position and identical alarm code, then
Pests occurrence rule is alerted to every kind of alarm statistics, as shown in table 2, the alarm pests occurrence rule obtained indicates the alarm in the how many second of interval
Account for the alarm total amount percent is how many.
Table 2
That is, in embodiments of the present invention, can determine the corresponding alarm of each threshold parameter in the following way
Press lapse rate:
Determine the ratio of the alarm data total amount of the corresponding alarm data amount of the threshold parameter and all history alarm data.
Step 24, operation data mining algorithm obtains the parameter of regularity in decompression rule:
In embodiments of the present invention, the attribute of each history alarm data according to extraction, determines preset decompression
Parameter of regularity in rule may include:
Optimal alarm is determined by preset data mining algorithm according to the attribute of each history alarm data
Press the corresponding optimal threshold parameter of lapse rate；
According to the optimal threshold parameter, the parameter of regularity in the decompression rule is set.
For example, being directed to the pests occurrence rule of " hit alarm ", i.e. one group of data sequence (xi, yi%), a curve is fitted,
Using the algorithm (for example seeking second dervative) of data mining, this point of inflexion on a curve is found out, that is, is acquired in the smallest duration
Reach maximum alarm pressure lapse rate, the result is that a pair of optimal optimal threshold parameter xoptimumFlashLapse rate is pressed with optimal alarm
yoptimumFlashValue.
Similarly for the pests occurrence rule of " shake alarm ", to every group of data sequence (qi, si%) (qj, sj%) ...,
It is to acquire reach maximum pressure lapse rate within the smallest interval time respectively using aforesaid way, i.e. the alarm rule of TOP1
(qi, si%) sequence obtains optimal a pair of of optimal threshold parameter x1optimumDitheringLapse rate is pressed with optimal alarm
y1optimumDitheringThe value, (q of TOP2j, sj%) also obtain optimal a pair of of optimal threshold parameter x2optimumDitheringWith it is best
Alarm press lapse rate y2optimumDitheringValue, until all TOPn data sequences all obtain a pair of of optimum value.
That is, the attribute according to each history alarm data, by preset data mining algorithm, really
The corresponding optimal threshold parameter of lapse rate is pressed in fixed optimal alarm, comprising:
According to the attribute of each history alarm data, counts the corresponding alarm pressure of preset each threshold parameter and subtract
Rate；
Lapse rate, matched curve are pressed according to each threshold parameter and the corresponding alarm of each threshold parameter；
By the data mining algorithm, the point of inflexion on a curve is determined；
According to the inflection point, the optimal alarm pressure lapse rate and corresponding optimal threshold parameter are determined.
Wherein, it is described according to each history alarm when the attribute is alarm time of origin and alarm extinction time
The attribute of data counts the corresponding alarm of preset each threshold parameter and presses lapse rate, comprising:
The alarm time of origin and alarm extinction time for extracting each history alarm data, determine each history alarm data
The alarm duration；
According to determining each alarm duration, the alarm data amount in each alarm duration threshold is counted；
According to the alarm data total amount of each alarm data amount of statistics and all history alarm data, each alarm is determined
Lapse rate is pressed in the corresponding alarm of duration threshold.
Wherein, when the attribute is Data Identification, the attribute according to each history alarm data is counted each
Lapse rate is pressed in the corresponding alarm of threshold parameter, comprising:
Extract the corresponding Data Identification of each history alarm data；
According to each Data Identification of extraction, the alarm data amount of each history alarm data is counted；
According to the alarm data total amount of each alarm data amount of statistics and all history alarm data, each threshold value is determined
Lapse rate is pressed in the corresponding alarm of parameter.
Further, the Data Identification includes that position, each data mark according to extraction occur for alarm code and alarm
Know, the alarm data amount of each history alarm data is counted, according to each alarm data amount of statistics and all history alarm numbers
According to alarm data total amount, determine each threshold parameter corresponding alarm pressure lapse rate, comprising:
Position occurs according to the alarm code of extraction and alarm, counts the alarm data amount of each history alarm data；
Position occurs according to the alarm code and alarm, the alarm data amount is ranked up；
According to default extraction quantity, corresponding history alarm data are extracted；
Count alarm data amount of the history alarm data of each extraction in each alarm origination interval；
According to the alarm data total amount of each alarm data amount of statistics and all history alarm data, determines extract respectively
The corresponding alarms of alarm origination interval of each history alarm data press lapse rate.
For example, being directed to the data of table 1, a curve, such as attached drawing 2 are fitted, finds corner position, in Fig. 3 (10s,
It 37%) is exactly inflection point, to obtain the data of table 3.
Table 3
For the data in table 2, a curve is fitted to the alarm of each ranking in TOPn, finds inflection point position
It sets.Corner position is all obtained to the alarm of all TOPn.Final result is as shown in table 4.
Table 4
Step 25, it by data mining results, is automatically applied in alarm decompression rule.
In embodiments of the present invention, it is described according to the best threshold when decompression rule is hit alarm decompression rule
The parameter of regularity in the decompression rule is arranged in value parameter, comprising:
Set the best alarm duration threshold to the alarm delay time of the hit alarm decompression rule.
Wherein, the hit alarm decompression rule are as follows: within the execution period, when the alarm of the alarm data detected
When duration reaches the alarm delay time, prompted according to preset prompting mode.
In embodiments of the present invention, it is described according to the best threshold when decompression rule depressurizes rule for shake alarm
The parameter of regularity in the decompression rule is arranged in value parameter, comprising:
For each history alarm data: according to the best alarm origination interval of the history alarm data, determining the history
Alarm data shakes number within the unit time；
The shake in decompression rule corresponding with the Data Identification of the history alarm data is set by the shake number
The frequency.
Wherein, the shake alarm decompression rule are as follows: within the execution period, the alarm data confirmly detected is in list
Frequency in position time (such as 1 minute, 10 minutes, 30 seconds, 300 seconds etc.), and according to the Data Identification of the alarm data
Determine corresponding decompression rule；When the frequency is greater than or equal to the shake frequency in determining decompression rule, will examine
First alarm data measured is prompted according to preset prompting mode.
Certainly, in embodiments of the present invention, when decompression rule is shake alarm decompression rule, it is described according to most
Good threshold parameter is arranged the parameter of regularity in the decompression rule, can also include:
According to the alarm code, classify to the best alarm origination interval of each history alarm data；
According to preset selection principle, the corresponding best alarm origination interval of each alarm code is determined；
For each alarm code, is determined according to the corresponding best alarm origination interval of the alarm code and shaken within the unit time
Number；
The shake frequency in decompression rule corresponding with the alarm code is set by the shake number.
Wherein, the shake alarm decompression rule are as follows: within the execution period, according to the alarm data detected, really
Determine the frequency of the alarm unit time Nei, and corresponding decompression rule is determined according to the alarm code of the alarm data；
When the frequency is greater than or equal to the shake frequency in determining decompression rule, will test first
Alarm data is prompted according to preset prompting mode.
For example, it is directed to the Result of " hit alarm ", it is automatic to set alarm delay time xoptimumFlash.Effect is to accuse
Police does not appear in alarm monitoring interface after reporting, if having crossed xoptimumFlashTime, alarm does not disappear, then just alerting
Monitoring interface is shown, else if in xoptimumFlashIt is just disappeared in time, then directly enter history alarm library, it is maximum in this way
It is possible that hit is avoided to alert the impact to alarm monitoring interface.
For the Result of " shake alarm ", classify first to the alarm of TOPn by alarm code, with alarm code
qioptimumDitheringAnd sioptimumDitheringValue obtains according to certain rules (for example taking maximum qioptimumDithering)
Take an optimal interval qoptimumDitheringValue, then the decompression automatically to the setting of this alarm code for " shake alerts " is advised
Then, that is, the Rule of judgment for the shake of the alarm code is set " (N/q to have occurred within N minutesoptimumDithering) secondary ".Effect
Are as follows: N/q is produced in N minutesoptimumDitheringSecondary alarm retains first item alarm, other alarms abandon, and only alerts in first item
Middle record frequency greatly reduces the quantity of shake alarm and the impact to monitoring interface.
For another example, the result of upper table 3 is applied directly in " hit alarm " decompression rule, and alarm delay 10 is arranged in system automatically
Second reports.I.e. alarm is not shown after generating in monitoring interface, is waited 10 seconds, if disappeared in 10 seconds, directly such as history
Library is alerted, is otherwise just shown in monitoring interface.
Result in upper table 4 first classifies to alarm code, is divided into C1...Cx, then for the specific of each alarm code
The corner position on position occurs according to the principle (i.e. preset selection principle) for taking maximum interval, between selecting one most preferably
Every, according to this optimal interval, it is arranged for the alarm code and shakes alarm decompression rule, it is specific as shown in table 5.
Table 5
Embodiment two
The embodiment of the present invention provides a kind of Network Management Equipment, and the equipment includes memory and processor；The memory is deposited
It contains pressure and subtracts redundant alarm computer program, the processor executes the computer program, to realize as appointed in embodiment one
The step of the method for anticipating.
The embodiment of the present invention obtains the history stored in preset time period in the preset default detection node for executing the period
Alarm data, and the preset attribute of each history alarm data of acquisition is extracted, and then according to each history alarm number of extraction
According to attribute, determine that the parameter of regularity in preset decompression rule and automatically configures so as to find alarm pests occurrence rule automatically
Decompression rule, and it is adaptive to different networks, different office points, different periods, to reach the pressure for redundant alarm
Subtract maximization.
Specifically, to realize following steps:
In the preset default detection node for executing the period, the history alarm data stored in preset time period are obtained；
Extract the preset attribute of each history alarm data obtained；
According to the attribute of each history alarm data of extraction, the parameter of regularity in preset decompression rule is determined, it is described
Decompression rule subtracts redundant alarm data in the execution period for pressing.
In embodiments of the present invention, the attribute of each history alarm data according to extraction, determines preset decompression
Parameter of regularity in rule, comprising:
Optimal alarm is determined by preset data mining algorithm according to the attribute of each history alarm data
Press the corresponding optimal threshold parameter of lapse rate；
According to the optimal threshold parameter, the parameter of regularity in the decompression rule is set.
In embodiments of the present invention, the attribute according to each history alarm data, is dug by preset data
Algorithm is dug, determines the corresponding optimal threshold parameter of optimal alarm pressure lapse rate, comprising:
According to the attribute of each history alarm data, counts the corresponding alarm pressure of preset each threshold parameter and subtract
Rate；
Lapse rate, matched curve are pressed according to each threshold parameter and the corresponding alarm of each threshold parameter；
By the data mining algorithm, the point of inflexion on a curve is determined；
According to the inflection point, the optimal alarm pressure lapse rate and corresponding optimal threshold parameter are determined.
Wherein, the corresponding alarm pressure lapse rate of each threshold parameter is determined in the following way:
Determine the ratio of the alarm data total amount of the corresponding alarm data amount of the threshold parameter and all history alarm data.
Wherein, the threshold parameter is the alarm duration threshold of history alarm data, and the optimal threshold parameter is
Best alarm duration threshold.
In embodiments of the present invention, the attribute includes alarm time of origin and alerts extinction time, described according to
The attribute of each history alarm data counts the corresponding alarm of preset each threshold parameter and presses lapse rate, comprising:
The alarm time of origin and alarm extinction time for extracting each history alarm data, determine each history alarm data
The alarm duration；
According to determining each alarm duration, the alarm data amount in each alarm duration threshold is counted；
According to the alarm data total amount of each alarm data amount of statistics and all history alarm data, each alarm is determined
Lapse rate is pressed in the corresponding alarm of duration threshold.
In embodiments of the present invention, the decompression rule is hit alarm decompression rule；
It is described according to the optimal threshold parameter, the parameter of regularity in the decompression rule is set, comprising:
Set the best alarm duration threshold to the alarm delay time of the hit alarm decompression rule.
Wherein, the hit alarm decompression rule are as follows: within the execution period, when the alarm of the alarm data detected
When duration reaches the alarm delay time, prompted according to preset prompting mode.
In embodiments of the present invention, the threshold parameter be history alarm data each alarm origination interval, it is described most
Good threshold parameter is the best alarm origination interval of the history alarm data.
Wherein, the attribute includes Data Identification, the attribute according to each history alarm data, is counted each
Lapse rate is pressed in the corresponding alarm of threshold parameter, comprising:
Extract the corresponding Data Identification of each history alarm data；
According to each Data Identification of extraction, the alarm data amount of each history alarm data is counted；
According to the alarm data total amount of each alarm data amount of statistics and all history alarm data, each threshold value is determined
Lapse rate is pressed in the corresponding alarm of parameter.
Wherein, the Data Identification include alarm code and alarm occur position, each Data Identification according to extraction,
The alarm data amount for counting each history alarm data, according to each alarm data amount of statistics and all history alarm data
Alarm data total amount determines the corresponding alarm pressure lapse rate of each threshold parameter, comprising:
Position occurs according to the alarm code of extraction and alarm, counts the alarm data amount of each history alarm data；
Position occurs according to the alarm code and alarm, the alarm data amount is ranked up；
According to default extraction quantity, corresponding history alarm data are extracted；
Count alarm data amount of the history alarm data of each extraction in each alarm origination interval；
According to the alarm data total amount of each alarm data amount of statistics and all history alarm data, determines extract respectively
The corresponding alarms of alarm origination interval of each history alarm data press lapse rate.
In embodiments of the present invention, the decompression rule is shake alarm decompression rule；
It is described according to the optimal threshold parameter, the parameter of regularity in the decompression rule is set, comprising:
For each history alarm data: according to the best alarm origination interval of the history alarm data, determining the history
Alarm data shakes number within the unit time；
The shake in decompression rule corresponding with the Data Identification of the history alarm data is set by the shake number
The frequency.
Wherein, the shake alarm decompression rule are as follows: within the execution period, according to the alarm data detected, really
Determine the frequency of the alarm unit time Nei, and corresponding decompression rule is determined according to the Data Identification of the alarm data；
When the frequency is greater than or equal to the shake frequency in determining decompression rule, will test first
Alarm data is prompted according to preset prompting mode.
Certainly, in embodiments of the present invention, when decompression rule is shake alarm decompression rule, it is described according to most
Good threshold parameter is arranged the parameter of regularity in the decompression rule, can also include:
According to the alarm code, classify to the best alarm origination interval of each history alarm data；
According to preset selection principle, the corresponding best alarm origination interval of each alarm code is determined；
For each alarm code, is determined according to the corresponding best alarm origination interval of the alarm code and shaken within the unit time
Number；
The shake frequency in decompression rule corresponding with the alarm code is set by the shake number.
Wherein, the shake alarm decompression rule are as follows: within the execution period, according to the alarm data detected, really
Determine the frequency of the alarm unit time Nei, and corresponding decompression rule is determined according to the alarm code of the alarm data；
When the frequency is greater than or equal to the shake frequency in determining decompression rule, will test first
Alarm data is prompted according to preset prompting mode.
The embodiment of the present invention in specific implementation, can also be refering to embodiment one, it may have corresponding technical effect.
Embodiment three
The embodiment of the present invention provides a kind of computer readable storage medium, and the media storage has pressure to subtract redundant alarm calculating
Machine program, when the computer program is executed by least one processor, to realize such as the method any in embodiment one
Step.
Computer readable storage medium can be RAM memory, flash memory, ROM memory, EPROM in the embodiment of the present invention
Memory, eeprom memory, register, hard disk, mobile hard disk, CD-ROM or any other form known in the art
Storage medium.A kind of storage medium lotus root can be connected to processor, thus enable a processor to from the read information,
And information can be written to the storage medium；Or the storage medium can be the component part of processor.Processor and storage are situated between
Matter can be located in specific integrated circuit.
The embodiment of the present invention in specific implementation, can have corresponding technology effect refering to embodiment one and embodiment two
Fruit.
Above-described specific embodiment has carried out further the purpose of the present invention, technical scheme and beneficial effects
It is described in detail, it should be understood that being not intended to limit the present invention the foregoing is merely a specific embodiment of the invention
Protection scope, all within the spirits and principles of the present invention, any modification, equivalent substitution, improvement and etc. done should all include
Within protection scope of the present invention.
Claims (15)
1. a method of pressure subtracts redundant alarm, which is characterized in that the described method includes:
In the preset default detection node for executing the period, the history alarm data stored in preset time period are obtained；
Extract the preset attribute of each history alarm data obtained；
According to the attribute of each history alarm data of extraction, the parameter of regularity in preset decompression rule, the decompression are determined
Rule subtracts redundant alarm data in the execution period for pressing.
2. the method as described in claim 1, which is characterized in that the attribute of each history alarm data according to extraction,
Determine the parameter of regularity in preset decompression rule, comprising:
According to the attribute of each history alarm data, by preset data mining algorithm, determine that optimal alarm pressure subtracts
The corresponding optimal threshold parameter of rate；
According to the optimal threshold parameter, the parameter of regularity in the decompression rule is set.
3. method according to claim 2, which is characterized in that the attribute according to each history alarm data leads to
Preset data mining algorithm is crossed, determines the corresponding optimal threshold parameter of optimal alarm pressure lapse rate, comprising:
According to the attribute of each history alarm data, counts the corresponding alarm of preset each threshold parameter and press lapse rate；
Lapse rate, matched curve are pressed according to each threshold parameter and the corresponding alarm of each threshold parameter；
By the data mining algorithm, the point of inflexion on a curve is determined；
According to the inflection point, the optimal alarm pressure lapse rate and corresponding optimal threshold parameter are determined.
4. method as claimed in claim 3, which is characterized in that determine the corresponding alarm of each threshold parameter in the following way
Press lapse rate:
Determine the ratio of the alarm data total amount of the corresponding alarm data amount of the threshold parameter and all history alarm data.
5. method as claimed in claim 3, which is characterized in that when the threshold parameter is that the alarm of history alarm data continues
Between threshold value, the optimal threshold parameter is best alarm duration threshold.
6. method as claimed in claim 5, which is characterized in that when the attribute includes alarm time of origin and alarm disappearance
Between, the attribute according to each history alarm data counts the corresponding alarm of preset each threshold parameter and presses lapse rate,
Include:
The alarm time of origin and alarm extinction time for extracting each history alarm data, determine the announcement of each history alarm data
The alert duration；
According to determining each alarm duration, the alarm data amount in each alarm duration threshold is counted；
According to the alarm data total amount of each alarm data amount of statistics and all history alarm data, determine that each alarm continues
Lapse rate is pressed in the corresponding alarm of time threshold.
7. method as claimed in claim 5, which is characterized in that the decompression rule is hit alarm decompression rule；
It is described according to the optimal threshold parameter, the parameter of regularity in the decompression rule is set, comprising:
Set the best alarm duration threshold to the alarm delay time of the hit alarm decompression rule.
8. the method for claim 7, which is characterized in that the hit alarm decompression rule are as follows: in the execution period
It is interior, when the alarm duration of the alarm data detected reaching the alarm delay time, according to preset prompting mode
Prompt.
9. method as claimed in claim 3, which is characterized in that the threshold parameter is that each alarm of history alarm data is sent out
Raw interval, the optimal threshold parameter are best alarm origination interval.
10. method as claimed in claim 9, which is characterized in that the attribute includes Data Identification, described according to described each
The attribute of history alarm data counts the corresponding alarm pressure lapse rate of each threshold parameter, comprising:
Extract the corresponding Data Identification of each history alarm data；
According to each Data Identification of extraction, the alarm data amount of each history alarm data is counted；
According to the alarm data total amount of each alarm data amount of statistics and all history alarm data, each threshold parameter is determined
Lapse rate is pressed in corresponding alarm.
11. method as claimed in claim 9, which is characterized in that the Data Identification includes that position occurs for alarm code and alarm,
Each Data Identification according to extraction, counts the alarm data amount of each history alarm data, according to each announcement of statistics
The alarm data total amount of alert data volume and all history alarm data determines the corresponding alarm pressure lapse rate of each threshold parameter, packet
It includes:
Position occurs according to the alarm code of extraction and alarm, counts the alarm data amount of each history alarm data；
Position occurs according to the alarm code and alarm, the alarm data amount is ranked up；
According to default extraction quantity, corresponding history alarm data are extracted；
Count alarm data amount of the history alarm data of each extraction in each alarm origination interval；
According to the alarm data total amount of each alarm data amount of statistics and all history alarm data, each of extraction is determined respectively
Lapse rate is pressed in the corresponding alarm of the alarm origination interval of a history alarm data.
12. method as claimed in claim 11, which is characterized in that the decompression rule is shake alarm decompression rule；
It is described according to the optimal threshold parameter, the parameter of regularity in the decompression rule is set, comprising:
According to the alarm code, classify to the best alarm origination interval of each history alarm data；
According to preset selection principle, the corresponding best alarm origination interval of each alarm code is determined；
For each alarm code, the shake time within the unit time is determined according to the corresponding best alarm origination interval of the alarm code
Number；
The shake frequency in decompression rule corresponding with the alarm code is set by the shake number.
13. method as claimed in claim 12, which is characterized in that the shake alarm decompression rule are as follows: execute week described
In phase, according to the alarm data detected, the frequency of the alarm unit time Nei is determined, and according to the announcement of the alarm data
Alert code determines corresponding decompression rule；
When the frequency is greater than or equal to the shake frequency in determining decompression rule, first for will test is alerted
Data are prompted according to preset prompting mode.
14. a kind of Network Management Equipment, which is characterized in that the equipment includes memory and processor；The memory is stored with pressure
Subtract redundant alarm computer program, the processor executes the computer program, to realize the side as described in claim 1-13
The step of method.
15. a kind of computer readable storage medium, which is characterized in that the media storage has pressure to subtract redundant alarm computer journey
Sequence, when the computer program is executed by least one processor, to realize such as the step of claim 1-13 the method.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711010992.6A CN109714180B (en) | 2017-10-26 | 2017-10-26 | Method for reducing redundant alarm, corresponding equipment and storage medium |
| PCT/CN2018/112041 WO2019080918A1 (en) | 2017-10-26 | 2018-10-26 | Method for suppressing redundant alarms, and network management device and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711010992.6A CN109714180B (en) | 2017-10-26 | 2017-10-26 | Method for reducing redundant alarm, corresponding equipment and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109714180A true CN109714180A (en) | 2019-05-03 |
| CN109714180B CN109714180B (en) | 2022-03-04 |
Family
ID=66246792
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711010992.6A Active CN109714180B (en) | 2017-10-26 | 2017-10-26 | Method for reducing redundant alarm, corresponding equipment and storage medium |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN109714180B (en) |
| WO (1) | WO2019080918A1 (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109189736A (en) * | 2018-08-01 | 2019-01-11 | 中国联合网络通信集团有限公司 | A kind of generation method and device of alarm association rule |
| CN112152868A (en) * | 2019-06-28 | 2020-12-29 | 北京金山云网络技术有限公司 | Network fault detection method and device, electronic equipment and storage medium |
| CN112769612A (en) * | 2020-12-30 | 2021-05-07 | 北京天融信网络安全技术有限公司 | Alarm event false alarm removing method and device |
Families Citing this family (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110457185B (en) * | 2019-07-25 | 2024-01-23 | 北京奇艺世纪科技有限公司 | Abnormality alarm method and device and electronic equipment |
| CN110727533A (en) * | 2019-09-26 | 2020-01-24 | 华青融天(北京)软件股份有限公司 | Alarm method, device, equipment and medium |
| CN110890977B (en) * | 2019-10-15 | 2022-06-21 | 平安科技（深圳）有限公司 | Host node monitoring method and device of cloud platform and computer equipment |
| CN111506625A (en) * | 2020-04-20 | 2020-08-07 | 中国建设银行股份有限公司 | Alarm threshold determination method and device |
| CN113079047B (en) * | 2021-03-29 | 2022-10-14 | 北京奇艺世纪科技有限公司 | Alarm processing method and device |
| CN113590025B (en) * | 2021-06-20 | 2023-12-22 | 济南浪潮数据技术有限公司 | Alarm method and device for distributed storage system |
| CN113645073B (en) * | 2021-08-11 | 2024-09-27 | 未鲲(上海)科技服务有限公司 | Alarm mail processing method and device, electronic equipment and storage medium |
| CN113904815B (en) * | 2021-09-22 | 2024-05-28 | 深信服科技股份有限公司 | Alarm aggregation method, device, equipment and computer storage medium |
| CN113886182A (en) * | 2021-09-29 | 2022-01-04 | 深圳市金蝶天燕云计算股份有限公司 | Alarm convergence method and device, electronic equipment and storage medium |
| CN114389938B (en) * | 2021-12-14 | 2023-09-29 | 武汉光迅科技股份有限公司 | Alarm method, alarm device and storage medium |
| CN114760185A (en) * | 2022-03-15 | 2022-07-15 | 深信服科技股份有限公司 | Alarm information processing method and device, electronic equipment and storage medium |
| CN115235543A (en) * | 2022-07-18 | 2022-10-25 | 宁夏隆基宁光仪表股份有限公司 | Pipe network pipeline service life analysis and alarm method and device for water service system |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103856339A (en) * | 2012-12-04 | 2014-06-11 | 中国移动通信集团广西有限公司 | Method and device for compressing alarm information |
| CN104243184A (en) * | 2013-06-06 | 2014-12-24 | 中国移动通信集团河北有限公司 | Alarm information processing method and apparatus |
| CN105721719A (en) * | 2016-02-24 | 2016-06-29 | 上海携程商务有限公司 | Fault detection system and method of call center |
| CN107026745A (en) * | 2016-01-29 | 2017-08-08 | 华为技术有限公司 | Alert processing method and alarming processing equipment |
Family Cites Families (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| DE602004027090D1 (en) * | 2004-06-28 | 2010-06-17 | Abb Research Ltd | SYSTEM AND METHOD FOR SUPPRESSING REDUNDANT ALARMS |
| CN101247269B (en) * | 2008-03-05 | 2010-09-01 | 中兴通讯股份有限公司 | Method for automatically discovering association rule for judging redundant alarm |
| CN102098175B (en) * | 2011-01-26 | 2015-07-01 | 浪潮通信信息系统有限公司 | Alarm association rule obtaining method of mobile internet |
| CN102625349B (en) * | 2012-03-09 | 2016-06-29 | 浪潮通信信息系统有限公司 | A kind of data processing method under alarm windstorm |
| CN107196804B (en) * | 2017-06-01 | 2020-07-10 | 国网山东省电力公司信息通信公司 | Alarm centralized monitoring system and method for terminal communication access network of power system |
-
2017
- 2017-10-26 CN CN201711010992.6A patent/CN109714180B/en active Active
-
2018
- 2018-10-26 WO PCT/CN2018/112041 patent/WO2019080918A1/en active Application Filing
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103856339A (en) * | 2012-12-04 | 2014-06-11 | 中国移动通信集团广西有限公司 | Method and device for compressing alarm information |
| CN104243184A (en) * | 2013-06-06 | 2014-12-24 | 中国移动通信集团河北有限公司 | Alarm information processing method and apparatus |
| CN107026745A (en) * | 2016-01-29 | 2017-08-08 | 华为技术有限公司 | Alert processing method and alarming processing equipment |
| CN105721719A (en) * | 2016-02-24 | 2016-06-29 | 上海携程商务有限公司 | Fault detection system and method of call center |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109189736A (en) * | 2018-08-01 | 2019-01-11 | 中国联合网络通信集团有限公司 | A kind of generation method and device of alarm association rule |
| CN112152868A (en) * | 2019-06-28 | 2020-12-29 | 北京金山云网络技术有限公司 | Network fault detection method and device, electronic equipment and storage medium |
| CN112152868B (en) * | 2019-06-28 | 2022-05-06 | 北京金山云网络技术有限公司 | Network fault detection method and device, electronic equipment and storage medium |
| CN112769612A (en) * | 2020-12-30 | 2021-05-07 | 北京天融信网络安全技术有限公司 | Alarm event false alarm removing method and device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109714180B (en) | 2022-03-04 |
| WO2019080918A1 (en) | 2019-05-02 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109714180A (en) | Pressure subtracts method, relevant device and the storage medium of redundant alarm | |
| CN103856339B (en) | A kind of method and apparatus being compressed to warning information | |
| CN107819631B (en) | Equipment anomaly detection method, device and equipment | |
| CN105873113B (en) | Wireless quality positioning problems method and system | |
| CN101997709B (en) | Root alarm data analysis method and system | |
| CN109639504A (en) | A kind of alarm information processing method and device based on cloud platform | |
| CN100555952C (en) | Screen the implementation method of relevant alarm | |
| CN111131290B (en) | Flow data processing method and device | |
| CN106202280A (en) | A kind of information processing method and server | |
| CN107733900B (en) | A kind of communication network users abnormal call behavioral value method for early warning | |
| CN106059816B (en) | Transfer storage facility site selecting method and system | |
| CN105429792B (en) | User behavior flow acquisition methods and device, user behavior analysis method and system | |
| KR20170006158A (en) | System and method for detecting fraud usage of message | |
| CN112988521B (en) | Alarm method, device, equipment and storage medium | |
| CN106792708A (en) | A kind of pseudo-base station recognition methods, system and server | |
| CN107800557A (en) | A kind of alarm monitoring method and device | |
| CN100405870C (en) | System for collecting and using user characteristic data to identify user, and method thereof | |
| CN108446739B (en) | Data entry monitoring method and device | |
| CN109598525B (en) | Data processing method and device | |
| CN107767477B (en) | Information processing method and related equipment | |
| CN107622065B (en) | Data processing method and server | |
| CN113079521B (en) | Call quality optimization method, device and equipment | |
| CN116416764A (en) | Alarm threshold generation method and device, electronic equipment and storage medium | |
| CN112734121A (en) | Information output method and device based on payment data | |
| CN110401959B (en) | Method and device for detecting network rubbing terminal, electronic equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |