CN117880060A - Network operation and maintenance method, system, equipment and medium based on rule engine - Google Patents
Network operation and maintenance method, system, equipment and medium based on rule engine Download PDFInfo
- Publication number
- CN117880060A CN117880060A CN202410099827.6A CN202410099827A CN117880060A CN 117880060 A CN117880060 A CN 117880060A CN 202410099827 A CN202410099827 A CN 202410099827A CN 117880060 A CN117880060 A CN 117880060A
- Authority
- CN
- China
- Prior art keywords
- inspection
- processing
- alarm information
- event
- template
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000012423 maintenance Methods 0.000 title claims abstract description 77
- 238000000034 method Methods 0.000 title claims abstract description 74
- 238000007689 inspection Methods 0.000 claims abstract description 158
- 238000012545 processing Methods 0.000 claims abstract description 106
- 238000010276 construction Methods 0.000 claims abstract description 16
- 238000007781 pre-processing Methods 0.000 claims abstract description 12
- 230000008569 process Effects 0.000 claims description 19
- 238000000605 extraction Methods 0.000 claims description 12
- 230000010354 integration Effects 0.000 claims description 12
- 230000002159 abnormal effect Effects 0.000 claims description 9
- 238000004458 analytical method Methods 0.000 claims description 8
- 238000004590 computer program Methods 0.000 claims description 8
- 230000004913 activation Effects 0.000 claims description 5
- 238000013507 mapping Methods 0.000 claims description 4
- 238000004891 communication Methods 0.000 description 10
- 238000001994 activation Methods 0.000 description 6
- 238000005516 engineering process Methods 0.000 description 5
- 230000006870 function Effects 0.000 description 5
- 230000009286 beneficial effect Effects 0.000 description 4
- 230000008878 coupling Effects 0.000 description 3
- 238000010168 coupling process Methods 0.000 description 3
- 238000005859 coupling reaction Methods 0.000 description 3
- 238000001514 detection method Methods 0.000 description 3
- 238000010586 diagram Methods 0.000 description 3
- 230000003993 interaction Effects 0.000 description 2
- 238000003058 natural language processing Methods 0.000 description 2
- 230000000007 visual effect Effects 0.000 description 2
- 230000009471 action Effects 0.000 description 1
- 238000013473 artificial intelligence Methods 0.000 description 1
- 230000008901 benefit Effects 0.000 description 1
- 238000007405 data analysis Methods 0.000 description 1
- 230000001419 dependent effect Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000001914 filtration Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000005055 memory storage Effects 0.000 description 1
- 238000010295 mobile communication Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000004044 response Effects 0.000 description 1
- 239000007787 solid Substances 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 238000012800 visualization Methods 0.000 description 1
Classifications
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y04—INFORMATION OR COMMUNICATION TECHNOLOGIES HAVING AN IMPACT ON OTHER TECHNOLOGY AREAS
- Y04S—SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS
- Y04S10/00—Systems supporting electrical power generation, transmission or distribution
- Y04S10/50—Systems or methods supporting the power network operation or management, involving a certain degree of interaction with the load-side end user applications
Landscapes
- Testing And Monitoring For Control Systems (AREA)
Abstract
The application provides a network operation and maintenance method, a system, equipment and a medium based on a rule engine, wherein the network operation and maintenance method obtains target alarm information by acquiring original alarm information and preprocessing the original alarm information; performing engine element combination processing on the target alarm information to obtain a rule engine and a patrol result output by the rule engine; carrying out map backtracking processing on the target alarm information according to the inspection result to obtain a historical backtracking event; and carrying out strategy construction processing on the inspection result according to the historical backtracking event to obtain a fault operation and maintenance strategy. The network operation and maintenance method can effectively reduce the operation and maintenance cost and operation and maintenance difficulty of the network fault and reduce the treatment time of the network fault, thereby improving the operation and maintenance accuracy and operation and maintenance efficiency of the network fault. The application relates to the technical field of network operation and maintenance.
Description
Technical Field
The present disclosure relates to the field of network operation and maintenance technologies, and in particular, to a method, a system, a device, and a medium for network operation and maintenance based on a rule engine.
Background
In recent years, with the continuous deepening of cloud network integration and the wide application of 5G technology, internet of things technology and the like, the development of social economy is greatly promoted, and the cloud network is receiving attention.
At present, the traditional operation and maintenance method for network faults usually comprises the steps that when an alarm occurs, operation and maintenance personnel go to a network fault point to detect and analyze the network fault point to obtain a corresponding removal scheme, so that the network faults are removed.
In summary, the technical problems in the related art are to be improved.
Disclosure of Invention
The present invention aims to solve at least one of the technical problems existing in the related art to a certain extent.
The main purpose of the embodiment of the application is to provide a network operation and maintenance method, a system, equipment and a medium based on a rule engine, wherein the network operation and maintenance method can effectively reduce operation and maintenance cost and operation and maintenance difficulty of network faults and reduce the treatment time of the network faults, thereby improving operation and maintenance accuracy and operation and maintenance efficiency of the network faults.
To achieve the above object, an aspect of an embodiment of the present application provides a network operation and maintenance method based on a rule engine, where the network operation and maintenance method includes:
acquiring original alarm information, and preprocessing the original alarm information to obtain target alarm information;
performing engine element combination processing on the target alarm information to obtain a rule engine and a patrol result output by the rule engine, wherein the rule engine is used for recording a set of patrol rules, and the patrol rules comprise atomic elements, operator elements, text elements and numerical elements;
carrying out map backtracking processing on the target alarm information according to the inspection result to obtain a historical backtracking event;
and carrying out strategy construction processing on the inspection result according to the historical backtracking event to obtain a fault operation and maintenance strategy.
In some embodiments, performing engine element combination processing on the target alarm information to obtain a rule engine, including:
carrying out inspection analysis processing on the target alarm information to obtain an inspection scheme, and carrying out template activation processing on the atomic elements according to the inspection scheme to obtain a first operation template;
Performing element configuration processing on the first operation template according to the inspection scheme to obtain a second operation template;
and carrying out logic relation integration processing on the second operation template to obtain the rule engine.
In some embodiments, the performing element configuration processing on the first operation template according to the inspection scheme to obtain a second operation template includes:
carrying out parameter analysis processing on the inspection scheme to obtain fixed parameters and non-fixed parameters;
according to the fixed parameters, carrying out fixed configuration processing on the first operation template to obtain a fixed template;
according to the non-fixed parameters, performing non-fixed configuration processing on the first operation template to obtain a non-fixed template;
and carrying out template integration treatment on the non-fixed template according to the fixed template to obtain the second operation template.
In some embodiments, the performing a logical relationship integration process on the second running template to obtain the rule engine includes:
performing inspection rule acquisition processing on the second operation template to obtain an original inspection rule;
performing logic extraction processing on the original inspection rule to obtain a rule logic relationship;
And carrying out engine construction processing on the second operation template according to the rule logic relation to obtain the rule engine.
In some embodiments, the performing a graph backtracking process on the target alarm information according to the inspection result to obtain a historical backtracking event:
carrying out data division processing on the inspection result to obtain inspection success data and inspection failure data;
performing standard backtracking processing on the target alarm information according to the inspection success data to obtain a first backtracking event;
according to the inspection failure data, carrying out network backtracking processing on the target alarm information to obtain a second backtracking event;
and integrating the second retrospective event according to the first retrospective event to obtain the historical retrospective event.
In some embodiments, the performing standard backtracking processing on the target alarm information according to the inspection success data to obtain a first backtracking event includes:
acquiring preset standard operation data;
performing first historical feature extraction processing on the target alarm information to obtain first retrospective event features;
performing difference comparison processing on the standard operation data according to the inspection success data to obtain a difference comparison result;
And when the difference comparison result is abnormal, performing first event matching processing on the inspection success data according to the first trace-back event characteristics to obtain the first trace-back event.
In some embodiments, the performing network backtracking processing on the target alarm information according to the inspection failure data to obtain a second backtracking event includes:
performing second historical feature extraction processing on the target alarm information to obtain second retrospective event features;
mapping and inquiring the inspection failure data to obtain network operation data;
and carrying out second event matching processing on the network operation data according to the second trace-back event characteristics to obtain the second trace-back event.
To achieve the above object, another aspect of the embodiments of the present application proposes a rule engine-based network operation and maintenance system, including:
the preprocessing unit is used for acquiring original alarm information and preprocessing the original alarm information to obtain target alarm information;
the combination unit is used for carrying out engine element combination processing on the target alarm information to obtain a rule engine and a patrol result output by the rule engine, wherein the rule engine is used for recording a set of patrol rules, and the patrol rules comprise atomic elements, operator elements, text elements and numerical elements;
The backtracking unit is used for carrying out atlas backtracking processing on the target alarm information according to the inspection result to obtain a history backtracking event;
and the construction unit is used for carrying out strategy construction processing on the inspection result according to the historical backtracking event to obtain a fault operation and maintenance strategy.
To achieve the above object, another aspect of the embodiments of the present application proposes an electronic device including a memory storing a computer program and a processor implementing the method described above when executing the computer program.
To achieve the above object, another aspect of the embodiments of the present application proposes a computer-readable storage medium storing a computer program which, when executed by a processor, implements the method described above.
The embodiment of the application at least comprises the following beneficial effects:
the application provides a network operation and maintenance method, a system, equipment and a medium based on a rule engine, wherein the network operation and maintenance method obtains target alarm information by acquiring original alarm information and preprocessing the original alarm information; performing engine element combination processing on the target alarm information to obtain a rule engine and a patrol result output by the rule engine, wherein the rule engine is used for recording a set of patrol rules, and the patrol rules comprise atomic elements, operator elements, text elements and numerical elements; carrying out map backtracking processing on the target alarm information according to the inspection result to obtain a historical backtracking event; and carrying out strategy construction processing on the inspection result according to the historical backtracking event to obtain a fault operation and maintenance strategy. According to the network operation and maintenance method, more comprehensive network operation detection information can be obtained in the space dimension by utilizing the inspection result output by the rule engine, and the historical backtracking event in the network can be called through the map backtracking processing of the target alarm information, so that more comprehensive network operation information can be obtained in the time dimension, the positioning of network faults and the determination of the network fault types can be better realized, the operation and maintenance cost and the operation and maintenance difficulty of the network faults can be effectively reduced, the treatment time of the network faults is shortened, and the operation and maintenance accuracy and the operation and maintenance efficiency of the network faults are improved.
Drawings
FIG. 1 is a flow chart of a method for network operation and maintenance based on a rule engine according to an embodiment of the present application;
fig. 2 is a flowchart of step S102 provided in an embodiment of the present application;
FIG. 3 is a flowchart of step S1022 provided in an embodiment of the present application;
fig. 4 is a flowchart of step S1023 provided in an embodiment of the present application;
FIG. 5 is a schematic diagram of a visualization associated with rule engine construction provided in an embodiment of the present application;
fig. 6 is a flowchart of step S103 provided in an embodiment of the present application;
fig. 7 is a flowchart of step S1032 provided in an embodiment of the present application;
fig. 8 is a flowchart of step S1033 provided in an embodiment of the application;
FIG. 9 is a schematic diagram of a network operation and maintenance system based on a rule engine according to an embodiment of the present application;
fig. 10 is a schematic hardware structure of an electronic device according to an embodiment of the present application.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more apparent, the present application will be further described in detail with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the present application. When the following description refers to the accompanying drawings, the same numbers in different drawings refer to the same or similar elements, unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the embodiments of the application, but are merely examples of apparatuses/devices and methods consistent with aspects of the embodiments of the application as detailed in the accompanying claims.
It will be understood that the terms "first," "second," and the like, as used herein, may be used to describe various concepts, but are not limited by these terms unless otherwise specified. These terms are only used to distinguish one concept from another. For example, the first information may also be referred to as second information, and similarly, the second information may also be referred to as first information, without departing from the scope of embodiments of the present application. The words "if", as used herein, may be interpreted as "at … …" or "at … …" or "in response to a determination", depending on the context.
The terms "at least one," "a plurality," "each," "any" and the like as used herein, wherein at least one includes one, two or more, and a plurality includes two or more, each referring to each of a corresponding plurality, and any one referring to any one of the plurality.
Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein is for the purpose of describing embodiments of the present application only and is not intended to be limiting of the present application.
At present, the operation and maintenance method of the traditional network fault usually detects and analyzes the network fault point by an operation and maintenance personnel when an alarm occurs, so that the corresponding removal scheme is obtained, the network fault is removed, the requirement on the operation and maintenance personnel is high by the mode, the operation and maintenance cost is high, the operation and maintenance operations such as network alarm, inspection, index acquisition, fault view check and the like are required, and the operation and maintenance accuracy and the operation and maintenance efficiency of the network fault are poor.
In view of this, the embodiment of the application provides a network operation and maintenance method, system, device and medium based on a rule engine, where the network operation and maintenance method can obtain more comprehensive network operation and detection information in a space dimension by using a routing inspection result output by the rule engine, and call a historical backtracking event in a network by carrying out a map backtracking process on target alarm information, which can obtain more comprehensive network operation information in a time dimension, better realize positioning of network faults and determination of network fault types, effectively reduce operation and maintenance cost and operation and maintenance difficulty of network faults, and reduce treatment time of network faults, thereby improving operation and maintenance accuracy and operation and maintenance efficiency of network faults.
The network operation and maintenance method based on the rule engine can be applied to network application scenes. In a network application scene, a network service provider can operate and maintain a network fault node through the network operation and maintenance method based on the rule engine, so that a fault operation and maintenance strategy corresponding to the network fault node is obtained, the operation and maintenance cost and the operation and maintenance difficulty of the network fault are reduced, the treatment time of the network fault is shortened, and the operation and maintenance accuracy and the operation and maintenance efficiency of the network fault are effectively improved.
The network operation and maintenance method based on the rule engine can be applied to a terminal, a server and software running in the terminal or the server. In some embodiments, the terminal may be, but is not limited to, a smart phone, a tablet computer, a notebook computer, a desktop computer, a smart speaker, a smart watch, a vehicle-mounted terminal, and the like; the server side can be configured as an independent physical server, a server cluster or a distributed system formed by a plurality of physical servers, and can be configured as a cloud server for providing cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDNs, basic cloud computing services such as big data and artificial intelligence platforms, and the server can also be a node server in a blockchain network; the software may be an application or the like that implements the method, but is not limited to the above form.
The subject application is operational with numerous general purpose or special purpose computer system environments or configurations. For example: personal computers, server computers, hand-held or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices, and the like. The application may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The application may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including memory storage devices.
Fig. 1 is an optional flowchart of a rule engine-based network operation and maintenance method provided in an embodiment of the present application, where the method in fig. 1 may include, but is not limited to, steps S101 to S104.
Step S101, acquiring original alarm information, and preprocessing the original alarm information to obtain target alarm information;
in the embodiment of the application, the original alarm information can be obtained by the alarm information sent by the network fault node, and after the original alarm information is obtained, the original alarm information can be generated in an alarm mode according to a preset alarm format to obtain the alarm information in a standard format; and then, sequentially carrying out data deduplication, data analysis and information filtering on all the alarm information in the standard format, so as to complete preprocessing of the original alarm information, and further obtain target alarm information.
Step S102, carrying out engine element combination processing on the target alarm information to obtain a rule engine and a patrol result output by the rule engine, wherein the rule engine is used for recording a set of patrol rules, and the patrol rules comprise atomic elements, operator elements, text elements and numerical elements;
referring to fig. 2, in the step S102, engine element combination processing is performed on the target alarm information to obtain a rule engine, including:
s1021, carrying out inspection analysis processing on the target alarm information to obtain an inspection scheme, and carrying out template activation processing on the atomic elements according to the inspection scheme to obtain a first operation template;
It can be understood that the target alarm information may include an alarm fault location, an alarm fault time, an alarm fault registration, an alarm fault entity type, and the like, so in the embodiment of the present application, the target alarm information may be first parsed to extract fault information required in the routing inspection process.
The routing inspection analysis processing may be, for example, extracting an alarm fault location and an alarm fault entity type in the target alarm information, then preliminarily determining a network node needing routing inspection through the alarm fault location, and finally determining an inspection target and a corresponding inspection scheme by combining the alarm fault entity type.
It should be noted that the inspection scheme may be obtained from a database, or may be obtained according to a path such as an operation and maintenance platform, in this embodiment, the inspection scheme is obtained from the database, and the database stores the inspection scheme of the type of the alarm fault entity in advance, specifically, the inspection target is determined according to the network node and the type of the alarm fault entity that can be inspected as required, and then, according to the inspection target, data query is performed in the database, so as to obtain the corresponding inspection scheme. It can be further understood that the atomic element is used to represent one or a series of inspection operations that cannot be interrupted, and the inspection operations may be implemented by an independent, reusable minimum functional module with explicit input and output, specifically may be implemented according to an atomic capability platform, which is not described herein in detail.
In the embodiment of the present application, after the inspection scheme corresponding to the inspection target is obtained, one or more atomic elements corresponding to the inspection scheme may be determined according to the inspection scheme, and an original rule template related to the inspection scheme may be determined according to the inspection scheme, where the original rule template may be stored in a database in advance. It should be noted that, after the original rule template is obtained, an atomic element may be added to the original rule template to implement functional activation of the atomic element, so as to obtain the first operation template.
Specifically, the mode of adding the atomic elements to the original rule templates can be a manual adding mode or a machine adding mode, and for the manual adding mode, the method can be a visual mode, a visual diagram of the atomic elements and the original rule templates is provided for operation staff through an atomic capability platform, and then the atomic capability platform realizes that the atomic elements are added to the original rule templates according to an operation instruction of the operation staff on the atomic elements. For the machine adding mode, a data validity condition may be set for each original element in the original rule template in advance, and the original element in the original rule template is filled and updated according to the atomic element by means of automatic filling and the like, so that template activation processing of the atomic element is realized. It should be noted that, for this stage of the template activation process, the original element in the original rule template may refer to an atomic element bit reserved in advance for filling in an atomic element in the original rule template.
Step S1022, performing element configuration processing on the first operation template according to the inspection scheme to obtain a second operation template;
referring to fig. 3, in step S1022, according to the inspection scheme, element configuration processing is performed on the first operation template to obtain a second operation template, including:
step S10221, carrying out parameter analysis processing on the inspection scheme to obtain fixed parameters and non-fixed parameters;
step S10222, carrying out fixed configuration processing on the first operation template according to the fixed parameters to obtain a fixed template;
step S10223, carrying out non-fixed configuration processing on the first operation template according to the non-fixed parameters to obtain a non-fixed template;
step S10224, performing template integration processing on the non-fixed template according to the fixed template to obtain the second operation template.
It can be understood that the parameter analysis process is used for analyzing and extracting the characteristic parameters of the inspection scheme, and the characteristic parameters can be specifically classified into fixed parameters and non-fixed parameters, wherein the fixed parameters can be characteristic parameters which are not changed in general such as an inspection period, an inspection index, an inspection process and the like, and the non-fixed parameters can be characteristic parameters which are changed at any time such as an inspection personnel, an inspection time and the like. Specifically, in the embodiment of the present application, the parameter type, the parameter name and the length of the parameter value of the fixed parameter are fixed, and each fixed parameter may correspond to one non-fixed parameter, where the parameter type, the parameter name and the length of the parameter value of the non-fixed parameter are not fixed, and may be information content carried by the fixed parameter.
It is further understood that for a certain extracted fixed parameter, the fixed parameter may be in a text format or a numerical format, i.e. the fixed parameter corresponds to a text element or a numerical element, and the remaining fixed parameters are the same as the non-fixed parameters.
In this embodiment of the present application, the fixed configuration processing may be adding all the fixed parameters to the first running template, specifically, by means of manual addition or machine addition, the fixed filling update is performed on the original elements in the original rule template according to the fixed parameters, so as to complete the fixed configuration processing, and obtain the first running template (i.e. the fixed template) after the fixed filling update. It should be noted that, for a certain fixed parameter, since the fixed parameter in the embodiment of the present application corresponds to a text element or a numerical element, in the fixed configuration process, the original element in the original rule template may refer to a text element bit reserved in advance for filling the text element in the original rule template, or a numerical element bit reserved in advance for filling the numerical element in the original rule template, where these text element bits and/or numerical element bits are not affected by the filling action of an atomic element in the previous template activation process, and the remaining fixed parameters are the same, and can be obtained by simple analogy.
It should be noted that, the non-fixed configuration processing may be adding all non-fixed parameters to the fixed template, specifically, firstly, obtaining a parameter type of the non-fixed parameters, then determining a special parameter matched with the parameter type according to the parameter type and the inspection target, and then performing non-fixed filling update on the original elements in the original rule template according to the corresponding special parameter, so as to complete the non-fixed configuration processing, and obtain a first operation template (i.e. a non-fixed template) after the non-fixed filling update. It should be noted that, for a certain non-fixed parameter, the corresponding special parameter may also correspond to a text element or a numerical element, the original element in the non-fixed configuration processing process is similar to the content of the original element in the fixed configuration processing process, and may be simply analogically obtained, and the special parameter may be a value of a keyword (value) corresponding to the non-fixed parameter, where the value may be obtained by analyzing the non-fixed parameter according to a formulated data interaction specification, and the application will not be repeated herein.
It should be noted that, in the embodiment of the present application, both the fixed configuration process and the non-fixed configuration process perform the filling update on the original elements of the text format type and/or the numerical format type, and the filling update may have various situations, and the specific filling update situation may be set in advance according to the actual situation. In the embodiment of the application, taking text element bit updating as an example, text element bits corresponding to fixed configuration processing and text element bits corresponding to non-fixed configuration processing may or may not have intersections.
Specifically, when there is an intersection, the text element bits corresponding to the fixed parameters may be the same as the text element bits corresponding to the non-fixed parameters, and at this time, for the specific non-fixed parameters, the text element bits filled in are the text element bits obtained after the fixed filling update; and when no intersection exists, the text element bit corresponding to the fixed parameter and the text element bit corresponding to the non-fixed parameter are not mutually influenced. Whether the intersection exists in the text element bit can be changed by setting an original rule template, and when the intersection does not exist, the fixed template and the non-fixed template can be directly combined, so that a second operation template is obtained; when the intersection exists, the text element position can be screened through a preset selection rule, so that a second operation template is obtained, and the numerical elements are the same and can be obtained by simple analogy.
Step S1023, carrying out logic relation integration processing on the second operation template to obtain the rule engine.
Referring to fig. 4, the step S1023 of performing logic relationship integration processing on the second operation template to obtain the rule engine includes:
step S10231, carrying out inspection rule acquisition processing on the second operation template to obtain an original inspection rule;
Step S10232, carrying out logic extraction processing on the original inspection rule to obtain a rule logic relationship;
step S10233, performing engine construction processing on the second operation template according to the rule logic relationship to obtain the rule engine.
Referring to fig. 5, in the embodiment of the present application, the inspection rules in the second operation template may be extracted to obtain original inspection rules, and then, according to a preset logic extraction algorithm, the logic relationships between the original inspection rules are extracted to obtain rule logic relationships, so as to ensure accuracy of the logic relationships between the rules in the second operation template; then, expressing the rule logic relationship in an operator form to obtain an operator element; and finally, according to the operator element, combining the atomic element, the numerical element and the text element in the second operation template to construct the rule engine.
It can be understood that the preset logic extraction algorithm can be implemented by Natural Language Processing (NLP) technology, after the rule engine is acquired, fault inspection can be performed on the inspection target according to the inspection scheme, the operation parameters acquired in the fault inspection are input into the rule engine for parameter input and parameter output detection, so that parameter output by the rule engine is obtained, and the parameter output is used as an inspection result.
Step S103, carrying out map backtracking processing on the target alarm information according to the inspection result to obtain a historical backtracking event;
referring to fig. 6, in step S103, according to the inspection result, a map backtracking process is performed on the target alarm information, so as to obtain a history backtracking event:
step S1031, carrying out data division processing on the inspection result to obtain inspection success data and inspection failure data;
it can be understood that, for a certain inspection target, there are usually a plurality of inspection items in the fault inspection process, and each inspection item corresponds to one inspection data, so in the embodiment of the application, firstly, according to whether the inspection item is successful, data division can be performed on all inspection data in the inspection result, and the inspection item that is successful in inspection and the inspection data corresponding to the inspection item are divided into inspection success data; and dividing the inspection items failing in inspection and the inspection data corresponding to the inspection items failing in inspection into inspection failure data.
Step S1032, carrying out standard backtracking processing on the target alarm information according to the inspection success data to obtain a first backtracking event;
referring to fig. 7, in step S1032, standard backtracking processing is performed on the target alarm information according to the inspection success data, so as to obtain a first backtracking event, including:
Step S10321, obtaining preset standard operation data;
step S10322, performing a first history feature extraction process on the target alarm information to obtain a first retrospective event feature;
step S10323, performing difference comparison processing on the standard operation data according to the inspection success data to obtain a difference comparison result;
and step 10324, when the difference comparison result is abnormal, performing first event matching processing on the inspection success data according to the first trace-back event characteristics to obtain the first trace-back event.
In the embodiment of the application, for a certain inspection success data, firstly, standard operation data of a corresponding inspection item can be obtained according to the inspection item in the inspection success data, wherein the standard operation data is data of the inspection item in normal operation; the first historical feature extraction process may be to obtain historical alert information related to the target alert information, determine a historical trace-back event corresponding to the historical alert information, and then extract features of the historical trace-back event as first trace-back event features. Specifically, the historical trace-back event in the embodiment of the present application may be obtained through a history record of a cloud network operation and maintenance event, the history record of the operation and maintenance event may be stored in a graph database, and the historical trace-back event in the graph database is obtained through a graph engine.
It may be appreciated that after the first trace-back event feature is obtained, a comparison may be made between the difference between the inspection success data and the standard operation data, and specifically, whether the inspection success data exceeds the data range of the standard operation data. When the difference comparison result of the inspection success data and the standard operation data is normal, the inspection items in the inspection success data can be divided into normal items, and no abnormal related operation is performed at the moment.
When the difference comparison result of the inspection success data and the standard operation data is abnormal, the inspection item of the inspection success data can be divided into abnormal items, and then the node position of the abnormal item in the map engine is obtained; then, according to the node position, determining a first map structure associated with the node position, and reading a first historical event list through the first map structure, wherein the first historical event list comprises a plurality of first historical events; and then, carrying out feature matching on all the first historical events in the first historical event list through the first retrospective event features, and taking the first historical event with successfully matched features as a historical retrospective event (namely the first retrospective event) corresponding to the patrol success data in the abnormal event.
Step S1033, performing network backtracking processing on the target alarm information according to the inspection failure data, so as to obtain a second backtracking event;
referring to fig. 8, in step S1033, according to the inspection failure data, network backtracking is performed on the target alarm information to obtain a second backtracking event, including:
step S10331, performing a second history feature extraction process on the target alarm information to obtain a second retrospective event feature;
step S10332, mapping and inquiring the inspection failure data to obtain network operation data;
and step 10333, performing second event matching processing on the network operation data according to the second trace-back event characteristics to obtain the second trace-back event.
In the embodiment of the present application, the step S10331 is similar to the description of the step S10322, and can be obtained by a simple analogy, which is not described herein in detail. The mapping query processing of the inspection failure data may first read an inspection failure reason from the inspection failure data, where the inspection failure reason may be obtained according to an abnormal value returned by the inspection, and then query operation data related to the inspection failure reason according to the inspection failure reason, and use the queried operation data as network operation data.
It may be understood that the second event matching process may be to obtain a second graph structure corresponding to the network operation data through the graph engine, then read a second historical event list according to the second graph structure, and perform feature matching on all second historical events in the second historical event list through the second trace-back event features, so as to obtain a second trace-back event.
And step S1034, carrying out integration processing on the second retrospective event according to the first retrospective event to obtain the historical retrospective event.
In this embodiment of the present application, the number of the first trace-back events and the second trace-back events is often multiple, and the integration processing may be operations of reserving, merging, and the like. For example, when a certain first trace-back event has a same second trace-back event, the first trace-back event may be integrated according to a preset reservation rule, that is, the first trace-back event is reserved, the second trace-back event is deleted, or the second trace-back event is reserved, the first trace-back event is deleted, and then the reserved trace-back event is used as a historical trace-back event. For another example, when a combinable second trace-back event exists in a certain first trace-back event, the data information of the first trace-back event and the second trace-back event can be combined, and the combined trace-back event is used as a historical trace-back event.
And step S104, carrying out strategy construction processing on the inspection result according to the historical backtracking event to obtain a fault operation and maintenance strategy.
In the embodiment of the application, the historical retrospective event can be used for representing an event occurring during network operation before the inspection result, the policy construction process can be based on the inspection result, and a dynamic network operation model is constructed by combining the historical retrospective event and is used for recording the network event operation condition before the simulated inspection; then, extracting the characteristic of an operation curve of the dynamic network operation model to obtain an operation characteristic curve, wherein the operation characteristic curve is used for representing the operation condition of the network changing along with time; then, a plurality of curve segments which do not meet the standard operation curve can be extracted from the operation characteristic curve, and corresponding fault operation and maintenance strategies are generated based on the operation parameter characteristics of the curve segments. It should be noted that the standard operation curve may be obtained according to preset standard operation data, and the description is not redundant herein.
Referring to fig. 9, an embodiment of the present application further provides a network operation and maintenance system based on a rule engine, which may implement the above network operation and maintenance method based on the rule engine, where the network operation and maintenance system includes:
A preprocessing unit 310, configured to obtain original alarm information, and perform preprocessing on the original alarm information to obtain target alarm information;
the combination unit 320 is configured to perform engine element combination processing on the target alarm information to obtain a rule engine, and a routing inspection result output by the rule engine, where the rule engine is configured to record a set of routing inspection rules, and the routing inspection rules include an atomic element, an operator element, a text element, and a numerical element;
the trace-back unit 330 is configured to perform a graph trace-back process on the target alarm information according to the inspection result, so as to obtain a historical trace-back event;
and the construction unit 340 is configured to perform policy construction processing on the inspection result according to the historical backtracking event, so as to obtain a fault operation and maintenance policy.
It can be understood that the content in the above method embodiment is applicable to the system embodiment, and the functions specifically implemented by the system embodiment are the same as those of the above method embodiment, and the achieved beneficial effects are the same as those of the above method embodiment.
The embodiment of the application also provides electronic equipment, which comprises a memory and a processor, wherein the memory stores a computer program, and the processor realizes the method when executing the computer program. The electronic equipment can be any intelligent terminal including a tablet personal computer, a vehicle-mounted computer and the like.
It can be understood that the content in the above method embodiment is applicable to the embodiment of the present apparatus, and the specific functions implemented by the embodiment of the present apparatus are the same as those of the embodiment of the above method, and the achieved beneficial effects are the same as those of the embodiment of the above method.
Referring to fig. 10, fig. 10 illustrates a hardware structure of an electronic device according to another embodiment, the electronic device includes:
the processor 901 may be implemented by a general-purpose CPU (Central Processing Unit ), a microprocessor, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), or one or more integrated circuits, etc. for executing related programs to implement the technical solutions provided by the embodiments of the present application;
the Memory 902 may be implemented in the form of a Read Only Memory (ROM), a static storage device, a dynamic storage device, or a random access Memory (Random Access Memory, RAM). The memory 902 may store an operating system and other application programs, and when the technical solutions provided in the embodiments of the present disclosure are implemented by software or firmware, relevant program codes are stored in the memory 902, and the processor 901 invokes a method for executing the embodiments of the present disclosure;
An input/output interface 903 for inputting and outputting information;
the communication interface 904 is configured to implement communication interaction between the device and other devices, and may implement communication in a wired manner (e.g. USB, network cable, etc.), or may implement communication in a wireless manner (e.g. mobile network, WIFI, bluetooth, etc.);
a bus 905 that transfers information between the various components of the device (e.g., the processor 901, the memory 902, the input/output interface 903, and the communication interface 904);
wherein the processor 901, the memory 902, the input/output interface 903 and the communication interface 904 are communicatively coupled to each other within the device via a bus 905.
The embodiments of the present application also provide a computer readable storage medium storing a computer program which, when executed by a processor, implements the above-described method.
It can be understood that the content of the above method embodiment is applicable to the present storage medium embodiment, and the functions of the present storage medium embodiment are the same as those of the above method embodiment, and the achieved beneficial effects are the same as those of the above method embodiment.
The memory, as a non-transitory computer readable storage medium, may be used to store non-transitory software programs as well as non-transitory computer executable programs. In addition, the memory may include high-speed random access memory, and may also include non-transitory memory, such as at least one magnetic disk storage device, flash memory device, or other non-transitory solid state storage device. In some embodiments, the memory optionally includes memory remotely located relative to the processor, the remote memory being connectable to the processor through a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.
The embodiments described in the embodiments of the present application are for more clearly describing the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided by the embodiments of the present application, and as those skilled in the art can know that, with the evolution of technology and the appearance of new application scenarios, the technical solutions provided by the embodiments of the present application are equally applicable to similar technical problems.
It will be appreciated by those skilled in the art that the technical solutions shown in the figures do not constitute limitations of the embodiments of the present application, and may include more or fewer steps than shown, or may combine certain steps, or different steps.
The above described apparatus embodiments are merely illustrative, wherein the units illustrated as separate components may or may not be physically separate, i.e. may be located in one place, or may be distributed over a plurality of network elements. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
Those of ordinary skill in the art will appreciate that all or some of the steps of the methods, systems, functional modules/units in the devices disclosed above may be implemented as software, firmware, hardware, and suitable combinations thereof.
The terms "first," "second," "third," "fourth," and the like in the description of the present application and in the above-described figures, if any, are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that embodiments of the present application described herein may be implemented in sequences other than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
It should be understood that in this application, "at least one" means one or more, and "a plurality" means two or more. "and/or" for describing the association relationship of the association object, the representation may have three relationships, for example, "a and/or B" may represent: only a, only B and both a and B are present, wherein a, B may be singular or plural. The character "/" generally indicates that the context-dependent object is an "or" relationship. "at least one of" or the like means any combination of these items, including any combination of single item(s) or plural items(s). For example, at least one (one) of a, b or c may represent: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", wherein a, b, c may be single or plural.
In the several embodiments provided in this application, it should be understood that the disclosed apparatus and method may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, the above-described division of units is merely a logical function division, and there may be another division manner in actual implementation, for example, a plurality of units or components may be combined or may be integrated into another system, or some features may be omitted, or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be an indirect coupling or communication connection via some interfaces, devices or units, which may be in electrical, mechanical or other form.
The units described above as separate components may or may not be physically separate, and components shown as units may or may not be physical units, may be located in one place, or may be distributed over a plurality of network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
In addition, each functional unit in each embodiment of the present application may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in software functional units.
The integrated units, if implemented in the form of software functional units and sold or used as stand-alone products, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application may be embodied essentially or in part or all of the technical solution or in part in the form of a software product stored in a storage medium, including multiple instructions to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods of the various embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a random access Memory (Random Access Memory, RAM), a magnetic disk, or an optical disk, or other various media capable of storing a program.
Preferred embodiments of the present application are described above with reference to the accompanying drawings, and thus do not limit the scope of the claims of the embodiments of the present application. Any modifications, equivalent substitutions and improvements made by those skilled in the art without departing from the scope and spirit of the embodiments of the present application shall fall within the scope of the claims of the embodiments of the present application.
Claims (10)
1. A method for network operation and maintenance based on a rule engine, comprising:
acquiring original alarm information, and preprocessing the original alarm information to obtain target alarm information;
performing engine element combination processing on the target alarm information to obtain a rule engine and a patrol result output by the rule engine, wherein the rule engine is used for recording a set of patrol rules, and the patrol rules comprise atomic elements, operator elements, text elements and numerical elements;
carrying out map backtracking processing on the target alarm information according to the inspection result to obtain a historical backtracking event;
and carrying out strategy construction processing on the inspection result according to the historical backtracking event to obtain a fault operation and maintenance strategy.
2. The network operation and maintenance method based on a rule engine according to claim 1, wherein the performing engine element combination processing on the target alarm information to obtain the rule engine includes:
carrying out inspection analysis processing on the target alarm information to obtain an inspection scheme, and carrying out template activation processing on the atomic elements according to the inspection scheme to obtain a first operation template;
Performing element configuration processing on the first operation template according to the inspection scheme to obtain a second operation template;
and carrying out logic relation integration processing on the second operation template to obtain the rule engine.
3. The method for network operation and maintenance based on a rule engine according to claim 2, wherein the performing element configuration processing on the first operation template according to the inspection scheme to obtain a second operation template includes:
carrying out parameter analysis processing on the inspection scheme to obtain fixed parameters and non-fixed parameters;
according to the fixed parameters, carrying out fixed configuration processing on the first operation template to obtain a fixed template;
according to the non-fixed parameters, performing non-fixed configuration processing on the first operation template to obtain a non-fixed template;
and carrying out template integration treatment on the non-fixed template according to the fixed template to obtain the second operation template.
4. The network operation and maintenance method based on a rule engine according to claim 2, wherein the performing logic relationship integration processing on the second operation template to obtain the rule engine includes:
performing inspection rule acquisition processing on the second operation template to obtain an original inspection rule;
Performing logic extraction processing on the original inspection rule to obtain a rule logic relationship;
and carrying out engine construction processing on the second operation template according to the rule logic relation to obtain the rule engine.
5. The network operation and maintenance method based on a rule engine according to any one of claims 1 to 4, wherein the performing, according to the inspection result, a graph trace back process on the target alarm information obtains a history trace back event:
carrying out data division processing on the inspection result to obtain inspection success data and inspection failure data;
performing standard backtracking processing on the target alarm information according to the inspection success data to obtain a first backtracking event;
according to the inspection failure data, carrying out network backtracking processing on the target alarm information to obtain a second backtracking event;
and integrating the second retrospective event according to the first retrospective event to obtain the historical retrospective event.
6. The method for network operation and maintenance based on a rule engine according to claim 5, wherein the performing standard backtracking processing on the target alarm information according to the inspection success data to obtain a first backtracking event includes:
Acquiring preset standard operation data;
performing first historical feature extraction processing on the target alarm information to obtain first retrospective event features;
performing difference comparison processing on the standard operation data according to the inspection success data to obtain a difference comparison result;
and when the difference comparison result is abnormal, performing first event matching processing on the inspection success data according to the first trace-back event characteristics to obtain the first trace-back event.
7. The method for network operation and maintenance based on a rule engine according to claim 5, wherein the performing network backtracking processing on the target alarm information according to the inspection failure data to obtain a second backtracking event includes:
performing second historical feature extraction processing on the target alarm information to obtain second retrospective event features;
mapping and inquiring the inspection failure data to obtain network operation data;
and carrying out second event matching processing on the network operation data according to the second trace-back event characteristics to obtain the second trace-back event.
8. A rules engine based network operation and maintenance system, comprising:
The preprocessing unit is used for acquiring original alarm information and preprocessing the original alarm information to obtain target alarm information;
the combination unit is used for carrying out engine element combination processing on the target alarm information to obtain a rule engine and a patrol result output by the rule engine, wherein the rule engine is used for recording a set of patrol rules, and the patrol rules comprise atomic elements, operator elements, text elements and numerical elements;
the backtracking unit is used for carrying out atlas backtracking processing on the target alarm information according to the inspection result to obtain a history backtracking event;
and the construction unit is used for carrying out strategy construction processing on the inspection result according to the historical backtracking event to obtain a fault operation and maintenance strategy.
9. An electronic device, comprising:
at least one processor;
at least one memory for storing at least one program;
the at least one program, when executed by the at least one processor, causes the at least one processor to implement the method of any of claims 1-7.
10. A computer readable storage medium storing a computer program, characterized in that the computer program, when executed by a processor, implements the method of any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410099827.6A CN117880060A (en) | 2024-01-24 | 2024-01-24 | Network operation and maintenance method, system, equipment and medium based on rule engine |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410099827.6A CN117880060A (en) | 2024-01-24 | 2024-01-24 | Network operation and maintenance method, system, equipment and medium based on rule engine |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN117880060A true CN117880060A (en) | 2024-04-12 |
Family
ID=90580843
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202410099827.6A Pending CN117880060A (en) | 2024-01-24 | 2024-01-24 | Network operation and maintenance method, system, equipment and medium based on rule engine |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN117880060A (en) |
-
2024
- 2024-01-24 CN CN202410099827.6A patent/CN117880060A/en active Pending
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN114710368B (en) | Security event detection method and device and computer readable storage medium | |
| CN104731953A (en) | R-based building method of data preprocessing system | |
| EP3674912A1 (en) | Data stitching and harmonization for machine learning | |
| CN114968959A (en) | Log processing method, log processing device and storage medium | |
| CN114862372A (en) | Intelligent education data tamper-proof processing method and system based on block chain | |
| CN114780798A (en) | Knowledge map system based on BIM | |
| CN112307318A (en) | Content publishing method, system and device | |
| CN113434123A (en) | Service processing method and device and electronic equipment | |
| CN117880060A (en) | Network operation and maintenance method, system, equipment and medium based on rule engine | |
| CN115767601A (en) | 5GC network element automatic nanotube method and device based on multidimensional data | |
| CN115562993A (en) | Test script recording method and device, electronic equipment and storage medium | |
| CN115408236A (en) | Log data auditing system, method, equipment and medium | |
| CN115269519A (en) | Log detection method and device and electronic equipment | |
| CN113434607A (en) | Behavior analysis method and device based on graph data, electronic equipment and storage medium | |
| CN109558418B (en) | Method for automatically identifying information | |
| CN106469086B (en) | Event processing method and device | |
| CN114556238A (en) | Method and system for generating digital representation of asset information in cloud computing environment | |
| CN109902067A (en) | Document handling method, device, storage medium and computer equipment | |
| CN117608490A (en) | Investment system-based data management method and device, electronic equipment and medium | |
| CN113901332B (en) | Tenure history information mining method and device, storage medium and electronic equipment | |
| CN117118804A (en) | Alarm data processing method, device and computer readable storage medium | |
| CN116166816A (en) | Ontology model building method and device, electronic equipment and storage medium | |
| US20220058014A1 (en) | Software recognition using tree-structured pattern matching rules for software asset management | |
| CN117933995A (en) | Transaction data processing method and device, electronic equipment and storage medium | |
| CN117827784A (en) | Noise log filtering method and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |