CN114500229A - Network alarm positioning and analyzing method based on space-time information - Google Patents
Network alarm positioning and analyzing method based on space-time information Download PDFInfo
- Publication number
- CN114500229A CN114500229A CN202111657985.1A CN202111657985A CN114500229A CN 114500229 A CN114500229 A CN 114500229A CN 202111657985 A CN202111657985 A CN 202111657985A CN 114500229 A CN114500229 A CN 114500229A
- Authority
- CN
- China
- Prior art keywords
- alarm
- alarms
- root
- trees
- database
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 28
- 239000013598 vector Substances 0.000 claims description 28
- 238000004458 analytical method Methods 0.000 claims description 18
- 230000002457 bidirectional effect Effects 0.000 claims description 18
- 238000004364 calculation method Methods 0.000 claims description 13
- 238000007781 pre-processing Methods 0.000 claims description 4
- 238000012163 sequencing technique Methods 0.000 claims description 3
- 230000001960 triggered effect Effects 0.000 claims 1
- 238000012545 processing Methods 0.000 abstract description 20
- 238000004891 communication Methods 0.000 description 8
- 238000012423 maintenance Methods 0.000 description 4
- 230000007547 defect Effects 0.000 description 3
- 238000012544 monitoring process Methods 0.000 description 3
- 230000008030 elimination Effects 0.000 description 2
- 238000003379 elimination reaction Methods 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 210000001503 joint Anatomy 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012216 screening Methods 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/22—Indexing; Data structures therefor; Storage structures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/24—Querying
- G06F16/245—Query processing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0604—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
- H04L41/0609—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time based on severity or priority
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
- H04L41/0636—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis based on a decision tree analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Data Mining & Analysis (AREA)
- Databases & Information Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Computer Vision & Pattern Recognition (AREA)
- Computational Linguistics (AREA)
- Health & Medical Sciences (AREA)
- Computing Systems (AREA)
- General Health & Medical Sciences (AREA)
- Medical Informatics (AREA)
- Alarm Systems (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a network alarm positioning and analyzing method based on space-time information. The multiple alarms in the alarm database are sorted according to the alarm time, and the incidence relation between every two alarms in the alarm database is calculated and analyzed. And preferentially selecting the alarm with the earliest time as a root alarm, combining the other alarms associated with the alarm with the earliest time to form an alarm tree, and repeatedly combining the alarms in the database to ensure that all the alarms in the database form the alarm tree. And analyzing and comparing the root alarms in the alarm trees, combining two alarm trees with the root alarms which are mutually associated to form a new alarm tree, and finally forming the root alarm in the alarm tree which is the alarm with priority processing. The invention can screen and sort the alarm information in the database so as to determine the alarm source and improve the processing efficiency of the subsequent alarm processing.
Description
Technical Field
The invention belongs to the technical field of network communication, and particularly relates to a network alarm positioning and analyzing method based on space-time information.
Background
The power communication network is an important basis for power grid production control and company operation management and is an important support platform for ensuring safe and stable operation of a power system. The electric power communication network has more designed network layers, complex technical system and numerous devices, and service cross-network bearing and network cross-level butt joint also exist in the operation process. In the network management process, the alarm is a very important and effective means for finding and positioning the problem, after the network generates the alarm, the alarm is stored in an alarm pool, the stored alarm is distributed to each alarm output terminal according to the request of each alarm output terminal, and the network operation and maintenance personnel position the network fault by checking the alarm output by each alarm output terminal and take measures to remove the fault in time.
When the power communication network is in defect, the network management system and the monitoring system can generate a large amount of alarm information. The communication devices in the power communication network have relationships such as light path interconnection, service access, device power supply, resource sharing and the like, so that the alarm information also has a derivative relationship. At present, when the alarm information is eliminated, the alarm information needs to be processed one by one, the processing process is complicated, the alarm processing workload is large, the labor intensity of workers is increased, and the alarm processing efficiency is influenced.
Disclosure of Invention
The invention aims to provide a network alarm positioning and analyzing method based on space-time information, and aims to solve the technical problem that alarm processing efficiency is influenced by large alarm processing workload when a power communication network has defects in the prior art.
In order to achieve the purpose, the invention adopts the technical scheme that: the network alarm positioning and analyzing method based on the space-time information comprises the following steps:
step 1: extracting the time of occurrence of the individual alarms in the alarm database, and sequencing the alarm database according to time;
step 2: calculating the incidence relation of all alarms in the database pairwise, and preprocessing the data of the alarms as the subsequent calculation basis;
and step 3: analyzing the information of the alarm in a database, defining the alarm with the earliest occurrence time as a root alarm, and combining the root alarm with other alarms associated with the root alarm to form an alarm tree;
and 4, step 4: repeating the step 3 on the remaining single alarms in the database to finally obtain a plurality of alarm trees;
and 5: and carrying out mutual calculation analysis on the root alarms in the alarm trees to determine whether an association relationship exists, judging the analysis result, combining the alarm trees in the root alarms which are associated with each other to form a new alarm tree, and finally forming the root alarm in the alarm tree, namely the alarm needing to be processed preferentially.
As another embodiment of the present application, step 3 further includes:
analyzing the number of the alarms with the earliest occurrence time, if the number of the alarms with the earliest occurrence time is multiple, generating a plurality of alarm trees by taking each alarm with the earliest occurrence time as a root alarm, performing calculation analysis on leaf nodes in the plurality of alarm trees, and combining the leaf nodes to generate a plurality of trees with a plurality of root alarms if the leaf nodes are the same.
As another embodiment of the present application, the process in step 2 includes:
constructing an association vector for representing the association degrees and the derivative relation of two or more alarms;
if the two alarms are the same alarm object, the association vectors of the two alarms are in a bidirectional relationship;
if the two alarms are alarm objects which are associated with each other in the front-back sequence, the association vectors of the two alarms are in a one-way relationship, and the front alarm points to the rear alarm;
and if the starting time of the two alarms is different, the association vectors of the two alarms are in a one-way relationship, and the alarm with the early starting time points to the alarm with the late starting time.
As another embodiment of the present application, when two alarms are the same object and the start times of the two alarms are different, the alarm with the early start time points to the alarm with the late start time.
As another embodiment of the present application, if two objects of the alarm are the same object, an alarm with a high level points to an alarm with a low level, and if the two alarms have the same level, the two alarms are in a bidirectional relationship.
As another embodiment of the present application, when two alarms and the alarm tree are merged, merging is performed according to the direction of the association vector between the alarms.
As another embodiment of the present application, when the subsequent alarms caused by the two alarms are consistent, the two alarms are in a bidirectional relationship.
As another embodiment of the present application, when the association vectors of the two root alarms are in a bidirectional relationship, the two alarm trees are merged, and the merged alarm tree has two parallel root alarms.
As another embodiment of the present application, when the association vectors of the two root alarms are in a bidirectional relationship and the objects of the two root alarms are different, the two alarm trees stand alone and are not merged.
As another embodiment of the present application, the method for locating and analyzing a network alarm based on spatio-temporal information further includes:
step 6: and re-executing the step 5 for a plurality of newly generated alarm trees in the step 5 until no new alarm tree is generated, thereby obtaining the final root alarm.
As another embodiment of the present application, in the alarm database, if there are a plurality of alarms with the earliest time, and the plurality of subsequent alarms associated with the earliest time are the same, an alarm tree is formed with the plurality of alarms with the earliest time as a root alarm.
The network alarm positioning and analyzing method based on the time-space information has the beneficial effects that: compared with the prior art, the method has the advantages that the alarm information generated by the network management system and the monitoring system is centralized into the database, the occurrence time of the alarms in the database is sequenced, and the incidence relation between every two alarms in the database is calculated and analyzed. The earliest alarm occurring in the database is extracted and defined as the root alarm. And associating the rest alarm information associated with the root alarm according to the association sequence, and combining the rest alarm information and the root alarm to form a group of alarm trees. And then, executing the step 3 again for the rest alarms in the database, enabling the alarms in the database to form a corresponding alarm tree according to the alarm with the earliest occurrence time, and repeatedly executing the step 3 for multiple times until the alarms in the database cannot be combined to form the corresponding alarm tree. Then comparing the association relation between the root alarms in the alarm trees, if the two alarm trees have the corresponding association relation, combining the two alarm trees to form a new alarm tree, and finally forming the root alarm in the alarm tree which can be used as the alarm for priority processing. That is, the most primitive alarm can be selected from a large number of alarms in the database to be used as the root alarm for priority processing. After the root alarm processing is finished, some subsequent alarm information associated with the root alarm can be solved along with the elimination of the root alarm, so that the processing amount of the alarm in the database can be reduced, the alarm information in the database can be rapidly processed, the alarm processing efficiency is improved, and the faults and defects in the power communication network can be rapidly solved.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed for the embodiments or the prior art descriptions will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings without creative efforts.
FIG. 1 is a flowchart of a spatiotemporal information-based network alarm positioning and analysis method according to an embodiment of the present invention.
Detailed Description
In order to make the technical problems, technical solutions and advantageous effects to be solved by the present invention more clearly apparent, the present invention is further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
Referring to fig. 1, a method for locating and analyzing a network alarm based on spatio-temporal information according to the present invention will now be described. The network alarm positioning and analyzing method based on the spatio-temporal information comprises the following steps:
step 1: extracting the time of occurrence of the individual alarms in the alarm database, and sequencing the alarm database according to time;
step 2: calculating the incidence relation of all alarms in the database pairwise, and preprocessing the data of the alarms as the subsequent calculation basis;
and step 3: analyzing the information of the alarms in the database, defining the alarm with the earliest occurrence time as a root alarm, and combining the root alarm with other alarms associated with the root alarm to form an alarm tree;
and 4, step 4: repeating the step 3 on the remaining single alarms in the database to finally obtain a plurality of alarm trees;
and 5: the root alarms in the alarm trees are mutually calculated and analyzed to determine whether the association relationship exists, the analysis result is judged, the alarm trees in the root alarms which are mutually associated are merged to form a new alarm tree, and finally the root alarm in the alarm tree is the alarm which needs to be processed preferentially.
Compared with the prior art, the network alarm positioning and analyzing method based on the time-space information provided by the embodiment collects the alarm information generated by the network management system and the monitoring system into the database, sorts the occurrence time of the alarms in the database, and calculates and analyzes the incidence relation between every two alarms in the database. The earliest alarm occurring in the database is extracted and defined as the root alarm. And associating the rest alarm information associated with the root alarm according to the association sequence, and combining the rest alarm information and the root alarm to form a group of alarm trees. And then, executing the step 3 again for the rest alarms in the database, enabling the alarms in the database to form a corresponding alarm tree according to the alarm with the earliest occurrence time, and repeatedly executing the step 3 for multiple times until the alarms in the database cannot be combined to form the corresponding alarm tree. Then comparing the association relation between the root alarms in the alarm trees, if the two alarm trees have the corresponding association relation, combining the two alarm trees to form a new alarm tree, and finally forming the root alarm in the alarm tree which can be used as the alarm for priority processing. That is, the most primitive alarm can be selected from a large number of alarms in the database to be used as the root alarm for priority processing. After the root alarm processing is finished, some subsequent alarm information associated with the root alarm is solved along with the elimination of the root alarm, so that the processing amount of the alarm in the database can be reduced, the alarm information in the database can be rapidly processed, and the alarm processing efficiency is improved.
Specifically, in the present embodiment, after the alarm information occurs on one object, the alarm information therein easily causes alarms to occur on subsequent objects, so when the root alarm, which is the most previously occurring alarm, is released, the subsequent alarm associated with the root alarm can be released along with the root alarm when the root alarm is released. The generation time of the alarm generated by the preorder object is earlier than that of the alarm generated by the subsequent object, so that the root alarm can be more effectively found by screening the root alarm in the database according to the alarm generation time.
In the present embodiment, in step 2, the association relation between every two alarms in the alarm database is calculated. And preprocessing the data of the original alarm as a basis for subsequent calculation.
Referring to fig. 1, step 3 further includes analyzing the number of the alarms with the earliest occurrence time, if the number of the alarms with the earliest occurrence time is multiple, generating multiple alarm trees by taking each alarm with the earliest occurrence time as a root alarm, and performing calculation analysis on leaf nodes in the multiple alarm trees, and if the leaf nodes are the same, merging the leaf nodes to generate multiple trees with multiple root alarms. When a plurality of alarms exist at the earliest time, the plurality of alarms and the associated alarms form a plurality of alarm trees, at this time, calculation analysis needs to be carried out on leaf nodes in the plurality of alarm trees, and if the leaf nodes are the same, two alarm trees are combined to form a plurality of alarm trees formed by a plurality of root alarms. When the alarm on the alarm tree is eliminated, a plurality of root alarms on the alarm tree need to be eliminated simultaneously. Therefore, when the leaf node is on two alarm trees at the same time, the root alarm causing the leaf node alarm cannot be found accurately.
In this embodiment, the leaf nodes are the rest of alarms which occur later than the root alarm and are associated with the root alarm.
In this embodiment, the final determination of the direction of the association relationship between the alarms means that two alarms need to be compared, and the final determination is made by fitting calculation of an alarm object, alarm start time, alarm level, light path interconnection relationship, service access relationship, equipment power supply relationship, resource sharing relationship, and the like, to determine whether the direction is unidirectional or bidirectional.
Referring to fig. 1, the process in step 2 includes constructing an association vector for representing association degrees and derivative relationships of two or more alarms; if the two alarms are the same alarm object, the association vectors of the two alarms are in a bidirectional relationship; if the two alarms are alarm objects which are related to each other in the front-back sequence, the related vectors of the two alarms are in a one-way relation, and the front alarm points to the rear alarm; if the two alarms have different starting times, the association vectors of the two alarms are in a one-way relationship, and the alarm with the early starting time points to the alarm with the late starting time.
In this example, use
The association vector representing the alarm, in gxAnd gyTwo separate alarms are indicated.
The magnitude of (a) represents an alarm gxAnd alarm gyThe closeness degree of the association is generated by fitting calculation of an alarm object, alarm starting time, an alarm grade, a light path interconnection relation, a service access relation, an equipment power supply relation, a resource sharing relation and the like according to the alarm type. When alarming gxAnd an alarm gyWhen there is no association relationship between them,
is 0.
In the present embodiment, the first and second electrodes are,
is indicative of an alarm gxAnd an alarm gyA derivative of (A) and (B)E.g. in alarm gxAnd an alarm gyWhen the alarm objects are the same, alarm g is givenxAnd an alarm gyIs in a bidirectional relationship; in alarm gxAnd an alarm gyWhen the alarm object is related to the front and back orders, and alarm gxIs located in alarm gyIs the alarm gxDirection alarm gyAt alarm gxAnd an alarm gyWhen combined, alarm gyIs merged into an alarm gxRear of (g), alarm gxAs a root alarm.
In this embodiment, when the association vectors of the two alarms are in a bidirectional relationship, if the start times of the two alarms are different, the alarm with the earlier start time points to the alarm with the later start time. Alarm gxAnd an alarm gyIn a two-way relationship, but alarm gxOccurs earlier than the alarm gyTime of occurrence of, alarm gxAnd an alarm gyWhen combined, alarm gyIs merged into an alarm gxTo alarm gxAs a root alarm. Due to the alarm gxIf the occurrence time is earlier, alarm g is givenyIs due to the alarm gxWill be given an alarm gxThe alarm is used as root alarm, and the alarm g is processed preferentiallyxIs convenient for giving an alarm gyAnd eliminated together.
In this embodiment, the two alarms are in a front-to-back order relationship including when the alarm g is an alarm gyIs the alarm gxWhen the service of the alarm object is accessed into the device,
in a one-way relationship, by an alarm gxDirection alarm gy(ii) a Or when alarming gyThe alarm object is alarm gxWhen the alarm object is powered on,
in a one-way relationship, by an alarm gxDirection alarm gy。
Referring to fig. 1, when two alarms are the same object and the start times of the two alarms are different, the alarm with the earlier start time points to the alarm with the later start time. According to the condition that the objects of the alarms are the same, if the starting time of the two alarms is different, the two alarms are in a one-way relationship, the alarm with the later starting time is merged into the alarm with the earlier starting time, and the alarm with the earlier starting time is used as a root alarm. By adopting the method, the alarms can be combined according to the derivative relation and the occurrence time relation among the alarm objects, so that an alarm tree is formed to find out the most original root alarm, and the solution is given priority.
In this embodiment, if the two alarms are the same object and have the same alarm level, if the start times of the two alarms are different, the alarm with the earlier start time points to the alarm with the later start time.
Referring to fig. 1, if two alarm objects are the same object, the alarm with high level points to the alarm with low level, and if the two alarms have the same level, the two alarms are in a two-way relationship. The alarms may be classified by rank as a critical alarm, a primary alarm, a secondary alarm, a warning alarm. The serious alarm is an alarm which causes service interruption and needs to be immediately subjected to fault maintenance. The main alarm is an alarm which affects the service and needs to carry out fault maintenance immediately; secondary alarms, which do not affect existing services but require maintenance to prevent worsening alarms; and warning alarm does not affect the existing service, but possibly affects the service when developing, and measures can be taken as required. When multiple levels of alarms appear on the same object, the alarms with high levels are processed preferentially, and the alarms with low levels are processed together when the alarms with high levels are processed, for example, when the alarms are relieved when the objects to be alarmed are damaged and the alarms need to be replaced, the objects also have alarms with worn parts.
Referring to fig. 1, as a specific embodiment of the method for positioning and analyzing a network alarm based on spatio-temporal information, two alarms and alarm trees are merged according to the direction of the association vector between the alarms. When two alarms and alarm tree are combined, according to the vector relation between the alarm or root alarm of alarm tree they are combined, i.e. alarm gxAnd alarm gyWhen merging, if alarm gxDirection alarm gyThen, when merging, alarm gxWill trigger an alarm gyOccurs. When merging, alarm gyIs merged into an alarm gxRear of (g), alarm gxAlarm for root, alarm gyThe leaf is alerted.
Referring to fig. 1, as a specific embodiment of the method for locating and analyzing a network alarm based on spatio-temporal information, when subsequent alarms caused by two alarms are consistent, the two alarms are in a bidirectional relationship. And if the association vectors of the two alarms point to the subsequent alarms are the same, the two alarms are in a bidirectional relationship, the initiated subsequent alarm is one of the two alarms, and the two alarms are merged into a root alarm to form a plurality of alarm trees. Both alarms need to be handled.
Referring to fig. 1, as a specific embodiment of the method for positioning and analyzing a network alarm based on spatio-temporal information, when the association vectors of two root alarms are in a bidirectional relationship, the two alarm trees are merged, and the merged alarm tree has two parallel root alarms. When merging the alarm trees, if the association vector between the root alarms of the two alarm trees is in a bidirectional relationship, after merging the two alarm trees, the two root alarms are both used as the root alarms of the new alarm tree and are treated as the alarms with priority treatment.
Referring to fig. 1, as a specific embodiment of the method for positioning and analyzing a network alarm based on spatio-temporal information, when the association vectors of two root alarms are in a bidirectional relationship and the objects of the two root alarms are different, two alarm trees stand alone and are not merged. When merging is carried out between the alarm trees, if the association vector between the root alarms of the two alarm trees is in a bidirectional relation, the two alarm trees are not merged, and the root alarm in each alarm tree is taken as the alarm of priority processing.
Referring to fig. 1, the method for locating and analyzing a network alarm based on spatio-temporal information according to an embodiment of the present invention further includes step 6: and 5, re-executing the step 5 for the plurality of newly generated alarm trees in the step 5 until no new alarm tree is generated, thereby obtaining the final root alarm. When merging multiple alarm trees, the root alarms in the alarm trees need to be merged repeatedly. For different alarm trees Tx、TyCalculate g of its root alarmx、gyAlarm association vector of
If it is
If not 0, the alarm tree T is setx、TyAre combined into an alarm tree TZ(ii) a Then alarming the newly generated root g in the alarm treezAnd carrying out calculation analysis on the root alarms in other alarm trees to determine whether a mutual correlation relationship exists or not until no new alarm tree is generated finally. And finding the root alarm of the final alarm tree as the root alarm needing priority processing.
In this embodiment, the merged alarm tree TZThe root alarm in (g) may cause a new root alarm gzOr the original alarm tree Tx、TyRoot alarm g inx、gy。
In this embodiment, the plurality of alarm trees formed in step 4 are aggregated to form a first round of alarm tree set, relevant alarm elements related to the first round of alarm tree set are deleted from the database, whether the alarm number in the database is 0 is detected, if the alarm number in the database is 0, the operation in step 5 is performed, and if the alarm number in the database is not 0, the operation in step 3 is performed again.
In this embodiment, if there is no other related alarm in the database, the alarm is independently used as a root alarm to be an alarm tree when the alarm is the alarm with the earliest occurrence time, so as to prevent the operation of step 3 from being performed in the wireless loop in the database.
The present invention is not limited to the above preferred embodiments, and any modifications, equivalent substitutions and improvements made within the spirit and principle of the present invention should be included in the protection scope of the present invention.
Claims (10)
1. A network alarm positioning and analyzing method based on space-time information is characterized by comprising the following steps:
step 1: extracting the time of occurrence of the individual alarms in the alarm database, and sequencing the alarm database according to time;
step 2: calculating the incidence relation of all alarms in the database pairwise, and preprocessing the data of the alarms as the subsequent calculation basis;
and step 3: analyzing the information of the alarm in a database, defining the alarm with the earliest occurrence time as a root alarm, and combining the root alarm with other alarms associated with the root alarm to form an alarm tree;
and 4, step 4: repeating the step 3 on the remaining single alarms in the database to finally obtain a plurality of alarm trees;
and 5: and performing mutual calculation analysis on the root alarms in the plurality of alarm trees to determine whether an association relationship exists, judging the analysis result, combining the alarm trees in the mutually associated root alarms to form a new alarm tree, and finally forming the root alarm in the alarm tree, namely the alarm needing to be processed preferentially.
2. The spatio-temporal information-based network alarm positioning and analysis method according to claim 1, further comprising in step 3:
analyzing the number of the alarms with the earliest occurrence time, if the number of the alarms with the earliest occurrence time is multiple, generating a plurality of alarm trees by taking each alarm with the earliest occurrence time as a root alarm, performing calculation analysis on leaf nodes in the plurality of alarm trees, and combining the leaf nodes to generate a plurality of trees with a plurality of root alarms if the leaf nodes are the same.
3. The spatio-temporal information-based network alarm positioning and analysis method according to claim 1, wherein the process in the step 2 comprises:
constructing an association vector for representing the association degrees and the derivative relation of two or more alarms;
if the two alarms are the same alarm object, the association vectors of the two alarms are in a bidirectional relationship;
if the two alarms are alarm objects which are associated with each other in the front-back sequence, the association vectors of the two alarms are in a one-way relationship, and the front alarm points to the rear alarm;
and if the starting time of the two alarms is different, the association vectors of the two alarms are in a one-way relationship, and the alarm with the early starting time points to the alarm with the late starting time.
4. The spatio-temporal information-based network alarm locating and analyzing method of claim 3, wherein when two alarms are the same object and the start times of the two alarms are different, the alarm with the earlier start time points to the alarm with the later start time.
5. The spatio-temporal information-based network alarm positioning and analysis method according to claim 3, wherein if two of the alarms are of the same object, the alarm of high level points to the alarm of low level, and if the two alarms are of the same level, the two alarms are in a two-way relationship.
6. The spatio-temporal information-based network alarm positioning and analysis method according to claim 3, wherein two alarms and the alarm tree are merged according to the orientation of the association vector between the alarms.
7. The spatio-temporal information-based network alarm positioning and analysis method according to claim 3, wherein when subsequent alarms triggered by two of the alarms are consistent, the two alarms are in a two-way relationship.
8. The method as claimed in claim 3, wherein when the correlation vectors of the two root alarms are in a bidirectional relationship, the two alarm trees are merged, and the merged alarm tree has two parallel root alarms.
9. The method as claimed in claim 3, wherein when the association vectors of the two root alarms are in a bidirectional relationship and the objects of the two root alarms are different, the two alarm trees stand alone and are not merged.
10. The spatio-temporal information-based network alarm positioning and analysis method according to claim 1, wherein the spatio-temporal information-based network alarm positioning and analysis method further comprises:
step 6: and re-executing the step 5 for a plurality of newly generated alarm trees in the step 5 until no new alarm tree is generated, thereby obtaining the final root alarm.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111657985.1A CN114500229B (en) | 2021-12-30 | 2021-12-30 | Network alarm positioning and analyzing method based on space-time information |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111657985.1A CN114500229B (en) | 2021-12-30 | 2021-12-30 | Network alarm positioning and analyzing method based on space-time information |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114500229A true CN114500229A (en) | 2022-05-13 |
| CN114500229B CN114500229B (en) | 2024-02-02 |
Family
ID=81508209
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111657985.1A Active CN114500229B (en) | 2021-12-30 | 2021-12-30 | Network alarm positioning and analyzing method based on space-time information |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114500229B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2024007631A1 (en) * | 2022-07-08 | 2024-01-11 | 中兴通讯股份有限公司 | Fault root cause alarm positioning method, fault alarm mode construction method, and device |
Citations (24)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6253339B1 (en) * | 1998-10-28 | 2001-06-26 | Telefonaktiebolaget Lm Ericsson (Publ) | Alarm correlation in a large communications network |
| US20020069199A1 (en) * | 2000-12-01 | 2002-06-06 | Young-Hyun Kang | Method for managing alarm information in a network management system |
| US6604208B1 (en) * | 2000-04-07 | 2003-08-05 | Telefonaktiebolaget Lm Ericsson (Publ) | Incremental alarm correlation method and apparatus |
| CN101022366A (en) * | 2007-03-21 | 2007-08-22 | Ut斯达康通讯有限公司 | Trouble correlation analytic system and method |
| CN101938366A (en) * | 2009-06-30 | 2011-01-05 | 中兴通讯股份有限公司 | Method and device for realizing associated alarm |
| CN102136949A (en) * | 2011-03-24 | 2011-07-27 | 国网电力科学研究院 | Method and system for analyzing alarm correlation based on network and time |
| CN102291247A (en) * | 2010-06-18 | 2011-12-21 | 中兴通讯股份有限公司 | Alarm association diagram generation method and device and association alarm determination method and device |
| CN102368714A (en) * | 2011-11-09 | 2012-03-07 | 华为技术有限公司 | Network alarm processing method, apparatus and system thereof |
| CN102938708A (en) * | 2012-11-05 | 2013-02-20 | 国网电力科学研究院 | Alarm transmission mode based alarm correlation analysis system and analysis method thereof |
| CN103929326A (en) * | 2014-03-18 | 2014-07-16 | 烽火通信科技股份有限公司 | Communication network transmission type alarm uniform analysis device and method |
| CN105677759A (en) * | 2015-12-30 | 2016-06-15 | 国家电网公司 | Alarm correlation analysis method in communication network |
| CN106250288A (en) * | 2016-07-29 | 2016-12-21 | 浪潮软件集团有限公司 | Root alarm analysis and identification method based on data mining |
| CN106713017A (en) * | 2016-12-08 | 2017-05-24 | 国网北京市电力公司 | Alarm information processing method and apparatus |
| CN107196804A (en) * | 2017-06-01 | 2017-09-22 | 国网山东省电力公司信息通信公司 | Power system terminal communication access network Centralized Alarm Monitoring system and method |
| CN108243063A (en) * | 2017-12-28 | 2018-07-03 | 北京市天元网络技术股份有限公司 | The determining method and system of electric power terminal communication access net root alarm |
| CN109787817A (en) * | 2018-12-28 | 2019-05-21 | 武汉船舶通信研究所（中国船舶重工集团公司第七二二研究所） | Network fault diagnosis method, device and computer readable storage medium |
| CN111010297A (en) * | 2019-12-04 | 2020-04-14 | 国网山东省电力公司信息通信公司 | Intelligent analysis method and system for supporting cross-professional faults in power communication network |
| CN112395170A (en) * | 2020-12-07 | 2021-02-23 | 平安普惠企业管理有限公司 | Intelligent fault analysis method, device, equipment and storage medium |
| WO2021057576A1 (en) * | 2019-09-29 | 2021-04-01 | 中兴通讯股份有限公司 | Method for constructing cloud network alarm root cause relational tree model, device, and storage medium |
| CN112787860A (en) * | 2020-12-30 | 2021-05-11 | 广东电网有限责任公司电力调度控制中心 | Root alarm analysis and identification method and device |
| CN112948436A (en) * | 2021-03-01 | 2021-06-11 | 创新奇智(成都)科技有限公司 | Alarm work order merging method, device, equipment and storage medium |
| CN113381890A (en) * | 2021-06-08 | 2021-09-10 | 中国电信股份有限公司 | Alarm information association method and device, electronic equipment and readable storage medium |
| CN113542039A (en) * | 2021-09-16 | 2021-10-22 | 浩鲸云计算科技股份有限公司 | Method for positioning 5G network virtualization cross-layer problem through AI algorithm |
| CN113849513A (en) * | 2021-09-26 | 2021-12-28 | 中国地质大学（武汉） | Data center operation and maintenance alarm information merging method and system |
-
2021
- 2021-12-30 CN CN202111657985.1A patent/CN114500229B/en active Active
Patent Citations (24)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6253339B1 (en) * | 1998-10-28 | 2001-06-26 | Telefonaktiebolaget Lm Ericsson (Publ) | Alarm correlation in a large communications network |
| US6604208B1 (en) * | 2000-04-07 | 2003-08-05 | Telefonaktiebolaget Lm Ericsson (Publ) | Incremental alarm correlation method and apparatus |
| US20020069199A1 (en) * | 2000-12-01 | 2002-06-06 | Young-Hyun Kang | Method for managing alarm information in a network management system |
| CN101022366A (en) * | 2007-03-21 | 2007-08-22 | Ut斯达康通讯有限公司 | Trouble correlation analytic system and method |
| CN101938366A (en) * | 2009-06-30 | 2011-01-05 | 中兴通讯股份有限公司 | Method and device for realizing associated alarm |
| CN102291247A (en) * | 2010-06-18 | 2011-12-21 | 中兴通讯股份有限公司 | Alarm association diagram generation method and device and association alarm determination method and device |
| CN102136949A (en) * | 2011-03-24 | 2011-07-27 | 国网电力科学研究院 | Method and system for analyzing alarm correlation based on network and time |
| CN102368714A (en) * | 2011-11-09 | 2012-03-07 | 华为技术有限公司 | Network alarm processing method, apparatus and system thereof |
| CN102938708A (en) * | 2012-11-05 | 2013-02-20 | 国网电力科学研究院 | Alarm transmission mode based alarm correlation analysis system and analysis method thereof |
| CN103929326A (en) * | 2014-03-18 | 2014-07-16 | 烽火通信科技股份有限公司 | Communication network transmission type alarm uniform analysis device and method |
| CN105677759A (en) * | 2015-12-30 | 2016-06-15 | 国家电网公司 | Alarm correlation analysis method in communication network |
| CN106250288A (en) * | 2016-07-29 | 2016-12-21 | 浪潮软件集团有限公司 | Root alarm analysis and identification method based on data mining |
| CN106713017A (en) * | 2016-12-08 | 2017-05-24 | 国网北京市电力公司 | Alarm information processing method and apparatus |
| CN107196804A (en) * | 2017-06-01 | 2017-09-22 | 国网山东省电力公司信息通信公司 | Power system terminal communication access network Centralized Alarm Monitoring system and method |
| CN108243063A (en) * | 2017-12-28 | 2018-07-03 | 北京市天元网络技术股份有限公司 | The determining method and system of electric power terminal communication access net root alarm |
| CN109787817A (en) * | 2018-12-28 | 2019-05-21 | 武汉船舶通信研究所（中国船舶重工集团公司第七二二研究所） | Network fault diagnosis method, device and computer readable storage medium |
| WO2021057576A1 (en) * | 2019-09-29 | 2021-04-01 | 中兴通讯股份有限公司 | Method for constructing cloud network alarm root cause relational tree model, device, and storage medium |
| CN111010297A (en) * | 2019-12-04 | 2020-04-14 | 国网山东省电力公司信息通信公司 | Intelligent analysis method and system for supporting cross-professional faults in power communication network |
| CN112395170A (en) * | 2020-12-07 | 2021-02-23 | 平安普惠企业管理有限公司 | Intelligent fault analysis method, device, equipment and storage medium |
| CN112787860A (en) * | 2020-12-30 | 2021-05-11 | 广东电网有限责任公司电力调度控制中心 | Root alarm analysis and identification method and device |
| CN112948436A (en) * | 2021-03-01 | 2021-06-11 | 创新奇智(成都)科技有限公司 | Alarm work order merging method, device, equipment and storage medium |
| CN113381890A (en) * | 2021-06-08 | 2021-09-10 | 中国电信股份有限公司 | Alarm information association method and device, electronic equipment and readable storage medium |
| CN113542039A (en) * | 2021-09-16 | 2021-10-22 | 浩鲸云计算科技股份有限公司 | Method for positioning 5G network virtualization cross-layer problem through AI algorithm |
| CN113849513A (en) * | 2021-09-26 | 2021-12-28 | 中国地质大学（武汉） | Data center operation and maintenance alarm information merging method and system |
Non-Patent Citations (1)
| Title |
|---|
| 张玉玲: "WCDMA-RNC告警相关性研究", 哈尔滨工程大学, pages 1 - 14 * |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2024007631A1 (en) * | 2022-07-08 | 2024-01-11 | 中兴通讯股份有限公司 | Fault root cause alarm positioning method, fault alarm mode construction method, and device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114500229B (en) | 2024-02-02 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110609759A (en) | Fault root cause analysis method and device | |
| CN111176879A (en) | Fault repairing method and device for equipment | |
| CN109840157A (en) | Method, apparatus, electronic equipment and the storage medium of fault diagnosis | |
| CN111162949A (en) | Interface monitoring method based on Java byte code embedding technology | |
| CN108737182A (en) | The processing method and system of system exception | |
| CN109501834A (en) | A kind of point machine failure prediction method and device | |
| CN109034580B (en) | Information system overall health degree evaluation method based on big data analysis | |
| CN112559376A (en) | Automatic positioning method and device for database fault and electronic equipment | |
| CN112769605B (en) | Heterogeneous multi-cloud operation and maintenance management method and hybrid cloud platform | |
| CN114579407B (en) | Causal relationship inspection and micro-service index prediction alarm method | |
| CN115809183A (en) | Method for discovering and disposing information-creating terminal fault based on knowledge graph | |
| CN115237717A (en) | Micro-service abnormity detection method and system | |
| CN109448154A (en) | A kind of transmission line of electricity personnel method for inspecting and device | |
| CN114500229B (en) | Network alarm positioning and analyzing method based on space-time information | |
| Adaniya et al. | Anomaly detection using dsns and firefly harmonic clustering algorithm | |
| CN113704018A (en) | Application operation and maintenance data processing method and device, computer equipment and storage medium | |
| CN111913824A (en) | Method for determining data link fault reason and related equipment | |
| CN111080484A (en) | Method and device for monitoring abnormal data of power distribution network | |
| Xu et al. | Comparisons of logistic regression and artificial neural network on power distribution systems fault cause identification | |
| CN109523422A (en) | A kind of method for digging of distribution network failure influence factor | |
| CN112965990A (en) | Low-voltage contact cabinet fault solution generation method and device | |
| CN109634808B (en) | Chain monitoring event root cause analysis method based on correlation analysis | |
| CN116232695A (en) | Network security operation and maintenance association analysis system | |
| CN115529219A (en) | Alarm analysis method and device, computer readable storage medium and electronic equipment | |
| CN109617229A (en) | A kind of smart substation equipment void loop state appraisal procedure and assessment system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |