CN112346934A - Intelligent alarm method - Google Patents
Intelligent alarm method Download PDFInfo
- Publication number
- CN112346934A CN112346934A CN202011247420.1A CN202011247420A CN112346934A CN 112346934 A CN112346934 A CN 112346934A CN 202011247420 A CN202011247420 A CN 202011247420A CN 112346934 A CN112346934 A CN 112346934A
- Authority
- CN
- China
- Prior art keywords
- alarm
- pool
- class
- alarm information
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 55
- 230000002596 correlated effect Effects 0.000 claims abstract description 8
- 238000012545 processing Methods 0.000 claims description 20
- 238000010586 diagram Methods 0.000 description 7
- 230000008569 process Effects 0.000 description 7
- 238000004891 communication Methods 0.000 description 4
- 230000009471 action Effects 0.000 description 3
- 238000012549 training Methods 0.000 description 3
- 238000013528 artificial neural network Methods 0.000 description 2
- 238000004422 calculation algorithm Methods 0.000 description 2
- 238000004590 computer program Methods 0.000 description 2
- 230000006872 improvement Effects 0.000 description 2
- 238000012423 maintenance Methods 0.000 description 2
- 238000005259 measurement Methods 0.000 description 2
- 238000012544 monitoring process Methods 0.000 description 2
- 230000002776 aggregation Effects 0.000 description 1
- 238000004220 aggregation Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 230000000875 corresponding effect Effects 0.000 description 1
- 238000013500 data storage Methods 0.000 description 1
- 230000002950 deficient Effects 0.000 description 1
- 230000003111 delayed effect Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 239000000835 fiber Substances 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 230000004927 fusion Effects 0.000 description 1
- 230000010365 information processing Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
- 230000001737 promoting effect Effects 0.000 description 1
- 238000011160 research Methods 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 239000007787 solid Substances 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
- G06F11/3006—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3055—Monitoring arrangements for monitoring the status of the computing system or of the computing system component, e.g. monitoring if the computing system is on, off, available, not available
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3065—Monitoring arrangements determined by the means or processing involved in reporting the monitored data
- G06F11/3072—Monitoring arrangements determined by the means or processing involved in reporting the monitored data where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3089—Monitoring arrangements determined by the means or processing involved in sensing the monitored data, e.g. interfaces, connectors, sensors, probes, agents
- G06F11/3093—Configuration details thereof, e.g. installation, enabling, spatial arrangement of the probes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F18/00—Pattern recognition
- G06F18/20—Analysing
- G06F18/23—Clustering techniques
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Quality & Reliability (AREA)
- Data Mining & Analysis (AREA)
- Computing Systems (AREA)
- Computer Vision & Pattern Recognition (AREA)
- Bioinformatics & Cheminformatics (AREA)
- Evolutionary Computation (AREA)
- Evolutionary Biology (AREA)
- Bioinformatics & Computational Biology (AREA)
- Artificial Intelligence (AREA)
- Life Sciences & Earth Sciences (AREA)
- Mathematical Physics (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
The invention provides an intelligent warning method, an intelligent warning device, warning equipment and a computer readable storage medium, wherein the intelligent warning method comprises the following steps: acquiring real-time input alarm information; based on a single link clustering principle, utilizing topological distance among alarm information to cluster the alarm information with correlation to form at least one alarm pool, wherein the alarm pool comprises a first class alarm pool and a second class alarm pool, the number of the alarm information in the first class alarm pool is one, and the number of the alarm information in the second class alarm pool is more than one; within the preset time, if no new alarm information is added in the first class alarm pool, the alarm information in the first class alarm pool is directly output, and if no new alarm information is added in the second class alarm pool, the alarm information in the second class alarm pool is output in a correlated manner based on the second class alarm pool. The invention reduces the items of the alarm information to a great extent, does not need configuration or has smaller configuration amount, greatly improves the feasibility of engineering implementation and reduces the cost.
Description
Technical Field
The present invention relates to the field of network alarm technologies, and in particular, to an intelligent alarm method, an intelligent alarm device, an alarm device, and a computer-readable storage medium.
Background
In recent years, with the improvement of the degree of informatization, the amount of information accessed by a network communication system such as a monitoring system is larger and larger, when a large amount of alarm information is generated, operation and maintenance personnel are easy to be dazzled and cannot catch the key point, and the important alarm information is likely to be missed, so that the processing of alarm accidents is delayed, and further chain accidents are caused. Because intelligent alarm has important significance to operation and maintenance of network communication systems, a great deal of research and practice is also carried out in the aspect of intelligent alarm at home and abroad.
The existing intelligent alarm method mainly comprises an expert system, an analytical model, a Petri network, an artificial neural network, a Bayesian network, multi-source information fusion and the like. These methods have been developed over the years, and although they have some fault tolerance and adaptability, they are difficult to put into practical use in a network communication system. The major disadvantages of these methods include: some methods are established on the basis that the time sequence of various acquired alarm information is accurate and the content is complete, in practical application, the conditions are often difficult to guarantee, and especially when the fault speed of a power system is very high, the time sequence of the alarm information reaching a monitoring system is difficult to guarantee, so that the problems that the rule cannot be matched or the wrong rule cannot be matched and the like are caused; most methods need a knowledge base, the configuration workload is very large, the professional requirement is very strong, although higher accuracy can be achieved, the engineering implementation difficulty is high, the cost is high, and only a scheduling system and a demonstration station which are not very sensitive in cost are configured from the implementation condition of a national power grid; some warning algorithms based on neural networks require a large amount of data for training, and training data are deficient and poor in quality in practical application, and a large amount of manual intervention is required for training a model.
Therefore, there is a need for an improvement of the above intelligent warning method.
Disclosure of Invention
The technical problem to be solved by the invention is as follows: the intelligent warning method, the intelligent warning device, the warning equipment and the computer readable storage medium are provided, and the problems that the existing intelligent warning method is high in engineering implementation difficulty and high in cost are solved.
In order to solve the technical problems, the invention adopts the technical scheme that:
a first aspect of an embodiment of the present invention provides an intelligent warning method, including:
acquiring real-time input alarm information;
based on a single link clustering principle, utilizing the topological distance between the alarm information to cluster the alarm information with correlation to form at least one alarm pool, wherein the alarm pool comprises a first class alarm pool and a second class alarm pool, the number of the alarm information in the first class alarm pool is one, and the number of the alarm information in the second class alarm pool is more than one;
within the preset time, if no new alarm information is added into the first class alarm pool, directly outputting the alarm information in the first class alarm pool, and if no new alarm information is added into the second class alarm pool, outputting the alarm information in the second class alarm pool in a correlated manner based on the second class alarm pool.
In some embodiments, the clustering, based on the single link clustering principle, the alarm information with correlation is clustered by using the topological distance between the alarm information to form at least one alarm pool, specifically including:
if the number of the alarm information is one, the alarm information forms a class of alarm pool independently;
if the number of the alarm information is more than one, acquiring the topological distance between the alarm information;
and clustering the alarm information according to the topological distance between the alarm information to form at least one class alarm pool and/or at least one class II alarm pool.
In some embodiments, the clustering the alarm information according to the topological distance between the alarm information to form at least one primary alarm pool and/or at least one secondary alarm pool specifically includes:
clustering the alarm information of which the topological distances from the other alarm information are outside a preset range to independently form at least one type of alarm pool;
and clustering the alarm information of which the topological distance is within a preset range to form at least one class I/II alarm pool.
In some embodiments, the clustering the alarm information according to the topological distance between the alarm information to form at least one primary alarm pool and/or at least one secondary alarm pool further comprises:
if the topological distance between the alarm information in one class of alarm pool and the newly acquired alarm information is within a preset range, clustering the class of alarm pool and the newly acquired alarm information to form a class II alarm pool; alternatively, the first and second electrodes may be,
and if the topological distance between the alarm information in some alarm pools of the first class and the newly acquired alarm information is within a preset range, clustering some alarm pools of the first class and the newly acquired alarm information to form a second class alarm pool.
In some embodiments, the clustering the alarm information according to the topological distance between the alarm information to form at least one primary alarm pool and/or at least one secondary alarm pool further comprises:
if the topological distance between the alarm information in one of the second-class alarm pools and the newly acquired alarm information is within a preset range, the second-class alarm pools contain the newly acquired alarm information; alternatively, the first and second electrodes may be,
and if the topological distance between the alarm information in some two-class alarm pools and the newly acquired alarm information is within a preset range, clustering some two-class alarm pools and the newly acquired alarm information to form new two-class alarm pools.
In some embodiments, the method for outputting alarm information in a first class alarm pool includes outputting alarm information in a first class alarm pool directly if no new alarm information is added to the first class alarm pool, and outputting alarm information in a second class alarm pool based on the second class alarm pool after associating the alarm information in the second class alarm pool, where the second class alarm pool has a priority and a timestamp, and the method further includes:
taking the alarm information in the first class alarm pool as a first class of main alarm information, and outputting a processing plan of the first class of main alarm information;
and taking the alarm information with the highest priority in the second-class alarm pools as second-class main alarm information, and outputting a processing plan of the second-class main alarm information, wherein if a plurality of alarm information with the highest priority in the second-class alarm pools exist, the alarm information with the earliest timestamp is selected as the second-class main alarm information.
In some embodiments, the outputting the processing plan for the class of main alarm information specifically includes:
outputting a processing plan of the measuring point configuration of the class of main alarm information;
the processing plan for outputting the two types of main alarm information specifically comprises:
and outputting a processing plan of the measuring point configuration of the two types of main alarm information.
A second aspect of an embodiment of the present invention provides an intelligent warning device, including:
the acquisition module is used for acquiring the alarm information input in real time;
the clustering module is used for clustering the alarm information with correlation by using the topological distance between the alarm information based on a single link clustering principle to form at least one alarm pool, wherein the alarm pool comprises a first class alarm pool and a second class alarm pool, the number of the alarm information in the first class alarm pool is one, and the number of the alarm information in the second class alarm pool is more than one;
and the output module is used for directly outputting the alarm information in the first class alarm pool if no new alarm information is added in the first class alarm pool within the preset time, and outputting the alarm information in the second class alarm pool in a correlated manner based on the second class alarm pool if no new alarm information is added in the second class alarm pool.
A third aspect of the embodiments of the present invention provides an intelligent warning device, including: a storage device for storing one or more programs and one or more processors, wherein the one or more programs, when executed by the one or more processors, cause the one or more processors to perform the method according to the first aspect of an embodiment of the present invention.
A fourth aspect of embodiments of the present invention provides a computer-readable storage medium having stored thereon executable instructions that, when executed, perform a method according to the first aspect of embodiments of the present invention.
From the above description, compared with the prior art, the invention has the following beneficial effects:
based on a single link clustering principle, the alarm information with correlation is clustered by using the topological distance between the alarm information input in real time to form a first class alarm pool and/or a second class alarm pool, the alarm information in the first class alarm pool without adding new alarm information is directly output within a preset time, and the alarm information in the second class alarm pool without adding new alarm information is output in a correlation manner with the second class alarm pool. According to the invention, in a large amount of alarm information, the alarm information with correlation is clustered based on the topological distance between the alarm information, so that the items of the alarm information are reduced to a great extent, configuration is not required or the configuration amount is small, the feasibility of engineering implementation is greatly improved, and the cost is reduced.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below. It is to be understood that the drawings in the following description are of some, but not all, embodiments of the invention. For a person skilled in the art, other figures can also be obtained from the provided figures without inventive effort.
Fig. 1 is a schematic flow chart of an intelligent warning method according to an embodiment of the present invention;
fig. 2 is a schematic flowchart of step S2 in fig. 1 according to an embodiment of the present invention;
fig. 3 is a flowchart illustrating a specific process of step S23 in fig. 2 according to an embodiment of the present invention;
FIG. 4 is another schematic flow chart of an intelligent warning method according to an embodiment of the present invention;
FIG. 5 is a block diagram of an intelligent warning device according to an embodiment of the present invention;
FIG. 6 is a block diagram of an intelligent warning device according to an embodiment of the present invention;
fig. 7 is a block diagram of a computer-readable storage medium according to an embodiment of the present invention.
Detailed Description
For purposes of promoting a clear understanding of the objects, aspects and advantages of the invention, reference will now be made in detail to the present embodiments of the invention, examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to the same or similar elements throughout. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention. In addition, the technical features involved in the embodiments of the present invention described below may be combined with each other as long as they do not conflict with each other.
Example 1
Referring to fig. 1, fig. 1 is a schematic flow chart of an intelligent warning method according to an embodiment of the present invention.
As shown in fig. 1, the intelligent warning method according to the first embodiment of the present invention includes the following steps S1 to S3.
S1, acquiring alarm information input in real time;
s2, based on the single link clustering principle, utilizing the topological distance between the alarm information to cluster the alarm information with correlation to form at least one alarm pool, wherein the alarm pool comprises a first class alarm pool and a second class alarm pool, the number of the alarm information in the first class alarm pool is one, and the number of the alarm information in the second class alarm pool is more than one;
and S3, directly outputting the alarm information in the first class alarm pool if no new alarm information is added in the first class alarm pool, and outputting the alarm information in the second class alarm pool based on the second class alarm pool if no new alarm information is added in the second class alarm pool within a preset time.
It should be noted that the single-link clustering principle is an aggregation type, which is a process of gradually constructing larger and larger clusters from completely fragmented data. In the case of no stopping rule added to the chained clustering, the result of the chained clustering can be described by a clustering system tree diagram, i.e. a tree composed of a certain domain subset, whose leaf nodes are the singleton sets and root nodes are the universe.
It should be further noted that the commonly used stopping rules of chained clustering include two types, wherein the first stopping rule is to set a fixed parameter k, and when the number of clusters reaches k, the clustering is stopped; the second stopping rule is to set a maximum upper limit for the domain subset spacing, and stop clustering if all component distances exceed this maximum upper limit in a certain iteration (the principle of this stopping rule is that similar samples are very close in feature space and are clustered in a smaller region, while samples of different classes are very far in feature space). Therefore, by setting a certain distance upper limit, the clustering of a group can be timely converged and stopped after the clustering of a group is finished, so as to start the clustering of a new group. In practical application, the chain clustering can be simplified into the calculation of solving the 'connected component' in the graph theory, and the efficiency is higher.
The intelligent warning method provided by the first embodiment of the invention is based on the single link clustering principle, utilizes the topological distance between the warning information input in real time to cluster the warning information with correlation to form a first-class warning pool and/or a second-class warning pool, directly outputs the warning information in the first-class warning pool without adding new warning information within preset time, and associates and outputs the warning information in the second-class warning pool without adding new warning information with the second-class warning pool. According to the invention, in a large amount of alarm information, the alarm information with correlation is clustered based on the topological distance between the alarm information, so that the items of the alarm information are reduced to a great extent, configuration is not required or the configuration amount is small, the feasibility of engineering implementation is greatly improved, and the cost is reduced.
Example 2
Referring to fig. 2 and fig. 3, fig. 2 is a schematic flowchart illustrating a specific process of step S2 in fig. 1 according to an embodiment of the present invention; fig. 3 is a schematic flowchart of step S23 in fig. 2 according to an embodiment of the present invention.
Compared with the intelligent warning method provided by the first embodiment of the present invention, the second embodiment of the present invention designs step S2 in detail.
As shown in fig. 2, the present embodiment provides a specific flow of step S2, which includes the following steps S21 to S23.
S21, if the number of the alarm information is one, the alarm information forms a class of alarm pool separately;
s22, if the number of the alarm information is more than one, acquiring the topological distance among the alarm information;
and S23, clustering the alarm information according to the topological distance among the alarm information to form at least one first class alarm pool and/or at least one second class alarm pool.
Specifically, the present embodiment further provides a specific flow of the step S23, which includes the following steps S231 to S234.
S231, clustering the alarm information of which the topological distances from the alarm information are outside the preset range to form at least one alarm pool;
s232, clustering the alarm information of which the topological distance is within a preset range to form at least one class I/II alarm pool;
s233, if the topological distance between the alarm information in a certain one-class alarm pool and the newly acquired alarm information is within a preset range, clustering the one-class alarm pool and the newly acquired alarm information to form a second-class alarm pool; or if the topological distance between the alarm information in the first class alarm pool and the newly acquired alarm information is within a preset range, clustering the first class alarm pool and the newly acquired alarm information to form a second class alarm pool;
s234, if the topological distance between the alarm information in one of the first and second alarm pools and the newly acquired alarm information is within a preset range, the second alarm pool receives the newly acquired alarm information; or if the topological distance between the alarm information in the certain two-class alarm pools and the newly acquired alarm information is within the preset range, clustering the certain two-class alarm pools and the newly acquired alarm information to form new two-class alarm pools.
Example 3
Referring to fig. 4, fig. 3 is another schematic flow chart of the intelligent warning method according to the embodiment of the present invention.
Compared with the intelligent warning method provided by the first embodiment of the invention, the third embodiment of the invention has different step flows.
In this embodiment, the alarm information in the class two alarm pool has a priority and a timestamp.
As shown in fig. 3, the present embodiment provides another intelligent warning method, which includes the following steps S1 to S5.
S1, acquiring alarm information input in real time;
s2, based on the single link clustering principle, utilizing the topological distance between the alarm information to cluster the alarm information with correlation to form at least one alarm pool, wherein the alarm pool comprises a first class alarm pool and a second class alarm pool, the number of the alarm information in the first class alarm pool is one, and the number of the alarm information in the second class alarm pool is more than one;
s3, in a preset time, if no new alarm information is added in the first class alarm pool, directly outputting the alarm information in the first class alarm pool, and if no new alarm information is added in the second class alarm pool, outputting the alarm information in the second class alarm pool in a correlated manner based on the second class alarm pool;
s4, taking the alarm information in the first class alarm pool as a first class main alarm information, and outputting a first class main alarm information processing plan;
here, a processing plan of the measurement point configuration of one type of main alarm information is output. It should be appreciated that in some other embodiments, other configurations of processing plans for a type of primary alert information are output.
S5, taking the alarm information with the highest priority in the second-class alarm pool as the second-class main alarm information, and outputting a processing plan of the second-class main alarm information, wherein if the alarm information with the highest priority in the second-class alarm pool is multiple, the alarm information with the earliest timestamp is selected as the second-class main alarm information;
here, a processing plan of the measurement point arrangement of the two types of main alarm information is output. It should be understood that in some other embodiments, other configurations of processing plans for the second type of primary alert information are output.
Example 4
In order to clearly understand the intelligent warning method provided in the embodiment of the present invention, the following description is made in conjunction with the first embodiment to the third embodiment of the present invention, and the intelligent warning method includes the following steps S101 to S109.
S101, acquiring alarm information input in real time;
s102, if the number of the alarm information is one, the alarm information forms a class of alarm pool independently;
s103, if the number of the alarm information is more than one, acquiring the topological distance between the alarm information;
s104, clustering the alarm information of which the topological distances from the alarm information are outside a preset range to form at least one alarm pool;
s105, clustering the alarm information of which the topological distance is within a preset range to form at least one class I/II alarm pool;
s106, if the topological distance between the alarm information in a certain one-class alarm pool and the newly acquired alarm information is within a preset range, clustering the one-class alarm pool and the newly acquired alarm information to form a second-class alarm pool; or if the topological distance between the alarm information in the first class alarm pool and the newly acquired alarm information is within a preset range, clustering the first class alarm pool and the newly acquired alarm information to form a second class alarm pool;
s107, if the topological distance between the alarm information in a certain class I or II alarm pool and the newly acquired alarm information is within a preset range, the class II alarm pool receives the newly acquired alarm information; or if the topological distance between the alarm information in some two-class alarm pools and the newly acquired alarm information is within the preset range, clustering some two-class alarm pools and the newly acquired alarm information to form new two-class alarm pools;
s108, taking the alarm information in the first-class alarm pool as first-class main alarm information, and outputting a processing plan of the first-class main alarm information;
and S109, taking the alarm information with the highest priority in the second-class alarm pools as second-class main alarm information, and outputting a processing plan of the second-class main alarm information, wherein if a plurality of alarm information with the highest priority in the second-class alarm pools exist, the alarm information with the earliest timestamp is selected as the second-class main alarm information.
Example 5
Referring to fig. 5, fig. 5 is a block diagram of an intelligent warning device according to an embodiment of the present invention.
As shown in fig. 5, corresponding to the intelligent warning method provided in the first embodiment of the present invention, an intelligent warning device 100 provided in the fifth embodiment of the present invention includes:
the acquisition module 101 is used for acquiring the alarm information input in real time;
the clustering module 102 is configured to cluster alarm information with correlation based on a single link clustering principle by using a topological distance between the alarm information to form at least one alarm pool, where the alarm pool includes a first class alarm pool and a second class alarm pool, the number of alarm information in the first class alarm pool is one, and the number of alarm information in the second class alarm pool is more than one;
and the output module 103 is used for directly outputting the alarm information in the first class alarm pool if no new alarm information is added in the first class alarm pool within a preset time, and outputting the alarm information in the second class alarm pool in a correlated manner based on the second class alarm pool if no new alarm information is added in the second class alarm pool.
Example 6
Referring to fig. 6, fig. 6 is a block diagram of an intelligent warning device according to an embodiment of the present invention.
As shown in fig. 6, an intelligent warning device 200 according to a sixth embodiment of the present invention includes: a storage device 201 and one or more processors 202, the storage device 201 being configured to store one or more programs, wherein the one or more programs, when executed by the one or more processors 202, cause the one or more processors 202 to perform the method according to any one of the first to fourth embodiments of the present invention.
It should be noted that the intelligent warning device 200 provided in the present embodiment further includes a bus 203 for communication connection between the storage 201 and the one or more processors 202.
Example 7
Referring to fig. 7, fig. 7 is a block diagram of a computer-readable storage medium according to an embodiment of the present invention.
As shown in fig. 7, a seventh embodiment of the invention provides a computer-readable storage medium 300 having stored thereon an executable instruction 301, where the executable instruction 301 is executed to perform the method according to any one of the first to fourth embodiments of the invention.
The steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of the two. A software module may reside in Random Access Memory (RAM), memory, Read Only Memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.
In the above embodiments, the implementation may be wholly or partially realized by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loaded and executed on a computer, cause the processes or functions described in accordance with the invention to occur, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored on a computer readable storage medium or transmitted from one computer readable storage medium to another, for example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by wire (e.g., coaxial cable, fiber optic, digital subscriber line) or wirelessly (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device, such as a server, a data center, etc., that incorporates one or more of the available media. The usable medium may be a magnetic medium (e.g., floppy Disk, hard Disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., Solid State Disk), among others.
It should be noted that, in the summary of the present invention, each embodiment is described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments may be referred to each other. For the product class embodiment, since it is similar to the method class embodiment, the description is relatively simple, and for the relevant points, refer to the partial description of the method class embodiment.
It is further noted that, in the present disclosure, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
The previous description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined in this disclosure may be applied to other embodiments without departing from the spirit or scope of the disclosure. Thus, the present disclosure is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.
Claims (10)
1. An intelligent warning method is characterized by comprising the following steps:
acquiring real-time input alarm information;
based on a single link clustering principle, utilizing the topological distance between the alarm information to cluster the alarm information with correlation to form at least one alarm pool, wherein the alarm pool comprises a first class alarm pool and a second class alarm pool, the number of the alarm information in the first class alarm pool is one, and the number of the alarm information in the second class alarm pool is more than one;
within the preset time, if no new alarm information is added into the first class alarm pool, directly outputting the alarm information in the first class alarm pool, and if no new alarm information is added into the second class alarm pool, outputting the alarm information in the second class alarm pool in a correlated manner based on the second class alarm pool.
2. The intelligent warning method according to claim 1, wherein the clustering of the warning information having correlation based on the single-link clustering principle using the topological distance between the warning information to form at least one warning pool specifically comprises:
if the number of the alarm information is one, the alarm information forms a class of alarm pool independently;
if the number of the alarm information is more than one, acquiring the topological distance between the alarm information;
and clustering the alarm information according to the topological distance between the alarm information to form at least one class alarm pool and/or at least one class II alarm pool.
3. The intelligent alarm method according to claim 2, wherein the clustering the alarm information according to the topological distance between the alarm information to form at least one primary alarm pool and/or at least one secondary alarm pool specifically comprises:
clustering the alarm information of which the topological distances from the other alarm information are outside a preset range to independently form at least one type of alarm pool;
and clustering the alarm information of which the topological distance is within a preset range to form at least one class I/II alarm pool.
4. The intelligent warning method according to claim 3, wherein the clustering the warning information according to the topological distance between the warning information to form at least one primary warning pool and/or at least one secondary warning pool further comprises:
if the topological distance between the alarm information in one class of alarm pool and the newly acquired alarm information is within a preset range, clustering the class of alarm pool and the newly acquired alarm information to form a class II alarm pool; alternatively, the first and second electrodes may be,
and if the topological distance between the alarm information in some alarm pools of the first class and the newly acquired alarm information is within a preset range, clustering some alarm pools of the first class and the newly acquired alarm information to form a second class alarm pool.
5. The intelligent warning method according to claim 4, wherein the clustering the warning information according to the topological distance between the warning information to form at least one primary warning pool and/or at least one secondary warning pool further comprises:
if the topological distance between the alarm information in one of the second-class alarm pools and the newly acquired alarm information is within a preset range, the second-class alarm pools contain the newly acquired alarm information; alternatively, the first and second electrodes may be,
and if the topological distance between the alarm information in some two-class alarm pools and the newly acquired alarm information is within a preset range, clustering some two-class alarm pools and the newly acquired alarm information to form new two-class alarm pools.
6. The intelligent warning method according to claim 1, wherein the warning messages in the second type warning pool have priorities and timestamps, and the method further comprises, after the warning messages in the first type warning pool are output in a correlated manner based on the second type warning pool if no new warning message is added to the first type warning pool, directly outputting the warning messages in the first type warning pool, and if no new warning message is added to the second type warning pool:
taking the alarm information in the first class alarm pool as a first class of main alarm information, and outputting a processing plan of the first class of main alarm information;
and taking the alarm information with the highest priority in the second-class alarm pools as second-class main alarm information, and outputting a processing plan of the second-class main alarm information, wherein if a plurality of alarm information with the highest priority in the second-class alarm pools exist, the alarm information with the earliest timestamp is selected as the second-class main alarm information.
7. The intelligent warning method according to claim 6, wherein the processing scheme for outputting the class of main warning information specifically includes:
outputting a processing plan of the measuring point configuration of the class of main alarm information;
the processing plan for outputting the two types of main alarm information specifically comprises:
and outputting a processing plan of the measuring point configuration of the two types of main alarm information.
8. An intelligent warning device, comprising:
the acquisition module is used for acquiring the alarm information input in real time;
the clustering module is used for clustering the alarm information with correlation by using the topological distance between the alarm information based on a single link clustering principle to form at least one alarm pool, wherein the alarm pool comprises a first class alarm pool and a second class alarm pool, the number of the alarm information in the first class alarm pool is one, and the number of the alarm information in the second class alarm pool is more than one;
and the output module is used for directly outputting the alarm information in the first class alarm pool if no new alarm information is added in the first class alarm pool within the preset time, and outputting the alarm information in the second class alarm pool in a correlated manner based on the second class alarm pool if no new alarm information is added in the second class alarm pool.
9. An intelligent warning device, comprising: a storage device to store one or more programs, and one or more processors to cause the one or more processors to perform the method of any of claims 1-7 when the one or more programs are executed by the one or more processors.
10. A computer-readable storage medium having stored thereon executable instructions that, when executed, perform the method of any one of claims 1-7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011247420.1A CN112346934A (en) | 2020-11-10 | 2020-11-10 | Intelligent alarm method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011247420.1A CN112346934A (en) | 2020-11-10 | 2020-11-10 | Intelligent alarm method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN112346934A true CN112346934A (en) | 2021-02-09 |
Family
ID=74363269
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011247420.1A Pending CN112346934A (en) | 2020-11-10 | 2020-11-10 | Intelligent alarm method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112346934A (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107302449A (en) * | 2017-06-13 | 2017-10-27 | 中国工商银行股份有限公司 | Intelligent monitoring statistics and alarm processing system and method |
| CN108804574A (en) * | 2018-05-23 | 2018-11-13 | 东软集团股份有限公司 | Alarm prompt method, apparatus, computer readable storage medium and electronic equipment |
| CN109189814A (en) * | 2018-08-28 | 2019-01-11 | 南京榕树自动化系统有限公司 | A kind of prediction scheme active push method based on primary equipment warning information feature |
| CN109509327A (en) * | 2018-10-31 | 2019-03-22 | 武汉烽火众智数字技术有限责任公司 | A kind of abnormal behaviour method for early warning and device |
| CN110363381A (en) * | 2019-05-31 | 2019-10-22 | 阿里巴巴集团控股有限公司 | A kind of information processing method and device |
| CN110399261A (en) * | 2019-06-13 | 2019-11-01 | 中国科学院信息工程研究所 | A kind of system alarm clustering method based on co-occurrence figure |
-
2020
- 2020-11-10 CN CN202011247420.1A patent/CN112346934A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107302449A (en) * | 2017-06-13 | 2017-10-27 | 中国工商银行股份有限公司 | Intelligent monitoring statistics and alarm processing system and method |
| CN108804574A (en) * | 2018-05-23 | 2018-11-13 | 东软集团股份有限公司 | Alarm prompt method, apparatus, computer readable storage medium and electronic equipment |
| CN109189814A (en) * | 2018-08-28 | 2019-01-11 | 南京榕树自动化系统有限公司 | A kind of prediction scheme active push method based on primary equipment warning information feature |
| CN109509327A (en) * | 2018-10-31 | 2019-03-22 | 武汉烽火众智数字技术有限责任公司 | A kind of abnormal behaviour method for early warning and device |
| CN110363381A (en) * | 2019-05-31 | 2019-10-22 | 阿里巴巴集团控股有限公司 | A kind of information processing method and device |
| CN110399261A (en) * | 2019-06-13 | 2019-11-01 | 中国科学院信息工程研究所 | A kind of system alarm clustering method based on co-occurrence figure |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| Wang et al. | Wireless big data computing in smart grid | |
| CN111177400B (en) | Knowledge graph-based equipment, business and data associated display method and device | |
| Liu et al. | Efficient distributed query processing in large RFID-enabled supply chains | |
| Rios | Big data infrastructure for analyzing data generated by wireless sensor networks | |
| CN111552246B (en) | Equipment production line scheduling method applied to smart park and cloud computing server | |
| CN109687993A (en) | A kind of Internet of Things alarm and control system and method based on block chain | |
| Kong et al. | Multimedia data fusion method based on wireless sensor network in intelligent transportation system | |
| CN110348622A (en) | A kind of Time Series Forecasting Methods based on machine learning, system and electronic equipment | |
| Potdar et al. | Big energy data management for smart grids—Issues, challenges and recent developments | |
| CN111294248B (en) | Network element fault quality inspection method, device, equipment and medium | |
| US20210263969A1 (en) | Information processing apparatus, information exchange system, information processing method, and information processing program | |
| CN105099798A (en) | Online master station operation monitoring and evaluation method based on index system | |
| CN109449923A (en) | A kind of the quantitative analysis method and Related product of active distribution system operational flexibility | |
| CN116244481A (en) | Intelligent emergency plan pushing method applied to power system | |
| CN115934856A (en) | Method and system for constructing comprehensive energy data assets | |
| CN114398567A (en) | Multi-time-state power grid topological graph data management method and device and computer equipment | |
| CN112346934A (en) | Intelligent alarm method | |
| CN112820091B (en) | Power quality data transmission method, device, terminal equipment and medium | |
| CN104991849A (en) | Method for monitoring system resources occupied by Linux process through zabbix | |
| WO2021030638A1 (en) | Blockchain communication architecture | |
| CN114219089B (en) | Construction method and equipment of new-generation information technology industry knowledge graph | |
| CN117194668A (en) | Knowledge graph construction method, device, equipment and storage medium | |
| CN115952165A (en) | Whole-network constant value rapid checking method and system | |
| WO2016165471A1 (en) | Method and apparatus for collecting index of hadoop trunking component | |
| CN112804647A (en) | Target user tracking method, system, server and storage medium based on communication |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20210209 |