CN111181751B - Stroboscopic alarm dispatch control method and system - Google Patents
Stroboscopic alarm dispatch control method and system Download PDFInfo
- Publication number
- CN111181751B CN111181751B CN201811340884.XA CN201811340884A CN111181751B CN 111181751 B CN111181751 B CN 111181751B CN 201811340884 A CN201811340884 A CN 201811340884A CN 111181751 B CN111181751 B CN 111181751B
- Authority
- CN
- China
- Prior art keywords
- alarm
- stroboscopic
- target
- information
- work order
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0604—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0604—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
- H04L41/0627—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time by acting on the notification or alarm source
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Alarm Systems (AREA)
Abstract
The embodiment of the invention provides a stroboscopic alarm dispatch control method and a stroboscopic alarm dispatch control system, wherein the method comprises the following steps: acquiring target alarm information in a preset period, wherein the target alarm information comprises repeated alarm amount and alarm characteristic information; determining a target stroboscopic threshold corresponding to the alarm characteristic information; and if the repeated alarm amount is larger than the target stroboscopic threshold value, determining that the type of the target alarm information is stroboscopic alarm, converting the target alarm information into a corresponding stroboscopic work order, and sending the corresponding stroboscopic work order to the target equipment. According to the stroboscopic alarm dispatch control method and system provided by the embodiment of the invention, a unique dynamic stroboscopic threshold value is set for each alarm characteristic information, and a stroboscopic alarm closed loop is completed in a work order flow control mode, so that the stroboscopic alarm amount is effectively controlled, the hidden danger of network equipment is reduced, the impact of massive alarms on a centralized fault management platform is reduced, and the use perception of a user is improved.
Description
Technical Field
The embodiment of the invention relates to the technical field of communication network management, in particular to a stroboscopic alarm dispatch control method and system.
Background
With the development of communication technology, the network elements of communication network equipment are also increasing rapidly, and daily fault alarms are also increasing rapidly. In addition, due to factors such as equipment aging, weather changes such as high-temperature rainwater, equipment network access regulation and measurement, a large amount of alarms can be generated by the network element in a short time. Because the alarms are monitored in a centralized mode at present, network management alarms of each manufacturer are pushed to a provincial alarm acquisition platform, the upper level has a hard requirement on the integrity of alarm reporting, normal alarm reporting in a carding table cannot be shielded, and if a large number of alarms are reported by a network element due to certain factors, the processing performance of the acquisition platform is reduced, so that normal alarm monitoring and alarm dispatching are influenced.
A typical type of alarm is a strobe alarm, which is characterized in that a single network element or port reports a large number of alarms of a certain type in a short time, and the duration of each alarm is short, i.e., the difference between the alarm cancellation time and the alarm occurrence time is very small, and the interval is generally within several seconds. Because the dispatching rule of the fault work order limits the alarm duration, the time limit requirement of dispatching the work order is met only after the work order lasts for at least 15 minutes, the stroboscopic alarm network element does not have the work order to perform closed-loop control, the work order becomes a blind area of fault hidden danger, frequently stroboscopic alarms cannot be processed in time, and then the work order develops into larger fault hidden danger, and the use perception of a client side is influenced. Therefore, it is very important to control the strobe alarm. The existing methods for controlling strobe alarms mainly include methods of reporting alarms through shielding network elements and manually counting strobe alarms.
However, although the method for shielding the reporting alarm of the network element can solve the impact of a large number of stroboscopic alarms on the alarm acquisition platform, the method can also easily shield the normal reporting of alarms caused by other faults, so as to cause new fault blind spots, and secondly, if the stroboscopic alarms are shielded, no corresponding work order performs closed-loop control, which may bring further potential safety hazards to the network. The manual counting mode is lack of intellectualization, needs to consume more manpower to finish together, has stronger dependence on operators, has no unified standard for the stroboscopic network element, can only process a part of alarms each time, and cannot continuously perform work. Therefore, a strobe alarm dispatch control method is needed to solve the above problems.
Disclosure of Invention
To solve the above problems, embodiments of the present invention provide a strobe alarm dispatch control method and system that overcome or at least partially solve the above problems.
In a first aspect, an embodiment of the present invention provides a strobe alarm dispatch control method, including:
acquiring target alarm information in a preset period, wherein the target alarm information comprises repeated alarm amount and alarm characteristic information;
determining a target stroboscopic threshold corresponding to the alarm characteristic information;
and if the repeated alarm amount is larger than the target stroboscopic threshold value, determining that the type of the target alarm information is stroboscopic alarm, converting the target alarm information into a corresponding stroboscopic work order, and sending the stroboscopic work order to the target equipment.
A second aspect of the present invention provides a strobe alarm dispatch control system, including:
the system comprises an acquisition module, a processing module and a processing module, wherein the acquisition module is used for acquiring target alarm information in a preset period, and the target alarm information comprises repeated alarm amount and alarm characteristic information;
a threshold value determining module, configured to determine a target strobe threshold value corresponding to the alarm characteristic information;
and the dispatching module is used for determining that the type of the target alarm information is a stroboscopic alarm if the repeated alarm amount is larger than the target stroboscopic threshold value, converting the target alarm information into a corresponding stroboscopic work order and sending the stroboscopic work order to the target equipment. Third aspect an embodiment of the present invention provides an electronic device, including:
a processor, a memory, a communication interface, and a bus; the processor, the memory and the communication interface complete mutual communication through the bus; the memory stores program instructions executable by the processor, which when invoked by the processor are capable of performing the strobe alarm dispatch control method described above.
A fourth aspect of the embodiments of the present invention provides a non-transitory computer-readable storage medium storing computer instructions for causing the computer to execute the strobe alarm dispatch control method described above.
According to the stroboscopic alarm dispatch control method and system provided by the embodiment of the invention, a unique dynamic stroboscopic threshold value is set for each alarm characteristic information, and a stroboscopic alarm closed loop is completed in a work order flow control mode, so that the stroboscopic alarm amount is effectively controlled, the hidden danger of network equipment is reduced, the impact of massive alarms on a centralized fault management platform is reduced, and the use perception of a user is improved.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and other drawings can be obtained by those skilled in the art without creative efforts.
Fig. 1 is a schematic flow chart of a strobe alarm dispatch control method according to an embodiment of the present invention;
fig. 2 is a schematic structural diagram of a strobe alarm dispatch control system according to an embodiment of the present invention;
fig. 3 is a block diagram of an electronic device according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some embodiments, but not all embodiments, of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
At present, the methods for processing the strobe alarm in the prior art mainly include the following methods, the first method is to shield the alarm generated by the strobe network element. Some shield the stroboscopic alarms at the OMC network management side so that such alarms are no longer reported to the alarm collection platform, but are limited to alarms outside the specified range of the alarm comb table. And some shielding is carried out at the network element port side, so that the stroboscopic alarm generated by the port is not reported to the OMC network management system any more, and meanwhile, the stroboscopic alarm is not reported to the alarm acquisition platform. The second is to process the stroboscopic alarm through the anti-jitter device, mainly by recording the times of repeated occurrence and recovery of the alarm within the preset time, judge whether the alarm jitters, and then process the jitter alarm. And thirdly, manually and periodically leading out alarms in the background of each gateway server, screening out network elements with more reported alarm times, and respectively informing a front-line maintenance worker to the network elements to process.
However, although the methods provided above can solve the impact of a large number of stroboscopic alarms on the alarm acquisition platform, the method can also easily shield normal reporting of alarms caused by other faults, thereby causing new fault blind spots; secondly, the method is not easy to popularize and use due to the strict confidentiality of the technology among equipment manufacturers; in addition, if the strobe alarm is shielded, no corresponding work order is used for closed-loop control, and further potential safety hazards are brought to the network. In addition, a part of alarms with serious stroboflash can be solved by manually counting the stroboflash alarm mode, but the method is lack of intellectualization, needs to consume more manpower to finish together, has stronger dependence on operators, has no uniform standard for stroboflash network elements, can only process a part of alarms every time, and can not continuously carry out work if the conditions of personnel vacation or business trips and the like are met.
To solve the above problem, fig. 1 is a schematic flow chart of a stroboscopic alarm dispatch control method provided in an embodiment of the present invention, and as shown in fig. 1, the method includes:
101. acquiring target alarm information in a preset period, wherein the target alarm information comprises repeated alarm amount and alarm characteristic information;
102. determining a target stroboscopic threshold corresponding to the alarm characteristic information;
103. and if the repeated alarm amount is larger than the target stroboscopic threshold value, determining that the type of the target alarm information is stroboscopic alarm, converting the target alarm information into a corresponding stroboscopic work order, and sending the stroboscopic work order to the target equipment.
Specifically, in step 101, the embodiment of the present invention obtains the target alarm information according to a preset period, and it can be understood that the target alarm information is special information with statistical characteristics obtained by processing a large amount of collected alarm information according to the embodiment of the present invention. The target alarm information at least needs to include two types of information, namely repeated alarm amount and alarm characteristic information. The repeated alarm amount refers to the number of alarms occurring in a preset period, and alarms from different sources have different alarm characteristic information. The alarm characteristic information may include a city name, an alarm positioning object, a network element status, an alarm name, and the like. It should be noted that, because the stroboscopic alarm has the characteristic that the other alarm field information is consistent except for the occurrence time, the stroboscopic alarm can reflect the characteristics of the stroboscopic alarm by only counting the occurrence times in the formulated period, but not counting all the content of the alarm information. And the original manual counting work can be replaced, the processing speed is accelerated, and the processing precision is improved. Specifically, the embodiment of the invention can collect alarms from the OMC network managers of various manufacturers in a mode of pushing the alarms to an alarm collection module in real time by the OMC network managers of the manufacturers, the alarm collection module regularly and synchronously alarms to the OMC network managers of the manufacturers, and then the alarms are divided into a plurality of queues according to the alarm levels to be classified, wherein the first-level alarms and the second-level alarms share one queue (less amount), and the third-level alarms and the fourth-level alarms respectively share one queue. And then determining target alarm information required by the embodiment of the invention in each queue. The embodiment of the invention can complete the repeated alarm screening and counting in the preset counting period according to the characteristics that the occurrence time of the repeated alarm is different and other information is consistent, generate an alarm with the alarm repetition times and the removed repeated items, and realize the automatic discovery and the automatic counting of the repeated alarm.
It should be noted that, the setting of the preset period needs to avoid the situation of misjudgment of the network operation identifier as much as possible, and if a certain network element issues an announcement for operation during the strobe, the strobe alarm generated during the network operation is changed into an operation state, which affects the strobe alarm dispatch and reason judgment. Dividing is performed in combination with the main centralized time of the network operation at night, preferably, one day can be divided into two statistical cycles of day and night, the preset cycle period of day is 6 < t _ day ≦ 22 00, and the preset cycle period of night is 22 < t _ night ≦ next day 6.
Further, in step 102, it should be noted that different alarm characteristic information often have differences in generation mechanism and characteristics, so that different processing strategies need to be adopted for different alarm characteristic information. The embodiment of the invention can calculate the size of the stroboscopic threshold value corresponding to each alarm characteristic information in advance, and can determine the corresponding target stroboscopic threshold value according to the alarm characteristic information obtained in the step 101 when the actual order dispatching is carried out. Then different target strobe thresholds may be determined in accordance with different alert characteristic information in embodiments of the present invention. Whether the type of alert is a strobe alert can be determined by a comparison of the target strobe threshold and the amount of repeated alerts.
Finally, in step 103, if the repeated alarm amount is greater than the target strobe threshold, it is determined that the type of the target alarm information is a strobe alarm, and the target alarm information is converted into a corresponding strobe work order and sent to the target device. The target device generally refers to a device used by the corresponding maintenance team that processes the alarm work order. Generally, the sent alarm work order includes a city name, a network element name, an alarm positioning object, an equipment manufacturer, an equipment type, an alarm name, a start-stop time of a statistical period, a frequency flash alarm amount in the statistical period, a current frequency flash alarm threshold, associated service information, and the like.
It should be noted that, the embodiment of the present invention provides a human-computer interaction window during the entire order dispatching process, so that an operator can reasonably manage and control the alarm order dispatching process at any time.
According to the stroboscopic alarm dispatch control method provided by the embodiment of the invention, a unique dynamic stroboscopic threshold value is set for each alarm characteristic information, and a stroboscopic alarm closed loop is completed in a work order flow control mode, so that the stroboscopic alarm amount is effectively controlled, the hidden danger of network equipment is reduced, the impact of mass alarms on a centralized fault management platform is reduced, and the use perception of a user is improved.
On the basis of the above embodiment, the acquiring target alarm information in a preset period includes:
counting the number of similar alarm information in a preset period, wherein the similar alarm information is alarm information with all consistent preset information items, and the preset information items comprise the alarm characteristic information;
and generating the target alarm information according to the number of the similar alarm information and the preset information items.
It can be known from the content of the above embodiment that the embodiment of the present invention obtains the target alarm information, and the target alarm information is extracted from a large amount of alarm information. Specifically, the embodiment of the present invention collects the alarm information in the preset time period according to the preset information item, and lists all the alarm information with consistent preset information items as the same type of alarm, where the number of times of the type of alarm occurring in the preset time period is the repeated alarm amount, and the preset information item needs to include alarm characteristic information. After confirming the similar alarm information, the embodiment of the invention can remove the similar items of the similar alarm information and only keep one piece of alarm information with repeated alarm amount and alarm characteristic information, namely the target alarm information in the embodiment of the invention. It should be noted that the alarm positioning object is the smallest physical entity that reports an alarm, and if the alarm positioning object is a device type alarm (e.g., NE _ NOT _ logic), the alarm positioning object is a network element name, and if the alarm positioning object is a communication type alarm (e.g., R _ LOS), the alarm positioning object is the network element name plus port information. The network element state identification is an operation result of the resource state and the network operation state of the network element, and comprises a normal state and an operation state.
On the basis of the above embodiment, the alarm characteristic information is specifically an alarm name; correspondingly, the determining the target strobe threshold corresponding to the alarm characteristic information includes:
and determining a target stroboscopic threshold corresponding to the alarm name.
Preferably, the embodiment of the present invention may use the alarm name as the alarm characteristic information. The alarm names can visually reflect the setting and operating conditions of different equipment manufacturers on the alarm information, so the alarm information with the same alarm name can be generally classified into the same type of alarm information. Correspondingly, the embodiment of the invention can calculate a corresponding stroboscopic threshold value for each alarm name in advance, and when the stroboscopic threshold value is determined, the corresponding target stroboscopic threshold value is directly found according to the alarm name.
On the basis of the above embodiment, before the obtaining of the target alarm information in the preset period, the method further includes:
and calculating a stroboscopic threshold corresponding to each alarm characteristic information according to the historical alarm data.
As can be seen from the content of the foregoing embodiment, the embodiment of the present invention determines different strobe thresholds for different alarm characteristic information. The corresponding relationship between the alarm characteristic information and the strobe threshold is calculated according to the historical alarm data. Preferably, the embodiment of the present invention selects the alarm data of the last month as the historical data sample.
The embodiment of the invention adaptively sets the stroboscopic alarm threshold value for each alarm characteristic information by the average value and the standard deviation of the repetition times of the historical alarm, and different threshold values can be adopted at different time intervals in one day, so that the threshold value can adapt to the periodic change of the stroboscopic alarm amount along with the time, and the effectiveness of the stroboscopic alarm threshold value is ensured.
On the basis of the above embodiment, the calculating a strobe threshold corresponding to each alarm feature information according to the historical alarm data specifically includes:
for each alarm characteristic information, acquiring alarm data and a minimum threshold value in a preset historical time period;
calculating an average stroboscopic threshold value of the alarm characteristic information in a preset historical time period according to alarm data in the historical time period;
and taking the maximum value of the minimum threshold value and the average stroboscopic threshold value as the stroboscopic threshold value corresponding to the alarm characteristic information.
Specifically, the strobe threshold corresponding to the alarm characteristic information provided by the embodiment of the present invention may be calculated by the following formula:
T＝max{Te，Tmin}，
wherein, tmin is a minimum threshold, te is an average threshold of the alarm characteristic information counted in the historical time period, and Te is an average threshold calculated by the statistical data of the alarm characteristic information counted in the previous month, taking one month as an example. It should be noted that, in order to prevent a situation that a normal alarm is determined to be a stroboscopic alarm by mistake due to a fact that an alarm amount of a certain alarm characteristic information in a statistical period is extremely small or a number of repeated alarms in a historical statistical period is extremely small, the embodiment of the present invention sets a minimum threshold.
Further, by analyzing the rule of historical repeated alarm, the difference exists in the duration of the repeated alarm, if the alarm meets the order dispatching condition and the duration reaches the order dispatching time delay, a common fault work order is triggered, and further a stroboscopic work order does not need to be additionally added for management and control, preferably, the selection of the Tmin can be calculated according to the time length of a statistical period and the minimum order dispatching time delay of the alarm, and the Tmin can be calculated according to the following formula:
for example: the time length of the statistic period is T _ day =16 hours in the day, T _ night =8 hours in the night, the minimum order-sending time delay of the current transmission alarms is 15 minutes, T _ day _ min =16 × 60/15=64 times is calculated, T _ day _ right =8 × 60/15=32 times, namely in the day statistic period, the stroboscopic alarm is calculated when the statistic number of the same alarm object at least reaches 64, and in the night statistic period, the stroboscopic alarm is calculated when the statistic number of the same alarm object at least reaches 32.
Further, te can be calculated according to the following equation:
wherein N is the statistical frequency in one month, namely the natural days of each month; ti is a reference threshold value calculated by the average value and the standard deviation of the repeated alarm times of a certain alarm characteristic information in each statistical period of the previous month, and can be specifically calculated according to the following formula:
Ti＝μ+aδ；
wherein a is a standard deviation coefficient, and mu and delta are the average value and the standard deviation of a statistical period sample set. In the threshold calculation, the selection of the standard deviation coefficient a can be flexibly set by combining with the range control size of the flash alarm in actual production, if an alarm positioning object with a small stroboscopic frequency needs to be screened out as much as possible, the a can be set as small as possible, and if a network element with a serious stroboscopic frequency is highlighted, the a can be set to be larger. Preferably, a is between 3 and 5, so that the strobe alarm amount can be well controlled, the strobe alarm generated in one statistical week can be ensured not to be too much, and closed-loop control can be well performed.
Preferably, the embodiment of the present invention updates the threshold once per month, and the threshold is statistically set in the daytime period and the nighttime period, respectively.
On the basis of the above embodiment, the target strobe threshold includes a first strobe threshold and a second strobe threshold, the second strobe threshold being greater than the first strobe threshold; correspondingly, the converting the target alarm information into a corresponding stroboscopic work order and sending the stroboscopic work order to the target device includes:
if the repeated alarm amount is larger than the first stroboscopic threshold value and smaller than the second stroboscopic threshold value, converting the target alarm information into a first stroboscopic work order and sending the first stroboscopic work order to target equipment, wherein the first stroboscopic work order comprises a first work order processing time limit;
if the repeated alarm amount is larger than the second stroboscopic threshold value, converting the target alarm information into a second stroboscopic work order and sending the second stroboscopic work order to the target equipment, wherein the second stroboscopic work order comprises a second work order processing time limit;
and the first work order processing time limit is larger than the second work order processing time limit.
As can be seen from the above description of the embodiment, after comparing the repeated alarm amount with the calculated strobe threshold, a corresponding strobe work order is generated to be processed by the maintenance team, and the work order has a processing time limit.
It can be understood that the stroboscopic alarm dispatch is judged based on the stroboscopic alarm check result and the stroboscopic alarm dispatch rule, specifically, if the network element state identifier of the stroboscopic alarm or the network element state identifier of the associated service network element is in the operation state, no dispatch is performed; and if the stroboscopic alarm and the network element state of the associated service network element are normal, dispatching the stroboscopic work order to a front-line maintenance worker for processing. By analyzing the frequency of the alarm stroboflash in the same statistical period, the stroboflash frequency of each alarm positioning object is found to have a certain difference, and the stroboflash frequency and the service influence degree of the alarm positioning object are in a positive relation, so that in the dispatched stroboflash work order, the work order processing time limit is set according to the stroboflash alarm amount.
Preferably, the slow flash threshold and the flash threshold set in the embodiment of the present invention are as follows:
mu +3 delta is less than or equal to the slow flashing threshold and less than mu +5 delta, and mu +5 delta is less than or equal to the flash threshold.
And if the stroboscopic alarm amount is within the range of the slow flashing threshold interval, the work order processing time limit is set as a first work order processing time limit, and if the stroboscopic alarm amount is within the range of the fast flashing threshold interval, the work order processing time limit is set as a second work order processing time limit. Preferably, the first work order processing time limit is set to 24 hours and the second work order processing time limit is set to 48 hours. In order to avoid repeated dispatching of the stroboscopic work orders within the work order processing time limit, a duplicate dispatch time limit is set for each dispatched stroboscopic alarm, wherein the duplicate dispatch time limit is less than or equal to the work order processing time limit, and the duplicate dispatch time limit = the work order processing time limit.
The embodiment of the invention can adaptively adjust the work order processing time limit according to the frequency of the stroboscopic alarm, and remove the repeated order dispatching cycle by setting the work order processing time limit, thereby realizing intelligent and humanized order dispatching of the stroboscopic alarm.
On the basis of the above embodiment, the method further includes:
and if the repeated alarm amount is smaller than the target stroboscopic threshold value, determining that the type of the target alarm information is a normal alarm, converting the target alarm information into a normal work order and sending the normal work order to the target equipment.
It can be known from the content of the above embodiment that the embodiment of the present invention compares the repeated alarm amount with the calculated strobe threshold, and determines that the alarm type is the strobe alarm if the repeated alarm amount is greater than the strobe threshold. Correspondingly, if the frequency is smaller than the stroboscopic threshold value, the normal alarm is determined, and the normal alarm sends a corresponding normal work order to the equipment of the maintenance team according to the normal processing flow.
Fig. 2 is a schematic structural diagram of a strobe alarm dispatch control system according to an embodiment of the present invention, as shown in fig. 2, including: an obtaining module 201, a threshold determining module 202, and a dispatching module 203, wherein:
the obtaining module 201 is configured to obtain target alarm information in a preset period, where the target alarm information includes a repeated alarm amount and alarm characteristic information;
the threshold determining module 202 is configured to determine a target strobe threshold corresponding to the alarm characteristic information;
the dispatch module 203 is configured to determine that the type of the target alarm information is a strobe alarm if the repeated alarm amount is greater than the target strobe threshold, convert the target alarm information into a corresponding strobe work order, and send the corresponding strobe work order to the target device.
Specifically, how to control the strobe alarm dispatch by the obtaining module 201, the threshold determining module 202, and the dispatch module 203 can be used to implement the technical solution of the embodiment of the strobe alarm dispatch control method shown in fig. 1, and the implementation principle and the technical effect are similar, which are not described herein again.
According to the stroboscopic alarm dispatch control system provided by the embodiment of the invention, a unique dynamic stroboscopic threshold value is set for each alarm characteristic information, and a stroboscopic alarm closed loop is completed in a work order flow control mode, so that the stroboscopic alarm amount is effectively controlled, the hidden danger of network equipment is reduced, the impact of massive alarms on a centralized fault management platform is reduced, and the use perception of a user is improved.
On the basis of the above embodiment, the obtaining module includes:
the statistical unit is used for counting the number of similar alarm information in a preset period, wherein the similar alarm information is alarm information with all consistent preset information items, and the preset information items comprise the alarm characteristic information;
and the alarm generating unit is used for generating the target alarm information according to the number of the similar alarm information and the preset information item.
On the basis of the above embodiment, the alarm characteristic information is specifically an alarm name; accordingly, the threshold determination module comprises:
and the name determining unit is used for determining a target stroboscopic threshold corresponding to the alarm name.
On the basis of the above embodiment, the system further includes:
and the historical statistic module is used for calculating a stroboscopic threshold value corresponding to each alarm characteristic information according to the historical alarm data.
On the basis of the above embodiment, the history statistics module specifically includes:
the acquiring unit is used for acquiring alarm data and a lowest threshold value in a preset historical time period for each alarm characteristic information;
the computing unit is used for computing the average stroboscopic threshold value of the alarm characteristic information in a preset historical time period according to the alarm data in the historical time period;
and the determining unit is used for taking the maximum value of the lowest threshold value and the average stroboscopic threshold value as the stroboscopic threshold value corresponding to the alarm characteristic information.
On the basis of the above embodiment, the target strobe threshold includes a first strobe threshold and a second strobe threshold, the second strobe threshold being greater than the first strobe threshold; correspondingly, the order dispatching module comprises:
a first sending unit, configured to convert the target alarm information into a first stroboscopic work order and send the first stroboscopic work order to a target device if the repeated alarm amount is greater than the first stroboscopic threshold and smaller than the second stroboscopic threshold, where the first stroboscopic work order includes a first work order processing time limit;
a second sending unit, configured to convert the target warning information into a second stroboscopic work order and send the second stroboscopic work order to a target device if the repeated warning amount is greater than the second stroboscopic threshold, where the second stroboscopic work order includes a second work order processing time limit;
and the first work order processing time limit is larger than the second work order processing time limit.
On the basis of the above embodiment, the system further includes:
and the normal sending module is used for determining that the type of the target alarm information is a normal alarm if the repeated alarm amount is smaller than the target stroboscopic threshold value, converting the target alarm information into a normal work order and sending the normal work order to the target equipment.
An embodiment of the present invention provides an electronic device, including: at least one processor; and at least one memory communicatively coupled to the processor, wherein:
fig. 3 is a block diagram of an electronic device according to an embodiment of the present invention, and referring to fig. 3, the electronic device includes: a processor (processor) 301, a communication Interface (communication Interface) 302, a memory (memory) 303 and a bus 304, wherein the processor 301, the communication Interface 302 and the memory 303 complete communication with each other through the bus 304. Processor 301 may call logic instructions in memory 303 to perform the following method: acquiring target alarm information in a preset period, wherein the target alarm information comprises repeated alarm amount and alarm characteristic information; determining a target stroboscopic threshold corresponding to the alarm characteristic information; and if the repeated alarm amount is larger than the target stroboscopic threshold value, determining that the type of the target alarm information is stroboscopic alarm, converting the target alarm information into a corresponding stroboscopic work order, and sending the stroboscopic work order to the target equipment.
An embodiment of the present invention discloses a computer program product, which includes a computer program stored on a non-transitory computer readable storage medium, the computer program including program instructions, when the program instructions are executed by a computer, the computer can execute the methods provided by the above method embodiments, for example, the method includes: acquiring target alarm information in a preset period, wherein the target alarm information comprises repeated alarm amount and alarm characteristic information; determining a target stroboscopic threshold corresponding to the alarm characteristic information; and if the repeated alarm amount is larger than the target stroboscopic threshold value, determining that the type of the target alarm information is stroboscopic alarm, converting the target alarm information into a corresponding stroboscopic work order, and sending the corresponding stroboscopic work order to the target equipment.
Embodiments of the present invention provide a non-transitory computer-readable storage medium, which stores computer instructions, where the computer instructions cause the computer to perform the methods provided by the above method embodiments, for example, the methods include: acquiring target alarm information in a preset period, wherein the target alarm information comprises repeated alarm amount and alarm characteristic information; determining a target stroboscopic threshold corresponding to the alarm characteristic information; and if the repeated alarm amount is larger than the target stroboscopic threshold value, determining that the type of the target alarm information is stroboscopic alarm, converting the target alarm information into a corresponding stroboscopic work order, and sending the stroboscopic work order to the target equipment.
Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware. With this understanding in mind, the above-described technical solutions may be embodied in the form of a software product, which can be stored in a computer-readable storage medium such as ROM/RAM, magnetic disk, optical disk, etc., and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the method described in each embodiment or some portions of the embodiments.
Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.
Claims (8)
1. A strobe alarm dispatch control method is characterized by comprising the following steps:
acquiring target alarm information in a preset period, wherein the target alarm information comprises repeated alarm amount and alarm characteristic information;
determining a target stroboscopic threshold corresponding to the alarm characteristic information;
if the repeated alarm amount is larger than the target stroboscopic threshold value, determining that the type of the target alarm information is stroboscopic alarm, converting the target alarm information into a corresponding stroboscopic work order and sending the stroboscopic work order to target equipment;
before the obtaining of the target alarm information in the preset period, the method further includes:
calculating a stroboscopic threshold corresponding to each alarm characteristic information according to historical alarm data;
the calculating a stroboscopic threshold corresponding to each alarm characteristic information according to the historical alarm data specifically includes:
for each alarm characteristic information, acquiring alarm data and a minimum threshold value in a preset historical time period;
calculating an average stroboscopic threshold value of the alarm characteristic information in a preset historical time period according to alarm data in the historical time period;
taking the maximum value of the minimum threshold value and the average stroboscopic threshold value as a stroboscopic threshold value corresponding to the alarm characteristic information;
the minimum threshold value is determined according to the duration of a preset historical time period and the minimum dispatch time delay of the alarm.
2. The method according to claim 1, wherein the obtaining of the target alarm information in the preset period includes:
counting the number of similar alarm information in a preset period, wherein the similar alarm information is alarm information with all consistent preset information items, and the preset information items comprise the alarm characteristic information;
and generating the target alarm information according to the number of the similar alarm information and the preset information items.
3. The method according to claim 1, wherein the alarm characteristic information is specifically an alarm name; correspondingly, the determining the target strobe threshold corresponding to the alarm characteristic information includes:
and determining a target stroboscopic threshold corresponding to the alarm name.
4. The method of claim 1, wherein the target strobe threshold comprises a first strobe threshold and a second strobe threshold, the second strobe threshold being greater than the first strobe threshold; correspondingly, the converting the target alarm information into a corresponding stroboscopic work order and sending the stroboscopic work order to the target device includes:
if the repeated alarm amount is larger than the first stroboscopic threshold value and smaller than the second stroboscopic threshold value, converting the target alarm information into a first stroboscopic work order and sending the first stroboscopic work order to target equipment, wherein the first stroboscopic work order comprises a first work order processing time limit;
if the repeated alarm amount is larger than the second stroboscopic threshold value, converting the target alarm information into a second stroboscopic work order and sending the second stroboscopic work order to the target equipment, wherein the second stroboscopic work order comprises a second work order processing time limit;
and the first work order processing time limit is larger than the second work order processing time limit.
5. The method of claim 1, further comprising:
and if the repeated alarm amount is smaller than the target stroboscopic threshold value, determining that the type of the target alarm information is a normal alarm, converting the target alarm information into a normal work order and sending the normal work order to the target equipment.
6. A strobe alarm dispatch control system, comprising:
the system comprises an acquisition module, a processing module and a processing module, wherein the acquisition module is used for acquiring target alarm information in a preset period, and the target alarm information comprises repeated alarm amount and alarm characteristic information;
a threshold determination module, configured to determine a target strobe threshold corresponding to the warning feature information;
the dispatch module is used for determining that the type of target alarm information is a stroboscopic alarm if the repeated alarm amount is larger than the target stroboscopic threshold value, converting the target alarm information into a corresponding stroboscopic work order and sending the stroboscopic work order to target equipment;
the system further comprises:
the historical statistic module is used for calculating a stroboscopic threshold value corresponding to each alarm characteristic information according to historical alarm data;
the history statistics module specifically comprises:
the acquiring unit is used for acquiring alarm data and a lowest threshold value in a preset historical time period for each alarm characteristic information;
the computing unit is used for computing an average stroboscopic threshold value of the alarm characteristic information in a preset historical time period according to alarm data in the historical time period;
a determining unit, configured to use a maximum value of the minimum threshold and the average strobe threshold as a strobe threshold corresponding to the warning feature information;
the minimum threshold value is determined according to the duration of a preset historical time period and the minimum dispatching time delay of the alarm.
7. An electronic device, comprising a memory and a processor, wherein the processor and the memory communicate with each other via a bus; the memory stores program instructions executable by the processor, the processor invoking the program instructions to perform the method of any of claims 1 to 5.
8. A non-transitory computer-readable storage medium storing computer instructions that cause a computer to perform the method of any one of claims 1 to 5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811340884.XA CN111181751B (en) | 2018-11-12 | 2018-11-12 | Stroboscopic alarm dispatch control method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811340884.XA CN111181751B (en) | 2018-11-12 | 2018-11-12 | Stroboscopic alarm dispatch control method and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN111181751A CN111181751A (en) | 2020-05-19 |
| CN111181751B true CN111181751B (en) | 2022-10-18 |
Family
ID=70657088
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811340884.XA Active CN111181751B (en) | 2018-11-12 | 2018-11-12 | Stroboscopic alarm dispatch control method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111181751B (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111626447A (en) * | 2020-05-28 | 2020-09-04 | 中国联合网络通信集团有限公司 | Time-delay-based order dispatching processing method, device, equipment and storage medium |
| CN114915994A (en) * | 2021-02-09 | 2022-08-16 | 华为技术有限公司 | Network problem processing method, equipment and system |
| CN114664062B (en) * | 2022-03-30 | 2024-06-11 | 中国农业银行股份有限公司 | Alarm suppressing method based on event time and water line time and related device |
| CN114884797A (en) * | 2022-04-27 | 2022-08-09 | 中国联合网络通信集团有限公司 | Alarm information processing method, device, equipment and storage medium |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101014179A (en) * | 2007-02-14 | 2007-08-08 | 中兴通讯股份有限公司 | Apparatus and method for realizing warning and anti-jitter in communication system |
| CN106411557A (en) * | 2015-08-03 | 2017-02-15 | 中兴通讯股份有限公司 | Alarm processing method and device |
| CN106656590A (en) * | 2016-12-14 | 2017-05-10 | 北京亿阳信通科技有限公司 | Method and device for processing network equipment alarm message storm |
| CN106778873A (en) * | 2016-12-19 | 2017-05-31 | 北京市天元网络技术股份有限公司 | A kind of warning information classification method of disposal and device based on white list rule |
| CN106936621A (en) * | 2015-12-31 | 2017-07-07 | 中国移动通信集团广东有限公司 | A kind of work order storm control method, apparatus and system |
-
2018
- 2018-11-12 CN CN201811340884.XA patent/CN111181751B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101014179A (en) * | 2007-02-14 | 2007-08-08 | 中兴通讯股份有限公司 | Apparatus and method for realizing warning and anti-jitter in communication system |
| CN106411557A (en) * | 2015-08-03 | 2017-02-15 | 中兴通讯股份有限公司 | Alarm processing method and device |
| CN106936621A (en) * | 2015-12-31 | 2017-07-07 | 中国移动通信集团广东有限公司 | A kind of work order storm control method, apparatus and system |
| CN106656590A (en) * | 2016-12-14 | 2017-05-10 | 北京亿阳信通科技有限公司 | Method and device for processing network equipment alarm message storm |
| CN106778873A (en) * | 2016-12-19 | 2017-05-31 | 北京市天元网络技术股份有限公司 | A kind of warning information classification method of disposal and device based on white list rule |
Also Published As
| Publication number | Publication date |
|---|---|
| CN111181751A (en) | 2020-05-19 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN111181751B (en) | Stroboscopic alarm dispatch control method and system | |
| CN107871190B (en) | Service index monitoring method and device | |
| US20230394950A1 (en) | Systems and methods for managing smart alarms | |
| CN111885012B (en) | Network situation perception method and system based on information acquisition of various network devices | |
| CN102447570A (en) | Monitoring device and method based on health degree analysis | |
| CN101808351B (en) | Method and system for business impact analysis | |
| CN103544093A (en) | Monitoring and alarm control method and system | |
| CN111865407B (en) | Intelligent early warning method, device, equipment and storage medium for optical channel performance degradation | |
| EP2887728A1 (en) | Technique for performance management in a mobile communications network | |
| JP2010531553A (en) | Statistical method and system for network anomaly detection | |
| CN107465575A (en) | The monitoring method and system of a kind of cluster | |
| CN111426949B (en) | Electromagnetic valve health assessment method, device and equipment and readable storage medium | |
| CN102882701A (en) | Alarm system and method for intelligently monitoring power grid core service data | |
| CN112116123A (en) | Intelligent alarm method and system based on dynamic baseline | |
| US8661113B2 (en) | Cross-cutting detection of event patterns | |
| CN111176953A (en) | Anomaly detection and model training method thereof, computer equipment and storage medium | |
| CN110929896A (en) | Security analysis method and device for system equipment | |
| CN111881185A (en) | Data monitoring method, device, equipment and storage medium | |
| US20150120940A1 (en) | Apparatus and method for changing resource using pattern information, and recording medium using the same | |
| CN116010897A (en) | Method and device for detecting data abnormality, electronic equipment and storage medium | |
| CN114860543A (en) | Anomaly detection method, device, equipment and computer readable storage medium | |
| CN114398222A (en) | Method for declaratively visually configuring Prometheus monitoring alarm | |
| CN109218062B (en) | Internet service alarm method and device based on confidence interval | |
| CN108737164A (en) | A kind of telecommunication network Real-time Alarm filter method and device | |
| CN111327442B (en) | Complaint early warning threshold value obtaining method and device based on control chart |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |