CN109995561A - Method, apparatus, equipment and the medium of communication network failure positioning - Google Patents
Method, apparatus, equipment and the medium of communication network failure positioning Download PDFInfo
- Publication number
- CN109995561A CN109995561A CN201711492276.6A CN201711492276A CN109995561A CN 109995561 A CN109995561 A CN 109995561A CN 201711492276 A CN201711492276 A CN 201711492276A CN 109995561 A CN109995561 A CN 109995561A
- Authority
- CN
- China
- Prior art keywords
- distance
- alarm
- network element
- title
- function
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
- H04L41/064—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis involving time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
- H04L41/065—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis involving logical or physical relationship, e.g. grouping and hierarchies
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0677—Localisation of faults
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W24/00—Supervisory, monitoring or testing arrangements
- H04W24/04—Arrangements for maintaining operational condition
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The present invention provides a kind of communication network failure localization method, device, equipment and medium.This method comprises: obtaining at least two alarm datas, described two alarm datas include time, network element and title；The time gap, network element distance and title distance of described two alarm datas are obtained by time gap function, network element distance function and title distance function based on described two alarm datas；The warning distance of described two alarm datas is obtained by warning distance function based on the time gap, network element distance and title distance；And the warning distance based on described two alarm datas, analyzing failure cause.Based on technical solution of the present invention, the setting accuracy and positioning cost of communication network failure can be improved.
Description
Technical field
A kind of positioned the present invention relates to field of communication technology more particularly to communication network failure method, apparatus, equipment and
Medium.
Background technique
(especially 4G business is universal) with the development of communication technology, carrier network is increasing, network scenarios
It becomes increasingly complex.The professional range covered in communication network daily maintenance gradually becomes extensively, such as is related to wireless, transmission, exchange, number
According to the big level-ones profession in, internet etc. five, while five big level-one professions can also segment more second levels professions.Each profession is corresponding
Different equipment, when a fail occur, the alarm for being often associated with multiple professions generate.
Standardized popularization is alerted, the monitoring alarm for allowing these equipment to generate can focus on unified alarm platform, real
The alarm management of full dose is showed.However these immense alarm not a duck soups have accurately been managed, complicated scene and constantly
The alarm emerged in large numbers allows the personnel for being currently undertaken by alarm monitoring usually to have more visitors or business than one can attend to.By taking the average daily alarm amount of certain operator as an example,
Average daily alarm amount in 2009 is 5,000,000, and 2016 are 43,000,000, every year on average about with 50% speed increase.Once going out
The alarm of existing large area often can only go to prejudge possible problem network element, then in conjunction with existing by veteran maintenance personnel
The topological diagram of net logs in different network management systems and singly goes to check alarm, gradually checks from top to bottom, finally by failure
Navigate to specific network element.Such process will often employ many manpower and working hour, and the probability that can accurately judge is very
It is small.
In conclusion the technical issues of alarm of extensive network element how is precisely located, is communications field urgent need to resolve.
Summary of the invention
The embodiment of the invention provides method, apparatus, equipment and the media of a kind of positioning of communication network failure, can be accurate
The coverage of positioning failure network element position and failure.
In a first aspect, method includes: to obtain at least the embodiment of the invention provides a kind of communication network failure localization method
Two alarms, described two alarm datas include time, network element and title；Based on described two alarm datas, pass through time interval
From function, network element distance function and title distance function, the time gap, network element distance and mark of described two alarm datas are obtained
Inscribe distance；Described two alarms are obtained by warning distance function based on the time gap, network element distance and title distance
The warning distance of data；And the warning distance based on described two alarm datas, analyzing failure cause.
Second aspect, the embodiment of the invention provides a kind of communication network failure positioning device, device includes: acquisition mould
Block is configured as obtaining at least two alarms, and described two alarm datas include time, network element and title；Processing module is matched
It is set to based on described two alarm datas, by time gap function, network element distance function and title distance function, described in acquisition
Time gap, network element distance and the title distance of two alarm datas；And based on the time gap, network element distance and title away from
From obtaining the warning distance of described two alarm datas by warning distance function；And analysis module, it is configured as based on institute
State the warning distance of two alarm datas, analyzing failure cause.
The embodiment of the invention provides a kind of communication network failure positioning devices, comprising: at least one processor, at least one
A memory and computer program instructions stored in memory, the realization when computer program instructions are executed by processor
Such as the method for first aspect in above embodiment.
Fourth aspect, the embodiment of the invention provides a kind of computer readable storage mediums, are stored thereon with computer journey
The method such as first aspect in above embodiment is realized in sequence instruction when computer program instructions are executed by processor.
Communication network failure localization method, device, equipment and medium provided in an embodiment of the present invention, by alerting big data
Machine learning, to be associated with the inner link of different alarms, while by the decomposition of dimension and defining distance function and quantify to accuse
The degree of association between police accurately to find the coverage of location of fault and failure, and saves positioning cost.
Detailed description of the invention
In order to illustrate the technical solution of the embodiments of the present invention more clearly, will make below to required in the embodiment of the present invention
Attached drawing is briefly described, for those of ordinary skill in the art, without creative efforts, also
Other drawings may be obtained according to these drawings without any creative labor.
Fig. 1 shows a kind of flow diagram of the communication network failure positioning of exemplary embodiment of the present invention；
Fig. 2 shows a kind of flow diagrams that the network element distance of exemplary embodiment calculates of the invention；
Fig. 3 shows the flow diagram that a kind of network element distance of exemplary embodiment of the present invention calculates；
Fig. 4 shows a kind of flow diagram of the alarm data cluster of exemplary embodiment of the present invention；
Fig. 5 shows a kind of flow diagram of the failure reason analysis of exemplary embodiment of the present invention；
Fig. 6 shows a kind of structural schematic diagram of the communication network failure positioning device of exemplary embodiment of the present invention；
Fig. 7 shows a kind of structural schematic diagram of the processing module of exemplary embodiment of the present invention；
Fig. 8 shows a kind of structural schematic diagram of the analysis module of exemplary embodiment of the present invention；And
Fig. 9 shows a kind of hardware device schematic diagram of the communication network failure positioning of exemplary embodiment of the present invention.
Specific embodiment
The feature and exemplary embodiment of various aspects of the invention is described more fully below, in order to make mesh of the invention
, technical solution and advantage be more clearly understood, with reference to the accompanying drawings and embodiments, the present invention is further retouched in detail
It states.It should be understood that specific embodiment described herein is only configured to explain the present invention, it is not configured as limiting the present invention.
To those skilled in the art, the present invention can be real in the case where not needing some details in these details
It applies.Below the description of embodiment is used for the purpose of better understanding the present invention to provide by showing example of the invention.
It should be noted that, in this document, relational terms such as first and second and the like are used merely to a reality
Body or operation are distinguished with another entity or operation, are deposited without necessarily requiring or implying between these entities or operation
In any actual relationship or order or sequence.Moreover, the terms "include", "comprise" or its any other variant are intended to
Non-exclusive inclusion, so that the process, method, article or equipment including a series of elements is not only wanted including those
Element, but also including other elements that are not explicitly listed, or further include for this process, method, article or equipment
Intrinsic element.In the absence of more restrictions, the element limited by sentence " including ... ", it is not excluded that including
There is also other identical elements in the process, method, article or equipment of the element.
Fig. 1 shows a kind of flow diagram of the communication network failure positioning of exemplary embodiment of the present invention.Communication network
Network Fault Locating Method 100 can one or more components in implement.For example, communication network failure localization method 100 can
To implement (being detailed in Fig. 6 and its description) by communication network failure positioning device 600.
In step 101, communication network failure positioning device 600 obtains two alarm datas, described two alarm packets
Include time, network element and title.
Described two alarm datas from communication network, the failure based on communication network and generate.Wherein, communication network
It can be using including first generation mobile communication technology (1G), Generation Mobile Telecommunication System technology (2G), 3rd generation mobile communication technology
(3G), fourth generation mobile communication technology (4G) and this field presently, there are or possible from now on other mobile communication skills
Art.For example, 3G communication network may include the types such as CDMA 2000, WCDMA, TD-SCDMA, 4G communication network may include
The types such as TD-LTE, FDD-LTE.
Communication network includes one or more network elements.Network element can be made of one or more machine disks or machine frame, can be only
It is vertical to complete certain transfer function.By taking TD-LTE as an example, network element mainly includes core net EPC and access net E-UTRAN.Core
Netting EPC mainly includes core professional MME, HSS, Serving GW, PDN GW etc..Network interface mainly includes that X2 interface, S1 connect
Mouth, S1-MME, S1-U etc..
When above-mentioned communication network breaks down, the alarm of multiple associated professions may be generated.For example, network communication
In if there is Transmission, may be along with the alarm at the disconnected station in base station.For another example the exchange of a place (such as A is saved) is delayed
Machine may then be generated along with the alarm of (such as B is saved) elsewhere.In the present invention, above-mentioned alarm data can pass through announcement
Alert management platform is collected and is saved into its database.Communication network failure positioning device 600 can transfer alarm network
Alarm data in platform database.In other embodiments, alarm data can also be by communication network failure positioning device 600
It directly acquires.
The alarm data may include time, network element, title or other data.Specifically, time data can wrap
Include the data such as time of origin, time of fire alarming, duration.Network element data may include element name, alarm province, alarm ground
The data such as city, device type, equipment manufacturer, network type.Title data may include alarm title, alarm stdtitle, accuse
Alert explanation, alarm classification, alarm level etc..Other data may include alarm bar number, influence on equipment, to the number such as service impact
According to.
In certain embodiment, communication network failure positioning device 600 can be pre-processed alarm data.The pre- place
Reason include data format, to data sampling, removal noise, data quantization, Attribute decomposition, attribute merge etc. one of or it is more
Kind.After alarm data pretreatment, middle table can be fabricated to.For example, it is assumed that communication network failure positioning device 600 is in Hadoop
It is run on platform, middle table (such as Table I) can be made to the aiming field in alarm data, in order to rear by MR program
The processing of continuous alarm data.
Table I
In tablei, the line number of table can be adjusted according to alarm quantity, alarm quantity may include two or two with
On.Time of origin refers to the time of origin of alarm, and the record format of time of origin can be " date Hour Minute Second ", can also root
According to needs specific to magnitudes such as milliseconds.Device type can show the type of equipment involved by failure, such as EnodeB etc..Alarm
Title refers to the standardization description of failure, such as may include " base station is retired ", " Communications failure ", " temperature warning ", " S1 interface
Connection failure " etc..Alarm grade is the description carried out to the severity of failure, such as according to severity from high to low suitable
Sequence divides 5 grades, respectively " Level 1Alarming ", " second level alarm ", " three-level alarm ", " level Four alarm " and " Pyatyi alarm ".
It should be noted that the above description for alarm data, only understands that invention is convenient.Those skilled in the art, can be right
It is deformed, such as the classification of the sequence of adjustment alarm data, the expression way for replacing alarm data, increase and decrease alarm data,
Suchlike deformation, it is within the scope of the present invention.
In step 103, communication network failure positioning device 600 is based on described two alarm datas, passes through time gap letter
Number, network element distance function and title distance function, obtain the time gap, network element distance and title of described two alarm datas away from
From.
Wherein, time data of the time gap function based on alarm data.Specifically, time gap function can be with two
The difference of the time of origin of alarm data is related.In certain embodiment, time gap function can be a step function.To understand
It is convenient, it is exemplified below.
Assuming that the time of origin of alarm data 001 is t1, the time of origin of alarm data 002 is t2, alarm data 001 with
002 time gap function (being denoted as Dist_Time) both can be defined as the function of time difference, functional value 0~1 it
Between.The smaller expression time gap of functional value is closer, and the correlation of two alarm datas is bigger.The bigger expression time gap of functional value
Remoter, the correlation of two alarm datas is smaller.It, can be in order to more meticulously distinguish the time gap between two alarm datas
Further allowing time gap function is step function.The time of the additional distance of time gap function and two alarm datas
Difference is related, formula specific as follows:
If | t1-t2 |≤1800 seconds, time gap function can be formula (1)
Dist_Time=| t1-t2 |/6000 formula (1)
If 1800 seconds < | t1-t2 |≤3600 seconds, time gap function can be formula (2)
Dist_Time=| t1-t2 |/18000+0.2 formula (2)
If 3600 seconds < | t1-t2 |≤7200 seconds, time gap function can be formula (3)
Dist_Time=(| t1-t2 | -3600)/36000+0.4 formula (3)
If | t1-t2 | > 7200 seconds, the value of Dist_Time was all 1.
It is denoted as Dist_Time by above-mentioned time gap function, can get the time gap of two alarm datas.
It should be noted that the exemplary only time gap function embodiment in above-mentioned formula (1)-(3), the skill of this field
Art personnel can deform accordingly, such as change type function, change parameter size and/or quantity, suchlike deformation,
It is within the scope of the present invention.
Network element distance function (being denoted as Dist_Net) is constructed based on network element data, the net that it is related to by two alarm datas
Meta-attribute determines.Specific descriptions about network element distance function refer to Fig. 2, Fig. 3 and its description.By said network element apart from letter
Number Dist_Net, can get the network element distance of two alarm datas.
Title distance function (being denoted as Dist_Title) is function related with alarm title.In certain embodiment, communication
Network failure positioning device 600 can calculate the matching degree that title is alerted in two alarm datas.Such as both judge whether phase
Together, if they are the same, then Dist_Title=0 is enabled, the title distance correlation for representing two alarm datas is very big.If it is different, then enabling
Dist_Title=1 represents the title distance correlation very little of two alarm datas.It in other embodiments, can also be to announcement
Alert title carries out fuzzy matching, such as the similarity for alerting title to two is given a mark, and score value is between 0~1.Pass through title
Distance function Dist_Title can get the title distance of two alarm datas.
In step 105, communication network failure positioning device 600 is based on the time gap, network element distance and title distance,
By warning distance function, the warning distance of described two alarm datas is obtained.
The parameters such as warning distance function (being denoted as Dist_Alarm) and time gap, network element distance and title distance are related.
In certain embodiment, warning distance function can be as shown in formula (4):
In certain embodiment, the sum of time gap, network element distance and quadratic power of title distance open quadratic power in formula (4)
Root can be extended to the sum of m power of their threes and open n times root, wherein m, n are the positive integer not less than 2.
In certain embodiment, warning distance function can be as shown in formula (5):
Wherein, f1, f2 and f2 are respectively the weighted value of time gap, network element distance and title distance, the size of weighted value
It can be adjusted according to the actual situation, such as f1=0.2, f2=0.5, F3=0.3.
According to above-mentioned warning distance function Dist_Alarm, the warning distance of two alarm datas can be obtained.This field
Technical staff, other made deformations being envisioned that are carried out to warning distance function, in protection scope of the present invention
Within.
In step 107, warning distance of the communication network failure positioning device 600 based on described two alarm datas, analysis
Failure cause.
In a certain embodiment, for the alarm data of acquisition, communication network failure positioning device 600 can be to wherein accusing
Alert data are calculated two-by-two, obtain the warning distance of two alarm datas.Warning distance can be clustered further, in turn
Analyzing failure cause is detailed in Fig. 4, Fig. 5 and its description.
In a certain embodiment, for alarm data and failure analysis result, it can also be showed by display function
User checks trouble unit and corresponding information convenient for communication network maintenance personnel, or is transmitted to other users.
It should be noted that those skilled in the art can be omitted certain for communication network failure localization method 100
Step increases certain steps, adjusts the sequence of certain steps.Suchlike deformation, it is within the scope of the present invention.
Fig. 2 shows a kind of flow diagrams that the network element distance of exemplary embodiment calculates of the invention.Network element distance meter
Calculation method 200 can one or more components in implement.For example, network element distance calculating method 200 can be by communication network
Fault locator 600 implements (being detailed in Fig. 6 and its description).
In step 201, communication network failure positioning device 600 obtains network element data.The network element data includes network element name
Claim, alert province, alarm districts and cities, device type, equipment manufacturer, network type etc..
In step 203, whether the network element that communication network failure positioning device 600 judges that two alarms are related to is identical.For example,
Can be by judging whether element name is consistent, whether the network element to determine two alarms is identical.If element name is consistent, represent
Network element is identical, then enables Dist_Net=a, and the value range of a is 0~1.In a certain embodiment, a can be with value 0~0.2, example
Such as a=0.If element name is inconsistent, network element distance calculating method 200 enters step 205.
In step 205, communication network failure positioning device 600 judges two alert between the network element being related to whether have chain
Road.Judgment method about link can be found in Fig. 3 and its description.If there is link between network element, Dist_Net=b is enabled, b's takes
Being worth range is 0~1.In a certain embodiment, b can be with value 0~0.3, such as b=0.1.If there is no link between network element,
Network element distance calculating method 200 enters step 207.
In step 207, communication network failure positioning device 600 judges that whether two alert the network element being related in same province
Part.If network element in same province, does not enable Dist_Net=c, the value range of c is 0~1.In a certain embodiment, c can be with
Value 0.5~1, such as c=0.9.If network element enters step 209 in same province, network element distance calculating method 200.
In step 209, communication network failure positioning device 600 judges that two alert and whether connect between the network element that is related to
Mouthful.If not having interface between network element, Dist_Net=d is enabled, the value range of d is 0~1.In a certain embodiment, d can be with
Value 0.5~1, such as d=1.If there is interface between network element, network element distance calculating method 200 enters step 211.
In step 211, communication network failure positioning device 600 judges that two alert whether the network element being related to is wirelessly to set
It is standby.If network element is not wireless device, Dist_Net=e is enabled, the value range of e is 0~1.In a certain embodiment, c can be with
Value 0~0.5, such as e=0.2.If network element is wireless device, network element distance calculating method 200 enters step 213.
In step 213, communication network failure positioning device 600 judges that whether two alert the network element being related to samely
City.If network element in same province, does not enable Dist_Net=f, the value range of f is 0~1.In a certain embodiment, f can be with
Value 0.5~1, such as f=1.If network element enables Dist_Net=g in same districts and cities, the value range of g is 0~1.A certain
In embodiment, g can be with value 0~0.5, such as g=0.2.
By the exemplary network element distance calculating method 200 in Fig. 2, the network element distance between two alarms can be obtained.
It should be noted that those skilled in the art can be omitted certain steps, increase certain for network element distance calculating method 200
A little steps adjust the sequence of certain steps.Suchlike deformation, it is within the scope of the present invention.
Fig. 3 shows the flow diagram that a kind of network element distance of exemplary embodiment of the present invention calculates.Network element distance meter
Calculation method 300 can one or more components in implement.For example, network element distance calculating method 300 can be by communication network
Fault locator 600 implements (being detailed in Fig. 6 and its description).
In step 301, communication network failure positioning device 600 is based on NE type, network element interface is grouped, is grouped
Table.The grouping table includes NE type and interface message.In certain embodiment, NE type may include Cell,
UtranCell, EutranCell, MME, SGSN, SGW, RCRF, HSS, HSS_FE, Mscserver, MSC, DRA, SCP etc..Root
According to the interface message of network element, if there are interfaces between different network elements type, two network elements can be placed on one group.For example, if
There are interfaces between wireless profession BTS and BSC, and the two can be placed on to same grouping.For another example if MME in core professional
There are interfaces with HSS, so the two is placed on same grouping.
In step 303, communication network failure positioning device 600 is according to the grouping table, communication network failure positioning dress
Setting 600 may determine that between network element that two alarm datas are related to whether there is link.For example, can be by judgement grouping table
Whether there is same-interface between network element, to determine whether there are links.
Fig. 4 shows a kind of flow diagram of the alarm data cluster of exemplary embodiment of the present invention.Alarm data is poly-
Class method 400 can one or more components in implement.For example, alarm data clustering method 400 can be by communication network
Fault locator 600 implements (being detailed in Fig. 6 and its description).
In step 401, communication network failure positioning device 600 compares the warning distance and correlation threshold.
The calculation method of the warning distance Dist_Alarm is referring to Fig. 1 to Fig. 3.The correlation threshold (being denoted as r) can be with
It is configured according to the actual situation, such as the value range of r is 0~1.Preferably, the value range of r is 0~0.5；More preferably
Ground, the value range of r are 0~0.3；It is highly preferred that the value range of r is 0~0.2.
If Dist_Alarm is less than r, 403 are entered step, determines that two alarm datas have association, and then in step
In 405, described two alarm datas are clustered.
Those skilled in the art, can also three dimensionality (i.e. time gap, net based on herein disclosed warning distance
Member distance, title distance) or in which any or any two dimension, communication network failure reason is completed using other clustering methods
Analysis.Other described clustering methods may include longest distance method, intermediate distance method, the class method of average, kNN algorithm, k-means calculation
Method, Name-based Routing (Density-base methods), algorithm (Grid-based methods), base based on grid
In the algorithm (Model-based methods) etc. of model.
Fig. 5 shows a kind of flow diagram of the failure reason analysis of exemplary embodiment of the present invention.Failure cause point
Analysis method 500 can one or more components in implement.For example, failure cause analysis method 500 can be by communication network
Fault locator 600 implements (being detailed in Fig. 6 and its description).
In step 501, communication network failure positioning device 600 is based on alarm title in the alarm data of same cluster,
Determine significant alarm data.
Such as Fig. 1 and its description, alerts title and be taken from title data.Other than alerting title, title data can be with
Explain including alarm stdtitle, alarm, alert classification, alarm level etc..According to alarm level, it can be determined that go out important announcement
Alert data.
In step 503, communication network failure positioning device 600 is based on significant alarm data, analyzing failure cause.
For example, the significant alarm data can be carried out selective analysis investigation to information therein, be oriented specific
Failure network element.
Fig. 6 shows a kind of structural schematic diagram of the communication network failure positioning device of exemplary embodiment of the present invention.Such as
Shown in Fig. 6, communication network failure positioning device 600 includes obtaining module 602, processing module 604, analysis module 606 and display
Module 608.
Wherein, obtain module 602 for obtain at least two alarm datas, two alarm datas include the time, network element and
Title.Processing module 604 is used to be based on described two alarm datas, passes through time gap function, network element distance function and title
Distance function obtains the time gap, network element distance and title distance of described two alarm datas；And it is based on the time interval
With a distance from, network element and title distance by warning distance function obtains the warning distance of described two alarm datas.Analyze mould
Block 606 is used for the warning distance based on described two alarm datas, analyzing failure cause.Display module 608 is described for showing
Failure cause.
Fig. 7 shows a kind of structural schematic diagram of the processing module of exemplary embodiment of the present invention.As shown in fig. 7, described
Processing module 604 include time gap computing unit 702, network element metrics calculation unit 704, title metrics calculation unit 706 with
Warning distance computing unit 708.Time gap computing unit 702 is used for according to the time data of two alarm datas, when calculating
Between distance.Network element metrics calculation unit 704 is used for the network element data according to two alarm datas, calculates network element distance.Title away from
It is used for the title data according to two alarm datas from computing unit 706, calculates title distance.Warning distance computing unit 708
Time gap, network element distance and title distance for being alerted according to two calculate warning distance.
Fig. 8 shows a kind of structural schematic diagram of the analysis module of exemplary embodiment of the present invention.As shown in figure 8, analysis
Module 606 includes judging unit 802, cluster cell 804 and accident analysis unit 806.Wherein, judging unit 802 is for comparing
The warning distance and correlation threshold.Cluster cell 804 is for clustering alarm data.Accident analysis unit 806 is used for
Based on the alarm data after distance, analyzing failure cause.
It should be noted that the structural schematic diagram for Fig. 6 into Fig. 8, those skilled in the art can be omitted certain
Module/unit increases certain module/unit, integrates certain module/unit.Suchlike deformation, in protection of the invention
Within the scope of.
The communication network failure localization method for the embodiment of the present invention that Fig. 1 to Fig. 5 is described, is accused at network element distance calculating method
Alert data clustering method and failure cause analysis method, can be realized by communication network failure positioning device.Fig. 9 shows this
The hardware structural diagram for the network failure positioning device that inventive embodiments provide.
As shown in figure 9, communication network failure positioning device 900 may include processor 902 and be stored with computer journey
The memory 904 of sequence instruction.
Specifically, above-mentioned processor 904 may include central processing unit (CPU) or specific integrated circuit
(Application Specific Integrated Circuit, ASIC), or may be configured to implement implementation of the present invention
One or more integrated circuits of example.
Memory 904 may include the mass storage for data or instruction.For example it rather than limits, memory
904 may include hard disk drive (Hard Disk Drive, HDD), floppy disk drive, flash memory, CD, magneto-optic disk, tape or logical
With the combination of universal serial bus (Universal Serial Bus, USB) driver or two or more the above.It is closing
In the case where suitable, memory 904 may include the medium of removable or non-removable (or fixed).In a suitable case, it stores
Device 904 can be inside or outside data processing equipment.In a particular embodiment, memory 904 is nonvolatile solid state storage
Device.In a particular embodiment, memory 904 includes read-only memory (ROM).In a suitable case, which can be mask
ROM, programming ROM (PROM), erasable PROM (EPROM), the electric erasable PROM (EEPROM), electrically-alterable ROM of programming
(EAROM) or the combination of flash memory or two or more the above.
Processor 902 is by reading and executing the computer program instructions stored in memory 904, to realize above-mentioned implementation
Any one source code analysis method, model analysis method and intelligent analysis method in example.
In one example, communication network failure positioning device 900 may also include communication interface 906 and bus 908.Its
In, as shown in figure 9, processor 902, memory 904, communication interface 906 are connected by bus 908 and complete mutual lead to
Letter.
Communication interface 906 is mainly used for realizing in the embodiment of the present invention between each module, device, unit and/or equipment
Communication.
Bus 908 includes hardware, software or both, and the component of communication network failure positioning device 900 is coupled to each other
Together.For example it rather than limits, bus 908 may include accelerated graphics port (AGP) or other graphics bus, enhancing industry mark
Quasi- framework (EISA) bus, front side bus (FSB), super transmission (HT) interconnection, Industry Standard Architecture (ISA) bus, infinite bandwidth
Interconnection, low pin count (LPC) bus, memory bus, micro- channel architecture (MCA) bus, peripheral component interconnection (PCI) bus,
PCI-Express (PCI-X) bus, Serial Advanced Technology Attachment (SATA) bus, Video Electronics Standards Association part (VLB) are total
The combination of line or other suitable buses or two or more the above.In a suitable case, bus 908 may include
One or more buses.Although specific bus has been described and illustrated in the embodiment of the present invention, the present invention considers any suitable
Bus or interconnection.
In addition, in conjunction with source code analysis method, model analysis method and intelligent analysis method in above-described embodiment, the present invention
Embodiment can provide a kind of computer readable storage medium to realize.Computer journey is stored on the computer readable storage medium
Sequence instruction；The computer program instructions realized when being executed by processor any one source code analysis method in above-described embodiment,
Model analysis method and intelligent analysis method.
It should be clear that the invention is not limited to specific configuration described above and shown in figure and processing.
For brevity, it is omitted here the detailed description to known method.In the above-described embodiments, several tools have been described and illustrated
The step of body, is as example.But method process of the invention is not limited to described and illustrated specific steps, this field
Technical staff can be variously modified, modification and addition after understanding spirit of the invention, or suitable between changing the step
Sequence.
Functional block shown in structures described above block diagram can be implemented as hardware, software, firmware or their group
It closes.When realizing in hardware, it may, for example, be electronic circuit, specific integrated circuit (ASIC), firmware appropriate, insert
Part, function card etc..When being realized with software mode, element of the invention is used to execute program or the generation of required task
Code section.Perhaps code segment can store in machine readable media program or the data-signal by carrying in carrier wave is passing
Defeated medium or communication links are sent." machine readable media " may include any medium for capableing of storage or transmission information.
The example of machine readable media includes electronic circuit, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), soft
Disk, CD-ROM, CD, hard disk, fiber medium, radio frequency (RF) link, etc..Code segment can be via such as internet, inline
The computer network of net etc. is downloaded.
It should also be noted that, the exemplary embodiment referred in the present invention, is retouched based on a series of step or device
State certain methods or system.But the present invention is not limited to the sequence of above-mentioned steps, that is to say, that can be according in embodiment
The sequence referred to executes step, may also be distinct from that the sequence in embodiment or several steps are performed simultaneously.
The above description is merely a specific embodiment, it is apparent to those skilled in the art that,
For convenience of description and succinctly, the system, module of foregoing description and the specific work process of unit can refer to preceding method
Corresponding process in embodiment, details are not described herein.It should be understood that scope of protection of the present invention is not limited thereto, it is any to be familiar with
Those skilled in the art in the technical scope disclosed by the present invention, can readily occur in various equivalent modifications or substitutions,
These modifications or substitutions should be covered by the protection scope of the present invention.
Claims (11)
1. a kind of communication network failure localization method, which is characterized in that the described method includes:
At least two alarm datas are obtained, described two alarm datas include time, network element and title；
Based on described two alarm datas, by time gap function, network element distance function and title distance function, described in acquisition
Time gap, network element distance and the title distance of two alarm datas；
Described two alarm datas are obtained by warning distance function based on the time gap, network element distance and title distance
Warning distance；And
Based on the warning distance of described two alarm datas, analyzing failure cause.
2. the method according to claim 1, wherein the time gap function be step function, and with two
The time of alarm data is related.
3. the method according to claim 1, wherein the network element distance function includes element name, network element chain
Road, network element province, network element interface, NE type, network element districts and cities.
4. according to the method described in claim 3, it is characterized in that, the method further includes:
Based on the NE type, network element interface is grouped, obtains grouping table；And
Based on the grouping table, judge between network element with the presence or absence of link.
5. the method according to claim 1, wherein the title of the title distance function and two alarm datas
Matching degree is related.
6. the method according to claim 1, wherein the warning distance function is time gap, network element distance
With square root sum square of title distance.
7. the method according to claim 1, wherein the warning distance based on described two alarm datas,
Analyzing failure cause further comprises:
Compare the warning distance and correlation threshold；
If the warning distance is less than the correlation threshold, described two alarm datas have association；And
Described two alarm datas are clustered.
8. the method according to the description of claim 7 is characterized in that the warning distance based on described two alarm datas,
Analyzing failure cause further comprises:
In the alarm of same cluster, the title based on alarm determines significant alarm；And
Based on significant alarm, analyzing failure cause.
9. a kind of communication network failure positioning device, which is characterized in that described device includes:
Module is obtained, is configured as obtaining at least two alarms, described two alarm datas include that time, network element and title etc. are accused
Alert data；
Processing module is configured as
Based on described two alarm datas, by time gap function, network element distance function and title distance function, described in acquisition
Time gap, network element distance and the title distance of two alarm datas；And
Described two alarm datas are obtained by warning distance function based on the time gap, network element distance and title distance
Warning distance；And
Analysis module is configured as the warning distance based on described two alarm datas, analyzing failure cause.
10. a kind of communication network failure positioning device characterized by comprising at least one processor, at least one processor
And the computer program instructions of storage in the memory, when the computer program instructions are executed by the processor
Realize the method according to claim 1.
11. a kind of computer readable storage medium, is stored thereon with computer program instructions, which is characterized in that when the calculating
Such as method of any of claims 1-8 is realized when machine program instruction is executed by processor.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711492276.6A CN109995561B (en) | 2017-12-30 | 2017-12-30 | Method, device, equipment and medium for positioning communication network fault |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711492276.6A CN109995561B (en) | 2017-12-30 | 2017-12-30 | Method, device, equipment and medium for positioning communication network fault |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109995561A true CN109995561A (en) | 2019-07-09 |
| CN109995561B CN109995561B (en) | 2022-03-29 |
Family
ID=67111132
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711492276.6A Active CN109995561B (en) | 2017-12-30 | 2017-12-30 | Method, device, equipment and medium for positioning communication network fault |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109995561B (en) |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110391936A (en) * | 2019-07-25 | 2019-10-29 | 长沙学院 | A kind of novel clustering algorithm based on timing alarm |
| CN111162945A (en) * | 2019-12-30 | 2020-05-15 | 中国移动通信集团江苏有限公司 | Method, device, equipment and storage medium for determining alarm association relationship |
| CN113347654A (en) * | 2020-03-03 | 2021-09-03 | 中国移动通信集团贵州有限公司 | Method and device for determining fault type of out-of-service base station |
| CN113497716A (en) * | 2020-03-18 | 2021-10-12 | 华为技术有限公司 | Similar fault recommendation method and related equipment |
| CN113965834A (en) * | 2020-07-20 | 2022-01-21 | 中国移动通信集团安徽有限公司 | Problem detection method and device for optical distribution network |
| CN115514615A (en) * | 2021-06-07 | 2022-12-23 | 中国移动通信集团有限公司 | Fault detection method and device for broadband network |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR100656351B1 (en) * | 2005-09-12 | 2006-12-11 | 한국전자통신연구원 | Method for risk management analysis based on vulnerability assessment and apparatus thereof |
| CN101442762A (en) * | 2008-12-29 | 2009-05-27 | 中国移动通信集团北京有限公司 | Method and apparatus for analyzing network performance and locating network fault |
| CN104009854A (en) * | 2013-02-21 | 2014-08-27 | 中兴通讯股份有限公司 | Alarm processing method and apparatus, alarm associated information setting method |
| CN105049253A (en) * | 2015-07-28 | 2015-11-11 | 浪潮通信信息系统有限公司 | Method for obtaining mobile network fault location and fault early warning |
| CN105550714A (en) * | 2015-12-30 | 2016-05-04 | 国家电网公司 | Cluster fusion method for warning information in heterogeneous network environment |
| WO2016086635A1 (en) * | 2014-12-02 | 2016-06-09 | 中兴通讯股份有限公司 | Network element upgrade management method and apparatus |
| CN105847029A (en) * | 2015-09-08 | 2016-08-10 | 南京联成科技发展有限公司 | Information security event automatic association and rapid response method and system based on big data analysis |
| CN106470122A (en) * | 2016-09-20 | 2017-03-01 | 北京汇通金财信息科技有限公司 | A kind of network failure locating method and device |
| CN107171861A (en) * | 2017-06-29 | 2017-09-15 | 联想(北京)有限公司 | A kind of information processing method, electronic equipment and computer-readable storage medium |
-
2017
- 2017-12-30 CN CN201711492276.6A patent/CN109995561B/en active Active
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR100656351B1 (en) * | 2005-09-12 | 2006-12-11 | 한국전자통신연구원 | Method for risk management analysis based on vulnerability assessment and apparatus thereof |
| CN101442762A (en) * | 2008-12-29 | 2009-05-27 | 中国移动通信集团北京有限公司 | Method and apparatus for analyzing network performance and locating network fault |
| CN104009854A (en) * | 2013-02-21 | 2014-08-27 | 中兴通讯股份有限公司 | Alarm processing method and apparatus, alarm associated information setting method |
| WO2016086635A1 (en) * | 2014-12-02 | 2016-06-09 | 中兴通讯股份有限公司 | Network element upgrade management method and apparatus |
| CN105049253A (en) * | 2015-07-28 | 2015-11-11 | 浪潮通信信息系统有限公司 | Method for obtaining mobile network fault location and fault early warning |
| CN105847029A (en) * | 2015-09-08 | 2016-08-10 | 南京联成科技发展有限公司 | Information security event automatic association and rapid response method and system based on big data analysis |
| CN105550714A (en) * | 2015-12-30 | 2016-05-04 | 国家电网公司 | Cluster fusion method for warning information in heterogeneous network environment |
| CN106470122A (en) * | 2016-09-20 | 2017-03-01 | 北京汇通金财信息科技有限公司 | A kind of network failure locating method and device |
| CN107171861A (en) * | 2017-06-29 | 2017-09-15 | 联想(北京)有限公司 | A kind of information processing method, electronic equipment and computer-readable storage medium |
Non-Patent Citations (2)
| Title |
|---|
| KISUNG LEE,LING LIU: "Road Network-Aware Spatial Alarms", 《IEEE TRANSACTIONS ON MOBILE COMPUTING》 * |
| 何继光: "网络故障告警与分析系统的研究与实现", 《中国优秀硕士学位论文数据库》 * |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110391936A (en) * | 2019-07-25 | 2019-10-29 | 长沙学院 | A kind of novel clustering algorithm based on timing alarm |
| CN110391936B (en) * | 2019-07-25 | 2022-03-01 | 长沙学院 | Clustering method based on time sequence alarm |
| CN111162945A (en) * | 2019-12-30 | 2020-05-15 | 中国移动通信集团江苏有限公司 | Method, device, equipment and storage medium for determining alarm association relationship |
| CN111162945B (en) * | 2019-12-30 | 2022-08-12 | 中国移动通信集团江苏有限公司 | Method, device, equipment and storage medium for determining alarm association relationship |
| CN113347654A (en) * | 2020-03-03 | 2021-09-03 | 中国移动通信集团贵州有限公司 | Method and device for determining fault type of out-of-service base station |
| CN113497716A (en) * | 2020-03-18 | 2021-10-12 | 华为技术有限公司 | Similar fault recommendation method and related equipment |
| US11757701B2 (en) | 2020-03-18 | 2023-09-12 | Huawei Technologies Co., Ltd. | Method for recommending similar incident, and related device |
| CN113965834A (en) * | 2020-07-20 | 2022-01-21 | 中国移动通信集团安徽有限公司 | Problem detection method and device for optical distribution network |
| CN113965834B (en) * | 2020-07-20 | 2023-09-19 | 中国移动通信集团安徽有限公司 | Method and device for detecting problems of optical distribution network |
| CN115514615A (en) * | 2021-06-07 | 2022-12-23 | 中国移动通信集团有限公司 | Fault detection method and device for broadband network |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109995561B (en) | 2022-03-29 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109995561A (en) | Method, apparatus, equipment and the medium of communication network failure positioning | |
| CN106209405B (en) | Method for diagnosing faults and device | |
| CN109996284A (en) | Mobile communication Trouble call worksheet method, apparatus, equipment and medium | |
| CN104518905A (en) | Fault locating method and fault locating device | |
| AU2019275633B2 (en) | System and method of automated fault correction in a network environment | |
| CN103619030A (en) | Method and device for detecting simulation base station | |
| CN105095048A (en) | Processing method for alarm correlation of monitoring system based on business rules | |
| CN109874104B (en) | User position positioning method, device, equipment and medium | |
| CN112214577B (en) | Method, device, equipment and computer storage medium for determining target user | |
| CN109993189A (en) | A kind of network failure method for early warning, device and medium | |
| CN101075902A (en) | Method for discriminating related alert | |
| CN108073611A (en) | The filter method and device of a kind of warning information | |
| CN111459692A (en) | Method, apparatus and computer program product for predicting drive failure | |
| KR20220146670A (en) | Traffic anomaly detection methods, devices, devices, storage media and programs | |
| CN107958050A (en) | Urban planning monitoring method, device and electronic equipment | |
| CN112817814A (en) | Abnormity monitoring method, system, storage medium and electronic device | |
| CN115995037A (en) | Signal lamp state detection method, device, equipment, medium and product | |
| KR101444250B1 (en) | System for monitoring access to personal information and method therefor | |
| US10415981B2 (en) | Anomaly estimation apparatus and display apparatus | |
| CN111371581A (en) | Method, device, equipment and medium for detecting business abnormity of Internet of things card | |
| KR20210054725A (en) | Edge based hazard handling device | |
| CN114629776B (en) | Fault analysis method and device based on graph model | |
| CN103384215B (en) | A kind of viral situation method for detecting abnormality and system based on autoregression model | |
| CN109993388A (en) | Deteriorate cell main cause judgment method, device, equipment and medium | |
| CN114666145B (en) | Security early warning method and system based on network acquisition |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |