CN116915590A - Equipment state analysis method and device based on equipment operation log and electronic equipment - Google Patents
Equipment state analysis method and device based on equipment operation log and electronic equipment Download PDFInfo
- Publication number
- CN116915590A CN116915590A CN202211407222.6A CN202211407222A CN116915590A CN 116915590 A CN116915590 A CN 116915590A CN 202211407222 A CN202211407222 A CN 202211407222A CN 116915590 A CN116915590 A CN 116915590A
- Authority
- CN
- China
- Prior art keywords
- network element
- equipment
- state value
- state
- influence degree
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000004458 analytical method Methods 0.000 title claims abstract description 38
- 238000000034 method Methods 0.000 claims abstract description 13
- 238000012545 processing Methods 0.000 claims description 14
- 238000013507 mapping Methods 0.000 claims description 9
- 238000004364 calculation method Methods 0.000 claims description 7
- 238000004140 cleaning Methods 0.000 claims description 5
- 101100055418 Saccharomyces cerevisiae (strain ATCC 204508 / S288c) AMF1 gene Proteins 0.000 description 6
- 230000006870 function Effects 0.000 description 6
- 238000004590 computer program Methods 0.000 description 4
- 238000010586 diagram Methods 0.000 description 4
- 238000011156 evaluation Methods 0.000 description 4
- 101150102131 smf-1 gene Proteins 0.000 description 4
- 230000008878 coupling Effects 0.000 description 3
- 238000010168 coupling process Methods 0.000 description 3
- 238000005859 coupling reaction Methods 0.000 description 3
- 238000011084 recovery Methods 0.000 description 3
- 101000829367 Homo sapiens Src substrate cortactin Proteins 0.000 description 2
- 102100023719 Src substrate cortactin Human genes 0.000 description 2
- 230000002159 abnormal effect Effects 0.000 description 2
- 238000004422 calculation algorithm Methods 0.000 description 2
- 238000004891 communication Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000001360 synchronised effect Effects 0.000 description 2
- 238000003491 array Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 238000013508 migration Methods 0.000 description 1
- 230000005012 migration Effects 0.000 description 1
- YHXISWVBGDMDLQ-UHFFFAOYSA-N moclobemide Chemical compound C1=CC(Cl)=CC=C1C(=O)NCCN1CCOCC1 YHXISWVBGDMDLQ-UHFFFAOYSA-N 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000004092 self-diagnosis Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/069—Management of faults, events, alarms or notifications using logs of notifications; Post-processing of notifications
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The embodiment of the invention provides a device state analysis method and device based on a device operation log and electronic equipment. The method comprises the following steps: collecting equipment operation logs of a plurality of network elements; analyzing a plurality of equipment fields of the equipment operation log of each network element, and generating influence degree of each equipment field; generating a device state value of each network element according to the influence degree of a plurality of device fields of each network element; predicting a predicted device state value of each network element according to the device state value of each network element; determining a network element state scene of each network element according to the predicted equipment state value; and carrying out emergency treatment according to the network element state scene. According to the technical scheme provided by the embodiment of the invention, the equipment state can be intelligently analyzed based on the equipment operation log, the network element state scene of each network element is determined, emergency treatment is carried out according to the network element state scene, and the analysis accuracy, the real-time performance and the efficiency of the equipment state are improved.
Description
[ field of technology ]
The present invention relates to the field of core network technologies, and in particular, to a device state analysis method and apparatus based on a device operation log, and an electronic device.
[ background Art ]
In the related art, the identification of the equipment state in the network is not multiple enough, for example, whether the network is in an engineering state or not and can enter a disaster recovery migration state, the related art can only identify whether the network is faulty or not and whether the utilization rate is high, the requirement of network fine management is difficult to meet, the equipment state can only be analyzed manually, and the analysis accuracy, the real-time performance and the efficiency of the equipment state are low.
[ invention ]
In view of this, the embodiment of the invention provides a device state analysis method and device based on a device operation log, and an electronic device, so as to improve the analysis accuracy, instantaneity and efficiency of the device state.
In one aspect, an embodiment of the present invention provides a device state analysis method based on a device operation log, including:
collecting equipment operation logs of a plurality of network elements;
analyzing a plurality of equipment fields of the equipment operation log of each network element, and generating influence degree of each equipment field;
generating a device state value of each network element according to the influence degree of a plurality of device fields of each network element;
predicting a predicted device state value of each network element according to the device state value of each network element;
determining a network element state scene of each network element according to the state value of the prediction equipment;
and carrying out emergency treatment according to the network element state scene.
Optionally, the analyzing the multiple device fields of the device operation log of each network element, generating the influence degree of each device field includes:
performing data cleaning on the device operation logs of the network elements to obtain a plurality of device fields of the device operation log of each network element;
and analyzing a plurality of equipment fields of the equipment operation log of each network element according to the set field rule table to generate the influence degree of each equipment field.
Optionally, the generating the device status value of each network element according to the influence degree of the multiple device fields of each network element includes:
by the formulaFor each netCalculating the influence degree of a plurality of device fields of the element to generate a device state value of each network element, wherein x is as follows 1 ～x n And n is the number of the device fields of each network element, and DSV is the device state value of each network element.
Optionally, the predicting the predicted device state value of each network element according to the device state value of each network element includes:
and calculating the equipment state value of each network element by integrating the moving average autoregressive model to generate a predicted equipment state value of each network element.
Optionally, the calculating the device state value of each network element by integrating the moving average autoregressive model to generate a predicted device state value of each network element includes:
acquiring the equipment state value of each network element in one or more latest time, and calculating the weighted sum of the equipment state values of each network element;
acquiring a prediction error of each network element of one or more recent times;
and generating a predicted equipment state value of each network element according to the weighted sum of the equipment state values of each network element, the prediction error and the calculation constant.
Optionally, the determining the network element status scenario of each network element according to the predicted device status value includes:
and inquiring the network element state scene corresponding to the predicted equipment state value from the scene mapping table according to the set scene mapping table.
Optionally, the emergency processing according to the network element status scene includes:
and recording the equipment information of the network element state scene according to the network element state scene, and synchronizing the equipment information to the rest network elements so as to carry out emergency treatment.
In another aspect, an embodiment of the present invention provides an apparatus for analyzing an apparatus state based on an apparatus operation log, including:
the acquisition module is used for acquiring equipment operation logs of a plurality of network elements;
the analysis module is used for analyzing a plurality of equipment fields of the equipment operation log of each network element and generating influence degree of each equipment field;
the generating module is used for generating the equipment state value of each network element according to the influence degree of a plurality of equipment fields of each network element;
the prediction module is used for predicting the predicted equipment state value of each network element according to the equipment state value of each network element;
the determining module is used for determining the network element state scene of each network element according to the predicted equipment state value;
and the processing module is used for carrying out emergency processing according to the network element state scene.
In another aspect, an embodiment of the present invention provides a storage medium, including: the storage medium comprises a stored program, wherein the device in which the storage medium is controlled to execute the device state analysis method based on the device operation log when the program runs.
In another aspect, an embodiment of the present invention provides an electronic device, including a memory and a processor, where the memory is configured to store information including program instructions, and the processor is configured to control execution of the program instructions, where the program instructions, when loaded and executed by the processor, implement the steps of the device state analysis method based on a device operation log.
In the technical scheme of the equipment state analysis method based on the equipment operation log, equipment operation logs of a plurality of network elements are collected; analyzing a plurality of equipment fields of the equipment operation log of each network element, and generating influence degree of each equipment field; generating a device state value of each network element according to the influence degree of a plurality of device fields of each network element; predicting a predicted device state value of each network element according to the device state value of each network element; determining a network element state scene of each network element according to the predicted equipment state value; and carrying out emergency treatment according to the network element state scene. According to the technical scheme provided by the embodiment of the invention, the equipment state can be intelligently analyzed based on the equipment operation log, the network element state scene of each network element is determined, emergency treatment is carried out according to the network element state scene, and the analysis accuracy, the real-time performance and the efficiency of the equipment state are improved.
[ description of the drawings ]
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings that are needed in the embodiments will be briefly described below, it being obvious that the drawings in the following description are only some embodiments of the present invention, and that other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
FIG. 1 is a flow chart of a device status analysis method based on a device operation log according to an embodiment of the present invention;
fig. 2 is a schematic structural diagram of an apparatus for analyzing an apparatus status based on an apparatus operation log according to an embodiment of the present invention;
fig. 3 is a schematic diagram of an electronic device according to an embodiment of the present invention.
[ detailed description ] of the invention
For a better understanding of the technical solution of the present invention, the following detailed description of the embodiments of the present invention refers to the accompanying drawings.
It should be understood that the described embodiments are merely some, but not all, embodiments of the invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
The terminology used in the embodiments of the invention is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. As used in this application and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.
It should be understood that the term "and/or" as used herein is merely one way of describing an association of associated objects, meaning that there may be three relationships, e.g., a and/or b, which may represent: the first and second cases exist separately, and the first and second cases exist separately. In addition, the character "/" herein generally indicates that the front and rear associated objects are an "or" relationship.
In the related art, if self-diagnosis and self-repair of a network are to be realized, the network element self-checking analysis has the following disadvantages:
1. the evaluation dimension is insufficient: only alarms and performance reports of the equipment can be monitored, and network fault alarms and performance alarms are positioned depending on typical alarm information or performance information, so that the evaluation dimension is single and simple, and the analysis accuracy of the equipment state is lower.
2. The evaluation of the real-time performance is insufficient: only the alarm and performance report forms of the equipment can be monitored, and the data of the alarm and performance report forms usually have certain hysteresis, so that the real-time monitoring requirement is difficult to meet.
In order to solve the technical problems in the related art, an embodiment of the present invention provides a device state analysis method based on a device operation log, and fig. 1 is a flowchart of a device state analysis method based on a device operation log according to an embodiment of the present invention, as shown in fig. 1, where the method includes:
step 102, collecting device operation logs of a plurality of network elements.
In an embodiment of the present invention, the device operation log is a device operation log of a maintainer.
In an embodiment of the present invention, device operation logs of multiple network elements may be collected in real time through multiple protocols, where the protocols include, but are not limited to, syslog protocol, secure Shell protocol (SSH for short), and the like.
Step 104, analyzing a plurality of device fields of the device operation log of each network element, and generating the influence degree of each device field.
In one embodiment of the present invention, step 104 includes:
step 1042, performing data cleaning on the device operation logs of the multiple network elements to obtain multiple device fields of the device operation log of each network element.
In an embodiment of the present invention, data cleaning is performed on device operation logs of a plurality of network elements according to a set rule, so as to obtain a plurality of device fields of the device operation log of each network element.
In an embodiment of the present invention, the plurality of device fields of the device operation log of each network element include, but are not limited to: network element Name (Ne-Name), network element rmUID (rmUID), network element Type (Ne-Type), log Type (LogType), user Name (UserName), terminal IP address (terminal-nalIP), start Time (Start-Time), end Time (End-Time), operation Type (operator-Type), risk level (Risk-level), operation content (operation content), operation Result (operator-Result), failure reason (Failure-Result).
Step 1044, analyzing a plurality of device fields of the device operation log of each network element according to the set field rule table, and generating an influence degree of each device field.
In one embodiment of the present invention, the field rule table is shown in table one:
list one
As shown in the above table one, when the network element type is an access and mobility management function (Access and Mobility Management Function, abbreviated as AMF) or a session management function (Session Management function, abbreviated as SMF), the influence degree of the network element type is 2 minutes; when the network element type is a network element management system (Element Management System, EMS for short) or an Operation and maintenance center (Operation & Maintenance Center, OMC for short), the influence degree of the network element type is 1 minute; the influence degree of the rest network element types is 0 minutes.
When the log type is a user operation log, the influence degree of the log type is 2 points; when the log type is a network element log, the influence degree of the log type is 1 minute; the impact of the remaining log types is 0 points.
When the user name is a super administrator (admin) or root user (root), the influence degree of the user name is 3 points; the influence degree of the rest of the usernames is 1 minute.
When the risk level is high risk, the influence degree of the risk level is 10 points; when the risk level is not high, the influence of the risk level is 3 points; the influence of the remaining risk levels was 1 point.
When the operation result is failure and the state code exists, the influence degree of the operation result is 5 minutes; when the operation result is successful, the influence degree of the operation result is 1 minute; the influence degree of the rest operation results is 2 minutes.
In an embodiment of the present invention, a plurality of device fields of a device operation log of each network element are analyzed according to the field rule table, so that an influence degree of each device field can be generated, where the influence degree of each device field is as follows in table two:
watch II
As shown in the table two, the influence of the network element rmUID of the network element name AMF1 is 1 minute, the influence of the network element type is 2 minutes, the influence of the log type is 2 minutes, the influence of the user name is 3 minutes, the influence of the terminal IP address is 1 minute, the influence of the start time is 1 minute, the influence of the end time is 1 minute, the influence of the operation type is 10 minutes, the influence of the risk level is 10 minutes, the influence of the operation content is 10 minutes, the influence of the operation result is 5 minutes, and the influence of the failure cause is 5 minutes.
The influence degree of the network element rmUID of the network element with the network element name of AMF1 is 1 minute, the influence degree of the network element type is 2 minutes, the influence degree of the log type is 2 minutes, the influence degree of the user name is 3 minutes, the influence degree of the terminal IP address is 1 minute, the influence degree of the starting time is 1 minute, the influence degree of the ending time is 1 minute, the influence degree of the operation type is 10 minutes, the influence degree of the risk level is 10 minutes, the influence degree of the operation content is 10 minutes, the influence degree of the operation result is 5 minutes, and the influence degree of the failure reason is 5 minutes.
The influence degree of the network element rmUID of the network element with the network element name of SMF1 is 1 minute, the influence degree of the network element type is 2 minutes, the influence degree of the log type is 2 minutes, the influence degree of the user name is 1 minute, the influence degree of the terminal IP address is 1 minute, the influence degree of the starting time is 1 minute, the influence degree of the ending time is 1 minute, the influence degree of the operation type is 10 minutes, the influence degree of the risk level is 10 minutes, the influence degree of the operation content is 10 minutes, the influence degree of the operation result is 2 minutes, and the influence degree of the failure reason is 2 minutes.
The influence degree of the network element rmUID of the network element with the network element name of SMF1 is 1 minute, the influence degree of the network element type is 2 minutes, the influence degree of the log type is 2 minutes, the influence degree of the user name is 1 minute, the influence degree of the terminal IP address is 1 minute, the influence degree of the starting time is 1 minute, the influence degree of the ending time is 1 minute, the influence degree of the operation type is 3 minutes, the influence degree of the risk level is 3 minutes, the influence degree of the operation content is 3 minutes, the influence degree of the operation result is 2 minutes, and the influence degree of the failure reason is 2 minutes.
The influence degree of the network element rmUID of the network element with the network element name of AMF1 is 1 minute, the influence degree of the network element type is 2 minutes, the influence degree of the log type is 1 minute, the influence degree of the user name is 1 minute, the influence degree of the terminal IP address is 1 minute, the influence degree of the starting time is 1 minute, the influence degree of the ending time is 1 minute, the influence degree of the operation type is 3 minutes, the influence degree of the risk level is 3 minutes, the influence degree of the operation content is 3 minutes, the influence degree of the operation result is 5 minutes, and the influence degree of the failure reason is 5 minutes.
The influence of the network element rmUID of the network element with the network element name of EMS1 is 1 minute, the influence of the network element type is 1 minute, the influence of the log type is 1 minute, the influence of the user name is 3 minutes, the influence of the terminal IP address is 1 minute, the influence of the starting time is 1 minute, the influence of the ending time is 1 minute, the influence of the operation type is 3 minutes, the influence of the risk level is 3 minutes, the influence of the operation content is 3 minutes, the influence of the operation result is 5 minutes, and the influence of the failure reason is 5 minutes.
The influence degree of the network element rmUID of the network element with the network element name of OMC1 is 1 minute, the influence degree of the network element type is 1 minute, the influence degree of the log type is 1 minute, the influence degree of the user name is 1 minute, the influence degree of the terminal IP address is 1 minute, the influence degree of the starting time is 1 minute, the influence degree of the ending time is 1 minute, the influence degree of the operation type is 3 minutes, the influence degree of the risk level is 3 minutes, the influence degree of the operation content is 3 minutes, the influence degree of the operation result is 1 minute, and the influence degree of the failure reason is 1 minute.
And 106, generating a device state value of each network element according to the influence degree of the plurality of device fields of each network element.
Specifically, by the formulaCalculating influence degree of a plurality of device fields of each network element to generate a device state value (Device status value, DSV) of each network element, wherein x is as follows 1 ～x n For the influence of multiple device fields of each network element, n is the number of device fields of each network element, and DSV is the device status value of each network element.
In an embodiment of the present invention, the device status value of each network element is shown in the following table three:
watch III
As shown in the above table three, the network element name is AMF1, and the device status value is 19.26136028; the network element name is AMF1, and the state value of the equipment is 19.26136028; the network element name is SMF1, and the device state value is 17.91647287; the network element name is SMF1, and the device state value is 6.92820323; the network element name is AMF1, and the state value of the equipment is 9.327379053; the state value of the equipment with the network element name of EMS1 is 9.591663047; the network element name OMC1 has a device state value of 6.
Step 108, predicting the predicted device state value of each network element according to the device state value of each network element.
Specifically, the device state value of each network element is calculated by integrating a moving average autoregressive model (Autoregressive Integrated Moving Average, abbreviated as ARIMA), so as to generate a predicted device state value of each network element.
In one embodiment of the present invention, step 108 includes:
step 1082, obtaining the device status value of each network element at one or more most recent times, and calculating a weighted sum of the device status values of each network element.
In an embodiment of the present invention, the latest time can be set according to the actual situation, for example, the latest time is within 10 minutes. That is, all the device state values within 10 minutes are acquired, and prediction is performed based on the device state values, thereby generating predicted device state values.
Step 1084, obtaining a prediction error for each network element at one or more most recent times.
Step 1086, generating a predicted device state value for each network element based on the weighted sum of the device state values, the prediction error, and the calculation constant for each network element.
Specifically, the device state value = calculation constant c and/or the weighted sum of the device state values of one or more most recent times and/or the prediction error of one or more most recent times are predicted by an algorithm, and the weighted sum of the device state values, the prediction error and the calculation constant of each network element are calculated to generate the predicted device state value of each network element.
For example, a recent device state value of the AMF device is obtained, and a predicted device state value can be calculated as shown in the following table four:
table four
As shown in table four above, the AMF device 11:17 has a device state value of 6, 11:18 has a device state value of 9.59, 11:19 has a device state value of 9.32, 11:20 has a device state value of 6.92, 11: the device state value at 21 is 17.91, the device state value at 11:22 is 9.59, the device state value at 11:23 is 19.26, and the predicted device state value can be calculated to be 11.48 according to the recent device state value.
Step 110, determining a network element status scene of each network element according to the predicted device status value.
Specifically, according to the set scene mapping table, inquiring the network element state scene corresponding to the predicted equipment state value from the scene mapping table.
In one embodiment of the present invention, the scene map table is shown in the following table five:
TABLE five
| Predicting device state values | Network element status scenario |
| 0～5 | Normal operation of the plant |
| 5～10 | High equipment load |
| 10～18 | Equipment engineering commissioning |
| …… | …… |
As shown in the fifth table, when the predicted device state value is 0-5, the network element state scene is that the device operates normally; when the predicted equipment state value is 5-10, the network element state scene is that the equipment load is high; and when the predicted equipment state value is 10-18, the network element state scene is equipment engineering debugging.
For example, if the predicted device state value is 11.48, the network element state scenario is device engineering debugging, and since the device is frequently operated at high risk in the recent period, the device is automatically identified to enter the device engineering debugging state.
And 112, performing emergency treatment according to the network element state scene.
Specifically, according to the network element state scene, the equipment information of the network element state scene is recorded, and the equipment information is synchronized to the rest network elements so as to carry out emergency treatment.
For example, when the network element status scene is equipment engineering debugging, equipment information of the network element status scene is recorded, and the equipment information is synchronized to other network elements, such as triggering automatic early warning, service bearing proportion adjustment or switching from starting emergency disaster recovery, so as to perform emergency treatment.
According to the technical scheme provided by the embodiment of the invention, based on the network element state scene, early warning or emergency treatment can be timely carried out on the network element and personnel in the presence of abnormal state, so that the maintenance efficiency and the fault treatment efficiency are greatly improved.
In one embodiment of the present invention, steps 102-110 can be repeated to update the device's latest device state in real time.
In the technical scheme provided by the embodiment of the invention, equipment operation logs of a plurality of network elements are collected; analyzing a plurality of equipment fields of the equipment operation log of each network element, and generating influence degree of each equipment field; generating a device state value of each network element according to the influence degree of a plurality of device fields of each network element; predicting a predicted device state value of each network element according to the device state value of each network element; determining a network element state scene of each network element according to the predicted equipment state value; and carrying out emergency treatment according to the network element state scene. According to the technical scheme provided by the embodiment of the invention, the equipment state can be intelligently analyzed based on the equipment operation log, the network element state scene of each network element is determined, emergency treatment is carried out according to the network element state scene, and the analysis accuracy, the real-time performance and the efficiency of the equipment state are improved.
According to the technical scheme provided by the embodiment of the invention, the current working state of the network can be more conveniently and accurately perceived intelligently based on the equipment operation log of the network element, the manual intervention is reduced, and the effective healthy data output is provided.
In the technical scheme provided by the embodiment of the invention, in order to facilitate better evaluation of the influence condition of the instruction on the equipment, an influence degree calculation method of the equipment field is formulated; in order to uniformly identify the current working state of the equipment, an algorithm for converting the influence degree into an equipment state value is formulated; in order to refine the associated device state, a model of the device state values and scene mapping table is formulated.
According to the technical scheme provided by the embodiment of the invention, the system is helped to automatically analyze the running state through analyzing the equipment operation log, and the updating of the equipment state is dynamically completed in real time, so that the system can automatically and timely trigger abnormal emergency disaster recovery, and the safe and stable running of the network is effectively ensured.
An embodiment of the invention provides a device state analysis device based on a device operation log. Fig. 2 is a schematic structural diagram of an apparatus for analyzing a device status based on a device operation log according to an embodiment of the present invention, where, as shown in fig. 2, the apparatus includes: the system comprises an acquisition module 11, an analysis module 12, a generation module 13, a prediction module 14, a determination module 15 and a processing module 16.
The collection module 11 is configured to collect device operation logs of a plurality of network elements.
The analysis module 12 is configured to analyze a plurality of device fields of the device operation log of each network element, and generate an influence degree of each device field.
The generating module 13 is configured to generate a device status value of each network element according to the influence degrees of the plurality of device fields of each network element.
The prediction module 14 is configured to predict a predicted device state value of each network element according to the device state value of each network element.
The determining module 15 is configured to determine a network element status scenario of each network element according to the predicted device status value.
The processing module 16 is configured to perform emergency processing according to the network element status scenario.
In an embodiment of the present invention, the analysis module 12 is specifically configured to perform data cleaning on device operation logs of a plurality of network elements, so as to obtain a plurality of device fields of the device operation log of each network element; and analyzing a plurality of equipment fields of the equipment operation log of each network element according to the set field rule table to generate the influence degree of each equipment field.
In one embodiment of the present invention, the generating module 13 is specifically configured to pass through the formula Calculating the influence degree of a plurality of device fields of each network element to generate a device state value of each network element, wherein x is as follows 1 ～x n For the influence of multiple device fields of each network element, n is the number of device fields of each network element, and DSV is the device status value of each network element.
In an embodiment of the present invention, the prediction module 14 is specifically configured to calculate the device status value of each network element by integrating the moving average autoregressive model, so as to generate a predicted device status value of each network element.
In an embodiment of the present invention, the prediction module 14 is specifically configured to obtain a device status value of each network element at one or more recent times, and calculate a weighted sum of the device status values of each network element; acquiring a prediction error of each network element of one or more recent times; and generating a predicted equipment state value of each network element according to the weighted sum of the equipment state values of each network element, the prediction error and the calculation constant.
In an embodiment of the present invention, the determining module 15 is specifically configured to query, according to a set scenario mapping table, a network element status scenario corresponding to a predicted device status value from the scenario mapping table.
In an embodiment of the present invention, the processing module 16 is specifically configured to record device information of a network element status scene according to the network element status scene, and synchronize the device information to other network elements for emergency processing.
In the technical scheme provided by the embodiment of the invention, equipment operation logs of a plurality of network elements are collected; analyzing a plurality of equipment fields of the equipment operation log of each network element, and generating influence degree of each equipment field; generating a device state value of each network element according to the influence degree of a plurality of device fields of each network element; predicting a predicted device state value of each network element according to the device state value of each network element; determining a network element state scene of each network element according to the predicted equipment state value; and carrying out emergency treatment according to the network element state scene. According to the technical scheme provided by the embodiment of the invention, the equipment state can be intelligently analyzed based on the equipment operation log, the network element state scene of each network element is determined, emergency treatment is carried out according to the network element state scene, and the analysis accuracy, the real-time performance and the efficiency of the equipment state are improved.
The device state analysis apparatus based on the device operation log provided in this embodiment may be used to implement the device state analysis method based on the device operation log in fig. 1, and the specific description may refer to the embodiment of the device state analysis method based on the device operation log, which is not repeated here.
The embodiment of the invention provides a storage medium, which comprises a stored program, wherein the program is used for controlling a device where the storage medium is located to execute the steps of the embodiment of the device state analysis method based on the device operation log, and specific description can be seen from the embodiment of the device state analysis method based on the device operation log.
The embodiment of the invention provides an electronic device, which comprises a memory and a processor, wherein the memory is used for storing information comprising program instructions, the processor is used for controlling execution of the program instructions, and when the program instructions are loaded and executed by the processor, the steps of the embodiment of the device state analysis method based on the device operation log are realized.
Fig. 3 is a schematic diagram of an electronic device according to an embodiment of the present invention. As shown in fig. 3, the electronic device 20 of this embodiment includes: the processor 21, the memory 22, and the computer program 23 stored in the memory 22 and capable of running on the processor 21, the computer program 23 when executed by the processor 21 implements the device state analysis method applied to the device operation log in the embodiment, and is not described herein in detail to avoid repetition. Alternatively, the computer program when executed by the processor 21 implements the functions of each model/unit applied to the device state analysis apparatus based on the device operation log in the embodiment, and in order to avoid repetition, details are not described herein.
The electronic device 20 includes, but is not limited to, a processor 21, a memory 22. It will be appreciated by those skilled in the art that fig. 3 is merely an example of electronic device 20 and is not intended to limit electronic device 20, and may include more or fewer components than shown, or may combine certain components, or different components, e.g., an electronic device may also include an input-output device, a network access device, a bus, etc.
The processor 21 may be a central processing unit (Central Processing Unit, CPU), but may also be other general purpose processors, digital signal processors (Digital Signal Processor, DSP), application specific integrated circuits (Application Specific Integrated Circuit, ASIC), field-programmable gate arrays (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or the like. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
The memory 22 may be an internal storage unit of the electronic device 20, such as a hard disk or a memory of the electronic device 20. The memory 22 may also be an external storage device of the electronic device 20, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card) or the like, which are provided on the electronic device 20. Further, the memory 22 may also include both internal and external memory units of the electronic device 20. The memory 22 is used to store computer programs and other programs and data required by the electronic device. The memory 22 may also be used to temporarily store data that has been output or is to be output.
It will be clear to those skilled in the art that, for convenience and brevity of description, specific working procedures of the above-described systems, apparatuses and units may refer to corresponding procedures in the foregoing method embodiments, which are not repeated herein.
In the several embodiments provided in the present invention, it should be understood that the disclosed systems, devices, and methods may be implemented in other manners. For example, the apparatus embodiments described above are merely illustrative, e.g., the division of the elements is merely a logical function division, and there may be additional divisions when actually implemented, e.g., multiple elements or components may be combined or integrated into another system, or some features may be omitted or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be an indirect coupling or communication connection via some interfaces, devices or units, which may be in electrical, mechanical or other form.
The units described as separate units may or may not be physically separate, and units shown as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
In addition, each functional unit in the embodiments of the present invention may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in hardware plus software functional units.
The integrated units implemented in the form of software functional units described above may be stored in a computer readable storage medium. The software functional unit is stored in a storage medium, and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or a Processor (Processor) to perform part of the steps of the methods according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a random access Memory (Random Access Memory, RAM), a magnetic disk, or an optical disk, or other various media capable of storing program codes.
The foregoing description of the preferred embodiments of the invention is not intended to be limiting, but rather to enable any modification, equivalent replacement, improvement or the like to be made within the spirit and principles of the invention.
Claims (10)
1. A device state analysis method based on a device operation log, comprising:
collecting equipment operation logs of a plurality of network elements;
analyzing a plurality of equipment fields of the equipment operation log of each network element, and generating influence degree of each equipment field;
generating a device state value of each network element according to the influence degree of a plurality of device fields of each network element;
predicting a predicted device state value of each network element according to the device state value of each network element;
determining a network element state scene of each network element according to the state value of the prediction equipment;
and carrying out emergency treatment according to the network element state scene.
2. The method of claim 1, wherein analyzing the plurality of device fields of the device operation log of each network element to generate the impact of each device field comprises:
performing data cleaning on the device operation logs of the network elements to obtain a plurality of device fields of the device operation log of each network element;
and analyzing a plurality of equipment fields of the equipment operation log of each network element according to the set field rule table to generate the influence degree of each equipment field.
3. The method of claim 1, wherein generating the device state value for each network element based on the degree of influence of the plurality of device fields for each network element comprises:
by the formulaCalculating the influence degree of a plurality of device fields of each network element to generate a device state value of each network element, wherein x is as follows 1 ～x n And n is the number of the device fields of each network element, and DSV is the device state value of each network element.
4. The method of claim 1, wherein predicting the predicted device state value for each network element based on the device state value for each network element comprises:
and calculating the equipment state value of each network element by integrating the moving average autoregressive model to generate a predicted equipment state value of each network element.
5. The method of claim 4, wherein the calculating the device state value for each network element by integrating the moving average autoregressive model to generate the predicted device state value for each network element comprises:
acquiring the equipment state value of each network element in one or more latest time, and calculating the weighted sum of the equipment state values of each network element;
acquiring a prediction error of each network element of one or more recent times;
and generating a predicted equipment state value of each network element according to the weighted sum of the equipment state values of each network element, the prediction error and the calculation constant.
6. The method of claim 1, wherein said determining a network element status scenario for each network element based on said predicted device status value comprises:
and inquiring the network element state scene corresponding to the predicted equipment state value from the scene mapping table according to the set scene mapping table.
7. The method according to claim 1, wherein the emergency processing according to the network element status scenario comprises:
and recording the equipment information of the network element state scene according to the network element state scene, and synchronizing the equipment information to the rest network elements so as to carry out emergency treatment.
8. A device state analysis apparatus based on a device operation log, comprising:
the acquisition module is used for acquiring equipment operation logs of a plurality of network elements;
the analysis module is used for analyzing a plurality of equipment fields of the equipment operation log of each network element and generating influence degree of each equipment field;
the generating module is used for generating the equipment state value of each network element according to the influence degree of a plurality of equipment fields of each network element;
the prediction module is used for predicting the predicted equipment state value of each network element according to the equipment state value of each network element;
the determining module is used for determining the network element state scene of each network element according to the predicted equipment state value;
and the processing module is used for carrying out emergency processing according to the network element state scene.
9. A storage medium, comprising: the storage medium includes a stored program, wherein the program, when executed, controls a device in which the storage medium is located to execute the device state analysis method based on the device operation log according to any one of claims 1 to 7.
10. An electronic device comprising a memory for storing information including program instructions and a processor for controlling execution of the program instructions, wherein the program instructions, when loaded and executed by the processor, implement the steps of the device state analysis method based on a device operation log of any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211407222.6A CN116915590A (en) | 2022-11-10 | 2022-11-10 | Equipment state analysis method and device based on equipment operation log and electronic equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211407222.6A CN116915590A (en) | 2022-11-10 | 2022-11-10 | Equipment state analysis method and device based on equipment operation log and electronic equipment |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN116915590A true CN116915590A (en) | 2023-10-20 |
Family
ID=88358883
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211407222.6A Pending CN116915590A (en) | 2022-11-10 | 2022-11-10 | Equipment state analysis method and device based on equipment operation log and electronic equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116915590A (en) |
-
2022
- 2022-11-10 CN CN202211407222.6A patent/CN116915590A/en active Pending
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US20210042270A1 (en) | Alarm log compression method, apparatus, and system, and storage medium | |
| CN113176978B (en) | Monitoring method, system, equipment and readable storage medium based on log file | |
| CN106254137B (en) | The alarm root analysis system and method for supervisory systems | |
| CN110727556A (en) | BMC health state monitoring method, system, terminal and storage medium | |
| CN111353911A (en) | Power equipment operation and maintenance method, system, equipment and storage medium | |
| CN110224885B (en) | Equipment monitoring alarm method and device, storage medium and electronic equipment | |
| CN110650060A (en) | Processing method, equipment and storage medium for flow alarm | |
| CN107426033B (en) | Method and device for predicting state of access terminal of Internet of things | |
| CN112636979B (en) | Cluster alarm method and related device | |
| CN110851320A (en) | Server downtime supervision method, system, terminal and storage medium | |
| CN112461289A (en) | Ring main unit fault monitoring method, system, terminal and storage medium | |
| CN115794588A (en) | Memory fault prediction method, device and system and monitoring server | |
| CN111062503B (en) | Power grid monitoring alarm processing method, system, terminal and storage medium | |
| CN116915590A (en) | Equipment state analysis method and device based on equipment operation log and electronic equipment | |
| CN113487182B (en) | Device health state evaluation method, device, computer device and medium | |
| CN115129548A (en) | Alarm analysis method, device, equipment and medium | |
| CN114356722A (en) | Monitoring alarm method, system, equipment and storage medium for server cluster | |
| CN113886757A (en) | Power communication network PTN network service operation reliability assessment method | |
| CN112052147A (en) | Monitoring method, electronic device and storage medium | |
| CN109427177B (en) | Monitoring alarm method and device | |
| CN111190415A (en) | Industrial control system availability testing method and system | |
| CN113395610B (en) | Electromagnetic water meter data supplementary reading method and system | |
| CN116702121B (en) | Method for enhancing access control security in cloud desktop scene | |
| JP7303461B2 (en) | Recovery determination device, recovery determination method, and recovery determination program | |
| CN114385387B (en) | Access information generation method and device and computer equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |