CN114884797A - Alarm information processing method, device, equipment and storage medium - Google Patents
Alarm information processing method, device, equipment and storage medium Download PDFInfo
- Publication number
- CN114884797A CN114884797A CN202210457920.0A CN202210457920A CN114884797A CN 114884797 A CN114884797 A CN 114884797A CN 202210457920 A CN202210457920 A CN 202210457920A CN 114884797 A CN114884797 A CN 114884797A
- Authority
- CN
- China
- Prior art keywords
- alarm information
- network element
- alarm
- preset time
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 230000010365 information processing Effects 0.000 title description 5
- 238000003672 processing method Methods 0.000 title description 4
- 238000012545 processing Methods 0.000 claims abstract description 95
- 238000000034 method Methods 0.000 claims abstract description 44
- 230000002159 abnormal effect Effects 0.000 claims abstract description 34
- 238000004891 communication Methods 0.000 claims abstract description 22
- 230000004044 response Effects 0.000 claims abstract description 21
- 230000005856 abnormality Effects 0.000 claims abstract description 11
- 238000013507 mapping Methods 0.000 claims description 31
- 230000006870 function Effects 0.000 description 14
- 238000005516 engineering process Methods 0.000 description 11
- 238000010586 diagram Methods 0.000 description 7
- 238000013461 design Methods 0.000 description 6
- 230000003287 optical effect Effects 0.000 description 5
- 238000012423 maintenance Methods 0.000 description 4
- 238000004590 computer program Methods 0.000 description 2
- 238000001514 detection method Methods 0.000 description 2
- 238000007726 management method Methods 0.000 description 2
- 230000003068 static effect Effects 0.000 description 2
- 238000012546 transfer Methods 0.000 description 2
- 238000013523 data management Methods 0.000 description 1
- 238000010295 mobile communication Methods 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
- 239000013307 optical fiber Substances 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0604—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
- H04L41/064—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis involving time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
- H04L41/065—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis involving logical or physical relationship, e.g. grouping and hierarchies
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The application provides a method, a device, equipment and a storage medium for processing alarm information, relates to the technical field of communication, and can reduce the time cost for processing the alarm information. The method comprises the following steps: receiving first alarm information from a first network element, wherein the first alarm information is used for indicating that the first network element is abnormal; and in response to receiving second alarm information from the second network element within a first preset time length, wherein the second alarm information is the superior alarm information of the first alarm information, deleting the first alarm information and reporting the second alarm information, wherein the second alarm information is used for indicating that the second network element is abnormal, and the reason of the abnormality of the second network element is associated with the reason of the abnormality of the first network element.
Description
Technical Field
The present application relates to the field of communications technologies, and in particular, to a method, an apparatus, a device, and a storage medium for processing alarm information.
Background
With the advent of virtualization technology, core networks for fifth generation mobile communications (5-generation, 5G) began to introduce software-defined networking (SDN) technology and Network Function Virtualization (NFV) technology. By adopting the SDN technology and the NFV technology, the flexibility, the expansibility and the safety of the 5G network can be improved.
However, when the 5G network is too flexible, a large amount of alarm information exists in the 5G network in actual operation, so that maintenance personnel needs to spend a large amount of time on processing the alarm information, and the time cost is high.
Disclosure of Invention
The application provides a method, a device, equipment and a storage medium for processing alarm information, so as to reduce the time cost for processing the alarm information.
In order to achieve the purpose, the technical scheme is as follows:
in a first aspect, the present application provides a method for processing alarm information, including: receiving first alarm information from a first network element, wherein the first alarm information is used for indicating that the first network element is abnormal; and in response to receiving second alarm information from the second network element within a first preset time length, wherein the second alarm information is the superior alarm information of the first alarm information, deleting the first alarm information and reporting the second alarm information, wherein the second alarm information is used for indicating that the second network element is abnormal, and the reason of the abnormality of the second network element is associated with the reason of the abnormality of the first network element.
Optionally, when the first network element and the second network element are the same network element, before the second alarm information is reported, in response to receiving the third alarm information within a second preset time length, where the third alarm information is a higher-level alarm information of the second alarm information, the second alarm information is deleted, and the third alarm information is reported, where the second preset time length is located after the first preset time length.
Optionally, it is determined whether the second alarm information is a higher-level alarm information of the first alarm information and whether the third alarm information is a higher-level alarm information of the second alarm information according to a first mapping relationship, where the first mapping relationship includes a plurality of alarm information corresponding to each of the plurality of network elements and a higher-level alarm information corresponding to each of the alarm information.
Optionally, when the first network element and the second network element are different types of network elements, the method further includes: and determining whether the second alarm information is the superior alarm information of the first alarm information according to a second mapping relation, wherein the second mapping relation comprises the alarm information corresponding to different types of network elements and the superior alarm information corresponding to each alarm information.
Optionally, in response to that the third warning information is not received within the second preset time period, the first warning information is deleted, and the second warning information is reported.
In a second aspect, the present application provides an apparatus for processing alarm information, including: a receiving unit and a processing unit; the receiving unit is used for receiving first alarm information from a first network element, wherein the first alarm information is used for indicating that the first network element is abnormal; the processing unit is used for responding to second alarm information received from the second network element within a first preset time length, deleting the first alarm information and reporting the second alarm information, wherein the second alarm information is the superior alarm information of the first alarm information, the second alarm information is used for indicating the second network element is abnormal, and the abnormal reason of the second network element is associated with the abnormal reason of the first network element.
Optionally, the processing unit is further configured to: and in response to receiving the third alarm information within a second preset time length, wherein the third alarm information is the superior alarm information of the second alarm information, deleting the second alarm information and reporting the third alarm information, wherein the second preset time length is behind the first preset time length.
Optionally, the processing unit is specifically configured to: and determining whether the second alarm information is the upper-level alarm information of the first alarm information and whether the third alarm information is the upper-level alarm information of the second alarm information according to a first mapping relation, wherein the first mapping relation comprises a plurality of alarm information corresponding to each network element in the plurality of network elements and the upper-level alarm information corresponding to each alarm information.
Optionally, when the first network element and the second network element are different types of network elements, the processing unit is further configured to: and determining whether the second alarm information is the superior alarm information of the first alarm information according to a second mapping relation, wherein the second mapping relation comprises the alarm information corresponding to different types of network elements and the superior alarm information corresponding to each alarm information.
Optionally, the processing unit is further configured to: and in response to the fact that the third alarm information is not received within the second preset time length, deleting the first alarm information and reporting the second alarm information.
In a third aspect, the present application provides a communication device, comprising: a processor, a communication interface, and a memory; wherein the memory is configured to store one or more programs, the one or more programs including computer executable instructions, and when the communication device runs, the processor executes the computer executable instructions stored in the memory, so as to enable the communication device to perform the method for processing the alarm information according to any one of the first aspect and the various optional implementations thereof.
In a fourth aspect, the present application provides a computer-readable storage medium, where instructions are stored, and when the instructions are executed by a computer, the computer executes the method for processing the alarm information in any one of the first aspect and various optional implementation manners.
Based on the technical scheme provided by the embodiment of the application, after receiving the first alarm information from the first network element, in response to receiving the second alarm information from the second network element within the first preset time period, wherein the second alarm information is the superior alarm information of the first alarm information, the first alarm information is deleted, and the second alarm information is reported, and is used for indicating that the second network element is abnormal. Because the first alarm information and the second alarm information have the hierarchical relationship and the alarm reason of the first alarm information is associated with the alarm reason of the second alarm information, only the upper-level alarm information in the plurality of alarm information with the hierarchical relationship needs to be reported, the reporting number of the alarm information is reduced, and the time for processing the alarm information can be reduced.
Drawings
Fig. 1 is a schematic diagram of a network architecture according to an embodiment of the present application;
fig. 2 is a schematic diagram of another network architecture provided in the embodiment of the present application;
fig. 3 is a schematic structural diagram of an apparatus for processing alarm information according to an embodiment of the present application;
fig. 4 is a schematic flowchart of a method for processing alarm information according to an embodiment of the present application;
fig. 5 is a schematic flowchart of a method for processing alarm information according to an embodiment of the present application;
fig. 6 is a schematic flowchart of a method for processing alarm information according to an embodiment of the present application;
fig. 7 is a schematic structural diagram of an alarm information processing apparatus according to an embodiment of the present application.
Detailed Description
The following describes in detail a method, an apparatus, a device, and a storage medium for processing alarm information provided in an embodiment of the present application with reference to the drawings.
The term "and/or" herein is merely an association describing an associated object, meaning that three relationships may exist, e.g., a and/or B, may mean: a exists alone, A and B exist simultaneously, and B exists alone.
The terms "first" and "second" and the like in the description and drawings of the present application are used for distinguishing different objects or for distinguishing different processes for the same object, and are not used for describing a specific order of the objects.
Furthermore, the terms "including" and "having," and any variations thereof, as referred to in the description of the present application, are intended to cover non-exclusive inclusions. For example, a process, method, system, article, or apparatus that comprises a list of steps or elements is not limited to only those steps or elements but may alternatively include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
It should be noted that in the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described herein as "exemplary" or "e.g.," is not necessarily to be construed as preferred or advantageous over other embodiments or designs. Rather, use of the word "exemplary" or "such as" is intended to present concepts related in a concrete fashion.
In the description of the present application, the meaning of "a plurality" means two or more unless otherwise specified.
With the rise of virtualization technology, the 5G core network starts to introduce the SDN technology and the NFV technology, and the flexibility, the extensibility, and the security of the 5G network can be improved by adopting the SDN technology and the NFV technology. However, under the condition that the 5G network is too flexible, a large amount of alarm information exists in the 5G network in actual operation, and the fault corresponding to the alarm information is difficult to locate, so that the operation efficiency of the 5G network is seriously influenced.
In view of this, an embodiment of the present application provides a method for processing alarm information, including:
receiving first alarm information from a first network element, wherein the first alarm information is used for indicating that the first network element is abnormal; and in response to receiving second alarm information from the second network element within a first preset time length, wherein the second alarm information is the superior alarm information of the first alarm information, deleting the first alarm information and reporting the second alarm information, wherein the second alarm information is used for indicating that the second network element is abnormal.
A method for processing alarm information (hereinafter referred to as a processing method) provided in an embodiment of the present application is described below with reference to the drawings of the specification.
The processing method provided by the embodiment of the present application may be applied to the network architecture shown in fig. 1, where the network architecture may include a network element layer 11 and an alarm processing platform 12. The network element layer 11 is in communication connection with the alarm processing platform 12. For example, a wireless communication connection.
Wherein, the network element layer 11 may be configured to send the alarm information to the alarm processing platform 12 in an abnormal situation.
The alarm information may be used to indicate that a network element in the network element layer 11 is abnormal. The alarm information may include the type of the network element of the alarm, the alarm code, the alarm title, the alarm level, the alarm serial number, the positioning information, the reason for generating the alarm, and the like. The alarm level may be used to characterize the importance of the alarm information, the higher the alarm level, the more important the alarm information. For example, the alarm information may be as shown in table 1.
TABLE 1 Warning information
It should be noted that table 1 is only exemplary, and may further include other different alarm information, which is not limited.
Further, the alarm processing platform may execute different processing strategies according to the alarm level. For example, the alarm levels may include one level, two levels, three levels, and four levels. The higher the alarm level of the alarm information is, the more important the alarm is. Therefore, the alarm processing platform can execute different notification strategies according to different alarm levels. For example, if the alarm level is one level, the alarm processing platform inputs the alarm information. For example, the alert information may be presented in a display device in the alert processing platform. If the alarm level is higher than the first level, the alarm processing platform can inform the operation and maintenance personnel in time so that the operation and maintenance personnel can process the alarm information as soon as possible. For example, the alarm processing platform may send the alarm information to a terminal (such as a mobile phone) used by an operation and maintenance person in a short message manner.
It should be noted that the network element layer in the cloud core network includes a Virtual Network Function (VNF) network element, and the VNF network element may include multiple types of network elements. For example, a Unified Data Management (UDM) network element, a network storage function (NRF) network element, an access and mobility management function (AMF) network element, a Session Management Function (SMF) network element, a Policy Control Function (PCF) network element, and the like may be included. The functions of the above listed network elements may refer to the prior art, and are not described in detail.
In one possible implementation, as shown in fig. 2, the network architecture may further include a virtual layer 13 and a hardware layer 14.
The virtual layer 13 may include a Physical Infrastructure Manager (PIM), a Virtual Infrastructure Manager (VIM), and the like. The hardware layer 14 may include hardware resources. The specific functions of the virtual layer 13 and the hardware layer 14 can refer to the prior art, and are not described in detail.
It should be noted that the network element layer, the virtual layer, and the hardware layer all belong to a cloud core network.
It should be noted that fig. 1 and fig. 2 are only exemplary architecture diagrams, and the network architecture may include other functional units besides the functional units shown in fig. 1 and fig. 2, which is not limited in this application.
In a specific implementation, each of the apparatuses in fig. 1 and 2 may adopt the composition structure shown in fig. 3, or include the components shown in fig. 3. Fig. 3 is a schematic diagram of a processing device according to an embodiment of the present disclosure, where the processing device includes a processor 301, a communication interface 302, a communication line 303, and a memory 304.
The processor 301 may be a CPU, a general purpose processor Network (NP), a Digital Signal Processor (DSP), a microprocessor, a microcontroller, a Programmable Logic Device (PLD), or any combination thereof. The processor 301 may also be other devices with processing functions, such as, without limitation, a circuit, a device, or a software element. In one example, the processor 301 may include one or more CPUs, such as CPU0 and CPU1 in fig. 3.
A communication interface 302 for data processing with other devices or other data processing networks. The other data processing network may be an ethernet, a Radio Access Network (RAN) device, a Wireless Local Area Network (WLAN), or the like. The communication interface may be a unit, a circuit, a communication interface or any device capable of data processing.
A communication line 303 for transmitting messages between the various components comprised in the access system.
A memory 304 for storing instructions. Wherein the instructions may be a computer program.
The memory 304 may be a read-only memory (ROM) or other types of static storage devices that can store static messages and/or instructions, a Random Access Memory (RAM) or other types of dynamic storage devices that can store messages and/or instructions, an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compact disc, laser disc, optical disc, digital versatile disc, blu-ray disc, etc.), a magnetic disc storage medium or other magnetic storage devices, and the like, without limitation.
It is noted that the memory 304 may exist separately from the processor 301 or may be integrated with the processor 301. The memory 304 may be used for storing instructions or program code or some network data or the like. The memory 304 may be located within the processing device or external to the processing device, without limitation. The processor 301 is configured to execute the instructions stored in the memory 304 to implement the method for processing the alarm information according to the following embodiments of the present application.
As an alternative implementation, the processing means comprises a plurality of processors, for example, the processor 307 may be included in addition to the processor 301 in fig. 3.
As an alternative implementation, the processing apparatus further comprises an output device 305 and an input device 306. Illustratively, the input device 306 is a keyboard, mouse, microphone, or joystick-like device, and the output device 305 is a display screen, speaker (spaker), or like device.
In the embodiment of the present application, the chip system may be formed by a chip, and may also include a chip and other discrete devices.
In addition, acts, terms, and the like referred to between the embodiments of the present application may be mutually referenced and are not limited. In the embodiment of the present application, the name of the message exchanged between the devices or the name of the parameter in the message, etc. are only an example, and other names may also be used in the specific implementation, which is not limited.
As shown in fig. 4, the method for processing alarm information provided in the embodiment of the present application may be applied to the network architecture shown in fig. 1 or fig. 2, and the method may include the following steps S401 to S402.
S401, the alarm processing platform receives first alarm information from a first network element.
The alarm processing platform may be the alarm processing platform 12 in fig. 1 or fig. 2, or may be a device, such as a chip, in the alarm processing platform 12. The first network element may be a network element in the network element layer 11 in fig. 1 or fig. 2, and may also be a device, such as a chip, in the network element layer 11. For example, the first network element may be a UDM network element or a chip in a UDM network element.
The first alarm information is used for indicating that the first network element is abnormal. The first alarm information may include a network element type, an alarm code, an alarm title, an alarm level, an alarm serial number, positioning information, a reason for generating an alarm, and the like. For example, when the first alarm information includes a network element type, an alarm code, and an alarm header, the first alarm information may be as shown in table 2.
TABLE 2 first Warning information
It should be noted that table 2 is only exemplary, and may further include, without limitation, a network element type, an alarm code, and an alarm header of the first network element.
S402, in response to receiving second alarm information from the second network element within a first preset time length, wherein the second alarm information is the superior alarm information of the first alarm information, the alarm processing platform deletes the first alarm information and reports the second alarm information.
The second network element may be a network element in the network element layer 11 in fig. 1 or fig. 2, or may be a device, such as a chip, in the network element layer 11. The second network element may be the same network element as the first network element, or may be a different type of network element. For example, the second network element may be a UDM network element or a chip in a UDM network element, or may also be an SMF network element or a chip in an SMF network element.
The first preset time can be set as required. For example, it may be 2 minutes, 5 minutes, or the like. The second warning information is used for indicating that the second network element is abnormal. The description of the second warning information may refer to the description of the first warning information, which is not described herein again. The association between the abnormal reason of the second network element and the abnormal reason of the first network element means that the abnormal reason of the second network element is consistent with the abnormal reason of the first network element, or the abnormal reason of the second network element includes the abnormal reason of the first network element, or the abnormal reason of the second network element is generated due to the abnormality of the first network element, or the abnormal reason of the first network element and the abnormal reason of the second network element are caused by the same abnormal event. The exception event may include a line fault, a signal exception, etc.
As a possible implementation manner, in a case that the first network element and the second network element are the same network element, the alarm processing platform may determine whether the second alarm information is the upper-level alarm information of the first alarm information according to the first mapping relationship.
The first mapping relationship may include a plurality of alarm information corresponding to each of the plurality of network elements and upper-level alarm information corresponding to each alarm information. The first mapping relationship may be pre-stored in the alarm processing platform. For example, taking the first network element as the UDM network element as an example, the first mapping relationship may be as shown in table 3.
TABLE 3 first mapping relationship
It should be noted that table 3 is only exemplary, and may further include other alarm information and upper-level alarm information corresponding to the alarm information, which is not limited.
In an example, when the first alarm information is that an alarm code reported by the UDM network element is UN021 and an alarm flag is NRF connection failure, if the alarm processing platform receives second alarm information that the alarm code reported by the UDM network element is UN011 and the alarm flag is NRF node unreachable within a first preset time, deleting the first alarm information and reporting the second alarm information.
And in response to that the second alarm information from the second network element is not received within the first preset time length and the second alarm information is the superior alarm information of the first alarm information, the alarm processing platform reports the first alarm information.
Illustratively, when the first alarm information is that the alarm code reported by the UDM network element is UN021 and the alarm title is NRF connection failure, if the second alarm information that the alarm code reported by the UDM network element is UN011 and the alarm title is that the NRF node is unreachable is not received within the first preset time, the alarm processing platform reports the first alarm information.
As a possible implementation manner, in a case that the first network element and the second network element are different types of network elements, the alarm processing platform may determine whether the second alarm information is the upper-level alarm information of the first alarm information according to the second mapping relationship.
The second mapping relation comprises alarm information corresponding to different types of network elements and superior alarm information corresponding to each alarm information. The second mapping relationship may be pre-stored in the alarm processing platform. For example, the second mapping relationship may be as shown in table 4.
TABLE 4 second mapping relationship
It should be noted that table 4 is only exemplary, and may also include alarm information between other different network elements and upper-level alarm information corresponding to the alarm information, which is not limited.
Exemplarily, in combination with table 4, when the first alarm information includes that the alarm code reported by the UDM network element is UN011 and the alarm flag is that the NRF node is unreachable, and the second alarm information includes that the alarm code reported by the NRF network element is NN002 and the alarm flag is that a hypertext transfer protocol (HTTP) detection (hooking back, LB) module is abnormal in communication, the alarm processing platform determines that the second alarm information is the upper-level alarm information of the first alarm information. And then deleting the first alarm information and reporting the second alarm information.
Illustratively, when the first alarm information is that an alarm code reported by the UDM network element is UN011, the alarm title is that the NRF node is unreachable, the second alarm information is not that the alarm code reported by the NRF network element is NN002, and the alarm title is that a hypertext transfer protocol (HTTP) detection (LB) module is abnormal in communication, the alarm processing platform determines that the second alarm information is not the upper-level alarm information of the first alarm information. Therefore, the alarm processing platform can report the first alarm information and the second alarm information.
Further, the alarm information may also include a reason for generating the alarm. For example, when the UDM network element reports alarm information with an alarm title of NRF connection failure, the reason for generating an alarm may include: UDM network element damage, NRF network element damage, communication network failure, etc.
Therefore, after receiving the first alarm information from the first network element, the method and the device respond to the fact that the second alarm information from the second network element is received within the first preset time length, the second alarm information is the superior alarm information of the first alarm information, the first alarm information is deleted, and the second alarm information is reported, and the second alarm information is used for indicating that the second network element is abnormal. Because the first alarm information and the second alarm information have the hierarchical relationship and the alarm reason of the first alarm information is associated with the alarm reason of the second alarm information, only the upper-level alarm information in the plurality of alarm information with the hierarchical relationship needs to be reported, the reporting number of the alarm information is reduced, and the time for processing the alarm information can be reduced.
In a possible embodiment, when the first network element and the second network element are the same network element, before the second warning information is reported, as shown in fig. 5, the method provided in this embodiment may further include the following step S501.
S501, in response to receiving the third alarm information within the second preset time period, wherein the third alarm information is the upper-level alarm information of the second alarm information, the alarm processing platform deletes the second alarm information and reports the third alarm information.
And the second preset time length is positioned behind the first preset time length. The starting time of the second preset duration may be the time when the second warning message is received. The second preset time period may be set according to needs, and may be, for example, 2 minutes, 3 minutes, and the like, without limitation.
As a possible implementation manner, the alarm processing platform is provided with a timer, and the alarm processing platform may control the timer to start timing after receiving the second alarm information. If the time length timed by the timer does not exceed the second preset time length, the alarm processing platform receives the third alarm information, and the third alarm information is the superior alarm information of the second alarm information, so that the second alarm information can be deleted, and the third alarm information is reported.
It should be noted that the alarm processing platform may determine whether the third alarm information is the upper-level alarm information of the second alarm information according to the first mapping relationship (as shown in table 3 above).
For example, when the second alarm information includes that the network element type is the UDM network element, the alarm code is UN011, and the alarm title is that the NRF node is unreachable, if the third alarm information includes that the network element type is the UDM network element, the alarm code is UN012, and the alarm title is that the bearer network is unavailable. The alarm processing platform may determine that the third alarm information is the upper-level alarm information of the second alarm information.
Further, before reporting the third warning information, the warning processing platform may further repeatedly perform the following steps: determining that the alarm information to be reported also has corresponding upper-level alarm information, deleting the alarm information to be reported and reporting the corresponding upper-level alarm information under the condition that the upper-level alarm information corresponding to the alarm information to be reported is received within a preset time length.
Therefore, the alarm processing platform can determine whether the higher-level alarm information has the higher-level alarm information or not, and delete the higher-level alarm information under the condition that the higher-level alarm information has the higher-level alarm information, so that the reporting quantity of the alarm information is reduced.
In a possible embodiment, as shown in fig. 6, the method provided in the embodiment of the present application may further include S601.
S601, in response to that the third alarm information is not received within a second preset time, the alarm processing platform deletes the first alarm information and reports the second alarm information.
Therefore, the alarm processing platform can report the second alarm information in time under the condition that the second alarm information does not have corresponding superior alarm information.
In the embodiment of the present application, the server may be divided into the functional units or the functional units according to the above method examples, for example, each functional unit or functional unit may be divided corresponding to each function, or two or more functions may be integrated into two units. The integrated unit may be implemented in a form of hardware, or may be implemented in a form of a software functional unit or a functional unit. The division of the unit or the unit in the embodiment of the present application is schematic, and is only a logic function division, and there may be another division manner in the actual division.
Fig. 7 shows a schematic diagram of a possible structure of the alarm information processing device in the above embodiment. As shown in fig. 7, the warning information processing apparatus 70 includes: receiving section 701 and processing section 702.
A receiving unit 701, configured to receive first warning information from a first network element, where the first warning information is used to indicate that the first network element is abnormal. For example, as shown in fig. 4, the receiving unit 701 may be configured to perform S401.
The processing unit 702 is configured to, in response to receiving second alarm information from the second network element within a first preset time period, delete the first alarm information and report second alarm information, where the second alarm information is a higher-level alarm information of the first alarm information, and the second alarm information is used to indicate that the second network element is abnormal, and a reason for the abnormality of the second network element is associated with a reason for the abnormality of the first network element. For example, as shown in fig. 4, the processing unit 702 may be configured to execute S402.
In one possible design, the processing unit 702 is further configured to: and in response to receiving the third alarm information within a second preset time length, wherein the third alarm information is the superior alarm information of the second alarm information, deleting the second alarm information and reporting the third alarm information, wherein the second preset time length is behind the first preset time length. For example, as shown in fig. 5, the processing unit 702 may be configured to execute S501.
In one possible design, the processing unit 702 is specifically configured to: and determining whether the second alarm information is the superior alarm information of the first alarm information and whether the third alarm information is the superior alarm information of the second alarm information according to a first mapping relation, wherein the first mapping relation comprises a plurality of alarm information corresponding to each of the plurality of network elements and the superior alarm information corresponding to each alarm information.
In one possible design, when the first network element and the second network element are different types of network elements, the processing unit 702 is further configured to: and determining whether the second alarm information is the superior alarm information of the first alarm information according to a second mapping relation, wherein the second mapping relation comprises the alarm information corresponding to different types of network elements and the superior alarm information corresponding to each alarm information.
In one possible design, the processing unit 702 is further configured to: and in response to the fact that the third alarm information is not received within the second preset time length, deleting the first alarm information and reporting the second alarm information. For example, as shown in fig. 6, the processing unit 702 may be configured to execute S601.
Through the description of the above embodiments, it is clear to those skilled in the art that, for convenience and simplicity of description, the foregoing division of each functional unit is merely used as an example, and in practical applications, the processing of the function alarm information may be completed by different functional units according to needs, that is, the internal structure of the device may be divided into different functional units to complete all or part of the functions described above. For the specific working processes of the system, the apparatus and the unit described above, reference may be made to the corresponding processes in the foregoing method embodiments, and details are not described here again.
The embodiment of the present application provides a computer program product containing instructions, which, when running on a computer, causes the computer to execute the method for processing alarm information of the above method embodiment.
The embodiment of the present application further provides a computer-readable storage medium, where instructions are stored in the computer-readable storage medium, and when the processing device of the alarm information executes the instructions, the processing device of the alarm information executes the steps executed by the processing device of the alarm information in the method flow shown in the above method embodiment.
The computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a Read-Only Memory (ROM), an Erasable Programmable Read-Only Memory (EPROM), a register, a hard disk, an optical fiber, a portable Compact Disc Read-Only Memory (CD-ROM), an optical storage device, a magnetic storage device, any suitable combination of the above, or any other form of computer readable storage medium known in the art. An exemplary storage medium is coupled to the processor such the processor can read information from, and write information to, the storage medium. Of course, the storage medium may also be integral to the processor. The processor and the storage medium may reside in an Application Specific Integrated Circuit (ASIC). In embodiments of the present application, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.
The above description is only an embodiment of the present application, but the scope of the present application is not limited thereto, and any changes or substitutions within the technical scope of the present disclosure should be covered by the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.
Claims (12)
1. A method for processing alarm information is characterized in that the method comprises the following steps:
receiving first alarm information from a first network element, wherein the first alarm information is used for indicating that the first network element is abnormal;
in response to receiving second alarm information from a second network element within a first preset time length, wherein the second alarm information is superior alarm information of the first alarm information, deleting the first alarm information, and reporting the second alarm information, wherein the second alarm information is used for indicating that the second network element is abnormal, and the reason for the abnormality of the second network element is associated with the reason for the abnormality of the first network element.
2. The method of claim 1, wherein when the first network element and the second network element are the same network element, before reporting the second warning message, the method further comprises:
and in response to receiving third alarm information within a second preset time length, wherein the third alarm information is the superior alarm information of the second alarm information, deleting the second alarm information and reporting the third alarm information, wherein the second preset time length is positioned after the first preset time length.
3. The method of claim 2, further comprising:
determining whether the second alarm information is the upper-level alarm information of the first alarm information and whether the third alarm information is the upper-level alarm information of the second alarm information according to a first mapping relation, wherein the first mapping relation comprises a plurality of alarm information corresponding to each network element in a plurality of network elements and the upper-level alarm information corresponding to each alarm information.
4. The method of claim 2, wherein when the first network element and the second network element are different types of network elements, the method further comprises:
and determining whether the second alarm information is the superior alarm information of the first alarm information according to a second mapping relation, wherein the second mapping relation comprises the alarm information corresponding to different types of network elements and the superior alarm information corresponding to each alarm information.
5. The method according to any one of claims 2-4, further comprising:
and in response to the third alarm information not being received within a second preset time length, deleting the first alarm information and reporting the second alarm information.
6. An apparatus for processing alarm information, the apparatus comprising: a receiving unit and a processing unit;
the receiving unit is configured to receive first warning information from a first network element, where the first warning information is used to indicate that the first network element is abnormal;
the processing unit is configured to delete a first alarm message and report a second alarm message in response to receiving the second alarm message from a second network element within a first preset time period, where the second alarm message is a higher-level alarm message of the first alarm message, and the second alarm message is used to indicate that the second network element is abnormal, and a reason for the abnormality of the second network element is associated with a reason for the abnormality of the first network element.
7. The apparatus of claim 6, wherein the processing unit is further configured to:
and in response to receiving third alarm information within a second preset time length, wherein the third alarm information is the superior alarm information of the second alarm information, deleting the second alarm information and reporting the third alarm information, wherein the second preset time length is positioned after the first preset time length.
8. The apparatus according to claim 7, wherein the processing unit is specifically configured to:
determining whether the second alarm information is the upper-level alarm information of the first alarm information and whether the third alarm information is the upper-level alarm information of the second alarm information according to a first mapping relation, wherein the first mapping relation comprises a plurality of alarm information corresponding to each network element in a plurality of network elements and the upper-level alarm information corresponding to each alarm information.
9. The apparatus of claim 7, wherein when the first network element and the second network element are different types of network elements, the processing unit is further configured to:
and determining whether the second alarm information is the superior alarm information of the first alarm information according to a second mapping relation, wherein the second mapping relation comprises the alarm information corresponding to different types of network elements and the superior alarm information corresponding to each alarm information.
10. The apparatus according to any of claims 7-9, wherein the processing unit is further configured to:
and in response to the third alarm information not being received within a second preset time length, deleting the first alarm information and reporting the second alarm information.
11. A communication device, characterized in that the communication device comprises: a processor, a communication interface, and a memory; wherein the memory is configured to store one or more programs, the one or more programs comprising computer-executable instructions that, when executed by the communication device, cause the communication device to perform the method of any of claims 1-5 by executing the computer-executable instructions stored by the memory.
12. A computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by a computer, cause the computer to perform the method of any of claims 1-5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210457920.0A CN114884797A (en) | 2022-04-27 | 2022-04-27 | Alarm information processing method, device, equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210457920.0A CN114884797A (en) | 2022-04-27 | 2022-04-27 | Alarm information processing method, device, equipment and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN114884797A true CN114884797A (en) | 2022-08-09 |
Family
ID=82671513
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210457920.0A Pending CN114884797A (en) | 2022-04-27 | 2022-04-27 | Alarm information processing method, device, equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114884797A (en) |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101360001A (en) * | 2007-07-31 | 2009-02-04 | 中兴通讯股份有限公司 | Apparatus and method for processing alarm by network manager at upper layer |
| CN102664760A (en) * | 2012-04-28 | 2012-09-12 | 华为技术有限公司 | Alarming method for communication system, equipment and communication system |
| CN103209096A (en) * | 2013-04-01 | 2013-07-17 | 大唐移动通信设备有限公司 | Method and device for alarm processing |
| CN109510718A (en) * | 2017-09-15 | 2019-03-22 | 华为技术有限公司 | The processing method and processing device of warning information |
| CN111181837A (en) * | 2019-11-29 | 2020-05-19 | 深圳市思博创科技有限公司 | Method and device for sending alarm information |
| CN111181751A (en) * | 2018-11-12 | 2020-05-19 | 中国移动通信集团广东有限公司 | Stroboscopic alarm order dispatching control method and system |
| CN113891374A (en) * | 2021-10-12 | 2022-01-04 | 中国联合网络通信集团有限公司 | Method, device and equipment for identifying fault network element |
| CN114024828A (en) * | 2021-10-15 | 2022-02-08 | 烽火通信科技股份有限公司 | Platform side alarm suppression method, device and storage medium |
| CN114282603A (en) * | 2021-12-07 | 2022-04-05 | 中国联合网络通信集团有限公司 | Alarm information clustering method and device and storage medium |
-
2022
- 2022-04-27 CN CN202210457920.0A patent/CN114884797A/en active Pending
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101360001A (en) * | 2007-07-31 | 2009-02-04 | 中兴通讯股份有限公司 | Apparatus and method for processing alarm by network manager at upper layer |
| CN102664760A (en) * | 2012-04-28 | 2012-09-12 | 华为技术有限公司 | Alarming method for communication system, equipment and communication system |
| CN103209096A (en) * | 2013-04-01 | 2013-07-17 | 大唐移动通信设备有限公司 | Method and device for alarm processing |
| CN109510718A (en) * | 2017-09-15 | 2019-03-22 | 华为技术有限公司 | The processing method and processing device of warning information |
| CN111181751A (en) * | 2018-11-12 | 2020-05-19 | 中国移动通信集团广东有限公司 | Stroboscopic alarm order dispatching control method and system |
| CN111181837A (en) * | 2019-11-29 | 2020-05-19 | 深圳市思博创科技有限公司 | Method and device for sending alarm information |
| CN113891374A (en) * | 2021-10-12 | 2022-01-04 | 中国联合网络通信集团有限公司 | Method, device and equipment for identifying fault network element |
| CN114024828A (en) * | 2021-10-15 | 2022-02-08 | 烽火通信科技股份有限公司 | Platform side alarm suppression method, device and storage medium |
| CN114282603A (en) * | 2021-12-07 | 2022-04-05 | 中国联合网络通信集团有限公司 | Alarm information clustering method and device and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110224858B (en) | Log-based alarm method and related device | |
| CN106844165B (en) | Alarm method and device | |
| CN112311617A (en) | Configured data monitoring and alarming method and system | |
| CN109005085A (en) | A kind of service availability monitoring system, method, device and equipment | |
| CN109669835B (en) | MySQL database monitoring method, device, equipment and readable storage medium | |
| CN107729213B (en) | Background task monitoring method and device | |
| CN112698915A (en) | Multi-cluster unified monitoring alarm method, system, equipment and storage medium | |
| CN110932933B (en) | Network condition monitoring method, computing device and computer storage medium | |
| CN109428779A (en) | A kind of monitoring alarm method and device of distributed service | |
| CN107577527B (en) | Task generation and scheduling method and device | |
| CN108363653A (en) | Dispositions method, device, computer equipment and the storage medium of monitoring system | |
| CN110417586A (en) | Service monitoring method, service node, server and computer readable storage medium | |
| TWI251157B (en) | Event logging system and method | |
| CN111949421B (en) | SDK calling method, device, electronic equipment and computer readable storage medium | |
| CN111262731B (en) | Alarm method, alarm device, server equipment and storage medium | |
| CN107276813A (en) | A kind of SNMP TRAP alarm methods and device | |
| CN114884797A (en) | Alarm information processing method, device, equipment and storage medium | |
| CN115580522A (en) | Method and device for monitoring running state of container cloud platform | |
| CN115150253A (en) | Fault root cause determination method and device and electronic equipment | |
| CN110831056B (en) | Monitoring event reporting method and device | |
| CN109857720B (en) | Database table monitoring method, device, computer device and readable storage medium | |
| CN112463317A (en) | Computer room task scheduling method and device, electronic equipment and storage medium | |
| CN109508356B (en) | Data abnormality early warning method, device, computer equipment and storage medium | |
| CN114020558A (en) | Alarm callback method, platform, system, device, equipment and storage medium | |
| CN110324179A (en) | A kind of load abnormal alarm method and relevant apparatus |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20220809 |