CN114500227B - Alarm analysis method, device, equipment and computer storage medium - Google Patents

Alarm analysis method, device, equipment and computer storage medium Download PDF

Info

Publication number
CN114500227B
CN114500227B CN202011272779.4A CN202011272779A CN114500227B CN 114500227 B CN114500227 B CN 114500227B CN 202011272779 A CN202011272779 A CN 202011272779A CN 114500227 B CN114500227 B CN 114500227B
Authority
CN
China
Prior art keywords
alarm
nodes
node
analysis
equipment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202011272779.4A
Other languages
Chinese (zh)
Other versions
CN114500227A (en
Inventor
朱纬坤
郭峻峰
黄坤
江月
张永芳
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Communications Group Co Ltd
China Mobile Group Anhui Co Ltd
Original Assignee
China Mobile Communications Group Co Ltd
China Mobile Group Anhui Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Communications Group Co Ltd, China Mobile Group Anhui Co Ltd filed Critical China Mobile Communications Group Co Ltd
Priority to CN202011272779.4A priority Critical patent/CN114500227B/en
Publication of CN114500227A publication Critical patent/CN114500227A/en
Application granted granted Critical
Publication of CN114500227B publication Critical patent/CN114500227B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0631Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/12Discovery or management of network topologies
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/22Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks comprising specially adapted graphical user interfaces [GUI]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Human Computer Interaction (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The embodiment of the invention relates to the technical field of communication networks and discloses an alarm analysis method, which comprises the following steps: acquiring original alarm data, wherein the original alarm data comprises network element names and alarm information; receiving an analysis instruction and an analysis parameter; traversing the original alarm data according to the analysis instruction and the analysis parameters to obtain target alarm data corresponding to the analysis parameters, wherein the target alarm data comprises network element names and alarm information; analyzing the target alarm data to generate an alarm visualization topological graph for representing the association relation between equipment nodes and alarm nodes; and displaying the alarm visualization topological graph. By the mode, the embodiment of the invention has the beneficial effects of automatic analysis and visual display of the alarm.

Description

Alarm analysis method, device, equipment and computer storage medium
Technical Field
The embodiment of the invention relates to the technical field of communication networks, in particular to an alarm analysis method, an alarm analysis device, alarm analysis equipment and a computer readable storage medium.
Background
At present, with the development of technical trend and user habit, the network scale and service type are continuously enlarged, the breadth, depth and difficulty of operation and maintenance are increased, and the efficiency and accuracy of fault handling are required to be improved. In actual network operation and maintenance work, millions of network devices such as a wireless network, a transmission network, a data network, a core network, a power supply and the like generate massive alarms every day, and particularly when a large number of equipment alarms are generated for screen refreshing during engineering centralization and equipment failure, alarm analysis and failure positioning are always a pre-fast but unreachable difficulty.
In the prior art, in the engineering concentrated period of generating a large number of alarms instantaneously or brushing a large number of alarms at night, no effective automatic means exists, alarm analysis, fault positioning, engineering influence judgment and the like are difficult to quickly make, and the currently adopted data analysis mode of filtering alarm checking and excel form derivation is time-consuming, labor-consuming and non-intuitive when encountering scenes such as large alarm quantity, engineering alarms, hidden faults and the like.
Disclosure of Invention
In view of the above problems, an embodiment of the present invention provides an alarm analysis method, which is used to solve the technical problems in the prior art that alarm analysis cannot be performed automatically and analysis is not intuitive.
According to an aspect of an embodiment of the present invention, there is provided an alarm analysis method, the method including:
acquiring original alarm data, wherein the original alarm data comprises network element names and alarm information;
receiving an analysis instruction and an analysis parameter;
traversing the original alarm data according to the analysis instruction and the analysis parameters to obtain target alarm data corresponding to the analysis parameters, wherein the target alarm data comprises network element names and alarm information;
analyzing the target alarm data to generate an alarm visualization topological graph for representing the association relation between equipment nodes and alarm nodes;
And displaying the alarm visualization topological graph.
In an optional manner, traversing the original alarm data according to the analysis instruction and the analysis parameter to obtain target alarm data corresponding to the analysis parameter, where the target alarm data includes network element information and alarm information, and includes:
traversing the original alarm data according to the analysis instruction and the analysis parameters to generate a target edge table, wherein the target edge table comprises all original data corresponding to the analysis parameters in the original alarm data;
traversing the original alarm data according to the analysis parameters of the analysis instruction set to generate a target node table, wherein the target node table comprises a network element name, an alarm title and a weight.
In an optional manner, analyzing the target alarm data to generate an alarm visualization topological graph for representing an association relationship between a network element and an alarm, including:
generating equipment nodes and alarm nodes according to the target node table, wherein the equipment nodes correspond to the network element names, and the alarm nodes correspond to the alarm titles;
generating edges of the equipment nodes pointing to the alarm nodes according to the target edge table;
Calculating the relevance between the equipment nodes and the alarm nodes according to discrete convolution;
and adjusting the layout of the equipment node and the alarm node according to the relevance, so as to generate an alarm visualization topological graph.
In an optional manner, generating a device node and an alarm node according to the target node table, where the device node corresponds to the network element name, and the alarm node corresponds to the alarm title, and includes:
extracting a network element name in the target alarm data to obtain a device node table, wherein the device node table comprises the network element name;
extracting alarm title information in the target alarm data to obtain an alarm node table, wherein the alarm node table comprises the alarm title and the weight;
generating a target node table according to the equipment node table and the alarm node table;
and generating the equipment node and the alarm node table according to the target node table.
In an alternative manner, displaying the alarm visualization topology map includes:
transmitting the alarm visualization topological graph to a browser through a socket interface;
And displaying the visual topological graph in the browser.
In an alternative way, calculating the association between the device nodes and the alert node according to discrete convolution includes:
acquiring importance of the equipment node and the alarm node;
obtaining association values between the network element node and the alarm node according to the alarm occurrence time, the alarm occurrence place and the logic network topological relation of the equipment node and the alarm node;
and determining the positions of the equipment node and the alarm in the alarm visualization topological graph according to the importance degree and the association value.
According to another aspect of an embodiment of the present invention, there is provided an alarm analysis apparatus including:
the alarm data acquisition module is used for acquiring original alarm data, wherein the original alarm data comprises a network element name and alarm information;
the receiving module is used for receiving the analysis instruction and the analysis parameters;
the filtering module is used for traversing the original alarm data according to the analysis instruction and the analysis parameters to obtain target alarm data corresponding to the analysis parameters, wherein the target alarm data comprises a network element name and alarm information;
The generation module is used for analyzing the target alarm data and generating an alarm visualization topological graph for representing the association relation between the equipment node and the alarm node;
and the display module is used for displaying the alarm visualization topological graph.
In an optional manner, the filtering module includes a target edge table generating module and a target node table generating module, where:
the target side table generation module is used for traversing the original alarm data according to the analysis instruction and the analysis parameters to generate a target side table, wherein the target side table comprises all original data corresponding to the analysis parameters in the original alarm data;
the target node table generation module is used for traversing the original alarm data according to the analysis parameters of the analysis instruction set to generate a target node table, wherein the target node table comprises a network element name, an alarm title and a weight.
According to another aspect of the embodiment of the present invention, there is provided an alarm analysis apparatus including:
the device comprises a processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface complete communication with each other through the communication bus;
The memory is used for storing at least one executable instruction which causes the processor to execute the operation of the alarm analysis method
According to yet another aspect of embodiments of the present invention, there is provided a computer-readable storage medium having stored therein at least one executable instruction that, when run on an alert analysis apparatus/device, causes the alert analysis apparatus/device to perform the operations of the alert analysis method described above.
According to the embodiment of the invention, the original alarm data is automatically acquired and analyzed, the data analysis is generated by taking the alarm as an object, the limitation of actual topological connection is avoided, the corresponding topological relation layout is generated according to the data analysis, and finally the corresponding topological relation layout is presented on an interface, so that the automatic analysis and visual display of the alarm are realized.
Further, the nodes in the topological relation layout diagram are laid out from the center to the edge according to the relevance in a large number of concurrent scenes of alarms, so that the nodes have high readability, and the analysis efficiency in the scenes is improved.
The foregoing description is only an overview of the technical solutions of the embodiments of the present invention, and may be implemented according to the content of the specification, so that the technical means of the embodiments of the present invention can be more clearly understood, and the following specific embodiments of the present invention are given for clarity and understanding.
Drawings
The drawings are only for purposes of illustrating embodiments and are not to be construed as limiting the invention. Also, like reference numerals are used to designate like parts throughout the figures. In the drawings:
FIG. 1 shows a schematic diagram of an application system according to an embodiment of the present invention;
FIG. 2 is a schematic flow chart of an alarm analysis method according to an embodiment of the present invention;
FIG. 3 shows an alarm visualization topology diagram generated by an alarm analysis method according to an embodiment of the present invention;
FIG. 4 is a schematic diagram of an alarm analysis device according to an embodiment of the present invention;
fig. 5 shows a schematic structural diagram of an alarm analysis device according to an embodiment of the present invention.
Detailed Description
Exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present invention are shown in the drawings, it should be understood that the present invention may be embodied in various forms and should not be limited to the embodiments set forth herein.
Fig. 1 shows a schematic structural diagram of an application system according to an embodiment of the present invention. As shown in fig. 1, the application system structure includes: manufacturer network management 101, unified acquisition platform 103, alarm analysis equipment 104, centralized fault system 105 and monitor terminal 102. The unified acquisition platform 103 acquires information of a plurality of manufacturer webmasters 101 in real time through a webmaster network, and the alarm analysis device 104 synchronously acquires original alarm data of the unified acquisition platform 103 in real time and performs preprocessing. The manufacturer network manager 101 and the monitor terminal 102 are respectively provided with a plurality of monitor terminals. The monitoring terminal 102 initiates an analysis request in the centralized fault filter, and after receiving the analysis instruction and the analysis parameter, the alarm analysis device 104 executes alarm analysis and transmits the analysis result back to the browser of the monitoring terminal 102 for display. The alarm analysis device 104 synchronously acquires original alarm data of the unified acquisition platform 103 in real time through a Storm stream processing framework.
In the above manner, the alarm analysis device 104 is enabled to acquire the full amount of original alarm data and perform alarm analysis on the full amount of original alarm data.
Fig. 2 shows a flow chart of an embodiment of the alarm analysis method of the present invention, which is performed by an alarm analysis device. The alarm analysis device may be a computer device, a terminal, etc., which may be provided in the above-mentioned application system as a part of the application system. As shown in fig. 2, the method comprises the steps of:
step 110: and acquiring original alarm data.
The original alarm data comprise alarm data such as alarm titles, alarm occurrence time, alarm occurrence places, alarm network element names, alarm engineering states, alarm object types and the like.
In the embodiment of the invention, the whole original alarm data of webmaster from each manufacturer is synchronized to the analysis database server in real time through the unified acquisition platform. The original alarm data can be acquired in real time through a Storm stream processing framework and preprocessed.
In the embodiment of the invention, after the original alarm data is acquired, the method further comprises the following steps:
preprocessing the original alarm data, and cleaning and screening the data of the alarm text information in the original alarm data to obtain standard alarm data. The method specifically comprises the following steps: and extracting keywords in the alarm text information, reserving relevant fields in the alarm, such as network element information, alarm time information, alarm place information, engineering information and the like, and storing the fields in a database. Wherein the database may be a MySQL database.
Wherein, in one embodiment of the invention, the table fields of the standard alarm data are as follows:
form field of standard alarm data
Step 120: and receiving analysis instructions and analysis parameters.
The analysis instruction refers to an instruction input by a user for analyzing the original alarm data. The analysis parameters are parameters to be analyzed in the original alarm data set by the user, such as network element names, alarm information, alarm time information, alarm place information and the like.
In the embodiment of the invention, the analysis instruction and the analysis parameter sent by the centralized fault filter are received, and the centralized fault filter is a device which is arranged in a fault system and is used for intensively receiving the analysis instruction input by a user and the set analysis parameter.
Step 130: traversing the original alarm data according to the analysis instruction and the analysis parameters to obtain target alarm data corresponding to the analysis parameters.
In the embodiment of the invention, after the analysis instruction and the analysis parameter are received, the database storing the standard alarm data is traversed according to the analysis parameter, so that the data conforming to the analysis parameter in the original alarm data, namely the target alarm data, is obtained through filtering. The analysis processing procedures of segmentation, sequencing statistics, filtering and the like of the original alarm data are realized through SQL grammar. Specifically, the analysis parameters are packaged into SQL sentences, the SQL sentences set by the user are executed in a centralized fault filter, the database is traversed, data conforming to the analysis parameters are screened, and the data are written into a cache.
Traversing a database storing standard alarm data according to analysis parameters, thereby filtering to obtain data conforming to the analysis parameters in the original alarm data, and specifically comprising:
step 1301: and traversing the original alarm data according to the analysis instruction and the analysis parameters to generate a target edge table (edge table), wherein the target edge table comprises all original data corresponding to the analysis parameters in the original alarm data, and comprises information such as network element names, corresponding alarm titles and the like.
Step 1302: traversing the original alarm data according to the analysis parameters of the analysis instruction set to generate a target node table (node table), wherein the target node table (node table) comprises a network element name, an alarm title and a weight. The weight refers to the boolean value of engineering information, with 1 representing engineering state and 0 representing no engineering.
Step 140: and analyzing the target alarm data to generate an alarm visualization topological graph for representing the association relation between the network element and the alarm.
In the embodiment of the invention, the drawing of the alarm visualization topological graph of the association relationship between the network element and the alarm is carried out through gephi. gephi is drawing software based on a Netbeans platform, and can be expanded or reused through written APIs. The format of the gephi imported data file is csv, and the gephi imported data file is divided into an edge table and a node table, so that an alarm visualization topological graph can be generated according to the target edge table and the target node table. Before generating the alarm visualization topological graph according to the target edge table and the target node table, initializing and configuring gephi to form a default layout. The initialization configuration comprises setting the contents of an edge table and a node table, setting the meanings represented by equipment nodes and alarm nodes, setting the values of the corresponding nodes and the sizes of the corresponding node displays, configuring different alarm levels and corresponding color displays in the gephi according to the alarm levels and the color table, and configuring the positions of the nodes in the gephi according to the importance degree configuration table, including the positions of the equipment nodes and the alarm nodes.
In this embodiment, the target alarm data is analyzed to generate an alarm visualization topological graph for representing the association relationship between the network element and the alarm, and specifically includes the following steps:
step 1401: generating equipment nodes and alarm nodes in an alarm visualization topological graph according to the target node table (node table), wherein the equipment nodes correspond to the network element names, and the alarm nodes correspond to the alarm titles.
Specifically, target alarm data are read from the cache, and network element names are extracted from the data to obtain a device node list-s; extracting alarm title information to obtain an alarm node table node-a; and combining the node-s with the node-a to obtain a complete target node table. Wherein, the device node table node-s only includes the network element name, and the alarm node table node-a includes the alarm title and the weight. Compressing (i.e. merging) the repeated data in the equipment node table node-s, reserving a unique value, compressing (i.e. merging) the repeated data in the alarm node table node-a, reserving the unique value, and merging the equipment node table node-s and the alarm node table node-a into a target node table. The target node table further includes a network element name and a repetition value of the alarm header information (i.e. repetition number of repeated data). Generating the equipment nodes in the alarm visualization topological graph according to the equipment nodes in the target node table, wherein the repeated data are repeated equipment nodes, and the diameter of the equipment nodes is larger as the repeated times of the equipment nodes are larger. Generating the alarm node in the alarm visualization topological graph according to the alarm node, wherein the repeated data are repeated alarm nodes, and for a certain alarm node, the more the repeated times are, the larger the diameter of the node is, and generating the alarm node in the alarm visualization topological graph according to the alarm node table node-a. That is, in the embodiment of the present invention, the number of repetitions of a node is taken as the value of the node size.
Step 1402: and generating edges of the equipment nodes pointing to the alarm nodes in the alarm visualization topological graph according to the target edge table, wherein the edges are provided with edge labels containing target alarm data. And changing the label into data in the target edge table. And generating an arrow-headed edge pointing to the alarm node from the equipment node according to the content of each piece of alarm data in the target edge table, and performing color rendering of the equipment node and the alarm node according to the alarm level. Rendering node colors according to a preset alarm level and color table, wherein the corresponding relation between the alarm level and the colors in the alarm level table is set as follows: the primary alarm is rendered red, the secondary alarm is brown, the tertiary alarm is yellow, and when the engineering Boolean value is 1, the primary alarm is rendered blue. The more edge data between a certain device node and a certain alarm node, the thicker the edge between the two, and the thicker the arrow.
Step 1403: and calculating the relevance between the equipment nodes and the alarm nodes according to discrete convolution. Wherein calculating the relevance between the device nodes and the alert node according to discrete convolution comprises:
And acquiring importance degrees of the equipment node and the alarm node, wherein the importance degrees represent the influence degree of the equipment node or the alarm node on the service.
And calculating the association value between the equipment nodes or the alarm nodes according to the information of the equipment nodes or the information of the alarm nodes and the logic network topological relation. Specifically, the information such as the alarm occurrence time and the alarm occurrence place of the equipment node or the alarm node is weighted so as to obtain the association value between the equipment node or the alarm node.
And carrying out aggregation and discrete iteration on the equipment nodes according to the importance degree and the association value, and determining the positions of the equipment nodes and the alarms in the alarm visualization topological graph. Specifically, for the device node and/or the alarm node with high importance, the position of the device node and/or the alarm node is centered; for other equipment nodes or alarm nodes with high association values with the equipment nodes and/or alarm nodes with high importance, the positions of the other equipment nodes or alarm nodes are closer to the equipment nodes and/or alarm nodes with high importance; for other equipment nodes or alarm nodes with low association values with the equipment nodes and/or alarm nodes with high importance, the equipment nodes and/or alarm nodes with high importance are far away from each other. Therefore, the association relation and the importance degree of the network element and the alarm are reflected according to the distance and the position between the equipment nodes or the alarm nodes.
Step 1404: and adjusting the layout of the equipment node and the alarm node according to the relevance, so as to generate an alarm visualization topological graph.
In the embodiment of the invention, the layout result is obtained by aggregating and dispersing iteration of the nodes, and the layouts of the equipment nodes and the alarm nodes are adjusted according to the layout result, so that the closer the distance of the nodes is, the higher the relevance is, the more the node position is centered, and the higher the importance is. By the method, the directed alarm visualization topological graph between the characterization network element and the alarm is generated based on the gephi, so that the information such as the association relation between the alarm and the network element, the alarm number, the importance degree and the like are visualized. Referring to fig. 3, a topology map is visualized for the generated alarms. In the alarm visualization topological graph, the FUYGS6/7 and the FUYGS 2/3/6/7 can obviously generate a large number of single board fault and gateway analysis failure alarms in the period. In the embodiment of the invention, after the side label is opened, the related engineering information (namely the weight) can be seen, and whether the equipment alarm caused by engineering implementation is visually judged.
Step 150: and displaying the alarm visualization topological graph.
After the directed alarm visualization topological graph between the characterization network element and the alarm is generated through the gephi, the alarm visualization topological graph can be transmitted to a browser through a socket interface, and the visualization topological graph is displayed in the browser.
In the embodiment of the invention, html5 webpage design technology can be used in the browser to click, drag, amplify and the like the alarm visualization topological graph. In addition, the alarm visualization topological graph can be filtered through a menu of the server filtering parameter interaction, so that the data processing efficiency and the practicability of the terminal are further improved.
The invention further includes step 160: and receiving original alarm update data in real time, traversing the original alarm update data according to the analysis instruction and the analysis parameters to obtain target update alarm data, analyzing the target update alarm data, updating the alarm visualization topological graph, and displaying the updated alarm visualization topological graph. The original alarm data is updated in real time, so that the alarm visual topological graph is dynamically updated, and the updated alarm data acquired in real time is displayed in the alarm visual topological graph under the conditions that an analysis instruction is not required to be resent and a terminal interface is not required to be refreshed.
According to the embodiment of the invention, the original alarm data is automatically acquired and analyzed, the data analysis takes equipment and alarms as objects, the generation process is not limited by actual topological connection, and a corresponding topological relation layout diagram is generated according to the data analysis and finally presented on an interface, so that the automatic analysis and visual display of the alarms are realized.
Further, the nodes in the topological relation layout diagram are laid out from the center to the edge according to the relevance in a large number of concurrent scenes of alarms, so that the nodes have high readability, and the analysis efficiency in the scenes is improved.
FIG. 4 is a schematic diagram showing the structure of an embodiment of the alarm analysis apparatus of the present invention. As shown in fig. 4, the apparatus 300 includes: an alarm data acquisition module 310, a receiving module 320, a filtering module 330, a generating module 340, and a display module 350.
The alarm data obtaining module 310 is configured to obtain original alarm data, where the original alarm data includes a network element name and alarm information.
The receiving module 320 is configured to receive an analysis instruction and an analysis parameter.
And the filtering module 330 is configured to traverse the original alarm data according to the analysis instruction and the analysis parameter to obtain target alarm data corresponding to the analysis parameter, where the target alarm data includes a network element name and alarm information.
The generating module 340 is configured to analyze the target alarm data, and generate an alarm visualization topological graph for characterizing an association relationship between a device node and an alarm node.
And the display module 350 is used for displaying the alarm visualization topological graph.
In an optional manner, traversing the original alarm data according to the analysis instruction and the analysis parameter to obtain target alarm data corresponding to the analysis parameter, where the target alarm data includes network element information and alarm information, and includes:
traversing the original alarm data according to the analysis instruction and the analysis parameters to generate a target edge table, wherein the target edge table comprises all original data corresponding to the analysis parameters in the original alarm data;
traversing the original alarm data according to the analysis parameters of the analysis instruction set to generate a target node table, wherein the target node table comprises a network element name, an alarm title and a weight.
In an optional manner, analyzing the target alarm data to generate an alarm visualization topological graph for representing an association relationship between a network element and an alarm, including:
generating equipment nodes and alarm nodes according to the target node table, wherein the equipment nodes correspond to the network element names, and the alarm nodes correspond to the alarm titles;
generating edges of the equipment nodes pointing to the alarm nodes according to the target edge table;
calculating the relevance between the equipment nodes and the alarm nodes according to discrete convolution;
And adjusting the layout of the equipment node and the alarm node according to the relevance, so as to generate an alarm visualization topological graph.
In an optional manner, generating a device node and an alarm node according to the target node table, where the device node corresponds to the network element name, and the alarm node corresponds to the alarm title, and includes:
extracting a network element name in the target alarm data to obtain a device node table, wherein the device node table comprises the network element name;
extracting alarm title information in the target alarm data to obtain an alarm node table, wherein the alarm node table comprises the alarm title and the weight;
generating a target node table according to the equipment node table and the alarm node table;
and generating the equipment node and the alarm node table according to the target node table.
In an alternative manner, displaying the alarm visualization topology map includes:
transmitting the alarm visualization topological graph to a browser through a socket interface;
and displaying the visual topological graph in the browser.
In an alternative way, calculating the association between the device nodes and the alert node according to discrete convolution includes:
Acquiring importance of the equipment node and the alarm node;
obtaining association values between the network element node and the alarm node according to the alarm occurrence time, the alarm occurrence place and the logic network topological relation of the equipment node and the alarm node;
and determining the positions of the equipment node and the alarm in the alarm visualization topological graph according to the importance degree and the association value.
The specific working process of the alarm analysis device 300 in the embodiment of the present invention is the same as the specific steps of the alarm analysis method described above, and will not be described herein.
According to the embodiment of the invention, the original alarm data is automatically acquired and analyzed, the data analysis is generated by taking the alarm as an object, the limitation of actual topological connection is avoided, the corresponding topological relation layout is generated according to the data analysis, and finally the corresponding topological relation layout is presented on an interface, so that the automatic analysis and visual display of the alarm are realized.
Further, the nodes in the topological relation layout diagram are laid out from the center to the edge according to the relevance in a large number of concurrent scenes of alarms, so that the nodes have high readability, and the analysis efficiency in the scenes is improved.
FIG. 5 is a schematic structural diagram of an embodiment of the alarm analysis device of the present invention, and the embodiment of the present invention is not limited to the specific implementation of the alarm analysis device.
As shown in fig. 5, the alarm analysis device may include: a processor 402, a communication interface (Communications Interface) 404, a memory 406, and a communication bus 408.
Wherein: processor 402, communication interface 404, and memory 406 communicate with each other via communication bus 408. A communication interface 404 for communicating with network elements of other devices, such as clients or other servers. Processor 402 is configured to execute program 410 and may specifically perform the relevant steps described above for the alert analysis method embodiment.
In particular, program 410 may include program code including computer-executable instructions.
The processor 402 may be a central processing unit CPU, or a specific integrated circuit ASIC (Application Specific Integrated Circuit), or one or more integrated circuits configured to implement embodiments of the present invention. The one or more processors included in the alert analysis device may be the same type of processor, such as one or more CPUs; but may also be different types of processors such as one or more CPUs and one or more ASICs.
Memory 406 for storing programs 410. Memory 406 may comprise high-speed RAM memory or may also include non-volatile memory (non-volatile memory), such as at least one disk memory.
Program 410 may be specifically invoked by processor 402 to cause an alert analysis device to:
acquiring original alarm data, wherein the original alarm data comprises network element names and alarm information;
receiving an analysis instruction and an analysis parameter;
traversing the original alarm data according to the analysis instruction and the analysis parameters to obtain target alarm data corresponding to the analysis parameters, wherein the target alarm data comprises network element names and alarm information;
analyzing the target alarm data to generate an alarm visualization topological graph for representing the association relation between equipment nodes and alarm nodes;
and displaying the alarm visualization topological graph.
In an optional manner, traversing the original alarm data according to the analysis instruction and the analysis parameter to obtain target alarm data corresponding to the analysis parameter, where the target alarm data includes network element information and alarm information, and includes:
traversing the original alarm data according to the analysis instruction and the analysis parameters to generate a target edge table, wherein the target edge table comprises all original data corresponding to the analysis parameters in the original alarm data;
traversing the original alarm data according to the analysis parameters of the analysis instruction set to generate a target node table, wherein the target node table comprises a network element name, an alarm title and a weight.
In an optional manner, analyzing the target alarm data to generate an alarm visualization topological graph for representing an association relationship between a network element and an alarm, including:
generating equipment nodes and alarm nodes according to the target node table, wherein the equipment nodes correspond to the network element names, and the alarm nodes correspond to the alarm titles;
generating edges of the equipment nodes pointing to the alarm nodes according to the target edge table;
calculating the relevance between the equipment nodes and the alarm nodes according to discrete convolution;
and adjusting the layout of the equipment node and the alarm node according to the relevance, so as to generate an alarm visualization topological graph.
In an optional manner, generating a device node and an alarm node according to the target node table, where the device node corresponds to the network element name, and the alarm node corresponds to the alarm title, and includes:
extracting a network element name in the target alarm data to obtain a device node table, wherein the device node table comprises the network element name;
extracting alarm title information in the target alarm data to obtain an alarm node table, wherein the alarm node table comprises the alarm title and the weight;
Generating a target node table according to the equipment node table and the alarm node table;
and generating the equipment node and the alarm node table according to the target node table.
In an alternative manner, displaying the alarm visualization topology map includes:
transmitting the alarm visualization topological graph to a browser through a socket interface;
and displaying the visual topological graph in the browser.
In an alternative way, calculating the association between the device nodes and the alert node according to discrete convolution includes:
acquiring importance of the equipment node and the alarm node;
obtaining association values between the network element node and the alarm node according to the alarm occurrence time, the alarm occurrence place and the logic network topological relation of the equipment node and the alarm node;
and determining the positions of the equipment node and the alarm in the alarm visualization topological graph according to the importance degree and the association value.
According to the embodiment of the invention, the original alarm data is automatically acquired and analyzed, the data analysis is generated by taking the alarm as an object, the limitation of actual topological connection is avoided, the corresponding topological relation layout is generated according to the data analysis, and finally the corresponding topological relation layout is presented on an interface, so that the automatic analysis and visual display of the alarm are realized.
Further, the nodes in the topological relation layout diagram are laid out from the center to the edge according to the relevance in a large number of concurrent scenes of alarms, so that the nodes have high readability, and the analysis efficiency in the scenes is improved.
An embodiment of the present invention provides a computer readable storage medium storing at least one executable instruction that, when executed on an alarm analysis device/apparatus, causes the alarm analysis device/apparatus to perform the alarm analysis method in any of the above method embodiments.
The executable instructions may be specifically for causing the alert analysis apparatus/device to:
acquiring original alarm data, wherein the original alarm data comprises network element names and alarm information;
receiving an analysis instruction and an analysis parameter;
traversing the original alarm data according to the analysis instruction and the analysis parameters to obtain target alarm data corresponding to the analysis parameters, wherein the target alarm data comprises network element names and alarm information;
analyzing the target alarm data to generate an alarm visualization topological graph for representing the association relation between equipment nodes and alarm nodes;
and displaying the alarm visualization topological graph.
In an optional manner, traversing the original alarm data according to the analysis instruction and the analysis parameter to obtain target alarm data corresponding to the analysis parameter, where the target alarm data includes network element information and alarm information, and includes:
traversing the original alarm data according to the analysis instruction and the analysis parameters to generate a target edge table, wherein the target edge table comprises all original data corresponding to the analysis parameters in the original alarm data;
traversing the original alarm data according to the analysis parameters of the analysis instruction set to generate a target node table, wherein the target node table comprises a network element name, an alarm title and a weight.
In an optional manner, analyzing the target alarm data to generate an alarm visualization topological graph for representing an association relationship between a network element and an alarm, including:
generating equipment nodes and alarm nodes according to the target node table, wherein the equipment nodes correspond to the network element names, and the alarm nodes correspond to the alarm titles;
generating edges of the equipment nodes pointing to the alarm nodes according to the target edge table;
calculating the relevance between the equipment nodes and the alarm nodes according to discrete convolution;
And adjusting the layout of the equipment node and the alarm node according to the relevance, so as to generate an alarm visualization topological graph.
In an optional manner, generating a device node and an alarm node according to the target node table, where the device node corresponds to the network element name, and the alarm node corresponds to the alarm title, and includes:
extracting a network element name in the target alarm data to obtain a device node table, wherein the device node table comprises the network element name;
extracting alarm title information in the target alarm data to obtain an alarm node table, wherein the alarm node table comprises the alarm title and the weight;
generating a target node table according to the equipment node table and the alarm node table;
and generating the equipment node and the alarm node table according to the target node table.
In an alternative manner, displaying the alarm visualization topology map includes:
transmitting the alarm visualization topological graph to a browser through a socket interface;
and displaying the visual topological graph in the browser.
In an alternative way, calculating the association between the device nodes and the alert node according to discrete convolution includes:
Acquiring importance of the equipment node and the alarm node;
obtaining association values between the network element node and the alarm node according to the alarm occurrence time, the alarm occurrence place and the logic network topological relation of the equipment node and the alarm node;
and determining the positions of the equipment node and the alarm in the alarm visualization topological graph according to the importance degree and the association value.
According to the embodiment of the invention, the original alarm data is automatically acquired and analyzed, the data analysis is generated by taking the alarm as an object, the limitation of actual topological connection is avoided, the corresponding topological relation layout is generated according to the data analysis, and finally the corresponding topological relation layout is presented on an interface, so that the automatic analysis and visual display of the alarm are realized.
Further, the nodes in the topological relation layout diagram are laid out from the center to the edge according to the relevance in a large number of concurrent scenes of alarms, so that the nodes have high readability, and the analysis efficiency in the scenes is improved.
The embodiment of the invention provides an alarm analysis device which is used for executing the alarm analysis method.
An embodiment of the present invention provides a computer program that can be invoked by a processor to cause an alarm analysis device to perform the alarm analysis method of any of the method embodiments described above.
An embodiment of the present invention provides a computer program product comprising a computer program stored on a computer readable storage medium, the computer program comprising program instructions which, when run on a computer, cause the computer to perform the alarm analysis method of any of the method embodiments described above.
The algorithms or displays presented herein are not inherently related to any particular computer, virtual system, or other apparatus. Various general-purpose systems may also be used with the teachings herein. The required structure for a construction of such a system is apparent from the description above. In addition, embodiments of the present invention are not directed to any particular programming language. It will be appreciated that the teachings of the present invention described herein may be implemented in a variety of programming languages, and the above description of specific languages is provided for disclosure of enablement and best mode of the present invention.
In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.
Similarly, it should be appreciated that in the above description of exemplary embodiments of the invention, various features of the embodiments of the invention are sometimes grouped together in a single embodiment, figure, or description thereof for the purpose of streamlining the disclosure and aiding in the understanding of one or more of the various inventive aspects. However, the disclosed method should not be construed as reflecting the intention that: i.e., the claimed invention requires more features than are expressly recited in each claim.
Those skilled in the art will appreciate that the modules in the apparatus of the embodiments may be adaptively changed and disposed in one or more apparatuses different from the embodiments. The modules or units or components of the embodiments may be combined into one module or unit or component, and they may be divided into a plurality of sub-modules or sub-units or sub-components. Any combination of all features disclosed in this specification (including any accompanying claims, abstract and drawings), and all of the processes or units of any method or apparatus so disclosed, may be used in combination, except insofar as at least some of such features and/or processes or units are mutually exclusive. Each feature disclosed in this specification (including any accompanying claims, abstract and drawings), may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.
It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention may be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means may be embodied by one and the same item of hardware. The use of the words first, second, third, etc. do not denote any order. These words may be interpreted as names. The steps in the above embodiments should not be construed as limiting the order of execution unless specifically stated.

Claims (8)

1. A method of alert analysis, the method comprising:
acquiring original alarm data, wherein the original alarm data comprises network element names and alarm information;
Receiving an analysis instruction and an analysis parameter;
traversing the original alarm data according to the analysis instruction and the analysis parameters to obtain target alarm data corresponding to the analysis parameters, wherein the target alarm data comprises network element names and alarm information;
analyzing the target alarm data to generate an alarm visualization topological graph for representing the association relation between equipment nodes and alarm nodes, comprising: traversing the original alarm data according to the analysis instruction and the analysis parameters to generate a target edge table, wherein the target edge table comprises all original data corresponding to the analysis parameters in the original alarm data; traversing the original alarm data according to the analysis parameters of the analysis instruction set to generate a target node table, wherein the target node table comprises a network element name, an alarm title and a weight; generating equipment nodes and alarm nodes according to the target node table, wherein the equipment nodes correspond to the network element names, and the alarm nodes correspond to the alarm titles; generating edges of the equipment nodes pointing to the alarm nodes according to the target edge table; calculating the relevance between the equipment nodes and the alarm nodes according to discrete convolution; the layout of the equipment nodes and the alarm nodes is adjusted according to the relevance, so that an alarm visualization topological graph is generated;
The calculating the relevance between the equipment nodes and the alarm nodes according to discrete convolution comprises the following steps: acquiring importance degrees of the equipment node and the alarm node, wherein the importance degrees represent the influence degree of the equipment node or the alarm node on the service; weighting the alarm occurrence time and the alarm occurrence place information of the equipment nodes or the alarm nodes so as to obtain the association value between the equipment nodes or the alarm nodes; performing aggregation and discrete iteration on the equipment nodes according to the importance degree and the association value, and determining the positions of the equipment nodes and the alarms in the alarm visualization topological graph;
the layout of the equipment node and the alarm node is adjusted according to the relevance, so that an alarm visualization topological graph is generated, and the method comprises the following steps of; obtaining a layout result by aggregating and dispersing iteration of the nodes, and adjusting the layout of the equipment nodes and the alarm nodes according to the layout result, so that the closer the distance of the nodes is, the higher the relevance is, the more the node position is centered, and the higher the importance is; generating a directed alarm visualization topological graph between the characterization network element and the alarm based on gephi;
And displaying the alarm visualization topological graph.
2. The method of claim 1, wherein generating device nodes and alert nodes from the target node table, wherein the device nodes correspond to the network element names and the alert nodes correspond to the alert titles, comprises:
extracting a network element name in the target alarm data to obtain a device node table, wherein the device node table comprises the network element name;
extracting alarm title information in the target alarm data to obtain an alarm node table, wherein the alarm node table comprises the alarm title and the weight;
generating a target node table according to the equipment node table and the alarm node table;
and generating the equipment node and the alarm node table according to the target node table.
3. The method of any of claims 1-2, wherein displaying the alert visualization topology comprises:
transmitting the alarm visualization topological graph to a browser through a socket interface;
and displaying the visual topological graph in the browser.
4. The method of claim 1, wherein calculating the association between the device nodes and the alert node based on discrete convolution comprises:
Acquiring importance of the equipment node and the alarm node;
obtaining association values between the network element node and the alarm node according to the alarm occurrence time, the alarm occurrence place and the logic network topological relation of the equipment node and the alarm node;
and determining the positions of the equipment node and the alarm in the alarm visualization topological graph according to the importance degree and the association value.
5. An alarm analysis device, the device comprising:
the alarm data acquisition module is used for acquiring original alarm data, wherein the original alarm data comprises a network element name and alarm information;
the receiving module is used for receiving the analysis instruction and the analysis parameters;
the filtering module is used for traversing the original alarm data according to the analysis instruction and the analysis parameters to obtain target alarm data corresponding to the analysis parameters, wherein the target alarm data comprises a network element name and alarm information;
the generating module is used for analyzing the target alarm data and generating an alarm visualization topological graph for representing the association relation between the equipment node and the alarm node, and comprises the following steps: traversing the original alarm data according to the analysis instruction and the analysis parameters to generate a target edge table, wherein the target edge table comprises all original data corresponding to the analysis parameters in the original alarm data; traversing the original alarm data according to the analysis parameters of the analysis instruction set to generate a target node table, wherein the target node table comprises a network element name, an alarm title and a weight; generating equipment nodes and alarm nodes according to the target node table, wherein the equipment nodes correspond to the network element names, and the alarm nodes correspond to the alarm titles; generating edges of the equipment nodes pointing to the alarm nodes according to the target edge table; calculating the relevance between the equipment nodes and the alarm nodes according to discrete convolution; the layout of the equipment nodes and the alarm nodes is adjusted according to the relevance, so that an alarm visualization topological graph is generated;
The calculating the relevance between the equipment nodes and the alarm nodes according to discrete convolution comprises the following steps: acquiring importance degrees of the equipment node and the alarm node, wherein the importance degrees represent the influence degree of the equipment node or the alarm node on the service; weighting the alarm occurrence time and the alarm occurrence place information of the equipment nodes or the alarm nodes so as to obtain the association value between the equipment nodes or the alarm nodes; performing aggregation and discrete iteration on the equipment nodes according to the importance degree and the association value, and determining the positions of the equipment nodes and the alarms in the alarm visualization topological graph;
the layout of the equipment node and the alarm node is adjusted according to the relevance, so that an alarm visualization topological graph is generated, and the method comprises the following steps of; obtaining a layout result by aggregating and dispersing iteration of the nodes, and adjusting the layout of the equipment nodes and the alarm nodes according to the layout result, so that the closer the distance of the nodes is, the higher the relevance is, the more the node position is centered, and the higher the importance is; generating a directed alarm visualization topological graph between the characterization network element and the alarm based on gephi;
And the display module is used for displaying the alarm visualization topological graph.
6. The apparatus of claim 5, wherein the filtering module comprises a target edge table generation module and a target node table generation module, wherein:
the target side table generation module is used for traversing the original alarm data according to the analysis instruction and the analysis parameters to generate a target side table, wherein the target side table comprises all original data corresponding to the analysis parameters in the original alarm data;
the target node table generation module is used for traversing the original alarm data according to the analysis parameters of the analysis instruction set to generate a target node table, wherein the target node table comprises a network element name, an alarm title and a weight.
7. An alert analysis apparatus, comprising: the device comprises a processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface complete communication with each other through the communication bus;
the memory is configured to store at least one executable instruction that causes the processor to perform the operations of the alert analysis method as claimed in any one of claims 1 to 4.
8. A computer readable storage medium, wherein at least one executable instruction is stored in the storage medium, which when run on an alarm analysis device/arrangement causes the alarm analysis device/arrangement to perform the operations of the alarm analysis method as claimed in any one of claims 1-4.
CN202011272779.4A 2020-11-13 2020-11-13 Alarm analysis method, device, equipment and computer storage medium Active CN114500227B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011272779.4A CN114500227B (en) 2020-11-13 2020-11-13 Alarm analysis method, device, equipment and computer storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011272779.4A CN114500227B (en) 2020-11-13 2020-11-13 Alarm analysis method, device, equipment and computer storage medium

Publications (2)

Publication Number Publication Date
CN114500227A CN114500227A (en) 2022-05-13
CN114500227B true CN114500227B (en) 2023-11-21

Family

ID=81491380

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011272779.4A Active CN114500227B (en) 2020-11-13 2020-11-13 Alarm analysis method, device, equipment and computer storage medium

Country Status (1)

Country Link
CN (1) CN114500227B (en)

Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2011157012A1 (en) * 2010-06-18 2011-12-22 中兴通讯股份有限公司 Method for generating alarm association graph and device thereof, and method for determining association alarm and device thereof
CN104219087A (en) * 2014-08-08 2014-12-17 蓝盾信息安全技术有限公司 Fault location method
CN105207822A (en) * 2015-10-14 2015-12-30 国网四川省电力公司信息通信公司 Electric power communication equipment alarm information processing method and device
WO2017181805A1 (en) * 2016-04-20 2017-10-26 中兴通讯股份有限公司 Method and device for displaying warning information, and computer storage medium
CN109450677A (en) * 2018-10-29 2019-03-08 中国联合网络通信集团有限公司 A kind of localization method and device of root failure
CN109951344A (en) * 2019-04-02 2019-06-28 国网内蒙古东部电力有限公司信息通信分公司 IMS support O&M warning system and method based on big data analysis
CN110351118A (en) * 2019-05-28 2019-10-18 华为技术有限公司 Root is because of alarm decision networks construction method, device and storage medium
CN110661660A (en) * 2019-09-25 2020-01-07 北京宝兰德软件股份有限公司 Alarm information root analysis method and device
CN110995482A (en) * 2019-11-27 2020-04-10 深圳市商汤科技有限公司 Alarm analysis method and device, computer equipment and computer readable storage medium
CN111294217A (en) * 2018-12-06 2020-06-16 云智慧(北京)科技有限公司 Alarm analysis method, device, system and storage medium

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6356282B2 (en) * 1998-12-04 2002-03-12 Sun Microsystems, Inc. Alarm manager system for distributed network management system
US20040210654A1 (en) * 2003-04-21 2004-10-21 Hrastar Scott E. Systems and methods for determining wireless network topology

Patent Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2011157012A1 (en) * 2010-06-18 2011-12-22 中兴通讯股份有限公司 Method for generating alarm association graph and device thereof, and method for determining association alarm and device thereof
CN104219087A (en) * 2014-08-08 2014-12-17 蓝盾信息安全技术有限公司 Fault location method
CN105207822A (en) * 2015-10-14 2015-12-30 国网四川省电力公司信息通信公司 Electric power communication equipment alarm information processing method and device
WO2017181805A1 (en) * 2016-04-20 2017-10-26 中兴通讯股份有限公司 Method and device for displaying warning information, and computer storage medium
CN109450677A (en) * 2018-10-29 2019-03-08 中国联合网络通信集团有限公司 A kind of localization method and device of root failure
CN111294217A (en) * 2018-12-06 2020-06-16 云智慧(北京)科技有限公司 Alarm analysis method, device, system and storage medium
CN109951344A (en) * 2019-04-02 2019-06-28 国网内蒙古东部电力有限公司信息通信分公司 IMS support O&M warning system and method based on big data analysis
CN110351118A (en) * 2019-05-28 2019-10-18 华为技术有限公司 Root is because of alarm decision networks construction method, device and storage medium
CN110661660A (en) * 2019-09-25 2020-01-07 北京宝兰德软件股份有限公司 Alarm information root analysis method and device
CN110995482A (en) * 2019-11-27 2020-04-10 深圳市商汤科技有限公司 Alarm analysis method and device, computer equipment and computer readable storage medium

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
Research on the analysis method of the relationship between alarm signal action and sequential logic in smart substation;Hao Ren等;2016 IEEE PES Asia-Pacific Power and Energy Engineering Conference (APPEEC);全文 *
基于Web的JGraphx自动绘制拓扑图的设计和实现;闫黎;白晓虎;;机械设计与制造工程(第08期);全文 *
基于时间、空间和规则的无线网络告警关联方法;万莹;洪玫;陈宇星;王帅;樊哲宁;;计算机科学(第S2期) *

Also Published As

Publication number Publication date
CN114500227A (en) 2022-05-13

Similar Documents

Publication Publication Date Title
CN110795148B (en) Method and device for generating layout file and electronic equipment
CN108108297B (en) Method and device for automatic testing
WO2022007434A1 (en) Visualization method and related device
CN106657192B (en) Method and equipment for presenting service calling information
US20230017701A1 (en) Intelligent lifecycle management of analytic functions for an iot intelligent edge with a hypergraph-based approach
EP3916584A1 (en) Information processing method and apparatus, electronic device and storage medium
US10586358B1 (en) System and method for visualization of beacon clusters on the web
CN111581208A (en) Data visualization display method and device
CN106919406A (en) A kind of desktop application component issue, update method and device
CN110633959A (en) Method, device, equipment and medium for creating approval task based on graph structure
CN110348109A (en) The method and terminal device of three-dimensional artificial training data processing
WO2024088025A1 (en) Automated 5gc network element management method and apparatus based on multi-dimensional data
CN114500227B (en) Alarm analysis method, device, equipment and computer storage medium
CN116436791A (en) Industrial Internet scene construction method, system, equipment and storage medium
CN116229211A (en) Sample generation method, model training method, object detection method and device
CN114756301A (en) Log processing method, device and system
CN114143109A (en) Visual processing method, interaction method and device for attack data
CN113691403A (en) Topological node configuration method, related device and computer program product
CN113515715A (en) Generating method, processing method and related equipment of buried point event code
CN112070487A (en) AI-based RPA process generation method, apparatus, device and medium
CN113779098B (en) Data processing method, device, electronic equipment and storage medium
US11461629B1 (en) Neural network model visualization
CN115186140A (en) Industrial topological graph generation method and device and electronic equipment
CN113885853A (en) Operation method, device and equipment of business analysis model
CN117523262A (en) Method, system, device and medium for cooperatively identifying digital device based on cloud edge

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant