CN117255002A

CN117255002A - Fault processing method and device, storage medium and network equipment

Info

Publication number: CN117255002A
Application number: CN202210649517.8A
Authority: CN
Inventors: 熊成龙; 蔡佳翌; 刘译夫; 黄毓琦; 陈玉祥; 马顺
Original assignee: China Mobile Communications Group Co Ltd; China Mobile Group Jiangxi Co Ltd
Current assignee: China Mobile Communications Group Co Ltd; China Mobile Group Jiangxi Co Ltd
Priority date: 2022-06-09
Filing date: 2022-06-09
Publication date: 2023-12-19

Abstract

The embodiment of the invention provides a fault processing method, a device, a storage medium and network equipment. The method comprises the following steps: inquiring a network element analysis list corresponding to the fault type according to the acquired fault type; acquiring an operation log corresponding to the network element analysis list; generating operation fault associated information according to the operation log and the stored instruction dictionary; and when the operation fault associated information comprises the operation fault associated information with strong association, performing fault processing according to the generated repair instruction. According to the technical scheme provided by the embodiment of the invention, the root cause of the fault can be determined based on the operation log and the fault can be processed, so that the fault processing efficiency is improved.

Description

Fault processing method and device, storage medium and network equipment

[ field of technology ]

The present invention relates to the field of core networks, and in particular, to a fault handling method, a fault handling device, a storage medium, and a network device.

[ background Art ]

According to analysis of a large number of network faults and complaint cases, many times the network faults and the complaint cases are caused by manual misoperation of maintenance personnel, network fault alarming and performance alarming positioning in the related technology depend on typical alarming information or performance information, atypical and featureless abnormity are difficult to position, and when the faults caused by manual misoperation are analyzed, a repair scheme is required to be manually formulated, so that the efficiency is very low.

[ invention ]

In view of this, the embodiments of the present invention provide a fault processing method, device, storage medium and computer apparatus, so as to improve the efficiency of fault processing.

In one aspect, an embodiment of the present invention provides a fault handling method, including:

inquiring a network element analysis list corresponding to the fault type according to the acquired fault type;

acquiring an operation log corresponding to the network element analysis list;

generating operation fault associated information according to the operation log and the stored instruction dictionary;

and when the operation fault associated information comprises the operation fault associated information with strong association, performing fault processing according to the generated repair instruction.

Optionally, the operation log includes a network element and a network element type, the instruction dictionary includes an associated service corresponding to the network element type, the operation fault associated information includes a network element impact score, and generating the operation fault associated information according to the operation log and the stored instruction dictionary includes:

determining an associated service corresponding to the network element type in the operation log according to the operation log and the stored instruction dictionary;

acquiring a plurality of network element matching degrees of the network elements corresponding to the associated service;

and generating a network element influence score according to the matching degree of the network elements.

Optionally, determining the operation fault associated information corresponding to the network element influence score with the largest network element influence score as the strong-relevance operation fault associated information.

Optionally, before performing fault processing according to the generated repair instruction, the method includes:

and matching the network element instruction corresponding to the strong-relevance operation fault association information with a stored repair template to generate a repair instruction.

Optionally, the generating a network element impact score according to the plurality of network element matching degrees includes:

and adding the matching degrees of the network elements to generate a network element influence score.

Optionally, the matching the network element instruction corresponding to the strong correlation operation fault correlation information with the stored repair template includes:

judging whether an automatic repair field of the repair instruction is yes;

if the automatic repair field of the repair instruction is judged to be yes, continuing to execute the step of performing fault processing according to the generated repair instruction.

Optionally, the network element matching degree includes a type matching degree, an instruction matching degree, a service matching degree, an influence matching degree or a time matching degree.

In another aspect, an embodiment of the present invention provides a fault handling apparatus, including:

the query module is used for querying a network element analysis list corresponding to the fault type according to the acquired fault type;

the acquisition module is used for acquiring an operation log corresponding to the network element analysis list;

the first generation module is used for generating operation fault associated information according to the operation log and the stored instruction dictionary;

and the fault processing module is used for performing fault processing according to the generated repair instruction when the operation fault associated information comprises the operation fault associated information with strong association.

In another aspect, an embodiment of the present invention provides a storage medium, including: the storage medium includes a stored program, wherein the program, when executed, controls a device in which the storage medium is located to execute the fault handling method.

In another aspect, an embodiment of the present invention provides a network device, including a memory and a processor, where the memory is configured to store information including program instructions, and the processor is configured to control execution of the program instructions, where the program instructions, when loaded and executed by the processor, implement steps of the fault handling method described above.

According to the technical scheme of the fault processing method provided by the embodiment of the invention, a network element analysis list corresponding to the fault type is inquired according to the acquired fault type; acquiring an operation log corresponding to the network element analysis list; generating operation fault associated information according to the operation log and the stored instruction dictionary; and when the operation fault associated information comprises the operation fault associated information with strong association, performing fault processing according to the generated repair instruction. According to the technical scheme provided by the embodiment of the invention, the root cause of the fault can be determined based on the operation log and the fault can be processed, so that the fault processing efficiency is improved.

[ description of the drawings ]

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings that are needed in the embodiments will be briefly described below, it being obvious that the drawings in the following description are only some embodiments of the present invention, and that other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.

FIG. 1 is a schematic diagram of a fault in the related art;

FIG. 2 is a flow chart of a fault handling method according to an embodiment of the present invention;

FIG. 3 is a flowchart of another fault handling method according to an embodiment of the present invention;

fig. 4 is a schematic diagram of a network element topology template according to an embodiment of the present invention;

fig. 5 is a schematic diagram of another network element topology template according to an embodiment of the present invention;

fig. 6 is a schematic structural diagram of a fault handling apparatus according to an embodiment of the present invention;

fig. 7 is a schematic diagram of a network device according to an embodiment of the present invention.

[ detailed description ] of the invention

For a better understanding of the technical solution of the present invention, the following detailed description of the embodiments of the present invention refers to the accompanying drawings.

It should be understood that the described embodiments are merely some, but not all, embodiments of the invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.

The terminology used in the embodiments of the invention is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. As used in this application and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.

It should be understood that the term "and/or" as used herein is merely one way of describing an association of associated objects, meaning that there may be three relationships, e.g., a and/or b, which may represent: the first and second cases exist separately, and the first and second cases exist separately. In addition, the character "/" herein generally indicates that the front and rear associated objects are an "or" relationship.

If a scene that the call cannot respond and fault location is needed due to the fact that the network element wrongly produces data occurs, the call is not responded. The fault location in the related art is based on the analysis of fault alarms and performance alarms collected by the network layer. Fig. 1 is a schematic diagram of a fault in the related art, as shown in fig. 1, a network element in the scenario includes: a1, A2, B1, B2, B3, C1, C2, C3, C4, D1, D2, D3, D4, and D5, wherein D1 repeatedly initiates network call messages, C1 generates a large number of low-performance degradation alarms with call completion rate, B1 generates message backlog, so that a central processing unit (Central Processing Unit, abbreviated as CPU) of the network device is excessively occupied, the device is repeatedly restarted, and A1 generates data and ignores messages of B1. In the related art, an alarm is not given out by A1, but the alarm given out by B1 does not have obvious characteristics pointing to A1, so that the real problem root of A1 is difficult to quickly find in the related art according to the mode of positioning the root cause of the fault and the performance alarm, and the fault processing efficiency is lower.

In order to solve the technical problems in the related art, an embodiment of the present invention provides a fault handling method, and fig. 2 is a flowchart of the fault handling method provided in the embodiment of the present invention, as shown in fig. 2, where the method includes:

step 102, according to the obtained fault type, inquiring a network element analysis list corresponding to the fault type.

In the embodiment of the invention, each step is executed by the network equipment.

In the embodiment of the invention, the fault comprises a network fault acquired by the network equipment or fault complaints sent to the network equipment by the user terminal. The fault type includes a fault type of a network fault or a fault type of a fault complaint.

In the embodiment of the invention, the corresponding relation between the fault type and the network element analysis list is stored in the network equipment, and the network element analysis list corresponding to the fault type can be inquired according to the acquired fault type.

In the embodiment of the invention, the network element analysis list related to the fault can be timely obtained, so that the artificial operation logs of the network elements in the network element analysis list before and after the abnormal time point are obtained in step 104.

Step 104, obtaining an operation log corresponding to the network element analysis list.

In the embodiment of the invention, the operation log is stored in the network equipment, and the operation log corresponding to the network element analysis list is obtained.

As an alternative, according to the acquired network element analysis list, an artificial operation log made by maintainers in a set time of the relevant network element in the network element analysis list can be acquired. The setting time can be set according to the actual situation, and is, for example, 24 hours.

And 106, generating operation fault associated information according to the operation log and the stored instruction dictionary.

According to the embodiment of the invention, the root cause causing the fault can be determined according to the operation fault associated information.

And 108, when the operation fault associated information comprises the operation fault associated information with strong association, performing fault processing according to the generated repair instruction.

In the step, automatic repair is carried out according to the generated repair instruction so as to carry out fault processing.

According to the technical scheme provided by the embodiment of the invention, according to the acquired fault type, a network element analysis list corresponding to the fault type is inquired; acquiring an operation log corresponding to the network element analysis list; generating operation fault associated information according to the operation log and the stored instruction dictionary; and when the operation fault associated information comprises the operation fault associated information with strong association, performing fault processing according to the generated repair instruction. According to the technical scheme provided by the embodiment of the invention, the root cause of the fault can be determined based on the operation log and the fault can be processed, so that the fault processing efficiency is improved.

An embodiment of the present invention provides another fault handling method, and fig. 3 is a flowchart of another fault handling method provided by the embodiment of the present invention, where as shown in fig. 3, the method includes:

step 202, according to the obtained fault type, inquiring a network element analysis list corresponding to the fault type.

In this step, when the network device obtains a fault alarm or user complaint, it needs to query a corresponding network element topology template according to the fault type, and obtain a related network element analysis list.

Fig. 4 is a schematic diagram of a network element topology template according to an embodiment of the present invention, where, as shown in fig. 4, the network element includes: a1, A2, B1, B2, B3, C1, C2, C3, C4, D1, D2, D3, D4 and D5 are all listed as a suspected network element list according to the positions of the network elements in the whole network topology, wherein the upper and lower 3-level (the level can be automatically configured). As shown in fig. 4, assuming that the C1 network element has a fault alarm, all { B1, C1, D2} are taken as related network elements and are put into the network element analysis list.

Fig. 5 is a schematic diagram of another topology template of a network element according to an embodiment of the present invention, where, as shown in fig. 5, the network element includes: a1, A2, B1, B2, B3, C1, C2, C3, C4, D1, D2, D3, D4, and D5, wherein A1, B1, C1, and D1 belong to the network element of service 1, A2, B2, C2, D2, and D3 belong to the network element of service 2, A2, B3, C4, D4, and D5 belong to the network element of service 3, and { A1, B1, C1, D1} are all taken as involved network elements into the network element analysis list assuming that service 1 has a problem.

Step 204, obtaining an operation log corresponding to the network element analysis list.

For example, service 1 is a call service, and the network elements corresponding to the call service include A1, B1, C1 and D1, and an operation log corresponding to the network element analysis list is obtained, where the operation log is shown in the following table one:

list one

As shown in the above table one, the network element type of the network element A1 is a, the operation instruction of the network element A1 is Set B1 Message unavailable, and the operation time of the network element A1 is 2022-04-14:13:31:00. The network element type of the network element B1 is B, the operation instruction of the network element B1 is add address 1range 10.98.0.0 10.98.255.255, and the operation time of the network element B1 is 2022-04-14:10:23:00. The network element type of the network element C1 is C, the operation instruction of the network element C1 is Show cpu, and the operation time of the network element C1 is 2022-04-14:11:45:00. The network element D1 is of the network element type D, and the network element D1 is not operated.

And 206, generating operation fault associated information according to the operation log and the stored instruction dictionary.

In the embodiment of the invention, the operation log comprises network elements and network element types, and the instruction dictionary comprises associated services corresponding to the network element types.

Specifically, step 206 includes:

and step S1, determining the associated service corresponding to the network element type in the operation log according to the operation log and the stored instruction dictionary.

In the embodiment of the invention, the instruction dictionary is shown in the following table two:

watch II

As shown in the above table two, the key instruction corresponding to the network element type a is Set Message, and the associated service corresponding to the network element type a is voice and is an influencing service. The key instruction corresponding to the network element type B is address, and the associated service corresponding to the network element type B is data and the influence service. The key instruction corresponding to the network element type C is Show cpu, and the associated service corresponding to the network element type C is voice and data and does not affect the service.

The network element type corresponding to the network element A1 is A, the key instruction is successfully matched, the associated service is voice, and the voice is influenced. The network element type corresponding to the network element B1 is B, the key instruction is successfully matched, the associated service is data, and only the data is affected. The network element type corresponding to the network element C1 is C, the key instruction is successfully matched, the associated service is voice and data, and no influence is caused to the voice.

And S2, acquiring a plurality of network element matching degrees of the network elements corresponding to the associated service.

In the embodiment of the invention, the network element matching degree comprises type matching degree, instruction matching degree, service matching degree, influence matching degree or time matching degree.

And S3, generating a network element influence score according to the matching degree of the network elements.

Specifically, the network element matching degree is added to generate a network element impact score.

In the embodiment of the invention, the matching degree of the network elements is shown in the following table III:

watch III

As shown in the above table three, the type matching degree of the network element A1 is 1, the instruction matching degree is 1, the service matching degree is 1, the influence matching degree is 1, the time matching degree is 1, and the network element influence score is 5. The type matching degree of the network element B1 is 1, the instruction matching degree is 1, the service matching degree is 0, the influence matching degree is 0, the time matching degree is 0.4, and the network element influence score is 2.4. The type matching degree of the network element C1 is 1, the instruction matching degree is 1, the service matching degree is 0, the influence matching degree is 0, the time matching degree is 0.5, and the network element influence score is 2.5. Since the network element impact score of network element A1 is the largest, the operation of network element A1 can be considered the root cause of the failure.

In the embodiment of the invention, the operation fault associated information corresponding to the network element influence score with the largest network element influence score can be determined as the operation fault associated information with strong association. Further, if the operation time of the network element corresponding to the largest network element influence score in the network element influence scores is consistent with the time of the fault, determining that the network element is in strong-relevance operation fault association information.

Step 208, when the operation fault association information includes strong-association operation fault association information, matching the network element instruction corresponding to the strong-association operation fault association information with the stored repair template to generate a repair instruction.

For example, the key instruction of the network element A1 is "Set Message", matches the key instruction repair template, and generates a repair instruction "Set B1 Message available".

The key instruction repair template is shown in the following table four:

table four

As shown in table four above, the key instruction corresponding to the network element type a is Set { parameter } Message { parameter }, the repair instruction is Set { parameter } Message { parameter }, and the auto-repair field of the repair instruction is yes. The key instruction corresponding to the network element type A is add user { param }, the repair instruction is rmv user { param }, and the automatic repair field of the repair instruction is no. The key instruction corresponding to the network element type B is del config { param }, the repair instruction is add config { param }, and the automatic repair field of the repair instruction is yes.

Step 210, judging whether the automatic repair field of the repair instruction is yes, if yes, executing step 212; if not, the process ends.

For example, the generated repair instruction is "Set B1 Message available", and according to the "whether to repair automatically" field, if the field is "yes", the repair function is automatically started, and step 212 is executed; if the field is 'no', the subsequent operation is manually determined after manual judgment, and the flow is ended. If the network element is found to have no operation record through manual judgment and is irrelevant to the fault, the process is ended. If it is determined manually that the operation record of the related network element is not a failure cause, the search range can be enlarged, and steps 202-212 are repeated.

And 212, performing fault processing according to the generated repair instruction.

In the technical scheme provided by the embodiment of the invention, the manual operation of the maintainer is associated with the network fault and the fault complaint of the user terminal, and the method is different from a method based on fault alarm analysis and based on a method of analyzing the manual operation log of the maintainer, so that the fault and the complaint root can be found and positioned more conveniently and accurately.

According to the technical scheme provided by the embodiment of the invention, the intelligent analysis technology based on the instruction dictionary can judge the influence caused by the operation of maintenance personnel through multiple dimensions, and automatically realize root cause analysis of complaints and faults.

In the technical scheme provided by the embodiment of the invention, the range of the network element is related to the custom fault and complaint based on the flexibly configured service scene design, so that the query range of the network element can be more effectively controlled.

According to the technical scheme provided by the embodiment of the invention, the problem solution can be generated immediately after the problem root is located by carrying out unified management configuration on the key instructions and the repair instructions, so that the maintenance efficiency and the fault complaint processing efficiency are greatly improved.

According to the technical scheme provided by the embodiment of the invention, by analyzing the manual operation log, maintenance personnel are helped to quickly locate the root of the fault and complaint, an effective solution suggestion is provided, and the safe and stable operation of the network is effectively ensured.

The embodiment of the invention provides a fault processing device. Fig. 6 is a schematic structural diagram of a fault handling apparatus according to an embodiment of the present invention, as shown in fig. 6, where the apparatus includes: a query module 11, an acquisition module 12, a first generation module 13 and a fault handling module 14.

The query module 11 is configured to query a network element analysis list corresponding to the fault type according to the obtained fault type.

The obtaining module 12 is configured to obtain an operation log corresponding to the network element analysis list.

The first generation module 13 is configured to generate operation fault related information according to the operation log and the stored instruction dictionary.

The fault handling module 14 is configured to perform fault handling according to the generated repair instruction when the operation fault association information includes strong-association operation fault association information.

In the embodiment of the present invention, the operation log includes a network element and a network element type, the instruction dictionary includes an associated service corresponding to the network element type, the operation fault associated information includes a network element impact score, and the first generating module 13 is specifically configured to determine, according to the operation log and the stored instruction dictionary, the associated service corresponding to the network element type in the operation log; acquiring a plurality of network element matching degrees of network elements corresponding to the associated service; and generating a network element influence score according to the matching degree of the network elements.

In the embodiment of the invention, the operation fault associated information corresponding to the network element influence score with the largest network element influence score is determined to be the operation fault associated information with strong relevance.

In the embodiment of the invention, the device further comprises: a second generation module 15.

The second generating module 15 is configured to match a network element instruction corresponding to the strong-correlation operation fault association information with a stored repair template, and generate a repair instruction.

The first generating module 13 is specifically configured to add the plurality of network element matching degrees to generate a network element impact score.

In the embodiment of the invention, the device further comprises: a judgment module 16.

The judging module 16 is configured to judge whether the automatic repair field of the repair instruction is yes; if the automatic repair field of the repair instruction is judged to be yes, the fault processing module 14 is triggered to continuously execute the fault processing step according to the generated repair instruction.

The fault handling apparatus provided in this embodiment may be used to implement the fault handling method in fig. 2 or 3, and the detailed description may refer to the embodiment of the fault handling method, and the description will not be repeated here.

An embodiment of the present invention provides a storage medium, where the storage medium includes a stored program, and when the program runs, controls a device where the storage medium is located to execute steps of an embodiment of the foregoing fault handling method, and a specific description may be referred to the foregoing embodiment of the fault handling method.

The embodiment of the invention provides a network device, which comprises a memory and a processor, wherein the memory is used for storing information comprising program instructions, the processor is used for controlling the execution of the program instructions, and the program instructions realize the steps of the embodiment of the fault processing method when being loaded and executed by the processor.

Fig. 7 is a schematic diagram of a network device according to an embodiment of the present invention. As shown in fig. 7, the network device 20 of this embodiment includes: the processor 21, the memory 22, and the computer program 23 stored in the memory 22 and capable of running on the processor 21, the computer program 23 when executed by the processor 21 implements the fault handling method of the embodiment, and is not repeated here. Alternatively, the computer program, when executed by the processor 21, implements the functions of the embodiments applied to each model/unit in the fault handling device, and in order to avoid repetition, it is not described in detail herein.

Network device 20 includes, but is not limited to, a processor 21, a memory 22. It will be appreciated by those skilled in the art that fig. 7 is merely an example of network device 20 and is not intended to limit network device 20, and may include more or fewer components than shown, or may combine certain components, or different components, e.g., a network device may also include input-output devices, network access devices, buses, etc.

The processor 21 may be a central processing unit (Central Processing Unit, CPU), but may also be other general purpose processors, digital signal processors (Digital Signal Processor, DSP), application specific integrated circuits (Application Specific Integrated Circuit, ASIC), field-programmable gate arrays (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or the like. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.

The memory 22 may be an internal storage unit of the network device 20, such as a hard disk or a memory of the network device 20. The memory 22 may also be an external storage device of the network device 20, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card) or the like, which are provided on the network device 20. Further, the memory 22 may also include both internal storage units and external storage devices of the network device 20. The memory 22 is used to store computer programs and other programs and data required by the network device. The memory 22 may also be used to temporarily store data that has been output or is to be output.

It will be clear to those skilled in the art that, for convenience and brevity of description, specific working procedures of the above-described systems, apparatuses and units may refer to corresponding procedures in the foregoing method embodiments, which are not repeated herein.

In the several embodiments provided in the present invention, it should be understood that the disclosed systems, devices, and methods may be implemented in other manners. For example, the apparatus embodiments described above are merely illustrative, e.g., the division of the elements is merely a logical function division, and there may be additional divisions when actually implemented, e.g., multiple elements or components may be combined or integrated into another system, or some features may be omitted or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be an indirect coupling or communication connection via some interfaces, devices or units, which may be in electrical, mechanical or other form.

The units described as separate units may or may not be physically separate, and units shown as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in the embodiments of the present invention may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in hardware plus software functional units.

The integrated units implemented in the form of software functional units described above may be stored in a computer readable storage medium. The software functional unit is stored in a storage medium, and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or a Processor (Processor) to perform part of the steps of the methods according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a random access Memory (Random Access Memory, RAM), a magnetic disk, or an optical disk, or other various media capable of storing program codes.

The foregoing description of the preferred embodiments of the invention is not intended to be limiting, but rather to enable any modification, equivalent replacement, improvement or the like to be made within the spirit and principles of the invention.

Claims

1. A method of fault handling comprising:

acquiring an operation log corresponding to the network element analysis list;

2. The method of claim 1, wherein the operation log comprises network elements and network element types, the instruction dictionary comprises associated traffic corresponding to the network element types, the operation fault associated information comprises a network element impact score, and the generating operation fault associated information according to the operation log and the stored instruction dictionary comprises:

3. The method according to claim 2, wherein the operation failure association information corresponding to the network element influence score with the largest network element influence score is determined as the strong-association operation failure association information.

4. The method according to claim 1, wherein before performing fault handling according to the generated repair instruction, the method comprises:

5. The method of claim 2, wherein the generating a network element impact score from the plurality of network element matches comprises:

6. The method according to claim 4, wherein the matching the network element instruction corresponding to the strongly-correlated operation failure association information with the stored repair template, after generating the repair instruction, includes:

judging whether an automatic repair field of the repair instruction is yes;

7. The method of claim 2, wherein the network element matching degree comprises a type matching degree, an instruction matching degree, a traffic matching degree, an impact matching degree, or a time matching degree.

8. A fault handling apparatus, comprising:

9. A storage medium, comprising: the storage medium includes a stored program, wherein the program, when run, controls a device in which the storage medium is located to execute the fault handling method of any one of claims 1 to 7.

10. A network device comprising a memory for storing information including program instructions and a processor for controlling the execution of the program instructions, characterized in that the program instructions, when loaded and executed by the processor, implement the steps of the fault handling method of any of claims 1 to 7.