CN115396289B - Fault alarm determining method and device, electronic equipment and storage medium - Google Patents
Fault alarm determining method and device, electronic equipment and storage medium Download PDFInfo
- Publication number
- CN115396289B CN115396289B CN202211056823.7A CN202211056823A CN115396289B CN 115396289 B CN115396289 B CN 115396289B CN 202211056823 A CN202211056823 A CN 202211056823A CN 115396289 B CN115396289 B CN 115396289B
- Authority
- CN
- China
- Prior art keywords
- alarm
- fault
- determining
- equipment
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 50
- 238000001914 filtration Methods 0.000 claims description 19
- 238000012545 processing Methods 0.000 claims description 18
- 238000004590 computer program Methods 0.000 claims description 16
- 230000000694 effects Effects 0.000 claims description 11
- 238000010606 normalization Methods 0.000 claims description 6
- 230000001364 causal effect Effects 0.000 claims description 5
- 238000004891 communication Methods 0.000 description 8
- 238000004458 analytical method Methods 0.000 description 6
- 230000005540 biological transmission Effects 0.000 description 5
- 238000010586 diagram Methods 0.000 description 5
- 230000006870 function Effects 0.000 description 4
- 238000012423 maintenance Methods 0.000 description 4
- 230000006978 adaptation Effects 0.000 description 3
- 230000003993 interaction Effects 0.000 description 3
- 238000012544 monitoring process Methods 0.000 description 3
- 230000003287 optical effect Effects 0.000 description 3
- 230000008569 process Effects 0.000 description 3
- 238000004364 calculation method Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000010365 information processing Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000012216 screening Methods 0.000 description 2
- 238000003491 array Methods 0.000 description 1
- 238000013473 artificial intelligence Methods 0.000 description 1
- 238000012098 association analyses Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000001413 cellular effect Effects 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 239000011521 glass Substances 0.000 description 1
- 230000010354 integration Effects 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 238000010801 machine learning Methods 0.000 description 1
- 239000013307 optical fiber Substances 0.000 description 1
- 238000007670 refining Methods 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 230000001953 sensory effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/12—Discovery or management of network topologies
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The embodiment of the invention discloses a fault alarm determining method, a device, electronic equipment and a storage medium. The fault alarm determining method specifically may include: acquiring current alarm information of each alarm device in a current network system; inputting each piece of current alarm information into a pre-established fault alarm determining model; and determining the fault alarm in each piece of current alarm information through the fault alarm determining model. The technical scheme of the embodiment of the invention can rapidly and accurately determine the fault alarm, thereby improving the determination speed and accuracy of the fault equipment.
Description
Technical Field
The embodiment of the invention relates to the technical field of computers, in particular to a fault alarm determining method, a fault alarm determining device, electronic equipment and a storage medium.
Background
In a complex, multi-layer network, the interaction between the individual network element devices is constrained. If a certain network element device fails, an alarm is generated, and other network element devices related to the network element device also generate alarms and even are in a failure state. For example, a professional device alert in a certain core network may cause an alert of other downstream professional devices in the core network.
However, when a plurality of alarms are generated simultaneously, alarm storm is formed, which brings inconvenience to operation and maintenance personnel for analyzing the fault source of the alarms, so that the fault equipment cannot be determined quickly and accurately.
Disclosure of Invention
The embodiment of the invention provides a fault alarm determining method, a device, electronic equipment and a storage medium, which can rapidly and accurately determine fault alarms, thereby improving the determining speed and accuracy of the fault equipment.
According to an aspect of the present invention, there is provided a fault alert determining method, including:
acquiring current alarm information of each alarm device in a current network system;
inputting each piece of current alarm information into a pre-established fault alarm determining model;
and determining the fault alarm in each piece of current alarm information through the fault alarm determining model.
According to another aspect of the present invention, there is provided a fault alert determining apparatus including:
the current alarm information acquisition module is used for acquiring the current alarm information of each alarm device in the current network system;
the fault alarm determining model input module is used for inputting each piece of current alarm information into a pre-established fault alarm determining model;
and the fault alarm determining module is used for determining fault alarms in the current alarm information through the fault alarm determining model.
According to another aspect of the present invention, there is provided an electronic apparatus including:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein,
the memory stores a computer program executable by the at least one processor to enable the at least one processor to perform the fault alert determination method of any one of the embodiments of the present invention.
According to another aspect of the present invention, there is provided a computer readable storage medium storing computer instructions for causing a processor to implement the fault alert determination method according to any one of the embodiments of the present invention when executed.
According to the technical scheme, the current alarm information of each alarm device in the current network system is obtained, and the current alarm information is input into the pre-established fault alarm determining model, so that the fault alarm in each current alarm information is determined through the fault alarm determining model, the problem that the fault device cannot be determined quickly and accurately when an alarm storm occurs in the prior art is solved, the fault alarm can be determined quickly and accurately, and the determining speed and the accuracy of the fault device are improved.
It should be understood that the description in this section is not intended to identify key or critical features of the embodiments of the invention or to delineate the scope of the invention. Other features of the present invention will become apparent from the description that follows.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for the description of the embodiments will be briefly described below, and it is apparent that the drawings in the following description are only some embodiments of the present invention, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
FIG. 1 is a flow chart of a fault alert determination method provided in accordance with a first embodiment of the present invention;
FIG. 2 is a flowchart of a fault alert determination method according to a second embodiment of the present invention;
FIG. 3 is a schematic diagram of a fault alert determining apparatus according to a third embodiment of the present invention;
fig. 4 is a schematic structural diagram of an electronic device implementing a fault alert determination method according to an embodiment of the present invention.
Detailed Description
In order that those skilled in the art will better understand the present invention, a technical solution in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in which it is apparent that the described embodiments are only some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the present invention without making any inventive effort, shall fall within the scope of the present invention.
It is noted that the terms "comprises" and "comprising," and any variations thereof, in the description and claims of the present invention and in the foregoing figures, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed or inherent to such process, method, article, or apparatus.
Example 1
Fig. 1 is a flowchart of a fault alarm determining method according to a first embodiment of the present invention, where the method may be applicable to fast and accurate determination of a fault alarm, and the method may be performed by a fault alarm determining device, where the device may be implemented by software and/or hardware, and may generally be directly integrated into an electronic device that performs the method, where the electronic device may be a terminal device or a server device, and the embodiment of the present invention does not limit a type of electronic device that performs the fault alarm determining method. Specifically, as shown in fig. 1, the fault alarm determining method specifically includes the following steps:
s110, acquiring current alarm information of each alarm device in the current network system.
The current network system may be a system that currently needs to determine network element devices that generate alarm information due to a fault. It can be understood that the current network system may include a plurality of network element devices, when a certain network element device generates alarm information due to a fault, other network element devices related to the network element device also generate alarm information, but other network element devices related to the network element device do not generate a fault, so that the network element device generating alarm information due to the fault needs to be determined, and thus the fault of the current network system is troubleshooted. The alarm device may be any network element device that generates alarm information. The current alert information may be any information currently associated with an alert. Alternatively, the current alert information may include, but is not limited to, the following: alarm name, alarm level, alarm number, alarm occurrence time, alarm content, alarm type, and alarm additional information fields.
In the embodiment of the invention, the current alarm information of each alarm device in the current network system is acquired so as to input each current alarm information into a pre-established fault alarm determination model.
S120, inputting each piece of current alarm information into a pre-established fault alarm determining model.
The fault alarm determination model may be a model established in advance for determining a fault alarm. The fault alarm may be an alarm generated by the network element device due to a fault.
In the embodiment of the invention, after the current alarm information of each alarm device in the current network system is acquired, each current alarm information can be further input into a pre-established fault alarm determination model so as to determine the fault alarm in each current alarm information through the fault alarm determination model. It may be appreciated that a plurality of current alarm information may be input to the pre-established fault alarm determination model at the same time, or a plurality of current alarm information may be sequentially input to the pre-established fault alarm determination model, etc., which is not limited in the embodiment of the present invention.
S130, determining the fault alarm in each piece of current alarm information through the fault alarm determining model.
In the embodiment of the invention, after each piece of current alarm information is input into the pre-established fault alarm determining model, the fault alarm in each piece of current alarm information can be further determined through the fault alarm determining model. It is understood that the current alarm information may include both fault alarms and non-fault alarms. And a non-fault alarm, namely when a certain network element device generates alarm information due to fault, the other network element devices related to the network element device generate alarms.
According to the technical scheme, the current alarm information of each alarm device in the current network system is obtained, and the current alarm information is input into the pre-established fault alarm determining model, so that the fault alarm in each current alarm information is determined through the fault alarm determining model, the problem that the fault device cannot be determined quickly and accurately when an alarm storm occurs in the prior art is solved, the fault alarm can be determined quickly and accurately, and the determining speed and the accuracy of the fault device are improved.
Example two
Fig. 2 is a flowchart of a fault alarm determining method according to a second embodiment of the present invention, where the foregoing technical solutions are further refined, and various specific alternative implementations of inputting each current alarm information into a pre-established fault alarm determining model and determining a fault alarm in each current alarm information through the fault alarm determining model are provided. The technical solution in this embodiment may be combined with each of the alternatives in one or more embodiments described above. As shown in fig. 2, the method may include the steps of:
s210, acquiring current alarm information of each alarm device in the current network system.
S220, carrying out normalization processing on each piece of current alarm information according to a preset acquisition rule to obtain normalized alarm information.
The preset collection rule may be a preset rule for collecting alarm information. By way of example, the preset collection rules may be rules set according to the x.733 standard (information technology, open systems interconnect, system management, alarm reporting function), and the like, and embodiments of the present invention are not limited in this regard. The normalized alarm information may be information obtained by normalizing each current alarm information.
In the embodiment of the invention, after the current alarm information of each alarm device in the current network system is acquired, normalization processing can be further performed on each current alarm information according to a preset acquisition rule so as to obtain normalized alarm information.
S230, filtering the normalized alarm information according to a preset filtering rule to obtain alarm information to be determined.
The preset filtering rule may be a rule of filtering alarm information, which is set in advance. For example, the preset filtering rule may be a rule set in a field in the preset filtering alarm information. The alarm information to be determined may be alarm information obtained after filtering.
In the embodiment of the invention, after normalization processing is performed on each current alarm information according to the preset acquisition rule to obtain normalized alarm information, filtering processing can be further performed on each normalized alarm information according to the preset filtering rule to obtain alarm information to be determined.
S240, inputting each piece of alarm information to be determined into a pre-established fault alarm determination model.
In the embodiment of the invention, after the normalized alarm information is filtered according to the preset filtering rule to obtain the alarm information to be determined, the alarm information to be determined can be further input into a pre-established fault alarm determining model.
Optionally, before inputting each current alarm information into the pre-established fault alarm determination model, the method may further include: determining alarm association relations among network element devices in a current network system, and determining alarm causal relations of the network element devices; and establishing a fault alarm determining model according to the alarm association relation among the network element devices and the alarm causal relation of the network element devices.
The alarm association relationship may be an association relationship between different network element devices generating alarms. The alarm cause and effect relationship may be a cause and effect relationship of alarm information generated by the network element device.
Specifically, after the normalized alarm information is filtered according to the preset filtering rule to obtain the alarm information to be determined, the alarm association relationship between the network element devices in the current network system can be further determined, and the alarm cause-effect relationship of the network element devices is determined, so that a fault alarm determination model is established according to the alarm association relationship between the network element devices and the alarm cause-effect relationship of the network element devices.
Optionally, determining the alarm association relationship between the network element devices in the current network system may include: determining equipment resource information of each network element equipment according to the equipment type of each network element equipment in the current network system; according to the equipment resource information of each network element equipment, determining the network topology relation of the current network system; and determining alarm association relations among the network element devices according to the network topology relations.
The device type of the network element device may be a core network type device, a carrier network type device, or a transport network type device, for example; or the device type of the network element device may also be a transmission type device or a data type device, and the embodiment of the invention does not limit the device type of the network element device.
The device resource information may be any information of the network element device, for example, may be device connection relationship information of the network element device, which is not limited in the embodiment of the present invention. Alternatively, the device resource information of the network element device may be determined by a resource management system connected to the network element device.
Specifically, the device resource information of each network element device is determined according to the device type of each network element device in the current network system, so as to determine the network topology relation of the current network system according to the device resource information of each network element device, and further determine the alarm association relation among the network element devices according to the network topology relation.
Optionally, determining the alarm cause and effect relationship of each network element device may include: acquiring the equipment alarm type and the equipment alarm name of each network element equipment in the current network system; and determining the alarm cause and effect relationship of each network element device according to the alarm type and the alarm name of each device.
The device alarm type may be a type of an alarm generated by the network element device, for example, may be a device alarm, a board alarm, a circuit alarm or a port alarm, which is not limited in the embodiment of the present invention. It will be appreciated that the same network element device may have a plurality of different device alert types. The device alert name may be the name of the network element device that has generated the alert. It will be appreciated that the device alert type and the device alert name may be corresponding. That is, the device alarm names corresponding to the same device alarm type are also the same.
Specifically, the device alarm type and the device alarm name of each network element device in the current network system are obtained, so that the alarm cause and effect relationship of each network element device is determined according to the device alarm type and the device alarm name.
S250, determining the fault state of the alarm equipment corresponding to the current alarm information according to each current alarm information through the fault alarm determining model.
The fault state may be a fault state of the alarm device, for example, a fault state or a non-fault state may be generated, or a device state when a fault occurs may be generated, which is not limited in the embodiment of the present invention.
In the embodiment of the invention, after each alarm information to be determined is input into the pre-established fault alarm determining model, the fault state of the alarm device corresponding to the current alarm information can be further determined according to each current alarm information through the fault alarm determining model.
S260, determining the current alarm information as a fault alarm and determining the alarm equipment as a fault alarm equipment under the condition that the fault state of the alarm equipment is determined to be a fault through the fault alarm determination model.
The fault alarm device may be a device that alarms due to the occurrence of a fault.
In the embodiment of the invention, after the fault state of the alarm device corresponding to the current alarm information is determined according to each current alarm information through the fault alarm determining model, the current alarm information is determined to be a fault alarm when the fault state of the alarm device is determined to be a fault through the fault alarm determining model, and the alarm device is determined to be a fault alarm device.
Optionally, after determining the fault state of the alarm device corresponding to the current alarm information according to each current alarm information by using the fault alarm determining model, the method further includes: determining the current alarm information as a non-fault alarm and determining equipment resource information of the alarm equipment under the condition that the fault state of the alarm equipment is determined to be non-fault through a fault alarm determining model; determining port information of the alarm equipment according to equipment resource information of the alarm equipment; determining associated port information of the alarm equipment according to the port information of the alarm equipment; and determining alarm associated equipment corresponding to the non-fault alarm according to the port information of the alarm equipment and the associated port information of the alarm equipment.
The non-fault alarm may be an associated alarm generated by an associated network element device caused by the fault alarm. The port information may be information of a network element device port. The associated port information may be information of ports associated with the network element device.
Specifically, after determining the fault state of the alarm device corresponding to the current alarm information according to each current alarm information through the fault alarm determining model, when determining that the fault state of the alarm device is non-fault, the current alarm information is determined to be non-fault alarm, and the device resource information of the alarm device is determined, so that the associated port information of the alarm device is determined according to the device resource information of the alarm device, and accordingly the alarm associated device corresponding to the non-fault alarm is determined according to the port information of the alarm device and the associated port information.
According to the technical scheme, the current alarm information of each alarm device in the current network system is obtained, normalization processing is carried out on each current alarm information according to the preset acquisition rule to obtain normalized alarm information, filtering processing is carried out on each normalized alarm information according to the preset filtering rule to obtain alarm information to be determined, each alarm information to be determined is input into a fault alarm determining model established in advance, the fault state of the alarm device corresponding to the current alarm information is determined according to each current alarm information through the fault alarm determining model, and therefore when the fault state of the alarm device is determined to be a fault through the fault alarm determining model, the current alarm information is determined to be a fault alarm, and the alarm device is determined to be a fault alarm device, the problem that the fault device cannot be determined quickly and accurately when an alarm storm occurs in the prior art is solved, the fault alarm can be determined quickly and accurately, and accordingly the determining speed and the accuracy of the fault device are improved.
In order to enable those skilled in the art to better understand the fault alert determination method according to the embodiment of the present invention, a specific example will be described below. Specifically, the fault alarm determining method provided by any embodiment of the present invention may be executed by a fault alarm determining system. The method specifically comprises the following steps:
(1) And determining access interfaces and protocol adaptations of the network element devices according to the device types and the number of the network element devices, determining interface physical and protocol adaptations of manufacturer network management systems of the network element devices, and accessing all alarms of the network element devices to a fault alarm determining system.
Meanwhile, the alarm types of the network element devices are obtained, and the alarm types of the network element devices are stored in a fault alarm determining system.
(2) And determining the network topology relation of the current network system according to the resource management system for alarming of the network element equipment of each core network, the bearing network and the transmission network, and determining the association relation among alarms, thereby establishing a fault alarm determination model.
With the continuous expansion of network scale, network element equipment in the current network system can adopt equipment of different factories, however, the alarm names and contents of equipment of each manufacturer are not uniform, the internal association relation of related alarms can be combed by establishing a fault alarm determining model, after the fault alarm determining model is established, equipment manufacturers are not required to be considered, the requirements of equipment monitoring personnel are reduced, more expertise is not required to be mastered, faults can be rapidly and accurately positioned by establishing the fault alarm determining model, and the faults can be effectively processed by matching with maintenance personnel.
(3) And collecting alarm information, screening the alarm information, and inputting the screened alarm information into a fault alarm determining model.
The acquisition of the alarm information can specifically comprise alarm information acquisition and alarm information system filtering, wherein the alarm information acquisition can normalize the alarm information of each specialty according to the X.733 standard; the alarm information filtering can be carried out through configuration management, and the alarm information is set to filter conditions according to fields.
And after the filtered alarm information is input into the fault alarm determining model, inquiring the corresponding fault according to the alarm information through the fault alarm determining model. If the failure exists, the association relation between the alarm and the failure is added, if the failure does not exist, the unconfirmed failure of the resource corresponding to the alarm is newly established, the association relation is added, the physical resource relation analysis is entered, and the alarm failure is terminated.
Specifically, the physical resource relationship analysis may include: acquiring various port information contained in the resource according to the alarm resource information; and acquiring the port connected with the port according to the acquired port information, and marking the port as an associated port.
(4) According to the resource information of the network element equipment and the network element hooking relation, the physical position information of the fault equipment and the service influence range (namely, the alarm associated equipment) are presented on the network topology relation, and maintenance personnel can grasp the fault condition of the equipment in real time, so that effective guidance is provided for fault treatment.
When network element equipment fails, the failure equipment alarms are displayed on a monitoring platform of the failure alarm determining system in a root alarm mode through the failure alarm determining system, alarm information of the failure equipment is displayed in alarm content, and other related equipment alarms are displayed in an auxiliary alarm mode, so that key root alarms can be determined in a large amount of alarm information at first time, failure conditions can be mastered at first time, failures can be effectively processed, positioning time is greatly shortened, and working efficiency is improved.
(5) And determining the fault alarm of the fault equipment through a fault alarm determining system, and automatically dispatching the alarm.
According to the technical scheme, the network connection and the network topology structure of different professional equipment of the soft switch, the bearing network and the transmission network are managed in a unified way, the alarms are analyzed, the association relation of each alarm is determined, so that key alarms are analyzed rapidly, and fault equipment is positioned; by establishing a fault alarm determining model, alarm information is rapidly analyzed and classified, key alarms are locked, network topology structures, fault reasons and service influence ranges are presented in an intuitive mode, and monitoring and maintenance personnel can be clear at a glance.
Example III
Fig. 3 is a schematic diagram of a fault alarm determining apparatus according to a third embodiment of the present invention, as shown in fig. 3, where the apparatus includes: a current alert information acquisition module 310, a fault alert determination model input module 320, and a fault alert determination module 330, wherein:
a current alarm information obtaining module 310, configured to obtain current alarm information of each alarm device in the current network system;
a fault alarm determination model input module 320, configured to input each piece of current alarm information into a pre-established fault alarm determination model;
the fault alarm determining module 330 is configured to determine, by using the fault alarm determining model, a fault alarm in each of the current alarm information.
According to the technical scheme, the current alarm information of each alarm device in the current network system is obtained, and the current alarm information is input into the pre-established fault alarm determining model, so that the fault alarm in each current alarm information is determined through the fault alarm determining model, the problem that the fault device cannot be determined quickly and accurately when an alarm storm occurs in the prior art is solved, the fault alarm can be determined quickly and accurately, and the determining speed and the accuracy of the fault device are improved.
Optionally, the current alarm information obtaining module 310 may be specifically configured to: carrying out normalization processing on each piece of current alarm information according to a preset acquisition rule to obtain normalized alarm information; filtering each normalized alarm information according to a preset filtering rule to obtain alarm information to be determined; accordingly, the fault alert determination model input module 320 may be specifically configured to: and inputting each piece of alarm information to be determined into a pre-established fault alarm determination model.
Optionally, the fault alert determination model input module 320 may be specifically configured to: determining alarm association relations among network element devices in the current network system, and determining alarm cause and effect relations of the network element devices; and establishing the fault alarm determining model according to the alarm association relation among the network element devices and the alarm causal relation among the network element devices.
Optionally, the fault alert determination model input module 320 may be further configured to: determining equipment resource information of each network element equipment according to the equipment type of each network element equipment in the current network system; determining a network topology relation of the current network system according to the equipment resource information of each network element equipment; and determining alarm association relations among the network element devices according to the network topology relations.
Optionally, the fault alert determination model input module 320 may be further configured to: acquiring the equipment alarm type and the equipment alarm name of each network element equipment in the current network system; and determining the alarm cause and effect relationship of the network element equipment according to the equipment alarm type and the equipment alarm name.
Optionally, the fault alert determination module 330 may be specifically configured to: determining the fault state of the alarm equipment corresponding to the current alarm information according to each current alarm information through the fault alarm determining model; and under the condition that the fault state of the alarm equipment is determined to be a fault, the current alarm information is determined to be a fault alarm, and the alarm equipment is determined to be a fault alarm equipment through the fault alarm determination model.
Optionally, the fault alert determining module 330 may be further specifically configured to: determining the current alarm information as a non-fault alarm and determining equipment resource information of the alarm equipment under the condition that the fault state of the alarm equipment is determined to be non-fault through the fault alarm determining model; determining port information of the alarm equipment according to equipment resource information of the alarm equipment; determining associated port information of the alarm equipment according to the port information of the alarm equipment; and determining the alarm associated equipment corresponding to the non-fault alarm according to the port information of the alarm equipment and the associated port information of the alarm equipment.
In a specific example of an embodiment of the present invention, the fault alert determination apparatus (i.e., the cross-professional alert association analysis system) may include a integration service, an analysis model module, an information processing module, an alert information association processing platform, and an interface service module. Specifically, the comprehensive service platform can be used for abstracting and refining basic and public functions, constructing a service layer platform based on the assembly technology, and carrying out standard information modeling on network element objects managed by the service layer platform; the analysis model module can be used for separating equipment alarms of the core network, the bearing network and the transmission network of each manufacturer, analyzing the network topology relation by using a resource management system, combing the association relation among the alarms and establishing an alarm rapid analysis positioning model; the information processing module can be used for collecting and processing alarm information, collecting alarm information, screening the alarm information, converting the screened alarm information according to an alarm analysis model, and displaying physical position information and service influence range of fault equipment in a network topology relation according to resource information and a network element hooking relation; the module is an acquisition module of the whole system, and after each alarm information is standardized, the alarm information is sent to an information acquisition module of a cross-professional alarm correlation system, so that the alarm information is screened, a fault alarm determination model is converted, a processing platform is established, alarm information correlation calculation service is provided for a comprehensive service platform, and correlation calculation is carried out. The alarm information association processing platform is used for providing an open platform and providing alarm information association computing service for the comprehensive business service platform; the interface service module is used for providing a physical interface and an adaptation protocol with a network manager of a transmission manufacturer.
The fault alarm determining device provided by the embodiment of the invention can execute the fault alarm determining method provided by any embodiment of the invention, and has the corresponding functional modules and beneficial effects of the executing method.
Example IV
Fig. 4 shows a schematic diagram of the structure of an electronic device 10 that may be used to implement an embodiment of the invention. Electronic devices are intended to represent various forms of digital computers, such as laptops, desktops, workstations, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. Electronic equipment may also represent various forms of mobile devices, such as personal digital processing, cellular telephones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions, are meant to be exemplary only, and are not meant to limit implementations of the inventions described and/or claimed herein.
As shown in fig. 4, the electronic device 10 includes at least one processor 11, and a memory, such as a Read Only Memory (ROM) 12, a Random Access Memory (RAM) 13, etc., communicatively connected to the at least one processor 11, in which the memory stores a computer program executable by the at least one processor, and the processor 11 may perform various appropriate actions and processes according to the computer program stored in the Read Only Memory (ROM) 12 or the computer program loaded from the storage unit 18 into the Random Access Memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 may also be stored. The processor 11, the ROM 12 and the RAM 13 are connected to each other via a bus 14. An input/output (I/O) interface 15 is also connected to bus 14.
Various components in the electronic device 10 are connected to the I/O interface 15, including: an input unit 16 such as a keyboard, a mouse, etc.; an output unit 17 such as various types of displays, speakers, and the like; a storage unit 18 such as a magnetic disk, an optical disk, or the like; and a communication unit 19 such as a network card, modem, wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information/data with other devices via a computer network, such as the internet, and/or various telecommunication networks.
The processor 11 may be a variety of general and/or special purpose processing components having processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a Central Processing Unit (CPU), a Graphics Processing Unit (GPU), various specialized Artificial Intelligence (AI) computing chips, various processors running machine learning model algorithms, digital Signal Processors (DSPs), and any suitable processor, controller, microcontroller, etc. The processor 11 performs the various methods and processes described above, such as the fault alert determination method.
In some embodiments, the fault alert determination method may be implemented as a computer program tangibly embodied on a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program may be loaded and/or installed onto the electronic device 10 via the ROM 12 and/or the communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the fault alert determination method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to perform the fault alert determination method in any other suitable manner (e.g., by means of firmware).
Various implementations of the systems and techniques described here above may be implemented in digital electronic circuitry, integrated circuit systems, field Programmable Gate Arrays (FPGAs), application Specific Integrated Circuits (ASICs), application Specific Standard Products (ASSPs), systems On Chip (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and/or combinations thereof. These various embodiments may include: implemented in one or more computer programs, the one or more computer programs may be executed and/or interpreted on a programmable system including at least one programmable processor, which may be a special purpose or general-purpose programmable processor, that may receive data and instructions from, and transmit data and instructions to, a storage system, at least one input device, and at least one output device.
A computer program for carrying out methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus, such that the computer programs, when executed by the processor, cause the functions/acts specified in the flowchart and/or block diagram block or blocks to be implemented. The computer program may execute entirely on the machine, partly on the machine, as a stand-alone software package, partly on the machine and partly on a remote machine or entirely on the remote machine or server.
In the context of the present invention, a computer-readable storage medium may be a tangible medium that can contain, or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. The computer readable storage medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. Alternatively, the computer readable storage medium may be a machine readable signal medium. More specific examples of a machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
To provide for interaction with a user, the systems and techniques described here can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to a user; and a keyboard and a pointing device (e.g., a mouse or a trackball) through which a user can provide input to the electronic device. Other kinds of devices may also be used to provide for interaction with a user; for example, feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form, including acoustic input, speech input, or tactile input.
The systems and techniques described here can be implemented in a computing system that includes a background component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front-end component (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such background, middleware, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local Area Networks (LANs), wide Area Networks (WANs), blockchain networks, and the internet.
The computing system may include clients and servers. The client and server are typically remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other. The server can be a cloud server, also called a cloud computing server or a cloud host, and is a host product in a cloud computing service system, so that the defects of high management difficulty and weak service expansibility in the traditional physical hosts and VPS service are overcome.
It should be appreciated that various forms of the flows shown above may be used to reorder, add, or delete steps. For example, the steps described in the present invention may be performed in parallel, sequentially, or in a different order, so long as the desired results of the technical solution of the present invention are achieved, and the present invention is not limited herein.
The above embodiments do not limit the scope of the present invention. It will be apparent to those skilled in the art that various modifications, combinations, sub-combinations and alternatives are possible, depending on design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the scope of the present invention.
Claims (7)
1. A fault alert determination method, comprising:
acquiring current alarm information of each alarm device in a current network system;
inputting each piece of current alarm information into a pre-established fault alarm determining model;
determining fault alarms in the current alarm information through the fault alarm determining model;
before each piece of current alarm information is input into the pre-established fault alarm determining model, the method further comprises the following steps:
determining alarm association relations among network element devices in the current network system, and determining alarm cause and effect relations of the network element devices;
according to the alarm association relation between the network element devices and the alarm causal relation of the network element devices, the fault alarm determining model is established;
wherein the determining, by the fault alert determining model, the fault alert in each of the current alert information includes:
determining the fault state of the alarm equipment corresponding to the current alarm information according to each current alarm information through the fault alarm determining model;
determining the current alarm information as a fault alarm and the alarm equipment as a fault alarm equipment under the condition that the fault state of the alarm equipment is determined to be a fault through the fault alarm determining model;
wherein after determining the fault state of the alarm device corresponding to the current alarm information according to each current alarm information by the fault alarm determining model, the method further comprises:
determining the current alarm information as a non-fault alarm and determining equipment resource information of the alarm equipment under the condition that the fault state of the alarm equipment is determined to be the non-fault alarm through the fault alarm determining model, wherein the non-fault alarm is an associated alarm generated by associated network element equipment caused by the fault alarm;
determining port information of the alarm equipment according to equipment resource information of the alarm equipment;
determining associated port information of the alarm equipment according to the port information of the alarm equipment;
and determining the alarm associated equipment corresponding to the non-fault alarm according to the port information of the alarm equipment and the associated port information of the alarm equipment.
2. The method of claim 1, further comprising, prior to said inputting each of said current alert information into a pre-established fault alert determination model:
carrying out normalization processing on each piece of current alarm information according to a preset acquisition rule to obtain normalized alarm information;
filtering each normalized alarm information according to a preset filtering rule to obtain alarm information to be determined;
the step of inputting each piece of current alarm information into a pre-established fault alarm determining model comprises the following steps:
and inputting each piece of alarm information to be determined into a pre-established fault alarm determination model.
3. The method according to claim 1, wherein the determining the alarm association relationship between the network element devices in the current network system includes:
determining equipment resource information of each network element equipment according to the equipment type of each network element equipment in the current network system;
determining a network topology relation of the current network system according to the equipment resource information of each network element equipment;
and determining alarm association relations among the network element devices according to the network topology relations.
4. The method of claim 1, wherein the determining the alarm cause and effect relationship for each of the network element devices comprises:
acquiring the equipment alarm type and the equipment alarm name of each network element equipment in the current network system;
and determining the alarm cause and effect relationship of the network element equipment according to the equipment alarm type and the equipment alarm name.
5. A fault alert determination apparatus, comprising:
the current alarm information acquisition module is used for acquiring the current alarm information of each alarm device in the current network system;
the fault alarm determining model input module is used for inputting each piece of current alarm information into a pre-established fault alarm determining model;
the fault alarm determining module is used for determining fault alarms in the current alarm information through the fault alarm determining model;
the fault alarm determining model input module is further used for determining alarm association relations among network element devices in the current network system and determining alarm cause and effect relations of the network element devices; according to the alarm association relation between the network element devices and the alarm causal relation of the network element devices, the fault alarm determining model is established;
the fault alarm determining module is specifically configured to:
determining the fault state of the alarm equipment corresponding to the current alarm information according to each current alarm information through the fault alarm determining model; determining the current alarm information as a fault alarm and the alarm equipment as a fault alarm equipment under the condition that the fault state of the alarm equipment is determined to be a fault through the fault alarm determining model;
determining the current alarm information as a non-fault alarm and determining equipment resource information of the alarm equipment under the condition that the fault state of the alarm equipment is determined to be the non-fault alarm through the fault alarm determining model, wherein the non-fault alarm is an associated alarm generated by associated network element equipment caused by the fault alarm; determining port information of the alarm equipment according to equipment resource information of the alarm equipment; determining associated port information of the alarm equipment according to the port information of the alarm equipment; and determining the alarm associated equipment corresponding to the non-fault alarm according to the port information of the alarm equipment and the associated port information of the alarm equipment.
6. An electronic device, the electronic device comprising:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein,
the memory stores a computer program executable by the at least one processor to enable the at least one processor to perform the fault alert determination method of any one of claims 1-4.
7. A computer readable storage medium storing computer instructions for causing a processor to implement the fault alert determination method of any one of claims 1-4 when executed.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211056823.7A CN115396289B (en) | 2022-08-31 | 2022-08-31 | Fault alarm determining method and device, electronic equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211056823.7A CN115396289B (en) | 2022-08-31 | 2022-08-31 | Fault alarm determining method and device, electronic equipment and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN115396289A CN115396289A (en) | 2022-11-25 |
| CN115396289B true CN115396289B (en) | 2024-03-22 |
Family
ID=84124694
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211056823.7A Active CN115396289B (en) | 2022-08-31 | 2022-08-31 | Fault alarm determining method and device, electronic equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115396289B (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116132253B (en) * | 2022-12-27 | 2024-10-01 | 中国联合网络通信集团有限公司 | Fault processing method, device and storage medium |
| CN116089231B (en) * | 2023-02-13 | 2023-09-15 | 北京优特捷信息技术有限公司 | Fault alarm method and device, electronic equipment and storage medium |
| CN116991620B (en) * | 2023-08-03 | 2024-02-23 | 北京优特捷信息技术有限公司 | Solution determining method, device, equipment and medium |
| CN117155755B (en) * | 2023-08-29 | 2024-09-03 | 北京优特捷信息技术有限公司 | Alarm information processing method and device, electronic equipment and storage medium |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2012068808A1 (en) * | 2010-11-25 | 2012-05-31 | 中兴通讯股份有限公司 | Method and equipment for processing and reporting alarm information |
| CN109787816A (en) * | 2018-12-28 | 2019-05-21 | 北京奇安信科技有限公司 | Traffic failure localization method, device, equipment and medium |
| CN110247792A (en) * | 2019-05-28 | 2019-09-17 | 广东南方通信建设有限公司 | One kind being based on the associated fault handling method of network alarm and device |
| CN110445665A (en) * | 2019-09-06 | 2019-11-12 | 国网江苏省电力公司信息通信分公司 | Based on the powerline network alarm association method for digging for improving GSP |
| CN113259168A (en) * | 2021-05-28 | 2021-08-13 | 新华三人工智能科技有限公司 | Fault root cause analysis method and device |
| CN113268590A (en) * | 2021-04-06 | 2021-08-17 | 云南电网有限责任公司昆明供电局 | Power grid equipment running state evaluation method based on equipment portrait and integrated learning |
| CN114095335A (en) * | 2020-08-03 | 2022-02-25 | 中国移动通信集团山东有限公司 | Network alarm processing method and device and electronic equipment |
| CN114666204A (en) * | 2022-04-22 | 2022-06-24 | 广东工业大学 | Fault root cause positioning method and system based on cause and effect reinforcement learning |
-
2022
- 2022-08-31 CN CN202211056823.7A patent/CN115396289B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2012068808A1 (en) * | 2010-11-25 | 2012-05-31 | 中兴通讯股份有限公司 | Method and equipment for processing and reporting alarm information |
| CN109787816A (en) * | 2018-12-28 | 2019-05-21 | 北京奇安信科技有限公司 | Traffic failure localization method, device, equipment and medium |
| CN110247792A (en) * | 2019-05-28 | 2019-09-17 | 广东南方通信建设有限公司 | One kind being based on the associated fault handling method of network alarm and device |
| CN110445665A (en) * | 2019-09-06 | 2019-11-12 | 国网江苏省电力公司信息通信分公司 | Based on the powerline network alarm association method for digging for improving GSP |
| CN114095335A (en) * | 2020-08-03 | 2022-02-25 | 中国移动通信集团山东有限公司 | Network alarm processing method and device and electronic equipment |
| CN113268590A (en) * | 2021-04-06 | 2021-08-17 | 云南电网有限责任公司昆明供电局 | Power grid equipment running state evaluation method based on equipment portrait and integrated learning |
| CN113259168A (en) * | 2021-05-28 | 2021-08-13 | 新华三人工智能科技有限公司 | Fault root cause analysis method and device |
| CN114666204A (en) * | 2022-04-22 | 2022-06-24 | 广东工业大学 | Fault root cause positioning method and system based on cause and effect reinforcement learning |
Also Published As
| Publication number | Publication date |
|---|---|
| CN115396289A (en) | 2022-11-25 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN115396289B (en) | Fault alarm determining method and device, electronic equipment and storage medium | |
| CN115033463B (en) | System exception type determining method, device, equipment and storage medium | |
| CN116225769B (en) | Method, device, equipment and medium for determining root cause of system fault | |
| CN116010220A (en) | Alarm diagnosis method, device, equipment and storage medium | |
| CN117149894A (en) | Display method and device for call link, electronic equipment and storage medium | |
| CN115509797A (en) | Method, device, equipment and medium for determining fault category | |
| CN113656252B (en) | Fault positioning method, device, electronic equipment and storage medium | |
| CN114885014A (en) | Method, device, equipment and medium for monitoring external field equipment state | |
| CN117670128A (en) | Data processing method and device | |
| CN116668264A (en) | Root cause analysis method, device, equipment and storage medium for alarm clustering | |
| CN115906135B (en) | Tracing method and device for target data leakage path, electronic equipment and storage medium | |
| CN116975081A (en) | Log diagnosis set updating method, device, equipment and storage medium | |
| CN115774648A (en) | Abnormity positioning method, device, equipment and storage medium | |
| CN117076185B (en) | Server inspection method, device, equipment and medium | |
| CN115858325B (en) | Project log adjusting method, device, equipment and storage medium | |
| CN116185765B (en) | Alarm processing method and device, electronic equipment and storage medium | |
| CN118540200A (en) | Alarm compression noise reduction strategy arrangement method and device, electronic equipment and medium | |
| CN117749614A (en) | Protocol rule determining method and device, electronic equipment and storage medium | |
| CN117540718A (en) | Intelligent inspection result statistical method based on document object model | |
| CN116961229A (en) | Transformer substation fault positioning method and device, electronic equipment and storage medium | |
| CN116149933A (en) | Abnormal log data determining method, device, equipment and storage medium | |
| CN116980273A (en) | Internet of things equipment access system, method and device, electronic equipment and storage medium | |
| CN118170626A (en) | Global topological graph-based application fault troubleshooting method, device, equipment and storage medium | |
| CN117331924A (en) | Data model matching degree checking method, device, equipment and storage medium | |
| CN118394597A (en) | Method, device, equipment and medium for detecting index data abnormality under call chain log |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |