CN116991684B - Alarm information processing method, device, equipment and medium - Google Patents
Alarm information processing method, device, equipment and medium Download PDFInfo
- Publication number
- CN116991684B CN116991684B CN202310975428.7A CN202310975428A CN116991684B CN 116991684 B CN116991684 B CN 116991684B CN 202310975428 A CN202310975428 A CN 202310975428A CN 116991684 B CN116991684 B CN 116991684B
- Authority
- CN
- China
- Prior art keywords
- alarm
- information
- alarm information
- vector
- dictionary
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 230000010365 information processing Effects 0.000 title claims abstract description 48
- 238000003672 processing method Methods 0.000 title claims abstract description 25
- 239000013598 vector Substances 0.000 claims abstract description 225
- 238000000034 method Methods 0.000 claims abstract description 26
- 238000012544 monitoring process Methods 0.000 claims description 25
- 238000004590 computer program Methods 0.000 claims description 17
- 238000012163 sequencing technique Methods 0.000 claims description 7
- 238000004891 communication Methods 0.000 description 11
- 230000008569 process Effects 0.000 description 11
- 238000012545 processing Methods 0.000 description 9
- 238000012423 maintenance Methods 0.000 description 7
- 238000010586 diagram Methods 0.000 description 5
- 238000005516 engineering process Methods 0.000 description 5
- 230000006870 function Effects 0.000 description 4
- 230000003993 interaction Effects 0.000 description 3
- 230000003287 optical effect Effects 0.000 description 3
- 238000004364 calculation method Methods 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000003491 array Methods 0.000 description 1
- 238000013473 artificial intelligence Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 238000010801 machine learning Methods 0.000 description 1
- 239000013307 optical fiber Substances 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 230000001953 sensory effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
- G06F11/324—Display of status information
- G06F11/327—Alarm or error message display
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3055—Monitoring arrangements for monitoring the status of the computing system or of the computing system component, e.g. monitoring if the computing system is on, off, available, not available
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- Quality & Reliability (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computing Systems (AREA)
- Mathematical Physics (AREA)
- Alarm Systems (AREA)
Abstract
The invention discloses an alarm information processing method, an alarm information processing device, alarm information processing equipment and an alarm information processing medium. The method comprises the following steps: each alarm information in a preset time before the current moment is acquired at fixed time, and the alarm number of each alarm information is determined; generating an alarm number sequence corresponding to the period to be processed; inputting the alarm number sequence into a preset word vector model to obtain the word vector of the alarm number of each alarm message; determining the vector of each alarm message and storing the vector into a message word vector dictionary; according to the information word vector dictionary, storing the alarm information with the association relation into the same alarm information set; and merging the alarm information in each alarm information set into an alarm event, and providing each alarm event for a target user. The embodiment of the invention can automatically determine the vector of each alarm information based on the alarm time and the alarm number, and then accurately merge the acquired alarm information based on the vector of each alarm information.
Description
Technical Field
The present invention relates to the field of computer technologies, and in particular, to a method, an apparatus, a device, and a medium for processing alarm information.
Background
To improve office efficiency and to implement informatization office work, an enterprise may deploy a computer system inside the enterprise. During operation of a computer system, various components in the computer system are typically monitored by a monitoring platform. The monitoring platform generates alarm information corresponding to the appointed component after detecting that the appointed component in the computer system can not work normally.
Various failures may occur in the computer system during operation. Any failure may cause multiple components in the computer system to fail to function properly, and the monitoring platform generates a large amount of alarm information. In order to improve the efficiency of processing the alarm information by operation and maintenance personnel, a large amount of alarm information generated by a monitoring platform is generally processed in a unified way, alarm information with association relation caused by the same fault is integrated, and the integrated result is provided for the operation and maintenance personnel of a computer system, so that the operation and maintenance personnel can be helped to quickly locate the fault and remove the fault.
In the related art, the common alarm information processing scheme is as follows: and (3) regularly collecting the alarm information generated by the monitoring platform, determining the category of the collected alarm information according to the fixedly arranged classification label, merging the alarm information of the same category, and then providing the merging result for operation and maintenance personnel of the computer system. The classification labels which are fixedly arranged are usually arranged according to manual experience, and the accuracy cannot be guaranteed. The alarm information processing scheme in the related art depends on the classification labels set according to manual experience, the accuracy and reliability of the alarm information processing process are low, and alarm information with association relation caused by the same fault cannot be accurately integrated.
Disclosure of Invention
The invention provides an alarm information processing method, an alarm information processing device, alarm information processing equipment and an alarm information processing medium, which are used for solving the problems that an alarm information processing scheme in the related technology depends on a classification label set according to manual experience, the accuracy and reliability of an alarm information processing process are low, and alarm information with an association relation caused by the same fault cannot be accurately integrated.
According to an aspect of the present invention, there is provided an alarm information processing method, including:
each alarm information in a preset time before the current moment is acquired at fixed time, and the alarm number of each alarm information is determined according to the information number dictionary;
generating an alarm number sequence corresponding to each alarm information according to the alarm time and the alarm number of each alarm information;
inputting the alarm number sequence into a preset word vector model to obtain the word vector of the alarm number of each alarm message;
according to the word vector of the alarm number of each alarm message, determining the vector of each alarm message, and storing the alarm number and the vector of each alarm message as key value pairs into an information word vector dictionary;
according to the information word vector dictionary, storing the alarm information with the association relation into the same alarm information set;
And merging the alarm information in each alarm information set into one alarm event to obtain at least one alarm event, and providing each alarm event for a target user.
According to another aspect of the present invention, there is provided an alarm information processing apparatus including:
the number determining module is used for acquiring each alarm information in a preset time before the current moment in a timing way and determining the alarm number of each alarm information according to the information number dictionary;
the sequence generation module is used for generating an alarm number sequence corresponding to each alarm information according to the alarm time and the alarm number of each alarm information;
the vector generation module is used for inputting the alarm number sequence into a preset word vector model to obtain the word vector of the alarm number of each alarm message;
the vector storage module is used for determining the vector of each alarm information according to the word vector of the alarm number of each alarm information, and storing the alarm number and the vector of each alarm information as key value pairs into the information word vector dictionary;
the information association module is used for storing the alarm information with association relation into the same alarm information set according to the information word vector dictionary;
And the information merging module is used for merging the alarm information in each alarm information set into one alarm event to obtain at least one alarm event, and providing each alarm event for a target user.
According to another aspect of the present invention, there is provided an electronic apparatus including:
at least one processor;
and a memory communicatively coupled to the at least one processor network;
the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor, so that the at least one processor can execute the alarm information processing method according to any embodiment of the present invention.
According to another aspect of the present invention, there is provided a computer readable storage medium storing computer instructions for causing a processor to implement the alarm information processing method according to any one of the embodiments of the present invention when executed.
According to the technical scheme, each alarm information in the preset time before the current moment is acquired at fixed time, and the alarm number of each alarm information is determined according to the information number dictionary; then generating an alarm number sequence corresponding to each alarm information according to the alarm time and the alarm number of each alarm information; inputting the alarm number sequence into a preset word vector model to obtain the word vector of the alarm number of each alarm message; according to the word vector of the alarm number of each alarm message, determining the vector of each alarm message, and storing the alarm number and the vector of each alarm message as key value pairs into an information word vector dictionary; according to the information word vector dictionary, storing the alarm information with the association relation into the same alarm information set; finally, the alarm information in each alarm information set is merged into an alarm event to obtain at least one alarm event, each alarm event is provided for a target user, the problem that the alarm information processing scheme in the related technology depends on a classification label set according to manual experience, the accuracy and reliability of the alarm information processing process are low, the alarm information with an association relation caused by the same fault cannot be merged accurately is solved, the alarm time and the alarm number of each acquired alarm information can be automatically based on the acquired alarm information, the vector of each alarm information for accurately measuring the association degree between the acquired alarm information is determined, then the alarm information with the association relation caused by the same fault in each acquired alarm information is merged accurately based on the vector of each alarm information, a large amount of acquired alarm information with the association relation caused by the same fault can be processed, the merged accurately, the merged result is provided for operation staff of the computer system, and the operation staff can be helped to locate the fault and remove the fault rapidly.
It should be understood that the description in this section is not intended to identify key or critical features of the embodiments of the invention or to delineate the scope of the invention. Other features of the present invention will become apparent from the description that follows.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for the description of the embodiments will be briefly described below, and it is apparent that the drawings in the following description are only some embodiments of the present invention, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
Fig. 1 is a flowchart of an alarm information processing method according to a first embodiment of the present invention.
Fig. 2 is a flowchart of an alarm information processing method according to a second embodiment of the present invention.
Fig. 3 is a schematic structural diagram of an alarm information processing apparatus according to a third embodiment of the present invention.
Fig. 4 is a schematic structural diagram of an electronic device implementing an alarm information processing method according to an embodiment of the present invention.
Detailed Description
In order that those skilled in the art will better understand the present invention, a technical solution in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in which it is apparent that the described embodiments are only some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the present invention without making any inventive effort, shall fall within the scope of the present invention.
It should be noted that the terms "object," "first," "second," and the like in the description and the claims of the present invention and the above drawings are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that the embodiments of the invention described herein may be implemented in sequences other than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
Example 1
Fig. 1 is a flowchart of an alarm information processing method according to a first embodiment of the present invention. The embodiment is applicable to a case of processing a large amount of alarm information corresponding to a computer system. The method may be performed by an alert information processing apparatus, which may be implemented in hardware and/or software, which may be configured in an electronic device. The electronic device is used for processing a large amount of alarm information corresponding to the computer system. As shown in fig. 1, the method includes:
Step 101, acquiring each alarm information in a preset time before the current moment in a timing way, and determining the alarm number of each alarm information according to the information number dictionary.
Optionally, a plurality of components are disposed in a computer system within the enterprise. Each component is a software component or a hardware component for implementing a specified business function. In the running process of the computer system, the monitoring platform monitors each component in the computer system and detects whether each component can work normally. The monitoring platform may be a computer platform provided in an enterprise for monitoring various components in a computer system. And after detecting that the appointed component cannot work normally, the monitoring platform generates alarm information corresponding to the appointed component. The alarm information is information for representing that the specified component cannot work normally.
Optionally, the electronic device establishes a communication connection with the monitoring platform, and information interaction can be performed based on the established communication connection. The electronic equipment can acquire the alarm information generated by the monitoring platform from the monitoring platform. The electronic equipment can acquire each alarm information in the preset time before the current moment in a timing way, and process the acquired alarm information.
Optionally, each alarm information in a preset time before the current time is acquired at fixed time, including: and acquiring each piece of alarm information in a preset time before the current moment at regular time according to a preset time interval. The preset time interval is a time interval set in advance. The preset duration is a duration set in advance. The preset time interval may be equal to or less than a preset time period. The preset time interval and the preset time length can be set according to service requirements, and the invention is not particularly limited.
Optionally, each alarm information in the preset time before the current time is all alarm information generated by the monitoring platform in the preset time before the current time. Each alarm message in the preset time before the current time is a large amount of alarm messages corresponding to the computer system.
Optionally, the electronic device performs an operation of acquiring each alarm information in a preset time period before the current time at intervals of a preset time, and then processes each acquired alarm information in the preset time period before the current time: determining the alarm numbers of the alarm information according to the information number dictionary; generating an alarm number sequence corresponding to each alarm information according to the alarm time and the alarm number of each alarm information; inputting the alarm number sequence into a preset word vector model to obtain the word vector of the alarm number of each alarm message; according to the word vector of the alarm number of each alarm message, determining the vector of each alarm message, and storing the alarm number and the vector of each alarm message as key value pairs into an information word vector dictionary; according to the information word vector dictionary, storing the alarm information with the association relation into the same alarm information set; and merging the alarm information in each alarm information set into one alarm event to obtain at least one alarm event, and providing each alarm event for a target user. The target user may be an operator of the computer system. Therefore, a large amount of alarm information corresponding to the computer system is acquired at fixed time, the acquired large amount of alarm information corresponding to the computer system is processed in a unified way, the alarm information with association relation caused by the same fault is integrated, and the integrated result is provided for operation and maintenance personnel of the computer system, so that the operation and maintenance personnel can be helped to quickly locate the fault and remove the fault.
Optionally, determining the alarm number of each alarm message according to the information number dictionary includes: the following operations are performed for each alert message: querying target alarm information which is the same as the alarm information in the alarm information stored in the information number dictionary; and determining the alarm number corresponding to the inquired target alarm information as the alarm number of the alarm information.
Optionally, the information number dictionary is a dictionary set in the electronic device and used for storing various different alarm information that can be generated by the monitoring platform and alarm numbers of the various different alarm information. The alarm number of the alarm information is a numerical number for uniquely identifying the alarm information. The target user sets a digital number for each different alarm message that the monitoring platform can generate. And uploading the different alarm information which can be generated by the monitoring platform and the alarm numbers of the different alarm information to the electronic equipment by the target user. The electronic equipment acquires different alarm information which can be generated by the monitoring platform and the alarm numbers of the different alarm information uploaded by the target user, and stores the different alarm information which can be generated by the monitoring platform and the alarm numbers of the different alarm information into the information number dictionary as key value pairs. Specifically, for each different alarm information that can be generated by the monitoring platform, the electronic device uses the alarm information as a key word, and the alarm number of the alarm information is used as a key value of the key word and is correspondingly stored in the information number dictionary.
Optionally, for each acquired alarm information, querying the same target alarm information as the alarm information in the alarm information stored in the information number dictionary, and then determining the alarm number corresponding to the queried target alarm information as the alarm number of the alarm information. The target alert information is the same alert information as the alert information. The alarm number corresponding to the target alarm information is the alarm number of the alarm information. Therefore, based on different alarm information which can be generated by the monitoring platform and alarm numbers of the different alarm information stored in the information number dictionary, the alarm numbers of the alarm information in the preset time before the current time acquired this time are determined.
Step 102, generating an alarm number sequence corresponding to each alarm information according to the alarm time and the alarm number of each alarm information.
Optionally, the alarm time of the alarm information is the time when the monitoring platform generates the alarm information. The electronic device may obtain, from the monitoring platform, the alarm time of each alarm information in the preset duration before the current time while obtaining, from the monitoring platform, each alarm information in the preset duration before the current time. The alarm number sequence corresponding to each alarm information is the alarm number of each alarm information arranged in the order of the alarm time from front to back.
Optionally, generating an alarm number sequence corresponding to each alarm information according to the alarm time and the alarm number of each alarm information includes: and sequencing the alarm numbers of the alarm information according to the sequence from front to back of the alarm time to obtain alarm number sequences corresponding to the alarm information. And sequencing the alarm numbers of the alarm information according to the sequence from front to back of the alarm time, so as to obtain the alarm numbers of the alarm information which are arranged according to the sequence from front to back of the alarm time, thereby obtaining alarm number sequences corresponding to the alarm information.
Step 103, inputting the alarm number sequence into a preset word vector model to obtain the word vector of the alarm number of each alarm message.
Optionally, the preset word vector model is a model set in the electronic device for converting each word in the word sequence into a word vector of a preset dimension. The preset Word vector model may be a Word2Vec model set in the electronic device. The input of the preset word vector model is a word sequence composed of a plurality of words, and the output of the preset word vector model is a word vector of each word in the word sequence. After a word sequence composed of a plurality of words is input into a preset word vector model, the preset word vector model can perform word vectorization operation on each word in the word sequence according to the sequence of each word in the word sequence, so that a word vector of each word in the word sequence is obtained, and then the word vector of each word in the word sequence is output. Word vectors of words are vectors used to represent words. The dimension of the word vector for each word is a preset dimension. The preset dimension is a preset vector dimension. The preset dimension may be set according to the service requirement, and the present invention is not particularly limited.
Optionally, the alarm number sequence corresponding to each alarm message is a word sequence composed of a plurality of words. Each alarm number is a word. After the alarm number sequences corresponding to the alarm information are input into the preset word vector model, the preset word vector model can carry out word vectorization operation on each alarm number in the alarm number sequence according to the sequence of each alarm number in the alarm number sequence, so that the word vector of each alarm number in the alarm number sequence is obtained, and then the word vector of each alarm number in the alarm number sequence is output. The word vector of the alert number is a vector for representing the alert number.
Step 104, determining the vector of each alarm information according to the word vector of the alarm number of each alarm information, and storing the alarm number and the vector of each alarm information as key value pairs into an information word vector dictionary.
Optionally, the vector of alert information is a vector for representing alert information. The magnitude of the distance between the vectors of the respective alert information may be used to characterize the degree of association between the respective alert information.
Optionally, determining the vector of each alarm information according to the word vector of the alarm number of each alarm information, and storing the alarm number and the vector of each alarm information as key value pairs in an information word vector dictionary, including: the following operations are performed for each alert message: determining a word vector of an alarm number of alarm information as a vector of the alarm information; and storing the alarm number and the vector of the alarm information into an information word vector dictionary as key value pairs.
Optionally, the alarm number of the alarm information is a numerical number for uniquely identifying the alarm information. The alarm number of the alarm information is closely related to the alarm information, and the word vector of the alarm number of the alarm information is also closely related to the alarm information. In general, when two alarm information have an association relationship and are caused by the same fault, the distance between the word vectors of the alarm numbers of the two alarm information is smaller. When the two pieces of alarm information have no association relation and are not caused by the same fault, the distance between word vectors of alarm numbers of the two pieces of alarm information is larger. Therefore, if the distance between the word vectors of the alarm numbers of the two alarm messages is detected to be smaller, the association relationship between the two alarm messages can be determined, and the association relationship is caused by the same fault; if the distance between the word vectors of the alarm numbers of the two alarm messages is detected to be larger, it can be determined that the two alarm messages have no association relationship and are not caused by the same fault. The magnitude of the distance between the word vectors of the alert numbers of the respective alert information may be used to characterize the degree of association between the respective alert information. The word vectors of the alarm numbers of the alarm information are closely associated with the alarm information, and can be used for representing the alarm information, and the distance between the word vectors of the alarm numbers of the alarm information can be used for representing the association degree between the alarm information. Accordingly, the word vector of the alert number of the alert information can be determined as the vector of the alert information.
Optionally, the information word vector dictionary is a dictionary set in the electronic device and used for storing alarm numbers and vectors of the alarm information acquired by the electronic device. After the electronic equipment determines the alarm numbers and vectors of the acquired alarm information, firstly clearing the alarm numbers and vectors of the alarm information acquired by the electronic equipment last time and stored in the information word vector dictionary, and then storing the alarm numbers and vectors of the alarm information acquired by the electronic equipment this time into the information word vector dictionary as key value pairs. Specifically, for each piece of alarm information acquired by the electronic device, the electronic device uses the alarm number of the alarm information as a key word, and the vector of the alarm information as a key value of the key word is correspondingly stored in the information word vector dictionary.
And 105, storing the alarm information with the association relation into the same alarm information set according to the information word vector dictionary.
Optionally, storing the alarm information with the association relationship to the same alarm information set according to the information word vector dictionary, including: the following operations are performed for each alert message: acquiring the warning information and the vector of each other warning information from the information word vector dictionary; respectively calculating the distance between the vector of each other alarm information and the vector of the alarm information; detecting whether the distance between the vector of each other alarm information and the vector of the alarm information is smaller than a preset distance threshold value; other alarm information, of which the distance between the vector and the vector of the alarm information is smaller than the preset distance threshold, is determined to be associated alarm information with an association relation with the alarm information; and storing the alarm information and the associated alarm information into the same alarm information set.
Optionally, the electronic device acquires the warning information and the vector of each other warning information from the information word vector dictionary. Each other alarm information is each alarm information except the alarm information in the acquired alarm information. The information word vector dictionary stores the alert information and the vector of each other alert information.
Alternatively, the distance between the vector of the other alarm information and the vector of the alarm information may be a euclidean distance or a cosine distance between the vector of the other alarm information and the vector of the alarm information. The electronic device may calculate, according to a preset euclidean distance calculation formula or cosine distance calculation formula, a euclidean distance or cosine distance between the vector of each other alert information and the vector of the alert information.
Alternatively, the vector of each alarm information may be used to accurately measure the degree of association between each alarm information. In general, when two alarm information have an association relationship and are caused by the same fault, the distance between the vectors of the two alarm information is smaller. When the two pieces of alarm information have no association relationship and are not caused by the same fault, the distance between the vectors of the two pieces of alarm information is larger. Therefore, if the distance between the vectors of the two alarm messages is detected to be smaller, the association relationship between the two alarm messages can be determined, and the two alarm messages are caused by the same fault; if the distance between the vectors of the two alarm messages is detected to be larger, it can be determined that the two alarm messages have no association relationship and are not caused by the same fault.
Optionally, the preset distance threshold is a preset distance. The associated alarm information with the association relation with the alarm information is other alarm information which has the association relation with the alarm information and is caused by the same fault. And detecting whether the distance between the vector of each other alarm information and the vector of the alarm information is smaller than a preset distance threshold value. If the distance between the vector of one other alarm information and the vector of the alarm information is smaller than a preset distance threshold value, which indicates that the distance between the vector of the other alarm information and the vector of the alarm information is smaller, the association relationship between the other alarm information and the alarm information can be determined, and the other alarm information is determined to be the association alarm information with the association relationship caused by the same fault.
Optionally, the set of alert information is a set for storing alert information. After determining the associated alarm information with the association relation with the alarm information, the electronic equipment stores the alarm information and the associated alarm information into the same alarm information set. Specifically, the electronic device detects whether the associated alarm information having the association relation with the alarm information is stored in a certain alarm information set. If the associated alarm information with the association relation with the alarm information is stored in a certain alarm information set, the alarm information is stored in the alarm information set. If the associated alarm information with the alarm information in the association relation is not stored in any alarm information set, an alarm information set is created, and the alarm information and the associated alarm information with the alarm information in the association relation are stored in the created alarm information set.
And 106, merging the alarm information in each alarm information set into one alarm event to obtain at least one alarm event, and providing each alarm event for a target user.
Optionally, after the alarm information with the association relation is stored in the same alarm information set according to the information word vector dictionary, at least one alarm information set can be obtained. Each alarm information set contains alarm information with association relation caused by the same fault. Each alarm event is a plurality of alarm messages with association relation caused by the same fault and connected in series according to the sequence from front to back of alarm time.
Optionally, merging the alarm information in each alarm information set into an alarm event to obtain at least one alarm event, including: the following operations are performed for each set of alert information: and sequencing each alarm information in the alarm information set according to the sequence from front to back of the alarm time, and connecting the sequenced alarm information in series to form an alarm event.
Therefore, based on the vector of each alarm information in the preset time before the current time, the alarm information with the association relation caused by the same fault in each alarm information in the preset time before the current time is merged into an alarm event. The obtained alarm events are the merging results of the alarm information in the preset time before the current time.
Optionally, providing each alarm event to the target user includes: and sending each alarm event to the terminal equipment of the target user. The target user is an operation and maintenance person of the computer system. The terminal device of the target user is a terminal device used by the target user.
According to the technical scheme, each alarm information in the preset time before the current moment is acquired at fixed time, and the alarm number of each alarm information is determined according to the information number dictionary; then generating an alarm number sequence corresponding to each alarm information according to the alarm time and the alarm number of each alarm information; inputting the alarm number sequence into a preset word vector model to obtain the word vector of the alarm number of each alarm message; according to the word vector of the alarm number of each alarm message, determining the vector of each alarm message, and storing the alarm number and the vector of each alarm message as key value pairs into an information word vector dictionary; according to the information word vector dictionary, storing the alarm information with the association relation into the same alarm information set; finally, the alarm information in each alarm information set is merged into an alarm event to obtain at least one alarm event, each alarm event is provided for a target user, the problem that the alarm information processing scheme in the related technology depends on a classification label set according to manual experience, the accuracy and reliability of the alarm information processing process are low, the alarm information with an association relation caused by the same fault cannot be merged accurately is solved, the alarm time and the alarm number of each acquired alarm information can be automatically based on the acquired alarm information, the vector of each alarm information for accurately measuring the association degree between the acquired alarm information is determined, then the alarm information with the association relation caused by the same fault in each acquired alarm information is merged accurately based on the vector of each alarm information, a large amount of acquired alarm information with the association relation caused by the same fault can be processed, the merged accurately, the merged result is provided for operation staff of the computer system, and the operation staff can be helped to locate the fault and remove the fault rapidly.
Example two
Fig. 2 is a flowchart of an alarm information processing method according to a second embodiment of the present invention. Embodiments of the invention may be combined with various alternatives to one or more of the embodiments described above. As shown in fig. 2, the method includes:
step 201, each alarm information in a preset time before the current moment is acquired at fixed time, and the alarm number of each alarm information is determined according to the information number dictionary.
Step 202, according to the sequence from front to back of the alarm time, the alarm numbers of the alarm information are ordered to obtain alarm number sequences corresponding to the alarm information.
Step 203, inputting the alarm number sequence into a preset word vector model to obtain the word vector of the alarm number of each alarm message.
Step 204, determining the vector of each alarm information according to the word vector of the alarm number of each alarm information, and storing the alarm number and the vector of each alarm information as key value pairs into an information word vector dictionary.
And 205, storing the alarm information with the association relation into the same alarm information set according to the information word vector dictionary.
And 206, merging the alarm information in each alarm information set into one alarm event to obtain at least one alarm event, and sending each alarm event to the terminal equipment of the target user.
According to the technical scheme, the alarm number sequence corresponding to each alarm information can be automatically generated based on the alarm time and the alarm number of each alarm information, then the vector of each alarm information for accurately measuring the association degree between the acquired alarm information is determined based on the alarm number sequence, the alarm information with the association relation caused by the same fault in each acquired alarm information can be accurately merged based on the vector of each alarm information, a large amount of acquired alarm information corresponding to a computer system can be processed, the alarm information with the association relation caused by the same fault is accurately merged, and merged results are provided for operation staff of the computer system, so that the operation staff can be helped to quickly locate the fault and remove the fault.
Example III
Fig. 3 is a schematic structural diagram of an alarm information processing apparatus according to a third embodiment of the present invention. The apparatus may be configured in an electronic device. As shown in fig. 3, the apparatus includes: a number determination module 301, a sequence generation module 302, a vector generation module 303, a vector storage module 304, an information association module 305, and an information merging module 306.
The number determining module 301 is configured to obtain each alarm information in a preset time before the current time at regular time, and determine an alarm number of each alarm information according to the information number dictionary; the sequence generating module 302 is configured to generate an alarm number sequence corresponding to each alarm information according to the alarm time and the alarm number of each alarm information; the vector generation module 303 is configured to input the alert number sequence into a preset word vector model, so as to obtain a word vector of an alert number of each alert message; the vector storage module 304 is configured to determine a vector of each alarm information according to a word vector of an alarm number of each alarm information, and store the alarm number and the vector of each alarm information as a key value pair into the information word vector dictionary; the information association module 305 is configured to store the alarm information with association relationship into the same alarm information set according to the information word vector dictionary; the information merging module 306 is configured to merge the alarm information in each alarm information set into one alarm event, obtain at least one alarm event, and provide each alarm event to a target user.
According to the technical scheme, each alarm information in the preset time before the current moment is acquired at fixed time, and the alarm number of each alarm information is determined according to the information number dictionary; then generating an alarm number sequence corresponding to each alarm information according to the alarm time and the alarm number of each alarm information; inputting the alarm number sequence into a preset word vector model to obtain the word vector of the alarm number of each alarm message; according to the word vector of the alarm number of each alarm message, determining the vector of each alarm message, and storing the alarm number and the vector of each alarm message as key value pairs into an information word vector dictionary; according to the information word vector dictionary, storing the alarm information with the association relation into the same alarm information set; finally, the alarm information in each alarm information set is merged into an alarm event to obtain at least one alarm event, each alarm event is provided for a target user, the problem that the alarm information processing scheme in the related technology depends on a classification label set according to manual experience, the accuracy and reliability of the alarm information processing process are low, the alarm information with an association relation caused by the same fault cannot be merged accurately is solved, the alarm time and the alarm number of each acquired alarm information can be automatically based on the acquired alarm information, the vector of each alarm information for accurately measuring the association degree between the acquired alarm information is determined, then the alarm information with the association relation caused by the same fault in each acquired alarm information is merged accurately based on the vector of each alarm information, a large amount of acquired alarm information with the association relation caused by the same fault can be processed, the merged accurately, the merged result is provided for operation staff of the computer system, and the operation staff can be helped to locate the fault and remove the fault rapidly.
In an optional implementation manner of the embodiment of the present invention, optionally, when performing an operation of determining an alarm number of each alarm information according to the information number dictionary, the number determining module 301 is specifically configured to: the following operations are performed for each alert message: querying target alarm information which is the same as the alarm information in the alarm information stored in the information number dictionary; and determining the alarm number corresponding to the inquired target alarm information as the alarm number of the alarm information.
In an optional implementation manner of the embodiment of the present invention, optionally, the sequence generating module 302 is specifically configured to: and sequencing the alarm numbers of the alarm information according to the sequence from front to back of the alarm time to obtain alarm number sequences corresponding to the alarm information.
In an optional implementation of the embodiment of the present invention, optionally, the vector storage module 304 is specifically configured to: the following operations are performed for each alert message: determining a word vector of an alarm number of alarm information as a vector of the alarm information; and storing the alarm number and the vector of the alarm information into an information word vector dictionary as key value pairs.
In an optional implementation manner of the embodiment of the present invention, optionally, the information association module 305 is specifically configured to: the following operations are performed for each alert message: acquiring the warning information and the vector of each other warning information from the information word vector dictionary; respectively calculating the distance between the vector of each other alarm information and the vector of the alarm information; detecting whether the distance between the vector of each other alarm information and the vector of the alarm information is smaller than a preset distance threshold value; other alarm information, of which the distance between the vector and the vector of the alarm information is smaller than the preset distance threshold, is determined to be associated alarm information with an association relation with the alarm information; and storing the alarm information and the associated alarm information into the same alarm information set.
In an optional implementation manner of the embodiment of the present invention, optionally, when executing the operation of merging the alarm information in each alarm information set into one alarm event, the information merging module 306 is specifically configured to: the following operations are performed for each set of alert information: and sequencing each alarm information in the alarm information set according to the sequence from front to back of the alarm time, and connecting the sequenced alarm information in series to form an alarm event.
In an optional implementation manner of the embodiment of the present invention, optionally, the information merging module 306 is specifically configured to, when performing an operation of providing each of the alarm events to the target user: and sending each alarm event to the terminal equipment of the target user.
The specific manner in which the various modules perform the operations in the apparatus of the above embodiments have been described in detail in connection with the embodiments of the method, and will not be described in detail herein.
The alarm information processing device can execute the alarm information processing method provided by any embodiment of the invention, and has the corresponding functional modules and beneficial effects of executing the alarm information processing method.
Example IV
Fig. 4 is a schematic diagram of an electronic device 10 that may be used to implement the alert information processing method of an embodiment of the present invention. The components shown herein, their connections and relationships, and their functions, are meant to be exemplary only, and are not meant to limit implementations of the inventions described and/or claimed herein.
As shown in fig. 4, the electronic device 10 includes at least one processor 11, and a memory such as a Read Only Memory (ROM) 12, a Random Access Memory (RAM) 13, etc., which is in network communication connection with the at least one processor 11, wherein the memory stores a computer program executable by the at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the Read Only Memory (ROM) 12 or the computer program built into the Random Access Memory (RAM) 13 from the storage unit 18. In the Random Access Memory (RAM) 13, various programs and data required for the operation of the electronic device 10 may also be stored. The processor 11, read Only Memory (ROM) 12 and Random Access Memory (RAM) 13 are connected to each other by a bus 14. An input/output (I/O) interface 15 is also connected to bus 14.
The various components in the electronic device 10 are connected to an input/output (I/O) interface 15, including: an input unit 16 such as a keyboard, a mouse, etc.; an output unit 17 such as various types of displays, speakers, and the like; a storage unit 18 such as a magnetic disk, an optical disk, or the like; and a communication unit 19 such as a network card, modem, wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information/data with other devices via a computer network, such as the internet, and/or various telecommunication networks.
The processor 11 may be a variety of general and/or special purpose processing components having processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a Central Processing Unit (CPU), a Graphics Processing Unit (GPU), various specialized Artificial Intelligence (AI) computing chips, various processors running machine learning model algorithms, digital Signal Processors (DSPs), and any suitable processor, controller, microcontroller, etc. The processor 11 performs the respective methods and processes described above, such as an alarm information processing method.
In some embodiments, the alert information processing method may be implemented as a computer program tangibly embodied on a computer-readable storage medium, such as the storage unit 18. In some embodiments, part or all of the computer program may be loaded and/or installed onto the electronic device 10 via Read Only Memory (ROM) 12 and/or communication unit 19. When the computer program is built into a Random Access Memory (RAM) 13 and executed by the processor 11, one or more steps of the alert information processing method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to perform the alert information processing method in any other suitable manner (e.g., by means of firmware).
Various implementations of the systems and techniques described here above may be implemented in digital electronic circuitry, integrated circuit systems, field Programmable Gate Arrays (FPGAs), application Specific Integrated Circuits (ASICs), application Specific Standard Products (ASSPs), systems On Chip (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and/or combinations thereof. These various embodiments may include: implemented in one or more computer programs, the one or more computer programs may be executed and/or interpreted on a programmable system including at least one programmable processor, which may be a special purpose or general-purpose programmable processor, that may receive data and instructions from, and transmit data and instructions to, a storage system, at least one input device, and at least one output device.
The computer program for implementing the alert information processing method of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus, such that the computer programs, when executed by the processor, cause the functions/acts specified in the flowchart and/or block diagram block or blocks to be implemented. The computer program may execute entirely on the machine, partly on the machine, as a stand-alone software package, partly on the machine and partly on a remote machine or entirely on the remote machine or server.
In the context of the present invention, a computer-readable storage medium may be a tangible medium that can contain, or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. The computer readable storage medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. Alternatively, the computer readable storage medium may be a machine readable signal medium. More specific examples of a machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
To provide for interaction with a user, the systems and techniques described here can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to a user; and a keyboard and a pointing device (e.g., a mouse or a trackball) through which a user can provide input to the electronic device. Other kinds of devices may also be used to provide for interaction with a user; for example, feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form, including acoustic input, speech input, or tactile input.
The systems and techniques described here can be implemented in a computing system that includes a background component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front-end component (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such background, middleware, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local Area Networks (LANs), wide Area Networks (WANs), blockchain networks, and the internet.
The computing system may include clients and servers. The client and server are typically remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other. The server can be a cloud server, also called a cloud computing server or a cloud host, and is a host product in a cloud computing service system, so that the defects of high management difficulty and weak service expansibility in the traditional physical hosts and VPS service are overcome.
It should be appreciated that various forms of the flows shown above may be used to reorder, add, or delete steps. For example, the steps described in the present invention may be performed in parallel, sequentially, or in a different order, so long as the desired results of the technical solution of the present invention are achieved, and the present invention is not limited herein.
The above embodiments do not limit the scope of the present invention. It will be apparent to those skilled in the art that various modifications, combinations, sub-combinations and alternatives are possible, depending on design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the scope of the present invention.
Claims (8)
1. An alarm information processing method, comprising:
each alarm information in a preset time before the current moment is acquired at fixed time, and the alarm number of each alarm information is determined according to the information number dictionary; the information number dictionary is a dictionary which is arranged in the electronic equipment and used for storing various different alarm information which can be generated by the monitoring platform and alarm numbers of the various different alarm information, and the alarm numbers of the alarm information are digital numbers used for uniquely identifying the alarm information; the alarm number of the alarm information is closely related to the alarm information, the word vector of the alarm number of the alarm information is also closely related to the alarm information, and when the two alarm information have an association relationship and are caused by the same fault, the distance between the word vectors of the alarm numbers of the two alarm information is smaller;
Generating an alarm number sequence corresponding to each alarm information according to the alarm time and the alarm number of each alarm information;
inputting the alarm number sequence into a preset word vector model to obtain the word vector of the alarm number of each alarm message;
according to the word vector of the alarm number of each alarm message, determining the vector of each alarm message, and storing the alarm number and the vector of each alarm message as key value pairs into an information word vector dictionary;
according to the information word vector dictionary, storing the alarm information with the association relation into the same alarm information set;
merging the alarm information in each alarm information set into an alarm event to obtain at least one alarm event, and providing each alarm event for a target user;
the determining the alarm numbers of the alarm information according to the information number dictionary comprises the following steps:
the following operations are performed for each alert message:
querying target alarm information which is the same as the alarm information in the alarm information stored in the information number dictionary;
determining the alarm number corresponding to the inquired target alarm information as the alarm number of the alarm information;
The storing the alarm information with the association relation to the same alarm information set according to the information word vector dictionary comprises the following steps:
the following operations are performed for each alert message:
acquiring the warning information and the vector of each other warning information from the information word vector dictionary;
respectively calculating the distance between the vector of each other alarm information and the vector of the alarm information;
detecting whether the distance between the vector of each other alarm information and the vector of the alarm information is smaller than a preset distance threshold value;
other alarm information, of which the distance between the vector and the vector of the alarm information is smaller than the preset distance threshold, is determined to be associated alarm information with an association relation with the alarm information;
and storing the alarm information and the associated alarm information into the same alarm information set.
2. The method of claim 1, wherein generating an alert number sequence corresponding to each alert message based on the alert time and the alert number of each alert message, comprises:
and sequencing the alarm numbers of the alarm information according to the sequence from front to back of the alarm time to obtain alarm number sequences corresponding to the alarm information.
3. The alert information processing method according to claim 1, wherein determining the vector of each alert information based on the word vector of the alert number of each alert information, and storing the alert number and the vector of each alert information as key value pairs in the information word vector dictionary, comprises:
the following operations are performed for each alert message:
determining a word vector of an alarm number of alarm information as a vector of the alarm information;
and storing the alarm number and the vector of the alarm information into an information word vector dictionary as key value pairs.
4. The method of claim 1, wherein merging the alarm information in each set of alarm information into one alarm event to obtain at least one alarm event, comprises:
the following operations are performed for each set of alert information:
and sequencing each alarm information in the alarm information set according to the sequence from front to back of the alarm time, and connecting the sequenced alarm information in series to form an alarm event.
5. The alert information processing method according to claim 1, wherein providing each of the alert events to a target user comprises:
And sending each alarm event to the terminal equipment of the target user.
6. An alert information processing apparatus, comprising:
the number determining module is used for acquiring each alarm information in a preset time before the current moment in a timing way and determining the alarm number of each alarm information according to the information number dictionary; the information number dictionary is a dictionary which is arranged in the electronic equipment and used for storing various different alarm information which can be generated by the monitoring platform and alarm numbers of the various different alarm information, and the alarm numbers of the alarm information are digital numbers used for uniquely identifying the alarm information; the alarm number of the alarm information is closely related to the alarm information, the word vector of the alarm number of the alarm information is also closely related to the alarm information, and when the two alarm information have an association relationship and are caused by the same fault, the distance between the word vectors of the alarm numbers of the two alarm information is smaller;
the sequence generation module is used for generating an alarm number sequence corresponding to each alarm information according to the alarm time and the alarm number of each alarm information;
the vector generation module is used for inputting the alarm number sequence into a preset word vector model to obtain the word vector of the alarm number of each alarm message;
The vector storage module is used for determining the vector of each alarm information according to the word vector of the alarm number of each alarm information, and storing the alarm number and the vector of each alarm information as key value pairs into the information word vector dictionary;
the information association module is used for storing the alarm information with association relation into the same alarm information set according to the information word vector dictionary;
the information merging module is used for merging the alarm information in each alarm information set into an alarm event to obtain at least one alarm event, and providing each alarm event for a target user;
the number determining module is specifically configured to, when executing an operation of determining an alarm number of each alarm message according to the information number dictionary: the following operations are performed for each alert message: querying target alarm information which is the same as the alarm information in the alarm information stored in the information number dictionary; determining the alarm number corresponding to the inquired target alarm information as the alarm number of the alarm information;
the information association module is specifically used for: the following operations are performed for each alert message: acquiring the warning information and the vector of each other warning information from the information word vector dictionary; respectively calculating the distance between the vector of each other alarm information and the vector of the alarm information; detecting whether the distance between the vector of each other alarm information and the vector of the alarm information is smaller than a preset distance threshold value; other alarm information, of which the distance between the vector and the vector of the alarm information is smaller than the preset distance threshold, is determined to be associated alarm information with an association relation with the alarm information; and storing the alarm information and the associated alarm information into the same alarm information set.
7. An electronic device, the electronic device comprising:
at least one processor;
and a memory communicatively coupled to the at least one processor network;
wherein the memory stores a computer program executable by the at least one processor to enable the at least one processor to perform the alert information processing method of any one of claims 1-5.
8. A computer readable storage medium storing computer instructions for causing a processor to implement the alarm information processing method of any one of claims 1-5 when executed.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310975428.7A CN116991684B (en) | 2023-08-03 | 2023-08-03 | Alarm information processing method, device, equipment and medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310975428.7A CN116991684B (en) | 2023-08-03 | 2023-08-03 | Alarm information processing method, device, equipment and medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN116991684A CN116991684A (en) | 2023-11-03 |
| CN116991684B true CN116991684B (en) | 2024-01-30 |
Family
ID=88533510
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202310975428.7A Active CN116991684B (en) | 2023-08-03 | 2023-08-03 | Alarm information processing method, device, equipment and medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116991684B (en) |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111143167A (en) * | 2019-12-24 | 2020-05-12 | 北京优特捷信息技术有限公司 | Alarm merging method, device, equipment and storage medium for multiple platforms |
| CN111367777A (en) * | 2020-03-03 | 2020-07-03 | 腾讯科技（深圳）有限公司 | Alarm processing method, device, equipment and computer readable storage medium |
| CN111953541A (en) * | 2020-08-10 | 2020-11-17 | 腾讯科技（深圳）有限公司 | Alarm information processing method and device, computer equipment and storage medium |
| CN113328869A (en) * | 2020-02-28 | 2021-08-31 | 华为技术有限公司 | Alarm aggregation method and device |
| CN113381890A (en) * | 2021-06-08 | 2021-09-10 | 中国电信股份有限公司 | Alarm information association method and device, electronic equipment and readable storage medium |
| CN114297037A (en) * | 2021-12-27 | 2022-04-08 | 中国联合网络通信集团有限公司 | Alarm clustering method and device |
| CN114818652A (en) * | 2022-04-06 | 2022-07-29 | 亿玛创新网络(天津)有限公司 | Alarm information processing method and device, electronic equipment and storage medium |
| CN115114073A (en) * | 2022-07-28 | 2022-09-27 | 中国工商银行股份有限公司 | Alarm information processing method and device, storage medium and electronic equipment |
| CN115495587A (en) * | 2022-09-20 | 2022-12-20 | 中国银联股份有限公司 | Alarm analysis method and device based on knowledge graph |
| CN116089231A (en) * | 2023-02-13 | 2023-05-09 | 北京优特捷信息技术有限公司 | Fault alarm method and device, electronic equipment and storage medium |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112564988B (en) * | 2021-02-19 | 2021-06-18 | 腾讯科技（深圳）有限公司 | Alarm processing method and device and electronic equipment |
-
2023
- 2023-08-03 CN CN202310975428.7A patent/CN116991684B/en active Active
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111143167A (en) * | 2019-12-24 | 2020-05-12 | 北京优特捷信息技术有限公司 | Alarm merging method, device, equipment and storage medium for multiple platforms |
| CN113328869A (en) * | 2020-02-28 | 2021-08-31 | 华为技术有限公司 | Alarm aggregation method and device |
| CN111367777A (en) * | 2020-03-03 | 2020-07-03 | 腾讯科技（深圳）有限公司 | Alarm processing method, device, equipment and computer readable storage medium |
| CN111953541A (en) * | 2020-08-10 | 2020-11-17 | 腾讯科技（深圳）有限公司 | Alarm information processing method and device, computer equipment and storage medium |
| CN113381890A (en) * | 2021-06-08 | 2021-09-10 | 中国电信股份有限公司 | Alarm information association method and device, electronic equipment and readable storage medium |
| CN114297037A (en) * | 2021-12-27 | 2022-04-08 | 中国联合网络通信集团有限公司 | Alarm clustering method and device |
| CN114818652A (en) * | 2022-04-06 | 2022-07-29 | 亿玛创新网络(天津)有限公司 | Alarm information processing method and device, electronic equipment and storage medium |
| CN115114073A (en) * | 2022-07-28 | 2022-09-27 | 中国工商银行股份有限公司 | Alarm information processing method and device, storage medium and electronic equipment |
| CN115495587A (en) * | 2022-09-20 | 2022-12-20 | 中国银联股份有限公司 | Alarm analysis method and device based on knowledge graph |
| CN116089231A (en) * | 2023-02-13 | 2023-05-09 | 北京优特捷信息技术有限公司 | Fault alarm method and device, electronic equipment and storage medium |
Non-Patent Citations (2)
| Title |
|---|
| 基于事件起点的层次化时序Petri网及其电网故障诊断方法;赖宏毅 等;电力自动化设备;第38卷(第02期);201-209 * |
| 基于改进RBFNN的配电网停电时间自动识别模型;陈敬春;田泉;王聪;;电力系统及其自动化学报;第28卷(第S1期);111-114 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN116991684A (en) | 2023-11-03 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN116049146B (en) | Database fault processing method, device, equipment and storage medium | |
| CN116089231B (en) | Fault alarm method and device, electronic equipment and storage medium | |
| CN115033463B (en) | System exception type determining method, device, equipment and storage medium | |
| CN116010220A (en) | Alarm diagnosis method, device, equipment and storage medium | |
| CN113468021B (en) | Method, device, equipment and storage medium for monitoring performance data | |
| CN116991684B (en) | Alarm information processing method, device, equipment and medium | |
| CN116991683B (en) | Alarm information processing method, device, equipment and medium | |
| CN115048352B (en) | Log field extraction method, device, equipment and storage medium | |
| CN114327988B (en) | Visual network fault relation determination method and device | |
| CN116991620B (en) | Solution determining method, device, equipment and medium | |
| CN114884813B (en) | Network architecture determining method and device, electronic equipment and storage medium | |
| CN116183490A (en) | Equipment detection method, device, equipment and storage medium | |
| CN114330437A (en) | Fault detection method and training method and device of fault classification model | |
| CN117493127B (en) | Application program detection method, device, equipment and medium | |
| CN116990744B (en) | Electric energy meter detection method, device, equipment and medium | |
| CN116089499A (en) | Data statistics method, device and medium based on kafka data volume | |
| CN117609801A (en) | Data comparison method, device, equipment and medium | |
| CN113836291B (en) | Data processing method, device, equipment and storage medium | |
| CN116340098A (en) | Server detection method, device, equipment and medium | |
| CN117033057A (en) | Fault root cause positioning method, device, equipment and medium based on call chain data | |
| CN117421155A (en) | Alarm processing method, device, equipment and medium | |
| CN117608904A (en) | Fault positioning method and device, electronic equipment and storage medium | |
| CN115774648A (en) | Abnormity positioning method, device, equipment and storage medium | |
| CN115914271A (en) | Control system alarm method and device, electronic equipment and storage medium | |
| CN117422339A (en) | Importance assessment method, device, equipment and medium for power grid nodes |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |