CN113132128B - Prompt information processing method, device and storage medium - Google Patents
Prompt information processing method, device and storage medium Download PDFInfo
- Publication number
- CN113132128B CN113132128B CN201911396981.5A CN201911396981A CN113132128B CN 113132128 B CN113132128 B CN 113132128B CN 201911396981 A CN201911396981 A CN 201911396981A CN 113132128 B CN113132128 B CN 113132128B
- Authority
- CN
- China
- Prior art keywords
- time
- time point
- displaying
- time axis
- prompt information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
- H04L41/064—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis involving time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
- H04L41/065—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis involving logical or physical relationship, e.g. grouping and hierarchies
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Disclosed are a prompt message processing method, a prompt message processing device and a storage medium, which belong to the technical field of the Internet. The method comprises the following steps: a time axis is displayed, and a slider for responding to a moving operation is provided on the time axis. Displaying the number of pieces of prompt information associated with a plurality of time points in the time axis based on the time axis, and displaying the prompt information associated with the time points in a time period from a starting time point in the time axis to the time point indicated by the slider. In the application, the operation and maintenance personnel can carefully check the prompt messages generated by the network at various times by moving the slider on the time axis. Therefore, operation and maintenance personnel can check the context condition when the fault occurs in the network in a time playback mode, understand the context of the fault scene, and quickly give more reliable suspected root causes, so that the root cause identification rate can be improved.
Description
Technical Field
The present application relates to the field of internet technologies, and in particular, to a method and an apparatus for processing a hint information, and a storage medium.
Background
In a large network, a plurality of nodes are generally distributed, and the nodes are connected with each other through a communication medium such as an optical fiber. When a communication medium in the network is interrupted or a node fails, objects in the network related to the communication medium or the node may report alarm information, thereby inducing a series of alarm information. In this case, a suspected root cause (PRC) needs to be identified from the series of alarm information, so as to facilitate subsequent maintenance of the network according to the suspected root cause.
Disclosure of Invention
The application provides a prompt message processing method, a prompt message processing device and a storage medium, which can improve the root cause identification rate. The technical scheme is as follows:
in a first aspect, a method for processing hint information is provided. In the method, a time axis on which a slider for responding to a moving operation is provided is displayed. The method includes displaying the number of pieces of prompt information associated with a plurality of time points in the time axis based on the time axis, and displaying the prompt information associated with the time points in a time period from a starting time point in the time axis to a time point indicated by the slider.
It should be noted that the prompt message may be an active report of an object in the network to the network management system. If the network has an abnormal condition, the object related to the abnormal condition can report the prompt information. For example, the prompt message may include at least one of alarm message, configuration change message, service failure message, and the like.
In the application, the operation and maintenance personnel can carefully check the prompt messages generated by the network at various times by moving the slider on the time axis. Therefore, operation and maintenance personnel can check the context condition when the fault occurs in the network in a time playback mode, understand the context of the fault scene, and quickly give more reliable suspected root causes, so that the root cause identification rate can be improved.
The operation of displaying the number of pieces of prompt information associated with the multiple time points in the time axis based on the time axis may be: and displaying the number of pieces of prompting information related to each time point in a plurality of time points in the time axis on one side or two sides of the time axis. Therefore, the operation and maintenance personnel can conveniently and quickly acquire the prompt information number of the network at each time point.
When the prompt information includes different types of prompt information, the number of pieces of prompt information of each type is displayed. For example, when the notification information includes alarm information, configuration change information, and service failure information, the number of pieces of alarm information, the number of pieces of configuration change information, and the number of pieces of service failure information are displayed, respectively.
Further, before the time axis is displayed, the prompt information in the network can be obtained, and the prompt information is associated to the time point in the time axis, which is the same as the reporting time of the prompt information.
In the present application, the prompt information in the network may be associated with a time point in a time axis, where the prompt information associated with a certain time point in the time axis is related to an abnormal situation occurring at the time point.
In a possible case, the service topology map may be constructed according to the service path in the service failure information associated with the time point indicated by the slider. The service topology map is then displayed. And then, if the query instruction is detected in the service topological graph, displaying the service data in the service fault information.
In this application, the operation and maintenance personnel can move the slider on the time axis to adjust the time point indicated by the slider. At this time, a service topological graph corresponding to the service fault information associated with the time point indicated by the slider is displayed. The operation and maintenance personnel can inquire the service data by operating the service topological graph. That is, the operation and maintenance personnel can carefully check the service fault information at the time point indicated by the slider by moving the slider on the time axis, so as to obtain the service path and the transmission level of the damaged service. Therefore, even if the network condition changes, operation and maintenance personnel can check the service condition before and after the service is damaged in a time playback mode.
Further, when the prompt message includes the alarm message, the suspected root cause probability and the root cause recommendation source of the alarm message associated with the time point in the time period may also be displayed. Because the operation and maintenance personnel can check the context condition when the fault occurs in the network in a time playback mode, the operation and maintenance personnel can quickly deduce a possible suspected root cause and roughly judge whether the suspected root cause recommended by the system is accurate enough.
In a possible case, when the hint information includes alarm information and configuration change information, a physical topological graph may be constructed according to an alarm source in the alarm information associated with the time point in the time period and an operation object in the configuration change information associated with the time point in the time period. The physical topology map is then displayed. And displaying a root cause indicator in the physical topological graph according to the suspected root cause probability of the alarm information associated with the time point in the time period, and displaying an operation indicator in the physical topological graph according to an operation object in the configuration change information associated with the time point in the time period.
Therefore, the operation and maintenance personnel can quickly acquire the suspected root cause recommended by the system and the object for carrying out configuration change from the physical topological graph, so that the operation and maintenance personnel can understand the fault context more easily, and then quickly find out the suspected root cause.
In a second aspect, there is provided a hint information processing apparatus having functionality to implement the acts of the hint information processing method of the first aspect described above. The prompt information processing device comprises at least one module, and the at least one module is used for realizing the prompt information processing method provided by the first aspect.
In a third aspect, a hint information processing apparatus is provided, where the hint information processing apparatus includes a processor and a memory, and the memory is used to store a program that supports the hint information processing apparatus to execute the hint information processing method provided by the first aspect, and to store data used to implement the hint information processing method provided by the first aspect. The processor is configured to execute programs stored in the memory. The hint information processing apparatus can also include a communication bus for establishing a connection between the processor and the memory.
In a fourth aspect, a computer-readable storage medium is provided, in which instructions are stored, and when the instructions are executed on a computer, the instructions cause the computer to execute the prompt information processing method according to the first aspect.
In a fifth aspect, there is provided a computer program product containing instructions which, when run on a computer, cause the computer to perform the hint information processing method of the first aspect described above.
The technical effects obtained by the second, third, fourth and fifth aspects are similar to the technical effects obtained by the corresponding technical means in the first aspect, and are not described herein again.
The technical scheme provided by the application can bring the following beneficial effects at least.
The operation and maintenance personnel can carefully view the prompt messages generated by the network at various times by moving the slider on the time axis. Therefore, operation and maintenance personnel can check the context condition when the fault occurs in the network in a time playback mode, understand the context of the fault scene, and quickly give more reliable suspected root cause, so that the root cause identification rate can be improved.
Drawings
FIG. 1 is a schematic structural diagram of a computer device according to an embodiment of the present disclosure;
fig. 2 is a flowchart of a method for processing prompt information according to an embodiment of the present application;
FIG. 3 is a schematic diagram of a management page provided by an embodiment of the present application;
fig. 4 is a schematic structural diagram of a prompt information processing device according to an embodiment of the present application.
Detailed Description
To make the objects, technical solutions and advantages of the present application more clear, embodiments of the present application will be described in further detail below with reference to the accompanying drawings.
Before explaining the embodiments of the present application, a brief description is given to an application scenario of the embodiments of the present application.
For a large-scale network (with the number of devices being more than ten thousand), each node in the network is connected through a communication medium such as an optical fiber. Also, the network location (e.g., core ring, aggregation ring, access link), the number of connected optical fibers, and the topology (ring/chain) of each node may vary.
Typically, there are core devices, aggregation devices, access devices, etc. in the network. Each device is provided with a plurality of ports, and a plurality of optical fibers can be connected among the devices through the ports to finally form a large network connected with the whole network. Each port, single board, network element and sub-interface in the network can detect the signal and report the alarm. Moreover, the more the number of fibers connected to the node at the intermediate position is, the more the ring is involved. The more edge-positioned nodes have fewer fibers connected, and some edge-positioned nodes may not be involved in a ring, connected only using chains. However, the nodes in the network are connected with each other on a topology to form a complex connected network.
Traffic signals flow in and out of each node in the network, and a partial traffic switch (with protection) or interruption (without protection) may be caused by interruption of any optical fiber connection or failure of any node on the network. Moreover, because signal transmission is blocked, when the downstream node cannot detect the signal, a series of nodes are triggered to report an alarm. At this time, the operation and maintenance personnel are required to identify suspected root causes from a large number of alarms so as to facilitate subsequent network maintenance. The suspected root is an alarm caused by a possible real fault point.
Due to the increasing size of networks, the number of alarms is also multiplied, even to the order of millions per day. However, the number of alarms actually caused by real fault points may be lower than thousands or even less than hundreds, and it is difficult for the operation and maintenance personnel to identify suspected root causes among a large number of alarms.
When a fault with a large influence on the network occurs (such as a critical service is damaged), it is particularly important to quickly and accurately identify the suspected root cause. Mean Time To Diagnosese (MTTD) is a key indicator for evaluating maintenance efficiency. If the recommended root of the system is inaccurate, the offline maintenance time window is delayed, maintenance labor is wasted, MTTD is enlarged, and customer satisfaction is affected. Moreover, as the network changes over time, it becomes more difficult to analyze the early-stage network failures. For this reason, it is critical for the operation and maintenance personnel to further identify the fault or provide more suspected root cause.
In a typical scenario, a LOSs of signal (LOS) alarm is reported due to service interruption caused by manual modification of a communication protocol, not by hardware-based failure. For example, a service configurator inadvertently modifies a service port pattern, resulting in service interruption and reporting a LOS alarm, with the physical fiber being normal undamaged or unfastened. In this case, if the system is off-site processed, the real fault repair time will be prolonged, and the actual repair only requires the service configuration personnel to restore the service port configuration on the system.
Fig. 1 is a schematic structural diagram of a computer device according to an embodiment of the present application. Referring to fig. 1, the computer device comprises at least one processor 101, a communication bus 102, a memory 103 and at least one communication interface 104.
The processor 101 may be a microprocessor (including a Central Processing Unit (CPU), etc.), an application-specific integrated circuit (ASIC), or may be one or more integrated circuits for controlling the execution of programs according to the present disclosure.
The communication bus 102 may include a path for communicating information between the aforementioned components.
The memory 103 may be, but is not limited to, a read-Only memory (ROM), a Random Access Memory (RAM), an electrically erasable programmable read-Only memory (EEPROM), an optical disk (including a compact disc-read-Only memory (CD-ROM), a compact disc, a laser disk, a digital versatile disk, a blu-ray disk, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and that can be accessed by a computer. The memory 103 may be self-contained and coupled to the processor 101 through a communication bus 102. The memory 103 may also be integrated with the processor 101.
The communication interface 104 may be any device, such as a transceiver, for communicating with other devices or communication networks, such as an ethernet, a Radio Access Network (RAN), a Wireless Local Area Network (WLAN), etc.
In particular implementations, processor 101 may include one or more CPUs such as CPU0 and CPU1 shown in fig. 2 as an example.
In particular implementations, a computer device may include multiple processors, such as processor 101 and processor 105 shown in FIG. 2, as one embodiment. Each of these processors may be a single core processor or a multi-core processor. A processor herein may refer to one or more devices, circuits, and/or processing cores for processing data (e.g., computer program instructions).
In particular implementations, a computer device may also include an output device 106 and an input device 107, as one embodiment. The output device 106 is in communication with the processor 101 and may display information in a variety of ways. For example, the output device 106 may be a Liquid Crystal Display (LCD), a Light Emitting Diode (LED) display device, a Cathode Ray Tube (CRT) display device, a projector (projector), or the like. The input device 107 is in communication with the processor 101 and may receive user input in a variety of ways. For example, the input device 107 may be a mouse, a keyboard, a touch screen device, a sensing device, or the like.
The computer device may be a general purpose computer device or a special purpose computer device. In a specific implementation, the computer device may be a desktop computer, a laptop computer, a network server, a palmtop computer, a mobile phone, a tablet computer, a wireless terminal device, a communication device, or an embedded device, and the embodiment of the present application does not limit the type of the computer device.
The memory 103 is used for storing the program code 110 for executing the scheme of the application, and the processor 101 is used for executing the program code 110 stored in the memory 103. The computer device may implement the hint information processing method provided by the embodiment of fig. 2 below by means of the processor 101 and the program code 110 in the memory 103.
Fig. 2 is a flowchart of a prompt information processing method provided in an embodiment of the present application, where the method is applied to a network management system, where the network management system is used to manage and maintain nodes in a network, and the network management system may be implemented by the computer device shown in fig. 1. Referring to fig. 2, the method includes:
step 201: and acquiring prompt information in the network, and associating the prompt information to a time point in a time axis, wherein the time point is the same as the reporting time of the prompt information.
It should be noted that the time axis may be displayed in the management page, and is used to represent a time period of a certain duration, such as 15 minutes. The time axis may include time points representing minimum time intervals, such as seconds.
In addition, the prompt message may be an active report of the object in the network to the network management system. If the network is abnormal, the object related to the abnormal condition can report the prompt message. For example, the prompt message may include at least one of alarm message, configuration change message, service failure message, and the like.
In addition, in the embodiment of the present application, the prompt information in the network may be associated with a time point in a time axis, where the prompt information associated with a certain time point in the time axis is related to an abnormal condition occurring at the time point.
When a certain communication medium in the network is interrupted or a certain node fails, objects related to the communication medium or the node in the network may report alarm information, so as to induce a series of alarm information. The alarm information may include an alarm name, an alarm source, an occurrence time (i.e., a reporting time), and the like, and the alarm source may be an identifier (such as a device name, an Internet Protocol (IP) address, and the like) of an object for reporting the alarm information.
When a configurator changes the configuration of an object in the network (such as communication parameters, port parameters, service parameters, etc.), the object may report configuration change information. For example, the configuration change information may be an operation log or the like. The configuration change information may include an operation name, an operation description, an operation object, an operation time (i.e., a reporting time), and the like, where the operation object may be an identifier (e.g., a device name, an IP address, and the like) of an object in which the configuration change exists.
When an object in the network detects that a service in progress fails (such as interruption, switching, degradation, stuck, etc.), the object may report service failure information. The service failure information may include a failure time (i.e., a reporting time), a service path, and service data. The service data may include a service name, a transport layer, and the like.
Specifically, step 201 may include steps (1) to (3) as follows, and the execution order of steps (1) to (3) is not limited.
(1) And acquiring alarm information in the network, and associating the alarm information to a time point in a time axis, wherein the time point is the same as the occurrence time in the alarm information.
It should be noted that, in the embodiment of the present application, the alarm information in the network may be associated with a time point in a time axis, where the alarm information associated with a certain time point in the time axis is related to an alarm occurring at the time point.
(2) And acquiring configuration change information in the network, and associating the configuration change information to a time point in a time axis, wherein the time point is the same as the operation time in the configuration change information.
In addition, in the embodiment of the present application, the configuration change information in the network may be associated with a time point in a time axis, and in this case, the configuration change information associated with a certain time point in the time axis is related to the configuration change occurring at the time point.
(3) And acquiring service fault information in the network, and associating the service fault information to a time point in a time axis, wherein the time point is the same as the fault time in the service fault information.
It should be noted that, in the embodiment of the present application, the service failure information in the network may be associated with a time point in a time axis, where the service failure information associated with a certain time point in the time axis is related to a service failure occurring at the time point.
After the time point in the time axis is associated with the prompt message in step 201, the time axis can be displayed, and the associated prompt message is displayed based on the time axis. Specifically, the method may include the following steps 202 to 205.
Step 202: and displaying the time shaft, wherein a slider used for responding to the moving operation is arranged on the time shaft.
It should be noted that the timeline can be displayed on the management page, and the timeline can generally run through the page, for example, the timeline can extend from the left end to the right end of the management page. Both ends of the time axis may be provided with a forward button and a backward button by which the time period currently shown by the time axis may be adjusted, which may have a start time point and an end time point. Wherein, the time axis can be displayed at a time point after the current ending time point by the forward button, and the time axis can be displayed at a time point before the current starting time point by the backward button.
In addition, the slider is used for indicating a time point in the time axis, and the time point indicated by the slider is a corresponding time point of the position of the slider in the time axis. The slider may respond to a move operation, which may be triggered by the operation and maintenance person, that is, the operation and maintenance person may move the slider on the time axis. For example, the operation and maintenance person may drag the slider to move on the time axis, or the operation and maintenance person may directly click a certain time point in the time axis to rapidly move the slider to a position corresponding to the time point.
Step 203: the number of pieces of prompt information associated with a plurality of time points in the time axis is displayed based on the time axis.
In addition, in the embodiment of the present application, the number of pieces of prompt information associated with a plurality of time points in the time axis may be displayed based on the time axis. Therefore, the quantity of the prompt messages generated in the network is displayed according to the time sequence, and the operation and maintenance personnel can conveniently understand the network event flow integrally.
In addition, when the prompt information includes different types of prompt information, the number of pieces of prompt information of each type is displayed separately. For example, when the notification information includes alarm information, configuration change information, and service failure information, the number of pieces of alarm information, the number of pieces of configuration change information, and the number of pieces of service failure information are displayed, respectively.
Specifically, the operation of step 203 may be: and displaying the number of pieces of prompting information related to each time point in a plurality of time points in the time axis on one side or two sides of the time axis.
It should be noted that, in addition to the region displaying the time axis, the management page may further include first regions located on both sides of the time axis. The first region may be divided into a first sub-region and a second sub-region. The first sub-region is located on one side of the time axis and the second sub-region is located on the other side of the time axis.
In addition, for any time point in the time axis, if the time point has the associated prompt information, the number of pieces of the prompt information associated with the time point can be displayed on the position corresponding to the time point in the first sub-area or the second sub-area. Therefore, the prompt information number of the network at the time point can be conveniently and quickly acquired by operation and maintenance personnel.
For example, the reminder information includes alarm information and configuration change information. For any time point in the time axis, if the time point has the associated alarm information, the number of pieces of alarm information associated with the time point can be displayed on the position corresponding to the time point in the first sub-area; if the time point has associated configuration change information, the number of pieces of configuration change information associated with the time point may be displayed at a position corresponding to the time point in the second sub-area. Therefore, operation and maintenance personnel can conveniently and quickly acquire the alarm number and the configuration change number of the network at the time point.
Step 204: and displaying the prompting information associated with the time point in the time period from the starting time point in the time axis to the time point indicated by the sliding block.
In this embodiment, the operation and maintenance person may move the slider on the time axis to adjust the time point indicated by the slider. At this time, the prompt information associated with the time point in the time period from the starting time point in the time axis to the time point indicated by the slider is displayed. That is, the operation and maintenance personnel can carefully view the prompt information of the network at each time point by moving the slider on the time axis. Therefore, operation and maintenance personnel can check the context condition when the fault occurs in the network in a time playback mode, understand the context of the fault scene, and quickly deduce more reliable suspected root cause, thereby improving the recognition rate of the root cause and further improving the MTTD.
In addition, the basis for the operation and maintenance personnel to infer the suspected root cause can be various, for example, an alarm reported by an object at the bottom layer (such as a physical layer) of a network model is more likely to be the root cause, an alarm reported by an object upstream of a signal flow link is more likely to be the root cause, an alarm reported by an object at a cross position of a signal flow link is more likely to be the root cause, an alarm with an earlier reporting time is more likely to be the root cause, an alarm with a higher alarm level is more likely to be the root cause, and the like.
For example, the prompt message includes alarm information, configuration change information, and service failure information. By introducing time playback in the embodiment of the application, operation and maintenance personnel can be guided to visually and quickly understand the fault context. The network can be clear at a glance when the configuration is changed, the alarm is generated, and the service is influenced, thereby being beneficial to operation and maintenance personnel to quickly find out the suspected root cause. Also in this case, the operation and maintenance personnel may also deduce where the fault point is and which alarms are alarms derived from the fault point, for example, an alarm may be caused by a configuration change.
It should be noted that the management page may include a second area in addition to the area displaying the time axis and the first area. For any one time point in the time period from the starting time point in the time axis to the time point indicated by the slider, if the time point has associated prompt information, the prompt information associated with the time point may be displayed in the second area.
In addition, when the prompt information includes different types of prompt information, the different types of prompt information may be displayed in different lists. For example, when the prompt message includes alarm information, configuration change information, and service failure information, the alarm information may be displayed in an alarm list, the configuration change information may be displayed in a configuration change list, and the service failure information may be displayed in a service failure list.
Moreover, when the prompt message is displayed, the viewing time of the prompt message and the number of the currently displayed prompt messages can be displayed. For example, the viewing time of the alarm information and the number of pieces of alarm information included in the alarm list may be displayed in the alarm list, and the viewing time of the configuration change information and the number of pieces of configuration change information included in the configuration change list may be displayed in the configuration change list.
For example, the reminder information may include alarm information and configuration change information. The second area can be divided into a third sub-area and a fourth sub-area, the third sub-area is used for displaying an alarm list, and the fourth sub-area is used for displaying a configuration change list. For any one time point in a time period from a starting time point in the time axis to a time point indicated by the slider, if the time point has associated alarm information, the alarm information associated with the time point can be displayed in an alarm list in a third sub-area; if the time point has associated configuration change information, the configuration change information associated with the time point may be displayed in a configuration change list in the fourth sub-area. Thus, technicians can conveniently and quickly know the details of the alarm and the configuration change.
The following describes a display mode when the presentation information includes warning information and configuration change information.
In one possible case, all the alarm information and the corresponding clearing time associated with the time point in the time period from the start time point in the time axis to the time point indicated by the slider may be displayed, or only the alarm information that has not been cleared of all the alarm information associated with the time point in the time period may be displayed.
Further, while displaying the alarm information associated with the time point in the time period, the suspected root cause probability and the root cause recommendation source of the alarm information associated with the time point in the time period may also be displayed. Specifically, the suspected root cause probability and the recommended source of the root cause may be displayed in an alarm list.
It should be noted that the suspected root cause probability may be determined by the network management system. The network management system can determine the suspected root cause probability of the alarm information in various ways, for example, the suspected root cause probability of the alarm information can be determined in the ways of expert rules, fault propagation diagrams, neural networks, artificial labeling and the like.
Additionally, a root cause referral source refers to a manner of determining a probability of a suspected root cause. For example, the network management system determines the suspected root cause probability of the alarm information through the expert rules, and the root cause recommendation source of the alarm information is the expert rules.
In addition, in the embodiment of the application, because the operation and maintenance personnel can check the context condition when the fault occurs in the network in a time playback mode, the operation and maintenance personnel can quickly deduce possible suspected root causes and roughly judge whether the suspected root causes recommended by the system are accurate enough.
Furthermore, a physical topology diagram may be constructed according to the alarm source in the alarm information associated with the time point in the time period and the operation object in the configuration change information associated with the time point in the time period, and the physical topology diagram may be displayed. And displaying a root cause indicator in the physical topological graph according to the suspected root cause probability of the alarm information associated with the time point in the time period. And displaying an operation indicator in the physical topological graph according to the operation object in the configuration change information associated with the time point in the time period.
It should be noted that the physical topology map may reflect the connection relationship between the alarm source and the operation object. Specifically, both the alarm source and the operation object may be used as nodes in the physical topological graph, and then edges between the nodes in the physical topological graph are constructed according to the physical connection relationship between the alarm source and the operation object, so as to obtain the physical topological graph.
In addition, the management page may include a third area in addition to the area displaying the time axis, the first area, and the second area. The physical topology may be displayed in a third area.
When the root cause indicator is displayed in the physical topological graph according to the suspected root cause probability of the alarm information associated with the time point in the time period, for any time point in the time period, if the suspected root cause probability of the alarm information associated with the time point is greater than the preset probability, that is, if the suspected root cause probability of the alarm information is greater, the root cause indicator can be displayed at the node corresponding to the alarm source in the alarm information in the physical topological graph. Therefore, operation and maintenance personnel can quickly acquire the suspected root cause recommended by the system from the physical topological graph.
When the operation indicator is displayed in the physical topological graph according to the operation object in the configuration change information associated with the time point in the time period, the operation indicator may be displayed at a node corresponding to the operation object in the physical topological graph for any time point in the time period. Therefore, operation and maintenance personnel can quickly know the object for configuration change from the physical topological graph.
It should be noted that, in the embodiment of the present application, a physical topology map may be constructed according to an alarm source in alarm information associated with a time point and an operation object in configuration change information, and a root cause indicator and an operation indicator may be displayed in the physical topology map. Therefore, the positions and the time of the alarm and the configuration change are clear at a glance, so that technicians can conveniently and quickly find out suspected root causes.
Step 205: and constructing a service topological graph according to the service path in the service fault information associated with the time point indicated by the sliding block, and displaying the service topological graph.
It should be noted that the service topology map may reflect service path nodes and service routes. Specifically, the identifiers (such as names, IP addresses, and the like) of all nodes of the service path may be used as nodes in the service topology map, and then edges between the nodes in the service topology map are constructed according to the service route to obtain the service topology map. Optionally, the service name may also be marked in the service topology map.
In addition, the management page may include a fourth area in addition to the area displaying the time axis, the first area, the second area, and the third area. The service topology may be displayed in a fourth area.
Step 206: and if the query instruction is detected in the service topological graph, displaying the service data in the service fault information.
It should be noted that the query instruction may be triggered by the operation and maintenance staff, and the query instruction is used to instruct to display the service data. For example, the operation and maintenance personnel may right click in the service topology map to trigger an option box, and select a view details option in the option box to trigger the query instruction.
In addition, the management page may jump to another page to display the service data in the service fault information, and of course, the service data in the service fault information may also be displayed on the management page in an overlapping manner, which is not limited in this embodiment of the present application.
It should be noted that, in the embodiment of the present application, the operation and maintenance person may move the slider on the time axis to adjust the time point indicated by the slider. And at this time, a service topological graph corresponding to the service fault information associated with the time point indicated by the slider is displayed. The operation and maintenance personnel can inquire the service data by operating the service topological graph. That is, the operation and maintenance personnel can carefully check the service fault information at the time point indicated by the slider by moving the slider on the time axis, so as to obtain the service path and the transmission level of the damaged service. Therefore, even if the network condition changes, operation and maintenance personnel can check the service condition before and after the service is damaged in a time playback mode.
It should be noted that, in an actual network, the network management system receives prompt information reported by an object in the network in real time. Because the number of the prompt messages is huge, the network management system usually aggregates the received prompt messages to divide the prompt messages into a plurality of prompt message groups, and each prompt message group belongs to the same network monitoring area. Then, according to the method for processing the prompt information provided by the embodiment of the application, a time axis can be displayed according to the alarm information, the configuration change information and the service failure information included in a certain prompt information group. The operation and maintenance personnel can check the fault context by moving the slider on the time axis, so that whether the network configuration change exists in the earlier stage, whether the physical plane hardware fault exists, whether the business plane fault exists and the like can be determined. The operation and maintenance personnel can quickly deduce possible suspected root causes according to the information of the dimensions, and roughly judge whether the suspected root causes recommended by the system are accurate enough. Therefore, the understanding of operation and maintenance personnel on the fault can be accelerated, and the fault removal efficiency is improved.
For ease of understanding, the embodiments of the present application are illustrated below with reference to fig. 3.
Fig. 3 is a schematic diagram of a management page provided in an embodiment of the present application. Referring to fig. 3, the management page includes a time axis, and a slider is disposed on the time axis.
The number of pieces of alarm information and the number of pieces of configuration change information associated with a plurality of time points in the time axis are displayed below the time axis. Accordingly, the operation and maintenance personnel can see that at 15: 04: the configuration is changed by 21 and then 4 alarms are generated. At 15: 06: after 21 there are several configuration changes and alarms generated.
The operation and maintenance personnel drag the slide block to 15: 05: 01, at this time, 15: 04: 21 to 15: 05: 01, the configuration change list displays 15: 04: 21 to 15: 05: 01, and configuration change information generated between the devices. At this time, the physical topological graph can be displayed according to the alarm information in the alarm list and the configuration change information in the configuration change list.
And, the operation and maintenance personnel drag the slide block to 15: 05: 01, it was found that the ratio of 15: 05: 01, traffic is impaired according to 15: 05: 01 may display a service topology map. After the operation and maintenance personnel operate the service topological graph to trigger the query instruction, the service data in the service fault information can be displayed.
Therefore, operation and maintenance personnel can check the alarm information, the configuration change information and the service fault information generated by the network at each time in detail by moving the sliding block in the time axis. The operation and maintenance personnel can quickly understand the fault context in a time playback mode, and then can quickly locate the fault point and promote quick solution of the fault.
In the embodiment of the present application, a time axis on which a slider for responding to a moving operation is provided is displayed. The method includes displaying the number of pieces of prompt information associated with a plurality of time points in the time axis based on the time axis, and displaying the prompt information associated with the time points in a time period from a starting time point in the time axis to a time point indicated by the slider. That is, the operation and maintenance personnel can carefully view the prompt messages generated by the network at various times by moving the slider on the time axis. Therefore, operation and maintenance personnel can check the context condition when the fault occurs in the network in a time playback mode, understand the context of the fault scene, and quickly give more reliable suspected root cause, so that the root cause identification rate can be improved.
Fig. 4 is a schematic structural diagram of a prompt information processing apparatus provided in an embodiment of the present application, where the prompt information processing apparatus may be implemented by software, hardware, or a combination of the two as part or all of a computer device, and the computer device may be the computer device shown in fig. 1. Referring to fig. 4, the apparatus includes: a first display module 401, a second display module 402, and a third display module 403.
A first display module 401, configured to perform step 202 in the embodiment of fig. 2;
a second display module 402, configured to perform step 203 in the embodiment of fig. 2;
a third display module 403, configured to perform step 204 in the embodiment of fig. 2.
Optionally, the second display module 402 is configured to:
the number of pieces of prompt information associated with each of a plurality of time points in the time axis is displayed on one side or both sides of the time axis.
Optionally, the apparatus further comprises:
the acquisition module is used for acquiring prompt information in a network;
and the association module is used for associating the prompt information to a time point in the time axis, wherein the time point is the same as the reporting time of the prompt information.
Optionally, the apparatus further comprises:
the first building module is used for building a service topological graph according to a service path in the service fault information related to the time point indicated by the sliding block;
the fourth display module is used for displaying the service topological graph;
and the fifth display module is used for displaying the service data in the service fault information if the query instruction is detected in the service topological graph.
Optionally, the prompt information includes an alarm information, and the third display module 403 is further configured to:
and displaying the suspected root cause probability and the root cause recommendation source of the alarm information associated with the time point in the time period.
Optionally, the prompt message further includes configuration change information, and the apparatus further includes:
the second construction module is used for constructing a physical topological graph according to an alarm source in the alarm information associated with the time point in the time period and an operation object in the configuration change information associated with the time point in the time period;
the sixth display module is used for displaying the physical topological graph;
the seventh display module is used for displaying a root cause indicator in the physical topological graph according to the suspected root cause probability of the alarm information associated with the time point in the time period;
and the eighth display module is used for displaying the operation indicator in the physical topological graph according to the operation object in the configuration change information associated with the time point in the time period.
In the embodiment of the present application, a time axis on which a slider for responding to a moving operation is provided is displayed. Displaying the number of pieces of prompt information associated with a plurality of time points in the time axis based on the time axis, and displaying the prompt information associated with the time points in a time period from a starting time point in the time axis to the time point indicated by the slider. That is, the operation and maintenance personnel can carefully view the prompt messages generated by the network at various times by moving the slider on the time axis. Therefore, operation and maintenance personnel can check the context condition when the fault occurs in the network in a time playback mode, understand the context of the fault scene, and quickly give more reliable suspected root causes, so that the root cause identification rate can be improved.
It should be noted that: in the embodiment, when processing the prompt information, the prompt information processing apparatus is only illustrated by dividing the functional modules, and in practical applications, the functions may be distributed by different functional modules according to needs, that is, the internal structure of the apparatus may be divided into different functional modules to complete all or part of the functions described above. In addition, the prompt information processing apparatus and the prompt information processing method provided by the above embodiments belong to the same concept, and specific implementation processes thereof are described in the method embodiments and are not described herein again.
In the above embodiments, the implementation may be wholly or partly realized by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loaded and executed on a computer, cause the processes or functions described in accordance with the embodiments of the application to occur, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored on a computer readable storage medium or transmitted from one computer readable storage medium to another, for example, from one website, computer, server, or data center to another website, computer, server, or data center via wire (e.g., coaxial cable, fiber optic, Digital Subscriber Line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device, such as a server, a data center, etc., that includes one or more of the available media. The usable medium may be a magnetic medium (e.g., floppy Disk, hard Disk, magnetic tape), an optical medium (e.g., Digital Versatile Disk (DVD)), or a semiconductor medium (e.g., Solid State Disk (SSD)), among others.
The above-mentioned embodiments are provided not to limit the present application, and any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the protection scope of the present application.
Claims (13)
1. A method for processing prompt information, the method comprising:
displaying a time axis, wherein a slide block for responding to the moving operation is arranged on the time axis;
displaying the number of pieces of prompt information associated with a plurality of time points in the time axis based on the time axis;
displaying prompt information associated with a time point in a time period from a starting time point in the time axis to a time point on the time axis indicated by the slider;
if the prompt information includes different types of prompt information, displaying the number of the prompt information associated with the plurality of time points in the time axis based on the time axis, including:
and respectively displaying the number of pieces of prompt information of each type associated with a plurality of time points in the time axis based on the time axis.
2. The method of claim 1, wherein the displaying a number of pieces of hint information associated with a plurality of time points in the timeline based on the timeline comprises:
and displaying the number of pieces of prompt information associated with each time point in a plurality of time points in the time axis on one side or two sides of the time axis.
3. The method of claim 1, wherein prior to displaying the timeline, further comprising:
acquiring prompt information in a network;
and associating the prompt information to a time point in the time axis, wherein the time point is the same as the reporting time of the prompt information.
4. The method of any of claims 1-3, wherein the method further comprises:
constructing a service topological graph according to a service path in the service fault information associated with the time point indicated by the sliding block;
displaying the service topological graph;
and if the query instruction is detected in the service topological graph, displaying the service data in the service fault information.
5. A method according to any of claims 1-3, wherein the prompt message includes an alert message, the method further comprising:
and displaying the suspected root cause probability and the root cause recommendation source of the alarm information associated with the time point in the time period.
6. The method of claim 5, wherein the hint information further includes configuration change information, the method further comprising:
constructing a physical topological graph according to an alarm source in the alarm information associated with the time point in the time period and an operation object in the configuration change information associated with the time point in the time period;
displaying the physical topological graph;
displaying a root cause indicator in the physical topological graph according to the suspected root cause probability of the alarm information associated with the time point in the time period;
and displaying an operation indicator in the physical topological graph according to an operation object in the configuration change information associated with the time point in the time period.
7. A presentation information processing apparatus, characterized in that the apparatus comprises:
the first display module is used for displaying a time axis, and a sliding block used for responding to the moving operation is arranged on the time axis;
the second display module is used for displaying the number of pieces of prompt information related to a plurality of time points in the time axis based on the time axis;
the third display module is used for displaying prompt information associated with a time point in a time period from a starting time point in the time axis to the time point on the time axis indicated by the slider;
if the prompt information includes different types of prompt information, the second display module is configured to:
and respectively displaying the number of pieces of prompt information of each type associated with a plurality of time points in the time axis based on the time axis.
8. The apparatus of claim 7, wherein the second display module is to:
and displaying the number of pieces of prompt information associated with each time point in a plurality of time points in the time axis on one side or two sides of the time axis.
9. The apparatus of claim 7, wherein the apparatus further comprises:
the acquisition module is used for acquiring prompt information in a network;
and the association module is used for associating the prompt information to a time point in the time axis, wherein the time point is the same as the reporting time of the prompt information.
10. The apparatus of any of claims 7-9, wherein the apparatus further comprises:
the first building module is used for building a service topological graph according to a service path in the service fault information associated with the time point indicated by the sliding block;
the fourth display module is used for displaying the service topological graph;
and the fifth display module is used for displaying the service data in the service fault information if the query instruction is detected in the service topological graph.
11. The apparatus of any of claims 7-9, wherein the reminder information includes an alert information, the third display module further to:
and displaying the suspected root cause probability and the root cause recommendation source of the alarm information associated with the time point in the time period.
12. The apparatus of claim 11, wherein the hint information further includes configuration change information, the apparatus further comprising:
the second construction module is used for constructing a physical topological graph according to an alarm source in the alarm information associated with the time point in the time period and an operation object in the configuration change information associated with the time point in the time period;
a sixth display module, configured to display the physical topological graph;
a seventh display module, configured to display a root cause indicator in the physical topological graph according to a suspected root cause probability of the alarm information associated with the time point in the time period;
an eighth display module, configured to display an operation indicator in the physical topology map according to an operation object in the configuration change information associated with the time point in the time period.
13. A computer-readable storage medium having stored therein instructions which, when executed on a computer, cause the computer to perform the method of any one of claims 1-6.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911396981.5A CN113132128B (en) | 2019-12-30 | 2019-12-30 | Prompt information processing method, device and storage medium |
| PCT/CN2020/119207 WO2021135479A1 (en) | 2019-12-30 | 2020-09-30 | Prompt information processing method and apparatus, and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911396981.5A CN113132128B (en) | 2019-12-30 | 2019-12-30 | Prompt information processing method, device and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113132128A CN113132128A (en) | 2021-07-16 |
| CN113132128B true CN113132128B (en) | 2022-07-19 |
Family
ID=76687079
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911396981.5A Active CN113132128B (en) | 2019-12-30 | 2019-12-30 | Prompt information processing method, device and storage medium |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN113132128B (en) |
| WO (1) | WO2021135479A1 (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115118574B (en) * | 2022-06-07 | 2023-07-21 | 马上消费金融股份有限公司 | Data processing method, device and storage medium |
| CN115576473B (en) * | 2022-08-05 | 2023-08-04 | 芯华章科技(北京)有限公司 | Waveform display method, computer device, and storage medium |
| CN116486579A (en) * | 2023-04-27 | 2023-07-25 | 湖北清江水电开发有限责任公司 | Alarm signal management method for centralized control center monitoring system of river basin step power plant |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103973496A (en) * | 2014-05-21 | 2014-08-06 | 华为技术有限公司 | Fault diagnosis method and device |
| CN106155468A (en) * | 2015-04-16 | 2016-11-23 | 腾讯科技（深圳）有限公司 | A kind of alarm methods of exhibiting and terminal |
| CN106681701A (en) * | 2015-11-09 | 2017-05-17 | 华为技术有限公司 | Task display method and device |
| WO2018001326A1 (en) * | 2016-06-29 | 2018-01-04 | 中兴通讯股份有限公司 | Method and device for acquiring fault information |
| CN109905436A (en) * | 2017-12-08 | 2019-06-18 | 华为软件技术有限公司 | Determination method, apparatus and storage medium of the root because of event |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2000005594A1 (en) * | 1998-07-21 | 2000-02-03 | Conduct Ltd. | Automatic network traffic analysis |
| EP2894813A1 (en) * | 2014-01-08 | 2015-07-15 | Telefonaktiebolaget L M Ericsson (publ) | Technique for creating a knowledge base for alarm management in a communications network |
| CN107305518A (en) * | 2016-04-20 | 2017-10-31 | 中兴通讯股份有限公司 | The display methods and device of warning information |
-
2019
- 2019-12-30 CN CN201911396981.5A patent/CN113132128B/en active Active
-
2020
- 2020-09-30 WO PCT/CN2020/119207 patent/WO2021135479A1/en active Application Filing
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103973496A (en) * | 2014-05-21 | 2014-08-06 | 华为技术有限公司 | Fault diagnosis method and device |
| CN106155468A (en) * | 2015-04-16 | 2016-11-23 | 腾讯科技（深圳）有限公司 | A kind of alarm methods of exhibiting and terminal |
| CN106681701A (en) * | 2015-11-09 | 2017-05-17 | 华为技术有限公司 | Task display method and device |
| WO2018001326A1 (en) * | 2016-06-29 | 2018-01-04 | 中兴通讯股份有限公司 | Method and device for acquiring fault information |
| CN109905436A (en) * | 2017-12-08 | 2019-06-18 | 华为软件技术有限公司 | Determination method, apparatus and storage medium of the root because of event |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113132128A (en) | 2021-07-16 |
| WO2021135479A1 (en) | 2021-07-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN113132128B (en) | Prompt information processing method, device and storage medium | |
| CN113328872B (en) | Fault repairing method, device and storage medium | |
| US20200106662A1 (en) | Systems and methods for managing network health | |
| CN106713017B (en) | Alarm information processing method and device | |
| AU2012340634B2 (en) | Intelligent infrastructure management user device | |
| US20100204960A1 (en) | Remote fault detection and condition monitoring | |
| CN111858254B (en) | Data processing method, device, computing equipment and medium | |
| CN101989931A (en) | Operation alarm processing method and device | |
| US9417949B1 (en) | Generic alarm correlation by means of normalized alarm codes | |
| CN112634621A (en) | Traffic light data quality detection method, device, electronic equipment and medium | |
| CN108989128B (en) | Fault positioning method and device based on networking structure | |
| CN114567538A (en) | Alarm information processing method and device | |
| CN111210029A (en) | Device and method for auxiliary analysis of service and related equipment | |
| CN106487597A (en) | A kind of service monitoring system and method based on Zookeeper | |
| CN111669282B (en) | Method, device and computer storage medium for identifying suspected root cause alarm | |
| CN109818808B (en) | Fault diagnosis method and device and electronic equipment | |
| CN113485862A (en) | Service fault management method and device, electronic equipment and storage medium | |
| US20130219279A1 (en) | Aggregating nodes for efficient network management system visualization and operations | |
| CN116302826A (en) | Intelligent operation and maintenance monitoring platform, method, storage medium and electronic equipment | |
| EP2764597A1 (en) | Processing data of a technical system comprising several assets | |
| US10432451B2 (en) | Systems and methods for managing network health | |
| CN110768904B (en) | Service communication detection method, device, terminal and storage medium for power communication network | |
| CN113835961A (en) | Alarm information monitoring method, device, server and storage medium | |
| CN111599174B (en) | Traffic index abnormity detection method and electronic equipment | |
| CN114356722A (en) | Monitoring alarm method, system, equipment and storage medium for server cluster |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |